y6bit Privacy Policy
At y6bit, the privacy and security of your personal data is a fundamental commitment — not an afterthought. This Privacy Policy explains precisely what information we collect when you use the y6bit platform, why we collect it, how it is stored and protected, who it may be shared with, and the rights you hold over your own data. We encourage every player to read this document in full before registering an account.
- 1 Who We Are
- 2 Data We Collect
- 3 How We Collect Data
- 4 Why We Use Your Data
- 5 Legal Basis for Processing
- 6 Data Sharing & Disclosure
- 7 Cookies & Tracking
- 8 Data Retention
- 9 Data Security
- 10 Your Rights
- 11 Children & Minors
- 12 Third-Party Services
- 13 Policy Updates
- 14 Contact & Complaints
Version 2.0 — supersedes all prior versions.
Important: By registering an account or continuing to use the y6bit platform, you acknowledge that you have read this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this policy, you must not use the y6bit platform.
Who We Are
y6bit is an online casino and sports betting platform operated at https://y6bit.io, providing services to adult players primarily located in Bangladesh. The platform offers a range of products including cricket betting, live casino games, virtual table games, and online slots. References to "y6bit", "we", "us", or "our" in this Privacy Policy refer to the operator of the y6bit platform and its authorised data-processing personnel and partners.
y6bit acts as the data controller in respect of the personal data collected from players and visitors to the platform. As data controller, y6bit determines the purposes and means by which your personal data is processed. Where y6bit engages third-party service providers to process data on its behalf, those providers act as data processors and are contractually bound to handle your data only in accordance with y6bit's documented instructions.
For all privacy-related enquiries, requests, or complaints, you may contact y6bit's designated data-protection contact at [email protected]. Please include "Privacy Request" in the subject line of your message to ensure prompt routing to the correct team. This email address is provided as plain text and is not a clickable link.
Data We Collect
y6bit collects only the personal data that is necessary to provide a safe, legal, and high-quality gaming and betting service. The categories of data we collect are described below.
| Category | Examples | Mandatory? |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, national ID (NID) number, passport number | Yes — for account registration and age verification |
| Contact Data | Email address, mobile phone number, city or district of residence (e.g., Dhaka, Chittagong, Sylhet) | Yes — for account communication and support |
| Financial Data | bKash account number, Nagad account number, Rocket account number, Upay number, bank account details, transaction reference numbers | Yes — for deposits, withdrawals, and AML compliance |
| Account Activity Data | Login timestamps, bet history, game session records, bonus claims, withdrawal requests, support ticket history | Yes — for platform operation and dispute resolution |
| Technical Data | IP address, device type, operating system, browser type and version, screen resolution, time zone | Collected automatically — for security and fraud prevention |
| Cookie & Usage Data | Pages visited, session duration, clicks, referring URL, feature interactions | Collected automatically — see Section 7 |
| Verification Documents | Scanned or photographed copies of NID, passport, utility bills, or bank statements submitted for KYC | Required when triggered by verification thresholds |
| Communications Data | Content of emails, support chat logs, and any other written communications sent to y6bit | Collected when you contact us |
Data Minimisation: y6bit does not collect data beyond what is required for the purposes set out in Section 4. We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where a player voluntarily discloses health-related information in the context of a responsible gaming request (e.g., a self-exclusion request citing a gambling disorder).
How We Collect Data
y6bit collects personal data through the following channels:
- Direct registration: Data you provide when you create an account, complete identity verification, or update your profile settings.
- Transaction processing: Data received from mobile wallet providers (bKash, Nagad, Rocket, Upay) and banking partners when you make a deposit or withdrawal. This includes transaction IDs, timestamps, and the account numbers involved.
- Platform activity: Data automatically generated when you browse the platform, log in, place bets, play casino games, or interact with promotional content.
- Customer support interactions: Data you share when you contact our support team by email or through the platform's internal messaging system.
- Cookies and tracking technologies: Technical data collected automatically via cookies, web beacons, and similar technologies as described in Section 7.
- Third-party identity verification services: Where you submit KYC documents, y6bit may use a third-party verification service to authenticate document validity. That service returns a verification result and relevant metadata to y6bit.
- Fraud and risk screening tools: Data received from industry-standard fraud-prevention and anti-money-laundering screening tools when processing deposits or evaluating account risk.
y6bit does not purchase personal data from data brokers or other third-party data vendors. We do not collect data from social media platforms or public directories unless a player themselves provides social-media contact details as part of a voluntary communication.
Why We Use Your Data
y6bit processes personal data for clearly defined, legitimate purposes. The table below maps each processing purpose to the data categories involved and the legal basis relied upon (see Section 5 for a full explanation of legal bases).
