Privacy Policy — 66zzz Online Casino

1. Introduction

66zzz is committed to protecting and respecting the privacy of all individuals who interact with our platform. This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. It also informs you of your rights in relation to your personal data and how you can exercise those rights.

We operate the 66zzz platform as an internationally licensed offshore online casino and sports betting service. Our primary user base is located in Bangladesh, and a significant proportion of our players transact using Bangladeshi Taka (৳) via mobile financial services including bKash, Nagad, and Rocket. Given this context, we are particularly mindful of the sensitivity of financial and identity data and apply rigorous standards to its handling.

By using the 66zzz platform — whether by browsing the site as a visitor, registering an account, making a deposit, or placing a bet — you acknowledge that you have read and understood this Privacy Policy and that your personal data will be processed in accordance with it. If you do not agree with any part of this policy, you should cease using the platform immediately.

This policy should be read alongside our Terms & Conditions, which govern your use of the platform more broadly, and our Responsible Gaming Policy, which addresses how we handle data related to your gambling behaviour and welfare.

2. Data We Collect

We collect personal data from you in several ways: data you provide to us directly, data we collect automatically when you use the platform, and data we receive from third-party service providers. The categories of personal data we may collect include:

2.1 Data You Provide Directly

• Registration data: Full legal name, date of birth, residential address, email address, and chosen username and password at the time of account creation.
• Identity verification (KYC) documents: National Identification Card (NID), passport, driving licence, utility bills, and selfie photographs as required for account verification under our Know Your Customer programme.
• Payment data: bKash account number, Nagad account number, Rocket account number, Upay account number, Visa or Mastercard card details (last four digits and expiry date only — full card numbers are processed by our PCI-DSS compliant payment partners, not stored by 66zzz), and USDT wallet addresses.
• Communications data: The content of messages you send to our support team, including emails, live chat transcripts, and any attachments you provide in connection with a support query or complaint.
• Responsible gaming data: Self-reported information you provide when setting deposit limits, cooling-off periods, or requesting self-exclusion.

2.2 Data Collected Automatically

• Technical data: IP address, browser type and version, operating system, device type, screen resolution, referring URL, and time zone setting.
• Usage data: Pages visited on the platform, games played, bets placed, duration of sessions, click patterns, search queries entered within the platform, and features accessed.
• Transaction data: Full records of all deposits, withdrawals, bets, wins, losses, bonus activations, and wagering activity associated with your account.
• Cookie and tracking data: Session tokens, preference cookies, and analytical identifiers as described in Section 7 of this policy.

2.3 Data from Third Parties

• KYC and AML screening providers: Identity verification results, sanctions screening results, and politically exposed person (PEP) status flags returned by our third-party verification partners.
• Payment processors: Transaction confirmation references, payment status updates, and fraud risk scores returned by bKash, Nagad, Rocket, and our card processing partners.
• Game providers: Game session data, RNG outcomes, and bet settlement records returned by Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other certified providers whose games are hosted on the 66zzz platform.

3. How We Use Your Data

66zzz uses personal data collected from you for the following specific purposes:

Purpose	Data Used
Creating and managing your account	Registration data, KYC documents
Processing deposits and withdrawals	Payment data, transaction data, KYC documents
Preventing fraud and money laundering (AML)	All categories of data, AML screening results
Providing customer support	Communications data, account data, transaction data
Responsible gaming monitoring	Usage data, transaction data, responsible gaming data
Improving platform performance	Technical data, usage data, cookie data
Sending promotional communications (with consent)	Email address, username, usage data
Complying with legal obligations	All categories of data as required by applicable law

We do not use your personal data to build profiles for third-party advertising purposes, and we do not use your data to make fully automated decisions that produce significant legal effects without any human review.

4. Legal Basis for Processing

Every instance of personal data processing by 66zzz is carried out on one of the following legal bases:

• Contract performance: Processing necessary to provide the services you have signed up for, including account management, game access, and payment processing.
• Legal obligation: Processing required to comply with applicable law, including anti-money laundering regulations, fraud prevention obligations, and record-keeping requirements.
• Legitimate interests: Processing carried out in pursuit of our legitimate business interests — such as platform security, fraud detection, and service improvement — where those interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent, in particular for sending marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5. Data Sharing

66zzz does not sell, rent, or otherwise commercially transfer your personal data to third parties. We share personal data only in the following limited circumstances:

5.1 Service Providers and Data Processors

We engage carefully selected third-party service providers who process personal data on our behalf under strict contractual data processing agreements. These include KYC and identity verification providers, payment processing partners (including bKash, Nagad, Rocket, and card acquirers), cloud hosting and infrastructure providers, customer support platform operators, and analytics providers. All such providers are contractually prohibited from using your data for any purpose other than providing the specific service for which they were engaged.

