66kbd Privacy Policy

Introduction

This Privacy Policy governs the collection, processing, storage, and disclosure of personal data by 66kbd in connection with the operation of the online casino and sports betting platform available at https://66kbd.io (the "Platform"). It applies to all registered players, visitors to the Platform, and any person who contacts 66kbd through any channel including live chat, email, or social media.

66kbd is committed to handling personal data responsibly and transparently. This document has been prepared to give you a clear and complete picture of our data practices so that you can make informed decisions about your engagement with the Platform. If you have questions about any aspect of this Privacy Policy, you are encouraged to contact the 66kbd support team before registering or continuing to use the Platform.

By registering an account on the 66kbd Platform or continuing to use the Platform after changes to this Privacy Policy have been published, you confirm that you have read and understood the privacy practices described herein. This Privacy Policy should be read alongside the 66kbd Terms and Conditions, which form the overarching contractual framework governing your use of the Platform.

Data Controller

For the purposes of applicable data protection legislation, the data controller responsible for your personal information is 66kbd, the operator of the Platform at https://66kbd.io. As data controller, 66kbd determines the purposes for which and the manner in which your personal data is processed.

If you have questions, requests, or concerns related to the handling of your personal data, you may contact the 66kbd Data Protection contact point via the support channels listed in Section 15 of this Privacy Policy. All data-related requests will be acknowledged within 5 business days and resolved within 30 calendar days of receipt, in line with applicable regulatory standards.

Information We Collect

3.1 Registration and Account Data

When you create an account on the 66kbd Platform, we collect the personal information you provide during the registration process. This typically includes your full legal name, date of birth, residential address, email address, and mobile phone number. This information is used to create and manage your player account and to verify your eligibility to use the Platform, including confirming that you are 21 years of age or older.

3.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) obligations and responsible gaming commitments, 66kbd may request copies of identity verification documents. These may include a government-issued photo identification document such as a National Identity Card, passport, or driving licence, as well as a recent proof of residential address such as a utility bill or bank statement dated within 90 days, and confirmation of ownership of the payment method used for deposits.

KYC documents are processed and stored securely and are not shared with any third party except where required by applicable law or transmitted to our authorised KYC verification service providers under data processing agreements.

3.3 Financial Transaction Data

We collect records of all financial transactions on your account, including deposit amounts and timestamps, withdrawal requests and settlement records, bonus credits and associated wagering activity, and the payment channels used (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank). Transaction data is retained for a minimum period in accordance with our data retention obligations described in Section 8.

3.4 Technical and Device Data

When you access the 66kbd Platform, we automatically collect certain technical information about your device and connection. This includes your IP address, device type and operating system, browser type and version, referring URL, session start and end timestamps, pages viewed and features interacted with, and geolocation data derived from your IP address. This data is used for security monitoring, fraud prevention, platform analytics, and ensuring regulatory compliance regarding Prohibited Jurisdictions.

3.5 Customer Support Communications

When you contact the 66kbd support team through live chat, email, or any other support channel, we retain a record of that communication including the content of the conversation, the date and time, and the support agent who assisted you. These records are maintained to ensure quality of service, to resolve disputes, and to comply with any applicable regulatory audit requirements.

3.6 Behavioural and Gaming Data

66kbd collects data about your gaming activity on the Platform, including the games played, bet sizes placed, win/loss outcomes, session durations, and interaction patterns. This data supports responsible gaming monitoring, fraud detection, personalisation of the player experience, and platform improvement initiatives. Gaming activity data may be used to identify patterns consistent with problem gambling and to trigger responsible gaming interventions in accordance with our Responsible Gaming obligations.

