4six Privacy Policy

Introduction

4six operates as an online betting and casino platform serving players across Bangladesh, with a primary focus on providing safe, secure, and entertaining gaming experiences. As part of delivering these services, 4six necessarily collects and processes certain categories of personal data about its registered users.

This Privacy Policy has been written in plain English to ensure that every player on the 4six platform can clearly understand what data we hold, why we hold it, and how it is protected. We do not use legal language to obscure our practices — we are committed to full transparency regarding every aspect of our data handling.

Throughout this document, "4six", "we", "us", and "our" refer to the 4six platform and its operating team. "You", "your", and "the User" refer to any individual who accesses, browses, registers on, or uses the 4six platform in any capacity.

This Privacy Policy applies to all products and services offered through the 4six platform, including but not limited to sports betting (cricket, football, kabaddi, ice hockey, badminton), live casino games, slots, and all account management functions including deposits, withdrawals, and KYC verification.

Data We Collect

4six collects personal data across several categories, depending on the nature of your interaction with the platform. The following table summarises the principal categories of data we collect and the primary context in which each category is gathered:

We collect only the minimum personal data necessary to deliver the services you have requested and to fulfil our legal obligations. Where processing is not required for a specific purpose, we do not collect that data.

How We Use Your Data

4six uses the personal data it collects for the following specific, defined purposes. We do not use your data for purposes beyond those listed here without first obtaining your explicit consent or having a clear legal basis for the additional use.

1. Account Creation and Management. To register your account, verify your identity, maintain your account balance, manage your betting and gaming history, and communicate account-related notifications to you.
2. Payment Processing. To process deposits made via bKash, Nagad, Rocket, and Upay, and to facilitate withdrawal requests to your registered payment method. Financial data is shared only with the payment service providers necessary to complete these transactions.
3. Identity Verification (KYC). To verify that you are who you claim to be, that you are aged 21 or above, and that your payment methods are registered in your own name — in fulfilment of our anti-money laundering obligations.
4. Fraud Prevention and Security. To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, and other prohibited conduct on the platform. Technical and usage data plays a key role in identifying unusual patterns that may indicate fraud.
5. Legal and Regulatory Compliance. To comply with applicable anti-money laundering laws, financial record-keeping requirements, and any other legal obligations that apply to the operation of an online gaming platform serving Bangladeshi players.
6. Customer Support. To respond to your queries, resolve disputes, process account closure or self-exclusion requests, and provide general assistance via the support team.
7. Responsible Gaming. To administer responsible gaming tools including deposit limits, cooling-off periods, session reminders, and self-exclusion — and to monitor account activity for signs of problem gambling behaviour where appropriate.
8. Platform Improvement. To analyse aggregated usage data and understand how players interact with the platform, enabling us to improve products, fix issues, and develop new features. Analysis for this purpose uses anonymised or aggregated data wherever possible.
9. Promotional Communications. To send you information about promotions, bonuses, and seasonal offers relevant to your account — but only where you have not opted out of marketing communications. You may withdraw your marketing consent at any time by contacting [email protected].

Legal Basis for Processing

Every instance of personal data processing carried out by 4six is grounded in one or more of the following legal bases. We identify the applicable legal basis for each major processing activity below:

• Contractual Necessity. Processing your identity, contact, financial, and account data is necessary to fulfil the contract between 4six and you as a registered user — namely, to provide the betting and gaming services you have signed up for.
• Legal Obligation. Processing identity documents, financial transaction records, and KYC data is required in order for 4six to comply with applicable anti-money laundering obligations and financial record-keeping requirements.
• Legitimate Interests. Processing technical and usage data for fraud prevention, platform security, and platform improvement is carried out on the basis of 4six's legitimate interest in operating a secure and functional platform. We have assessed that these interests do not override the fundamental rights and freedoms of our users.
• Consent. Processing your data for promotional communications is carried out on the basis of your consent, which you provide at registration. You may withdraw this consent at any time. Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to withdrawal.

