y6bit Privacy Policy — How We Handle Your Data

1. Introduction and Scope

y6bit ("we", "us", "our", "the Platform") is committed to protecting the privacy of all individuals who access or use the y6bit online casino and sports betting platform at https://y6bit.org and its associated services (collectively, "the Service"). This Privacy Policy ("Policy") describes how y6bit collects, uses, stores, shares, and protects personal data in connection with the Service. It applies to all users of the Service, including registered account holders and visitors who browse the platform without registering.

By using the Service, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. If you do not agree to this Policy, you must not use the Service. y6bit reserves the right to update this Policy at any time. When material changes are made, the updated Policy will be posted on this page with a revised effective date. Your continued use of the Service after such changes constitutes your acceptance of the revised Policy.

2. Personal Data We Collect

y6bit collects personal data from you in the following categories, depending on how you interact with the Service:

• Registration data: your full legal name, date of birth, registered mobile number (Bangladesh), and chosen account credentials. This data is collected when you create your y6bit account and is required to establish and verify your identity.
• Identity verification (KYC) data: government-issued identity document details, selfie or photograph, and proof of address, collected when we are required to verify your identity under our KYC obligations or when you submit a withdrawal request above applicable thresholds.
• Payment data: transaction amounts, payment method identifiers (e.g. the mobile number associated with your bKash or Nagad account), and transaction timestamps. y6bit does not store complete payment credentials such as full card numbers or mobile banking PINs.
• Technical and device data: your IP address, device type and operating system, browser type and version, session duration, pages visited, and referring URL. This data is collected automatically when you access the Service and is used for security monitoring, fraud prevention, and platform performance analysis.
• Gaming activity data: game history, bet amounts, wagering patterns, win/loss records, and session data. This data is retained for account management, dispute resolution, responsible gaming monitoring, and regulatory compliance purposes.
• Communications data: the content of messages you send to y6bit through support channels, including any personal data you voluntarily include in those messages. This data is retained to manage your support request and to maintain a record of our interaction.

3. How We Use Your Personal Data

y6bit uses the personal data described in Section 2 for the following purposes:

• Account management: to create, maintain, and administer your y6bit account; to verify your identity and age as required by our responsible gaming and KYC obligations; and to process your deposits, withdrawals, and bonus entitlements.
• Security and fraud prevention: to monitor for unauthorised account access, detect and prevent fraudulent transactions, identify patterns consistent with money laundering or other financial crime, and enforce our Terms & Conditions.
• Platform improvement: to analyse aggregate usage patterns, identify technical issues, and improve the performance, reliability, and user experience of the y6bit platform. Analytics performed for this purpose use aggregated or pseudonymised data wherever possible.
• Responsible gaming: to monitor gaming activity for indicators of problem gambling behaviour, to apply account-level responsible gaming tools at your request, and to fulfil our obligations to protect players from harm.
• Legal and regulatory compliance: to fulfil our obligations under applicable law, including responding to lawful requests from competent authorities, complying with anti-money-laundering requirements, and retaining records for legally mandated retention periods.

4. Data Sharing and Third Parties

y6bit does not sell, rent, or trade your personal data to any third party for their own commercial purposes. y6bit may share personal data only in the following limited and defined circumstances:

• Payment processors: y6bit shares necessary payment data with licensed payment processing partners — including bKash, Nagad, Rocket, and banking partners — solely to process your deposits and withdrawals. These partners process your data under their own privacy policies and are not permitted to use it for any other purpose.
• Game providers: game activity data may be shared with y6bit's licensed game providers — including Pragmatic Play, Evolution Gaming, Spribe, and others — to the extent necessary for the delivery and integrity of the games. Game providers are bound by contractual data processing obligations.
• Legal authorities: y6bit may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required to do so by applicable law, court order, or lawful regulatory requirement. y6bit will, where legally permitted, notify you before making such a disclosure.
• Business transfers: in the event of a merger, acquisition, or sale of all or part of y6bit's business, personal data held by y6bit may be transferred to the acquiring entity as part of that transaction. Affected users will be notified in advance where practicable.

5. Cookies and Tracking Technologies

y6bit uses cookies and similar tracking technologies to operate the platform, maintain your session, remember your preferences, and analyse platform usage. The following types of cookies are used: (a) Essential cookies — strictly necessary for the operation of the Service, including session management and security. These cookies cannot be disabled without affecting core platform functionality. (b) Analytics cookies — used to collect aggregated information about how users interact with the platform. This data helps y6bit identify performance issues and improve the user experience. Analytics cookies are set only where permitted by applicable law and your browser settings.

You can manage or disable cookies through your browser settings. Please note that disabling essential cookies will affect your ability to use certain features of the y6bit platform, including logging in. y6bit does not use third-party advertising cookies or behavioural tracking cookies for the purpose of serving targeted advertisements.

