Your Privacy Matters
at 6l66

1 Introduction

6l66 ("we", "us", "our") operates the online betting and casino platform available at 6l66.io. We are committed to protecting the privacy and security of the personal data belonging to our players, visitors, and anyone who interacts with our platform. This Privacy Policy sets out in clear, plain English how we fulfil that commitment.

This policy has been prepared to reflect our obligations under applicable data protection principles and to give our users — the players of Bangladesh who trust us with their personal information — a complete and honest account of our data handling practices. We take these obligations seriously, and we have designed our systems accordingly.

Throughout this document, "personal data" means any information that relates to an identified or identifiable individual. "Processing" means any operation performed on personal data, including collection, storage, use, transmission, and deletion. "Platform" refers to the 6l66.io website and all associated services.

2 Data We Collect

6l66 collects personal data at various points during a user's interaction with the platform. The categories of data we collect, and the contexts in which we collect them, are set out below.

2.1 Registration Data

When you create a 6l66 account, we collect the following information: full legal name, date of birth, residential address (including city — for example, Dhaka, Chittagong, Sylhet, Khulna, or Rajshahi), email address, and mobile phone number. This information is required to create your account and to verify your identity in accordance with our KYC obligations.

2.2 Identity Verification (KYC) Data

To comply with our responsible gaming and anti-fraud obligations, we may request copies of your government-issued National ID card or passport, proof of address, and evidence of your payment method (such as a screenshot showing your bKash or Nagad account name and number). These documents are handled securely and used solely for the purpose of identity verification.

2.3 Financial Data

When you make a deposit or withdrawal, we record transaction details including the amount (in BDT), the payment method used (bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, or BRAC Bank), the transaction timestamp, and relevant payment reference identifiers. We do not store full card numbers or full mobile banking PINs on our servers.

2.4 Gameplay and Betting Data

We collect data related to your activity on the platform, including bets placed, games played, outcomes, wagering history, session durations, and any responsible gaming settings you configure. This data is used to operate your account, resolve disputes, detect fraud, and improve our services.

2.5 Technical and Device Data

When you access the platform, we automatically collect certain technical data including your IP address, browser type and version, device type, operating system, screen resolution, referring URL, and pages visited. This data is collected via server logs and cookies (see Section 6) and is used for platform security, fraud prevention, and analytics.

2.6 Customer Support Data

When you contact 6l66 support, we collect and retain records of your correspondence including the content of messages, the date and time of contact, and the resolution provided. This is necessary for quality assurance and to handle any subsequent escalation of the same issue.

3 How We Use Your Data

6l66 uses the personal data we collect exclusively for the purposes described below. We do not use your data for any purpose beyond what is listed here without first obtaining your consent or notifying you of the change.

• Account Operation: To create and maintain your player account, process logins, manage your balance, and record your transaction history.
• Identity Verification: To verify your age (21+) and identity in compliance with responsible gaming and anti-fraud requirements, and to confirm that you are who you say you are before processing withdrawals.
• Transaction Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment methods, and to maintain accurate financial records.
• Fraud Detection and Security: To monitor account activity for signs of fraudulent behaviour, money laundering, collusion, or the use of prohibited software, and to take appropriate action where such activity is detected.
• Responsible Gaming: To apply deposit limits, time-out periods, and self-exclusion requests that you have configured, and to monitor for signs of problem gambling behaviour in accordance with our Responsible Gaming obligations.
• Customer Support: To respond to your enquiries, resolve disputes, investigate complaints, and maintain records of your support interactions for quality assurance purposes.
• Platform Improvement: To analyse aggregated, anonymised usage data in order to improve the design, performance, and feature set of the 6l66 platform.
• Legal Compliance: To comply with applicable legal obligations, respond to lawful requests from regulatory or law enforcement authorities, and to protect the rights and interests of 6l66 and its users.
• Marketing Communications: To send you promotional offers, bonus notifications, and seasonal promotions — but only where you have explicitly opted in to receive such communications. See Section 12 for full details.

