6riw Privacy Policy

This Privacy Policy applies to all personal data collected, processed, and stored by 6riw in connection with the online betting and casino platform accessible at 6riw.io, including all associated subdomains and mobile-optimised pages (collectively, the "Platform"). It governs data collected from all users who visit, register on, or transact through the Platform, regardless of the device or connection type used.

This Policy should be read alongside the 6riw Terms and Conditions and Responsible Gaming Policy, both of which are incorporated by reference. In cases of conflict between this Policy and any other document, this Privacy Policy shall prevail in respect of data protection matters.

6riw is the data controller for all personal data processed in connection with the Platform. As data controller, 6riw determines the purposes for which personal data is processed and is responsible for ensuring that processing is carried out in accordance with applicable data protection principles. By using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your data as described herein.

6riw collects personal data through multiple channels: directly from you when you register and use the Platform, automatically through your device and browser as you interact with the Platform, and from third-party service providers involved in delivering our services. The categories of personal data we collect are described below.

Registration and Account Data:

• Full legal name as it appears on your government-issued identity document.
• Date of birth (used to verify the 21+ age requirement).
• Mobile phone number registered in Bangladesh.
• Email address (used for account notifications, security alerts, and marketing where consented).
• Residential address (district, division, and full address where required for verification).
• Username and hashed account password.
• National Identity Card (NID) number or passport number where required for identity verification.

Financial and Transaction Data:

• Mobile wallet account numbers (bKash, Nagad, Rocket, Upay) associated with your account.
• Visa and Mastercard details (card number is masked; only the last four digits and card type are retained by 6riw — full card data is handled by our PCI-DSS compliant payment processor).
• Transaction history: deposit amounts, dates, timestamps, and transaction reference numbers.
• Withdrawal requests: amounts, methods, processing status, and timestamps.
• Account balance history for regulatory and dispute-resolution purposes.

Gaming and Betting Activity Data:

• Complete betting history: markets selected, stake amounts, odds accepted, and settlement outcomes.
• Casino game session records: games played, session duration, wager amounts, and results.
• Bonus and promotion usage: bonuses claimed, wagering progress, and completion status.
• Responsible gaming settings: deposit limits, loss limits, cooling-off periods, and self-exclusion records.

Technical and Device Data:

• IP address and approximate geographic location (country and city level).
• Device type, operating system version, and browser type and version.
• Session timestamps, page views, click-stream data, and navigation paths within the Platform.
• Cookies and similar tracking technologies as described in Section 6 of this Policy.

Communications Data:

• Records of live chat conversations with 6riw support staff, including date, time, and full chat transcript.
• Email correspondence sent to and received from 6riw support.
• Formal complaints, dispute submissions, and any supporting documentation you provide.

6riw processes personal data only where a lawful basis exists for doing so. The following table summarises the primary processing activities and the corresponding lawful basis applied:

The personal data 6riw collects is used for the following purposes. Each purpose is tied to a lawful basis set out in Section 3 of this Policy.

• Account Creation and Authentication: To create and maintain your 6riw account, verify your identity at login, and ensure only you can access your account.
• Transaction Processing: To execute deposits to your account balance and to process withdrawal requests to your registered payment method in Bangladeshi Taka.
• Age and Identity Verification: To confirm that you meet the 21+ age requirement and that your identity matches the details on your registered payment methods, in compliance with our anti-money-laundering obligations.
• Responsible Gaming Compliance: To monitor your betting patterns for indicators of problem gambling, enforce deposit limits and self-exclusion requests you have set, and proactively intervene where required under our duty of care.
• Customer Support: To respond to your live chat messages, email enquiries, and formal complaints, and to maintain a record of all support interactions for quality and dispute-resolution purposes.
• Fraud Detection and Security: To identify suspicious account activity, prevent bonus abuse, detect multi-accounting, and protect the Platform from automated attack tools and bots.
• Platform Analytics: To understand how players navigate the Platform, which features are most used, and where technical issues occur — enabling us to improve the overall user experience.
• Personalisation: To tailor promotional offers, game recommendations, and Platform content to your demonstrated preferences — only where you have consented to receive personalised communications.
• Legal and Regulatory Compliance: To fulfil record-keeping obligations, respond to lawful information requests from competent authorities, and maintain evidence required for regulatory or legal proceedings.
• Marketing Communications: To send you promotional emails or SMS messages about new games, bonuses, and special offers — exclusively where you have provided explicit marketing consent at registration or subsequently.

