66d Privacy Policy

1 Data We Collect

When you register an account with 66d, use our platform, or interact with our support team, we collect certain categories of personal data. The table below summarises what we collect, the source from which it originates, and the legal basis for collection.

1.1 Data You Are Not Required to Provide

You are not required to provide sensitive personal data such as racial or ethnic origin, religious beliefs, or political opinions to use the 66d platform. If any such data is incidentally provided — for example, within a support message — it will not be stored in a manner that identifies it as a special category and will not be used for any profiling purpose.

1.2 Data from Third Parties

In certain circumstances, 66d may receive data about you from third-party sources, including payment processors (for transaction confirmation), identity verification service providers (for KYC compliance), and fraud detection partners. Any data received from third parties is treated with the same level of protection as data you provide directly and is used only for the purposes described in this policy.

2 How We Use Your Data

66d processes your personal data on the basis of one or more of the following legal grounds: (a) contractual necessity — to fulfil obligations under the agreement between you and 66d; (b) legal obligation — to comply with applicable laws and anti-money-laundering requirements; (c) legitimate interests — where our interests in operating a safe and compliant platform do not override your privacy rights; and (d) consent — where you have explicitly agreed to a specific use of your data.

2.1 Account Management

We use your identity and contact data to create and maintain your 66d account, authenticate your login sessions, and ensure that only you can access your account. This includes sending you transactional communications such as deposit confirmations, withdrawal notifications, and account security alerts.

2.2 Payment Processing

Your payment data is used exclusively to process deposits into your account and withdrawals to your verified payment method. 66d does not store full card numbers or mobile banking PINs. Payment data is shared with the relevant payment processor (bKash, Nagad, Rocket, Upay, Visa, Mastercard) only to the extent necessary to complete the transaction.

2.3 Identity Verification and KYC Compliance

As an operator committed to responsible and compliant operation, 66d is required to verify the identity and age of all players prior to processing withdrawals. Your identity documents are used solely for this verification purpose. Where a third-party KYC verification service is used, your documents are shared with that service under a strict data processing agreement that prohibits any secondary use.

2.4 Fraud Prevention and Platform Security

Technical and usage data — including your IP address, device fingerprint, and login history — are analysed to detect suspicious activity, prevent account takeovers, identify multi-accounting, and protect the integrity of the platform. This processing is carried out on the basis of 66d's legitimate interests in maintaining a secure and fair environment for all players.

2.5 Responsible Gaming Monitoring

Usage data, including session duration, wagering frequency, deposit patterns, and self-exclusion history, is used to monitor player behaviour for signs of problem gambling. Where such signs are identified, 66d may make proactive contact with the player, apply account restrictions, or refer the player to responsible gaming resources. This processing reflects both our legal obligations and our genuine commitment to player welfare.

2.6 Marketing Communications

With your consent, 66d may send you promotional communications relating to bonuses, new games, seasonal offers, and platform updates. You may withdraw your consent to marketing communications at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out prior to that withdrawal. Transactional and security communications are sent regardless of your marketing preferences, as they are necessary for the operation of your account.

3 Data Sharing & Third Parties

66d does not sell, rent, or trade your personal data to third parties for commercial purposes. We share your data only in the specific circumstances described below, and only to the extent strictly necessary for the stated purpose.

3.1 Payment Processors

To facilitate deposits and withdrawals, 66d shares relevant payment data with mobile financial service providers including bKash, Nagad, Rocket, and Upay, and card networks including Visa and Mastercard. Each of these providers operates under their own privacy policy and regulatory obligations and is independently responsible for the data they process on their platforms.

3.2 Game Providers

Games available on the 66d platform are supplied by third-party studios including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi. To deliver these games, 66d shares a session token and limited account reference data with the relevant provider. Game providers do not receive your full identity data, payment data, or contact details. Game providers maintain their own privacy and fair play certifications.

3.3 Identity Verification Partners

Where automated KYC verification is used, your identity documents and associated data are transmitted to a third-party identity verification partner via encrypted connection. This partner processes your data solely for verification purposes under a data processing agreement with 66d. Documents submitted for KYC are not retained by the verification partner beyond the period required to complete the check.

3.4 Analytics Providers

66d uses privacy-respecting analytics tools to understand aggregate platform usage patterns, identify technical issues, and improve the user experience. Analytics data is pseudonymised and does not directly identify individual players. Analytics providers are prohibited from using data collected on 66d's behalf for their own commercial purposes.

3.5 Legal and Regulatory Disclosure

66d may disclose your personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required to do so by applicable law, court order, or legally binding government request. In such cases, 66d will disclose only the minimum data necessary to comply with the legal obligation and, where permitted by law, will notify you of the disclosure request.

4 Cookies & Tracking Technologies

66d uses cookies and similar tracking technologies to provide a functional, secure, and personalised platform experience. A cookie is a small text file placed on your device when you visit a website. Cookies do not contain executable code and cannot access other data stored on your device.

4.1 Cookie Categories

4.2 Managing Cookies

You can control and manage cookies through your browser settings. Most modern browsers allow you to block, delete, or restrict cookies on a per-site basis. Please note that disabling strictly necessary cookies will prevent you from logging in or using core platform features. Disabling functional cookies may result in your preferences not being saved between sessions. Detailed instructions for managing cookies in common browsers can be found in the help section of your browser.