4 Legal Basis for Processing

6l66 processes your personal data on the following legal bases:

• Contractual Necessity: The majority of data processing described in Section 3 is necessary for us to fulfil our contractual obligations to you as a registered account holder. Without this processing, we could not operate your account, process your transactions, or deliver the services you have signed up for.
• Legal Obligation: Certain data processing activities — particularly KYC identity verification, transaction record-keeping, and fraud reporting — are required by applicable law and regulation. We are obliged to carry out this processing regardless of consent.
• Legitimate Interests: We process technical data (including IP addresses and device identifiers) for fraud prevention, platform security, and service improvement on the basis of our legitimate interests as a platform operator, provided that such processing does not outweigh your privacy rights.
• Consent: Where we send you direct marketing communications, we do so on the basis of your explicit opt-in consent. You may withdraw consent at any time (see Section 12).

5 Sharing Your Personal Data

6l66 does not sell, rent, or trade your personal data to third parties. We may share your data with third parties only in the following limited and controlled circumstances:

5.1 Payment Processors

To process deposits and withdrawals, we share necessary transaction data with payment service providers including bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and BRAC Bank. These providers receive only the data required to execute the specific transaction and are bound by their own privacy and data security obligations.

5.2 Identity Verification Partners

Where we use third-party KYC verification services to assist with identity document checking, we may share relevant document images and personal details with those providers. All such partners are contractually bound to use the data solely for the purpose of identity verification and to handle it with equivalent security standards to those we apply ourselves.

5.3 Game and Technology Providers

The casino games available on 6l66 are powered by third-party software providers including Evolution Gaming, Ezugi, Pragmatic Play, Spribe, NetEnt, and Microgaming. These providers may receive anonymised session and gameplay data necessary for the operation of their games. They do not receive your full personal profile.

5.4 Legal and Regulatory Authorities

We may disclose personal data to law enforcement agencies, regulatory bodies, or other authorities where we are legally required to do so, where disclosure is necessary to protect the rights or safety of 6l66 or its users, or where we are responding to a lawful court order or official request.

6 Cookies and Tracking Technologies

The 6l66 platform uses cookies and similar tracking technologies to provide a functional, secure, and personalised experience. Cookies are small text files stored on your device when you visit a website. They allow the platform to recognise your browser session and remember your preferences.

6.1 Types of Cookies We Use

• Essential Cookies: These are strictly necessary for the platform to function. They enable login sessions, balance display, and core navigation. These cookies cannot be disabled without breaking the platform's core functionality.
• Security Cookies: Used to detect and prevent fraudulent activity, including session hijacking and cross-site request forgery (CSRF). These are essential and cannot be disabled.
• Analytics Cookies: Used to collect anonymised data about how users navigate the platform, which pages are visited most frequently, and where users encounter errors. This data helps us improve the platform. Analytics cookies do not identify you personally.
• Preference Cookies: Store your platform preferences such as language settings and responsible gaming configurations so that you do not need to re-enter them each time you log in.

6.2 Managing Cookies

You may manage or disable non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies at the category or domain level. Please note that disabling essential or security cookies will impair your ability to use the 6l66 platform and may prevent login. Instructions for managing cookies are available in the help documentation of your browser.

7 Data Retention

6l66 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

After the applicable retention period expires, your personal data is securely deleted or anonymised so that it can no longer be associated with you. Where data must be retained to comply with a legal obligation, it is isolated from active systems and access is strictly restricted.

8 Data Security

6l66 employs a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our key security measures include:

• Encryption in Transit: All data transmitted between your device and the 6l66 platform is encrypted using TLS 1.2 or higher, ensuring that your login credentials, personal details, and financial information cannot be intercepted in transit.
• Encryption at Rest: Personal data stored on our servers is encrypted using AES-256 encryption. This means that even in the event of an unauthorised server access, stored data cannot be read without the correct decryption keys.
• Password Hashing: Account passwords are never stored in plain text. We use strong one-way cryptographic hashing algorithms so that your password cannot be recovered from our database records under any circumstances.
• Access Controls: Access to personal data within 6l66's internal systems is strictly role-based. Only staff who require access to specific data categories in order to perform their job functions are granted that access. All access is logged and audited.
• Intrusion Detection: Our infrastructure is monitored continuously for signs of unauthorised access, unusual traffic patterns, or other indicators of a security incident. Automated alerts are in place to flag suspicious activity for immediate investigation.
• Incident Response: In the event of a confirmed data breach that poses a risk to your rights and freedoms, 6l66 will notify affected users without undue delay and will take all reasonable steps to contain the breach, assess its impact, and prevent recurrence.

9 Your Data Rights

As a user of 6l66, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team with a clear description of your request. We will respond within a reasonable timeframe and in any event within 30 days of receiving your request.