- Account creation and management: To register your player account, verify your identity and age (21+ requirement), maintain your account settings, and provide access to the platform.
- Payment processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfer; to match incoming payments to your account; and to process refunds where applicable.
- Anti-money laundering (AML) and fraud prevention: To screen transactions against risk thresholds, detect and investigate suspicious activity, and comply with applicable AML obligations. This may involve automated decision-making to flag high-risk transactions for manual review.
- Responsible gaming compliance: To enforce deposit limits, session reminders, cooling-off periods, and self-exclusions you have activated; to identify patterns of play that may indicate problem gambling; and to act on responsible gaming obligations.
- Customer support: To receive, process, and respond to your enquiries, complaints, and requests efficiently and with full context.
- Platform improvement and analytics: To understand how players use the platform, identify technical issues, improve game selection and user experience, and develop new features. Analytics data is aggregated and pseudonymised where possible.
- Marketing communications: To send you promotional offers, bonus notifications, and news about new games or features — but only where you have given explicit consent to receive such communications. You may withdraw consent at any time.
- Security and fraud detection: To monitor for unauthorised account access, detect bot activity, enforce geographic restrictions, and protect the integrity of the platform for all players.
- Legal and regulatory compliance: To retain records as required by applicable law, respond to lawful data requests from authorities, and defend y6bit's legal position in the event of a dispute.
Legal Basis for Processing
y6bit relies on the following legal bases to process your personal data:
- Contractual necessity: Processing required to fulfil the contract between y6bit and the player — including account registration, payment processing, and dispute resolution. Without this processing, y6bit cannot provide its services.
- Legitimate interests: Processing necessary for y6bit's legitimate business interests, provided those interests are not overridden by your rights. This includes fraud prevention, platform security, analytics, and responsible gaming monitoring.
- Legal obligation: Processing required to comply with applicable laws, including anti-money laundering record-keeping requirements and responses to lawful authority requests.
- Consent: Processing based on your freely given, specific, and informed consent — primarily for direct marketing communications. You may withdraw consent at any time by contacting support at [email protected] or using the unsubscribe mechanism in any marketing email.
Where y6bit relies on legitimate interests as the legal basis for processing, we have conducted a balancing assessment to confirm that our interests do not override your fundamental rights or freedoms. Details of these assessments are available on request by contacting [email protected].
Data Sharing & Disclosure
y6bit does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. Your data is shared only in the limited circumstances described below, and always subject to appropriate contractual data-protection safeguards.
- Payment providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank receive only the transaction data necessary to process your specific payment. These providers operate under their own privacy policies and applicable Bangladeshi financial regulations.
- Identity verification providers: Third-party KYC and document-verification services receive copies of identity documents you submit for verification. These services are contractually bound to process documents solely for the purpose of verification and to delete data following completion of the verification task.
- Game content providers: Game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a pseudonymous player identifier (not your real name or NID) for the purpose of game session management, RTP calculation, and fair-play auditing. No directly identifiable personal data is shared with game providers beyond what is technically required for game functionality.
- Fraud and risk screening services: Specialised fraud-prevention and AML screening tools may process transaction metadata (amounts, timestamps, account references) to generate risk scores. These tools do not receive your full identity profile.
- Legal and regulatory authorities: y6bit will disclose personal data to law enforcement agencies, regulatory bodies, or courts when required to do so by applicable law, or where disclosure is necessary to protect the safety, rights, or property of y6bit, its players, or third parties.
- Business transfers: In the event of a merger, acquisition, or sale of all or a substantial part of y6bit's business assets, your personal data may be transferred to the successor entity. You will be notified of any such transfer and any material change in how your data is processed.
No data sales: y6bit has never sold, and will never sell, personal data to advertising networks, data brokers, or any third party for the purpose of profiling or targeted advertising on external platforms.
Cookies & Tracking Technologies
y6bit uses cookies and similar tracking technologies on its platform to enable core functionality, improve performance, and better understand how players interact with the site. A cookie is a small text file placed on your device by your browser when you visit a website. Cookies do not contain executable code and cannot access other files on your device.
The cookies used by y6bit fall into the following categories:
- Strictly necessary cookies: These cookies are essential for the platform to function. They maintain your login session, store your language and currency preferences, and enable secure navigation between pages. These cookies cannot be disabled without breaking core platform functionality.
- Performance and analytics cookies: These cookies collect pseudonymised data about how visitors use the platform — which pages are visited most, how long sessions last, and where errors occur. This data helps y6bit identify and fix technical issues and improve overall user experience. No personally identifiable data is contained in these cookies.
- Functional cookies: These cookies remember your preferences such as game display settings, preferred payment method, and responsible gaming tool settings, so you do not need to re-enter them on each visit.