5.2 Legal and Regulatory Disclosures

We may disclose personal data to law enforcement agencies, regulatory authorities, courts, or other public bodies where we are legally required or permitted to do so — for example, in connection with a criminal investigation, a court order, or a statutory anti-money laundering reporting obligation. In such cases, we will disclose only the minimum data required and will notify you of the disclosure unless we are legally prohibited from doing so.

5.3 Business Transfers

In the event that 66zzz undergoes a merger, acquisition, restructuring, or sale of all or substantially all of its assets, your personal data may be transferred to the acquiring or surviving entity. We will notify you of any such transfer and the applicable privacy policy of the new controller before the transfer takes place.

6. International Data Transfers

66zzz operates as an internationally licensed offshore platform, and our infrastructure and service providers may be located in countries outside Bangladesh. As a result, your personal data may be transferred to, stored in, and processed in countries whose data protection laws differ from those of your home jurisdiction.

Where we transfer personal data internationally, we take appropriate safeguards to ensure that your data receives a level of protection equivalent to that required under applicable data protection principles. Such safeguards may include standard contractual clauses, data processing agreements incorporating appropriate security obligations, and transfers only to jurisdictions that maintain adequate data protection standards.

By using the 66zzz platform, you acknowledge and consent to the transfer of your personal data as described in this section.

7. Cookies & Tracking Technologies

66zzz uses cookies and similar tracking technologies on the platform. Cookies are small text files placed on your device by your browser that allow the platform to recognise your device and store certain information about your preferences and session state.

7.1 Types of Cookies We Use

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They include session authentication tokens, CSRF protection tokens, and load balancing identifiers. Without these cookies, core platform features such as login and account access cannot operate. These cookies cannot be disabled.
• Functional Cookies: These cookies remember your preferences — such as your preferred language settings, display options, and game lobby filter selections — so you do not have to re-enter them on each visit.
• Analytics Cookies: We use first-party analytics cookies to understand how users navigate the platform, which games are most popular, and where technical errors occur. This data is used in aggregate and is not linked to individual user identities in our analytics reports.

7.2 Third-Party Advertising Cookies

66zzz does not use third-party advertising cookies, cross-site tracking pixels, or social media tracking scripts on the platform. We do not share browsing data with advertising networks or data brokers.

7.3 Managing Cookies

You may configure your browser to refuse all cookies or to alert you when cookies are being set. Please note that disabling strictly necessary cookies will impair your ability to use the platform, including logging in to your account. Instructions for managing cookies in popular browsers are available in each browser's help documentation.

8. Data Retention

66zzz retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including the satisfaction of any legal, regulatory, accounting, or reporting requirements. The following retention periods apply:

• Account registration data: Retained for the duration of your account plus a minimum of five (5) years following account closure, to satisfy anti-money laundering record-keeping obligations.
• KYC and identity documents: Retained for a minimum of five (5) years after the end of the customer relationship, in line with AML best practices.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction.
• Customer support communications: Retained for three (3) years from the date of the last communication, unless the communication relates to a dispute, in which case it is retained until the dispute is fully resolved and any applicable limitation period has expired.
• Analytics and usage data: Retained in aggregate, anonymised form indefinitely; identifiable usage logs are deleted after twenty-four (24) months.
• Marketing consent records: Retained for the duration of the consent plus three (3) years following withdrawal, as evidence of the consent history.

Where personal data is no longer required for any lawful purpose, it is securely deleted or anonymised in accordance with our internal data destruction procedures.

9. Security Measures

66zzz implements a comprehensive range of technical and organisational security measures designed to protect your personal data against accidental loss, unauthorised access, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Bcrypt hashing of account passwords — plain-text passwords are never stored.
• Tokenisation of payment method identifiers — full payment account numbers are never retained on 66zzz infrastructure.
• Role-based access controls ensuring that staff can access personal data only to the extent necessary for their specific job function.
• Regular penetration testing and vulnerability assessments conducted by qualified independent security professionals.
• Encrypted backups with geographically separated storage locations to ensure data availability and disaster recovery capability.
• Mandatory security training for all staff with access to personal data, conducted on at least an annual basis.