6. Data Retention

y6bit retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, including for satisfying any legal, regulatory, accounting, or reporting obligations. The following general retention principles apply:

• Account data is retained for the duration of your active account relationship with y6bit. Following account closure, account data is retained for a minimum period required by applicable anti-money-laundering and financial record-keeping regulations.
• Transaction and payment records are retained for the legally mandated minimum period under applicable financial regulations, which may be up to seven years from the date of the transaction.
• Communications records (support correspondence) are retained for a period of up to three years from the date of the final communication, to enable dispute resolution and quality assurance review.
• Where personal data is no longer required and retention is not mandated by law, y6bit will securely delete or anonymise that data using appropriate technical methods.

7. Data Security

y6bit takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction. These measures include SSL/TLS encryption of all data transmitted between your device and our servers, restricted access controls for staff handling personal data, regular security assessments of platform infrastructure, and secure storage protocols for all sensitive data categories.

Despite these measures, no internet-based platform can guarantee absolute security. In the event of a data breach that is reasonably likely to result in a risk to your rights or interests, y6bit will notify affected users in accordance with applicable notification obligations. If you suspect that your account has been subject to unauthorised access, please contact y6bit support immediately via the email address listed in the footer of this website.

8. Your Rights Regarding Personal Data

As a y6bit user, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact the y6bit support team at the email address listed in the footer of this website. y6bit will respond to all verified data subject requests within a reasonable timeframe and in accordance with applicable law:

• Right of access: you have the right to request a copy of the personal data y6bit holds about you, together with information about how that data is used and with whom it has been shared.
• Right of rectification: if any personal data y6bit holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed.
• Right of erasure: subject to our legal retention obligations, you have the right to request that y6bit delete your personal data. Note that certain data cannot be deleted where retention is required by applicable law or where deletion would affect our ability to fulfil regulatory obligations.
• Right to restrict processing: in certain circumstances, you have the right to request that y6bit restrict the processing of your personal data — for example, while a rectification request is being assessed.
• Right to object: you have the right to object to y6bit's processing of your personal data where that processing is based on our legitimate interests. Where you object to processing for direct marketing purposes, y6bit will cease that processing immediately.

9. Children and Minors

The y6bit platform is strictly intended for adults aged 21 and above. y6bit does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the y6bit platform, please contact us immediately at the support email address listed in the footer of this website.

y6bit uses age verification measures at account registration, including date-of-birth collection and, where required, formal identity document verification, to prevent minors from accessing the Service. These measures are part of our broader responsible gaming commitment, which is detailed in our Responsible Gaming policy.

10. International Data Transfers

As a digital platform serving users in Bangladesh, y6bit's primary data processing activities take place within the jurisdiction in which y6bit is registered and operates. However, some of y6bit's service providers and technology partners may be located in other countries, and as a result, your personal data may in some circumstances be transferred to and processed in countries outside Bangladesh. Where such transfers occur, y6bit ensures that appropriate safeguards are in place to protect your personal data in accordance with this Policy and applicable law. These safeguards include contractual data processing agreements with all relevant third parties.

• Obtain your personal data by automated means for the purpose of profiling or building a marketing database without your consent.
• Use your personal data in any way that would constitute a breach of applicable data protection law.
• Share your personal data with advertisers, data brokers, or marketing companies for their own commercial use.
• Retain your personal data for longer than is necessary to fulfil the purposes described in this Policy or as required by applicable law.

11. Changes to This Privacy Policy

y6bit reserves the right to update or amend this Privacy Policy at any time. When we make material changes to this Policy, we will update the effective date shown at the top of this page and, where appropriate, notify active account holders via a notice on the platform. We encourage you to review this Policy periodically to stay informed about how we are protecting your personal data.

Your continued use of the y6bit platform after any such changes have been posted constitutes your acceptance of the revised Privacy Policy. If you do not agree to the revised Policy, you must discontinue use of the Service and may request account closure by contacting y6bit support at the email address listed in the footer of this website.

12. Contact and Data Enquiries

If you have any questions about this Privacy Policy, wish to exercise any of your data rights described in Section 8, want to submit a data subject access request, or have a concern about how y6bit handles your personal data, please contact the y6bit support team at the email address displayed in the footer of this website. y6bit is committed to addressing all privacy-related enquiries promptly and transparently. For general support enquiries unrelated to data privacy, the same support email address applies.

13. Your Commitment to Data Accuracy

You are responsible for ensuring that all personal data you provide to y6bit is accurate, current, and complete at all times. If your personal details change — for example, if you change your registered mobile number or your name changes following a legal name change — you are responsible for updating your account information promptly. Providing false, inaccurate, or misleading personal data to y6bit is a breach of our Terms & Conditions and may result in account suspension or termination. y6bit is not liable for any consequences arising from inaccurate personal data provided by you.