6c66 Privacy Policy

1 Introduction

6c66 is committed to protecting the personal data of all players who register and use the 6c66 online betting platform, accessible at https://6c66.io. This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed. It is written in plain English and is designed to be read alongside our Terms & Conditions.

We understand that privacy is important to our players across Bangladesh. Every decision we make about how to handle personal data is guided by a straightforward principle: we collect only what we need, we use it only for the purposes we have described, and we protect it with appropriate technical and organisational measures at all times.

This policy applies to personal data collected through the 6c66 website, any mobile-optimised version of the site, and all communications between 6c66 and registered players (including email and live chat). It does not apply to third-party websites or services that may be linked from the platform.

2 Data Controller

For the purposes of this Privacy Policy, the data controller responsible for your personal data is the operating entity of the 6c66 platform. As the data controller, 6c66 determines the purposes and means by which your personal data is processed. If you have questions about how your data is handled, or wish to exercise any of your data rights, you may contact us directly at [email protected].

Where 6c66 engages third-party service providers to process data on its behalf (for example, payment processors or identity verification services), those providers act as data processors under the direction of 6c66 and are contractually bound to handle your data in accordance with this policy and applicable data protection principles.

3 Personal Data We Collect

The categories of personal data 6c66 may collect about you are set out in the table below. Not all categories will be collected in every case — the specific data collected depends on how you interact with the platform.

Category	Examples	When Collected
Identity Data	Full legal name, date of birth, gender, National ID (NID) number, passport or driving licence details	During registration and KYC verification
Contact Data	Mobile phone number, email address, city of residence (e.g., Dhaka, Chittagong, Sylhet)	During registration and account updates
Financial Data	bKash wallet number, Nagad wallet number, Rocket wallet number, Upay wallet number, bank account details, transaction amounts in ৳	When making deposits or requesting withdrawals
Gaming Data	Bet history, game session logs, casino hand history, tournament participation, win/loss records	Automatically during platform use
Technical Data	IP address, device type, browser type and version, operating system, screen resolution, time zone (BST)	Automatically via cookies and server logs
Usage Data	Pages visited, features used, referral source, session duration, click patterns	Automatically during platform use
Communications Data	Support chat transcripts, email correspondence, feedback submissions	When you contact 6c66 support
Verification Documents	Scanned copies or photographs of NID, passport, utility bills, bank statements	During KYC verification process

4 How We Collect Your Data

6c66 collects personal data through the following channels:

4.1 Directly From You

The majority of personal data 6c66 holds about you is provided directly by you during the account registration process, when completing KYC verification, when making deposits or requesting withdrawals, when contacting our support team, and when participating in promotional activities. You are responsible for ensuring that any data you provide to 6c66 is accurate and up to date.

4.2 Automatically

When you visit the 6c66 platform, we automatically collect certain technical and usage data through server logs, cookies, and similar tracking technologies. This includes your IP address, browser type, device identifiers, pages visited, and interaction patterns. This data is used primarily to maintain platform security, detect fraud, and improve the user experience.

4.3 From Third Parties

In certain circumstances, 6c66 may receive personal data about you from third parties. This includes:

• Payment providers (bKash, Nagad, Rocket, Upay) confirming the status of transactions associated with your registered wallet number.
• Identity verification services that cross-reference the details you provide during KYC against authoritative data sources to confirm your identity and age.
• Fraud detection services that may flag accounts or transactions associated with known fraudulent patterns.

5 Legal Basis for Processing

6c66 processes your personal data on the following legal bases, depending on the specific purpose of processing:

• Contract performance: Processing necessary to provide you with the services described in the 6c66 Terms & Conditions, including operating your account, processing deposits, settling bets, and paying out winnings.
• Legal obligation: Processing required for 6c66 to comply with applicable legal obligations, including anti-money laundering (AML) requirements, Know Your Customer (KYC) obligations, and financial record-keeping duties.
• Legitimate interests: Processing necessary for the legitimate interests of 6c66 or third parties, where those interests are not overridden by your rights and interests. This includes fraud prevention, platform security, responsible gaming monitoring, and improving platform features.
• Consent: Where required, 6c66 will request your explicit consent before using your personal data for a specific purpose, such as sending you personalised promotional communications. You may withdraw your consent at any time by updating your account notification preferences or by contacting support.