4.3 No Cross-Site Tracking

66d does not deploy third-party advertising trackers or cross-site tracking technologies. We do not participate in ad retargeting networks. Analytics data collected on the 66d platform is used exclusively for internal platform improvement and is not shared with advertising technology companies.

5 Data Retention & Storage

66d retains your personal data for as long as is necessary to fulfil the purpose for which it was collected, subject to the minimum retention periods required by applicable compliance obligations. The following general retention guidelines apply:

• Account and identity data is retained for a minimum of five years from the date of account closure, consistent with standard anti-money-laundering record-keeping requirements.
• Transaction and payment records are retained for a minimum of five years from the date of the transaction.
• KYC documents are retained for a minimum of five years from the date of verification.
• Support communications are retained for a period of three years from the date of last correspondence.
• Analytics and usage data is retained in pseudonymous form for a maximum of 13 months, after which it is aggregated or deleted.
• Marketing consent records are retained for as long as the consent remains active plus a period of three years to demonstrate compliance.

Upon expiry of the applicable retention period, personal data is securely deleted using industry-standard data destruction procedures or, where complete deletion is not technically feasible, irreversibly anonymised such that it can no longer be associated with any individual.

5.1 Data Storage Location

66d's platform data is stored on secure servers. While 66d operates primarily to serve players in Bangladesh, data may be stored or processed in data centres located in other jurisdictions as part of our infrastructure arrangements. In all cases, appropriate contractual safeguards are in place to ensure that your data receives an equivalent level of protection regardless of where it is processed.

6 Data Security Measures

66d implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• Transport Layer Security (TLS/SSL): All data in transit between your browser or app and 66d servers is encrypted using industry-standard TLS protocols.
• Password hashing: Account passwords are stored using one-way cryptographic hashing algorithms. 66d staff cannot retrieve or read your password in plaintext under any circumstances.
• Access controls: Internal access to player data is restricted on a strict need-to-know basis. Staff are granted only the minimum data access required to perform their specific role.
• Session management: Login sessions are protected by time-limited tokens and automatic timeout after a period of inactivity.
• Two-factor authentication (2FA): Where available, players are encouraged to enable 2FA on their accounts for an additional layer of login security.
• Intrusion detection: Automated monitoring systems are deployed to detect and respond to abnormal access patterns, brute-force attempts, and other indicators of account compromise.

6.1 Data Breach Response

In the event of a data security incident that affects your personal data, 66d will take immediate steps to contain the incident, assess its scope, and mitigate potential harm. Where a breach is determined to present a risk to affected players, 66d will notify impacted individuals as promptly as practicable, providing information about the nature of the incident, the data involved, and the steps you can take to protect yourself. Please report any suspected security vulnerability to [email protected] immediately.

6.2 Your Role in Security

The security of your account also depends on you. You should use a strong, unique password for your 66d account and never share your login credentials with anyone. 66d will never ask for your password via email, SMS, or live chat. If you receive a communication purporting to be from 66d that requests your password, treat it as a phishing attempt and report it to [email protected].

7 Your Privacy Rights

As a player on the 66d platform, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Rights Request" along with sufficient information to verify your identity.

7.1 Right of Access

You have the right to request a copy of the personal data that 66d holds about you. We will provide this information in a structured, commonly used format within a reasonable timeframe of receiving a verified request. A reasonable administrative fee may apply to manifestly unfounded or excessive requests.

7.2 Right to Rectification

If any personal data 66d holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may also update certain account details (such as your contact number) directly through your account settings. Where a correction affects KYC-verified data, additional verification documentation may be required.

7.3 Right to Erasure

You have the right to request the deletion of your personal data where: (a) the data is no longer necessary for the purpose for which it was collected; (b) you withdraw consent and there is no other legal basis for processing; or (c) the data has been processed unlawfully. Please note that 66d is required by anti-money-laundering and record-keeping obligations to retain certain categories of data for a minimum period even after account closure, and erasure requests cannot override these legal retention requirements.

7.4 Right to Restriction of Processing

In certain circumstances — for example, while the accuracy of your data is being contested — you may request that 66d restrict its processing of your data. During a restriction period, 66d will continue to store the data but will not use it for any purpose other than those specifically permitted.

7.5 Right to Object

You have the right to object to the processing of your personal data where that processing is carried out on the basis of 66d's legitimate interests. Upon receipt of a valid objection, 66d will cease processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or where processing is necessary for the establishment, exercise, or defence of legal claims.

7.6 Right to Withdraw Consent

Where processing is based on your consent — for example, marketing communications — you have the right to withdraw that consent at any time without penalty. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal. To withdraw marketing consent, contact [email protected] or follow the unsubscribe instructions in any marketing communication you have received.

8 Policy Updates & Contact

66d reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. When a material change is made, the updated policy will be published on this page with a revised effective date. Where changes are significant, we may also notify registered players via their account contact details.

We encourage you to review this Privacy Policy periodically. Your continued use of the 66d platform following the publication of any revised version constitutes your acceptance of the updated terms.

8.1 Contact and Data Queries

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which 66d processes your personal data, please contact our support team:

• Email: [email protected] (plain text — not a clickable link)
• Subject line for privacy requests: "Privacy Rights Request"
• Response time: We aim to acknowledge all privacy-related enquiries within 2 business days (Bangladesh Standard Time, UTC+6) and to provide a substantive response within 15 business days.

This Privacy Policy was last reviewed and updated on 1 January 2026. The English-language version of this document is the authoritative version. In the event of any inconsistency arising from translation, the English text shall prevail.