Privacy Policy

Introduction and Scope

This Privacy Policy ("Policy") describes how sox6s ("we", "us", "our") collects, processes, stores, and discloses personal data relating to individuals who visit or use the sox6s website and its associated online casino and sports betting services (collectively, the "Platform"). This Policy applies to all users of the Platform regardless of location, with particular relevance to players based in Bangladesh. By creating a sox6s account or using the Platform in any way, you acknowledge that you have read this Policy and consent to the processing of your personal data as described herein.

sox6s reserves the right to update this Policy at any time. We will notify registered players of material changes by email or via a prominent notice on the Platform before changes take effect. The current version of this Policy is always available on this page, with the effective date shown at the top. Continued use of the Platform after a Policy update constitutes acceptance of the revised terms.

Personal Data We Collect

sox6s collects personal data from players across several categories. The table below summarises the main categories, examples of data within each category, and the primary purpose for collecting them:

How We Collect Personal Data

sox6s collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal request, contact our support team, or update your account profile
• Automatically — through cookies, web beacons, and server logs that record your IP address, device information, pages visited, and interaction patterns when you use the Platform
• From third-party payment providers — bKash, Nagad, Rocket, Upay, Visa, and Mastercard may share transaction confirmation data with sox6s as part of payment processing
• From identity verification services — where sox6s uses a third-party provider to assist with KYC document verification, that provider may share verification results with us
• From fraud prevention and AML screening services — industry-standard databases used to cross-check identity data and flag activity associated with financial crime

sox6s does not purchase personal data from data brokers or marketing list providers. All personal data we hold has been provided directly or collected automatically through your use of the Platform.

Legal Bases for Processing

sox6s processes personal data only where a valid legal basis exists for that processing. The legal bases we rely upon are as follows:

• Contractual necessity — processing your identity, contact, and financial data is necessary to provide the gaming services you have requested, to verify your identity, and to process your deposits and withdrawals
• Legal obligation — certain processing activities (such as KYC, AML screening, and record-keeping) are required by applicable law or regulatory guidance and sox6s must carry them out regardless of your preferences
• Legitimate interests — sox6s processes technical and gaming activity data to detect fraud, maintain platform security, improve the service, and identify patterns that may indicate problem gambling behaviour, provided this processing does not override your fundamental rights
• Consent — where sox6s sends you marketing communications or promotional offers by email, this is done on the basis of your consent, which you may withdraw at any time by contacting support or using the unsubscribe link in any marketing email

Where sox6s relies on legitimate interests as a legal basis, we carry out a balancing assessment to ensure that our interests do not unfairly override your rights and interests. You have the right to object to processing based on legitimate interests by contacting our support team.

Cookies and Tracking Technologies

sox6s uses cookies and similar tracking technologies on the Platform. Cookies are small text files placed on your device that allow us to recognise your device, remember your preferences, maintain your logged-in session, and analyse how the Platform is used. We use the following categories of cookies:

Cookie categories in use:

• Strictly necessary cookies — essential for the Platform to function; these cannot be disabled without breaking core functionality such as login sessions and shopping cart equivalents
• Performance and analytics cookies — collect aggregated, anonymised data about how players use the Platform (e.g. which pages are visited most frequently, session durations) to help us improve the service
• Functionality cookies — remember your preferences and settings (such as language preference and display choices) so you do not need to re-enter them on each visit

Disclosure of Personal Data to Third Parties

sox6s does not sell, rent, or trade personal data. We disclose personal data to third parties only in the following circumstances, and only to the extent necessary for the specified purpose:

• Payment processing partners — bKash, Nagad, Rocket, Upay, Visa, and Mastercard receive the transaction data necessary to execute your deposits and withdrawals. These partners operate under their own privacy policies and comply with applicable financial regulations.
• Identity verification and KYC service providers — where sox6s uses a third-party service to assist with document verification, that provider receives the identity documents and verification data you submit during the KYC process
• Game content providers — Pragmatic Play, Evolution Gaming, Ezugi, Spribe, and other licensed game studios receive anonymised session data necessary for their games to function correctly on the Platform; these providers do not receive your name, contact details, or financial data
• Fraud prevention and AML compliance services — sox6s may cross-reference your identity data against industry-standard screening databases to comply with anti-money laundering obligations and to detect fraudulent activity
• Regulatory and law enforcement authorities — sox6s may disclose personal data to competent authorities where required to do so by law, court order, or regulatory instruction; we will notify you of such disclosure where we are legally permitted to do so

All third parties to whom sox6s discloses personal data are required to maintain appropriate technical and organisational security measures and to process that data only for the purposes specified by sox6s.

