66z Privacy Policy

1 Introduction and Scope

This Privacy Policy ("Policy") describes how 66z ("we", "us", "our", "the Platform") collects, uses, stores, shares, and protects the personal data of individuals ("you", "your", "the Player") who access or use the 66z website at https://66z.today, including all sub-pages, the 66z Login interface, account management areas, betting and gaming products, and any associated communication channels.

By registering an account on 66z, by using the 66z Login to access your account, by making a deposit via bKash, Nagad, Rocket, Upay, or any other supported payment method, or by otherwise interacting with the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

This Policy applies to all personal data collected from players based in Bangladesh and from any other jurisdiction in which 66z operates. It should be read in conjunction with the 66z Terms & Conditions and any supplementary notices provided at the point of data collection.

2 Data Controller Information

66z is the data controller responsible for the personal data collected and processed through the Platform. As data controller, 66z determines the purposes and means of processing your personal data and is accountable for ensuring that processing activities comply with applicable data protection principles.

For all privacy-related enquiries, data access requests, correction requests, or deletion requests, you may contact the 66z data protection team using the contact details provided in Section 14 of this Policy.

3 Personal Data We Collect

66z collects the following categories of personal data in the course of providing its services to players in Bangladesh:

3.1 Registration and Identity Data

• Full legal name
• Date of birth
• Residential address (including city — Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or other)
• Email address
• Mobile telephone number
• Username chosen at registration

3.2 Identity Verification (KYC) Data

• Copies of government-issued photo identification (National ID card, passport, or driving licence)
• Proof of address documents (utility bill, bank statement, or equivalent dated within 90 days)
• Proof of payment method ownership (e.g., screenshot of bKash or Nagad account showing registered mobile number)
• Selfie or live photograph where required for enhanced verification

3.3 Financial and Transaction Data

• Deposit and withdrawal transaction records
• Payment method identifiers (bKash wallet number, Nagad number, Rocket account reference, Upay account reference, bank account details where applicable)
• Transaction amounts in Bangladeshi Taka (BDT / ৳)
• Transaction timestamps and reference numbers

3.4 Gaming and Betting Activity Data

• Bets placed, game sessions played, sports markets wagered on (including cricket, BPL, IPL, T20)
• Wins, losses, and net gaming activity over time
• Bonus offers activated and wagering requirement progress
• Responsible gaming tool activations (deposit limits, self-exclusion requests, session time reminders)

3.5 Technical and Device Data

• IP address
• Browser type and version
• Device type (desktop, mobile, tablet) and operating system
• Referring URL and on-site navigation path
• Session duration and login timestamps

3.6 Communications Data

• Content of messages sent to 66z support via email or any on-platform messaging feature
• Records of any complaints or dispute submissions
• Marketing communication preferences and opt-in/opt-out records

4 How We Collect Your Data

66z collects personal data through the following channels:

• Directly from you — at the time of registration, when using the 66z Login, when completing KYC verification, when making deposits or withdrawal requests, and when contacting support
• Automatically — through cookies, web analytics tools, and server logs as you navigate and interact with the Platform (see Section 8 on Cookies)
• From payment providers — transaction confirmation data from bKash, Nagad, Rocket, Upay, and bank gateway partners is shared with 66z to reconcile deposits and withdrawals
• From identity verification services — where 66z engages a third-party KYC provider to assist in verifying the authenticity of identity documents, that provider may return verification status data to 66z
• From game providers — studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi return game session results, round identifiers, and wagering data to 66z for account crediting and dispute resolution purposes

5 Legal Basis for Processing

66z processes your personal data on the following legal bases:

6 How We Use Your Personal Data

66z uses the personal data collected from players in Bangladesh for the following purposes:

• To create and maintain your 66z account and to authenticate you via the 66z Login
• To process deposits and withdrawals through bKash, Nagad, Rocket, Upay, and other supported payment methods
• To verify your identity and age (18+) in accordance with KYC obligations
• To detect and prevent fraud, money laundering, account sharing, and other forms of abuse or prohibited conduct
• To settle bets, credit winnings, apply bonuses, and manage wagering requirement tracking
• To monitor gaming activity for responsible gaming purposes and to facilitate the activation of deposit limits, loss limits, session time reminders, and self-exclusion
• To communicate with you regarding your account, including security alerts, transaction confirmations, and policy updates
• To send you promotional offers and bonus notifications where you have consented to receive marketing communications
• To analyse Platform usage patterns and improve the user experience, product range, and operational reliability of 66z
• To respond to customer support enquiries and to resolve complaints or disputes
• To comply with applicable legal and regulatory obligations

7 Sharing Your Data with Third Parties

66z does not sell your personal data. We share personal data with third parties only in the following limited circumstances:

7.1 Payment Service Providers

Transaction data is shared with bKash, Nagad, Rocket, Upay, and other payment gateway partners as strictly necessary to process deposits and withdrawals. These providers operate under their own privacy policies and security frameworks and are contractually bound to process your data only for payment facilitation purposes.

7.2 Game Content Providers

When you play a game hosted by a third-party studio (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi), a player session token and game activity data are exchanged with that provider's systems to operate the game and return results. These studios are engaged as data processors acting on 66z's instructions and are contractually prohibited from using your data for their own independent purposes.

7.3 Identity Verification Services

Where 66z engages a third-party KYC or identity verification provider, your identity document data may be transmitted to that provider's verification system. All such providers are selected on the basis of their data security standards and are bound by data processing agreements.

