66kbd Privacy Policy

When you interact with the 66kbd platform — whether by browsing the site, creating a player account, making a deposit, placing a wager, or contacting support — we may collect a range of personal and non-personal information. We collect only what is genuinely necessary for the purposes described in this Privacy Policy.

1.1 Information You Provide Directly

The following categories of data are collected when you voluntarily provide them to us during account registration, identity verification, payment processing, or communications with our support team:

• Identity data: Your full legal name, date of birth, and gender (where provided for verification purposes).
• Contact data: Your Bangladesh mobile number and email address.
• Identity verification documents: Copies of your National Identity Card (NID), passport, or birth certificate submitted during KYC (Know Your Customer) verification.
• Financial data: Your bKash, Nagad, Rocket, or Upay mobile account number; bank account details (where provided for withdrawal purposes); transaction reference numbers for deposits and withdrawals.
• Account credentials: Your chosen username and a hashed (non-reversible) version of your password. We never store your password in plain text.
• Support communications: The contents of any Live Chat conversations, emails, or other messages you send to our support team, including any attachments you provide.

1.2 Information Collected Automatically

When you access the 66kbd website or mobile platform, our systems automatically collect certain technical and behavioural data to ensure the platform functions correctly and securely:

• Device and browser data: IP address, device type, operating system version, browser type and version, screen resolution, and device identifiers.
• Usage data: Pages visited, game sessions played, bets placed (including stake amounts, game titles, and outcomes), time spent on each section, and navigation paths through the site.
• Session data: Login timestamps, session duration, logout events, and failed login attempts.
• Location data: Approximate geographic location derived from your IP address. We do not collect GPS-level precise location data.
• Referral data: The URL or source that referred you to the 66kbd website, if applicable.

1.3 Information from Third Parties

In limited circumstances we may receive information about you from third-party sources, including:

• Payment providers (bKash, Nagad, Rocket, Visa, Mastercard) who confirm transaction status and provide transaction identifiers to reconcile your account balance.
• Identity verification services that cross-check the documents you submit against public or partner databases to confirm authenticity.
• Fraud-prevention and anti-money-laundering screening services that flag accounts associated with known fraudulent activity or sanctioned individuals.

66kbd processes personal data only for specific, legitimate purposes. We do not use your data in ways that are incompatible with the purpose for which it was originally collected. The table below summarises the primary purposes for which your data is used and the legal basis for each:

Marketing and Promotions: We will only send you marketing communications — including bonus offers, seasonal promotions tied to BPL season, Eid, Pohela Boishakh, or other events, and personalised game recommendations — if you have explicitly opted in to receive them at the time of registration or via your account settings. You may withdraw this consent at any time by updating your notification preferences or by contacting support.

Automated Decision-Making: Some decisions affecting your account — such as automated fraud detection flags, deposit limit recommendations generated by our responsible gaming system, and risk-scoring for AML purposes — involve automated processing of your data without direct human involvement at each step. Where an automated decision has a significant effect on your account (for example, a temporary suspension triggered by a fraud flag), you have the right to request a human review of that decision by contacting our support team.

66kbd does not sell, rent, or trade your personal data to any third party for commercial purposes. We share data only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.

3.1 Service Providers and Data Processors

We engage trusted third-party service providers to help us operate the platform. These providers process your data on our behalf and under our documented instructions — they are not permitted to use your data for their own independent purposes. Categories of service providers include:

• Payment processors: bKash, Nagad, Rocket, Upay, SureCash, Tap, Visa, and Mastercard — to facilitate deposits and withdrawals.
• Game studios: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other certified studios — who receive session data necessary to deliver and audit game outcomes.
• Identity verification providers: Who receive copies of your submitted KYC documents to confirm authenticity.
• Fraud and AML screening services: Who receive relevant account and transaction data to identify suspicious activity patterns.
• Cloud hosting and infrastructure providers: Who store platform data on secure servers. All hosting infrastructure uses encryption at rest and in transit.
• Customer support tooling providers: Who facilitate the Live Chat and ticketing system used by our support team.

3.2 Legal and Regulatory Disclosures

We may disclose your personal data to regulators, law enforcement agencies, courts, or other public authorities where we are required to do so by applicable law, a valid court order, or a binding regulatory direction. In such cases, we will disclose only the minimum information required to satisfy the legal obligation and, where permitted by law, will notify you of the disclosure request.

3.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of the 66kbd business, your personal data may be transferred to the acquiring or successor entity as part of the transaction. You will be notified of any such transfer and of any material changes to how your data will be processed as a result, with reasonable advance notice.

66kbd uses cookies and similar browser-based storage technologies to make the platform work correctly, to keep your session secure, and to understand how players navigate the site so we can improve the experience. This section explains the types of cookies we use and the choices available to you.