6riw does not sell, rent, or otherwise transfer your personal data to third parties for their own marketing purposes. Data may be shared with the following categories of third parties only where strictly necessary and under binding contractual data-protection obligations:

• Payment Processors: bKash, Nagad, Rocket, Upay, and our card payment processor receive the minimum data necessary to execute your transactions — typically your registered wallet number or masked card reference and the transaction amount. These providers operate under their own privacy policies and are responsible for data security within their own systems.
• Identity Verification (KYC) Providers: Where 6riw uses a third-party KYC service to verify identity documents, the relevant identification data (name, date of birth, document number, and document image) is shared solely for verification purposes and is not retained by the KYC provider beyond the period necessary to complete verification.
• Game Providers: Certain game providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) receive a pseudonymous player identifier and session token to enable game play. These providers do not receive your full name, contact details, or payment information.
• Analytics and Security Tools: Pseudonymised technical data (IP address, device fingerprint, session data) may be processed by our analytics and security partners to detect fraud and improve Platform performance. These partners are prohibited from using this data for any purpose other than the contracted service.
• Legal and Regulatory Authorities: 6riw may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required by law, court order, or regulatory request. 6riw will only disclose the minimum data necessary to fulfil such requests and will notify you where permitted by law.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of 6riw's assets, your personal data may be transferred to the successor entity, subject to an equivalent or higher level of data protection. You will be notified of any such transfer and given the opportunity to request deletion of your data before the transfer is completed.

6riw uses cookies and similar tracking technologies (including local storage objects and session tokens) to operate the Platform effectively, maintain your login session, remember your preferences, and gather analytics data that helps us improve the service.

You may manage your cookie preferences through your browser settings. Disabling strictly necessary cookies will impair the functionality of the Platform and may prevent you from logging in or completing transactions. Disabling analytics or marketing cookies will not affect your ability to use the core Platform features.

6riw applies a layered security architecture to protect all personal and financial data held on the Platform. The following technical and organisational measures are in place:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and 6riw's servers is encrypted in transit using TLS 1.2 or higher. Connections using outdated or insecure protocol versions are rejected.
• Encrypted Data at Rest: Personal and financial data stored in 6riw's databases is encrypted at rest using AES-256 encryption. Encryption keys are managed separately from the data they protect.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. 6riw staff can only access player data where required for their specific job function. All access is logged and periodically reviewed.
• Password Security: Account passwords are stored as salted cryptographic hashes. 6riw does not retain or have access to your plaintext password at any point. You are responsible for choosing a strong, unique password and keeping it confidential.
• Fraud Monitoring: 6riw employs automated fraud detection systems that monitor accounts and transactions in real time for patterns consistent with unauthorised access, identity fraud, and financial crime.
• Security Incident Response: 6riw maintains a documented data breach response plan. In the event of a confirmed data breach affecting your personal data, 6riw will notify affected players without undue delay and take immediate remedial action.

6riw retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely and permanently deleted from 6riw's systems in accordance with our data destruction procedures. Where deletion is not immediately possible due to backup schedules, data will be isolated from active processing and deleted at the earliest practicable opportunity.

As a player on the 6riw Platform, you hold the following rights in respect of your personal data. To exercise any of these rights, contact 6riw at [email protected] with the subject line "Data Rights Request — [Your Username]". 6riw will respond within thirty (30) days of receiving a valid request.

• Right of Access: You may request a copy of all personal data 6riw holds about you, together with information about how it is processed. This is commonly known as a Subject Access Request (SAR).
• Right to Rectification: If any personal data 6riw holds about you is inaccurate or incomplete, you have the right to request that it be corrected without undue delay. You may update basic contact details directly in your account settings panel.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other lawful basis applies), or where the data has been processed unlawfully. This right is subject to 6riw's legal obligation to retain certain data as described in Section 8.
• Right to Restrict Processing: You may request that 6riw restricts processing of your data in certain circumstances — for example, while a dispute over data accuracy is being resolved.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you may request that 6riw provide your data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing of your data carried out on the basis of legitimate interest — including profiling for direct marketing purposes. 6riw will cease that processing unless compelling legitimate grounds exist that override your interests.
• Right to Withdraw Consent: Where processing is based on consent (e.g., for marketing communications), you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

The 6riw Platform is strictly intended for adults aged 21 and above. 6riw does not knowingly collect personal data from any person under the age of 21. The registration process includes date-of-birth verification, and identity verification procedures are applied to confirm age compliance where required.

