Your Privacy Matters
at 66z8 Bangladesh

1. Introduction

This Privacy Policy applies to all services provided by 66z8, accessible at 66z8.io, an online casino and sports betting platform operated for the Bangladesh market. It explains how we collect, use, store, protect, and share personal data relating to users of our platform ("you", "Player", "User").

By registering an account, making a deposit, placing a bet, or otherwise accessing any part of the 66z8 platform, you confirm that you have read this Privacy Policy and that you consent to the processing of your personal data as described herein. This Policy should be read alongside the Terms & Conditions and the Responsible Gaming Policy, all of which together form the complete agreement between you and 66z8.

If you have any objection to any part of this Privacy Policy, you must discontinue use of the platform. For questions or concerns regarding data processing, please contact us at [email protected].

2. Data Controller

For the purposes of this Privacy Policy, 66z8 acts as the data controller in respect of personal data collected through the 66z8.io platform. The data controller is responsible for determining the purposes and means by which personal data is processed. All data-related enquiries should be directed to the 66z8 support team via live chat or at [email protected].

3. Data We Collect

66z8 collects personal data in the following categories. We collect only what is necessary for the specific purposes described in Section 5 of this Policy.

Category	Examples	When Collected
Identity Data	Full legal name, date of birth, gender, nationality, National ID number, passport number	Registration & KYC verification
Contact Data	Email address, mobile phone number, residential address (including district, division, city — e.g., Dhaka, Chittagong, Sylhet)	Registration & account management
Financial Data	bKash/Nagad/Rocket mobile wallet number, bank account details, transaction history, deposit and withdrawal amounts in BDT (৳)	Deposit, withdrawal & KYC
Technical Data	IP address, device type, browser type and version, operating system, time zone, session duration	Automatically on platform access
Usage Data	Games played, bets placed, betting patterns, session logs, page views, feature interactions	During active platform use
Communications Data	Live chat transcripts, email correspondence, support ticket content	When contacting support
Responsible Gaming Data	Self-exclusion status, deposit limit settings, cooling-off periods, session time limits	When responsible gaming tools are activated

We do not collect any special category data (e.g., health data, racial or ethnic origin, political opinions, biometric data) unless explicitly required for responsible gaming assessments and only with your express consent.

4. How We Collect Data

4.1 Data You Provide Directly

The majority of personal data we hold is data you provide voluntarily when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or activate responsible gaming tools. This includes your name, contact details, identity documents, and payment method information.

4.2 Data Collected Automatically

When you access the 66z8 platform, our servers and analytics systems automatically log certain technical data including your IP address, device identifiers, browser configuration, geographic location (at city or district level, e.g., Dhaka, Chittagong, Khulna, Rajshahi, Sylhet, Cox's Bazar), and session behaviour. This data is collected via server logs, cookies, and similar tracking technologies as described in Section 9 of this Policy.

4.3 Data From Third Parties

66z8 may receive personal data about you from third-party sources, including payment gateway providers (bKash, Nagad, Rocket, Upay, and banking partners), identity verification services, fraud prevention agencies, and responsible gaming databases. Data received from third parties is used solely for the purposes outlined in this Policy and is held to the same security standards as data collected directly from you.

5. Purpose & Legal Basis for Processing

66z8 processes your personal data only where a lawful basis exists. The table below sets out our primary processing activities, the corresponding purpose, and the legal basis relied upon.

Processing Activity	Purpose	Legal Basis
Account registration	Creating and managing your player account	Performance of contract
Age & identity verification (KYC)	Confirming eligibility (21+ requirement), preventing fraud	Legal obligation; legitimate interest
Payment processing	Processing deposits and withdrawals in BDT	Performance of contract
Anti-money laundering (AML) checks	Detecting and preventing financial crime	Legal obligation
Customer support	Resolving queries and complaints	Performance of contract; legitimate interest
Responsible gaming monitoring	Identifying at-risk players, applying limits	Legal obligation; legitimate interest
Platform security & fraud prevention	Detecting unauthorised access, bot activity, collusion	Legitimate interest
Marketing communications	Sending promotional offers and bonus notifications	Consent (opt-in only)
Platform analytics & improvement	Understanding user behaviour to improve services	Legitimate interest

Where we rely on consent as the legal basis for processing (e.g., marketing communications), you have the right to withdraw that consent at any time by contacting our support team or updating your account notification preferences. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.