How We Use Your Information

66kbd uses the personal data we collect for the following specific purposes:

• Account Management: To create, maintain, and administer your player account, including processing deposits and withdrawals, updating account settings, and communicating account-related notifications.
• Identity Verification: To verify your age and identity in compliance with our KYC obligations, confirming that you are 21 years of age or older and that you are accessing the Platform from a permitted jurisdiction.
• Transaction Processing: To process deposit and withdrawal requests via bKash, Nagad, Rocket, Upay, and bank transfer channels accurately and within the timeframes described in our Terms and Conditions.
• Fraud Prevention and Security: To monitor account activity for patterns consistent with fraud, money laundering, bonus abuse, multi-accounting, or other prohibited conduct as defined in the Terms and Conditions. Anomalous activity may trigger additional verification steps or account review.
• Responsible Gaming: To monitor gaming behaviour for indicators of problem gambling and to apply or suggest responsible gaming tools such as deposit limits, cooling-off periods, and self-exclusion where appropriate.
• Platform Improvement: To analyse aggregated, anonymised usage data to understand how players interact with the Platform and to inform product development, user experience improvements, and new feature launches.
• Legal and Regulatory Compliance: To fulfil our obligations under applicable anti-money-laundering regulations, financial reporting requirements, and any lawful requests from regulatory or law enforcement authorities.
• Customer Support: To respond to support enquiries, investigate complaints, and maintain records of support interactions for quality assurance purposes.
• Marketing Communications: To send you promotional offers, bonus alerts, and platform updates by email or push notification, where you have given consent or where a legitimate interest exists. You may withdraw marketing consent at any time as described in Section 13.

Legal Basis for Processing

66kbd processes your personal data on the following legal bases, depending on the purpose of processing:

• Contractual Necessity: Processing required to perform the contract between you and 66kbd — namely, the operation of your player account, processing of financial transactions, and delivery of gaming services. Without this processing, we cannot provide the Platform services to you.
• Legal Obligation: Processing required to comply with applicable law, including KYC and identity verification requirements, anti-money-laundering obligations, financial record-keeping mandates, and responses to lawful regulatory or law enforcement requests.
• Legitimate Interest: Processing for fraud prevention, security monitoring, platform analytics, and certain customer communications where our legitimate business interest in operating a safe and efficient platform does not override your privacy rights.
• Consent: Processing for direct marketing communications and any non-essential tracking or analytics cookies, where you have provided explicit consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

Cookies and Tracking Technologies

6.1 Types of Cookies Used

The 66kbd Platform uses the following categories of cookies and similar tracking technologies:

• Essential Cookies: Strictly necessary for the Platform to function. These include session authentication cookies that keep you logged in, security tokens that protect against cross-site request forgery, and cookies that retain your language and display preferences. These cookies cannot be disabled without affecting core Platform functionality.
• Analytics Cookies: Used to collect anonymised data about how players navigate and interact with the Platform. This data informs decisions about page structure, feature placement, and performance optimisation. Analytics data is aggregated and does not identify individual players.
• Functional Cookies: Used to remember player preferences such as recent games, display settings, and notification preferences, enabling a more personalised experience on return visits.

6.2 Managing Cookies

You can manage or disable cookies through your browser's privacy settings. Please note that disabling essential cookies will prevent you from logging in to your 66kbd account and using core Platform features. Instructions for managing cookies in popular browsers are available through the help section of each browser provider. Your cookie preferences apply per device and browser and must be set separately on each device you use to access the Platform.

Third-Party Sharing and Disclosure

7.1 Service Providers

66kbd shares personal data with a limited number of trusted third-party service providers who assist in the operation of the Platform. These service providers are engaged under written data processing agreements that require them to handle your data only for the specific purposes for which they have been engaged, apply security standards equivalent to those maintained by 66kbd, and not further disclose or use your data for their own purposes. Categories of service providers include payment processing partners (bKash, Nagad, Rocket, Upay, and partner banks), KYC identity verification providers, gaming content studios (Pragmatic Play, Evolution Gaming, Ezugi, Spribe, and others), platform infrastructure and cloud hosting providers, and customer support software providers.