If 6riw becomes aware that it has inadvertently collected personal data from a person under the age of 21, the account will be immediately suspended, all data associated with that account will be flagged for deletion (subject to any legal obligation to retain fraud-related records), and any deposited funds net of losses will be returned to the original payment method. The matter will be reviewed by our compliance team.

If you are a parent or guardian and believe that your child (under 21) has registered on the 6riw Platform, please contact us immediately at [email protected]. Include the registered mobile number or email address in your message so we can locate and close the account promptly.

6riw will only send marketing communications — including promotional emails, SMS messages, and in-Platform notifications about bonuses, new games, and special offers — to players who have explicitly opted in to receive such communications. Consent may be given during the registration process or at any subsequent time by updating your communication preferences in your account settings.

You may withdraw marketing consent at any time by:

• Clicking the unsubscribe link included in any marketing email sent by 6riw.
• Updating your notification preferences in the account settings panel.
• Contacting 6riw support at [email protected] with the subject line "Unsubscribe — [Your Username]".

Withdrawal of marketing consent does not affect your ability to receive transactional and account-management communications, such as deposit confirmations, withdrawal notifications, password reset emails, security alerts, and important Platform updates. These communications are sent on the basis of contractual necessity and cannot be disabled while your account is active.

6riw's Platform serves players based in Bangladesh. Some of our third-party service providers — including game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, as well as our payment processing and analytics partners — may be located outside Bangladesh and may process your personal data in their respective jurisdictions.

Where personal data is transferred internationally, 6riw takes steps to ensure that an appropriate level of protection is applied to that data. These steps include:

• Contractual Safeguards: All third-party processors operating outside Bangladesh are required to sign data processing agreements that impose obligations equivalent to those applicable under this Privacy Policy, including data minimisation, purpose limitation, security requirements, and sub-processor controls.
• Adequacy Assessments: Before transferring data to a new jurisdiction, 6riw conducts an assessment of the data protection framework applicable in that jurisdiction and implements supplementary safeguards where the local framework does not provide equivalent protection.
• Minimum Data Transfers: Only the minimum personal data necessary to deliver the contracted service is transferred internationally. Full identity documents and sensitive financial data are not shared with overseas game providers.

By using the 6riw Platform, you acknowledge that your data may be transferred to and processed in countries outside Bangladesh in the circumstances described above, subject to the safeguards set out in this Section.

6riw reserves the right to update or amend this Privacy Policy at any time. Changes may be made to reflect updates in applicable law, regulatory requirements, changes to our services, or improvements to our data protection practices. The effective date at the top of this document will be updated whenever a material change is made.

Where a change is material — meaning it significantly affects how we process your personal data or materially reduces your rights — 6riw will notify registered players via email to the address on file and via an in-Platform notification at least fourteen (14) days before the change takes effect. Non-material amendments (such as formatting corrections, clarifications that do not alter the substance of the Policy, or updates to contact details) may be made without prior notice.

Continued use of the Platform after a material change takes effect constitutes your acceptance of the updated Privacy Policy. If you do not accept the updated Policy, you must stop using the Platform and contact 6riw to request account closure.

All privacy-related queries, data rights requests, and concerns regarding this Privacy Policy should be directed to the 6riw Data Protection team. Please use the contact details below. Do not include your full password or full payment card number in any correspondence.

• Email: [email protected] — use the subject line "Privacy — [Your Username]" for data rights requests or "Privacy — General Enquiry" for policy questions.
• Live Chat: Available 24 hours a day, 7 days a week via the Platform. Average response time is under 5 minutes during peak Bangladesh Standard Time (BST, UTC+6) hours.
• Response Time: 6riw will acknowledge all data rights requests within 3 business days and provide a full response within 30 calendar days of receipt of a valid, complete request.

If you are not satisfied with 6riw's response to a data rights request or privacy complaint, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction. 6riw will cooperate fully with any such authority in the resolution of complaints.