Despite these measures, no data transmission over the internet and no data storage system can be guaranteed to be completely secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you without undue delay in accordance with applicable breach notification obligations.

10. Your Rights

Subject to applicable law, you have the following rights in relation to the personal data that 66zzz holds about you:

• Right of Access: You may request a copy of the personal data we hold about you, together with information about how we use it and with whom we share it.
• Right to Rectification: You may request that we correct any inaccurate or incomplete personal data we hold about you. Some corrections can be made directly within your account dashboard.
• Right to Erasure: You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where we have no legitimate grounds for retaining it. Note that this right is subject to overriding legal obligations such as AML record-keeping requirements, which may prevent full erasure.
• Right to Restriction of Processing: You may request that we restrict the processing of your personal data in certain circumstances, for example while a rectification request is being assessed.
• Right to Data Portability: Where processing is based on your consent or a contract with you, you may request that we provide your personal data to you in a structured, commonly used, and machine-readable format.
• Right to Object: You may object to processing carried out on the basis of our legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent (for example, for marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of the above rights, please contact us at [email protected] with the subject line "Data Subject Request". We will acknowledge your request within five (5) business days and respond substantively within thirty (30) days. In complex cases, we may extend the response period by a further thirty (30) days, in which case we will notify you of the extension and the reason for it.

11. Children's Privacy

The 66zzz platform is strictly intended for adults aged 21 years and over. We do not knowingly collect, process, or store personal data relating to any person under the age of 21. If you are under 21, you must not register an account, deposit funds, or place any bet on the 66zzz platform.

If 66zzz becomes aware that personal data has been submitted by or collected in relation to a person under the age of 21, we will take immediate steps to delete that data, close the associated account, and return any funds in the account balance to the originating payment method where technically possible. If you believe a person under 21 has created an account on our platform, please notify us immediately at [email protected].

We recommend that adults sharing devices with minors make use of parental control software and ensure that account credentials are not accessible to persons under 21.

12. Marketing Communications

With your explicit prior consent, 66zzz may send you promotional communications by email regarding new games, seasonal promotions (such as those tied to BPL season, Eid, or Pohela Boishakh), bonus offers, and platform news. Marketing communications are sent only to players who have opted in during the registration process or subsequently through their account settings.

You may unsubscribe from marketing communications at any time by clicking the "Unsubscribe" link included in every marketing email, or by updating your communication preferences in your account dashboard, or by contacting our support team at [email protected]. Unsubscribe requests are processed within five (5) business days. Please note that unsubscribing from marketing communications does not affect the sending of transactional communications, such as deposit confirmations, withdrawal notifications, and account security alerts, which are sent on the basis of contract performance rather than consent.

13. Third-Party Links

The 66zzz platform may, from time to time, contain references to third-party websites, game providers, or payment services. This Privacy Policy applies solely to personal data processed by 66zzz in connection with the 66zzz platform and does not apply to the privacy practices of any third party. We encourage you to review the privacy policies of any third-party service with which you interact, as 66zzz is not responsible for and has no control over the data practices of independent third parties.

14. Policy Amendments

66zzz reserves the right to amend this Privacy Policy at any time. When we make material changes — that is, changes that significantly affect how we process your personal data or the rights available to you — we will provide at least fourteen (14) days' prior notice by posting the revised policy on this page and, where reasonably practicable, notifying you by email to the address registered on your account.

The date of the most recent revision will always be displayed at the top of this page. We encourage you to review this policy periodically to stay informed about how 66zzz protects your personal data. Your continued use of the platform following the effective date of any amendment constitutes your acceptance of the revised policy.

15. Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or have a concern about how 66zzz has handled your personal data, please contact us using the details below. All privacy-related enquiries should be submitted in English for fastest processing.

Privacy Contact Email: [email protected]
Subject Line: Privacy Policy Enquiry (or "Data Subject Request" for rights requests)
Response Target: Acknowledgement within 5 business days; full response within 30 days
Support Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (UTC+6)

We take all privacy complaints seriously and will investigate every concern raised in good faith. If you are not satisfied with our response to your complaint, you may have the right to escalate the matter to a relevant data protection supervisory authority or seek an independent legal remedy.