Data Protection Policy
Privacy Policy — 6b66 Player Data Commitment
This Privacy Policy explains exactly what personal information 6b66 collects from registered players in Bangladesh, how that information is used, who it may be shared with, how long it is retained, and what rights you hold over your own data. We are committed to handling your information with care, transparency, and respect.
Your privacy is a priority at 6b66. This policy applies to all personal data collected through the 6b66 website at https://6b66.app, including account registration, payment processing, game activity, customer support interactions, and any marketing communications sent to players in Bangladesh. By registering and using the 6b66 platform, you acknowledge that you have read and understood this Privacy Policy.
Data Minimisation
6b66 collects only the personal data that is strictly necessary to provide the platform's services to registered players in Bangladesh. We do not collect data beyond what is required for account management, payment processing, and legal compliance.
SSL Encryption
All data transmitted between your device and the 6b66 platform is protected by industry-standard SSL/TLS encryption. This ensures that your personal information, payment details, and account credentials are secured in transit at all times.
Player Control
You retain meaningful control over your personal data at 6b66. You can request access to, correction of, or deletion of your data at any time through the 6b66 support team. Marketing communications can be opted out of without affecting your account access.
No Unauthorised Sale
6b66 does not sell, rent, or trade your personal data to third-party advertisers or data brokers. Data shared with third parties is limited to what is necessary for service delivery — such as payment processing via bKash, Nagad, Rocket, or Upay — under strict contractual obligations.
Defined Retention Limits
Personal data held by 6b66 is retained only for as long as it is needed to fulfil the purpose for which it was collected, or as required by applicable legal obligations. Retention periods for each data category are set out clearly in this policy.
Transparent Communication
Whenever this Privacy Policy is materially updated, 6b66 will notify registered players via their registered Bangladesh mobile number or platform inbox before the changes take effect. You will always know what data we hold and why.
1. Data We Collect
When you register for and use the 6b66 platform, we collect personal data across several categories. The table below summarises the types of data collected, the context in which it is collected, and the lawful basis under which 6b66 processes it.
| Data Category | Examples | Collection Context | Lawful Basis |
|---|---|---|---|
| Identity Data | Full legal name, date of birth, NID number, passport number | Account registration, KYC verification | Contractual necessity; legal obligation |
| Contact Data | Bangladesh mobile number, email address | Registration, support communications | Contractual necessity |
| Financial Data | bKash / Nagad / Rocket / Upay account references, transaction history | Deposit and withdrawal processing | Contractual necessity; legal obligation |
| Technical Data | IP address, device type, browser, operating system, session timestamps | Automatic collection during platform use | Legitimate interest; security monitoring |
| Gameplay Data | Game history, bet amounts, win/loss records, bonus usage | Platform activity | Contractual necessity; responsible gaming compliance |
| Communication Data | Live chat transcripts, support ticket content, SMS responses | Customer support interactions | Legitimate interest; contractual necessity |
| Marketing Preferences | Opt-in/opt-out status, promotion interaction history | Marketing communications management | Consent |
6b66 does not knowingly collect personal data from persons under the age of 18. If we become aware that data has been collected from a minor, that data will be deleted and the associated account will be closed immediately. We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data, unless such data is directly relevant to a responsible gaming assessment requested by the player.
Accuracy obligation: You are responsible for ensuring that the personal data you provide to 6b66 at registration and during subsequent updates is accurate and current. Providing false or misleading personal data is a breach of the 6b66 Terms & Conditions and may result in account suspension.
2. How We Use Your Data
6b66 uses the personal data collected from registered players in Bangladesh for the following specific purposes. We do not use your data for purposes beyond those listed here without first obtaining your explicit consent or updating this Privacy Policy with appropriate notice.
- Account creation and management: To register your account, verify your identity, maintain your account settings, and provide you with access to the full range of 6b66 platform features.
- Payment processing: To process deposits and withdrawals through bKash, Nagad, Rocket, Upay, and any other payment methods available on the platform, and to maintain accurate transaction records.
- Identity verification (KYC): To comply with our obligations to verify that players are who they claim to be and that they meet the age and eligibility requirements set out in the 6b66 Terms & Conditions.
- Responsible gaming monitoring: To detect patterns of play that may indicate problem gambling behaviour, to apply player-requested deposit limits and self-exclusion arrangements, and to fulfil our duty of care obligations.