- Security cookies: These cookies support fraud-detection systems by storing a pseudonymous session identifier that allows y6bit's security systems to detect unusual login patterns or bot activity without storing your IP address in the cookie itself.
y6bit does not use third-party advertising cookies or place cookies on behalf of advertising networks. You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the platform.
Data Retention
y6bit retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal or regulatory obligations. The following retention periods apply as a general guide:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account and identity data | Duration of account + 5 years after closure | Legal obligation, AML compliance, dispute resolution |
| Financial transaction records | 7 years from transaction date | Financial record-keeping legal obligation |
| Betting and game history | 5 years from account closure | Dispute resolution, responsible gaming monitoring |
| KYC verification documents | 5 years from account closure | AML and identity-verification legal obligation |
| Support communications | 3 years from last interaction | Quality assurance and dispute resolution |
| Technical and log data | 12 months rolling | Security monitoring and fraud prevention |
| Marketing consent records | Until consent withdrawn + 1 year | Proof of consent for regulatory compliance |
When the applicable retention period expires, y6bit securely deletes or anonymises personal data such that it can no longer be attributed to an identifiable individual. Anonymised or aggregated data (e.g., platform-wide analytics) may be retained indefinitely as it no longer constitutes personal data.
Data Security
y6bit takes data security seriously and implements a layered set of technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:
- SSL/TLS encryption: All data transmitted between your device and the y6bit platform is encrypted using industry-standard SSL/TLS protocols. The padlock icon in your browser confirms that your connection is encrypted at all times.
- Encryption at rest: Sensitive data fields — including payment account numbers and identity document images — are encrypted at rest in y6bit's database systems using AES-256 or equivalent encryption standards.
- Access controls: Access to production systems and personal data is restricted to authorised personnel on a strict need-to-know basis. Access is controlled via role-based permissions and multi-factor authentication. All access events are logged and reviewed.
- Regular security reviews: y6bit conducts periodic internal security reviews and engages third-party security experts to carry out vulnerability assessments. Critical vulnerabilities are remediated as a priority.
- Incident response: y6bit maintains a documented data breach response plan. In the event of a personal data breach that poses a risk to affected individuals, y6bit will notify affected players promptly and take all reasonable steps to contain and mitigate the breach.
- Staff training: All y6bit personnel with access to personal data receive regular training on data protection obligations and security best practices.
Your responsibilities: While y6bit takes comprehensive steps to protect your data on our systems, you are also responsible for keeping your account credentials secure. Never share your y6bit password with anyone. If you suspect your account has been accessed without your authorisation, contact support at [email protected] immediately.
Your Rights
As a player whose personal data is processed by y6bit, you hold the following rights in relation to your data. To exercise any of these rights, contact y6bit at [email protected] with the subject line "Data Rights Request" and specify clearly which right you wish to exercise.
Right of Access
You may request a copy of all personal data y6bit holds about you, along with information about how it is used and with whom it is shared. y6bit will respond within 30 days.
Right to Rectification
If any personal data y6bit holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Update requests for basic account details can often be handled via account settings.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purposes it was collected, or where you withdraw consent and no other legal basis applies. Note that legal-retention obligations may limit full erasure.
Right to Restriction
You may request that y6bit restrict processing of your data in certain circumstances — for example, while the accuracy of data is being contested or while an objection to processing is assessed.
Right to Portability
Where processing is based on your consent or contractual necessity and is carried out by automated means, you may request your personal data in a structured, machine-readable format (e.g., JSON or CSV).
Right to Object
You may object to processing based on legitimate interests, including profiling for fraud-prevention purposes. You may also object at any time to processing for direct marketing, and your objection will be honoured immediately.
y6bit will respond to all verified data rights requests within 30 calendar days of receipt. Where a request is complex or involves a high volume of data, the response period may be extended by a further 60 days with notice provided to you. y6bit will not charge a fee for handling data rights requests unless a request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.
y6bit may need to verify your identity before processing a data rights request, to ensure that personal data is not disclosed to or deleted at the request of an unauthorised party. Verification may involve confirming account details or requesting a copy of an identity document.
Children & Minors
Strictly 21+ Only: The y6bit platform is intended exclusively for adults aged 21 years and above. y6bit does not knowingly collect personal data from individuals under the age of 21. If y6bit becomes aware that an account has been registered by a person under 21, or that personal data has been collected from a minor, that account will be immediately closed and all personal data associated with it will be securely deleted, subject only to any legal retention obligations.
