66ff Privacy Policy — Your Data, Our Responsibility

This Privacy Policy ("Policy") describes how 66ff ("the Platform", "we", "us", or "our") collects, uses, stores, shares, and protects the personal information of users ("you" or "your") who access or use the 66ff website and its associated services. By registering an account or using the Platform in any way, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.

This Policy applies to all personal data processed by 66ff in connection with the provision of its online gaming services, including cricket betting, live casino, slots, crash games, fish games, and all payment processing activities. It covers data collected from players across Bangladesh, including those in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar.

Our Six Privacy Principles

These six principles shape every data decision we make at 66ff:

1. Information We Collect

66ff collects personal data through several channels: directly from you during registration and gameplay, automatically as you interact with the Platform, and in limited circumstances from trusted third-party service providers. The categories of data we collect are set out below.

2. How We Use Your Information

66ff uses personal data only for the purposes described in this Policy. The specific uses are:

• To create, verify, and manage your 66ff account, including identity verification (KYC) and age confirmation to ensure compliance with the 21+ requirement.
• To process deposits and withdrawals in BDT using your chosen payment method (bKash, Nagad, Rocket, bank transfer, or other supported gateway).
• To provide access to all Platform features including cricket betting markets, live casino tables, slots, crash games, and fish games, and to personalise your in-Platform experience based on your gameplay preferences.
• To detect, investigate, and prevent fraud, money laundering, multi-accounting, bonus abuse, and any other prohibited conduct as defined in the 66ff Terms and Conditions.
• To communicate with you about your account status, security alerts, transaction confirmations, and any changes to the Platform, these Terms, or this Policy.
• To send you promotional communications about bonuses, new games, and seasonal offers — but only if you have opted in to receive marketing messages. You may unsubscribe at any time.
• To fulfil our responsible gaming obligations, including monitoring gameplay patterns for signs of problem gambling and applying deposit limits or self-exclusion where requested.

3. Legal Basis for Processing

66ff processes personal data on one or more of the following lawful bases:

• Contractual necessity: processing is required to create and manage your account and to provide the gaming services you have requested.
• Legitimate interests: processing for fraud prevention, Platform security, and service improvement, where those interests are not overridden by your privacy rights.
• Legal obligation: processing required to comply with anti-money-laundering regulations, KYC requirements, and any other applicable legal or regulatory requirements.
• Consent: processing for marketing communications or optional personalisation features, where you have given explicit opt-in consent. You may withdraw this consent at any time.

4. Sharing Your Information

66ff does not sell your personal data. We share it only in the limited circumstances described below, and always subject to appropriate data protection safeguards.

Payment & Technology Providers

We share financial data with certified payment processors (such as bKash, Nagad, and Rocket gateways) and technology service providers (such as game content providers including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, and NetEnt) who are engaged to deliver services that form part of the Platform. These parties are contractually prohibited from using your data for any purpose other than delivering those specific services.

Legal & Regulatory Authorities

We may be required by law to disclose personal data to law enforcement agencies, regulatory bodies, tax authorities, or courts. In such cases, we will disclose only the minimum information required by the applicable legal order or request, and will notify you where we are legally permitted to do so.

Business Transfers

In the event of a merger, acquisition, or sale of all or part of 66ff's business, your personal data may be transferred to the acquiring entity as part of that transaction. If such a transfer occurs, the acquiring entity will be required to honour the commitments made in this Policy, and we will notify you of the change through the Platform or by email.

5. Cookies and Tracking Technologies

66ff uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and analyse usage patterns. The types of cookies we use are:

• Essential cookies: strictly necessary for the Platform to function, including session authentication, load balancing, and security tokens. These cannot be disabled without breaking core Platform functionality.
• Functional cookies: remember your language preference, session settings, and responsible gaming limits so you do not need to re-enter them on every visit.
• Analytics cookies: collect aggregated, anonymised data about how players navigate the Platform so we can identify areas for improvement. No personally identifiable information is included in analytics data.
• Marketing cookies: used only where you have consented to receiving promotional communications, to help us show relevant bonus offers or game recommendations.

