6up Privacy Policy — Your Data, Protected

6up ("we", "our", "us") is an English-language online casino and sports betting platform built specifically for players in Bangladesh. We are committed to protecting the privacy and personal data of every individual who interacts with our platform. This Privacy Policy sets out, in clear and accessible English, the nature of the personal data we hold about you, the purposes for which it is processed, the legal basis for that processing, and the rights available to you.

Privacy is not a formality at 6up — it is a core operational principle. Our systems, processes, and third-party partnerships are designed to minimise unnecessary data collection, to store only what is genuinely needed to deliver a safe and fair gaming experience, and to ensure that your personal information is never sold, rented, or transferred to any party for commercial purposes outside the scope described in this policy.

This policy is written in English and applies to data processed in connection with: account registration and login, deposits and withdrawals via bKash, Nagad, Rocket, and Upay, gameplay across all 6up products (cricket betting, slots, live casino, crash games), promotional and bonus participation, and all support or dispute communications submitted to the 6up team.

If you have any question about how 6up handles your personal data, you may contact our privacy team at any time using the details provided in Section 10 of this policy. All privacy-related enquiries are handled in English and responded to within four hours under standard operating conditions (Bangladesh Standard Time, UTC+6).

6up collects personal data through several channels: information you provide directly, information collected automatically during your use of the platform, and information received from third-party payment processors. We collect only the data that is strictly necessary for delivering the services described below.

Data You Provide Directly

• Registration data: Full legal name, date of birth, mobile number (Bangladesh network), and a chosen account password when you create a 6up account.
• Identity verification documents: Copies of your national identity card (NID), passport, or birth certificate when identity or age verification is requested.
• Payment details: The bKash, Nagad, Rocket, or Upay mobile number associated with your deposit and withdrawal transactions. 6up does not store full card numbers or PIN codes.
• Support communications: Any messages, emails, or chat transcripts you send to the 6up support team, including their content and metadata (timestamp, platform).
• Responsible gaming inputs: Deposit limits, session reminders, cooling-off requests, and self-exclusion requests submitted via your account dashboard or via support.

Data Collected Automatically

• Device and browser data: IP address, device type, operating system, browser type and version, screen resolution, and device language setting.
• Session data: Login timestamps, session duration, pages visited within the 6up platform, features interacted with, and logout timestamps.
• Gameplay data: Bets placed, game types, wager amounts in BDT, outcomes, bonus activations, and cashout events across all 6up products.
• Geolocation data: General geographic location derived from your IP address (country and city level). 6up does not collect GPS-level precise location data.
• Cookie and tracking data: Information collected via cookies and similar technologies as described in Section 4 of this policy.

Data Received from Third Parties

• Payment processor confirmations: Transaction reference numbers, payment status (success/failure/pending), and the masked mobile number used for the transaction, as provided by bKash and Nagad APIs.
• Fraud and AML screening: Risk signals and identity match results from our fraud detection and anti-money laundering screening partners, used solely for account security purposes.

Summary Data Table

6up processes your personal data only for specific, legitimate purposes. We do not use your data for any purpose that is incompatible with the purposes listed below, and we do not sell your personal data to any third party under any circumstances.

• Account management: Creating, maintaining, and securing your 6up account, verifying your identity and age, and processing your login sessions.
• Service delivery: Processing your deposits and withdrawals via bKash, Nagad, Rocket, and Upay; crediting and debiting your BDT wallet; settling bets and distributing winnings; applying bonus credits.
• Legal and regulatory compliance: Fulfilling our anti-money laundering (AML) obligations, responding to fraud investigations, retaining transaction records for the periods required under applicable law, and cooperating with any lawful requests from competent authorities.
• Platform security: Detecting and preventing fraudulent account activity, identifying and blocking unauthorised access attempts, and protecting all players from collusion, bot usage, and other prohibited conduct as defined in the Terms & Conditions.
• Responsible gaming: Monitoring gameplay patterns that may indicate problem gambling behaviour, enforcing deposit limits and self-exclusion requests, and proactively reaching out to players who display concerning patterns — all in accordance with the Responsible Gaming policy.
• Customer support: Responding to your queries, resolving disputes, processing account closure requests, and maintaining support interaction records for quality assurance purposes.
• Platform improvement: Aggregated, anonymised analysis of gameplay patterns, page interaction data, and session flows to improve the usability and performance of the 6up platform. This analysis is performed on anonymised data sets and cannot be used to identify individual players.
• Promotional communications: Where you have provided explicit consent, sending you personalised promotional offers, bonus notifications, and relevant platform updates. You may withdraw this consent at any time by contacting [email protected].

