sxi6 Privacy Policy — How We Protect Your Data

1 Introduction

This Privacy Policy ("Policy") describes how sxi6 ("sxi6", "we", "us", "our") collects, uses, stores, shares, and protects personal data relating to individuals ("you", "Player", "User") who visit or register an account on the sxi6 online casino and sports betting platform available at sxi6.io and all associated sub-pages and services (the "Platform").

sxi6 is committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection principles. By registering an account on sxi6, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein.

This Policy should be read in conjunction with the sxi6 Terms and Conditions and the Responsible Gaming Policy, both of which are available on the Platform. Where terms used in this Policy are defined in the Terms and Conditions, those definitions apply here unless otherwise stated.

2 Data Controller

For the purposes of this Privacy Policy, sxi6 acts as the data controller in respect of the personal data collected from players who register accounts on the Platform. As data controller, sxi6 determines the purposes for which personal data is processed and the means by which that processing is carried out.

If you have any questions about this Policy, about the data sxi6 holds about you, or about how your data is processed, you may contact the sxi6 Data Privacy team at the details provided in Section 15 of this Policy.

3 Data We Collect

sxi6 collects personal data in the categories described below. The specific data collected in each category depends on how you interact with the Platform.

3.1 Registration and Identity Data

When you create an account on sxi6, we collect the information you provide during the registration process, including:

• Full legal name
• Date of birth
• Residential address (city, district, and division within Bangladesh)
• Email address
• Mobile phone number
• Username and encrypted password
• Preferred currency (BDT)

3.2 Identity Verification (KYC) Data

To comply with anti-money-laundering (AML) requirements and to verify that players meet the minimum age requirement of 21 years, sxi6 may request and retain copies of:

• Government-issued photo identification (National ID card, passport, or driving licence)
• Proof of address (utility bill, bank statement, or similar document dated within the last three months)
• Proof of payment method ownership (screenshot or confirmation from bKash, Nagad, Rocket, or other registered payment service)
• Source of funds documentation (where required by AML procedures)

3.3 Financial Transaction Data

sxi6 records data associated with deposits, withdrawals, and bonus transactions, including:

• Deposit amounts and timestamps (in BDT)
• Withdrawal requests, amounts, and processing status
• Payment method type (e.g., bKash, Nagad, Rocket, Upay, BRAC Bank)
• Transaction reference numbers issued by payment service providers
• Bonus credits received and wagering progress

sxi6 does not store your full mobile wallet PIN, bank account credentials, or card numbers. Payment credentials are entered directly on the relevant payment provider's interface and are governed by that provider's own privacy and security policies.

3.4 Gameplay and Betting Data

The Platform automatically records data relating to your use of games and betting markets, including:

• Games played (slots, live casino, sports betting, crash games, colour prediction games)
• Bet amounts, outcomes, and timestamps
• Session duration and frequency of play
• Responsible gaming tool settings (deposit limits, loss limits, self-exclusion status)

3.5 Technical and Device Data

When you access the Platform, sxi6 automatically collects technical data including:

• IP address
• Device type, operating system, and browser type
• Screen resolution and device identifiers
• Referring URL and pages visited on the Platform
• Time zone setting (Bangladesh Standard Time, UTC+6)
• Cookie identifiers and session tokens

3.6 Communications Data

If you contact sxi6 support, submit a complaint, or correspond with us by email, live chat, or any other channel, we retain a record of that communication including the content of the message, the date and time, and any attachments you provide.

4 How We Collect Data

sxi6 collects personal data through the following channels:

5 Purpose and Legal Basis for Processing

sxi6 processes your personal data only for specific, lawful purposes. The table below sets out the principal purposes for which your data is processed and the legal basis on which that processing rests.

6 Data Sharing

sxi6 does not sell your personal data to third parties. We may share your personal data with carefully selected third parties in the following limited circumstances:

6.1 Payment Service Providers

To process deposits and withdrawals, sxi6 shares necessary transaction data with payment service providers operating in Bangladesh, including bKash, Nagad, Rocket, Upay, SureCash, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank. Data shared is limited to what is required to complete the specific transaction.

6.2 Game and Software Providers

Game studios and software providers — including Evolution Gaming, Pragmatic Play, Spribe, NetEnt, Microgaming, Ezugi, and Play'n GO — receive player session data and bet data necessary to deliver their games and settle rounds. These providers operate under their own privacy and security frameworks and are contractually obligated to handle data responsibly.

6.3 Identity Verification (KYC) Partners

sxi6 uses licensed third-party KYC and identity verification service providers to authenticate player-submitted documents. These providers process identity data solely for the purpose of verification and are bound by strict data processing agreements.

6.4 Fraud Prevention and Security Partners

To protect the Platform and its players from fraud, account takeover, and money laundering, sxi6 shares relevant technical and behavioural data (such as IP addresses and device identifiers) with specialist fraud prevention and cybersecurity vendors.

6.5 Legal and Regulatory Authorities

sxi6 may disclose personal data to law enforcement agencies, regulatory bodies, tax authorities, or courts where required to do so by applicable law, court order, or regulatory directive. Such disclosures are made only to the extent strictly required by the relevant legal obligation.

6.6 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of sxi6's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material change to this Privacy Policy that results from it.

7 International Data Transfers

Some of sxi6's third-party service providers — including certain game studios and KYC verification partners — operate servers located outside Bangladesh. Where your personal data is transferred to a country that may not offer an equivalent level of data protection, sxi6 ensures that appropriate safeguards are in place, including contractual data processing agreements that impose data protection obligations on the receiving party consistent with the standards described in this Policy.