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of some Platform features. For full details of the cookies we use, please contact [email protected].

6. Data Retention

66ff retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law. The general retention periods we apply are:

• Account data (identity, contact, and KYC records): retained for the duration of your active account and for a period of 5 years following permanent account closure, to comply with anti-money-laundering record-keeping obligations.
• Transaction records: retained for a minimum of 5 years from the date of each transaction to satisfy financial record-keeping requirements.
• Support correspondence and dispute records: retained for 2 years from the date of the final communication in each case, to enable dispute resolution and quality assurance reviews.

7. Your Privacy Rights

Subject to applicable law, you have the following rights in relation to the personal data 66ff holds about you. To exercise any of these rights, please contact us at [email protected]:

• Right of access: you may request a copy of the personal data we hold about you, along with information about how and why we process it.
• Right to rectification: if any personal data we hold about you is inaccurate or incomplete, you may request that we correct or complete it.
• Right to erasure: in certain circumstances, you may request that we delete the personal data we hold about you. Note that we may be unable to erase data that we are required to retain by law.
• Right to restriction of processing: you may ask us to suspend our processing of your personal data in certain circumstances, for example while a dispute about its accuracy is resolved.
• Right to data portability: where processing is based on consent or contract and carried out by automated means, you may request a copy of your data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing carried out before the withdrawal.

We will respond to all verified privacy rights requests within 30 days of receipt. In complex cases, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

8. Security Measures

66ff implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include SSL/TLS encryption for all data in transit, encrypted storage of sensitive data at rest, access controls limiting data access to authorised personnel on a need-to-know basis, regular security audits and penetration testing of Platform infrastructure, and two-factor authentication options for player accounts.

No method of electronic data transmission or storage is completely secure. While 66ff takes every reasonable precaution to protect your data, we cannot guarantee absolute security. In the event of a data breach that poses a risk to your rights and freedoms, 66ff will notify affected users as soon as practicable.

9. Payment Data and Financial Security

All financial transactions on the 66ff Platform are processed through certified, PCI-compliant payment gateways. When you make a deposit or request a withdrawal using bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, or any other supported Bangladeshi payment method, your full wallet or account credentials are transmitted directly to the respective payment provider and are never stored on 66ff's own servers. 66ff retains only a tokenised reference to your payment method for the purpose of matching future withdrawal requests.

Transaction records — including amounts, timestamps, and payment method type — are retained in accordance with the data retention schedule set out in Section 6 of this Policy and are used solely for account management, dispute resolution, and anti-money-laundering compliance purposes.

10. Children's Privacy

The 66ff Platform is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from any individual under the age of 21. If you are a parent or guardian and believe that a minor has registered an account or provided personal information to 66ff, please contact us immediately at [email protected]. We will promptly investigate and, if confirmed, delete the minor's account and all associated personal data without undue delay.

11. Third-Party Links

The 66ff Platform may contain links to third-party websites or services for informational purposes (for example, links to game provider documentation or payment partner help pages). 66ff is not responsible for the privacy practices or content of any third-party website. We encourage you to review the privacy policy of any external site you visit before providing any personal information. The presence of a link on the Platform does not constitute an endorsement of that third party's privacy practices.

12. Changes to This Privacy Policy

66ff reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform services. When a material change is made, we will display a prominent notice on the Platform and, where we have your email address on file, send you a notification at least 7 days before the change takes effect.

The updated Policy will take effect from the date stated at the top of the document. Your continued use of the Platform after that date constitutes your acceptance of the revised Policy. If you do not accept the revised Policy, you should stop using the Platform and contact [email protected] to request account closure.

13. Contact and Data Controller

66ff is the data controller responsible for the personal information collected through the Platform. If you have any questions about this Privacy Policy, wish to exercise your privacy rights, or have a concern about how your data is being handled, please contact our dedicated privacy team. Email: [email protected]. We aim to respond to all privacy enquiries within 5 business days (Bangladesh Standard Time, UTC+6). For time-sensitive matters such as suspected data breaches, please mark your email subject "URGENT: Privacy" so we can prioritise your request.