666zz Privacy Policy

1 Introduction

Welcome to the 666zz Privacy Policy. 666zz is committed to protecting the personal data of every individual who interacts with our platform, whether as a registered player, a visitor browsing our website, or a person contacting our customer support team. This Privacy Policy is intended to be transparent and plain-language, so you can clearly understand how your information is handled from the moment you first visit 666zz.bio.

This policy applies to all personal data collected through the 666zz website at 666zz.bio, any associated mobile interfaces, and all services offered by 666zz, including casino games, sports betting markets, deposit and withdrawal processing, live dealer tables, and customer support communications. It covers data collected through both automated means (such as cookies and server logs) and information you provide directly when registering, making deposits, or contacting support.

By registering an account on 666zz, completing identity verification, or continuing to use the platform after this policy has been published, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your personal data as described herein. If you do not agree with this policy, you should discontinue use of the platform and contact [email protected] to arrange account closure.

This Privacy Policy should be read alongside the 666zz Terms and Conditions and our Responsible Gaming policy, both of which contain additional provisions relevant to your use of the platform and our obligations to you as a registered player.

2 Data We Collect

666zz collects a range of personal data in the course of providing its services. The categories of data we collect, and the specific data points within each category, are set out below:

We collect only the minimum data necessary to deliver our services effectively, to comply with our legal and regulatory obligations, and to maintain the security and integrity of the 666zz platform. We do not collect sensitive categories of personal data such as racial or ethnic origin, political opinions, religious beliefs, or medical information, except where such data is directly volunteered by a player (for example, in a responsible gaming context where a player discloses a gambling-related health concern to our support team).

3 How We Collect Your Data

666zz collects personal data through the following channels and mechanisms:

• Direct submission: Data you provide when creating an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or submitting a responsible gaming request.
• Automated collection: Data generated automatically when you use the 666zz platform, including server logs, session activity records, game outcome data, and device fingerprinting used for fraud prevention.
• Cookies and tracking technologies: Data collected via cookies, web beacons, pixel tags, and similar technologies embedded in the 666zz website and game interfaces. See Section 9 for a full explanation of our cookie practices.
• Third-party verification services: Identity and age verification data received from third-party KYC partners when you submit identity documents through our verification portal.
• Payment service providers: Confirmation data received from bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank when you initiate deposit or withdrawal transactions.
• Game suppliers: Aggregated game outcome and bet history data shared by our third-party game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others) for the purposes of account settlement and responsible gaming monitoring.

In all cases, data is collected for specific, legitimate purposes and is not retained beyond the period necessary to fulfil those purposes, subject to our legal retention obligations described in Section 8.

4 How We Use Your Data

666zz uses the personal data it collects for the following purposes:

• Account creation and management: To register your account, authenticate your identity at login, maintain your account preferences, and deliver the personalised player experience associated with your 666zz account.
• Identity and age verification: To confirm that you are at least 21 years of age and that you are who you claim to be, in accordance with our KYC obligations and our strict 21+ platform policy.
• Payment processing: To facilitate deposits via bKash, Nagad, Rocket, Upay, and bank transfer, and to process withdrawal requests to your registered payment method, including verifying that the payment method belongs to you.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, unauthorised account access, multi-accounting, bonus abuse, money laundering, and any other activity that violates our Terms and Conditions or applicable law.
• Responsible gaming compliance: To monitor player behaviour for signs of problem gambling, to enforce self-exclusion and deposit limits requested by players, and to fulfil our obligations under our Responsible Gaming policy.
• Customer support: To respond to your queries, resolve complaints, investigate disputes, and communicate with you about your account or any matter relating to your use of the platform.
• Platform improvement: To analyse aggregated usage data and identify patterns that help us improve the performance, reliability, and user experience of the 666zz platform.
• Legal compliance: To retain records and respond to requests from relevant authorities to the extent required by applicable law.
• Communications: To send you transactional messages related to your account (such as deposit confirmations, withdrawal notifications, and security alerts). We will only send promotional communications where you have given explicit consent.

5 Legal Basis for Processing

666zz processes your personal data on one or more of the following legal bases, depending on the specific processing activity involved:

• Contractual necessity: Processing that is necessary to perform the contract between you and 666zz — specifically, to provide the gaming and betting services you have registered to use, to process your financial transactions, and to manage your account.
• Legitimate interests: Processing carried out to pursue the legitimate interests of 666zz, where those interests are not overridden by your rights and interests. This includes fraud prevention, platform security, multi-accounting detection, and internal analytics for platform improvement purposes.
• Legal obligation: Processing required to comply with a legal obligation applicable to 666zz, including the retention of financial records, the processing of requests from law enforcement or regulatory authorities, and the application of responsible gaming measures.
• Consent: Processing carried out on the basis of your explicit consent, specifically in relation to the sending of promotional communications and, where applicable, the use of non-essential cookies. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

Where processing is based on legitimate interests, 666zz conducts a balancing assessment to ensure that the interests of 666zz do not unduly override your fundamental rights and freedoms. If you wish to obtain more information about any specific legitimate interests assessment, please contact [email protected].

