maha6 Privacy Policy —
Your Data, Your Rights

maha6 ("maha6", "we", "us", "our") operates the online gaming platform at maha6.id. This Privacy Policy explains how maha6 collects, uses, stores, and protects the personal data of players and visitors who use our platform.

We understand that privacy is important to our players in Bangladesh. When you trust maha6 with your personal information, we take that responsibility seriously. This policy is written in plain language so you can understand exactly what happens to your data — no legal jargon, no vague statements.

This Privacy Policy applies to all personal data collected through maha6.id, the maha6 mobile app, and any communications between you and maha6 including email, live chat, and SMS. It should be read alongside our Terms and Conditions.

maha6 collects personal data in the following categories:

maha6 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information unless specifically required for responsible gaming purposes and with your explicit consent.

maha6 uses your personal data for the following purposes:

• Account Management: To create, maintain, and secure your maha6 account, including login authentication and account recovery.
• Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, and bank transfer in BDT.
• Identity Verification: To verify your age and identity in compliance with our responsible gaming obligations and anti-fraud requirements.
• Customer Support: To respond to your queries, complaints, and support requests via live chat, email, or phone.
• Platform Improvement: To analyse usage patterns and improve the maha6 platform, game selection, and user experience.
• Fraud Prevention: To detect, investigate, and prevent fraudulent activity, money laundering, and other illegal conduct on the platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — only where you have opted in to receive these.
• Legal Compliance: To comply with applicable laws, regulations, and requests from regulatory or law enforcement authorities.

maha6 will never use your personal data for purposes that are incompatible with those listed above without first obtaining your explicit consent.

maha6 processes your personal data on the following legal grounds:

• Contractual Necessity: Processing your data is necessary to fulfil our contract with you — i.e., to operate your maha6 account, process transactions, and provide gaming services.
• Legal Obligation: We are required to process certain data to comply with anti-money laundering (AML) regulations, age verification requirements, and other applicable laws.
• Legitimate Interests: maha6 processes some data based on our legitimate business interests, such as fraud prevention, platform security, and improving our services — provided these interests are not overridden by your rights.
• Consent: Where we rely on your consent — for example, to send marketing communications — you may withdraw that consent at any time by contacting [email protected] or using the unsubscribe link in any marketing message.

maha6 does not sell your personal data. We may share your data with the following categories of third parties, strictly for the purposes described in this policy:

• Payment Processors: bKash, Nagad, Rocket, and banking partners require transaction data to process your deposits and withdrawals.
• Identity Verification Providers: Third-party KYC (Know Your Customer) services that help us verify your identity and age.
• Game Providers: Live casino and game studios such as EVO and WM may receive anonymised session data necessary to deliver their games on the maha6 platform.
• IT and Security Providers: Cloud hosting, cybersecurity, and platform infrastructure providers who process data on our behalf under strict data processing agreements.
• Legal and Regulatory Authorities: Where required by law, maha6 may disclose your data to government bodies, law enforcement agencies, or regulators.

maha6 does not transfer your personal data to countries outside your region without ensuring appropriate safeguards are in place to protect your data.

maha6 uses cookies and similar tracking technologies to improve your experience on the platform, remember your preferences, and analyse how the site is used. Here is a breakdown of the types of cookies we use:

• Essential Cookies: Required for the platform to function. These include session cookies that keep you logged in and security cookies that protect against fraud. You cannot opt out of essential cookies.
• Analytics Cookies: Help us understand how players navigate maha6 — which pages are visited most, where players drop off, and how long sessions last. This data is aggregated and anonymised.
• Preference Cookies: Remember your settings such as language preference, display options, and game lobby filters so you don't have to reset them every visit.
• Marketing Cookies: Used to deliver relevant promotional content to you based on your activity on maha6. These are only active if you have consented to marketing communications.

