y6bt Privacy Policy

y6bt operates the online betting and casino platform accessible at y6bt.io and all associated subdomains, mobile-optimised interfaces, and APIs (collectively referred to in this document as the "Platform"). In the context of this Privacy Policy, y6bt acts as the data controller — meaning we determine the purposes and means by which your personal data is processed.

This Privacy Policy applies to all individuals who access the Platform, whether as registered account holders or as visitors browsing without an account. It governs all personal data collected by y6bt in connection with the use of the Platform, including data collected through our website, live chat systems, email correspondence, and payment integrations.

y6bt's Platform is operated primarily for players based in Bangladesh. All data processing described in this Policy is conducted with Bangladesh-based players in mind, and all communications regarding data matters will be conducted in English. If you have any questions about how your data is handled, please contact our support team at [email protected] before using the Platform.

y6bt collects the following categories of personal data, depending on how you interact with the Platform:

We do not collect sensitive personal data such as racial or ethnic origin, religious beliefs, health data (beyond what is strictly necessary for responsible gaming assessments), or biometric data unless you voluntarily provide it as part of a specific verification process and give your explicit consent.

y6bt collects personal data through the following channels:

• Direct interactions: Data you provide when completing our registration form, submitting identity verification documents, depositing or withdrawing funds, placing bets, contacting our support team via live chat or email, or updating your account profile.
• Automated technologies: Technical and usage data collected automatically as you navigate the Platform, using server logs, cookies, web beacons, and similar tracking technologies. See Section 7 for full details on cookies.
• Payment partners: Limited transaction confirmation data received from bKash, Nagad, Rocket, and Upay when you initiate a deposit or withdrawal. y6bt does not receive or store full mobile banking credentials — only transaction reference numbers and confirmation statuses.
• Game technology providers: Aggregated game-round data from certified providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, used for account settlement and dispute resolution.
• Fraud prevention and security systems: Data from automated risk-assessment tools that monitor for unusual account activity, multiple account creation, and other indicators of policy violation or financial crime.

y6bt processes your personal data only where a valid legal basis exists. The following table maps our primary processing activities to their respective legal bases:

y6bt uses the personal data we collect for the following purposes:

• To create, verify, and maintain your y6bt account, including processing your registration and any subsequent changes to your account details.
• To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and any other supported payment methods, and to maintain accurate financial records of all transactions.
• To verify your identity in compliance with know-your-customer (KYC) and anti-money-laundering (AML) obligations, including confirming your age is 21 or above before allowing real-money play.
• To deliver the games, sportsbook markets, live casino streams, and other features of the y6bt Platform to you.
• To calculate and credit any bonuses, free bets, cashback awards, or promotional incentives to which you are entitled under current y6bt promotions.
• To send you transactional communications including deposit confirmations, withdrawal status updates, security alerts, and notifications of changes to these Terms or this Privacy Policy.
• To send you marketing communications about promotions, new games, and seasonal offers — but only where you have given consent and only through channels you have indicated you are comfortable with. You may withdraw consent at any time by contacting support.
• To monitor Platform activity for fraud, abuse, money laundering, and other security threats, and to take appropriate action including account suspension where necessary.
• To enforce our Terms & Conditions, including investigation of suspected policy breaches.
• To operate our responsible gaming programme, including monitoring for indicators of problem gambling and applying self-exclusion or limit settings you have requested.
• To analyse aggregated, anonymised usage data to improve the design, performance, and content of the Platform. This analysis does not involve personal identification.
• To respond to your customer support enquiries and resolve complaints submitted via live chat, email, or WhatsApp.

y6bt does not sell, rent, or trade your personal data to any third party for commercial purposes. We share personal data with third parties only in the following limited circumstances:

• Payment service providers: bKash, Nagad, Rocket, and Upay receive the minimum data necessary to process your requested transaction. This typically consists of a transaction reference, amount in BDT, and your registered mobile number. y6bt does not share your full identity documents with payment providers.
• Game technology providers: Certified providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive a pseudonymised player identifier and game-session data to facilitate game delivery and settle game rounds. They do not receive your name, contact details, or payment information.
• Identity verification services: Where applicable, your identity documents may be processed by a third-party KYC verification partner to confirm authenticity. Such partners operate under strict data processing agreements with y6bt and may not use your data for any purpose other than verification.
• Fraud prevention and security services: Aggregated technical and usage data may be shared with specialist anti-fraud services to help detect suspicious activity. No unnecessary personal identifiers are included in such data transfers.
• Legal and regulatory authorities: y6bt will disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required to do so by applicable law, court order, or legitimate government request. Where legally permitted, y6bt will notify you of such disclosure.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of y6bt's assets, your personal data may be transferred to the successor entity as part of that transaction. We will notify affected players prior to any such transfer.