6 Data Sharing & Disclosure

666zz does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. Your data is shared only in the following circumstances and only to the extent necessary for each specific purpose:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank receive only the data necessary to process your deposit or withdrawal transaction (such as your registered wallet number or bank account details). Payment service providers are not granted access to your full player profile or game history.
• KYC and identity verification partners: Third-party identity verification services receive copies of the documents you submit (such as your national ID or passport) for the purpose of confirming your identity and age. These partners are contractually bound to process your data solely for verification purposes and to maintain appropriate security standards.
• Game software providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other game suppliers receive the minimum player data necessary to deliver and settle game rounds (typically a pseudonymous player identifier and bet/win amounts). Full personal details are not shared with game suppliers.
• Fraud prevention and security services: Specialist third-party fraud detection tools may process device fingerprint data, IP addresses, and behavioural signals to identify fraudulent or prohibited patterns of activity. These tools act as data processors under contractual agreements with 666zz.
• Legal and regulatory authorities: 666zz will disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required to do so by applicable law or in response to a lawful request, a court order, or to protect the legal rights and safety of 666zz, its players, or the public.
• Business successors: In the event of a merger, acquisition, or transfer of assets involving 666zz, player data may be transferred to the successor entity, provided the successor agrees to uphold the same privacy standards described in this policy.

7 International Data Transfers

666zz serves players in Bangladesh. While our primary operations are focused on the Bangladesh market, some of the third-party service providers we use — including cloud infrastructure providers, game suppliers, and fraud prevention tools — may store or process data on servers located outside Bangladesh.

Where personal data is transferred outside the country in which it was originally collected, 666zz takes appropriate steps to ensure that adequate safeguards are in place for the protection of that data. These safeguards may include contractual clauses that require the recipient to process your data in accordance with standards equivalent to those described in this Privacy Policy.

If you wish to obtain more information about the international transfers applicable to your data and the safeguards in place, please submit a written request to [email protected] and our team will provide the relevant details within a reasonable timeframe.

8 Data Retention

666zz retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by law. The following retention principles apply:

• Active accounts: Personal data associated with an active 666zz account is retained for the lifetime of the account and for a period of at least five years following account closure, to satisfy financial record-keeping obligations and to allow for the resolution of any dispute or claim that may arise after closure.
• KYC and identity documents: Copies of identity documents submitted for KYC verification are retained for a minimum period of five years from the date of submission, in accordance with standard anti-money laundering record-keeping requirements.
• Transaction records: Records of all deposits, withdrawals, and bet settlements are retained for a minimum of five years from the date of each transaction.
• Support communications: Records of customer support interactions are retained for a period of two years from the date of the most recent communication in each support thread, unless a longer period is required in connection with a dispute or investigation.
• Cookie and session data: Session cookies expire at the end of each browser session. Persistent cookies are retained for the duration stated in our cookie settings interface, typically between 30 days and 12 months depending on the cookie category.

After the applicable retention period has expired, personal data is deleted securely or anonymised so that it can no longer be attributed to an identifiable individual. Where data is anonymised rather than deleted, the anonymised data may be retained indefinitely for statistical and analytical purposes.

9 Cookies & Tracking Technologies

666zz uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your session and preferences, and to gather analytics data that helps us understand how players use the platform and where improvements can be made. The following categories of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the 666zz platform to function. They maintain your login session, remember your account preferences during a session, and ensure the security of your connection. These cookies cannot be disabled without impairing your ability to use the platform.
• Functional Cookies: These cookies remember choices you make — such as your preferred language or display settings — so that the platform behaves consistently across sessions. Disabling these cookies will not prevent you from using 666zz but may mean you need to re-enter preferences on each visit.
• Analytics Cookies: These cookies collect aggregated, anonymised data about how visitors interact with the 666zz website — such as which pages are most visited, how long sessions last, and where navigation flows break down. This data is used internally to improve platform performance and user experience. Analytics cookies are placed only with your consent.
• Security Cookies: These cookies support our fraud prevention and account security systems by tracking device fingerprints and session patterns. They help us identify unusual login activity and protect your account from unauthorised access.

Most web browsers allow you to control cookie behaviour through browser settings, including blocking or deleting cookies. Note that blocking strictly necessary cookies will prevent you from logging in to your 666zz account. For instructions on managing cookies in your browser, refer to your browser's help documentation.

