Privacy & Data Protection

maha6 Privacy Policy

Your privacy is not a checkbox for us — it is a core part of how maha6 operates. This policy explains exactly what data we collect, why we collect it, how we use it, and what rights you have over your own information.

Last Updated: 1 January 2025

Six Privacy Commitments We Make to Every Player

maha6 handles your personal data with the same care we put into every other part of the platform. Here is what that looks like in practice.

256-Bit SSL Encryption

Every piece of data transmitted between your device and the maha6 platform is protected by 256-bit SSL encryption — the same standard used by major banks. Your personal details and payment information are never sent in plain text.

No Data Sold to Third Parties

maha6 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. Your information is used only for the purposes described in this policy — nothing more, nothing less.

Secure Data Storage

Player data is stored on secure servers with restricted access controls. Only authorised maha6 personnel with a legitimate operational need can access your personal information, and all access is logged and audited.

Minimal Data Collection

maha6 only collects the data that is genuinely necessary to operate your account, process payments, verify your identity, and comply with legal obligations. We do not collect data speculatively or for purposes we cannot justify.

Your Rights, Always Respected

You have the right to access, correct, or request deletion of your personal data at any time. maha6 will respond to all data rights requests within 30 days. Your rights are not conditional on your account status or activity level.

Marketing Only With Consent

maha6 will only send you promotional communications if you have opted in to receive them. You can withdraw your marketing consent at any time from your account settings or by contacting support — no questions asked.

1 Introduction

This Privacy Policy explains how maha6 ("maha6", "we", "us", "our") collects, uses, stores, and protects the personal data of players and visitors who use the maha6 platform at maha6.io and the maha6 mobile application.

maha6 is committed to handling your personal data responsibly and transparently. We understand that trust is the foundation of any relationship between a player and an online gaming platform, and we take that responsibility seriously. This policy is written in plain language so that every player — regardless of their technical background — can understand exactly how their data is handled.

By using the maha6 platform, registering an account, or making a deposit, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with this policy, please do not use the maha6 platform.

Scope: This policy applies to all personal data collected through the maha6 website, mobile application, live chat, email communications, and any other channel through which you interact with maha6.

2 Data We Collect

maha6 collects personal data in two ways — information you provide directly, and information collected automatically when you use the platform. Below is a clear breakdown of both categories.

Information you provide directly:

  • Full name and date of birth (required for account registration and age verification).
  • Email address and mobile phone number.
  • Payment account details including bKash, Nagad, or Rocket account numbers.
  • Government-issued identity documents submitted during KYC verification.
  • Communications you send to maha6 support via live chat or email.
  • Preferences and settings you configure within your account.

Information collected automatically:

  • IP address and approximate geographic location.
  • Device type, operating system, and browser information.
  • Pages visited, time spent on each page, and navigation patterns.
  • Game activity including games played, bet amounts, and session duration.
  • Login timestamps and session data.
  • Cookie and tracking data (see Section 6 for full details).
Data Category Examples Purpose
Identity Data Name, date of birth, ID documents Age verification, KYC compliance
Contact Data Email, mobile number Account communication, support
Financial Data Mobile banking account numbers Deposit and withdrawal processing
Technical Data IP address, device info, browser Security, fraud prevention
Usage Data Games played, session duration Responsible gaming monitoring
Marketing Data Communication preferences Promotional communications (with consent)

3 How We Use Your Data

maha6 uses your personal data only for legitimate, clearly defined purposes. We do not use your data in ways that are inconsistent with the purposes for which it was collected. The primary purposes for which we use your data are:

  • To create and manage your maha6 account and verify your identity.
  • To process deposits and withdrawals via your registered mobile banking accounts.
  • To verify that you meet the minimum age requirement of 18 years.
  • To detect and prevent fraud, money laundering, and other prohibited activities.
  • To monitor gameplay patterns for responsible gaming purposes and apply limits where necessary.
  • To provide customer support and respond to your enquiries.
  • To send you transactional communications such as deposit confirmations and withdrawal notifications.
  • To send you promotional communications about bonuses and offers — only if you have opted in.
  • To improve the maha6 platform based on aggregated usage data and player feedback.
  • To comply with legal and regulatory obligations applicable to online gaming operators.

maha6 does not use automated decision-making or profiling in ways that produce legal or similarly significant effects on players, except where required by law or where you have given explicit consent.

4 Legal Basis for Processing

maha6 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

  • Contract performance: Processing necessary to fulfil our obligations to you under the maha6 Terms and Conditions — including account management, payment processing, and customer support.
  • Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) requirements and age verification obligations.
  • Legitimate interests: Processing necessary for maha6's legitimate business interests, including fraud prevention, platform security, and responsible gaming monitoring — provided these interests are not overridden by your rights.
  • Consent: Processing based on your explicit consent, such as sending marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5 Data Sharing

maha6 does not sell your personal data. We share your data only in the limited circumstances described below, and only with parties who are contractually obligated to handle it securely and in accordance with applicable data protection standards.