7.2 Legal and Regulatory Disclosures

66kbd may disclose personal data to law enforcement agencies, regulatory authorities, financial intelligence units, or courts of competent jurisdiction where required to do so by applicable law, legal process, or regulatory obligation. 66kbd will take reasonable steps to notify affected players of such disclosures where legally permitted to do so.

7.3 No Sale of Personal Data

66kbd does not sell, rent, trade, or otherwise transfer your personal data to any unaffiliated third party for their own marketing, advertising, or commercial purposes. Your data is not a product on this platform — it is information entrusted to us for the specific purposes described in this Privacy Policy.

Data Retention

66kbd retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to any minimum retention periods required by applicable law. The following general retention periods apply:

• Active Account Data: Retained for the duration of your active account relationship with 66kbd, plus a post-closure retention period for audit and legal compliance purposes.
• KYC and Identity Documents: Retained for a minimum of 5 years from the date of account closure or from the date the document was submitted, whichever is later, in line with standard anti-money-laundering record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of each transaction in accordance with financial record-keeping obligations.
• Support Communications: Retained for up to 3 years from the date of the final communication in a support thread, unless a longer period is required in connection with an ongoing dispute or regulatory inquiry.
• Analytics and Session Data: Anonymised or aggregated analytics data may be retained indefinitely as it no longer constitutes personal data once all identifying information has been removed.
• Self-Excluded Players: Where a player has activated permanent self-exclusion, their account details and self-exclusion record are retained for the full self-exclusion period and beyond, to prevent re-registration. This is a responsible gaming obligation that takes precedence over standard deletion requests.

When personal data is no longer required, it is securely deleted or irreversibly anonymised. Data that is anonymised — meaning it can no longer be linked to an identifiable individual — may be retained and used for statistical and platform improvement purposes without limitation.

Security Measures

66kbd applies a layered approach to data security, combining technical, organisational, and procedural controls to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Key security measures in place include:

• Encryption in Transit: All data exchanged between your browser or device and the 66kbd Platform is protected by 256-bit SSL/TLS encryption. Connections over unencrypted HTTP are automatically redirected to HTTPS.
• Encryption at Rest: Sensitive personal data stored in 66kbd databases, including KYC documents and payment method details, is encrypted at rest using industry-standard symmetric encryption algorithms.
• Access Controls: Access to personal data within 66kbd's internal systems is restricted on a need-to-know basis. Staff access is governed by role-based permissions, and all access events are logged and subject to periodic audit.
• Two-Factor Authentication: 66kbd strongly recommends that all players enable two-factor authentication (2FA) on their accounts. 2FA is available through the Account Security settings and significantly reduces the risk of unauthorised account access.
• Vulnerability Management: 66kbd's technical team conducts regular security assessments, including vulnerability scans and penetration testing, to identify and remediate security weaknesses before they can be exploited.
• Incident Response: In the event of a confirmed data security incident that poses a risk to player data, 66kbd has an incident response procedure in place to contain the incident, assess its impact, notify affected players where required by law, and take remedial action.

While 66kbd takes all reasonable steps to protect your personal data, no data transmission over the internet or storage system can be guaranteed as 100% secure. You also have a role to play in protecting your account: use a strong, unique password for your 66kbd account, enable 2FA, and do not share your login credentials with any third party.

Your Privacy Rights

As a player on the 66kbd Platform, you hold the following rights with respect to your personal data. These rights may be subject to certain limitations where data retention is required by law or where the exercise of a right would conflict with a legitimate overriding interest such as fraud prevention or responsible gaming obligations.

