6bdt Privacy Policy — How We Handle Your Personal Data

1. Introduction

6bdt ("6bdt", "we", "us", "our") operates the online casino and sports betting platform at https://6bdt.io, serving registered players across Bangladesh. We are committed to protecting the privacy and personal data of every player who registers on, visits, or interacts with the 6bdt platform.

This Privacy Policy ("Policy") explains in clear, formal terms what personal data 6bdt collects, on what legal basis, for what purposes, how long it is retained, and what rights you hold in relation to your data. This Policy applies to all users of the 6bdt website, mobile-optimised platform, and any associated support or communication channels, including email correspondence with [email protected].

By registering a 6bdt account or by continuing to use the platform after this Policy has been published or updated, you acknowledge that you have read and understood the data practices described herein. If you do not accept this Policy, you must cease using the platform and may request account closure by contacting our support team.

This Policy should be read alongside the 6bdt Terms & Conditions, which govern the overall contractual relationship between you and 6bdt, and the Responsible Gaming Policy, which describes player protection tools available on the platform.

2. Data Controller

For the purposes of applicable data protection law, 6bdt is the data controller in respect of personal data collected through the https://6bdt.io platform. As data controller, 6bdt determines the purposes and means of processing your personal data and is responsible for ensuring that processing activities comply with applicable legal obligations.

All data protection queries, subject access requests, and complaints should be directed to the 6bdt data team via email at [email protected], clearly marked "Data Protection Request" in the subject line. We will acknowledge your request within five (5) business days and respond in full within thirty (30) calendar days.

3. Data We Collect

6bdt collects personal data in the following categories. We collect only what is necessary for the stated purposes and do not engage in speculative data collection.

3.1 Identity Data

Full legal name, date of birth, nationality, and government-issued identification number (National Identity Card number, passport number, or driving licence number). This data is mandatory for account registration and age verification. Players must be 21 years of age or older to use the 6bdt platform.

3.2 Contact Data

Email address and Bangladesh mobile telephone number. The mobile number provided must be the number registered to your bKash, Nagad, or Rocket account where you intend to use those payment methods. Contact data is used for account communications, transaction notifications, and customer support.

3.3 Financial Data

Mobile financial service account numbers (bKash, Nagad, Rocket, Upay), bank account details where bank transfer is used, and a record of all deposit and withdrawal transactions associated with your 6bdt account, including amounts in BDT, timestamps, and transaction reference numbers.

3.4 Technical and Device Data

IP address, device type, device identifier, operating system version, browser type and version, screen resolution, and time zone setting. This data is collected automatically when you access the platform and is used for security monitoring, fraud detection, and ensuring platform compatibility.

3.5 Usage and Behavioural Data

Pages accessed, games played, bet amounts and outcomes, session start and end times, feature interactions, and navigation path through the platform. This data is used to monitor responsible gaming indicators, assess bonus eligibility, improve platform performance, and personalise the user experience within the bounds of this Policy.

3.6 KYC Verification Documents

Scanned or photographed copies of government-issued photo identification, proof of residential address (utility bill, bank statement, or government correspondence dated within three months), and payment method verification evidence. These documents are required before any withdrawal can be processed and are handled under strict access controls.

3.7 Communications Data

The content of emails, live chat messages, and any other correspondence you send to 6bdt or receive from 6bdt. This includes support ticket histories, complaint records, and any account-related communications.

4. How We Collect Your Data

6bdt collects personal data through the following channels:

• Direct submission: Information you provide when registering an account, completing KYC verification, submitting a deposit or withdrawal request, contacting support, or responding to a survey or promotion.
• Automated collection: Technical and usage data collected automatically through server logs, session management systems, and analytics tools when you access or use the platform.
• Third-party payment processors: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, and banking partners when you conduct financial transactions on the platform.
• Fraud detection systems: Device fingerprinting and behavioural analytics tools that monitor for patterns consistent with prohibited conduct, account compromise, or money laundering activity.
• Cookies and similar technologies: First-party cookies and session storage used to maintain your login state, remember your preferences, and analyse platform usage. See Section 11 for full details.

