xis6s Privacy Policy — Your Data, Protected

When you register an account, we collect your mobile phone number, date of birth, and a password of your choice. The mobile number is used as your account identifier and primary contact method. Date of birth is collected to verify that you meet the minimum age requirement of 21 years. We may also collect your full name if required during KYC verification.

When you make a deposit or request a withdrawal, we record the payment method used (for example, the bKash or Nagad account number associated with the transaction), the transaction amount, and the date and time of the transaction. xis6s does not store full payment credentials. Payment processing is handled by the respective payment providers (bKash, Nagad, Rocket, Upay), and xis6s receives only the transaction confirmation data required to credit or debit your account balance.

When you use the xis6s platform, we automatically collect certain technical data including your IP address, device type and operating system version, browser type, the pages and features you access, session duration, and error logs. This technical data is used for platform security, fraud detection, and improving the performance of the platform on the device types most commonly used by players in Bangladesh.

xis6s uses cookies and similar browser storage technologies to maintain your login session, remember your preferences, and collect anonymous usage analytics. Session cookies are deleted when you close your browser. Persistent cookies may remain for a defined period to recognise you on subsequent visits. You may disable cookies in your browser settings, though doing so may affect the functionality of some platform features.

Your registration information and account data are used to create and maintain your xis6s account, process your deposits and withdrawals, deliver game results and betting outcomes to your account, and communicate with you about your account status, transactions, and support queries. This is the core operational use of your data and is required for us to provide the platform at all.

We use your personal information to verify your age (minimum 21 years) and identity, to comply with anti-money laundering obligations, to conduct KYC checks when required, and to respond to requests from law enforcement or regulatory authorities where we are legally obligated to do so. Compliance use of your data is non-optional — it is a legal requirement for operating a payment-processing platform.

Technical and usage data is used to detect and investigate suspicious account activity, identify potential fraud or bonus abuse, protect the integrity of the platform, and maintain the security of player accounts and balances. This includes automated pattern analysis to flag activity that deviates from normal player behaviour. Security processing is a core operational necessity and is applied to all accounts.

Anonymised and aggregated usage data is used to understand how players interact with different parts of the xis6s platform, to identify performance bottlenecks on common device and network configurations used in Bangladesh, and to prioritise which features and game categories to develop or improve. This data is processed in aggregate and is not linked to any individual player.

We share limited personal data with third-party service providers who assist in operating the xis6s platform, including payment processors (bKash, Nagad, Rocket, Upay), KYC verification services, fraud detection partners, and cloud infrastructure providers. All service providers are contractually bound to process your data only for the specific purposes for which it is shared and to maintain appropriate security standards. They are not permitted to use your data for their own marketing or other unrelated purposes.

xis6s may be required by law to disclose your personal information to law enforcement agencies, regulatory bodies, or other government authorities. This may include responding to court orders, subpoenas, or official government requests. In such cases, we will disclose only the information that is specifically required by the legal demand and we will, where legally permitted, notify the affected account holder.

All data transmitted between your device and the xis6s platform is encrypted using SSL (Secure Socket Layer) technology. Account data stored on our servers is protected by access controls that limit data access to authorised personnel only. We conduct regular security reviews and apply patches and updates to our infrastructure promptly. Passwords are stored in hashed form and are never accessible in plain text to xis6s staff.

In the event of a data security breach that is likely to result in a risk to the rights or interests of affected players, xis6s will notify the affected account holders without undue delay. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the measures xis6s is taking to address the breach and mitigate its effects. We will also report the breach to the relevant authorities where required by applicable law.

You have the right to request a copy of the personal data xis6s holds about you. Upon a verified request from the registered account holder, we will provide a summary of the personal data associated with your account within a reasonable timeframe.

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update some account information directly through your account settings. For corrections that require manual review — such as corrections to identity documents provided during KYC — please contact xis6s support.

You may request the deletion of your personal data by contacting xis6s support. We will action deletion requests subject to our legal obligations — certain data (such as transaction records and KYC documentation) must be retained for defined periods to meet anti-money laundering and financial compliance requirements. Where deletion of all data is not possible due to these legal obligations, we will delete or anonymise the data that we are not legally required to retain and will explain clearly which data must be kept and why.

[email protected]