Your Data Rights

As a data subject, you have the following rights in respect of the personal data sox6s holds about you. To exercise any of these rights, please contact the sox6s support team using the email address shown in the site footer:

• Right of access — you may request a copy of the personal data sox6s holds about you, together with information about how that data is used and the categories of third parties with whom it has been shared
• Right to rectification — if any personal data sox6s holds about you is inaccurate or incomplete, you may request that it be corrected or completed
• Right to erasure — you may request that sox6s delete your personal data where it is no longer needed for the purpose for which it was collected, where you have withdrawn consent, or where the processing is unlawful; this right is subject to any legal retention obligations sox6s must comply with
• Right to restriction — you may ask sox6s to restrict its processing of your personal data in certain circumstances, for example while a rectification request is being considered
• Right to data portability — where processing is based on consent or contractual necessity and carried out by automated means, you may request a copy of your personal data in a structured, commonly used, machine-readable format
• Right to object — you may object to processing based on legitimate interests or for direct marketing purposes; where you object to direct marketing, sox6s will stop processing your data for that purpose immediately

Data Retention

sox6s retains personal data only for as long as necessary to fulfil the purpose for which it was collected, to comply with applicable legal and regulatory obligations, and to resolve any disputes or enforce our agreements. The following general retention periods apply: account registration and identity data is retained for the duration of the account relationship and for a minimum of five years after account closure to satisfy AML record-keeping requirements; gaming activity and transaction records are retained for a minimum of five years from the date of the relevant activity; marketing consent records are retained for the duration of the consent period and for twelve months following withdrawal of consent; technical log data (IP addresses, session logs) is retained for a maximum of twelve months and then automatically deleted or anonymised.

When personal data is no longer required, sox6s securely destroys or anonymises it using industry-standard data destruction methods. Anonymised data (data that can no longer be linked to an identifiable individual) may be retained indefinitely for statistical and analytical purposes.

Security Measures

sox6s implements the following technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, and destruction:

• 256-bit SSL encryption for all data transmitted between your device and the Platform, ensuring that data in transit cannot be intercepted in a readable form
• Encryption at rest for sensitive personal data stored on sox6s servers, including identity documents and financial records
• Role-based access controls ensuring that personal data is accessible only to sox6s staff members who require it to perform their specific job function, with all access logged and periodically audited
• Regular security assessments and penetration testing to identify and remediate vulnerabilities in the Platform's infrastructure before they can be exploited

Children and Minors

sox6s strictly prohibits the use of the Platform by any person under the age of 21. We do not knowingly collect, process, or store personal data relating to individuals under 21 years of age. If sox6s becomes aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and have reason to believe that a person under 21 has registered on the Platform, please contact our support team immediately using the email address shown in the site footer.

Age verification is a mandatory step in the sox6s account registration and KYC process. Players are required to submit valid identity documents confirming they are 21 years of age or older before withdrawals are processed and, in some cases, before certain game types or higher deposit limits become available.

International Data Transfers

sox6s operates primarily to serve players in Bangladesh. Some of our service providers — including game studios, payment infrastructure partners, and KYC verification vendors — may process personal data on servers located outside Bangladesh. When personal data is transferred internationally, sox6s ensures that appropriate safeguards are in place, including the use of contractual data protection clauses that require the recipient to maintain standards equivalent to those described in this Policy.

• Right to access your data
• Right to correct inaccurate data
• Right to request deletion of your data
• Right to restrict or object to processing
• Right to data portability

To exercise any of the above rights, contact our support team at the email address shown in the site footer. We will respond to all verifiable requests within 30 days. In some cases we may need to verify your identity before processing a data rights request.

Changes to This Policy

sox6s reviews this Privacy Policy regularly and may update it to reflect changes in our data processing practices, applicable law, or the services we offer. When we make material changes, we will notify registered players by email and post a prominent notice on the Platform at least 7 days before the changes take effect. The updated Policy will always be available on this page with the revised effective date shown at the top.

Your continued use of the Platform after any update to this Policy constitutes your acceptance of the revised Policy. If you disagree with any change, you should stop using the Platform and may request closure of your account by contacting our support team.

Contact Us About Privacy

If you have any questions, concerns, or complaints about this Privacy Policy or about how sox6s processes your personal data, please contact our support team using the email address displayed in the footer of the Platform. We take all privacy enquiries seriously and aim to respond within 24 hours (Bangladesh Standard Time, UTC+6). For formal data rights requests (access, erasure, portability, etc.), please state clearly in your message which right you wish to exercise and include your registered account email address so we can verify your identity efficiently.

sox6s is committed to resolving all privacy-related concerns promptly and fairly. If after contacting us you feel your concern has not been addressed satisfactorily, you retain the right to escalate your complaint to the relevant data protection authority in your jurisdiction.