66z9 Privacy Policy

1 Introduction

66z9 is committed to protecting the personal data of its players and to processing that data in a manner that is transparent, fair, and consistent with applicable data protection principles. This Privacy Policy describes how 66z9 collects, processes, stores, and shares personal data in connection with the operation of the 66z9 Platform, including the website available at https://66z9.io, its mobile-optimised interface, and all associated betting, casino, slots, and gaming services offered under the 66z9 brand.

This Policy should be read alongside the 66z9 Terms & Conditions, which are available at 66z9 Terms & Conditions and are incorporated by reference. In the event of any inconsistency between this Policy and the Terms & Conditions regarding the handling of personal data, this Policy shall prevail.

We review and update this Policy periodically. The version published on the Platform at any given time is the current governing version. Material changes to our data practices will be communicated to registered players via their registered contact details prior to taking effect.

2 Who We Are

For the purposes of this Privacy Policy, the data controller responsible for your personal data is 66z9, operating under an international offshore gaming licence. 66z9 offers online betting, live casino, slot games, and fishing games to adult players, with a primary focus on serving the Bangladesh market. The Platform operates in English and all financial transactions are denominated in Bangladeshi Taka (BDT, ৳).

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which your personal data is handled, you may contact our data protection team at:

• Email (plain text — not a clickable link): [email protected]
• Subject line: Privacy / Data Protection Enquiry
• Response time: Within 5 Bangladesh Standard Time (BST, UTC+6) business days

3 Data We Collect

66z9 collects personal data from players through multiple channels: directly when you register an account or contact support, automatically as you use the Platform, and from third-party service providers such as payment processors and identity verification agencies. The categories of personal data we collect are described in the table below.

We do not intentionally collect special categories of sensitive personal data (such as racial or ethnic origin, religious beliefs, health data, or biometric data for identification purposes) unless you voluntarily provide such information in the context of a responsible gaming self-exclusion or limit-setting request.

4 How We Use Your Data

66z9 uses the personal data it collects for the following specific purposes. We process data only where we have a valid legal basis for doing so (see Section 5).

• Account Management: To create, maintain, and administer your 66z9 account, including processing your registration, updating your profile information, and managing account security settings.
• Identity Verification (KYC): To verify your identity and age in accordance with our obligations under our gaming licence and applicable anti-money laundering standards. KYC verification is a prerequisite for processing withdrawal requests.
• Payment Processing: To process deposits made via bKash, Nagad, Rocket, Upay, or approved bank channels, and to process withdrawals to your verified payment method. Financial data is shared with the relevant payment service provider solely for the purpose of executing the transaction.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeover, multi-accounting, and other prohibited conduct. This includes automated transaction monitoring and device fingerprinting.
• Platform Operation and Improvement: To analyse aggregate usage data, identify technical issues, improve the user experience, and develop new features and products.
• Customer Support: To respond to your queries, resolve complaints, and maintain records of our communications with you.
• Responsible Gaming: To monitor betting patterns that may indicate problem gambling behaviour, to enforce self-exclusion and deposit limit requests, and to fulfil our duty of care obligations.
• Marketing Communications: To send you promotional offers, bonus notifications, and news about 66z9 products, where you have opted in to receive such communications. You may withdraw your consent at any time by contacting [email protected] or updating your account preferences.
• Legal and Regulatory Compliance: To comply with our obligations under applicable laws, including record-keeping requirements, responses to lawful requests from competent authorities, and the enforcement of our Terms & Conditions.