6up processes your personal data on the following legal bases: (a) performance of the contract between you and 6up (account management, payments, gameplay); (b) compliance with legal obligations (AML, fraud prevention, age verification); (c) legitimate interests (platform security, fraud detection, responsible gaming monitoring); and (d) your explicit consent (marketing communications, where applicable).

6up uses cookies and similar browser-based technologies to ensure the platform functions correctly, to keep your session secure, and to understand how players interact with different features of the site. A cookie is a small text file stored on your device by your browser when you visit a website.

Types of Cookies We Use

• Strictly necessary cookies: These are required for the 6up platform to function. They enable session authentication (keeping you logged in), remember your responsible gaming preferences (such as active deposit limits), and support the secure payment handshake with bKash and Nagad. These cookies cannot be disabled without breaking core platform functionality.
• Functional cookies: These remember your preferences such as language setting (English) and display preferences. They are not essential but significantly improve your experience on the platform.
• Analytics cookies: Aggregated, anonymised data about how players navigate 6up pages — which sections receive the most interaction, how long sessions typically last, and where users encounter friction. This data is used to improve the platform and is never linked back to individual identifiable player accounts.
• Security cookies: Used for fraud detection and bot prevention purposes. These cookies help identify suspicious access patterns and protect your account from unauthorised use.

Managing Cookies

You may configure your browser to block or delete cookies at any time using your browser's privacy settings. Please note that disabling strictly necessary cookies will prevent you from logging in to your 6up account and may disable payment functionality. Disabling functional or analytics cookies will not affect your ability to play but may result in a reduced experience.

6up does not use advertising cookies, retargeting cookies, or any cookie-based technology designed to track your activity across other websites or to serve you targeted advertising outside of the 6up platform.

6up does not sell, rent, or otherwise transfer your personal data to third parties for commercial purposes. Your data is shared only in the limited circumstances described below, and only to the extent necessary for the specified purpose.

• Payment processors (bKash, Nagad, Rocket, Upay): When you make a deposit or withdrawal, the minimum information required to process the transaction — your mobile number and the transaction amount in BDT — is transmitted to the relevant payment API. These providers operate under their own privacy policies and are bound by applicable Bangladeshi financial regulation.
• Game studios (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi, and others): When you play a game on the 6up platform, your session token and wager data are transmitted to the game provider's server to manage the game round. Game studios do not receive your name, NID details, or payment information.
• Fraud and AML screening providers: Anonymised transaction patterns and risk signals may be shared with our fraud detection partners for the sole purpose of protecting the platform and its players from financial crime. These partners are contractually bound to process this data only for the agreed purpose and are prohibited from using it for any other purpose.
• Legal and regulatory authorities: 6up will disclose personal data to competent government authorities, law enforcement agencies, or regulatory bodies where required to do so by applicable law, court order, or lawful regulatory request. We will disclose only the minimum information required to satisfy such a request and will notify you of any such disclosure where legally permitted to do so.
• Professional advisers: In the context of a legal dispute, audit, or regulatory investigation, 6up may share relevant personal data with its legal counsel, accountants, or compliance advisers, all of whom are bound by strict professional confidentiality obligations.

All third parties with whom 6up shares personal data are required to maintain appropriate technical and organisational measures to protect that data and are prohibited from using it for any purpose beyond the scope of their engagement with 6up.

6up retains your personal data for as long as your account is active and for a defined period thereafter, as required by applicable law and our legitimate business interests. The following retention principles apply:

• Active account data: Your registration details, identity verification records, and account preference settings are retained for the full duration of your account's active status.
• Transaction and gameplay records: Financial transaction records (deposits, withdrawals, bet history, balance movements) are retained for a minimum of five years following the date of the transaction, in line with anti-money laundering record-keeping requirements.
• Support communications: Records of support interactions, dispute logs, and responsible gaming requests are retained for three years from the date of the most recent interaction.
• Identity verification documents: Copies of identity documents submitted during KYC verification are retained for five years from the date of submission or from the date of account closure, whichever is later, in accordance with AML obligations.
• Closed or banned accounts: Where an account is closed voluntarily, data is retained for the applicable statutory period (minimum five years for financial records). Where an account is closed due to a breach of the Terms & Conditions (fraud, AML violation, etc.), data may be retained indefinitely where required by ongoing legal proceedings or regulatory review.
• Marketing consent records: Where you have provided consent to receive promotional communications, a record of that consent is retained for the duration of your account plus three years, to demonstrate compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in line with 6up's internal data destruction procedures. Anonymised analytical data derived from your account activity (aggregated, non-identifiable) may be retained indefinitely for platform improvement purposes.

As a 6up player, you hold a number of rights in relation to your personal data. 6up is committed to honouring these rights promptly and transparently. To exercise any of the rights described below, contact us at [email protected] with the subject line "Privacy Rights Request". We will respond within four hours under standard operating conditions.