• Right of Access: You have the right to request a copy of the personal data that 6l66 holds about you. We will provide this in a readable format within 30 days of your verified request.
• Right to Rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You may also update certain account details directly through your account settings page.
• Right to Erasure: You have the right to request the deletion of your personal data. We will comply with such requests where we are not legally required to retain the data. Please note that data retained for KYC, financial record-keeping, or fraud prevention purposes may not be deletable for the full statutory retention period.
• Right to Restrict Processing: In certain circumstances you have the right to request that we restrict the processing of your data — for example, while a dispute about its accuracy is being resolved. Restricted data will continue to be stored but will not be actively processed.
• Right to Data Portability: You have the right to receive a copy of the personal data you have provided to us in a structured, commonly used, machine-readable format, and to have that data transmitted to another service provider where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing carried out on the basis of our legitimate interests, subject to our demonstrating compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where we process your data on the basis of your consent (such as for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of the above rights, contact us at: [email protected] (plain text — not a clickable link). Please include your registered account username and the nature of your request. We may need to verify your identity before processing the request.

10 Children and Minors

The 6l66 platform is strictly for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Our registration process requires users to confirm that they meet the minimum age requirement, and we carry out age verification checks as part of our KYC process.

If we become aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on our platform, please notify us immediately at [email protected] so that we can investigate and act accordingly.

11 Third-Party Links

The 6l66 platform may, from time to time, contain references to or integrations with third-party services such as game providers (Evolution Gaming, Pragmatic Play, Spribe, Ezugi, NetEnt, Microgaming) and payment processors (bKash, Nagad, Rocket, Upay). These third parties operate under their own privacy policies, which are separate from and independent of this document.

6l66 is not responsible for the privacy practices of third-party services. When you interact with a third-party game interface or payment gateway, you are also subject to that provider's data handling terms. We encourage you to review the privacy policies of any third-party services with which you interact through our platform.

12 Marketing Communications

6l66 may send you marketing and promotional communications by email or in-platform notification, including information about deposit bonuses, welcome offers, seasonal promotions (such as those tied to Eid, Pohela Boishakh, or major cricket events like the BPL or T20 World Cup), and new game launches. We will only send these communications where you have opted in to receive them at the point of registration or in your account settings.

You may opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link in any marketing email we have sent you.
• Updating your notification preferences in your 6l66 account settings.
• Contacting our support team at [email protected] with a request to be removed from our marketing list.

Opting out of marketing communications does not affect your receipt of transactional or account-related messages, such as deposit confirmations, withdrawal notifications, account security alerts, and identity verification requests. These communications are necessary for the operation of your account and cannot be disabled.

13 International Data Transfers

6l66 operates primarily to serve players in Bangladesh. However, the infrastructure that underpins the platform — including server hosting, game provider integrations, and payment processing — may involve the transfer of data to servers or systems located in jurisdictions outside of Bangladesh.

Where such transfers occur, 6l66 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to the protections described in this Privacy Policy. These safeguards may include contractual data processing agreements with our service providers or the use of platforms that maintain internationally recognised security certifications.

By using the 6l66 platform, you acknowledge that your personal data may be transferred and processed outside of Bangladesh for the purposes described in this policy. If you have any concerns about cross-border data transfers, please contact our support team.

14 Changes to This Privacy Policy

6l66 reserves the right to update or modify this Privacy Policy at any time. Changes may be made in response to updates in applicable law, changes in our data handling practices, or improvements to our platform. All updates will be posted on this page with a revised "Last Updated" date at the top of the document.

Where changes are material — meaning they significantly affect how we collect, use, or share your personal data — we will notify registered users by sending an alert to the email address associated with their account at least 14 days before the changes take effect. Continued use of the platform after the effective date of any revised Privacy Policy constitutes acceptance of those changes.

We encourage you to review this Privacy Policy periodically to stay informed of how 6l66 is protecting your data. The most current version of this policy is always available at 6l66.io/privacy-policy.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way 6l66 handles your personal data, please contact our dedicated privacy support team. We are available 24 hours a day, 7 days a week, including Bangladesh public holidays.

You may reach our support team via the live chat feature on the platform, or by writing to us at the following address (plain text — not a clickable link):

Support Email: [email protected]

Please include your registered account username and a clear description of your query or request so that we can assist you efficiently. All privacy-related requests are handled in English and we aim to acknowledge receipt within 24 hours, with a full response or resolution provided within 30 days of receiving your request at the latest.