5 Legal Basis for Processing

66z9 processes your personal data on one or more of the following legal bases, depending on the nature of the processing activity:

• Contractual Necessity: Processing required to provide the services you have requested under the 66z9 Terms & Conditions, including account creation, payment processing, and bet settlement.
• Legal Obligation: Processing required to comply with applicable laws and regulatory requirements, including KYC identity verification, anti-money laundering record-keeping, and responses to lawful authority requests.
• Legitimate Interests: Processing carried out in pursuit of 66z9's legitimate business interests where those interests are not overridden by your rights and interests. This includes fraud prevention, security monitoring, Platform analytics, and responsible gaming monitoring.
• Consent: Processing carried out on the basis of your freely given, specific, and informed consent, primarily in the context of optional marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6 Sharing Your Data

66z9 does not sell your personal data. We share personal data with third parties only in the following circumstances and to the minimum extent necessary:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard receive financial data necessary to process your deposit and withdrawal transactions. Each provider is subject to its own privacy policy and data protection obligations.
• Identity Verification Providers: Third-party KYC agencies receive the identity documents and personal details you submit during the verification process in order to confirm your identity and age on our behalf.
• Game Studio Partners: Game data including bet history, game session logs, and player identifiers may be shared with game studios (Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, Spribe, and others) to the extent required for game delivery, fair play auditing, and dispute resolution.
• IT and Infrastructure Providers: Cloud hosting, database management, and cybersecurity providers who process data on our behalf under strict contractual data processing agreements.
• Legal and Regulatory Authorities: Where required by applicable law, court order, or a lawful request from a competent authority, 66z9 may disclose personal data to law enforcement agencies, regulatory bodies, or other government authorities.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of the assets of 66z9, personal data held by the Company may be transferred to the acquiring entity. You will be notified of any such transfer and of any material change to data processing practices that results from it.

All third parties with whom we share personal data are required, by contract, to process that data only for the specified purpose, to maintain appropriate security standards, and to return or securely destroy the data once the purpose is fulfilled.

7 International Data Transfers

66z9 operates as an international platform, and some of the third-party service providers with whom we share data may be based outside Bangladesh. Where personal data is transferred internationally, 66z9 takes steps to ensure that an adequate level of protection is maintained, including by entering into data transfer agreements that incorporate appropriate safeguards.

Players whose data is transferred internationally retain the same rights over their data as described in Section 10 of this Policy. If you would like information about the safeguards in place for any specific transfer, you may contact [email protected].

8 Data Retention

66z9 retains personal data for no longer than is necessary to fulfil the purpose for which it was collected, subject to any minimum retention periods required by applicable law or regulation. The following general retention periods apply:

• Active Account Data: Retained for the full duration of the account relationship, from registration to account closure.
• Post-Closure Account Data: Following account closure, identity, financial, and transaction records are retained for a minimum of five years in compliance with anti-money laundering record-keeping obligations.
• Customer Support Records: Retained for three years from the date of the last interaction, or longer if required for the resolution of an ongoing complaint or legal matter.
• Marketing Opt-In Records: Retained for the duration of the marketing relationship and for one year following an opt-out, to demonstrate compliance with consent obligations.
• Technical and Usage Logs: Typically retained for twelve months on a rolling basis, unless a longer period is required for security investigation purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised aggregate data, which cannot be used to identify any individual, may be retained indefinitely for statistical and analytical purposes.

9 Cookies and Tracking Technologies

66z9 uses cookies and similar technologies (such as local storage objects and session tokens) on its Platform. The following types of cookies are used:

• Essential Cookies: Required for the Platform to function correctly. These include session authentication cookies that keep you logged in, security tokens, and load-balancing cookies. These cannot be disabled without breaking core Platform functionality.
• Preference Cookies: Store your Platform preferences such as language selection and display settings so that these do not need to be re-entered on each visit.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players navigate and use the Platform. This information is used solely to improve the user experience and Platform performance. No individual player is identified through analytics data.

66z9 does not use third-party advertising cookies, cross-site tracking cookies, or social media pixel technologies. We do not participate in behavioural advertising networks.

You may control cookies through your browser settings. Disabling essential cookies will prevent you from logging in or using core Platform features. Disabling analytics cookies will not affect your ability to use the Platform. Please refer to your browser's help documentation for instructions on managing cookie preferences.