6 How We Use Your Personal Data

6c66 uses the personal data it collects for the following specific purposes:

• To create, manage, and maintain your 6c66 player account and ensure it reflects your current personal details.
• To verify your identity and age (21+) in compliance with our KYC obligations, and to prevent underage gambling on the platform.
• To process deposit transactions from your bKash, Nagad, Rocket, or Upay wallet and to process withdrawal requests back to your verified payment account.
• To monitor your gaming activity for responsible gaming purposes, including detecting patterns that may indicate problem gambling behaviour, and to apply deposit limits, cooling-off periods, or self-exclusion at your request or where required by our responsible gaming policy.
• To detect, investigate, and prevent fraudulent activity, money laundering, collusion, bonus abuse, and other prohibited conduct as defined in the Terms & Conditions.
• To communicate with you about your account, including transaction confirmations, security alerts, and responses to your support enquiries.
• To send you promotional communications about 6c66 bonuses and offers, where you have not opted out of receiving such communications.
• To analyse aggregate, anonymised usage data to improve the performance, layout, and game selection of the 6c66 platform for all players in Bangladesh.
• To comply with applicable legal, regulatory, and financial reporting obligations.

7 Sharing Your Personal Data

6c66 does not sell your personal data to third parties under any circumstances. Your personal data may be shared with the following categories of recipient, strictly for the purposes identified in Section 6 above:

7.1 Payment Service Providers

When you make a deposit or request a withdrawal, 6c66 shares the minimum necessary transaction data (including your registered mobile wallet number and the transaction amount in ৳) with the relevant payment provider — bKash, Nagad, Rocket, or Upay — to facilitate the transaction. These providers operate under their own privacy policies and are bound by their own data protection obligations.

7.2 Identity Verification Providers

To complete the KYC process, 6c66 may share your identity and contact data with authorised third-party identity verification services. These services compare the information you have provided against official data sources to confirm your identity, nationality, and age. They are contractually prohibited from using your data for any purpose other than providing this verification service to 6c66.

7.3 Game Studio Providers

Games on the 6c66 platform are provided by third-party studios including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Ezugi, and Spribe. These studios may receive your account session token and anonymised player identifier to deliver their game content. They do not receive your full name, contact details, or financial data.

7.4 Fraud Prevention & Security Services

6c66 may share technical data (such as IP addresses and device identifiers) with fraud detection and cybersecurity service providers to protect the platform against abuse, unauthorised access, and fraudulent activity. These providers act solely as data processors under the direction of 6c66.

7.5 Legal and Regulatory Disclosure

6c66 may disclose your personal data to law enforcement authorities, regulatory bodies, or other government agencies where required to do so by applicable law or a valid legal process. In such cases, 6c66 will provide only the data specifically required by the request and will notify you of the disclosure where it is legally permissible to do so.

8 Cookies & Tracking Technologies

The 6c66 platform uses cookies and similar technologies (such as local storage and session storage) to deliver a functional, secure, and personalised experience. The following types of cookies are used:

• Essential cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during your visit and security cookies that protect against cross-site request forgery (CSRF). These cannot be disabled without breaking core platform functionality.
• Functional cookies: Used to remember your preferences, such as your preferred language settings and notification preferences, so you do not need to re-enter them on each visit.
• Analytics cookies: Used to collect aggregated, anonymised data about how players use the 6c66 platform — which pages are most visited, where users navigate from, and how long sessions typically last. This data is used solely to improve platform design and performance.
• Security cookies: Used to detect and prevent suspicious login activity, including attempts to access your account from unrecognised devices or locations.

6c66 does not use third-party advertising or retargeting cookies. You can control cookie settings through your browser preferences. Please note that disabling essential cookies may prevent certain features of the 6c66 platform from functioning correctly.

9 Data Retention

6c66 retains your personal data for the periods set out in the table below. These periods reflect the minimum time required for the stated purpose and any applicable legal retention obligation.