4.1 What Are Cookies?

A cookie is a small text file that a website places on your device when you visit it. Cookies allow the website to remember certain information about your visit — for example, whether you are logged in, your preferred language setting, or items in a session basket. Cookies cannot execute code, carry viruses, or access files stored elsewhere on your device.

4.2 Categories of Cookies We Use

66kbd does not use advertising cookies, retargeting pixels, or any tracking technology that shares your browsing behaviour with third-party advertising networks.

4.3 Managing Your Cookie Preferences

You can control optional cookies (Functional and Analytics categories) via your account settings page. You may also manage cookies at the browser level through your browser's privacy or settings menu — most modern browsers allow you to block or delete cookies, restrict third-party cookies, or be notified before a cookie is stored. Note that disabling strictly necessary or security cookies will prevent you from logging into your account and using the platform.

66kbd implements a layered security architecture designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. While no digital system can guarantee absolute security, we apply industry-recognised safeguards across every layer of the platform.

• Encryption in transit: All data transmitted between your browser or app and the 66kbd servers is encrypted using TLS 1.2 or higher. Connections over unencrypted HTTP are automatically redirected to HTTPS.
• Encryption at rest: Sensitive personal data stored on our servers — including identity documents, payment account numbers, and authentication credentials — is encrypted at rest using AES-256 or equivalent standard.
• Password hashing: Player passwords are stored exclusively as one-way cryptographic hashes using a modern, salted hashing algorithm. It is not technically possible for 66kbd staff to retrieve your plain-text password from our database.
• Access controls: Access to personal data is restricted to authorised personnel whose job function requires it — for example, support agents handling a specific complaint or compliance officers conducting an AML review. Access is logged and periodically audited.
• Network security: The platform infrastructure is protected by firewalls, intrusion detection systems, and DDoS mitigation services. Regular penetration tests and vulnerability assessments are conducted by independent security professionals.
• OTP authentication: Where available, one-time password (OTP) verification via SMS adds a second layer of authentication to your account login and to sensitive actions such as password resets and withdrawal requests.

In the event of a personal data breach that poses a risk to your rights and freedoms, 66kbd will notify affected players without undue delay. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the measures taken or proposed to address it.

66kbd retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law or regulatory obligation. The table below sets out our standard retention periods by data category:

When the applicable retention period expires, personal data is securely deleted or irreversibly anonymised according to our internal data disposal procedures. Data held under a legal obligation cannot be deleted before the expiry of that obligation, even upon your request.

If your account is closed for responsible gaming reasons (including self-exclusion), we retain the minimum information necessary to prevent you from re-registering during the exclusion period and to comply with our legal obligations. This data is not used for any other purpose during the exclusion period.

As a player on the 66kbd platform, you have the following rights with respect to the personal data we hold about you. To exercise any of these rights, contact our support team via Live Chat or at support@66kbd.app. We will acknowledge your request within 5 business days and provide a substantive response within 14 business days.

• Right of access: You may request a copy of all personal data we hold about you. We will provide this in a structured, readable format within 14 business days of a verified request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that we correct or update it. Minor corrections (such as a misspelled name) can often be processed directly through your account settings page.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data. We will honour this request where there is no overriding legal obligation requiring us to retain the data. Note that data retained for AML, KYC, or financial audit obligations cannot be erased before the applicable retention period expires.
• Right to restriction of processing: In certain circumstances — for example, while a dispute about data accuracy is being resolved — you may request that we restrict the processing of your personal data to storage only, without further use.
• Right to data portability: You may request that we provide your personal data in a machine-readable format (such as JSON or CSV) so that it can be transferred to another service provider, where technically feasible.
• Right to object: You may object at any time to the processing of your personal data for direct marketing purposes. You may also object to processing based on our legitimate interests, in which case we will assess whether our interests are overridden by your rights and freedoms.
• Right to withdraw consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place before the withdrawal.
• Right to human review of automated decisions: Where a significant decision affecting your account has been made solely by automated means, you have the right to request a human review of that decision. See Section 2 for further detail.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about the way 66kbd handles your personal information, our support team is available to help 24 hours a day, 7 days a week, in Bangladesh Standard Time (BST, UTC+6).

Email: support@66kbd.app
Live Chat: Available directly within your account dashboard after logging in.
Response time: Privacy-related enquiries are acknowledged within 5 business days and fully resolved within 14 business days.

When submitting a privacy enquiry, please include your registered mobile number and a brief description of your request so our team can locate your account and respond efficiently.

Complaints: If you are not satisfied with how we have handled your privacy concern after contacting us directly, you have the right to escalate the matter to the relevant data protection authority or regulatory body with jurisdiction over online services in Bangladesh. We take all escalated complaints seriously and will cooperate fully with any formal investigation.

Policy Updates: 66kbd reserves the right to update this Privacy Policy at any time. The "Effective Date" at the top of the page will be revised whenever a material change is made. For significant changes, we will notify registered players via an in-account notification or a message to the registered mobile number on file. We encourage you to review this page periodically to stay informed about how we protect your data.