xis6 Privacy Policy — How We Handle Your Data

This Privacy Policy ("Policy") describes how xis6 ("we", "us", "our") collects, uses, stores, shares, and protects personal information about you when you access or use the xis6 website and any associated services, including casino games, sports betting, live dealer tables, crash games, and payment services (collectively, the "Platform"). This Policy applies to all players, registered users, and visitors to the xis6 Platform, including those accessing the Platform from Bangladesh.

By creating an account with xis6 or by using any part of the xis6 Platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and use of your personal data as described herein. If you do not agree with this Policy, you must not use the xis6 Platform. Please read this Policy carefully and contact us at [email protected] if you have any questions before using the Platform.

xis6 collects personal data from you in two principal ways: information you provide directly to us, and information collected automatically when you use the Platform. The categories of personal data we collect include:

• Registration and identity information: your full name, mobile number, date of birth, and any identity documents (national ID card, passport) submitted as part of our KYC verification process.
• Financial information: the mobile wallet numbers (bKash, Nagad, Rocket, Upay) or bank account details you use to deposit or withdraw funds on xis6, and records of all transactions including deposit amounts, withdrawal amounts, dates, and payment reference numbers.
• Technical and device data: your IP address, browser type and version, device type (mobile, tablet), operating system, referring URL, pages visited on xis6, time and date of visits, and click-path data. This data is collected automatically via server logs and cookies.
• Gaming activity data: all bets placed, games played, game results, bonus activations, bonus usage, and session duration data across all xis6 products including casino games, sports betting, and crash games.
• Communications data: records of all live chat support interactions, email correspondence with xis6, and any feedback or complaints you submit to us. We retain these records to ensure quality of service and for dispute resolution purposes.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data unless specifically required by law or to support our responsible gaming obligations (for example, recording a player's self-declared problem gambling status in connection with a self-exclusion request).

xis6 uses your personal data only for lawful purposes that are necessary to provide and improve the Platform and its services. The specific purposes for which we process your data include:

• Account management: to create, verify, maintain, and administer your xis6 player account, including processing your registration, verifying your identity via KYC, and managing your account settings and preferences.
• Service delivery: to provide access to casino games, sports betting markets, live dealer tables, crash games, and all other features of the xis6 Platform, and to process your deposits and withdrawals via bKash, Nagad, Rocket, and other supported payment methods.
• Fraud prevention and security: to detect, investigate, and prevent fraudulent activity, money laundering, account abuse, bonus fraud, and other prohibited conduct as defined in our Terms and Conditions, and to maintain the integrity of the xis6 Platform.
• Legal and regulatory compliance: to comply with applicable anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, and any other legal obligations applicable to xis6's operations, including responding to lawful requests from regulatory or law enforcement authorities.
• Responsible gaming: to monitor your gaming activity for indicators of problem gambling behaviour, to administer responsible gaming tools such as deposit limits, session reminders, and self-exclusion, and to enforce minimum age restrictions.
• Communications and marketing: to send you transactional communications (such as deposit confirmations, withdrawal notifications, and account alerts), and — where you have given your consent — to send you promotional communications about bonuses, new games, and special offers. You may withdraw your consent to marketing communications at any time by contacting support.

xis6 does not use your personal data for automated decision-making that produces legal effects concerning you or that similarly significantly affects you, except where such processing is necessary for fraud prevention or is required by applicable law.

xis6 processes your personal data on one or more of the following legal bases, depending on the specific purpose of processing:

• Contractual necessity: processing that is necessary to perform the contract between you and xis6 — that is, to provide the Platform services you have requested, including account creation, game access, and payment processing.
• Legal obligation: processing that is required to comply with applicable AML regulations, KYC requirements, data retention laws, and responses to lawful authority requests.
• Legitimate interests: processing carried out in xis6's legitimate interests, including fraud prevention, platform security, responsible gaming monitoring, and improvement of Platform performance, where those interests are not overridden by your privacy rights.
• Consent: where we rely on your consent to send marketing communications or to process data for optional features. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before your withdrawal.

xis6 does not sell your personal data to third parties. We may share your personal data with the following categories of recipients, but only to the extent necessary for the purposes described in this Policy:

• Game and technology providers: xis6's game library is powered by third-party providers including Pragmatic Play, Evolution Gaming, Ezugi, Spribe, NetEnt, and Microgaming. These providers may receive session-level data (such as game ID, bet amount, and result) necessary to deliver the game to your device. They are contractually prohibited from using this data for any purpose other than service delivery.
• Payment processors: your mobile wallet details (bKash, Nagad, Rocket) and transaction data are shared with our payment processing partners solely for the purpose of executing your deposit and withdrawal transactions. Payment processors are required to handle your data in accordance with their own applicable data protection obligations.
• Identity verification services: during KYC verification, identity documents you submit may be processed by third-party identity verification service providers. These providers are bound by strict confidentiality obligations and data processing agreements with xis6.
• Regulatory and law enforcement authorities: xis6 may disclose your personal data to relevant government, regulatory, or law enforcement authorities where required to do so by applicable law, court order, or in connection with the investigation of suspected fraud or other criminal activity.

