6wine Privacy Policy

This Privacy Policy ("Policy") is issued by 6wine ("the Platform", "we", "us", "our") and applies to all individuals ("Player", "User", "you") who visit, register on, or use the 6wine online casino and sports betting platform available at 6wine.org. This Policy forms part of the 6wine Terms and Conditions and should be read alongside them.

6wine is committed to protecting the privacy of its players. We process personal data only where we have a lawful basis to do so, we collect only the minimum data necessary to deliver our services, and we implement industry-standard technical and organisational measures to keep your data secure.

By accessing or using the 6wine platform, you acknowledge that you have read and understood this Privacy Policy and agree to the processing of your personal data as described herein. If you do not agree to this Policy, you should not use the 6wine platform.

6wine collects personal data in three broad categories: data you provide directly, data generated by your use of the platform, and data we receive from third-party service providers. The specific data points within each category are set out below.

Data You Provide Directly

• Registration data: full name, date of birth, email address, and mobile number (Bangladeshi number required for account verification and two-factor authentication).
• KYC documents: government-issued photo ID (National ID Card, Passport, or Driving Licence), and optionally proof of address. These are required before a player's first withdrawal is approved.
• Financial data: mobile money account numbers (bKash, Nagad, Rocket, Upay) or bank account details used for deposits and withdrawals. 6wine does not store full card numbers; card transactions are processed directly by PCI-compliant payment processors.
• Support communications: messages, chat transcripts, or emails you send to our support team at [email protected]. These are retained for quality assurance and dispute resolution purposes.

Data Generated by Your Use of the Platform

• Betting and gaming history: records of all bets placed, games played, outcomes, stakes, and winnings. This data is retained for account management, dispute resolution, and responsible gaming monitoring.
• Transaction history: a complete log of all deposits, withdrawals, bonus credits, and wagering activity on your account, including timestamps and payment method references.
• Device and connection data: IP address, device type and operating system, browser type and version, and approximate geographic location derived from IP. This data is used for fraud detection, security, and platform optimisation.
• Session and activity data: login timestamps, session durations, pages visited within the platform, and navigation patterns. Used in aggregate for platform analytics and to detect unusual account activity.

Data Received from Third Parties

• Identity verification results from KYC service providers: confirmation of identity document authenticity, age verification outcomes, and any flags raised during the verification process.
• Payment verification data from payment processors: transaction status confirmations, payment method ownership verifications, and fraud screening results relating to deposit and withdrawal activity.
• Fraud and risk signals from fraud detection partners: device fingerprint data, behavioural risk scores, and known fraud indicators shared by industry partners used to protect the integrity of the platform and the safety of all players.

The table below sets out the main purposes for which 6wine processes personal data, together with the corresponding legal basis and the data types involved in each processing activity.

6wine processes personal data only where a lawful basis exists. The following legal bases apply to our processing activities:

• Contract performance: processing necessary to create and manage your account, process your transactions, and deliver the platform services you have requested.
• Legal obligation: processing required to comply with applicable obligations, including identity verification, age verification, transaction monitoring, and record-keeping requirements.
• Legitimate interests: processing for fraud prevention, platform security, responsible gaming monitoring, and analytics to improve the platform — where these interests are not overridden by your privacy rights.
• Consent: processing for direct marketing communications, where you have opted in to receive promotional emails or SMS messages from 6wine. You may withdraw consent at any time by contacting [email protected] or by using the unsubscribe link in any marketing email.

6wine does not sell, rent, or trade personal data to third parties for their own marketing or commercial purposes. We share personal data only in the following limited circumstances:

• Payment processors and mobile money providers (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and card processors): shared to the extent necessary to process your deposits and withdrawals. These providers are contractually bound to use your data only for transaction processing.
• KYC and identity verification service providers: shared to enable identity document verification and age checks required before your first withdrawal. These providers process KYC data under strict data processing agreements with 6wine.
• Fraud detection and security partners: shared in aggregated or pseudonymised form to detect and prevent fraudulent activity, money laundering, and platform abuse. These partners do not use your data for any purpose other than security and fraud prevention.
• Regulatory and law enforcement authorities: where 6wine is legally required or compelled by a valid court order, regulatory directive, or law enforcement request to disclose personal data. 6wine will notify the affected player of such disclosure where permitted by law.

All third-party data processors engaged by 6wine are bound by written data processing agreements that restrict their use of personal data to the specific purpose for which it was shared, require them to implement appropriate security measures, and prohibit onward transfer to sub-processors without 6wine's prior written consent.

6wine takes the security of payment data and KYC documents with the highest priority. All financial transaction data is processed over encrypted HTTPS connections. Mobile money transaction references (bKash, Nagad, Rocket) are stored in tokenised form and are not retained in plain text beyond the minimum period necessary for dispute resolution.

KYC identity documents (National ID, Passport, Driving Licence) are stored in encrypted cloud storage with access restricted to the 6wine compliance team and authorised KYC service providers. Documents are retained for the period required by applicable platform obligations and are then securely deleted.

6wine does not store full credit or debit card numbers on its own servers. Card payment transactions are routed directly to PCI-DSS compliant payment processors who handle card data under their own certification. 6wine retains only a masked card reference (e.g., last four digits) sufficient for customer service purposes.

6wine uses cookies and similar tracking technologies on its platform. Cookies are small text files stored on your device that help us maintain your session, remember your preferences, and analyse platform usage. We do not use cookies to track your browsing activity outside of the 6wine platform.

