6l66 Privacy Policy — How We Handle Your Data

This Privacy Policy ("Policy") applies to all users of the 6l66 online betting and casino platform accessible at https://6l66.bio and any associated mobile-optimised interfaces (collectively, the "Platform"). This Policy should be read alongside the 6l66 Terms and Conditions, which together form the complete agreement between you and 6l66 regarding your use of the Platform. By creating a 6l66 account or using any part of the Platform, you acknowledge that you have read this Policy and consent to the collection and use of your personal data as described herein.

6l66 acts as the data controller in respect of personal data collected through the Platform. We take our obligations regarding data privacy seriously and we have designed our data collection and processing practices to be proportionate — we collect only what we genuinely need to provide the Platform's services safely, legally, and efficiently to players across Bangladesh.

6l66 collects personal data across the following categories when you register an account, use the Platform, or interact with our support services:

6l66 uses the personal data collected from users for the following purposes, each of which is necessary to provide the Platform's services or to comply with our legal obligations:

• Account creation and management: to create, verify, and maintain your 6l66 player account, including processing your KYC documentation to confirm your identity and age eligibility.
• Transaction processing: to process deposits and withdrawals through bKash, Nagad, Rocket, Upay, bank transfer, and card payments, and to maintain accurate financial records of your account activity.
• Platform security and fraud prevention: to detect, investigate, and prevent fraudulent activity, money laundering, duplicate account creation, bot usage, and other conduct prohibited under the 6l66 Terms and Conditions.
• Responsible gaming: to monitor gameplay patterns that may indicate problem gambling behaviour and to support players who request deposit limits, time-outs, or self-exclusion through the responsible gaming tools available in Account Settings.
• Customer support: to respond to your support enquiries, complaints, and feedback, and to maintain records of those interactions for quality assurance and dispute resolution purposes.
• Platform improvements and personalisation: to analyse aggregated, anonymised usage data to improve the Platform's performance, game selection, and user experience for players in Bangladesh. Where personalisation is applied (for example, displaying games relevant to your play history), this is based on your activity data and does not involve sharing your personal data with third parties for advertising purposes.

6l66 does not use your personal data for third-party direct marketing. We may send you service-related communications about your account status, transaction confirmations, promotional offers applicable to your account tier, and responsible gaming notifications. You may opt out of promotional communications at any time through your account notification settings.

6l66 processes your personal data on the following legal bases, each of which applies to specific processing activities described in this Policy:

• Contractual necessity: processing required to perform our obligations under the 6l66 Terms and Conditions — including account management, transaction processing, and customer support — is carried out on the basis that it is necessary to fulfil the contract between you and 6l66.
• Legal obligation: processing necessary to comply with applicable laws and regulations — including KYC verification, anti-money-laundering checks, record-keeping requirements, and responding to lawful requests from regulatory or law enforcement authorities — is carried out on the basis of legal obligation.
• Legitimate interests: processing for fraud prevention, platform security, responsible gaming monitoring, and anonymised analytics is carried out on the basis of 6l66's legitimate interest in operating a safe and compliant betting and casino service. We have assessed that these legitimate interests are not overridden by your data protection rights in these specific contexts.
• Consent: where 6l66 processes personal data on the basis of your consent (for example, sending you promotional communications about offers relevant to your account), you may withdraw that consent at any time through your account notification settings or by contacting our support team. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

6l66 does not sell your personal data to any third party. We share personal data only in the following circumstances and only to the extent necessary for each specific purpose:

• Payment service providers: we share the minimum necessary financial data with bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank, and other payment processors strictly to process your deposit and withdrawal transactions. These providers process your payment data under their own privacy policies and are not permitted to use it for any other purpose.
• KYC and identity verification providers: we share identity documents and relevant personal data with our KYC verification partners to confirm your age, identity, and eligibility to use the Platform. These partners are contractually bound to process your data solely for verification purposes.
• Fraud prevention and security services: we share technical data (including IP addresses, device identifiers, and session data) with fraud detection and platform security service providers who help us identify and prevent prohibited conduct on the Platform.
• Regulatory and law enforcement authorities: we may disclose personal data to regulatory bodies, law enforcement agencies, or courts where we are required to do so by applicable law, a court order, or a lawful directive from a competent authority. We will notify you of any such disclosure where we are legally permitted to do so.

All third parties with whom 6l66 shares personal data are required by contract to implement appropriate technical and organisational security measures to protect that data, and are prohibited from using it for any purpose other than the specific purpose for which it was shared. 6l66 does not share personal data with advertising networks, data brokers, or social media platforms.

