66z Privacy Policy

1. Who We Are and How to Contact Us

66z is an online casino and sports betting platform serving players across Bangladesh. We operate the website 66z.games and all associated mobile interfaces. If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, you may contact our Data Support team at any time. Our contact email is displayed in the footer of this page. We aim to respond to all privacy-related enquiries within 5 business days.

2. Personal Data We Collect

We collect personal data in two primary ways: information you provide to us directly, and information generated automatically when you use our platform. The categories of data we collect include the following:

• Identity Data: Your full name, date of birth, gender, and a copy of a government-issued photo ID (required for age and identity verification).
• Contact Data: Your email address, phone number, and residential address including city and district (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi).
• Account Data: Your chosen username, encrypted password, account preferences, and communication settings.
• Financial Data: Payment method details (e.g., bKash wallet number, Nagad account, Rocket ID, Upay ID, bank card details for Visa or Mastercard transactions), transaction history, deposit amounts, and withdrawal records. We do not store full card numbers — only masked identifiers are retained after a transaction is processed.
• Gaming Activity Data: Records of games played, bets placed, wager amounts, game outcomes, bonus redemptions, and session durations.
• Technical Data: IP address, device type, operating system, browser type and version, screen resolution, referring URLs, and session timestamps.
• Behavioural Data: Navigation patterns, pages visited, features used, click events, and on-site search queries, collected via cookies and analytics tools.
• Communications Data: The content of support tickets, live chat transcripts, emails, and any feedback or complaints submitted to 66z.

We do not knowingly collect sensitive personal data such as racial or ethnic origin, religious beliefs, or health information unless it is voluntarily disclosed by you in the course of a responsible gaming self-assessment or support interaction.

3. How We Use Your Personal Data

66z processes your personal data only for the purposes outlined below. We apply the principle of data minimisation — if a purpose can be achieved with less data, we use less.

• Account Management: To create, maintain, and administer your 66z account, including processing your registration and verifying your identity and age (21+ requirement).
• Service Delivery: To make our games, sports betting, live casino, and promotional offers available to you, and to personalise your experience on the platform.
• Payment Processing: To execute deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, Islami Bank, City Bank, Sonali Bank, Visa, and Mastercard. We share only the minimum necessary data with payment processors to complete a transaction.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, multi-accounting, collusion, money laundering, and other prohibited conduct. This is a legitimate interest that also protects other players on the platform.
• Legal and Regulatory Compliance: To meet our obligations under applicable laws, including anti-money laundering (AML) requirements, know-your-customer (KYC) obligations, and record-keeping duties.
• Responsible Gaming: To monitor gameplay patterns that may indicate problematic gambling behaviour, and to administer self-exclusion, deposit limit, and cooling-off requests promptly and accurately.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates by email or SMS — but only where you have opted in to receive such communications. You may withdraw consent at any time by updating your account preferences or contacting support.
• Customer Support: To respond to your enquiries, resolve disputes, and improve the quality of our service based on feedback received.
• Analytics and Improvement: To understand how Players use the platform so we can improve navigation, game selection, and overall user experience. Analytics data is aggregated and anonymised wherever possible.

4. Legal Basis for Processing

We process your personal data on the following legal grounds:

• Contract Performance: Processing necessary to fulfil our obligations under the account registration agreement and Terms & Conditions.
• Legal Obligation: Processing required to comply with applicable laws and regulatory requirements, including AML and KYC obligations.
• Legitimate Interests: Processing carried out to protect the security and integrity of the platform, prevent fraud, and improve our services — where these interests are not overridden by your fundamental rights.
• Consent: Processing based on your explicit opt-in, particularly for direct marketing communications. You may withdraw this consent at any time.

