r6win Privacy Policy — How We Collect, Use, and Protect Your Personal Data

This Privacy Policy ("Policy") describes how r6win ("r6win", "we", "us", "our") collects, uses, stores, shares, and protects the personal information of players and visitors who access the r6win website at https://r6win.bio and all associated services (collectively, the "Platform").

r6win is an English-language online gaming platform serving the Bangladesh market, offering sports betting, live casino games, online slots, keno, and related gaming services. In operating these services, we necessarily process certain personal data about the individuals who register and play on our platform.

We are committed to handling your personal data with transparency, integrity, and respect for your privacy. This Policy explains your rights regarding your personal data and the legal bases on which we process it. It should be read alongside our Terms & Conditions and our Responsible Gaming Policy.

By creating an account on r6win or by continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please discontinue use of the Platform and contact us to close your account.

r6win collects personal data through several channels: information you provide directly when registering or using the Platform, data generated automatically through your use of the Platform, and in some cases, data received from third-party payment providers. The categories of personal data we collect are described in the table below:

2.1 Sensitive Personal Data

r6win does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data, or health data, except where strictly necessary for responsible gaming obligations (for example, recording a self-exclusion request or a problem gambling intervention). Where such data is collected for responsible gaming purposes, it is processed with the highest level of care and access controls.

2.2 Data You Provide About Others

If you provide personal data about any third party (for example, when designating a responsible gaming contact), you confirm that you have obtained that person's consent to share their data with r6win for the stated purpose. r6win will use such data only for that stated purpose.

r6win uses the personal data it collects for the following specific purposes, each of which has a defined legal basis:

• Account creation and management: We use your identity and contact data to create and maintain your r6win account, verify your identity, and communicate important account-related information to you. Legal basis: contractual necessity.
• Processing deposits and withdrawals: We use your financial data to process BDT transactions via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank. This includes confirming transaction reference numbers and reconciling payment records. Legal basis: contractual necessity.
• Age and identity verification: We use your identity documents and date of birth to verify that you are at least 21 years of age and to comply with our know-your-customer (KYC) obligations. Legal basis: legal obligation and contractual necessity.
• Platform security and fraud prevention: We use technical data and account data to detect and prevent unauthorised access, fraudulent transactions, collusion, money laundering, and other security threats. Legal basis: legitimate interests in protecting the platform and its players.
• Responsible gaming: We use account and usage data to identify patterns that may indicate problem gambling behaviour, to apply self-exclusion requests, and to enforce deposit limits and cooling-off periods requested by players. Legal basis: legal obligation and legitimate interests in player welfare.
• Customer support: We use your communications data and account data to respond to your queries, resolve disputes, and improve our support service quality. Legal basis: contractual necessity and legitimate interests.
• Platform improvement and analytics: We use aggregated and anonymised usage data to understand how players interact with the Platform, to identify areas for improvement, and to optimise the user experience. Legal basis: legitimate interests. Note: this analytics data is aggregated and does not identify individual players.
• Legal and regulatory compliance: We may process your personal data where required by applicable law or in response to lawful requests from regulatory or law enforcement authorities. Legal basis: legal obligation.
• Marketing communications: With your express consent, we may send you promotional emails or notifications about bonuses, new games, cricket betting markets, and platform updates. You may withdraw consent and unsubscribe at any time. Legal basis: consent.

r6win does not use automated decision-making processes that produce legal or similarly significant effects on players without human oversight. Where automated tools assist in fraud detection, a qualified member of the r6win team reviews any consequential decisions (such as account suspension) before they are finalised.

r6win does not sell, rent, or trade your personal data to any third party. We share personal data with third parties only in the following limited and controlled circumstances:

• Payment processors: We share the minimum necessary financial data with your chosen payment provider (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, or BRAC Bank) to process your deposit or withdrawal. These providers process your data under their own privacy policies and are bound by applicable financial services regulations.
• Identity verification services: We may share copies of identity documents with trusted KYC verification service providers for the purpose of confirming your identity and age. These providers are contractually bound to use your data solely for this purpose.
• Game software providers: Third-party game providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may receive your player session identifier for the purpose of delivering game content. These providers do not receive your full identity or financial data.
• Legal and regulatory authorities: r6win may disclose personal data to law enforcement bodies, financial intelligence units, or other competent authorities where required by applicable law or where we reasonably believe disclosure is necessary to prevent fraud, money laundering, or other criminal activity.
• Platform infrastructure providers: We use third-party cloud hosting and infrastructure services to operate the r6win Platform. These providers act as data processors under our instruction and are contractually prohibited from accessing or using your data for any purpose other than providing the agreed infrastructure services.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of r6win's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified via email and/or a prominent notice on the Platform before your data is transferred and becomes subject to a different privacy policy.

All third parties with whom r6win shares personal data are required to maintain appropriate technical and organisational security measures to protect your data, and are permitted to process your data only for the specific purposes for which it was shared.

r6win uses cookies and similar technologies (collectively, "cookies") to operate the Platform effectively and to understand how it is used. A cookie is a small text file placed on your device when you visit the r6win website. The types of cookies we use are described below:

r6win does not use third-party advertising cookies, retargeting pixels, or social media tracking scripts. You can control cookie settings through your browser preferences. Please note that disabling strictly necessary cookies may impair your ability to log in and use certain features of the Platform.

r6win implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security framework includes:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the r6win Platform.
• AES-256 encryption at rest for all sensitive personal data and financial records stored on our servers.
• Password hashing using industry-standard bcrypt algorithms — your password is never stored in plain text.
• Two-factor authentication (2FA) available for all player accounts to add an additional layer of login security.
• Login monitoring and anomaly detection to identify and block suspicious login attempts, including logins from unfamiliar locations or devices.
• Role-based access controls ensuring that r6win staff can only access the player data that is strictly necessary for their job function.
• Regular security audits and penetration testing conducted by qualified security professionals to identify and remediate vulnerabilities.
• Incident response procedures to detect, contain, and report data security incidents promptly.