The 6l66 Platform uses cookies and similar tracking technologies to ensure the Platform functions correctly, to keep you securely logged in during your session, and to collect anonymised analytics data that helps us improve the Platform's performance. The following categories of cookies are used:

• Essential cookies: strictly necessary for the Platform to function. These include session authentication tokens, security cookies, and load-balancing identifiers. These cookies cannot be disabled without breaking core Platform functionality such as the ability to log in, maintain your session, and process transactions.
• Functional cookies: used to remember your preferences — such as your selected language, notification settings, and responsible gaming preferences — so that you do not need to re-enter these settings on each visit.
• Analytics cookies: used to collect anonymised, aggregated data about how users interact with the Platform — including which pages are visited most frequently, which games attract the highest session durations, and where users typically exit the Platform. This data is used solely to improve the Platform's design and content for Bangladesh players and is never linked to your personal account.

You can manage cookie preferences through your mobile browser settings. Disabling analytics cookies will not affect your ability to use the Platform. Disabling essential cookies will prevent you from logging in and using the Platform's core features. 6l66 does not use third-party advertising cookies or cross-site tracking cookies.

6l66 implements technical and organisational security measures appropriate to the nature and sensitivity of the personal data it holds. These measures include 256-bit SSL/TLS encryption on all data transmitted between your device and the Platform, encrypted storage of sensitive account data at rest, role-based access controls limiting internal access to personal data to authorised personnel only, and regular security audits of our platform infrastructure.

While 6l66 takes all reasonable steps to protect your personal data, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 6l66 will notify affected users without undue delay and will take all steps required to contain and remediate the breach.

6l66 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, and for as long as required to comply with applicable legal, regulatory, and financial record-keeping obligations. The following general retention periods apply: account registration data and KYC documentation are retained for the duration of the account's active life plus a minimum of 5 years following account closure; transaction records are retained for a minimum of 5 years from the date of the transaction; gameplay and betting history records are retained for a minimum of 2 years; communications and support records are retained for a minimum of 2 years from the date of the last interaction.

When personal data is no longer required for any of the purposes described in this Policy or to comply with any applicable legal obligation, 6l66 will securely delete or anonymise that data. Where complete deletion is not technically feasible within a standard operational cycle (for example, data held in encrypted backup archives), the data will be isolated from active processing and deleted at the earliest technically practicable opportunity.

As a user of the 6l66 Platform, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact 6l66 through the official support channel or by email at [email protected]. We will respond to all valid rights requests within 30 days.

6l66 will not charge a fee for processing any data rights request unless the request is manifestly unfounded or excessive, in which case a reasonable administrative fee may be applied. 6l66 may need to verify your identity before fulfilling a data rights request to ensure that personal data is not disclosed to an unauthorised person.

The 6l66 Platform is strictly for adults aged 21 and above. 6l66 does not knowingly collect personal data from persons under the age of 21. Age verification is a mandatory step in the KYC process, and any account found to have been registered by a person under 21 will be immediately closed and all associated personal data deleted, except where retention is required by applicable legal obligations.

If you believe that a person under the age of 21 has created a 6l66 account, please notify our support team immediately through the official support channel or by email at [email protected]. We will investigate the matter promptly and take all necessary steps to close the account and delete the associated personal data.

The 6l66 Platform may reference or integrate with third-party services — including game content provided by studios such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming. These third-party game providers operate their games within the 6l66 Platform environment under data processing agreements that restrict their use of any player data shared with them. The game providers are not permitted to use player data for independent marketing or profiling purposes. 6l66 is not responsible for the independent privacy practices of third-party websites that may be accessible outside the 6l66 Platform environment.

6l66 reviews this Privacy Policy periodically and may update it to reflect changes in the Platform's data processing practices, applicable law, or regulatory guidance. The date at the top of this Policy indicates when it was last reviewed and updated. Where a change is material — meaning it substantively alters how we collect, use, or share personal data — we will notify registered users through the Platform's notification system no less than 7 days before the change takes effect.

Your continued use of the 6l66 Platform following the effective date of any update to this Policy constitutes your acceptance of the revised Policy. We encourage you to review this Policy periodically so that you are always aware of how 6l66 collects and uses your personal data. The current version of this Policy is always the version published at https://6l66.bio/privacy-policy.

If you have any questions about this Privacy Policy, wish to exercise any of your data protection rights, or need to raise a data privacy concern, please contact 6l66 through the official support channel accessible within the Platform. Our support team is available 24 hours a day, 7 days a week to assist with data privacy enquiries.

You may also submit data privacy enquiries by email to [email protected]. Please include your registered mobile number and a clear description of your request in any email so that our team can verify your identity and respond efficiently. All data privacy rights requests receive a written acknowledgment within 2 business days and a substantive response within 30 days, in accordance with this Policy.