5. Sharing Your Personal Data

66z does not sell, rent, or trade your personal data. We share your data only in the following limited and controlled circumstances:

• Payment Processors: bKash, Nagad, Rocket, Upay, and card processing partners receive only the transaction data necessary to execute a payment. These partners operate under strict data processing agreements.
• Game Software Providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session identifiers required to deliver and audit game outcomes. They do not receive your full identity profile.
• Identity Verification Services: Third-party KYC and age verification providers may receive identity documents and personal details solely for the purpose of completing a verification check.
• Analytics Providers: Aggregated, non-personally identifiable behavioural data may be shared with analytics platforms to help us understand usage patterns and improve the platform.
• Law Enforcement and Regulators: We may disclose personal data to competent authorities, courts, or regulatory bodies where required to do so by law, court order, or binding regulatory direction.
• Business Transfers: In the event of a merger, acquisition, or asset sale, your data may be transferred to the acquiring entity, subject to equivalent privacy protections.

All third parties with whom we share data are contractually required to process it in a manner consistent with this Policy and to implement appropriate security measures.

6. Cookies and Tracking Technologies

66z uses cookies and similar tracking technologies to operate the platform effectively and to understand how it is used. The types of cookies we deploy are as follows:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies that keep you logged in and security tokens that protect against cross-site request forgery. These cannot be disabled.
• Performance and Analytics Cookies: Used to measure page views, session durations, error rates, and navigation paths. Data collected is aggregated and does not identify you personally.
• Functional Cookies: Remember your preferences such as language settings, display options, and preferred payment method for a smoother return experience.

You may manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the platform. We do not use third-party advertising or retargeting cookies.

7. Data Retention

We retain personal data for as long as your account remains active and for a period thereafter as required by law or legitimate business need. Specific retention periods are as follows:

• Account and Identity Data: Retained for the duration of your account and for a minimum of 5 years following account closure, in compliance with AML record-keeping obligations.
• Transaction and Financial Records: Retained for a minimum of 5 years from the date of each transaction.
• Gaming Activity Logs: Retained for 2 years from the date of each gaming session, unless a dispute or investigation requires longer retention.
• Support Communications: Retained for 2 years following resolution of the relevant support case.
• Marketing Preferences and Consent Records: Retained for as long as your marketing opt-in consent remains active, and for 1 year after withdrawal of consent as evidence of compliance.

Once the applicable retention period has elapsed, data is securely deleted or anonymised so that it can no longer be linked to you as an individual.

8. Data Security

66z implements a range of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. Our security framework includes:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Encrypted storage of all sensitive data at rest, including financial records and identity documents.
• Role-based access controls ensuring that only authorised personnel can access personal data, limited to what is necessary for their specific function.
• Regular security assessments and vulnerability testing of our platform infrastructure.
• Two-factor authentication options available to Players to enhance account security.
• Incident response procedures designed to detect, contain, and notify affected parties of any data breach within a reasonable timeframe.

While we take every reasonable precaution, no digital platform can guarantee absolute security. You also play a role in protecting your data by keeping your login credentials confidential and logging out of shared devices after each session.

9. Your Data Rights

As a user of the 66z platform, you hold the following rights with respect to your personal data. To exercise any of these rights, contact our support team using the email address in the footer of this page.

10. Minors and Age Restrictions

The 66z platform is strictly for adults aged 21 years and above. We do not knowingly collect personal data from anyone under the age of 21. If we become aware that a minor has registered on the platform, the account will be immediately suspended, all balances forfeited, and any personal data collected will be permanently deleted. If you believe a minor has accessed 66z using false age information, please notify us immediately at the contact address listed in our footer.

11. Third-Party Links and Services

The 66z platform may occasionally reference third-party services such as game providers or payment processors. This Policy applies exclusively to data processed by 66z. We are not responsible for the privacy practices of third-party providers. We recommend reviewing the privacy policy of any third-party service you interact with independently of the 66z platform.

12. Changes to This Privacy Policy

66z reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. When material changes are made, we will update the "Last Updated" date at the top of this page and, where appropriate, notify registered Players via email. Your continued use of the 66z platform following any revision constitutes your acceptance of the updated Policy. We encourage you to review this page periodically to stay informed.