Data Category	Retention Period	Reason
Account registration data	Duration of account + 5 years after closure	Financial record-keeping and AML compliance
KYC and identity documents	Duration of account + 5 years after closure	Legal obligation under AML regulations
Transaction records (deposits & withdrawals)	7 years from each transaction date	Financial record-keeping requirements
Gaming history (bet and session logs)	Duration of account + 3 years after closure	Dispute resolution and responsible gaming monitoring
Support communications	3 years from the date of each communication	Customer service quality and dispute reference
Technical and usage logs	12 months from collection date	Security monitoring and fraud detection
Self-exclusion records	Minimum 7 years from self-exclusion date	Responsible gaming compliance and re-registration prevention

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual. Where anonymised data is retained for analytics purposes, it cannot be used to re-identify any specific player.

10 Data Security

6c66 implements a layered approach to data security designed to protect your personal data against unauthorised access, accidental loss, disclosure, or destruction. Our security measures include:

• SSL/TLS encryption: All data transmitted between your device and the 6c66 platform is encrypted using industry-standard SSL/TLS protocols. The padlock icon in your browser address bar confirms that your connection is secure.
• Encrypted data storage: Sensitive personal data, including identity document images and financial account details, is stored in encrypted form at rest. Encryption keys are managed separately from the encrypted data.
• Access controls: Access to personal data within 6c66's systems is restricted to authorised personnel on a strict need-to-know basis. All staff with access to player data are subject to confidentiality obligations.
• Two-factor authentication (2FA): 6c66 offers SMS-based two-factor authentication to all registered players. Enabling 2FA is strongly recommended, as it provides a significant additional layer of protection against unauthorised account access.
• Fraud monitoring: Automated systems monitor account activity around the clock for patterns indicative of fraud, unauthorised access, or account compromise. Suspicious activity triggers immediate review and, where appropriate, temporary account suspension pending investigation.
• Penetration testing: The 6c66 platform undergoes periodic security assessments to identify and remediate vulnerabilities before they can be exploited.

11 Your Data Rights

As a 6c66 player, you have the following rights in relation to your personal data. To exercise any of these rights, submit a written request to [email protected] from the email address registered to your account. 6c66 will respond within 30 days of receiving a valid request.

Please note that certain data rights are subject to limitations where the processing of data is required to fulfil a legal obligation or to protect the vital interests of other individuals. In such cases, 6c66 will explain the specific limitation that applies when responding to your request.

12 Children & Minors

The 6c66 platform is strictly for adults aged 21 and above. 6c66 does not knowingly collect, store, or process the personal data of any individual under the age of 21. The age verification step in the registration process is designed to prevent minors from creating accounts.

If 6c66 becomes aware that personal data has been collected from an individual under the age of 21, that data will be deleted immediately, the associated account will be closed, all bets will be voided, and any funds in the account will be handled in accordance with the relevant section of the Terms & Conditions. If you believe a minor is using the 6c66 platform, please notify us immediately at [email protected].

13 Third-Party Links

The 6c66 platform may contain references to third-party game studios and payment providers as part of its service offering. These third parties operate their own websites and services governed by their own privacy policies, over which 6c66 has no control. 6c66 is not responsible for the privacy practices of any third-party provider and encourages players to review the relevant privacy policies of any third-party service they interact with in connection with their 6c66 account, including bKash, Nagad, and Rocket.

14 Updates to This Privacy Policy

6c66 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. When material changes are made, we will notify registered players by email at least seven days before the updated policy takes effect, and we will update the "Last Updated" date at the top of this page.

We encourage you to review this Privacy Policy periodically to stay informed about how 6c66 is protecting your data. Your continued use of the 6c66 platform after an updated Privacy Policy has taken effect constitutes your acceptance of the changes. If you do not agree with the updated terms, you should contact support to request account closure before the effective date.

15 Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or the way 6c66 handles your personal data, please contact us through one of the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 inside your account dashboard after login
• Response Time: Privacy-related requests are acknowledged within 24 hours and responded to substantively within 30 days
• Languages: Privacy enquiries may be submitted in English or Bengali

All data rights requests should be submitted in writing from the email address registered to your 6c66 account, clearly stating the nature of your request and the specific data or processing activity it concerns. 6c66 may need to verify your identity before processing certain requests to ensure we are responding to the correct account holder.