si6s Privacy Policy — How We Protect Your Personal Data

1 Introduction

This Privacy Policy ("Policy") describes how si6s ("we", "us", "our", "the Platform") collects, uses, stores, shares, and protects the personal information of individuals ("you", "the Player", "the User") who access or use the si6s platform at si6s.io and any associated subdomains, mobile applications, or digital services.

si6s is committed to handling your personal data with transparency, integrity, and respect. We understand that trust is the foundation of any lasting relationship between a player and a betting platform, and we take our obligations as custodians of your data seriously.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which form part of the binding agreement between you and si6s. By creating an account on si6s or by continuing to use the platform after this Policy has been updated, you confirm that you have read, understood, and accepted the terms set out in this document.

2 Data We Collect

2.1 Data You Provide Directly

When you interact with the si6s platform, you provide us with personal information directly in the following circumstances:

• Registration: When you create a si6s account, we collect your full legal name, date of birth, email address, mobile phone number, and residential address.
• Identity Verification (KYC): To comply with our know-your-customer obligations, we collect copies of government-issued identity documents (National ID card, passport, or driving licence) and proof of address documents (utility bills, bank statements) when verification is triggered.
• Deposits and Withdrawals: When you conduct financial transactions, we collect information about the payment method used, including mobile money account numbers (bKash, Nagad, Rocket, Upay), card details (last four digits only — full card numbers are processed directly by our payment gateway partners and are not stored by si6s), and bank account references where applicable.
• Support Interactions: When you contact the si6s support team via live chat or email, we collect the content of your messages, your account details, and any documentation you share as part of your enquiry.
• Surveys and Promotions: If you voluntarily participate in player surveys, promotional competitions, or feedback forms, we collect the responses you provide.

2.2 Data Collected Automatically

When you access the si6s platform, certain technical and behavioural data is collected automatically by our systems:

• Device and Technical Data: IP address, device type and model, operating system version, browser type and version, screen resolution, time zone setting, and language preference.
• Usage and Behavioural Data: Pages visited, games launched, session start and end times, betting activity, deposit and withdrawal history, bonus claims, and navigation paths through the platform.
• Session Data: Login timestamps, session identifiers, and authentication tokens used to maintain secure access to your account.
• Location Data: Country and approximate region derived from your IP address, used for geographic access controls and fraud prevention. si6s does not collect precise GPS-level location data.

2.3 Data Received from Third Parties

In certain circumstances, si6s may receive personal data about you from trusted third-party sources:

• Payment Processors: Transaction confirmation data from bKash, Nagad, Rocket, Upay, and card payment gateways, used to reconcile your deposit and withdrawal records.
• Identity Verification Providers: Confirmation results from third-party KYC and document verification services used to authenticate identity documents you submit.
• Fraud Prevention Services: Risk signals and flagged indicators from fraud detection partners used to protect the platform and its players from fraudulent activity.

3 How We Use Your Data

si6s uses the personal data it collects for the following purposes:

• Account Management: To create, maintain, and operate your si6s player account, including processing your registration, managing your account profile, and enabling secure login.
• Payment Processing: To process your deposits and withdrawal requests via your chosen payment method, reconcile transaction records, and resolve any payment discrepancies.
• Identity and Age Verification: To verify that you are who you say you are and that you are at least 21 years of age before you are permitted to deposit real money or access full platform features.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, multi-account abuse, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible Gaming: To monitor your playing patterns for indicators of problem gambling behaviour, to enforce the responsible gaming limits you set on your account, and to administer self-exclusion requests appropriately.
• Customer Support: To respond to your enquiries, resolve disputes, investigate complaints, and provide assistance with account or payment matters.
• Platform Improvement: To analyse aggregated, anonymised usage data in order to improve the features, performance, and content of the si6s platform.
• Legal Compliance: To meet our obligations under applicable laws and regulations, including anti-money laundering rules, record-keeping requirements, and responding to lawful requests from regulatory or law enforcement authorities.
• Marketing Communications: To send you promotional offers, bonus notifications, tournament announcements, and platform updates — but only where you have given your explicit consent to receive such communications. You may withdraw your marketing consent at any time by contacting [email protected] or using the unsubscribe link in any marketing email.