Despite these measures, no internet-based system can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, r6win will notify affected players without undue delay and will take all reasonable steps to mitigate the impact of the breach.

You also play an important role in the security of your account. You are responsible for keeping your r6win username and password confidential. If you suspect that your account has been accessed without your authorisation, please contact us immediately at [email protected].

r6win retains your personal data for as long as is necessary to fulfil the purposes described in this Policy, or for as long as required by applicable legal or regulatory obligations, whichever is longer. The following retention periods apply:

• Active account data: Retained for the full duration of your account's active status. This includes identity data, contact data, financial records, and game history.
• Post-closure account data: Following account closure (whether requested by you or initiated by r6win), your personal data is retained for a minimum period of 5 years to comply with financial record-keeping obligations and to support the resolution of any disputes that may arise.
• Transaction and financial records: Retained for a minimum of 7 years from the date of each transaction, in line with standard financial compliance requirements.
• KYC verification documents: Retained for a minimum of 5 years from the date of verification or account closure, whichever is later.
• Support communications: Retained for up to 3 years from the date of the most recent interaction.
• Marketing consent records: Retained for the duration of your marketing subscription plus 2 years following unsubscription, to demonstrate compliance with consent requirements.
• Technical and usage data (server logs): Retained for up to 90 days unless flagged for security investigation purposes, in which case the relevant logs may be retained until the investigation is concluded.

After the applicable retention period expires, personal data is securely and permanently deleted or anonymised so that it can no longer be attributed to an identifiable individual.

As a player on the r6win Platform, you have a number of rights in relation to the personal data we hold about you. These rights are described below. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request" and include your registered username and a description of your request.

• Right of Access: You have the right to request a copy of all personal data that r6win holds about you. We will respond to access requests within 30 days. The first copy is provided free of charge; subsequent copies may attract a reasonable administrative fee.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update certain account details directly through your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent on which processing was based. Note that this right is subject to our legal retention obligations — we may be required to retain certain data (such as financial transaction records) even following an erasure request.
• Right to Restriction of Processing: You have the right to request that we restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested or while an objection to processing is being considered.
• Right to Data Portability: Where processing is based on your consent or on a contract with you, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another service provider.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on r6win's legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time by contacting support or using the unsubscribe link in any marketing email. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

r6win will respond to all data rights requests within 30 calendar days of receipt. In cases of complexity or high volume, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reason for it within the initial 30-day period.

r6win strictly enforces a minimum age of 21 years for all registered players. The r6win Platform is not directed at or intended for use by individuals under the age of 21. We do not knowingly collect personal data from persons under 21 years of age.

During account registration and at any subsequent point where age verification is triggered, r6win will request documentary proof that the account holder is 21 or older. Any account found to belong to a person under 21 will be immediately closed. Any personal data collected from a player who is subsequently found to be under 21 will be securely deleted, subject only to any retention requirements necessary to comply with our age-verification and responsible gaming obligations.

If you are a parent or guardian and believe that a person under the age of 21 has created an r6win account or submitted personal information to our Platform, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

r6win's primary player base is in Bangladesh, and we endeavour to store and process player data within or close to this region wherever practicable. However, some of our third-party service providers (including cloud infrastructure providers and game software suppliers such as Pragmatic Play, Evolution Gaming, and others) may process data in server locations outside Bangladesh.

Where personal data is transferred internationally, r6win ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy. These safeguards may include:

• Contractual data processing agreements containing standard data protection clauses with all third-party processors operating outside Bangladesh.
• Selection of third-party providers that maintain internationally recognised security certifications (such as ISO 27001 or SOC 2 Type II).
• Transfer of only the minimum data necessary for the specific processing purpose, applying data minimisation principles across all cross-border transfers.

If you would like further information about the safeguards in place for any specific international data transfer, please contact us at [email protected].

r6win reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made to this Policy, we will notify registered players by email to their registered address and/or by displaying a prominent notice on the Platform prior to the changes taking effect.

The effective date at the top of this document will be updated each time the Policy is revised. We encourage you to review this Policy periodically to stay informed about how r6win is protecting your personal data. The most current version of this Policy is always available at https://r6win.bio/privacy-policy.

Your continued use of the r6win Platform following the posting of an updated Privacy Policy constitutes your acceptance of the changes. If you do not agree with the updated Policy, you should cease using the Platform and may request account closure as described in our Terms & Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way r6win handles your personal data, please contact our support team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Subject line for data rights requests: "Data Rights Request"
• Response hours: 24 hours a day, 7 days a week
• Language of correspondence: English
• Expected response time: Within 30 calendar days for data rights requests; within 24 hours for general privacy enquiries

Please include your registered account username in all privacy-related correspondence. This allows our team to locate your records accurately and respond to your request as efficiently as possible.

Responsible Gaming Notice: r6win is committed to safe and responsible gambling for all players in Bangladesh. This platform is strictly for adults aged 21 and above. If gambling is negatively affecting your life, please visit our Responsible Gaming page for tools, guidance, and support resources.