By registering an account on sxi6, you acknowledge and consent to the transfer of your personal data to these service providers subject to the safeguards described above.

8 Data Retention

sxi6 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or for as long as required by applicable law. The principal retention periods applied by sxi6 are as follows:

When retention periods expire, personal data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual. Anonymised aggregated data may be retained indefinitely for analytical purposes.

9 Data Security

sxi6 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• Transport encryption: All data in transit between your device and sxi6 servers is encrypted using 256-bit SSL/TLS protocols.
• Password security: Account passwords are stored using a strong one-way cryptographic hash function. sxi6 staff cannot retrieve your plain-text password.
• Access controls: Access to systems containing personal data is restricted to authorised personnel on a strict need-to-know basis. Access is logged and regularly audited.
• Infrastructure security: sxi6 servers are hosted in secure, access-controlled data centre environments with continuous intrusion detection monitoring.
• Vulnerability management: sxi6 conducts regular security assessments and applies software patches in a timely manner to address identified vulnerabilities.
• Incident response: sxi6 maintains a data breach response plan. In the event of a data breach that poses a risk to your rights, affected players will be notified without undue delay.

While sxi6 takes all reasonable steps to protect your data, no method of transmission over the internet or electronic storage is completely infallible. Players are encouraged to use strong, unique passwords for their sxi6 accounts and to enable any available two-factor authentication features.

10 Cookies and Tracking Technologies

sxi6 uses cookies — small text files stored on your device — and similar technologies (such as local storage tokens and session identifiers) to operate the Platform, maintain your logged-in session, and understand aggregate usage patterns. The types of cookies used by sxi6 are described below.

sxi6 does not use cookies to serve third-party advertising, track your browsing activity on other websites, or build advertising profiles. You may manage cookie settings through your browser preferences. Note that disabling strictly necessary cookies may affect the functionality of the Platform, including your ability to remain logged in.

11 Your Privacy Rights

As a registered player on sxi6, you hold the following rights with respect to the personal data that sxi6 holds about you. To exercise any of these rights, please contact the sxi6 support team using the details in Section 15.

• Right of Access: You may request a copy of the personal data that sxi6 holds about you. sxi6 will provide this within 30 days of receiving a verified request.
• Right to Rectification: If any of the personal data sxi6 holds about you is inaccurate or incomplete, you may request that it be corrected. Basic account details (name, address, mobile number) can be updated directly from your account settings.
• Right to Erasure: You may request the deletion of your personal data. This right is subject to certain limitations — sxi6 is required by law to retain KYC and financial transaction records for a minimum of five years, and erasure requests will be fulfilled only in respect of data that is not subject to such retention obligations.
• Right to Restriction: You may request that sxi6 restrict the processing of your personal data in certain circumstances, such as while the accuracy of the data is being contested.
• Right to Object: You may object to the processing of your personal data where sxi6 relies on legitimate interests as the legal basis for that processing.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to Data Portability: You may request a copy of personal data you have provided to sxi6 in a structured, commonly used, machine-readable format.

12 Minors and Age Restriction

sxi6 is strictly a platform for adults aged 21 and above. The Platform is not directed at, and does not knowingly collect personal data from, persons under the age of 21. Registration on sxi6 requires you to confirm that you meet the minimum age requirement.

Where sxi6 discovers or reasonably suspects that a registered account belongs to a person under the age of 21, the account will be suspended immediately, all balances will be reviewed, and any personal data associated with the underage account will be deleted as soon as practicable, subject only to any legal obligations that require its retention for fraud investigation or AML compliance purposes.

If you are a parent or guardian and believe that a minor in your care has created an account on sxi6, please contact [email protected] immediately so that the account can be investigated and closed.

13 Marketing Communications

With your consent, sxi6 may send you promotional communications by email or SMS regarding new games, deposit bonuses, seasonal promotions (such as Eid specials, BPL cricket season offers, or Pohela Boishakh promotions), and platform updates. These communications will always be in English.

You may opt out of marketing communications at any time by:

• Clicking the unsubscribe link included in any marketing email from sxi6.
• Updating your notification preferences in your account settings.
• Contacting sxi6 support directly at [email protected] with a request to be removed from marketing lists.

Opting out of marketing communications will not affect your receipt of transactional messages such as deposit confirmations, withdrawal notifications, KYC status updates, or responsible gaming alerts — these are required for the operation of your account and cannot be disabled.

14 Changes to This Policy

sxi6 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform features. When material changes are made, sxi6 will notify registered players by email and will display a prominent notice on the Platform for a minimum of seven days prior to the changes taking effect.

The date of the most recent update to this Policy is displayed at the top of this document and in the updated badge above the policy text. Your continued use of the Platform after a revised Policy comes into effect constitutes your acceptance of the updated terms. If you do not accept a revised Policy, you should stop using the Platform and contact support to arrange closure of your account.

15 Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, want to report a data privacy concern, or need to notify sxi6 of a potential data security incident, please contact the sxi6 Data Privacy team using the following details:

• Email: [email protected] (plain text — not a clickable link)
• Support Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)
• Response Time: Data privacy enquiries acknowledged within 5 business days; substantive response within 30 days

For questions about responsible gaming tools and self-exclusion, please visit the dedicated Responsible Gaming page. For the full Terms and Conditions governing your use of the Platform, please see the Terms & Conditions page.