Privacy Policy — x6817

1. Data Controller

1.1 For the purposes of this Privacy Policy, the data controller responsible for the processing of your personal information is x6817, operating the online casino and sports betting platform at x6817.io.

1.2 If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which x6817 handles your personal data, you may contact our Data Privacy team directly at: [email protected]. Our support team is available 24 hours a day, 7 days a week, including during Bangladeshi public holidays.

1.3 x6817 is committed to handling all personal data in a responsible, lawful and transparent manner consistent with applicable data protection principles and best practices.

2. Data We Collect

2.1 x6817 collects personal data from you in the following circumstances: when you register an account, when you make deposits or withdrawals, when you contact our support team, when you use our games or sportsbook, and when you browse the x6817 website. The categories of personal data we collect include:

2.2 x6817 does not collect sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information) unless explicitly required for responsible gaming purposes (e.g., vulnerability assessments requested by the player).

2.3 Where you provide personal data relating to third parties (for example, an alternative payment contact), you confirm that you have obtained the consent of that individual to share their data with x6817 for the stated purpose.

3. How We Use Your Data

3.1 x6817 uses the personal data collected from you for the following purposes:

• Account creation and management — to register your account, verify your identity, manage your account settings and maintain accurate records.
• Service delivery — to provide access to casino games, live dealer tables, sports betting markets (including cricket BPL, IPL and T20 events), and all other x6817 platform features.
• Payment processing — to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa and Mastercard, and to maintain accurate transaction records in BDT.
• Customer support — to respond to your queries, complaints and support requests promptly and effectively, 24/7.
• Fraud prevention and security — to detect, investigate and prevent fraudulent activity, money laundering, bonus abuse, and other prohibited conduct on the platform.
• Legal and regulatory compliance — to fulfil our obligations under anti-money laundering (AML), know-your-customer (KYC) and other applicable regulatory requirements.
• Responsible gaming — to monitor gameplay patterns for signs of problem gambling and to administer self-exclusion, deposit limits, and other responsible gaming tools.
• Platform improvement — to analyse usage data and improve the performance, functionality, and user experience of the x6817 platform.
• Personalisation — to tailor promotional offers, game recommendations and communications to your demonstrated preferences, where you have consented to receive such communications.

3.2 x6817 will not use your personal data for any purpose that is incompatible with the purposes described in this section without first obtaining your explicit consent or as required by applicable law.

4. Legal Basis for Processing

4.1 x6817 processes your personal data on the following legal bases:

• Contractual necessity — processing is necessary to perform the contract between you and x6817, including account registration, game access, and payment processing.
• Legal obligation — processing is necessary to comply with applicable legal requirements, including AML/KYC obligations, age verification (21+), and financial record-keeping.
• Legitimate interests — processing is necessary for x6817's legitimate business interests, including fraud detection, platform security, and service improvement, where those interests are not overridden by your rights and interests.
• Consent — for certain processing activities (such as personalised marketing communications), x6817 relies on your explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

4.2 Where x6817 relies on legitimate interests as the legal basis for processing, we have conducted a balancing assessment to ensure that our interests do not outweigh your fundamental rights and freedoms. You may request details of this assessment by contacting [email protected].

5. Sharing Your Data

5.1 x6817 does not sell, rent, or trade your personal data to any third party. We may share your personal data with selected third parties only in the following circumstances:

• Payment processors — we share necessary financial data with payment service providers (bKash, Nagad, Rocket, Upay, Visa, Mastercard) solely to process your deposits and withdrawals.
• Game providers — technical identifiers (not full personal profiles) may be passed to game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe and Ezugi to facilitate game session management and fairness auditing.
• Identity verification services — we may share identity data with third-party KYC verification providers to fulfil our age verification (21+) and anti-money laundering obligations.
• Fraud prevention partners — we may share data with trusted fraud detection and security partners to protect the integrity of the x6817 platform and its users.
• Legal authorities — we may disclose your personal data to law enforcement agencies, regulatory bodies, or courts where we are legally required to do so, or where such disclosure is necessary to protect the rights, property or safety of x6817 or other parties.
• Professional advisers — we may share data with our legal, financial, or technical advisers on a strictly confidential basis where necessary.

5.2 All third parties with whom x6817 shares personal data are contractually required to maintain appropriate security standards and to use the data only for the specific purpose for which it was shared. x6817 does not permit its data-sharing partners to use your personal data for their own marketing or commercial purposes.

5.3 In the event of a corporate restructuring, merger, acquisition or sale of assets involving x6817, your personal data may be transferred as part of that transaction. We will notify you of any such transfer and the privacy terms that will apply to your data going forward.

6. Cookies & Tracking Technologies

6.1 x6817 uses cookies and similar tracking technologies (including local storage and session storage) to operate and improve the platform. The categories of cookies we use are as follows:

6.2 You can manage or disable non-essential cookies at any time through your web browser settings. Disabling strictly necessary cookies may impair the functionality of the x6817 platform. Disabling functional or analytics cookies will not prevent you from using the platform but may affect personalisation features.

6.3 x6817 does not use cookies to track your online activity across third-party websites unrelated to x6817. Our cookies are strictly scoped to the x6817.io domain and its operational subdomains.