If you are a parent or guardian and believe that a minor in your care has registered an account on the y6bit platform or submitted personal data without your knowledge, please contact y6bit immediately at [email protected]. Include the subject line "Minor Account Report" and provide as much detail as possible. y6bit will investigate and act promptly upon receiving such a notification.
y6bit employs automated date-of-birth verification at the point of registration and reserves the right to request documentary age verification (such as a copy of a national identity card or passport) at any point during the account lifecycle where there is any doubt about a player's age.
Third-Party Services
The y6bit platform integrates with a number of third-party services to deliver core functionality. While y6bit takes care to engage only reputable, data-secure service providers, each third-party service operates under its own privacy policy and data-handling practices, which y6bit does not control beyond the contractual obligations it imposes. Key third-party integrations include:
- Mobile wallet and banking APIs: Integration with bKash, Nagad, Rocket, and Upay for real-time payment processing. Data exchanged is limited to transaction-specific fields required to complete the payment.
- Live casino streaming studios: Evolution Gaming and Ezugi provide live dealer game streams. These studios receive only a session token and pseudonymous player identifier — no personal identity data — to manage your game session.
- RNG-certified virtual game providers: Pragmatic Play, NetEnt, Microgaming, and Spribe operate virtual casino games on the platform. Game result data is processed within the y6bit platform; these providers do not receive your personal identity data in real time during normal gameplay.
- Content delivery networks (CDN): CDN services are used to deliver platform assets (images, scripts, fonts) faster to players across Bangladesh, including in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, and Barisal. CDNs receive your IP address as part of normal HTTP request routing but do not retain it for profiling purposes.
Links to external websites are not included on the y6bit platform. If you encounter a link appearing to lead to an external site, treat it with caution and report it to [email protected] as it may indicate a phishing or spoofing attempt.
Policy Updates
y6bit reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, platform functionality, or our data-processing practices. When a material change is made to this policy, y6bit will notify registered players by email and by placing a prominent notice on the platform for a minimum of 14 days following the update.
The effective date at the top of this document will be updated each time the policy is revised. The version number displayed in the Table of Contents sidebar will also be incremented. We encourage you to review this Privacy Policy periodically, even if you have not received a specific notification of changes, to stay informed about how y6bit protects your data.
Your continued use of the y6bit platform following the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you must cease using the platform and may request account closure by contacting [email protected]. Prior versions of this Privacy Policy are available on request.
Contact & Complaints
If you have any questions, concerns, or requests relating to this Privacy Policy or to the way y6bit processes your personal data, please contact the y6bit data-protection team using the details below. All privacy correspondence must be directed to the email address shown; y6bit does not accept privacy requests submitted via in-game chat or social media.
Privacy Contact:
Email: [email protected]
Subject line: "Privacy Request" or "Data Rights Request"
Response time: Within 30 calendar days of receipt
Operating hours: 24/7 support — Bangladesh Standard Time (BST, UTC+6)
y6bit is committed to resolving all privacy-related complaints promptly and fairly. If you submit a complaint, y6bit will acknowledge receipt within 3 business days and provide a substantive response within 30 calendar days. Where a complaint requires additional investigation, y6bit will keep you informed of progress and the expected resolution timeline.
If you are not satisfied with the outcome of a complaint handled by y6bit directly, you may escalate the matter to the relevant data-protection authority or consumer protection body in your jurisdiction. y6bit will cooperate fully with any such authority in the investigation of a complaint.
How y6bit Protects Your Privacy
Six core principles that guide every data-handling decision we make at y6bit.
SSL Encryption, Always On
Every connection between your device and the y6bit platform is protected by SSL/TLS encryption. Your login credentials, payment details, and personal data travel over an encrypted channel at all times — no exceptions.
Strict Access Controls
Only authorised y6bit personnel with a documented need-to-know are permitted to access personal data. All access is role-controlled, multi-factor authenticated, and logged. Routine access reviews ensure permissions remain appropriate.
Data Minimisation
y6bit collects only the personal data that is genuinely necessary to provide safe and reliable gaming services. We do not collect data speculatively or for purposes that have not been clearly defined and disclosed in this policy.
Clear Retention Limits
Personal data is kept for defined periods tied to legal and business necessity — not indefinitely. When the retention window closes, data is securely deleted or fully anonymised so it can no longer identify you.
No Data Sales, Ever
y6bit has never sold your personal data to advertisers, brokers, or any external party for commercial gain. Your data is used solely to operate the platform, process payments, and comply with legal obligations — nothing more.
Your Rights, Fully Supported
y6bit respects your full set of data rights — access, rectification, erasure, restriction, portability, and objection. All verified requests are handled within 30 days at no charge. Contact [email protected] to exercise any right.
Ready to Start Playing at y6bit?
Now that you know how y6bit handles your data, explore our full range of casino games and sports betting markets — trusted by players across Dhaka, Chittagong, Sylhet, and beyond.