Right of Access

You have the right to request a copy of all personal data that 6up holds about you. Upon a valid access request, we will provide you with a structured summary of your data in a readable format within a reasonable timeframe.

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain account details (such as your mobile number) directly within your account dashboard. For corrections to identity documents or legal name, please contact [email protected].

Right to Erasure

You may request that 6up delete your personal data. We will honour erasure requests where we are not required by law to retain the data in question (for example, financial records subject to AML retention obligations cannot be erased during the mandatory retention period). Where erasure is possible, it will be completed within 30 days of the verified request.

Right to Restrict Processing

You may request that 6up restrict the processing of your personal data in circumstances where you dispute its accuracy, where processing is unlawful, or where you have objected to processing pending verification of our legitimate interests. During a restriction period, 6up will store your data but will not actively process it beyond what is strictly required.

Right to Data Portability

You have the right to receive a copy of personal data you have provided to 6up in a structured, commonly used, machine-readable format. This right applies to data processed on the basis of your consent or the performance of a contract.

Right to Withdraw Consent

Where 6up processes your data on the basis of your explicit consent (primarily for promotional communications), you have the right to withdraw that consent at any time without affecting the lawfulness of any processing carried out prior to the withdrawal. To withdraw consent for marketing communications, contact [email protected].

6up implements technical and organisational security measures that reflect the sensitivity of the personal data we hold. These measures include but are not limited to:

• 256-bit SSL/TLS encryption: All data transmitted between your browser or mobile device and the 6up platform is encrypted in transit using industry-standard TLS encryption. This prevents interception of your login credentials, payment details, or any other data exchanged during your session.
• Encrypted data at rest: Sensitive personal data stored on 6up's servers — including identity documents, payment references, and account credentials — is encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data within 6up's internal systems is restricted on a strict need-to-know basis. Only staff members whose job function requires access to specific categories of data are granted that access, and all access events are logged and audited.
• Password security: Account passwords are stored using one-way cryptographic hashing with salt. 6up staff cannot retrieve your password in plaintext. You are responsible for choosing a strong, unique password and keeping it confidential.
• Fraud monitoring: Automated fraud detection systems monitor account activity in real time for indicators of unauthorised access, credential stuffing, and unusual transaction patterns. Suspicious activity triggers an immediate account review.
• Regular security reviews: 6up conducts periodic internal security reviews of its data handling practices, access logs, and third-party integrations to identify and address potential vulnerabilities.

While 6up takes all reasonable steps to protect your personal data, no digital platform can guarantee absolute security against all possible threats. In the event of a data breach that is likely to result in a significant risk to affected players, 6up will notify affected individuals and take all necessary remediation steps as promptly as possible.

You play an important role in the security of your own account. Use a strong, unique password, do not share your login credentials with anyone, and notify 6up immediately at [email protected] if you suspect any unauthorised access to your account.

The 6up platform is strictly for individuals aged 18 years or older. 6up does not knowingly collect personal data from individuals under the age of 18, and the collection of any such data is entirely contrary to 6up's policies and intent.

At the point of registration, all players are required to confirm that they are 18 years of age or older by providing their date of birth. 6up reserves the right to request documentary evidence of age at any point during the account lifecycle. Where 6up has reasonable grounds to suspect that a registered player is under the age of 18, the account will be immediately suspended pending age verification review. If that review confirms the player is a minor, all data associated with the account will be deleted in line with our data erasure procedures, all gameplay records will be voided, and any deposited balance will be returned to the payment source subject to standard AML verification.

Parents and guardians are encouraged to supervise their children's internet activity and to make use of parental control and content-filtering software to prevent minors from accessing online gambling platforms. If you believe a minor has registered on the 6up platform, please notify us immediately at [email protected]. We take such reports very seriously and will investigate promptly.

6up may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or the services we offer. When material changes are made, we will endeavour to notify registered players via the mobile number or contact channel associated with their account. However, it is each player's responsibility to review this policy periodically.

The most current version of this Privacy Policy will always be accessible at 6up.bio/privacy-policy. The "Last updated" date displayed at the top of this page and within the hero section reflects the date of the most recent revision. Continued use of the 6up platform following any revision constitutes your acceptance of the updated Privacy Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or 6up's data handling practices in general, please contact the 6up privacy and support team:

• Email: [email protected] (plain text — not a clickable link)
• Language: English
• Response time: Within 4 hours under standard conditions
• Operating timezone: Bangladesh Standard Time (BST, UTC+6)
• Availability: 24 hours a day, 7 days a week

We value your trust and treat every privacy enquiry with the seriousness it deserves. Whether you are exercising a data access right, reporting a security concern, or simply seeking clarification on a specific data practice, the 6up team is here to help.