4 Legal Bases for Processing

Every data processing activity carried out by si6s is grounded in one or more recognised legal bases. The primary bases we rely on are:

• Contract Performance: Processing necessary to perform the contract between you and si6s — for example, operating your account, processing deposits and withdrawals, and providing the games and betting services you have requested.
• Legal Obligation: Processing required for si6s to comply with applicable legal requirements — for example, conducting KYC verification, retaining financial transaction records, and responding to lawful regulatory or law enforcement requests.
• Legitimate Interests: Processing for purposes that represent a genuine, proportionate interest of si6s or a third party, where those interests are not overridden by your fundamental rights and freedoms — for example, fraud prevention, platform security monitoring, and aggregated analytics used to improve the platform.
• Consent: Processing carried out only where you have given a freely given, specific, informed, and unambiguous indication of agreement — for example, receiving marketing emails about promotions and bonuses. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5 Sharing Your Personal Data

si6s does not sell, rent, or trade your personal data to any third party for commercial gain. We share personal data only in the following defined circumstances and only to the extent strictly necessary:

5.1 Payment Processing Partners

To process your deposits and withdrawals, si6s shares relevant transaction data with payment processing partners including bKash, Nagad, Rocket, Upay, Visa/Mastercard acquiring banks, and domestic bank transfer networks. These partners are contractually bound to use your data exclusively for the purpose of processing your requested transaction.

5.2 Identity Verification and KYC Providers

Where si6s uses third-party services to verify identity documents, it shares the relevant document images and personal details with those providers under strict data processing agreements. Verification providers are not permitted to retain or use your documents for any purpose beyond the verification task.

5.3 Fraud Prevention and Security Services

si6s shares technical data (IP addresses, device fingerprints, session data) with fraud detection partners to protect the platform and its player community from fraudulent activity. Data shared for fraud prevention purposes is processed under legitimate interests and is subject to confidentiality obligations.

5.4 Legal and Regulatory Authorities

si6s may disclose personal data to regulatory authorities, law enforcement agencies, courts, or other governmental bodies where it is legally required to do so, or where si6s has a good-faith belief that such disclosure is necessary to prevent imminent harm, investigate a legal claim, or comply with a binding legal process.

5.5 Business Succession

In the event that si6s undergoes a corporate restructuring, merger, acquisition, or sale of some or all of its assets, your personal data may be transferred to the successor entity as part of that transaction. You will be notified by email if such a transfer results in a material change to how your data is processed or who controls it.

6 Data Retention

si6s retains personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active Account Data: Retained for the full duration of your account's active status on the si6s platform, plus a minimum post-closure period of five (5) years to comply with anti-money laundering record-keeping requirements.
• KYC and Identity Documents: Retained for a minimum of five (5) years following account closure or the completion of the last verified transaction, whichever is later.
• Financial Transaction Records: Retained for a minimum of five (5) years in accordance with financial record-keeping obligations.
• Support Correspondence: Retained for a period of three (3) years from the date of the final communication in each support thread, unless the correspondence relates to an open dispute or legal matter in which case it is retained until final resolution.
• Marketing Consent Records: Retained for as long as you have an active si6s account plus a period of two (2) years following account closure, to demonstrate consent compliance.
• Technical and Log Data: Retained for a maximum of twelve (12) months from the date of collection, after which it is either deleted or anonymised for analytical use.

When data reaches the end of its applicable retention period and there is no other legal basis justifying continued retention, si6s will securely delete or anonymise the data in accordance with its internal data lifecycle management procedures.

7 Cookies and Similar Technologies

7.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember information about your visit and your preferences, making subsequent visits faster and more personalised. si6s uses cookies and similar tracking technologies (such as pixel tags and session tokens) on its platform.

7.2 Types of Cookies Used by si6s

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies that keep you logged in securely during your visit. These cannot be disabled without preventing basic platform functionality from working.
• Functional Cookies: Used to remember your preferences such as your language setting, preferred payment method, and any responsible gaming limits you have configured. Disabling these cookies may reduce the convenience of using the platform.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players use the platform — for example, which game categories are most visited and where players encounter errors. This information is used to improve the platform and does not identify individual players.
• Security Cookies: Used to support fraud detection and bot prevention systems, helping to protect your account and the integrity of the platform.

7.3 Managing Cookies

You can control and manage cookies through your browser settings. Most modern browsers allow you to block or delete cookies, or to be notified when a cookie is set. Please note that disabling strictly necessary cookies will prevent you from logging into your si6s account. Instructions for managing cookies are available in the help section of all major browsers including Chrome, Firefox, Safari, and Edge.

8 Your Data Rights

As a player whose personal data is processed by si6s, you hold the following rights in relation to that data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request". si6s will respond to all verified requests within thirty (30) days.

