666b Privacy Policy — How We Collect, Use, and Safeguard Your Personal Data

666b operates the online casino and sports betting platform accessible at 666b.io and all associated subdomains and mobile-optimised interfaces. Throughout this Privacy Policy, references to "666b", "we", "us", and "our" refer to the operator of the 666b platform.

666b serves players primarily located in Bangladesh, providing access to casino games, live dealer tables, sports betting markets, and associated promotional services. The platform is operated in English and all player communications, support interactions, and account documentation are handled in English.

For all privacy-related enquiries, including requests to exercise your data rights, you may contact the 666b data team at [email protected] with the subject line "Privacy Request".

666b collects personal data from players through several channels: directly during account registration, during the identity verification process, through platform activity and game logs, and through communications with the support team. The categories of data collected are described below.

666b does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data beyond what is volunteered by a player in a support communication context. If such data is incidentally received, it will not be processed for any purpose other than resolving the specific support interaction.

666b uses the personal data described in Section 2 for the following purposes:

• Account creation and management: To register your account, authenticate your identity at login, maintain accurate account records, and enable you to use the full range of 666b platform features.
• Identity verification: To confirm that you meet the minimum age requirement of 21 years, that you are a natural person (not a bot or automated system), and that the identity you have provided is genuine and not duplicated across multiple accounts.
• Payment processing: To process deposit requests, execute withdrawal payments to your registered bKash, Nagad, Rocket, or Upay wallet, and to maintain a complete BDT transaction history for your account.
• Fraud prevention and anti-money-laundering: To monitor account activity for signs of fraud, collusion, bonus abuse, or money laundering; to investigate suspicious transactions; and to fulfil mandatory reporting obligations where required by applicable financial crime law.
• Platform personalisation and improvement: To understand how players in Bangladesh use the 666b platform, which games and sports markets are most popular, and how platform features can be improved. This analysis is conducted on aggregated or pseudonymised data wherever possible.
• Customer support: To respond to enquiries, handle complaints, investigate account disputes, and maintain a record of communications for quality assurance purposes.
• Responsible gaming compliance: To enforce deposit limits, self-exclusion requests, and cooling-off periods you have set; to detect patterns of play that may indicate problem gambling; and to fulfil any responsible gaming obligations imposed by applicable regulatory requirements.
• Promotional communications: Where you have consented to receive marketing, to send you information about 666b promotions, seasonal offers tied to BPL cricket, Eid, Pohela Boishakh, and other events relevant to Bangladesh players. You may withdraw this consent at any time.
• Legal compliance: To comply with any applicable law, court order, regulatory request, or lawful instruction from a competent authority.

666b processes personal data on the following legal bases depending on the purpose of processing:

• Contractual necessity: Processing required to perform the services you have requested by registering an account — including identity verification, payment processing, and account management — is carried out on the basis that it is necessary to fulfil our contractual obligations to you as a registered player.
• Legal obligation: Processing required to comply with applicable anti-money-laundering law, fraud prevention obligations, age verification requirements, and any regulatory reporting duties is carried out on the basis of legal obligation.
• Legitimate interests: Processing for fraud detection, platform security, responsible gaming monitoring, and platform improvement analytics is carried out on the basis of 666b's legitimate interest in operating a safe, fair, and reliable platform — provided those interests are not overridden by your fundamental privacy rights.
• Consent: Processing for optional marketing communications is carried out on the basis of your explicit consent, which you may withdraw at any time without affecting the lawfulness of prior processing.

666b does not sell, rent, or commercially transfer player personal data to any third party. Limited sharing of personal data takes place only in the following defined circumstances:

• Payment service providers: bKash, Nagad, Rocket, and Upay receive the minimum data required to execute payment transactions — specifically the wallet number associated with your account and the transaction amount in BDT. These providers operate their own privacy policies governing their use of this data.
• Identity verification partners: Where third-party identity verification services are used to authenticate NID card details or passport information, the relevant document data is shared with that partner solely for the purpose of verification and is not retained by the partner beyond the verification window.
• Game content providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a pseudonymous player identifier and session token to enable game functionality. They do not receive your name, NID number, payment wallet details, or other directly identifying information.
• Legal authorities: 666b will disclose personal data to competent legal or regulatory authorities where required by a valid court order, lawful regulatory request, or applicable mandatory reporting obligation. 666b will notify affected players of such disclosures where legally permitted to do so.
• Business successors: In the event of a corporate restructuring, merger, or acquisition involving the 666b platform, player data may be transferred to the successor entity, which will be bound by data protection obligations equivalent to those in this policy.

666b integrates with bKash, Nagad, Rocket, and Upay as its primary deposit and withdrawal channels for Bangladesh players. All transactions are denominated in Bangladeshi Taka (BDT). The following data handling practices apply specifically to payment-related data:

• 666b does not store full bKash, Nagad, Rocket, or Upay PIN codes or passwords. Only the registered wallet number associated with your account is retained by 666b for the purpose of routing withdrawal payments.
• All deposit and withdrawal transaction records — including amounts, timestamps in BST, and wallet numbers — are retained by 666b for a minimum of five years from the date of the transaction, in accordance with applicable financial record-keeping obligations.
• Payments are processed exclusively to the payment method registered on your 666b account at the time of the transaction. 666b does not support payments to third-party wallets or accounts belonging to a different registered holder as a standard anti-money-laundering control.
• Where a deposit or withdrawal is flagged for review due to suspicious patterns, the transaction may be delayed and additional information about the source of funds may be requested before the transaction is completed or funds are released.

