Privacy Policy — 60bd9

60bd9 collects personal data through several channels: directly from you when you register an account or interact with the platform, automatically through your use of the website and app, and occasionally from third-party identity verification and payment processing partners. The categories of personal data we collect are described below.

Registration and Identity Data

When you create a 60bd9 account, we collect the information you provide during the registration process, including your full legal name, date of birth, residential address, email address, and mobile phone number. This information is required to create and manage your account, verify your identity, and comply with our age verification obligations.

Know Your Customer (KYC) Documentation

To comply with anti-money laundering requirements and to confirm your identity and age, we may collect copies of government-issued identity documents such as your National Identity Card (NID), passport, or driving licence. We may also request proof of address documents such as a recent utility bill or bank statement. KYC documents are handled with the highest level of care and are accessible only to authorised compliance personnel.

Financial and Transaction Data

60bd9 records all financial transactions associated with your account, including deposit amounts, withdrawal requests, payment methods used (bKash, Nagad, Rocket, Upay, bank transfers), transaction reference numbers, and timestamps. We do not store full card numbers or mobile banking PINs — payment credentials are processed by our payment partners using their own secure infrastructure.

Gameplay and Betting Activity

We maintain records of your activity on the platform, including games played, bets placed and settled, session durations, wager amounts, win and loss records, and bonus usage. This data is used for account management, responsible gaming monitoring, dispute resolution, and platform improvement.

Technical and Device Data

When you access 60bd9, our systems automatically collect certain technical information including your IP address, browser type and version, device type, operating system, screen resolution, and referring URL. This information is used for security monitoring, fraud prevention, and optimising platform performance.

Communications Data

If you contact 60bd9 through live chat, email, or any other support channel, we retain records of those communications — including the content of messages, timestamps, and resolution notes — for quality assurance, training, and regulatory compliance purposes.

60bd9 does not sell, rent, or transfer your personal data to third parties for their own commercial or marketing purposes. We share data only in the specific circumstances described below, and only to the extent necessary for the relevant purpose.

Payment Processing Partners

To process deposits and withdrawals, 60bd9 works with licensed payment service providers including mobile wallet operators (bKash, Nagad, Rocket, Upay) and Bangladeshi banking partners (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, and others). These partners receive only the transactional data necessary to process your payment. They are bound by their own regulatory obligations and contractual data protection commitments to 60bd9.

Identity Verification Providers

For KYC verification purposes, 60bd9 may share identity document data with specialist third-party identity verification service providers. These providers process your documents solely for the purpose of confirming your identity and age and are prohibited from using the data for any other purpose.

Game Technology Providers

Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi operate the game engines that power content on the 60bd9 platform. These providers may receive session and gameplay data as part of the technical delivery of their games. They operate under strict data processing agreements and are not permitted to use this data for independent marketing or profiling purposes.

Regulatory and Law Enforcement Authorities

60bd9 may disclose personal data to relevant law enforcement agencies, financial intelligence units, or other competent authorities where we are legally required to do so — for example, in connection with a court order, suspicious activity report, or lawful investigation. Such disclosures are made strictly in accordance with applicable law.

Business Transfers

In the event that 60bd9 undergoes a merger, acquisition, or sale of substantially all of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy practices of the new data controller through a notice posted on the platform.

60bd9 retains personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable legal and regulatory obligations. The following retention principles apply:

• Active accounts: Personal data is retained for the full duration of your account's active status, plus a post-closure retention period as described below.
• Closed accounts: Following account closure — whether voluntary or by 60bd9 — we retain your personal data for a minimum of five years to comply with anti-money laundering record-keeping requirements and to handle any disputes or regulatory inquiries that may arise.
• KYC documents: Identity verification documents are retained for the legally required period applicable to anti-money laundering compliance, which is currently a minimum of five years from the date of verification or account closure, whichever is later.
• Transaction records: Full financial transaction logs are retained for a minimum of five years from the date of the transaction.
• Communications: Support communications are retained for a minimum of two years from the date of the last communication in a given case.
• Marketing consent records: Records of your consent to receive marketing communications are retained for the full period during which you remain subscribed, plus two years after withdrawal of consent.

When data reaches the end of its defined retention period, it is securely deleted from our active systems. Backup copies are purged in accordance with our scheduled backup rotation policy. Where full deletion is not technically feasible (for example, in deeply archived backup storage), data is anonymised such that it can no longer be linked to an identifiable individual.

All personal data processed by 60bd9 is stored on servers located within secure data centre facilities. Access to stored personal data is restricted to authorised personnel on a strict need-to-know basis, and all access events are logged and auditable.

60bd9 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework covers the following key areas:

• Encryption in transit: All data transmitted between your browser or app and the 60bd9 platform is encrypted using TLS 1.2 or higher. Our SSL certificate is maintained continuously and monitored for validity.
• Encryption at rest: Personal data and financial records stored in our databases are encrypted at rest using AES-256 encryption. Encryption keys are managed through a dedicated key management system with strict access controls.
• Access control: Access to systems that hold personal data is restricted to authorised personnel on a role-based, need-to-know basis. All access events are logged and reviewed regularly. Multi-factor authentication is required for all administrative access.
• Network security: Our platform infrastructure is protected by web application firewalls, intrusion detection systems, and DDoS mitigation services. Network activity is monitored 24/7 by our security operations team.
• Vulnerability management: 60bd9 conducts regular security assessments, including penetration testing by independent security firms, to identify and remediate vulnerabilities before they can be exploited.
• Incident response: In the event of a data breach or security incident affecting your personal data, 60bd9 has a documented incident response plan. If a breach is likely to result in a risk to your rights and freedoms, we will notify you promptly through the contact details on your account.

While 60bd9 applies stringent security standards, no system connected to the internet can be guaranteed completely secure. You are also responsible for keeping your login credentials confidential and for using a strong, unique password for your 60bd9 account.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or need to report a privacy concern, please contact the 60bd9 privacy and support team using the details below. We take all privacy enquiries seriously and will respond as promptly as possible.

For data subject rights requests — such as access, erasure, rectification, or portability — please include your registered account email address and a clear description of your request. This helps us locate your data accurately and process your request within the required timeframe.

If you believe that 60bd9 has not adequately addressed a privacy concern, you have the right to escalate the matter to the relevant data protection authority or regulatory body in your jurisdiction. We encourage you to contact us first so that we have the opportunity to resolve the issue directly.

This Privacy Policy was last reviewed and updated in January 2026. We reserve the right to amend this policy from time to time to reflect changes in our data processing practices, legal obligations, or platform features. Any material changes will be communicated to registered players via the email address on their account at least 14 days before the changes take effect. Continued use of the 60bd9 platform after the effective date of an updated Privacy Policy constitutes acceptance of the revised terms.