maha 6 Privacy
Policy

This Privacy Policy applies to maha 6 ("we", "us", "our"), the online casino and sports betting platform accessible at maha-6.com, and governs all personal data we collect from registered players and visitors based in Bangladesh and elsewhere. It sets out our obligations and your rights under internationally recognised data protection principles, including the right to access, correct, restrict, and request deletion of personal information we hold about you.

By creating a maha 6 account, making a deposit, or otherwise interacting with the platform, you acknowledge that you have read this Privacy Policy and consent to the processing of your personal data as described herein. We encourage you to read this document in full. If you have any questions, our support team at [email protected] is available around the clock.

Section 01

Information We Collect

maha 6 collects personal data from you through several distinct channels: directly when you register an account or interact with our platform; automatically as you browse and play; and occasionally from third-party sources such as payment providers and identity verification services. The categories of personal data we collect are described in detail below.

1.1 Registration Data

When you create a maha 6 account, we collect:

• Full legal name as it appears on your government-issued identification;
• Date of birth (used to verify the 18+ age requirement);
• Personal email address;
• Bangladesh mobile phone number (used for SMS OTP verification);
• Chosen username and securely hashed password;
• Preferred language and currency settings.

1.2 Identity Verification (KYC) Data

Before processing any withdrawal, maha 6 conducts a mandatory Know Your Customer (KYC) check. As part of this process, we may collect:

• A copy of your National Identity Card (NID) issued by the Bangladesh Election Commission, or a valid Bangladesh passport;
• Proof of address (e.g., a utility bill or bank statement issued within the last three months);
• A selfie or live photograph for facial comparison purposes, where required;
• Payment account details (e.g., your bKash, Nagad, or Rocket wallet number) to confirm ownership of the payment method.

1.3 Transactional Data

We maintain detailed records of all financial activity associated with your account, including:

• Deposit and withdrawal amounts, timestamps, and payment method references;
• Bonus claims, wagering activity, and promotion participation history;
• Game session records including game titles played, bet amounts, outcomes, and session durations;
• Account balance history and running totals.

1.4 Technical and Usage Data

When you access the maha 6 platform, our servers and analytics tools automatically capture:

• IP address and approximate geolocation (city/country level);
• Device type, operating system, and browser version;
• Pages visited, features accessed, and time spent on each section;
• Referral source (how you arrived at maha-6.com);
• Cookie identifiers and session tokens (see Section 5 — Cookies & Tracking).

1.5 Communications Data

If you contact our customer support team — whether by email, live chat, or any other channel — we retain records of those communications, including the content of your messages, your contact details, and any documents you share with us. This data is used to resolve your enquiry, improve service quality, and maintain an audit trail of support interactions.

Section 02

How We Use Your Data

maha 6 uses the personal data we collect for the following purposes. For each purpose, we have identified the applicable legal basis — this is explained further in Section 3.

2.1 Marketing Communications

Where you have given explicit consent during registration or account settings, maha 6 may contact you with promotional offers, bonus announcements, seasonal campaigns (such as Eid, Pohela Boishakh, and BPL season promotions), and platform updates. You may withdraw your consent to marketing communications at any time by updating your notification preferences in your account settings or by contacting us at [email protected]. Withdrawal of marketing consent does not affect our ability to send you essential service communications (e.g., account security alerts, withdrawal confirmations, Terms updates).

2.2 Automated Decision-Making

maha 6 uses automated systems to detect unusual activity patterns, assess fraud risk, and monitor responsible gaming indicators. These automated processes may result in temporary account holds or requests for additional verification. Where an automated decision has a significant impact on you, you have the right to request human review of that decision — see Section 7 for details.

Section 03

Legal Basis for Processing

maha 6 processes your personal data only where we have a valid legal basis to do so. The four legal bases we rely upon are:

• Contract Performance — Processing is necessary to deliver the services described in our Terms & Conditions, including account management, game access, and payment processing. Without this processing, we cannot provide you with a maha 6 account.
• Legal Obligation — We are required by applicable anti-money laundering principles, age verification obligations, and responsible gaming standards to process certain categories of data. This processing is non-negotiable and cannot be opted out of while you hold an active account.
• Legitimate Interest — Where we process data to protect the security and integrity of the platform, to prevent fraud, and to conduct aggregate analytics for platform improvement, we do so on the basis of our legitimate business interests, balanced against your privacy rights. You may object to this processing — see Section 7.
• Consent — For non-essential processing such as personalised marketing communications and non-essential cookies, we rely on your freely given, specific, and informed consent. You may withdraw consent at any time without detriment to your account standing.

Section 04

Data Sharing & Disclosure

maha 6 does not sell your personal data to third parties. We share your data only in the limited circumstances described below, and only to the extent necessary for the stated purpose. All third parties with whom we share data are required to maintain appropriate technical and organisational security measures and to process the data only for the purposes we specify.

4.1 Payment Processors

To process deposits and withdrawals, maha 6 shares relevant transactional and identity data with the mobile financial service providers you select — including bKash, Nagad, Rocket, and Upay — as well as with any applicable bank partners such as Dutch-Bangla Bank or BRAC Bank. Data shared with payment processors is limited strictly to what is required to execute and verify each transaction.