• Right of Access: You have the right to request a copy of the personal data 66kbd holds about you. Access requests will be fulfilled within 30 calendar days and will be provided in a structured, commonly used, machine-readable format where technically feasible.
• Right to Rectification: If any personal data held about you is inaccurate or incomplete, you have the right to request that it be corrected. Some corrections may require re-verification of identity documents to confirm the updated information.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected and where no overriding legal retention obligation applies. Note that financial transaction records, KYC documents, and self-exclusion records cannot be deleted during their legally mandated retention periods.
• Right to Restriction: You may request that the processing of your personal data be restricted in certain circumstances, for example while a correction request is being assessed.
• Right to Data Portability: You have the right to receive the personal data you have provided to 66kbd in a structured, machine-readable format and to have that data transferred to another controller where technically feasible.
• Right to Object: You may object to the processing of your personal data where that processing is based on legitimate interests. Objections will be assessed on a case-by-case basis, balancing your interests against 66kbd's legitimate operational requirements.
• Right to Withdraw Consent: Where processing is based on your consent (for example, for marketing communications or non-essential analytics cookies), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact the 66kbd support team through live chat or by emailing support@66kbd.io (plain text — not a link). Please include your registered account username and a description of your request. We may require you to verify your identity before processing a data rights request.

Children and Minors

The 66kbd Platform is strictly restricted to individuals who are 21 years of age or older. 66kbd does not knowingly collect or process personal data from any person under the age of 21. The Platform's registration process includes an age confirmation step, and KYC verification provides a secondary layer of age enforcement.

If you believe that a minor has registered on the 66kbd Platform or that their data has been inadvertently collected, please report this to support@66kbd.io (plain text — not a link) immediately. 66kbd will treat such reports as a priority matter and take immediate action.

International Data Transfers

As an internationally operating platform serving the Bangladesh market, 66kbd may process or store personal data on infrastructure located in jurisdictions outside Bangladesh. Where such international transfers occur, 66kbd ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to the protections described in this Privacy Policy.

Safeguards for international transfers include contractual data processing agreements with service providers that incorporate standard data protection clauses, selection of service providers that operate under recognised data protection frameworks, and ongoing assessment of the data protection standards of the jurisdictions in which data is processed.

For questions about the international transfer of your personal data or the safeguards in place, please contact the 66kbd support team at the contact details in Section 15.

Marketing Communications

With your consent, 66kbd may send you promotional communications by email or push notification. These may include information about new games, bonus offers, seasonal promotions (such as Eid, Pohela Boishakh, or IPL season campaigns), loyalty programme updates, and platform feature announcements.

You may unsubscribe from marketing communications at any time by:

• Clicking the unsubscribe link included in the footer of any 66kbd promotional email.
• Updating your notification preferences in the Account Settings section of the Platform dashboard.
• Contacting the 66kbd support team via live chat or email and requesting removal from the marketing mailing list.

Unsubscribing from marketing communications will not affect the delivery of transactional communications such as account verification emails, deposit confirmations, withdrawal notifications, and KYC request notifications. Transactional communications are essential to the operation of your account and cannot be disabled.

Changes to This Privacy Policy

66kbd reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform features. When a material change is made to this Privacy Policy, we will notify registered players via the Platform's in-account notification system or by email to the address registered on the account.

The revised Privacy Policy will be published on this page with an updated effective date. We recommend reviewing this page periodically to stay informed of any changes. Your continued use of the 66kbd Platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the revised terms.

If you have concerns about a change to this Privacy Policy, you are encouraged to contact the 66kbd support team before continuing to use the Platform. If you do not agree with the revised Privacy Policy, you may request closure of your account and withdrawal of your available balance in accordance with Section 3.4 of the 66kbd Terms and Conditions.

Contact Us

For any questions, requests, or concerns relating to this Privacy Policy or the handling of your personal data by 66kbd, please contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the chat widget on the 66kbd Platform. Average response time is under 3 minutes. Live chat is the fastest channel for urgent data-related requests.
• Email: support@66kbd.io (plain text — not a link). Data rights requests submitted by email will be acknowledged within 5 business days and resolved within 30 calendar days.

When submitting a data rights request, please include your registered account username, a clear description of your request (for example: "I would like a copy of my personal data" or "I would like to correct my registered address"), and your preferred contact method for our response. Identity verification may be required before we can fulfil certain requests to protect against unauthorised access to player data.