6baji Privacy Policy

Data We Collect

6baji collects personal data from players in several ways — directly through the registration and account management process, automatically through your use of the platform, and occasionally from trusted third-party sources. We only collect data that is necessary for a legitimate, clearly defined purpose.

1.1 Data You Provide Directly

When you register an account, make a deposit, request a withdrawal, contact our support team, or participate in a promotion, you may provide us with the following categories of personal data:

• Identity data: Full legal name, date of birth, gender, and copies of government-issued identity documents such as your National Identity Card (NID) or passport.
• Contact data: Email address and mobile phone number registered in Bangladesh.
• Financial data: Payment method identifiers such as your bKash, Nagad, Rocket, or Upay mobile wallet number, or the last four digits of your Visa or Mastercard. We do not store full card numbers.
• Account credentials: Your chosen username and a hashed version of your password. We never store passwords in plain text.
• Communications data: The content of any messages you send to our support team via email or live chat, including timestamps.
• Responsible gaming data: Any self-exclusion requests, deposit limits, or cooling-off periods you set on your account.

1.2 Data Collected Automatically

When you access and use the 6baji platform, our systems automatically collect certain technical and behavioural data:

• Device and browser data: IP address, device type (desktop, mobile, tablet), operating system version, browser type and version, and screen resolution.
• Usage data: Pages and game categories visited, time spent on each section, bet history, game session durations, deposit and withdrawal activity, and in-game event logs.
• Log data: Server access logs including timestamps, HTTP response codes, and referring URLs.
• Cookie and tracking data: See Section 4 (Cookies & Tracking) for full details on the cookies we use and how to manage them.

1.3 Data From Third Parties

In limited circumstances, 6baji may receive personal data about you from trusted third-party sources:

• Payment providers: bKash, Nagad, Rocket, Upay, Visa, and Mastercard may share transaction confirmation data with us to verify deposits and process withdrawals.
• Identity verification services: Where we use a third-party KYC (Know Your Customer) provider to verify your age and identity, that provider may return a verification status and a confidence score to our platform.
• Fraud prevention services: We may receive risk signals or flagged data points from fraud detection partners to protect the integrity of the platform.

1.4 Summary of Data Categories

How We Use Your Data

6baji processes your personal data only for clearly defined, lawful purposes. We do not sell your personal data to third parties, and we do not use your data for purposes that are incompatible with the reason it was originally collected. The table below summarises the primary purposes for which we process your data and the legal basis for each.

2.1 Marketing Communications

If you have opted in to receive promotional communications from 6baji, we may contact you by email or SMS to inform you of new games, seasonal promotions (such as Eid or BPL cricket season offers), welcome bonuses, and platform updates. You may withdraw your consent to receive marketing communications at any time by contacting [email protected] or using the communication preferences section within your account dashboard. Withdrawing marketing consent does not affect the lawfulness of processing carried out before withdrawal.

2.2 Automated Decision-Making

6baji uses automated systems to detect potentially fraudulent activity, identify responsible gaming concerns, and enforce bonus eligibility rules. Where an automated decision materially affects your account — for example, a temporary account freeze triggered by an unusual transaction pattern — you have the right to request human review of that decision by contacting our compliance team at [email protected].

Data Sharing & Disclosure

6baji does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We may share your data with carefully selected third parties only where it is necessary for the delivery of our services or required by law. All third parties who receive your personal data are contractually required to handle it in accordance with data protection principles consistent with this Policy.

3.1 Service Providers

We work with a limited number of trusted service providers who process personal data on our behalf. These include:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard networks — to facilitate deposit and withdrawal transactions in BDT.
• Identity verification (KYC) providers: Third-party services used to verify age and identity documents submitted by players.
• Game software providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session identifiers to enable game functionality and audit trails.
• Cloud infrastructure providers: Hosting and database services used to operate the 6baji platform securely.
• Fraud and risk management providers: Third-party tools that help us identify and prevent fraudulent activity on the platform.

3.2 Legal Disclosures

6baji may disclose your personal data to law enforcement agencies, regulatory bodies, courts, or other government authorities where we are required to do so by applicable law, a court order, or a lawful request from a competent authority. We will notify you of any such disclosure unless we are legally prohibited from doing so.

3.3 Business Transfers

In the event that 6baji undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified in advance of any such transfer and of any material changes to the way your data is handled as a result.

Cookies & Tracking

6baji uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your authenticated session, and analyse how the platform is used in aggregate. This section explains what cookies we use, why we use them, and how you can manage your cookie preferences.

4.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember information about your visit — such as your login status, language preference, and session data — so that the experience is faster and more personalised on your next visit. Cookies do not contain executable code and cannot access other files on your device.

4.2 Types of Cookies We Use

4.3 Managing Cookies

You can control and manage cookies through your browser settings. Most modern browsers allow you to block all cookies, accept only first-party cookies, or delete existing cookies. Please note that blocking strictly necessary cookies will prevent core platform functionality — including login and deposits — from working correctly. Blocking analytics or functional cookies will not prevent you from using the platform but may reduce the quality of your experience.

For guidance on managing cookies in your specific browser, refer to your browser's help documentation. Common browsers used by our players in Bangladesh include Chrome for Android, Samsung Internet, and Firefox Mobile.