7.4 Legal and Regulatory Authorities

66z may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required to do so by applicable law, by court order, or where 66z reasonably believes that disclosure is necessary to prevent or investigate fraud, money laundering, or other criminal activity.

7.5 Professional Advisers

66z may share data with its legal counsel, auditors, and other professional advisers on a strictly need-to-know basis and subject to professional confidentiality obligations.

8 Cookies and Tracking Technologies

66z uses cookies and similar tracking technologies on the Platform to enable core functionality, to improve user experience, and to analyse how players interact with the site. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in after using the 66z Login, security tokens, and load-balancing identifiers. These cannot be disabled without impairing Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, responsible gaming tool configurations, and notification preferences to personalise your experience on return visits.
• Analytics Cookies: Collect aggregated, anonymised data about how players navigate the Platform — which pages are visited most frequently, where users drop off, and how long sessions last. This data is used internally to improve the Platform and does not identify you personally.
• Marketing Cookies: Used only where you have consented, to measure the effectiveness of promotional campaigns and to avoid showing you offers you have already seen.

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use the 66z Login and other core Platform features.

9 Data Retention

66z retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law. The following general retention guidelines apply:

• Account and registration data: Retained for the duration of your active account and for a minimum of 5 years following account closure, to meet financial record-keeping and anti-money laundering obligations.
• KYC and identity verification documents: Retained for a minimum of 5 years from the date of verification or from the date of account closure, whichever is later.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction in accordance with financial record-keeping requirements.
• Gaming and betting activity logs: Retained for a minimum of 3 years for responsible gaming monitoring and dispute resolution purposes.
• Support and communications records: Retained for a minimum of 3 years from the date of the last communication.
• Marketing consent records: Retained for the duration of your consent plus 1 year following withdrawal of consent, as evidence of consent management.

When personal data is no longer required for any of the above purposes and no legal retention obligation applies, 66z will securely delete or anonymise it in a manner that prevents recovery or reconstruction.

10 Data Security

66z implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your browser and the 66z Platform, including all activity through the 66z Login interface
• Encryption of sensitive data fields (including password hashes and KYC document references) at rest in our database systems
• Role-based access controls limiting internal access to personal data on a strict need-to-know basis
• Regular security assessments and vulnerability testing of Platform infrastructure
• Firewall protections and intrusion detection systems at the network perimeter
• Staff training on data protection obligations and information security best practices

While 66z takes all reasonable steps to protect your data, no transmission over the internet or electronic storage system can be guaranteed to be 100% secure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 66z will take prompt steps to contain the breach and to notify affected players where required.

11 Your Rights as a Data Subject

As a player whose personal data is processed by 66z, you have the following rights with respect to your information:

• Right of Access: You may request a copy of all personal data held about you by 66z, including the categories of data, the purposes for which it is processed, and any third parties with whom it has been shared.
• Right to Rectification: If any personal data held about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to Erasure: In certain circumstances — where data is no longer necessary for the purpose for which it was collected, where you withdraw consent and no other legal basis applies, or where data has been unlawfully processed — you may request deletion of your personal data. Note that legal retention obligations (see Section 9) may limit the scope of erasure requests.
• Right to Restrict Processing: You may request that 66z temporarily restrict the processing of your data while a rectification request or objection is being assessed.
• Right to Data Portability: Where processing is based on your consent or on the performance of a contract, you may request that 66z provide your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing carried out on the basis of legitimate interests, including profiling for marketing purposes. You may also withdraw your consent to receive marketing communications at any time.
• Right Not to Be Subject to Automated Decision-Making: 66z does not make solely automated decisions that produce significant legal effects concerning individual players without human review. Where automated tools are used for fraud detection or responsible gaming flagging, human review is applied before any account action is taken.

To exercise any of the above rights, please submit a written request to [email protected]. 66z will respond to verifiable data subject requests within 30 calendar days of receipt. In complex cases this period may be extended by a further 60 days, in which case you will be notified of the extension and the reason for it.

12 Children's Privacy

The 66z Platform is strictly intended for adults aged 18 years and over. 66z does not knowingly collect personal data from individuals under the age of 18. If you are under 18, you must not register an account, must not use the 66z Login, and must not use any service offered on the Platform.

If 66z becomes aware that personal data has been collected from a person under 18, that account will be immediately suspended, all associated data will be reviewed, and data held without a lawful basis will be securely deleted. If you are a parent or guardian and believe that a minor has registered an account on 66z, please contact [email protected] immediately.

13 Changes to This Privacy Policy

66z reserves the right to update or revise this Privacy Policy at any time. Where changes are material — meaning they meaningfully affect your privacy rights or the way in which your data is processed — 66z will notify registered players via email to the address on file and/or via a prominent on-platform notice at least 7 days before the revised Policy takes effect.

The effective date at the top of this Policy will be updated each time a revision is published. Your continued use of the 66z Platform after the effective date of a revised Privacy Policy constitutes your acknowledgement of the changes and, where processing is based on consent, your renewed consent to the updated processing activities described.

The current version of this Privacy Policy is always accessible at https://66z.today/privacy-policy.

14 Contact and Data Requests

For all privacy-related enquiries, data subject access requests, correction requests, deletion requests, or marketing opt-out requests, please contact the 66z data protection team using the following details:

• Email: [email protected]
• Subject Line: Please include "Privacy Request" or "Data Subject Request" in the subject line to ensure prompt routing to the correct team
• Support Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)
• WhatsApp: +880 1700 000000

To protect your privacy and to prevent unauthorised access to account data, 66z will ask you to verify your identity before processing any data subject request. Verification will typically require confirmation of your registered email address and one additional identifier associated with your account.