- Anti-fraud and security: To identify and prevent fraudulent transactions, multi-accounting, money laundering, and other prohibited activity on the platform, including through automated monitoring of account and transaction behaviour.
- Customer support: To respond to your queries, complaints, and support requests through live chat, email, and SMS, and to maintain records of communications for quality assurance.
- Platform improvement: To analyse aggregate, anonymised usage data to improve platform performance, game selection, payment infrastructure, and user experience for players across Bangladesh.
- Marketing communications: To send you information about promotions, bonuses, and platform updates that may be of interest to you, where you have consented to receive such communications. You may withdraw this consent at any time.
- Legal compliance: To retain records and respond to lawful requests from regulatory or law enforcement authorities where required by applicable law.
Where 6b66 uses automated decision-making in any of the above processes — for example, automated fraud scoring on deposit transactions or automated responsible gaming alerts — you have the right to request human review of any automated decision that materially affects your account. Contact the 6b66 support team to exercise this right.
3. Data Sharing and Disclosure
6b66 does not sell, rent, or trade your personal data to any third party for their own commercial use. Data may be shared with third parties only in the limited circumstances described below, and only to the extent necessary for the stated purpose.
Payment Service Providers
Transaction data is shared with bKash, Nagad, Rocket, and Upay to process deposits and withdrawals on your behalf. These providers receive only the minimum data necessary to execute and verify the transaction. They are contractually prohibited from using your data for any purpose beyond payment processing.
Game Technology Providers
Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe may receive a pseudonymous player identifier to enable game sessions. These providers do not receive your name, mobile number, or financial details. Game session data is governed by the providers' own data processing agreements with 6b66.
Identity Verification Services
Where 6b66 engages a third-party KYC or identity verification provider to assist with age and identity verification, the relevant identity documents and data submitted by you will be processed by that provider under a data processing agreement with 6b66. The provider is not permitted to retain or use your identity data beyond the scope of the verification task.
Legal and Regulatory Authorities
6b66 may disclose personal data to law enforcement agencies, regulatory bodies, or courts when required to do so by applicable law, legal process, or in the context of an investigation into suspected fraud, money laundering, or other criminal activity. 6b66 will notify you of any such disclosure where it is legally permitted to do so.
All third parties with whom 6b66 shares personal data are required to implement appropriate technical and organisational measures to protect that data against unauthorised access, disclosure, or loss. Where data is processed outside Bangladesh, 6b66 takes steps to ensure that an equivalent level of protection is applied.
No data brokering: 6b66 strictly prohibits internal data brokering. Your contact details — including your Bangladesh mobile number — will never be passed to third-party marketing companies, affiliate networks, or data aggregators for their own commercial purposes.
5. Data Retention Periods
6b66 retains personal data only for as long as it is necessary to fulfil the purpose for which it was collected, or as required by applicable legal or regulatory obligations. The table below sets out the standard retention periods applied to each major data category on the 6b66 platform.
| Data Category | Retention Period | Trigger for Deletion |
|---|---|---|
| Account identity data | 5 years post-closure | 5 years after account closure or last transaction |
| Financial transaction records | 7 years | 7 years from transaction date, for AML compliance |
| KYC / identity documents | 5 years post-closure | 5 years after account closure |
| Gameplay and betting history | 3 years post-closure | 3 years after account closure |
| Customer support transcripts | 2 years | 2 years from date of interaction |
| Marketing preferences / consent records | 3 years | 3 years from last consent action or account closure |
| Technical / session logs | 90 days | Automated deletion after 90 days |
| Analytics cookies | 12 months | Automatic expiry after 12 months from placement |
Following the expiry of the applicable retention period, personal data is either securely deleted or anonymised so that it can no longer be associated with an identifiable individual. Anonymised data may be retained beyond these periods for aggregate statistical analysis purposes. Where a legal hold is placed on data — for example, in connection with an active fraud investigation or legal dispute — data will be retained until the hold is lifted, regardless of the standard retention period.
6. Your Privacy Rights
As a registered player on the 6b66 platform, you hold the following rights in relation to your personal data. To exercise any of these rights, contact the 6b66 support team in writing via live chat or by email at [email protected]. We will respond to all verified data rights requests within 30 calendar days.
Right of Access
You may request a copy of all personal data 6b66 holds about you, along with details of how it is processed and with whom it has been shared.
Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to any overriding legal retention obligations.
Right to Restrict Processing
You may ask 6b66 to restrict the processing of your data while a request for rectification or erasure is being assessed, or where you have objected to processing.
Right to Data Portability
Where technically feasible, you may request that 6b66 provide your personal data in a commonly used, machine-readable format so that it can be transferred to another service.
Right to Object
You have the right to object to the processing of your data for direct marketing purposes at any time. Upon receipt of an objection, 6b66 will cease marketing communications immediately.
Rights vs. Automated Decisions
Where any significant decision affecting your account is made by an automated system, you may request human review of that decision by contacting 6b66 support in writing.
Right to Withdraw Consent
Where processing is based on your consent — such as for marketing communications — you may withdraw that consent at any time without affecting your account or your access to the platform.
Identity verification for rights requests: To protect your data, 6b66 will verify your identity before fulfilling any data rights request. You will be asked to confirm details matching your registered account. 6b66 will not fulfil data rights requests from unverified third parties claiming to act on a player's behalf without a valid written authorisation.
7. Data Security Measures
6b66 implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. While no system can guarantee absolute security, the following controls are in place across the 6b66 platform infrastructure:
- SSL/TLS encryption: All data transmitted between your browser or app and 6b66 servers is encrypted using TLS 1.2 or higher. This protects your login credentials, financial data, and personal information in transit.
- At-rest encryption: Sensitive data stored in 6b66 databases — including identity documents, payment method references, and account credentials — is encrypted at rest using AES-256 or equivalent standards.
- Access controls: Access to personal data within the 6b66 organisation is restricted on a strict need-to-know basis. Staff with access to player data are subject to confidentiality obligations and receive data protection training.
- Two-factor authentication: 6b66 offers OTP-based 2FA to all registered players to reduce the risk of unauthorised account access. Internal administrative systems require mandatory 2FA for all staff.
- Intrusion detection: 6b66's infrastructure is monitored 24/7 by automated intrusion detection and anomaly monitoring systems. Suspected security incidents trigger an escalation process within one hour of detection.
- Password security: Player passwords are stored using a one-way cryptographic hash function and are never stored in plain text. 6b66 staff cannot retrieve your password — only reset it via your registered mobile number.
- Vendor security: Third-party service providers with access to 6b66 player data are required to demonstrate equivalent security standards and sign data processing agreements before integration.
In the event of a personal data breach that is likely to result in a risk to your rights or freedoms, 6b66 will notify affected players as promptly as reasonably possible following the discovery of the breach, with details of the nature of the breach and the steps being taken to address it. We encourage all players to report any suspected security vulnerabilities or unauthorised account activity immediately to [email protected].
8. Policy Updates and Contact
6b66 reviews this Privacy Policy at regular intervals and whenever a material change in our data processing practices occurs. Minor corrections, formatting updates, and clarifications that do not affect player rights may be made without advance notice, though the effective date at the top of this policy will always reflect the date of the most recent revision.
Material changes — those that alter how your data is used, who it is shared with, how long it is retained, or what rights you hold — will be communicated to all registered players with active accounts via SMS to their registered Bangladesh mobile number, or via an in-platform notification, at least seven (7) calendar days before the revised policy takes effect. Continued use of the 6b66 platform following that notice period constitutes acceptance of the revised Privacy Policy.
If you have any questions, concerns, or requests relating to this Privacy Policy or the way 6b66 handles your personal data, please contact the 6b66 data protection team using the details below. We are committed to addressing all privacy-related enquiries promptly and professionally.
Contact for privacy enquiries:
Email: [email protected] — please include "Privacy Enquiry" in the subject line.
Response time: within 5 business days for general enquiries; within 30 calendar days for formal data rights requests.
Platform: Live chat at https://6b66.app — available 24 hours a day, 7 days a week for Bangladesh players.
This Privacy Policy was last reviewed and updated on 1 January 2026. The version history of this policy is maintained internally by 6b66 and is available on request. Players who closed their accounts before the effective date of this version remain covered by the version of the Privacy Policy in force at the time their account was active, in respect of any data retained under that version's retention schedule.
Questions About Your Privacy?
Our support team is available around the clock to help with any privacy-related questions. You can also explore our FAQ for quick answers, review our Terms & Conditions, or head back to the casino and enjoy our games.