You can manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the maha6 platform. For more details on how to manage cookies, refer to your browser's help documentation.

maha6 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Our standard retention periods are as follows:

• Account Data: Retained for the duration of your account and for up to 5 years after account closure, in line with anti-money laundering regulations.
• Transaction Records: Retained for a minimum of 5 years from the date of each transaction for financial compliance purposes.
• Identity Verification Documents: Retained for up to 5 years after account closure or the completion of the verification process.
• Support Communications: Retained for up to 3 years from the date of the last interaction.
• Marketing Preferences: Retained until you withdraw consent or request deletion.
• Technical and Usage Data: Typically retained for up to 24 months in anonymised or aggregated form for analytics purposes.

When your data is no longer required, maha6 will securely delete or anonymise it so that it can no longer be linked back to you.

As a maha6 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at [email protected] with your account details and the specific request.

• Right of Access: You can request a copy of all personal data maha6 holds about you. We will respond within 30 days of receiving a valid request.
• Right to Rectification: If any of your personal data held by maha6 is inaccurate or incomplete, you have the right to request that we correct it.
• Right to Erasure: You may request that maha6 delete your personal data where it is no longer necessary for the purposes it was collected, subject to our legal retention obligations.
• Right to Restrict Processing: You can ask maha6 to restrict how we use your data in certain circumstances — for example, while a dispute is being resolved.
• Right to Data Portability: You may request that maha6 provide your personal data in a structured, machine-readable format so you can transfer it to another service.
• Right to Object: You have the right to object to maha6 processing your data for direct marketing purposes at any time. You can also object to processing based on legitimate interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

maha6 takes the security of your personal data seriously. We implement a range of technical and organisational measures to protect your data against unauthorised access, loss, destruction, or alteration.

• SSL/TLS Encryption: All data transmitted between your device and maha6.id is encrypted using industry-standard SSL/TLS protocols.
• Access Controls: Access to personal data within maha6 is restricted to authorised personnel on a need-to-know basis. All staff with data access undergo regular security training.
• Firewalls and Intrusion Detection: Our servers are protected by enterprise-grade firewalls and real-time intrusion detection systems.
• Regular Security Audits: maha6 conducts regular internal and third-party security audits to identify and address vulnerabilities.
• Two-Factor Authentication: maha6 supports two-factor authentication (2FA) for player accounts. We strongly recommend enabling 2FA to add an extra layer of security to your account.

Despite these measures, no online platform can guarantee 100% security. If you suspect that your maha6 account has been compromised, contact [email protected] immediately and change your password.

maha6 is strictly an adult platform. We do not knowingly collect personal data from anyone under the age of 18. If you are under 18, you are not permitted to register an account or use any part of the maha6 platform.

If maha6 becomes aware that personal data has been collected from a person under 18, we will immediately suspend the associated account, delete the data, and take appropriate action in line with our responsible gaming policy.

If you are a parent or guardian and believe your child has registered on maha6, please contact us immediately at [email protected] so we can investigate and take action.

The maha6 platform may contain links to third-party websites or services — for example, payment provider portals or game studio pages. This Privacy Policy applies only to maha6.id and does not cover the privacy practices of any third-party sites.

maha6 is not responsible for the content or privacy practices of third-party websites. We recommend reviewing the privacy policy of any third-party site you visit before providing your personal data.

maha6 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform features. When we make material changes, we will notify registered players via email or an in-platform notification.

The updated policy will be published on this page with a revised "Last Updated" date at the top. Your continued use of maha6 after any changes constitutes your acceptance of the updated Privacy Policy.

We encourage you to review this page periodically to stay informed about how maha6 protects your privacy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way maha6 handles your personal data, please get in touch with our support team. We're available 24/7 and will respond to all privacy-related enquiries promptly.

• Email: [email protected]
• Live Chat: Available within the maha6 platform after login
• FAQ: Visit our FAQ page for quick answers

For data access, rectification, or deletion requests, please email [email protected] with the subject line "Data Privacy Request" and include your registered account details so we can locate your data and respond efficiently.