Privacy Policy — v6v6 Online Casino

1 Data Controller & Contact

v6v6 ("the Platform", "we", "us", "our") operates the online gaming website available at v6v6.app and is the data controller responsible for the personal information collected through the platform. As data controller, v6v6 determines the purposes and means of processing your personal data in accordance with this Privacy Policy.

If you have any questions, concerns, or requests relating to your personal data or this Privacy Policy, you may contact our dedicated privacy support team at:

Please mark any formal data-rights request with the subject line "Privacy Request — [your registered username]" to ensure it is routed to our compliance team without delay.

2 Personal Data We Collect

v6v6 collects personal data from you in the following ways: directly when you register an account or interact with the platform; automatically when you use our website; and from third-party sources such as payment processors and KYC verification partners. The categories of personal data we collect are set out in the table below.

Data You Are Not Required to Provide

Certain data fields in your account profile are optional (for example, city of residence for marketing personalisation). Where data is optional, this will be clearly indicated. Providing optional data enhances your experience on the platform but is not a condition of using v6v6's core services. Mandatory data fields — those required for account creation, identity verification, and payment processing — are clearly marked as required during the relevant process.

Data Collected from Third Parties

v6v6 may receive personal data about you from third-party sources including: payment service providers (bKash, Nagad, Rocket, Upay, Visa, Mastercard) who share transaction confirmation data; identity verification partners who return verification pass/fail decisions alongside confidence scores; and fraud prevention agencies who share risk indicators associated with your device or payment credentials. Data received from third parties is handled with the same level of care as data collected directly from you.

3 How We Use Your Data

v6v6 processes your personal data only where we have a valid legal basis for doing so. The primary legal bases we rely on are: contractual necessity (processing required to deliver the services you have signed up for); legal obligation (processing required to comply with applicable anti-money laundering, responsible gaming, and age verification obligations); legitimate interests (processing carried out for fraud prevention, platform security, and service improvement where those interests are not overridden by your rights); and, where applicable, your explicit consent (for marketing communications).

The table below maps each processing purpose to its legal basis and the data categories involved.

Marketing Communications

v6v6 will only send you promotional emails, SMS messages, or in-platform notifications about bonuses, seasonal promotions (such as BPL, IPL, Eid offers, Pohela Boishakh specials), and new game launches if you have explicitly opted in to receive such communications during registration or via your account preferences. You may withdraw your marketing consent at any time by updating your notification preferences in your account dashboard or by contacting support at [email protected]. Withdrawal of marketing consent does not affect the lawfulness of processing based on consent before its withdrawal, and it does not affect your ability to continue using the v6v6 platform.

4 Data Sharing & Third Parties

v6v6 does not sell your personal data. We do not share your personal data with third parties for their own commercial or marketing purposes. We share personal data only in the limited circumstances described below, and only to the extent necessary for the relevant purpose.

Payment Service Providers

To process deposits and withdrawals in BDT, v6v6 shares necessary transaction data (such as your mobile wallet number, transaction amount, and reference number) with our payment partners: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. These providers act as independent data controllers in respect of the payment transaction itself and are subject to their own privacy policies and applicable Bangladesh Bank regulations.

KYC and Identity Verification Partners

To fulfil our age and identity verification obligations, v6v6 uses third-party KYC verification services. Your identity documents and personal details are securely transmitted to these partners solely for the purpose of verification. These partners are contractually bound to process your data only for the purpose specified and to implement appropriate security measures.

Game Providers

Games on the v6v6 platform are supplied by third-party providers including Pragmatic Play, NetEnt, Microgaming, Spribe, Habanero, Ezugi, and Evolution Gaming. These providers may receive technical data (such as your session token, game round ID, and stake amount) to deliver the game experience. They do not receive your full identity data, financial data, or contact details unless required for a specific game feature you have opted into.

Fraud Prevention and Security

v6v6 may share data with fraud prevention agencies and cybersecurity partners where we have a legitimate interest in protecting the platform and its players from fraudulent activity, money laundering, or account compromise. Any data shared for this purpose is limited to the minimum necessary and is subject to strict confidentiality obligations.

Legal Disclosure

v6v6 may disclose personal data to law enforcement, regulatory authorities, or courts where required to do so by applicable law, legal process, or to protect the legal rights, property, or safety of v6v6, its players, or the public. We will notify you of any such disclosure request where we are legally permitted to do so.

5 Cookies & Tracking Technologies

v6v6 uses cookies and similar tracking technologies (including local storage and session storage) to operate the platform, maintain session security, and understand how players interact with the website. We do not use cross-site advertising cookies or sell cookie data to advertisers.

Types of Cookies We Use

Managing Cookies

You may control cookie behaviour through your browser settings. Most modern browsers allow you to block or delete cookies at the browser level. Please be aware that blocking strictly necessary cookies will prevent you from logging in to your v6v6 account, as session cookies are required for authentication. Blocking analytics or functional cookies will not prevent you from accessing the platform but may reduce the quality of your personalised experience.

Instructions for managing cookies in common browsers are available on the respective browser's official support pages. v6v6 does not provide a separate cookie consent banner, as all cookies we use are either strictly necessary for the service or covered under our legitimate interests basis as described above.