Types of Cookies We Use

• Essential cookies: required for core platform functionality including session authentication, account security, and maintaining your login state. These cookies cannot be disabled without breaking the platform.
• Analytics cookies: used in anonymised, aggregated form to understand how players navigate the platform, which game categories are most visited, and where technical errors occur. This data informs platform improvements only and is never linked to individual player identities.
• Preference cookies: store your platform settings such as language preference and display options so that they are retained across sessions. These cookies improve your user experience but are not essential to platform operation.
• Security cookies: used to detect and prevent fraudulent login attempts, unusual account activity, and session hijacking. These cookies are essential to the security of your account and cannot be disabled.

You can manage non-essential cookies through your browser's cookie settings. Please note that disabling preference or analytics cookies will not affect your ability to access or use the platform, but may result in your preferences not being saved between sessions. For guidance on managing cookies in your specific browser, please consult your browser's help documentation.

6wine retains personal data for no longer than is necessary for the purposes for which it was collected. The following retention periods apply to the main categories of personal data held by 6wine:

• Account and registration data: retained for the duration of the active account relationship and for a minimum of 5 years following account closure, to comply with applicable record-keeping and audit obligations.
• KYC documents: retained for a minimum of 5 years from the date of account closure or the date of the last transaction, whichever is later. This retention period reflects applicable platform obligations relating to identity verification records.
• Transaction records: retained for a minimum of 5 years from the date of each transaction. Betting history, deposit and withdrawal logs, and bonus activity records fall within this category.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to any individual. Where data is anonymised rather than deleted, it may be retained indefinitely in aggregated form for platform analytics and improvement purposes.

As a data subject whose personal data is processed by 6wine, you have the following rights. To exercise any of these rights, please contact [email protected] with your account details and a clear description of your request:

• Right of access: you may request a copy of the personal data 6wine holds about you, along with information about how it is used and with whom it is shared.
• Right to rectification: you may ask 6wine to correct any inaccurate or incomplete personal data held about you. Corrections to registration details should be requested through [email protected] and may require identity re-verification.
• Right to erasure: you may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (for consent-based processing), or where processing was unlawful. This right is subject to any overriding retention obligations.
• Right to restriction: you may ask 6wine to restrict processing of your data in certain circumstances — for example, where you contest the accuracy of the data or where you have objected to processing based on legitimate interests, pending verification of those interests.
• Right to object: you may object to processing based on legitimate interests, including profiling for fraud detection purposes. Where you object, 6wine will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

6wine will respond to all rights requests within 30 days of receipt. Where a request is complex or where 6wine receives a high volume of requests, this period may be extended by up to a further 60 days, in which case 6wine will notify you of the extension and the reason for it within the initial 30-day period.

6wine implements a layered security architecture to protect player data from unauthorised access, alteration, disclosure, or destruction. The following measures are in place across the platform:

• SSL/TLS encryption: all data transmitted between player devices and 6wine servers is encrypted using TLS 1.2 or higher. The platform operates exclusively over HTTPS. Unencrypted HTTP connections are redirected to HTTPS automatically.
• At-rest encryption: sensitive personal data including KYC documents, financial account references, and contact details are stored in encrypted format on 6wine's servers. Encryption keys are managed separately from the encrypted data.
• Access controls: access to player personal data is restricted on a need-to-know basis. Staff with access to sensitive data are subject to background checks and are bound by confidentiality obligations. Access logs are maintained and reviewed regularly.
• Incident response: 6wine maintains a documented data breach response procedure. In the event of a security incident affecting player personal data, 6wine will notify affected players and, where required, relevant authorities, within the timeframes required by applicable obligations.

While 6wine takes all reasonable steps to protect your data, no internet transmission or electronic storage system is completely secure. Players are also responsible for maintaining the security of their own account credentials, including using a strong and unique password and enabling two-factor authentication where available.

The 6wine platform is strictly intended for use by adults aged 21 years and above. 6wine does not knowingly collect, process, or retain personal data from individuals under the age of 21. If, following KYC verification or otherwise, 6wine determines that a player account belongs to an individual under 21, that account will be closed immediately, all pending transactions will be cancelled, and any personal data associated with the account will be deleted as soon as practicably possible.

If you believe that a minor has registered an account on 6wine, please notify us immediately at [email protected]. Protecting young people from gambling harm is a priority for 6wine, and we take all reports of underage access seriously.

The 6wine platform may contain references to third-party game providers (such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi). These providers operate their own games within the 6wine platform environment and may process limited technical data (such as session tokens and game outcome data) as data processors acting on behalf of 6wine. 6wine does not link to external third-party websites, and this Privacy Policy does not cover the data practices of any external website that you may independently choose to visit.

6wine may send you promotional emails or SMS messages about bonuses, new game releases, seasonal promotions (such as Eid, Pohela Boishakh, or BPL season offers), and platform updates — but only if you have opted in to receive such communications during registration or through your account settings.

You may unsubscribe from marketing communications at any time by clicking the unsubscribe link in any marketing email, by adjusting your notification preferences in your account settings, or by contacting [email protected]. Opting out of marketing communications will not affect operational communications (such as deposit confirmations, withdrawal notifications, or KYC requests) which are sent as part of the account service.

6wine may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or platform features. Where changes are material — meaning they significantly affect your rights or how your personal data is processed — 6wine will notify registered players by email or through a prominent notice on the platform at least 7 days before the updated Policy takes effect.

The date at the top of this Policy reflects when it was last revised. Continued use of the 6wine platform after the effective date of any updated Policy constitutes acceptance of the revised terms. We encourage you to review this Policy periodically to stay informed about how 6wine handles your personal data.

For any questions, concerns, or requests relating to this Privacy Policy or to the personal data 6wine holds about you, please contact our support team. We aim to acknowledge all privacy-related enquiries within 48 hours and to provide a substantive response within 30 days.

Email: [email protected]