The 666b platform uses cookies and similar tracking technologies to enable core platform functionality, maintain your authenticated session, and collect anonymised usage analytics. The categories of cookies used are as follows:

• Essential cookies: Required for the platform to function correctly. These include session authentication cookies that keep you logged into your 666b account during an active session, CSRF protection tokens, and load-balancing cookies. Essential cookies cannot be disabled without breaking core platform functionality.
• Analytics cookies: Used to collect aggregated, anonymised data about how players navigate the 666b platform — such as which game categories are most visited, average session duration, and which pages generate the most support enquiries. This data is used solely to improve the platform experience and is not linked to individual player identities.
• Preference cookies: Store non-sensitive user preferences such as your last visited game category or interface display settings. These cookies do not contain payment or identity data.

666b does not use third-party advertising cookies or tracking pixels that would allow advertising networks to build a behavioural profile of your activity across other websites. The 666b platform does not participate in cross-site tracking for advertising purposes.

You may configure your browser to refuse or delete cookies at any time. Please note that disabling essential cookies will prevent you from maintaining an authenticated session on the 666b platform and may disable other core features.

666b retains personal data for the periods set out below. These periods reflect a balance between operational necessity, legal obligations, and the privacy interests of players:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Where data is anonymised rather than deleted, the anonymised dataset may be retained indefinitely for aggregate statistical purposes without constituting personal data processing.

666b implements a range of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Transport-layer encryption: All data transmitted between player devices and the 666b platform is encrypted using TLS 1.2 or higher. HTTPS is enforced on all platform endpoints; unencrypted HTTP connections are automatically redirected.
• At-rest encryption: Sensitive data fields — including identity document images and payment wallet numbers — are encrypted at rest using industry-standard encryption algorithms in the 666b database infrastructure.
• Access controls: Internal access to personal data is restricted on a strict need-to-know basis. Platform staff cannot access player payment credentials or full identity document images without supervisory authorisation and a logged justification.
• Two-factor authentication for staff: All 666b staff with access to player account data are required to use multi-factor authentication for system access. This is enforced at the infrastructure level and is not optional.
• Penetration testing and security audits: The 666b platform infrastructure undergoes periodic security assessments by qualified independent reviewers. Identified vulnerabilities are remediated according to a risk-prioritised schedule.
• Incident response: 666b maintains a documented data breach response procedure. In the event of a confirmed breach affecting player personal data, affected players will be notified without undue delay and with sufficient information to allow them to take protective action.

As a registered 666b player, you hold the following rights in respect of your personal data. To exercise any of these rights, contact [email protected] with the subject line "Privacy Request" and a description of the right you wish to exercise. 666b will acknowledge your request within two business days and respond substantively within 30 days.

• Right of access: You may request a copy of all personal data 666b holds about you, along with information about how it is processed, on what legal basis, with whom it is shared, and for how long it is retained.
• Right to rectification: You may request correction of any personal data that is inaccurate or incomplete. For account-registered data such as your mobile number or email address, you may also update this directly via the account settings section of the 666b platform.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (for consent-based processing only), or where the data has been unlawfully processed. This right is subject to 666b's legal obligations to retain certain data as described in Section 8.
• Right to restriction: You may request that 666b restrict processing of your personal data to storage only — without further use — while a query about its accuracy or the lawfulness of its processing is investigated.
• Right to object: You may object to processing of your personal data where that processing is based on 666b's legitimate interests. 666b will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, or where the processing is necessary for legal claims.
• Right to withdraw marketing consent: Where you have consented to receive promotional communications from 666b, you may withdraw that consent at any time by contacting [email protected]. Withdrawal of marketing consent does not affect the lawfulness of promotional messages sent prior to withdrawal.

As part of the account registration and withdrawal verification process, 666b requires players to confirm they are at least 21 years of age and to provide a valid government-issued identity document to substantiate this claim. Any account found to belong to a person under 21 will be permanently closed and the associated balance will be forfeited pending investigation.

If you are a parent or guardian and have reason to believe that a person under 21 in your care has registered an account on the 666b platform, please contact [email protected] immediately. 666b will investigate and act on verified reports promptly.

666b reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, changes in applicable law, or improvements to the 666b platform. When material changes are made — meaning changes that significantly affect how your personal data is processed or the rights available to you — 666b will provide advance notice by publishing the updated policy on this page with a revised effective date and, where practicable, notifying registered players via the contact details held on their accounts.

Minor amendments, such as editorial clarifications or updates to reflect changes in third-party provider names, may take effect immediately upon publication without advance notice.

The current version of this Privacy Policy will always be accessible at 666b.io/privacy-policy. The effective date at the top of this page confirms when the current version came into force. Continued use of the 666b platform after the effective date of any amendment constitutes your acknowledgement of the updated policy.

For any questions, concerns, or requests relating to this Privacy Policy or to the personal data 666b holds about you, please use the following contact channels:

• Email: [email protected] — use the subject line "Privacy Request" for data rights enquiries. Average response time: under 1 hour.
• Live Chat: Available 24/7 on the 666b platform. Average response time: under 2 minutes. Note that sensitive identity documents should not be shared via live chat — use encrypted email or the secure document upload facility in your account dashboard.

666b's support team serves players across all regions of Bangladesh — including Dhaka, Chittagong, Sylhet, Khulna, Barisal, Rajshahi, Rangpur, Mymensingh, and Cox's Bazar — in English, 24 hours a day, seven days a week, including during BPL cricket season and national holidays.