In each case where we share personal data with third parties, we take appropriate contractual and technical measures to ensure that your data is handled securely and in accordance with this Policy. We do not permit our third-party partners to use your personal data for their own marketing or commercial purposes.

xis6 uses cookies and similar tracking technologies (collectively, "Cookies") on the Platform. Cookies are small data files stored on your device that help us provide a better, more personalised experience. The types of Cookies we use include:

• Essential cookies: necessary for the basic operation of the Platform, including session management, login authentication, and maintaining your account state during a gaming session. These cookies cannot be disabled without impairing the functionality of the Platform.
• Analytics cookies: used to collect aggregated, anonymised information about how visitors use the Platform, such as which pages are visited most frequently and where users navigate from. This data helps us improve the structure and content of xis6. Analytics data is not linked to individual player identities.
• Functional cookies: used to remember your preferences and settings (such as your preferred language) so that you do not have to re-enter them each time you visit the Platform.

You may control or disable non-essential Cookies through your browser settings. Please be aware that disabling certain Cookies may affect the functionality of the xis6 Platform and your ability to access some features. xis6 does not use Cookies to track your activity on third-party websites or to build advertising profiles about you.

xis6 retains your personal data for as long as your player account remains active and for such additional period as is necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. The specific retention periods we apply are as follows: account and identity data is retained for the duration of your account and for a minimum of five (5) years after account closure, in accordance with AML and KYC record-keeping obligations. Financial transaction records are retained for a minimum of five (5) years from the date of each transaction. Gaming activity records are retained for three (3) years from the date of activity. Communications records (live chat and email) are retained for two (2) years from the date of the interaction.

When your personal data is no longer required for the purposes described above, xis6 will securely delete or anonymise it. In some cases it may not be possible to delete data immediately (for example, where data is stored in backup archives), in which case xis6 will securely isolate the data and protect it from any further processing until deletion is possible.

xis6 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include SSL (Secure Sockets Layer) encryption for all data transmitted between your device and the xis6 servers; access controls ensuring that only authorised personnel can access personal data, on a need-to-know basis; secure password hashing for stored account credentials; regular security audits and vulnerability assessments of our systems; and data minimisation practices to ensure we only collect and retain data that is genuinely necessary.

While xis6 takes all reasonable steps to protect your data, no internet-based platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, xis6 will notify affected players and take all necessary remedial steps as promptly as reasonably practicable. If you believe your xis6 account has been compromised, please contact our support team immediately at [email protected].

Please note that some of these rights are not absolute. In certain cases xis6 may be entitled to refuse a request, for example where complying would interfere with our legal obligations (such as AML record-keeping requirements) or where the right does not apply to the type of processing concerned. We will always explain our reasons if we are unable to fulfil a request.

The xis6 Platform is strictly intended for use by adults aged 21 years and above. xis6 does not knowingly collect personal data from individuals under the age of 21. If you are under 21, you must not use the xis6 Platform or provide any personal data to xis6. If xis6 becomes aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated account. If you believe a minor has registered on xis6, please contact us immediately at [email protected].

The xis6 Platform may contain references to or integrations with third-party services, including game providers and payment processors. These third parties operate under their own privacy policies and data practices, which are independent of xis6. xis6 is not responsible for the privacy practices or content of any third-party service. We encourage you to review the privacy policies of any third-party service you interact with in connection with your use of the xis6 Platform. The inclusion of a third-party provider on our Platform does not constitute an endorsement of that provider's privacy practices.

xis6 reserves the right to update or amend this Privacy Policy at any time. When we make material changes to this Policy, we will update the "Last updated" date at the top of this page. Where the changes are significant, we may also notify registered players via their registered mobile number or via an in-platform notification on their next login. We encourage you to review this Policy periodically to stay informed of how xis6 handles your personal data.

Your continued use of the xis6 Platform after any changes to this Privacy Policy have been posted constitutes your acceptance of the revised Policy. If you do not agree with the revised Policy, you must stop using the xis6 Platform and may request that your account be closed and your data deleted (subject to our legal retention obligations as described in Section 6 above).

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way xis6 handles your personal data, please contact the xis6 data support team. We are committed to resolving all privacy-related enquiries promptly and transparently. For formal written requests regarding your data rights (access, rectification, erasure, portability, or objection), please submit your request in writing to our support email so that we can process it securely and keep a record of our response.