7. Data Retention

7.1 x6817 retains your personal data for the following periods, depending on the category of data and the purpose for which it was collected:

• Account data (identity, contact): retained for the duration of your account and for a minimum of 5 years following account closure, to comply with AML and KYC regulatory requirements.
• Transaction and financial data: retained for a minimum of 5 years from the date of each transaction in accordance with financial record-keeping obligations.
• Responsible gaming records: self-exclusion records and deposit limit configurations are retained for a minimum of 5 years to prevent circumvention of responsible gaming measures.
• Customer support communications: retained for 2 years from the date of the last interaction, unless a longer period is required in connection with an ongoing dispute or legal matter.
• Technical and usage data: retained in aggregated or anonymised form for up to 24 months for platform analytics and improvement purposes.
• Marketing consent records: retained for the duration of the marketing relationship and for 1 year following withdrawal of consent.

7.2 Following the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with an identifiable individual. x6817 conducts periodic data audits to ensure compliance with these retention schedules.

8. Data Security

8.1 x6817 employs a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and x6817 servers.
• Encrypted storage of sensitive data fields (passwords, financial identifiers) using industry-standard hashing and encryption algorithms.
• Access controls — personal data is accessible only to authorised x6817 personnel on a strict need-to-know basis. All staff with data access receive regular privacy and security training.
• Two-factor authentication (2FA) available to all x6817 account holders as an additional layer of account security.
• Regular security audits and penetration testing conducted by qualified independent security professionals.
• Incident response procedures — in the event of a personal data breach, x6817 will assess the incident, take immediate containment measures, and notify affected users as required.

8.2 While x6817 takes all reasonable steps to protect your personal data, no method of internet transmission or electronic storage is completely secure. You also have a responsibility to keep your x6817 login credentials confidential and to notify us immediately if you suspect unauthorised access to your account.

9. Your Rights

9.1 As an x6817 account holder and data subject, you have the following rights regarding your personal data:

• Right of Access — you have the right to request a copy of the personal data that x6817 holds about you, along with information about how that data is processed.
• Right to Rectification — you have the right to request the correction of any inaccurate or incomplete personal data held by x6817.
• Right to Erasure ("Right to be Forgotten") — you may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Restrict Processing — you may request that x6817 restrict the processing of your personal data in certain circumstances (e.g., while the accuracy of data is being disputed).
• Right to Data Portability — you have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller where technically feasible.
• Right to Object — you have the right to object to processing based on legitimate interests, including direct marketing. x6817 will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent — where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

9.2 To exercise any of the rights listed above, please contact x6817 at [email protected]. We will respond to all legitimate requests within a reasonable timeframe, and no later than 30 days from receipt of your request. We may need to verify your identity before processing your request.

9.3 x6817 will not charge a fee for processing data rights requests unless a request is manifestly unfounded, excessive or repetitive, in which case a reasonable administrative fee may apply.

10. Children & Minors

10.1 x6817 is strictly an adult platform. Access to and use of the x6817 platform is permitted only to individuals who are 21 years of age or older. x6817 does not knowingly collect personal data from individuals under the age of 21.

10.2 If x6817 discovers or is notified that personal data has been collected from a person under the age of 21, we will immediately suspend the associated account, delete all personal data relating to that individual, and void any transactions or balances associated with that account.

10.3 If you are a parent or guardian and believe that a person under the age of 21 in your care has created an x6817 account or provided personal data to us, please contact us immediately at [email protected] so that we can take prompt action.

10.4 x6817 employs age verification mechanisms during registration, including National ID (NID) checks, to prevent underage individuals from accessing the platform. We strongly support parental control tools and encourage parents and guardians to make use of available internet filtering software to restrict access to gambling platforms.

11. Third-Party Services

11.1 The x6817 platform integrates with a number of third-party service providers to deliver its full range of features. These include game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi), payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard), and platform analytics tools.

11.2 Each third-party service provider operates under its own privacy policy and data handling practices. x6817 is not responsible for the privacy practices of third-party providers beyond the contractual data processing obligations we impose on them as described in Section 5 of this Policy.

11.3 The x6817 platform does not contain links to external third-party websites unrelated to x6817 operations. Where third-party content (such as game iframes from providers) is displayed within the platform, those providers' privacy policies govern the data processed within their own environments.

11.4 x6817 conducts due diligence on all third-party service providers before engagement and requires contractual commitments to appropriate data security and privacy standards as a condition of the service relationship.

12. Policy Updates

12.1 x6817 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will publish the revised Policy on this page with an updated "Last Updated" date. For significant changes, we may also provide notice via email or a platform notification to registered account holders.

12.2 It is your responsibility to review this Privacy Policy periodically to remain informed of any changes. Your continued use of the x6817 platform following the publication of a revised Privacy Policy constitutes your acceptance of those changes.

12.3 The current version of this Privacy Policy was last updated on 1 January 2026 and supersedes all previous versions.

12.4 For any questions, concerns or requests relating to this Privacy Policy, please contact our Data Privacy team at [email protected]. We are available 24/7, including all Bangladesh Standard Time (BST, UTC+6) hours and public holidays.