4.2 Game Providers

The games available on maha 6 are provided by regulated third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. To facilitate gameplay, a session token and limited account reference may be passed to the relevant game provider's servers. Game providers do not receive your full registration data, KYC documents, or payment details.

4.3 Identity Verification Services

To fulfil our KYC and age verification obligations, maha 6 may share your submitted identity documents and personal details with specialist third-party identity verification providers. These providers process your data solely for the purpose of confirming your identity and eligibility and are contractually prohibited from using your data for any other purpose.

4.4 Legal and Regulatory Disclosure

maha 6 may disclose personal data to law enforcement agencies, regulatory bodies, or other authorised public authorities where required to do so by applicable law, or where we have a good-faith belief that such disclosure is necessary to prevent, investigate, or respond to fraud, money laundering, or other illegal activity. We will notify you of any such disclosure where we are legally permitted to do so.

4.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of maha 6's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified in advance of any such transfer and your data will remain subject to the protections described in this Privacy Policy.

Section 05

Cookies & Tracking

maha 6 uses cookies and similar tracking technologies (including local storage, session storage, and pixel tags) to operate and improve the platform. A cookie is a small text file stored on your device by your browser when you visit a website. The categories of cookies we use are set out below.

5.1 Managing Your Cookie Preferences

You can control cookie settings through your browser's privacy or settings menu. Most modern browsers allow you to view, block, and delete cookies stored by specific websites. Please note that disabling strictly necessary cookies will prevent you from logging in to your maha 6 account or completing financial transactions. For non-essential cookies, you may update your preferences at any time by contacting [email protected] or adjusting the relevant settings in your account profile.

We do not use cookies to track your browsing activity on third-party websites beyond maha-6.com. Any analytics data collected via cookies is processed in aggregate form and is not used to build individual profiles for sale to third parties.

Section 06

Data Retention

maha 6 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or operational obligations. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Anonymised aggregate data may be retained indefinitely for statistical and analytical purposes as it no longer constitutes personal data.

Section 07

Your Privacy Rights

As a registered player on maha 6, you hold a number of rights in relation to the personal data we hold about you. We are committed to honouring these rights promptly and transparently. To exercise any of the rights described below, please contact us at [email protected] with a clear description of your request. We will respond within five business days on Bangladesh Standard Time (UTC+6).

7.1 Right of Access

You have the right to request a copy of the personal data maha 6 holds about you — commonly known as a Subject Access Request (SAR). We will provide this information in a structured, commonly used format. The first copy is provided free of charge; for subsequent requests within the same 12-month period, a reasonable administrative fee may apply.

7.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For data you can update directly in your account profile (such as email address or phone number), you are encouraged to do so yourself. For data that requires manual amendment — such as your legal name or date of birth — please contact support with documentary evidence of the correct information.

7.3 Right to Erasure

Also known as the "right to be forgotten", this right allows you to request the deletion of personal data we hold about you where there is no longer a lawful basis for its retention. Please note that this right is subject to our legal obligation to retain certain data categories (as described in Section 6). Where deletion is not possible in full, we will inform you of the specific data we are required to retain and the legal basis for that requirement.

7.4 Right to Restrict Processing

In certain circumstances — for example, where you contest the accuracy of data we hold, or where processing is unlawful but you prefer restriction over deletion — you may request that we restrict the processing of your personal data. During a restriction period, we will store the data but not actively process it beyond what is strictly necessary.

7.5 Right to Data Portability

Where processing is based on your consent or on contract performance, you have the right to receive a copy of the personal data you provided to us in a structured, machine-readable format (such as CSV or JSON), so that you may transfer it to another service provider if you wish.

7.6 Right to Object

You have the right to object to processing carried out on the basis of legitimate interest — in particular, processing for direct marketing and profiling purposes. Where you object to marketing, we will cease all marketing communications immediately. Where you object to other legitimate-interest processing, we will assess whether our legitimate interest overrides your objection and inform you of the outcome.

7.7 Rights Related to Automated Decision-Making

Where a solely automated decision has a significant legal or similarly significant effect on you (for example, an automated account suspension), you have the right to request human review of that decision, express your point of view, and contest the outcome. To invoke this right, contact [email protected] and clearly state that you are requesting human review of an automated decision.

Section 08

Contact & Data Enquiries

If you have any questions, concerns, or complaints about this Privacy Policy or about the way maha 6 processes your personal data, please contact our data support team using the details below. We take privacy matters seriously and will respond to all enquiries within five business days.

• Email: [email protected] — please use the subject line "Privacy Enquiry" for faster routing.
• Response Time: Within 5 business days on Bangladesh Standard Time (UTC+6). Complex Subject Access Requests may take up to 30 calendar days.
• Support Hours: 24/7 on BST — our team is always available to assist with urgent account security or data breach concerns.
• Platform: maha 6, accessible at maha-6.com, serving players across Bangladesh including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, and Barisal.