• Right of Access: You have the right to request a copy of the personal data si6s holds about you, together with information about how and why it is being processed.
• Right to Rectification: You have the right to request that si6s corrects any personal data about you that is inaccurate or incomplete. For straightforward corrections (such as a misspelled name or outdated address), you can update your account profile directly.
• Right to Erasure ("Right to Be Forgotten"): You have the right to request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you have withdrawn consent, or where you object to processing and there is no overriding legitimate interest. This right is subject to legal retention obligations — si6s cannot delete financial or KYC records that it is legally required to retain.
• Right to Restriction of Processing: You have the right to request that si6s restricts the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested, or where you have objected to processing and si6s is assessing whether its legitimate interests override your rights.
• Right to Data Portability: Where processing is based on your consent or on contract performance, you have the right to receive a copy of the personal data you have provided to si6s in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to processing based on legitimate interests, including profiling, and to object at any time to processing of your personal data for direct marketing purposes. Upon receiving a marketing opt-out, si6s will cease sending marketing communications promptly.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

9 Children's Privacy and Underage Users

The si6s platform is strictly intended for adults aged 21 years and above. si6s does not knowingly collect, store, or process personal data belonging to individuals under the age of 21.

During registration, all users are required to confirm their date of birth and may be subject to age verification through document checks. Where si6s discovers or has reasonable grounds to believe that personal data has been collected from a person under the age of 21, it will take immediate steps to close the associated account, delete the data collected, and return any deposited funds after verifying the rightful owner.

If you are a parent or guardian and believe that a person under 21 in your care has registered on the si6s platform, please contact us immediately at [email protected]. We will investigate and act promptly. We also strongly recommend the use of parental control software on any internet-connected device to which minors have access.

10 Data Security

si6s implements a range of technical and organisational security measures designed to protect your personal data from unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• Transport Layer Security (TLS): All data transmitted between your browser or app and si6s servers is encrypted using current TLS standards, preventing interception in transit.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. Staff and system accounts are subject to role-based access controls and multi-factor authentication where applicable.
• Data Encryption at Rest: Sensitive personal data stored in si6s databases, including identity document images and financial records, is encrypted at rest using industry-standard encryption algorithms.
• Security Monitoring: si6s operates continuous monitoring of its systems for intrusion attempts, anomalous access patterns, and other security events. Alerts are reviewed by the security team on an ongoing basis.
• Regular Security Assessments: The si6s platform undergoes regular security reviews, penetration testing, and vulnerability assessments to identify and remediate potential weaknesses before they can be exploited.
• Incident Response: si6s maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights and freedoms, you will be notified without undue delay in accordance with applicable notification requirements.

While si6s takes all reasonable steps to protect your personal data, no system is entirely immune to security risk. You also have a role to play in keeping your account secure — use a strong, unique password for your si6s account, do not share your login credentials with anyone, and contact us immediately if you suspect unauthorised access to your account.

11 International Data Transfers

The si6s platform serves players based in Bangladesh. Some of the third-party service providers we work with — including payment gateway technology partners, cloud infrastructure providers, and fraud prevention services — may process data in jurisdictions outside Bangladesh. Where such transfers occur, si6s takes steps to ensure that appropriate safeguards are in place to protect your personal data to a standard consistent with this Policy.

Safeguards used by si6s for international transfers include:

• Contractual clauses requiring the recipient to apply data protection standards equivalent to those described in this Policy.
• Transfer only to service providers operating in jurisdictions with recognised data protection frameworks or subject to binding corporate data protection rules.
• Regular review of third-party data handling arrangements to confirm ongoing compliance with agreed standards.

By using the si6s platform, you acknowledge that your personal data may be transferred to and processed in countries outside Bangladesh as described in this section, subject to the safeguards outlined above.

12 Changes to This Privacy Policy

si6s reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, platform functionality, data processing practices, or the results of internal review. The current version of the Policy is always accessible at si6s.io/privacy-policy, and the effective date at the top of the document will be updated to reflect the date on which any revised version comes into force.

Where a proposed change to this Policy is material — meaning it significantly alters the way we collect, use, or share your personal data — si6s will provide you with advance notice of the change by email to the address registered on your account at least fourteen (14) days before the revised Policy takes effect. Your continued use of the si6s platform after the effective date of a revised Policy constitutes your acceptance of the updated terms.

If you do not accept the terms of a revised Privacy Policy, you should stop using the platform and contact [email protected] to request account closure. Closing your account does not affect the retention of data that si6s is legally required to hold for a defined period after closure.

13 Contact Us

If you have any questions, concerns, or requests in relation to this Privacy Policy or the way si6s handles your personal data, please contact us using the details below. We are committed to responding to all privacy-related enquiries within thirty (30) days of receipt.

• Email: [email protected]
• Subject Line: Please use "Privacy Policy Enquiry" or "Data Rights Request" to ensure prompt routing to the appropriate team member.
• Response Time: Within 30 days of receipt of a verified request. Complex or multi-part requests may require additional time, in which case we will inform you of the expected timeline.
• Language: Enquiries may be submitted in English. All responses will be provided in English.

si6s takes every privacy enquiry seriously. Whether you are exercising a formal data rights request or simply have a question about how a specific piece of your data is used, our team will give your message the attention it deserves.