4.4 Do Not Track

Some browsers transmit a "Do Not Track" (DNT) signal to websites. 6baji currently does not alter its data collection practices in response to DNT signals, as there is no universally accepted standard for how platforms should respond to such signals. We encourage you to use the cookie management options described above to control tracking directly.

Data Retention

6baji retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or compliance obligations. The retention periods below reflect our standard practice and may be extended where a legal hold, ongoing investigation, or dispute requires us to preserve specific records.

When personal data is no longer required and the applicable retention period has elapsed, we securely delete or anonymise it in a manner that prevents reconstruction of the original data. Anonymised or aggregated data that cannot identify any individual may be retained indefinitely for statistical and analytical purposes.

Data Security

Protecting the personal data of 6baji players is a technical and organisational priority. We implement layered security measures designed to prevent unauthorised access, disclosure, alteration, or destruction of the data we hold. Our security approach includes the following controls:

• SSL/TLS encryption: All data transmitted between your device and the 6baji platform is encrypted in transit using industry-standard TLS 1.2 or higher. The padlock icon in your browser confirms this connection is active.
• Encryption at rest: Sensitive data fields — including identity document copies and financial identifiers — are encrypted in our database using AES-256 encryption.
• Password hashing: Account passwords are never stored in plain text. We use a strong cryptographic hashing algorithm (bcrypt with salting) to store password data.
• Access controls: Internal access to player personal data is restricted to authorised personnel on a strict need-to-know basis. All internal access is logged and audited.
• Two-factor authentication: Staff accounts with access to player data require multi-factor authentication. We also offer optional two-factor authentication to players for their own account security.
• Regular security reviews: We conduct periodic internal security assessments and work with third-party specialists to identify and remediate vulnerabilities in our platform.
• Incident response: In the event of a data breach that poses a risk to players, 6baji has an incident response procedure in place to contain the breach, assess its scope, and notify affected players promptly.

Your Privacy Rights

As a player on the 6baji platform, you hold a number of rights over your personal data. We are committed to honouring these rights promptly and transparently. To exercise any of the rights listed below, please contact our data protection contact at [email protected] with the subject line "Privacy Rights Request", including your registered email address and a description of the right you wish to exercise.

7.1 Right of Access

You have the right to request a copy of the personal data we hold about you. Upon a verified request, we will provide you with a structured summary of your data in a readable format within 30 days. This includes your account registration data, transaction history, bet history, and any identity documents we hold on file.

7.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. Minor corrections (such as an email address update) can be made directly via your account settings. Corrections to identity data (such as a name change following a legal name change) require supporting documentation.

7.3 Right to Erasure

In certain circumstances, you may request that we delete your personal data — sometimes referred to as the "right to be forgotten". This right applies where the data is no longer necessary for the purpose it was collected, where you have withdrawn consent and no other legal basis applies, or where the data has been processed unlawfully. Please note that this right is subject to our legal retention obligations — for example, financial transaction records must be retained for a minimum period and cannot be deleted on request before that period expires.

7.4 Right to Restriction

You may request that we restrict the processing of your personal data in specific circumstances — for example, while the accuracy of data is being contested, or where processing is unlawful but you prefer restriction to deletion. During a restriction period, we will continue to store your data but will not process it for any other purpose without your consent.

7.5 Right to Data Portability

Where we process your personal data on the basis of your consent or on the basis of a contract, and where that processing is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format (such as JSON or CSV). You may also request that we transmit that data directly to another service provider where technically feasible.

7.6 Right to Object

You have the right to object to the processing of your personal data where that processing is based on our legitimate interests — including profiling for fraud detection or marketing analytics. Where you object, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests. You may also object to direct marketing communications at any time, with no justification required.

7.7 Rights Related to Automated Decision-Making

Where an automated decision — such as a fraud flag or a responsible gaming intervention — produces a legal or similarly significant effect on your account, you have the right to request human review of that decision. Contact [email protected] and our compliance team will review the automated decision within five (5) business days.

Contact & DPO

If you have any questions, concerns, or complaints about this Privacy Policy or about the way 6baji handles your personal data, please get in touch with our data protection contact using the details below. All privacy-related correspondence is handled in English.

8.1 How to Reach Us

For all privacy enquiries, rights requests, data complaints, and consent withdrawal requests, contact the 6baji support and compliance team:

• Email: [email protected] (plain text — not a clickable link)
• Subject line for privacy matters: "Privacy Rights Request" or "Data Protection Query"
• Support hours: 24/7, with English-speaking agents available at all times
• Response time: We aim to acknowledge all privacy enquiries within 24 hours and provide a substantive response within 30 days

8.2 Policy Updates

6baji reserves the right to update this Privacy Policy at any time. When material changes are made, we will revise the "Last Updated" date at the top of this page and, where the changes are significant, notify registered players by email. Your continued use of the platform after the effective date of any revised Policy constitutes your acceptance of the updated terms. We encourage you to review this page periodically to stay informed about how your personal data is protected.

8.3 Children's Privacy

The 6baji platform is strictly for adults aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that a player is under 18, their account will be immediately suspended, their data will be reviewed, and any funds will be handled in accordance with our underage gambling procedure. If you believe a minor has registered an account on 6baji, please notify us immediately at [email protected].