6. Data Sharing & Disclosure

6.1 Third-Party Service Providers

66z8 shares personal data with carefully selected third-party service providers who assist in the delivery of our platform and services. These include payment gateway operators (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank), identity verification and KYC providers, fraud detection services, game content providers (Evolution Gaming, Pragmatic Play, Ezugi, Spribe, NetEnt, Microgaming), customer support software providers, and cloud hosting and data storage providers.

All third-party service providers who handle personal data on behalf of 66z8 are bound by contractual data processing agreements that require them to maintain appropriate security standards and use your data only for the specific purposes for which it was shared.

6.2 Legal and Regulatory Disclosure

66z8 may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required to do so by applicable law, court order, or binding legal process. In such cases, 66z8 will disclose only the minimum data necessary to fulfil the legal requirement and will, where legally permissible, notify the affected player of such disclosure.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of 66z8's business assets, personal data held by 66z8 may be transferred to the acquiring entity as part of that transaction. Players will be notified via email and platform announcement in advance of any such transfer, and the acquiring entity will be required to honour the commitments made in this Privacy Policy.

6.4 No Sale of Data

66z8 does not, and will not, sell, rent, lease, or otherwise transfer your personal data to any third party for their independent marketing or commercial purposes. This commitment applies regardless of the commercial consideration involved.

7. Data Retention

66z8 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, to comply with legal and regulatory obligations, and to resolve disputes or enforce our agreements. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account plus a minimum of 5 years after account closure, to satisfy AML record-keeping requirements.
• Financial transaction data: Retained for a minimum of 5 years following the date of the transaction, in accordance with financial record-keeping obligations.
• Customer support communications: Retained for 3 years from the date of the last interaction, for quality assurance and dispute resolution purposes.
• Technical and usage data: Retained for up to 24 months, after which it is anonymised or deleted.
• Marketing consent records: Retained for the duration of your opt-in consent plus 2 years following any withdrawal of consent, as evidence of lawful processing.
• Responsible gaming records: Self-exclusion records are retained indefinitely to prevent re-registration by excluded players. Other responsible gaming records are retained for 5 years.

Where data is no longer required for any lawful purpose, 66z8 will securely delete or anonymise it in accordance with our internal data disposal procedures.

8. Data Security

66z8 implements a comprehensive suite of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or unlawful disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and 66z8 servers.
• AES-256 encryption for sensitive data stored in our databases, including payment method details and identity documents.
• Multi-factor authentication for 66z8 staff accessing internal systems containing player data.
• Role-based access controls ensuring that only authorised personnel with a genuine operational need can access identifiable player records.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Intrusion detection systems monitoring platform infrastructure for anomalous or suspicious activity in real time.
• Secure data disposal procedures for the permanent deletion of data that is no longer required.

While 66z8 applies industry-standard security measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, 66z8 will notify affected players without undue delay and take all reasonable steps to contain and remediate the incident.

9. Cookies & Tracking Technologies

9.1 What Are Cookies

Cookies are small text files placed on your device when you visit a website. They allow the website to remember your preferences, maintain your session, and gather analytical information about how the site is used. 66z8 uses cookies and similar technologies (such as web beacons, pixel tags, and local storage) across the platform.

9.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the platform to function. These enable secure login, session management, and fraud prevention. They cannot be disabled.
• Performance Cookies: Collect anonymised data about how players use the platform (pages visited, error messages, load times) to help us improve the user experience.
• Functional Cookies: Remember your preferences such as language settings, preferred games, and responsible gaming tool configurations.
• Analytics Cookies: Allow 66z8 to analyse aggregated platform usage trends, popular betting markets (e.g., BPL, IPL, T20 World Cup), and game performance metrics.