10 Your Rights

As a player at 66z9, you have the following rights in relation to your personal data. To exercise any of these rights, please contact [email protected] with the subject line "Data Rights Request" and we will respond within five BST business days.

• Right of Access: You have the right to request a copy of the personal data we hold about you, together with information about how it is being processed.
• Right to Rectification: You have the right to request that inaccurate or incomplete personal data be corrected. You may also update certain details directly through your account settings.
• Right to Erasure: You may request that we delete your personal data where it is no longer necessary for the purpose for which it was collected, subject to any overriding legal obligation to retain it (such as anti-money laundering record-keeping requirements).
• Right to Restriction: You may request that we temporarily restrict the processing of your data while a rectification or objection request is being assessed.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request a copy of your data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (primarily marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

11 Children and Minors

The 66z9 Platform is strictly restricted to adults aged 21 years and above. 66z9 does not knowingly collect personal data from any person under the age of 21. The Company employs age verification mechanisms at registration and during the KYC process to enforce this restriction.

If 66z9 becomes aware that personal data has been collected from an individual who is under 21 years of age, the Company will immediately suspend the relevant account, void any bets or transactions associated with it, and securely delete the personal data collected from that individual.

If you are a parent or guardian and believe that your child may have accessed the 66z9 Platform or provided their personal data, please contact [email protected] immediately so that the matter can be investigated and resolved without delay.

12 Security Measures

66z9 employs a layered approach to data security, combining technical, organisational, and procedural controls to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Key measures include:

• Encryption in Transit: All data transmitted between your device and 66z9 servers is protected by 256-bit SSL/TLS encryption, ensuring that data cannot be intercepted in transit.
• Encryption at Rest: Sensitive data fields, including identity document images, financial account numbers, and password hashes, are encrypted at rest using industry-standard algorithms.
• Access Controls: Access to personal data within 66z9 is restricted on a strict need-to-know basis. Staff authorised to access player data undergo background screening and receive regular data protection training.
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA on their 66z9 accounts. 2FA provides an additional layer of account security beyond the password alone.
• Intrusion Detection and Monitoring: 66z9 maintains continuous monitoring of its infrastructure for anomalous activity, attempted intrusions, and indicators of compromise. Security incidents are escalated and investigated promptly.
• Penetration Testing and Audits: The Platform undergoes regular independent security assessments to identify and remediate vulnerabilities before they can be exploited.

While 66z9 takes all reasonable steps to protect your data, no security system is entirely impenetrable. In the unlikely event of a data breach that poses a risk to your rights and interests, 66z9 will notify affected players in accordance with its breach notification obligations.

13 Changes to This Privacy Policy

66z9 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, where we introduce a new purpose for processing personal data, change the categories of third parties with whom we share data, or significantly alter retention periods — we will notify registered players via their registered email address or mobile number at least seven days before the changes take effect.

Non-material clarifications, corrections of typographical errors, and structural reorganisations that do not affect the substance of the Policy may be made without advance notice. The "Last Updated" date at the top of this Policy will always reflect the date of the most recent revision.

Continued use of the 66z9 Platform following the effective date of any material amendment constitutes your acceptance of the revised Policy. If you do not agree with any change, you should contact [email protected] to request account closure prior to the effective date of the amendment.

14 Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a concern about the way in which your personal data has been handled, please contact the 66z9 data protection team using the details below. All contact details are displayed as plain text and are not clickable links.

• Email: [email protected]
• Subject Line: Privacy / Data Protection Enquiry
• Response Time: Within 5 BST (UTC+6) business days for standard enquiries; within 24 hours for urgent data security concerns
• Support Availability: 24 hours a day, 7 days a week, including Bangladeshi public holidays

We are committed to resolving all privacy-related enquiries fairly and promptly. If you are not satisfied with our response, you retain the right to escalate the matter to the appropriate independent dispute resolution mechanism or competent supervisory authority in your jurisdiction.