6 Data Retention Periods

v6v6 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The retention periods below reflect our standard data lifecycle policy.

After the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to any individual. Anonymised data (e.g., aggregate game statistics) may be retained indefinitely for analytical and business reporting purposes.

7 Data Security Measures

v6v6 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our core security infrastructure includes the following controls.

Technical Controls

• 256-bit SSL/TLS encryption on all data transmitted between your device and v6v6's servers. All connections to v6v6.app are enforced over HTTPS; HTTP connections are automatically redirected.
• Encrypted data-at-rest for all sensitive personal data including KYC documents, payment credentials, and password hashes. Passwords are stored as salted hashes using a modern, collision-resistant hashing algorithm — plain-text passwords are never stored.
• Mandatory two-factor authentication (2FA) via SMS OTP for all player logins, reducing the risk of account compromise from credential theft.
• Role-based access control (RBAC) for all internal staff who handle personal data. Data access is granted on a strict need-to-know basis and all access events are logged for audit purposes.
• Intrusion detection and rate limiting to identify and block brute-force login attempts, credential stuffing, and other automated attack patterns.
• Regular penetration testing and vulnerability scanning by independent security teams to identify and remediate weaknesses in the platform infrastructure.

Organisational Controls

• All v6v6 staff with access to personal data are required to undergo data protection and security training upon onboarding and at regular intervals thereafter.
• Third-party service providers who process personal data on our behalf are required to sign data processing agreements committing them to equivalent security standards.
• v6v6 maintains an incident response plan. In the event of a personal data breach that poses a risk to player rights and freedoms, affected players will be notified without undue delay, along with details of the nature of the breach, the data affected, the steps we are taking to address it, and guidance on protective actions you can take.

8 Your Privacy Rights

As a player using the v6v6 platform, you have a number of rights in relation to your personal data. These rights are described below along with the process for exercising each of them. All requests should be submitted to [email protected] with the subject line "Privacy Request — [your registered username]".

Right of Access

You have the right to request a copy of the personal data that v6v6 holds about you. We will provide this information in a structured, commonly used format within 14 calendar days of receiving a verified request. We may ask you to confirm your identity before fulfilling an access request to prevent unauthorised disclosure.

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. Contact and basic profile information can be updated directly via your account settings. Changes to identity-linked data (such as your registered legal name or date of birth) require supporting documentation and are processed by our compliance team.

Right to Erasure

You may request that v6v6 delete your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose it was collected, or where you withdraw consent and there is no other lawful basis for processing. Please note that this right is not absolute: v6v6 is required by law to retain certain categories of data (including KYC records and financial transaction logs) for defined periods after account closure, as described in Section 6. We will inform you of any data we are legally unable to delete when responding to your erasure request.

Right to Restrict Processing

In certain circumstances (for example, while the accuracy of your data is being contested, or while a legal claim is being established), you have the right to request that v6v6 restrict its processing of your data to storage only. We will apply a processing restriction flag to your account upon receipt of a valid request and remove it only when the relevant circumstance resolves.

Right to Data Portability

Where processing is based on your consent or on a contract, you have the right to receive the personal data you have provided to v6v6 in a structured, machine-readable format, and to transmit that data to another controller. This right applies to data such as your account profile information and transaction history.

Right to Object

You have the right to object to v6v6 processing your personal data where that processing is based on legitimate interests (including profiling for fraud prevention or responsible gaming monitoring). Where you object, v6v6 will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, or that the processing is necessary for legal claims.

Right to Withdraw Consent

Where v6v6 processes your data based on your consent (principally for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing. To withdraw marketing consent, update your notification preferences in your account dashboard or contact [email protected].

9 Minors & Age Restriction

v6v6 employs age verification controls at the point of registration and during the KYC process to prevent underage individuals from accessing the platform. Where v6v6 discovers or has reasonable grounds to believe that an account is held by a person under the age of 18, the account will be suspended immediately, all associated personal data will be reviewed, and the account will be permanently closed. Any deposits made by an underage individual will be returned to the original payment source.

If you are a parent or guardian and believe that a person under your care has created a v6v6 account, please contact us immediately at [email protected] with the subject line "Underage Account Report". We will investigate and take appropriate action within one business day.

v6v6 does not use personal data collected from any player to target individuals under 18 with marketing communications, nor do we knowingly allow minors' data to be shared with any third party for any purpose other than the immediate closure and investigation of the relevant account.

10 Updates to This Policy

v6v6 may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, applicable law, or regulatory guidance. When we make material changes — meaning changes that substantially affect the way we collect, use, or share your personal data — we will notify you by email to your registered address and/or by a prominent in-platform notice displayed when you next log in.

Non-material changes (such as typographical corrections, clarifications that do not alter the substance of any section, or updates to contact details) may be made without advance notice. The "Last Updated" date at the top of this document will be revised each time any change is made, whether material or otherwise.

Your continued use of the v6v6 platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any change to this Policy, you should discontinue use of the platform and may request account closure in accordance with the Terms & Conditions. The most current version of this Privacy Policy is always available at v6v6.app/privacy-policy. We recommend bookmarking this page and reviewing it periodically.