9.3 Managing Cookies

You may control non-essential cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or be notified when new cookies are placed. Please note that disabling certain cookies may impair the functionality of the 66z8 platform, including login persistence and responsible gaming tools. For full details on managing cookies in your specific browser, consult your browser's help documentation.

10. Your Privacy Rights

As a player on the 66z8 platform, you hold the following rights in relation to your personal data. To exercise any of these rights, contact our support team via live chat or at [email protected]. We will respond to all verified requests within 30 days.

• Right of Access: You have the right to request a copy of all personal data we hold about you, together with information about how it is processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal and regulatory retention obligations.
• Right to Restriction of Processing: You have the right to request that we restrict the processing of your data in certain circumstances, for example while the accuracy of data is disputed.
• Right to Data Portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing based on legitimate interest, including profiling for marketing purposes. You may opt out of marketing communications at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

66z8 will not charge a fee for processing data rights requests in ordinary circumstances. However, where requests are manifestly unfounded or excessive, we reserve the right to charge a reasonable administrative fee or to refuse the request, with written explanation.

11. Minors & Age Verification

The 66z8 platform is strictly for individuals aged 21 years and above. We do not knowingly collect, process, or store personal data from anyone under the age of 21. During the registration process, all players are required to confirm that they meet the minimum age requirement. Where 66z8 discovers or has reasonable grounds to believe that a player is under 21 years of age, the account will be immediately suspended, all pending transactions will be frozen, and the matter will be investigated in accordance with our responsible gaming procedures.

If you are a parent or guardian and believe that a minor has created a 66z8 account without your knowledge, please contact our support team immediately at [email protected] so that we can investigate and take appropriate action.

12. International Data Transfers

66z8 primarily processes and stores player data within secure data centres serving the Bangladesh market. In some circumstances, personal data may be transferred to or processed by third-party service providers operating outside Bangladesh — for example, game content providers or cloud infrastructure partners. Where such transfers occur, 66z8 ensures that appropriate safeguards are in place, including contractual clauses requiring the receiving party to maintain data protection standards equivalent to those described in this Policy. 66z8 will not transfer personal data to jurisdictions that do not provide an adequate level of data protection without implementing appropriate protective measures.

13. Third-Party Services & External Links

The 66z8 platform integrates third-party gaming content provided by studios including Evolution Gaming, Pragmatic Play, Ezugi, Spribe, NetEnt, and Microgaming. These studios may process certain technical data (such as game session data and IP addresses) as part of delivering their game content. Their processing activities are governed by their own privacy policies, and 66z8 ensures that all third-party studios engaged by the platform comply with appropriate data protection standards through contractual agreements.

66z8 does not include unsolicited external links to third-party websites. This platform is a self-contained service. 66z8 accepts no responsibility for the privacy practices of any external website or service that you may independently choose to access.

14. Amendments to This Privacy Policy

66z8 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. Where any amendment is material — meaning it significantly changes how we collect or use your personal data — we will notify you by posting a prominent notice on the platform and, where practicable, by sending a notification to your registered email address at least 14 days before the changes take effect.

The "Last Updated" date at the top of this document reflects the date of the most recent revision. Your continued use of the 66z8 platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. We recommend reviewing this page periodically to stay informed of how 66z8 handles your personal data.

15. Contact & Complaints

If you have any questions, concerns, or complaints about how 66z8 collects, uses, or protects your personal data, please contact our support team through any of the following channels:

• Live Chat: Available 24/7 on the 66z8 platform after logging in — the fastest way to reach us.
• Email: [email protected] — typical response time within 1 hour (Bangladesh Standard Time, UTC+6).

Please include your registered username and account email address in all privacy-related correspondence so that we can locate your records and assist you efficiently. 66z8 is committed to resolving all data protection concerns promptly and fairly. If you are not satisfied with our response to your complaint, you have the right to escalate the matter to the relevant data protection authority or arbitration body in your jurisdiction.