All third parties with whom y6bt shares personal data are required to handle that data in accordance with applicable data protection standards and are prohibited from using it for any purpose beyond the specific function for which it was shared.

y6bt uses cookies and similar tracking technologies (including web beacons, pixel tags, and local storage objects) to operate and improve the Platform. A cookie is a small text file placed on your device when you visit the Platform. The following categories of cookies are used:

You may manage your cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that disabling strictly necessary or security cookies will impair your ability to log in and use the Platform. y6bt does not use cookies to serve third-party advertising or to track your activity on websites outside of the y6bt Platform.

y6bt retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or audit obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following permanent account closure, to satisfy anti-money-laundering record-keeping requirements.
• Financial transaction data: Retained for a minimum of seven (7) years from the date of each transaction, in accordance with standard financial record-keeping obligations.
• Betting and gaming history: Retained for five (5) years from the date of each game round or bet settlement, to allow for dispute resolution.
• Customer support communications: Retained for three (3) years from the date of the last communication, unless the communication relates to an ongoing dispute or legal matter.
• Responsible gaming records: Retained for five (5) years from the date of any self-exclusion request or limit change, regardless of subsequent account activity.
• Technical and usage data (logs): Typically retained for twelve (12) months, after which they are deleted or fully anonymised.
• Marketing consent records: Retained for the duration of your consent plus three (3) years following withdrawal, as evidence of the consent given.

When the applicable retention period expires and no continuing legal obligation applies, y6bt will securely delete or irreversibly anonymise your personal data. Anonymised data — which cannot reasonably be used to identify you — may be retained indefinitely for statistical and analytical purposes.

y6bt takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and the y6bt Platform.
• Encryption of sensitive data fields (including password hashes and financial account references) at rest in our database systems.
• Role-based access controls ensuring that staff access to player data is limited to individuals who have a specific operational need for that data.
• Regular security audits and penetration testing of the Platform infrastructure, conducted by independent security specialists.
• Monitoring systems that detect and alert on anomalous access patterns or potential data breach indicators in real time.
• Mandatory security awareness training for all y6bt staff who handle personal data, conducted at onboarding and at least annually thereafter.

In the event of a personal data breach that poses a risk to your rights and freedoms, y6bt will notify affected players without undue delay and will take all reasonable steps to contain and remediate the breach. We will document all data breaches internally regardless of whether external notification is required.

While y6bt employs industry-standard security measures, no online platform can guarantee absolute security. You are responsible for keeping your own login credentials confidential and for notifying us immediately at [email protected] if you suspect that your account has been accessed without your authorisation.

As a y6bt player, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team via live chat or email at [email protected] with the subject line "Data Rights Request". We will respond within 30 days of receiving a valid request.

The y6bt Platform is strictly intended for adults aged 21 and above. y6bt does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as part of the registration and KYC process, and any account found to belong to a person under 21 will be immediately closed and all associated data will be handled in accordance with our legal obligations.

If you are a parent or guardian and believe that a minor in your care has provided personal data to y6bt or accessed the Platform without your knowledge, please contact us immediately at [email protected]. We will investigate and take appropriate action, including erasure of the minor's data, as quickly as possible.

y6bt recommends that parents and guardians use parental control software to prevent minors from accessing online gambling platforms. Information on available tools is provided on our Responsible Gaming page.

The y6bt Platform may from time to time contain references to third-party services, such as payment providers (bKash, Nagad, Rocket, Upay). If you click through to any third-party platform or service, please note that those platforms operate under their own privacy policies and y6bt has no control over — and accepts no responsibility for — how those platforms collect, store, or use your personal data.

We strongly recommend that you read the privacy policy of any third-party service you access in connection with your y6bt account, particularly the privacy policies of your chosen mobile banking provider before initiating any deposit or withdrawal transaction.

y6bt reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, applicable law, or Platform functionality. When we make material changes — meaning changes that meaningfully affect how we use your personal data or your rights in relation to it — we will notify you by email to your registered address and display a prominent notice on the Platform for at least thirty (30) days before the changes take effect.

Minor or administrative changes (such as correcting typographical errors or updating contact details) may be made without prior notice. The date of the most recent revision is displayed at the top of this Policy. Continued use of the Platform after the effective date of any revised Privacy Policy constitutes your acknowledgment of the updated terms.

If you disagree with any changes to this Policy, you should stop using the Platform and close your account before the revised Policy takes effect. Outstanding balances will be returned to you via your registered payment method, subject to completion of any pending verification requirements.

If you have any questions, concerns, or requests regarding this Privacy Policy or how y6bt handles your personal data, please contact our Data Support team through any of the following channels:

• Live Chat: Available 24/7 directly on the Platform — average response time under 2 minutes.
• Email: [email protected] — responses within 24 hours on business days.
• WhatsApp: +880 1700 000000 — available during Bangladesh Standard Time (BST, UTC+6) business hours.

When submitting a data rights request, please include your registered username or email address, the nature of your request, and any relevant details that will help us locate your records efficiently. We will acknowledge your request within 5 business days and provide a full response within 30 days. If your request is particularly complex, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.