6bdtk Privacy Policy

6bdtk collects personal data through multiple touchpoints across the platform lifecycle — from initial registration through to account closure. We collect only the data that is necessary to deliver our services safely and in compliance with our legal obligations. The categories of data we collect are as follows.

1.1 Registration and Identity Data

When you create a 6bdtk account, you provide us with the following information:

• Full legal name as it appears on your government-issued identity document;
• Date of birth (collected to verify that you meet the 18+ age requirement);
• Email address and mobile phone number (both used for account communications and two-factor verification);
• Chosen username and a hashed, salted version of your password (we never store passwords in plain text);
• Residential address in Bangladesh (required for KYC verification and regulatory compliance).

1.2 Identity Verification (KYC) Documents

To fulfil our Know Your Customer obligations and to prevent fraud and money laundering, we collect copies of the following identity documents when account verification is required:

• National Identity Card (NID) issued by the Bangladesh Election Commission;
• Valid Bangladeshi passport (photo page);
• Driving licence issued by BRTA;
• Recent utility bill or bank statement dated within the last three (3) months (for proof of address);
• Screenshot or confirmation from your registered bKash, Nagad, or Rocket account (for payment method verification).

These documents are stored in encrypted form and accessed only by authorised personnel engaged in the verification process. They are not used for any purpose beyond identity and payment method verification.

1.3 Financial Transaction Data

Each time you make a deposit or request a withdrawal, we record the following:

• Transaction amount in BDT;
• Transaction date and time (Bangladesh Standard Time, UTC+6);
• Payment method used (e.g., bKash, Nagad, Rocket, Upay, bank transfer, Visa, Mastercard);
• Transaction reference number issued by the payment provider;
• Running account balance before and after the transaction.

We do not store full card numbers, CVV codes, or mobile banking PINs. Payment card data is tokenised and handled exclusively by our PCI-compliant payment processing partners.

1.4 Gaming and Betting Activity Data

We maintain a comprehensive record of your activity on the 6bdtk platform, including:

• Games played, bet amounts, win/loss outcomes, and session durations;
• Sports betting selections, odds accepted, accumulator combinations, and settlement results;
• Bonus offers claimed, wagering progress, and bonus expiry events;
• Responsible gaming tool usage, including deposit limits set, cooling-off periods activated, and self-exclusion requests.

1.5 Technical and Device Data

When you access 6bdtk through a browser or mobile device, we automatically collect certain technical data, including:

• IP address and approximate geolocation derived from IP (country and city level only);
• Browser type and version, operating system, and device type;
• Pages visited, time spent on each page, navigation path, and referral source;
• Session cookies and locally stored preference data (see Section 4 for full cookie details).

1.6 Communications Data

If you contact 6bdtk via our support channels — including email, live chat, or in-platform messaging — we retain a record of that correspondence, including the content of your messages, the date and time of contact, and the resolution provided. This data is used for quality assurance, staff training, and dispute resolution purposes.

6bdtk does not sell or rent your personal data to third parties. We share your data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

Payment Service Providers: To process your deposits and withdrawals, we share the minimum necessary financial and identity information with our payment partners — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and international card processors. These providers operate under their own privacy policies and are subject to their own regulatory obligations. 6bdtk selects payment partners that meet recognised security and compliance standards.

Identity Verification Providers: We may engage third-party KYC and anti-money-laundering (AML) service providers to assist with the verification of identity documents. These providers process your data on our behalf under contractual data processing agreements that require them to handle your data securely and only for the purpose of verification.

Game and Platform Technology Providers: The games available on 6bdtk are provided by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, among others. These providers may receive certain pseudonymised technical and session data (such as session tokens and bet results) to deliver game functionality. They do not receive your name, contact details, or financial information.

Analytics Providers: We use industry-standard web analytics tools to measure platform performance, identify technical issues, and understand how players navigate 6bdtk. Analytics data is aggregated and anonymised where possible. Individual player profiles are not shared with analytics vendors.

Legal and Regulatory Disclosure: We may disclose your personal data to law enforcement agencies, regulatory bodies, financial intelligence units, or courts where we are legally required to do so — for example, in response to a valid court order, a statutory reporting obligation, or a lawful investigation into financial crime. We will notify you of such disclosures where we are legally permitted to do so.

Business Transfers: In the event that 6bdtk undergoes a merger, acquisition, or asset sale, your personal data may be transferred to the acquiring entity as part of that transaction. We will provide notice of any such transfer and of any material changes to this Privacy Policy that result from it.

We retain your personal data for as long as is necessary to fulfil the purpose for which it was collected, to comply with applicable legal and regulatory obligations, and to resolve any disputes or enforce our agreements. The following retention periods apply:

Once the applicable retention period has elapsed, your personal data is securely deleted or anonymised so that it can no longer be associated with you as an individual. In cases where data must be retained beyond these standard periods due to an ongoing legal proceeding, investigation, or regulatory requirement, we will notify you where we are permitted to do so.

6bdtk employs a layered approach to data security, combining technical controls, organisational policies, and staff training to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure.

Technical Safeguards: All data in transit between your browser and 6bdtk's servers is protected using TLS 1.2 or higher encryption. Data at rest — including account records, KYC documents, and financial data — is stored on encrypted servers. Access to production systems is restricted to authorised personnel only, enforced through role-based access controls and multi-factor authentication.

Password Security: Your account password is never stored in plain text. We use industry-standard hashing algorithms with per-user salts to store password credentials. 6bdtk staff cannot retrieve your password; if you forget it, a secure password reset flow via your registered email address is the only recovery path.

Payment Data: 6bdtk does not store full payment card numbers, CVV codes, or mobile banking PINs on its servers at any point. Payment card transactions are handled via tokenisation by our PCI DSS-compliant payment processor. For mobile financial service transactions (bKash, Nagad, Rocket, Upay), only transaction reference numbers and amounts are retained by 6bdtk.

Incident Response: In the event of a data breach that poses a risk to your rights and freedoms, 6bdtk will notify affected players without undue delay and no later than 72 hours after becoming aware of the breach. The notification will describe the nature of the breach, the categories and approximate number of individuals affected, the likely consequences, and the measures we have taken or propose to take to address it.

Your Responsibilities: While 6bdtk takes extensive measures to protect your data, account security also depends on the actions you take. You should use a strong, unique password for your 6bdtk account, never share your login credentials with anyone, and log out of your account when using shared or public devices. If you suspect that your account has been accessed without your authorisation, contact [email protected] immediately.