66db Privacy Policy — How We Protect Your Data in Bangladesh

This Privacy Policy ("Policy") describes how 66db ("we", "us", "the Platform") collects, uses, stores, shares and protects the personal data of players and visitors who use the 66db online gaming and cricket betting platform, accessible at 66db.vip. This Policy applies to all services provided by 66db, including account registration, deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa and Mastercard, all gaming activity (slots, live casino, crash games, fish shooting, sports betting), customer support communications and any marketing communications sent by 66db.

By registering an account on the 66db platform or by continuing to use the platform, you acknowledge that you have read and understood this Policy and that you consent to the collection and use of your personal data as described herein. If you do not agree with this Policy, you must not register an account or use the 66db platform. We encourage all Bangladesh players to read this Policy carefully before providing any personal information. If you have questions about how your data is handled, please contact us at [email protected].

66db collects two categories of personal data: information you provide directly to us when registering and using the platform, and information collected automatically when you access and use the platform. The following describes each category in detail.

Information You Provide Directly

• Registration information: your mobile phone number, chosen username and password. Your mobile number is your primary account identifier on 66db and is used for account login, payment processing via bKash or Nagad, and support communications.
• Identity verification documents: where 66db requests KYC (Know Your Customer) verification, you may be asked to provide a copy of a valid government-issued identity document, such as a National Identity Card (NID) or passport, along with a recent photograph.
• Financial information: details of the payment method used for deposits and withdrawals, including the mobile wallet number associated with your bKash, Nagad, Rocket or Upay account, or card details for Visa or Mastercard transactions (processed securely through the payment provider's own environment).
• Support communications: the content of any messages or emails you send to the 66db support team at [email protected], including your registered mobile number and any information you choose to include in your message.
• Responsible gaming tool settings: if you set deposit limits, session reminders or self-exclusion periods through your account settings, 66db records these preferences to enforce them consistently across all sessions and devices.

Information Collected Automatically

• Device and technical information: your device type (Android or iOS phone, tablet, or desktop browser), operating system version, browser type and version, screen resolution and unique device identifiers. This information helps 66db optimise the platform's performance for the device types most commonly used by Bangladesh players.
• Usage data: your login and logout timestamps, the pages and game sections you visit on the platform, the games you play, the bets you place (including stake amounts, odds, game outcomes and settlement results), session durations and the features you interact with.
• Network information: IP address, mobile network carrier (e.g. Grameenphone, Robi, Banglalink, Teletalk) and approximate geographical location derived from your IP address (district or city level — 66db does not use GPS-level location tracking).
• Cookie and session data: session identifiers, authentication tokens and cookie data used to maintain your logged-in state across pages during a session. See Section 7 (Cookies) for full details.

66db processes your personal data on the following legal bases, depending on the specific purpose for which your data is being used:

• Contractual necessity: processing your account data, payment data and gaming activity records is necessary to perform the contract between you and 66db — that is, to operate your account, accept your deposits, settle your bets and process your withdrawals.
• Legal obligation: processing your data for KYC verification, anti-money laundering checks, age verification (21+) and response to lawful requests from authorities is required by applicable law.
• Legitimate interests: processing usage data to improve platform performance, detect fraud, prevent bonus abuse and communicate with you about your account is carried out on the basis of 66db's legitimate interest in operating a safe, reliable and well-functioning gaming platform.
• Consent: where 66db sends promotional communications about bonuses and offers, this is based on your implied consent as an active account holder who has not opted out of such communications. You may withdraw this consent at any time by contacting support.

66db does not sell your personal data. We share your personal data with third parties only in the following limited circumstances:

• Payment service providers: bKash, Nagad, Rocket, Upay, Visa and Mastercard receive the transaction data necessary to process your deposits and withdrawals. This includes your registered mobile number (for mobile wallet transactions) or card details (for card transactions). These providers process your payment data under their own privacy policies and security standards.
• Game technology providers: third-party game studios and live casino providers — including Pragmatic Play, Evolution Gaming and other certified providers — receive session data necessary to deliver the games to your device and to record game outcomes for settlement purposes. These providers do not receive your financial data or payment account details.
• Law enforcement and regulatory authorities: where 66db is required by applicable law, court order or lawful request from a competent authority to disclose your personal data, we will do so. 66db will notify you of such a disclosure where we are legally permitted to do so.
• Fraud prevention and security services: 66db may share account activity data with specialist fraud detection and prevention service providers where there is a reasonable suspicion of fraudulent activity, money laundering or bonus abuse affecting the platform.

In all cases where 66db shares your personal data with a third party, we take reasonable steps to ensure that the third party handles your data securely and only uses it for the specific purpose for which it was shared. We do not permit third parties who receive your data for service delivery purposes to use it for their own marketing or commercial purposes.

66db retains your personal data for as long as your account is active and for such period thereafter as is required by applicable law or is necessary to fulfil the purposes described in this Policy. The following retention periods apply: account and registration data is retained for the duration of your account and for a minimum of five years after account closure, in accordance with applicable financial record-keeping requirements. Transaction records (deposit and withdrawal history) are retained for a minimum of five years after the date of each transaction. Support communication records are retained for two years from the date of the communication. KYC verification documents are retained for five years after account closure.

After the applicable retention period has expired, 66db will securely delete or anonymise your personal data so that it can no longer be associated with you as an individual. Where data is anonymised rather than deleted, it may be retained indefinitely in aggregate form for statistical and platform improvement purposes, as it no longer constitutes personal data once anonymised.

As a user of the 66db platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact the 66db support team at [email protected], including your registered mobile number in your message so we can locate your account:

• Right of access: you may request a copy of the personal data that 66db holds about you. We will provide this within a reasonable timeframe following receipt of a valid request and after verifying your identity.
• Right to rectification: if any of the personal data held by 66db about you is inaccurate or incomplete, you have the right to request that we correct it. This applies particularly to your registered mobile number, username or any KYC documentation details.
• Right to erasure: you may request deletion of your personal data, subject to our legal obligation to retain certain records for the periods required by applicable law (see Section 7). Requests for erasure will be processed within a reasonable timeframe after identity verification.
• Right to restrict processing: in certain circumstances you may request that 66db restricts the processing of your personal data — for example while a dispute about the accuracy of your data is being resolved. During a restriction period, 66db will continue to store your data but will not actively process it beyond what is legally required.
• Right to withdraw consent for promotional communications: where you have previously consented (or not opted out) of receiving promotional messages from 66db, you may withdraw this consent at any time. Withdrawal of consent for promotional communications will not affect the lawfulness of processing carried out before the withdrawal.

66db will respond to all data rights requests within a reasonable period. We may ask you to verify your identity before processing a data rights request, to ensure that we do not disclose or amend personal data in response to an unauthorised request. 66db will not charge a fee for exercising your data rights unless a request is manifestly unfounded or excessive.

66db reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law or the services offered on the platform. When we make material changes to this Policy, we will publish the updated Policy on this page with a revised "Last Updated" date at the top and, where practicable, notify active account holders via their registered mobile number.

Your continued use of the 66db platform after an updated Privacy Policy has been published constitutes your acknowledgement of the updated Policy. We encourage you to review this Policy periodically to stay informed of how 66db handles your personal data. If you have any questions or concerns about any change to this Policy, please contact the support team at [email protected] before continuing to use the platform.