Data Sharing

4six does not sell, rent, license, or commercially trade your personal data to any third party under any circumstances. Data sharing with external parties occurs only in the limited and specific circumstances described below:

• Payment Service Providers. Financial data (including your mobile wallet number and transaction amounts) is shared with the payment providers you use to deposit and withdraw funds — including bKash, Nagad, Rocket, and Upay — solely for the purpose of processing your transactions. These providers operate under their own privacy policies and are bound by applicable financial services regulations.
• Identity Verification Services. Where third-party KYC verification tools are used to assist in document verification, the relevant identity data is shared with those service providers under strict data processing agreements that prohibit any secondary use of your data.
• Technology and Infrastructure Partners. Service providers who support the technical operation of the 4six platform (including hosting, content delivery, and analytics providers) may process technical and usage data in the course of providing their services. These providers are bound by contractual data processing restrictions.
• Game Content Providers. When you play games supplied by third-party studios (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi), limited session data may be shared with those providers for the purpose of operating the game, calculating results, and maintaining game integrity. Game providers do not receive your full identity or financial data.
• Legal and Regulatory Authorities. 4six may be required to disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory bodies where required by applicable law or in response to a lawful formal request. We will not disclose data beyond what is legally required in any such situation.
• Business Transfers. In the event of a merger, acquisition, or sale of the 4six business, your personal data may be transferred as part of the transaction. You will be notified of any such transfer and of any material change to the applicable privacy terms.

Cookies & Tracking Technologies

The 4six platform uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your login session, and collect usage analytics. The following categories of cookies are used:

• Strictly Necessary Cookies. These cookies are essential for the platform to function correctly. They manage your login session, maintain your account state during a game session, and enable core security features. These cookies cannot be disabled without breaking the platform's basic functionality.
• Functional Cookies. These cookies remember your preferences and settings (such as your preferred language, display settings, and responsible gaming limit configurations) so that you do not need to re-enter them on each visit.
• Analytics Cookies. These cookies collect aggregated, anonymised data about how users interact with the platform — including pages visited, session duration, and navigation paths. This data is used to improve the platform experience and identify technical issues. No individually identifiable data is contained in analytics reports.
• Fraud Prevention Cookies. These cookies help 4six identify and flag unusual or suspicious patterns of activity across sessions, contributing to the platform's fraud detection and account security systems.

4six does not use third-party advertising cookies or cross-site tracking technologies for targeted advertising purposes. No cookie data collected on the 4six platform is shared with advertising networks or data brokers.

Data Retention

4six retains personal data only for as long as is necessary for the specific purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention principles apply:

• Active Account Data. Identity, contact, account, and financial data associated with an active 4six account is retained for the full duration of the account's active status plus a minimum period of 5 years following account closure, in compliance with anti-money laundering record-keeping requirements.
• KYC Documentation. Identity documents submitted for KYC verification are retained for a minimum of 5 years following the closure of the associated account, or longer if required by applicable law.
• Transaction Records. Full records of all deposits, withdrawals, and betting activity are retained for a minimum of 5 years from the date of each transaction.
• Support Communications. Records of customer support interactions are retained for 2 years from the date of the interaction, or longer if the matter relates to a dispute, complaint, or regulatory inquiry.
• Technical and Usage Data. IP logs, session logs, and usage analytics data are retained for a maximum of 13 months from the date of collection, after which they are deleted or anonymised.
• Marketing Consent Records. Records of your marketing consent status (including the history of any opt-ins and opt-outs) are retained for the life of your account and for 2 years following account closure.

Data Security

4six implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security framework includes the following measures:

• SSL/TLS Encryption. All data transmitted between your device and the 4six platform is encrypted using industry-standard SSL/TLS protocols. Any data submitted via login forms, registration pages, or support channels is transmitted over encrypted connections at all times.
• Encrypted Data Storage. Sensitive data categories including identity documents, payment method identifiers, and account passwords are stored in encrypted form at rest. Passwords are hashed using modern one-way hashing algorithms and are never stored in plain text.
• Access Controls. Access to personal data held by 4six is strictly limited to staff members and systems that have a genuine operational need to access that data. Role-based access controls and audit logging are in place to prevent and detect any unauthorised internal access.
• Network Security. The 4six platform infrastructure is protected by firewalls, intrusion detection systems, and regular security monitoring. Vulnerability assessments and penetration testing are conducted periodically to identify and remediate potential security weaknesses.
• Fraud Detection Systems. Automated systems monitor transaction patterns and account behaviour in real time to detect and respond to potential fraud or account compromise.
• Incident Response. In the event of a data security incident that poses a risk to your personal data, 4six has an incident response procedure in place to contain the incident, assess its scope, and notify affected users and relevant authorities as appropriate.