  • Payment processors: Your mobile banking account details are shared with bKash, Nagad, and Rocket solely for the purpose of processing your deposits and withdrawals.
  • Game providers: Licensed third-party game suppliers receive limited technical data necessary to deliver their games on the maha6 platform. They do not receive your full personal profile.
  • Identity verification services: KYC verification providers receive your identity documents to confirm your age and identity. These providers are bound by strict confidentiality obligations.
  • Regulatory and law enforcement authorities: maha6 may disclose your data to relevant authorities where required by law, court order, or regulatory requirement.
  • Fraud prevention agencies: In cases of suspected fraud or money laundering, relevant data may be shared with fraud prevention organisations.

Important: maha6 will never share your personal data with advertisers, data brokers, or any third party for commercial marketing purposes without your explicit consent.

6 Cookies & Tracking

maha6 uses cookies and similar tracking technologies to improve your experience on the platform, maintain your session, and gather analytics data that helps us understand how the platform is used. Below is a summary of the types of cookies we use.

  • Essential cookies: Required for the platform to function. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled.
  • Analytics cookies: Used to collect aggregated, anonymised data about how players navigate the platform. This helps us identify areas for improvement. These are enabled by default but can be disabled.
  • Preference cookies: Store your platform preferences such as language settings and display options so you do not have to reconfigure them on each visit.
  • Marketing cookies: Used only if you have opted in to receive personalised promotional content. These track which promotions you have seen and interacted with.

You can manage your cookie preferences through your browser settings at any time. Please note that disabling essential cookies will affect the functionality of the maha6 platform and may prevent you from logging in or completing transactions.

7 Data Retention

maha6 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

  • Active account data: Retained for the duration of your account and for five years after account closure, in line with standard AML record-keeping requirements.
  • Transaction records: Retained for a minimum of five years from the date of the transaction.
  • KYC documents: Retained for five years after account closure or the last transaction, whichever is later.
  • Support communications: Retained for two years from the date of the last communication.
  • Marketing consent records: Retained for the duration of your consent and for one year after withdrawal of consent.

When data is no longer required, it is securely deleted or anonymised so that it can no longer be linked to you as an individual. maha6 conducts regular data audits to ensure that retention periods are being observed.

8 Your Privacy Rights

As a maha6 player, you have the following rights in relation to your personal data. maha6 will respond to all valid requests within 30 days.

Right of Access

Request a copy of all personal data maha6 holds about you.

Right to Rectification

Request correction of any inaccurate or incomplete personal data.

Right to Erasure

Request deletion of your data where there is no legal basis to retain it.

Right to Restriction

Request that we limit how we use your data in certain circumstances.

Right to Portability

Receive your data in a structured, machine-readable format.

Right to Object

Object to processing based on legitimate interests, including direct marketing.

To exercise any of these rights, please contact the maha6 data team at [email protected] with the subject line "Data Rights Request". We may need to verify your identity before processing your request.

9 Data Security

maha6 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:

  • 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
  • Encryption of sensitive data at rest, including payment account details and identity documents.
  • Role-based access controls ensuring that only authorised personnel can access personal data.
  • Regular security audits and penetration testing of the maha6 platform infrastructure.
  • Two-factor authentication options for player accounts to prevent unauthorised access.
  • Automated monitoring systems that detect and alert on suspicious access patterns in real time.
  • Staff training on data protection and security best practices.

Data Breach Response: In the unlikely event of a data breach that poses a risk to your rights and freedoms, maha6 will notify affected players without undue delay and take immediate steps to contain and remediate the breach.

While maha6 takes every reasonable precaution to protect your data, no online platform can guarantee absolute security. You also play a role in keeping your account secure — please use a strong, unique password and never share your login credentials with anyone.

10 Children's Privacy

The maha6 platform is strictly intended for adults aged 18 and over. maha6 does not knowingly collect personal data from anyone under the age of 18. Age verification is a mandatory step in the registration process, and additional verification may be requested at any time.

If maha6 discovers that personal data has been collected from a person under 18, that account will be immediately closed, all data will be deleted, and any deposits will be returned to the payment source. If you believe a minor has registered on maha6, please contact us immediately at [email protected].

11 Changes to This Policy

maha6 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform features. When we make changes, the updated policy will be published on this page with a revised "Last Updated" date.

For significant changes that materially affect how we use your personal data, maha6 will notify registered players via email or an in-platform notification before the changes take effect. We encourage you to review this page periodically so you are always aware of how your data is being handled.

Your continued use of the maha6 platform after any changes to this Privacy Policy constitutes your acceptance of the updated policy. If you do not agree with the changes, you should stop using the platform and contact support to close your account.

12 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way maha6 handles your personal data, please get in touch with us through any of the following channels:

  • Email: [email protected] — please use the subject line "Privacy Enquiry" for faster routing.
  • Live Chat: Available 24/7 directly on the maha6 platform with an average response time of under two minutes.
  • FAQ: Visit our FAQ page for answers to common questions about your account and data.

Data Rights Requests: To exercise your rights under Section 8, email [email protected] with the subject line "Data Rights Request". We will respond within 30 days and may ask you to verify your identity before proceeding.

Safe & Secure

Your Data Is Safe — Now Let's Play

maha6 is built on transparency, security, and fairness. Now that you know exactly how we handle your privacy, join thousands of players across Bangladesh who trust maha6 every day.

18+ only. Please gamble responsibly. Responsible Gaming Policy