5. How We Use Your Data

6bdt uses your personal data for the following purposes:

• Creating, operating, and maintaining your 6bdt player account.
• Verifying your identity and age (21+ requirement) in compliance with our KYC obligations.
• Processing deposit and withdrawal transactions via bKash, Nagad, Rocket, Upay, and supported bank channels.
• Detecting, investigating, and preventing fraud, money laundering, collusion, and other prohibited conduct on the platform.
• Monitoring account activity for responsible gaming indicators and activating player protection tools where thresholds are triggered.
• Communicating with you regarding account status, transaction confirmations, security alerts, and material changes to platform policies.
• Assessing bonus and promotional eligibility and administering promotional campaigns fairly.
• Analysing aggregate platform usage to improve game offerings, interface design, and overall player experience.
• Complying with applicable legal obligations, responding to lawful requests from competent authorities, and defending 6bdt's legal interests where required.

6. Legal Bases for Processing

6bdt processes your personal data only where a valid legal basis exists. The primary legal bases relied upon are:

• Performance of a contract: Processing necessary to operate your player account, process transactions, and deliver the services you have requested from 6bdt.
• Legal obligation: Processing required to comply with applicable anti-money laundering rules, age verification requirements, and other statutory or regulatory obligations.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and general platform improvement, where these interests are not overridden by your fundamental rights and freedoms.
• Consent: Where consent is the stated basis for a specific processing activity (for example, optional marketing communications), you may withdraw that consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

7. Sharing Your Data

6bdt does not sell, rent, or share your personal data with third parties for commercial or marketing purposes. Your data may be disclosed to the following categories of recipient only where strictly necessary:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — solely for the purpose of processing your financial transactions.
• Game content providers: Third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — limited to the technical session data required to deliver game content. These providers do not receive your identity or financial data.
• Identity verification providers: Third-party KYC and fraud screening services used to verify the authenticity of documents submitted during the KYC process.
• IT infrastructure providers: Cloud hosting and content delivery service providers who process data on 6bdt's behalf under strict data processing agreements that prohibit any independent use of your data.
• Legal and regulatory authorities: Where 6bdt is required by applicable law, court order, or lawful request from a competent governmental or regulatory authority to disclose personal data.

All third-party service providers acting as data processors on behalf of 6bdt are bound by contractual obligations that require them to protect your personal data to a standard at least equivalent to that set out in this Policy.

8. International Data Transfers

The 6bdt platform is operated from servers which may be located outside Bangladesh. Where personal data is transferred to a jurisdiction that does not provide a level of data protection equivalent to that applicable in Bangladesh, 6bdt implements appropriate safeguards — such as standard contractual clauses or equivalent contractual protections — to ensure your data remains protected to the standard described in this Policy.

You may request information about the specific safeguards applied to any international transfer of your personal data by contacting [email protected] and marking your request "International Transfer Enquiry".

9. Data Retention

6bdt retains personal data only for as long as necessary to fulfil the purposes for which it was collected or to comply with applicable legal retention obligations. The following standard retention periods apply:

• Account registration data: Retained for the duration of your active account plus a minimum of five (5) years following account closure, to comply with anti-money laundering record-keeping requirements.
• KYC verification documents: Retained for a minimum of five (5) years from the date of verification or from the date of account closure, whichever is later.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction, consistent with financial record-keeping obligations.
• Communications data: Support correspondence is retained for three (3) years from the date of the most recent interaction in a support thread, unless a longer period is required due to an open dispute or legal proceeding.
• Technical and usage data: Aggregated or anonymised after thirteen (13) months; non-anonymised technical logs are retained for up to six (6) months.

On expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where data is subject to an active legal hold, deletion will be deferred until the hold is lifted.

10. Security Measures

6bdt implements a layered approach to data security, incorporating technical, organisational, and procedural controls designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Key measures include:

• Transport Layer Security (TLS 1.2 or higher) encryption for all data transmissions between your device and the 6bdt platform.
• One-way cryptographic hashing (bcrypt) for all stored account passwords. 6bdt staff cannot view your password in plain text.
• Role-based access controls ensuring that internal access to personal data is granted only to employees and contractors who require it to perform their specific function.
• Regular internal security reviews and penetration testing of the platform infrastructure.
• Secure, access-controlled document storage for KYC verification materials, with audit logging of all access events.
• Incident response procedures requiring that any data breach affecting player personal data is assessed and, where required, reported to the appropriate authority without undue delay.