Your Rights

As a registered user of the 4six platform, you have the following rights with respect to your personal data. To exercise any of these rights, contact the 4six support team at [email protected] with a clear description of your request:

• Right of Access. You have the right to request a copy of the personal data that 4six holds about you. We will provide this information within 30 days of receiving a verified request.
• Right to Rectification. If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update many account details directly through your account settings; more complex corrections can be requested via support.
• Right to Erasure. You have the right to request the deletion of your personal data in circumstances where the data is no longer necessary for the purposes for which it was collected and no overriding legal retention obligation applies.
• Right to Restrict Processing. You have the right to request that 4six restricts the processing of your personal data in certain circumstances — for example, while the accuracy of the data is disputed, or while a complaint is being investigated.
• Right to Data Portability. Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object. You have the right to object to processing carried out on the basis of legitimate interests, including profiling for fraud detection purposes, where you believe your individual circumstances warrant an exception. You also have an unconditional right to object to processing for direct marketing purposes at any time.
• Right to Withdraw Consent. Where processing is based on consent (such as marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

Children & Minors

The 4six platform is strictly intended for adults aged 21 years and above. 4six does not knowingly collect, store, or process personal data from any individual under the age of 21.

During the account registration process, 4six requires users to confirm that they are aged 21 or above. Age verification is enforced through the KYC process, which requires submission of a government-issued identity document confirming date of birth before withdrawal access is granted.

If you are a parent or guardian and you believe that a minor in your care has registered an account on the 4six platform, please contact our support team immediately at [email protected]. We will investigate and action the matter as a priority.

Third-Party Links

The 4six platform does not include links to third-party websites as a general practice. In the limited circumstances where a reference to an external service or provider is made (for example, a game studio's terms or a payment provider's own terms of service), please be aware that 4six has no control over the privacy practices of those external parties.

This Privacy Policy applies exclusively to the 4six platform and the personal data collected by 4six in connection with its own services. If you navigate to any third-party website or service from the 4six platform, the privacy policy of that third party will govern the collection and use of your data on their platform. 4six accepts no responsibility or liability for the data practices of third-party services.

Game content provided by third-party studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) is delivered within the 4six platform environment. Limited technical session data is shared with these providers for the purpose of operating game mechanics. These providers are bound by contractual obligations that restrict the use of any data received from 4six to the sole purpose of game delivery.

Policy Updates

4six reserves the right to update, revise, or replace this Privacy Policy at any time. All changes will be reflected in the updated version of this page, and the "Last Updated" date at the top of this document will be revised accordingly.

Where changes to this policy are material — meaning they affect the fundamental ways in which we collect, use, or share your personal data — 4six will take reasonable steps to notify registered users of the change. This may include a notification to your registered email address or a prominent notice on the 4six platform homepage for a defined period following the update.

Minor updates, including clarifications of existing provisions, corrections of typographical errors, and updates to reflect changes in payment method availability or game studio partnerships, may be made without a separate notification. Your continued use of the 4six platform following publication of an updated Privacy Policy constitutes your acceptance of the revised terms.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 4six handles your personal data, please contact the 4six support team directly. We are committed to responding promptly and transparently to all privacy-related enquiries.

• Email: [email protected] (plain text — not a clickable link)
• Availability: 24 hours a day, 7 days a week
• Languages: English and Bengali
• Response Time: Privacy-related requests are acknowledged within 5 business days and actioned within 30 days.

When contacting us about a data rights request, please state clearly in your message: your registered account username, the specific right you wish to exercise (e.g., access, rectification, erasure), and a brief description of the data concerned. This will help us direct your request to the correct team and process it without unnecessary delay.