10 Security Measures

666zz takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure. Our key security measures include:

• SSL/TLS Encryption: All data transmitted between your device and the 666zz platform is encrypted using industry-standard SSL/TLS protocols. You can verify this by the padlock icon in your browser's address bar when visiting 666zz.bio.
• Password Hashing: Account passwords are stored only in a hashed, salted format using a modern cryptographic algorithm. 666zz staff cannot view or recover your password in plain text.
• Access Controls: Internal access to player data is restricted to authorised 666zz personnel who require it to perform their specific role. Access is governed by role-based permissions and is logged for audit purposes.
• Two-Factor Authentication: Where available, 666zz supports two-factor authentication on player accounts as an additional layer of protection against unauthorised login.
• Fraud Detection Systems: Automated systems continuously monitor account activity for patterns associated with fraud, account takeover, and bonus abuse, and flag suspicious activity for review by our security team.
• Regular Security Reviews: 666zz conducts periodic internal security reviews and works with third-party specialists to identify and address potential vulnerabilities in our platform and data handling practices.

Despite these measures, no internet-based platform can guarantee absolute security. 666zz cannot guarantee that data transmitted over the internet will always be secure. You play an important role in keeping your account secure by choosing a strong, unique password, keeping your login credentials confidential, and notifying [email protected] immediately if you suspect unauthorised activity on your account.

11 Your Privacy Rights

As a data subject, you have the following rights in relation to the personal data that 666zz holds about you. To exercise any of these rights, please submit a written request to [email protected], including your registered mobile number and a clear description of your request. We will respond within a reasonable timeframe, typically within 5 to 15 business days depending on the complexity of the request.

• Right of Access: You have the right to request a copy of the personal data that 666zz holds about you, together with information about how that data is used and with whom it is shared. We will provide this in a clear, structured format.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For registration data such as your mobile number or date of birth, please contact support to initiate a correction request — changes to identity data may require re-verification.
• Right to Erasure: You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you withdraw consent (where consent is the legal basis). This right is subject to our legal retention obligations; we may be required to retain certain data (such as financial transaction records) for a minimum period regardless of a deletion request.
• Right to Restriction: You have the right to request that we restrict the processing of your personal data in certain circumstances, for example while a dispute about the accuracy of your data is being resolved.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing of your personal data where that processing is based on legitimate interests. 666zz will cease the relevant processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place before the withdrawal.

12 Children & Minors

The 666zz platform is strictly for adults aged 21 and above. We do not knowingly collect, process, or store personal data belonging to individuals under the age of 21. Any account found to be registered by a person under 21 will be immediately closed, all associated data will be securely deleted (subject to any legal retention obligations), and any deposited funds will be returned to the source payment method after deducting any bonus credits claimed.

If you are a parent or guardian and believe that a minor in your care has registered an account on 666zz or has accessed the platform without your knowledge, please contact us immediately at [email protected]. We will investigate promptly and take all necessary steps to close the account and remove the minor's personal data.

13 Third-Party Links

The 666zz platform may contain references to third-party services such as game providers (Pragmatic Play, Evolution Gaming, Spribe, etc.) and payment processors (bKash, Nagad, Rocket, Upay). While we integrate with these services to deliver our platform, each third party operates under its own independent privacy policy.

666zz is not responsible for the privacy practices of third-party services. When you interact with a third-party service — for example, by initiating a bKash payment — you are subject to that provider's own terms and privacy policy in addition to ours. We encourage you to review the privacy policies of any third-party services you use in connection with your 666zz account.

Links or references to third-party content on the 666zz platform do not constitute endorsement of those parties' privacy practices. If you have a concern about how a third-party service processes your data, please contact that service directly.

14 Changes to This Privacy Policy

666zz reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When a material change is made to this policy, we will notify registered players via the mobile number associated with their account or by displaying a prominent notice on the 666zz platform for a minimum of 7 days prior to the change taking effect.

Minor or administrative changes — such as corrections to wording or formatting that do not affect the substance of the policy — may be published without advance notice. The date of the most recent revision is displayed at the top of this page and in the last-updated bar above the policy sections.

Continued use of the 666zz platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised policy, you should cease using the platform and contact [email protected] to request account closure before the revision takes effect.

Archived versions of prior Privacy Policy editions are available on request. To request a prior version, email [email protected] with the subject line "Privacy Policy Archive Request" and specify the approximate date of the version you require.

15 Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or about how 666z z handles your personal data, please do not hesitate to reach out to our support team using the details below. All privacy-related correspondence must be submitted in English to ensure accurate and timely handling.

• Email: [email protected] (plain text — not a clickable link)
• Response Time: Within 5 business days for privacy requests (Bangladesh Standard Time, UTC+6)
• Support Language: English
• Operating Hours: 24 hours a day, 7 days a week

When submitting a privacy-related request, please include your registered mobile number and a clear description of your request so that our team can locate your account and respond as efficiently as possible. For requests relating to data deletion, rectification, or access, please use the subject line "Privacy Rights Request" to ensure your message is routed directly to the appropriate team member.