While 6bdt takes all reasonable steps to protect your data, no internet-based system is completely immune from security risks. You are responsible for keeping your account credentials confidential and for notifying 6bdt immediately at [email protected] if you suspect any unauthorised access to your account.

11. Cookies & Tracking Technologies

6bdt uses first-party cookies and browser session storage to operate the platform efficiently and securely. We do not deploy third-party advertising trackers or cross-site tracking cookies.

11.1 Essential Cookies

These cookies are strictly necessary for the platform to function. They maintain your login session, store your language and display preferences, and protect against cross-site request forgery (CSRF). Essential cookies cannot be disabled without impairing the functionality of the platform.

11.2 Analytics Cookies

6bdt uses anonymised analytics data to understand how players navigate the platform, which games are most accessed, and where technical issues arise. Analytics data is aggregated and does not identify individual players. You may opt out of analytics data collection by contacting [email protected].

11.3 Security Cookies

Short-lived session tokens and device recognition cookies are used by 6bdt's fraud detection systems to identify unusual login patterns, flag potentially compromised sessions, and enforce account-level security restrictions.

By using the 6bdt platform, you consent to the use of cookies as described in this section. You may manage cookie settings through your browser's built-in controls; however, disabling essential cookies will prevent you from logging into or using the platform.

12. Your Rights

Subject to applicable law, you hold the following rights in relation to your personal data held by 6bdt. To exercise any of these rights, contact [email protected] and mark your message "Data Subject Request". We will respond within thirty (30) calendar days.

• Right of access: You may request a copy of all personal data 6bdt holds about you, together with information about how it is processed.
• Right to rectification: You may request correction of inaccurate or incomplete personal data. For account details, many corrections can be made directly through the account dashboard.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to 6bdt's legal retention obligations. Data subject to mandatory retention periods cannot be deleted until those periods expire.
• Right to restriction: You may request that processing of your personal data be restricted in certain circumstances — for example, while the accuracy of data is contested or while an objection is assessed.
• Right to object: You may object to processing carried out on the basis of legitimate interests. 6bdt will cease that processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to data portability: You may request a machine-readable copy of personal data you have provided to 6bdt, where that data is processed on the basis of contract or consent.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.

6bdt will not charge a fee for handling straightforward data subject requests. Where requests are manifestly unfounded, excessive, or repetitive, a reasonable administrative fee may be applied or the request may be declined, with written explanation provided.

13. Children & Minors

The 6bdt platform is strictly for adults. No person under the age of 21 is permitted to register an account, make a deposit, or participate in any game or betting activity on the platform. 6bdt does not knowingly collect personal data from individuals under 21 years of age.

Where 6bdt discovers or has reasonable grounds to suspect that an account has been registered by a person under 21, the account will be suspended immediately, all balances will be frozen pending investigation, and any funds deposited by a minor will be refunded in accordance with applicable law. KYC documents confirming age are required before any withdrawal is processed.

If you are a parent or guardian and have reason to believe that a minor has registered an account on 6bdt, please contact [email protected] immediately. We will investigate and take appropriate action within two (2) business days of receiving your report.

14. Changes to This Policy

6bdt reserves the right to amend this Privacy Policy at any time. When a material change is made, we will notify registered players by email to the address on their account and post a prominent notice on the platform at least seven (7) calendar days before the change takes effect. The "Last Updated" date at the top of this Policy will be revised on each update.

Your continued use of the 6bdt platform after the effective date of any update constitutes your acceptance of the revised Policy. If you do not accept the revised Policy, you must cease using the platform and may close your account by contacting [email protected].

15. Contact Us

All privacy-related enquiries, data subject access requests, complaints, and opt-out requests should be directed to:

Email: [email protected]
Subject line: Data Protection Request or Privacy Enquiry
Support Hours: 24/7 — Bangladesh Standard Time (BST, UTC+6)
Platform: https://6bdt.io

We are committed to resolving all privacy-related concerns fairly and transparently. If you are not satisfied with our response, you retain the right to escalate your complaint to the relevant data protection authority in your jurisdiction.

This Privacy Policy was last reviewed and updated on 1 January 2026. It supersedes all previous versions of the 6bdt Privacy Policy. By using the 6bdt platform, you acknowledge that you have read and understood this Policy in full.