666d Privacy Policy —
How We Protect Your Personal Data

This Privacy Policy ("Policy") describes how 666d ("the Platform", "we", "us", "our") collects, uses, stores, shares, and protects the personal data of users ("you", "your") who access and use the 666d website at https://666d.ws and all associated services, games, and features offered by the platform.

666d is committed to handling your personal data responsibly, transparently, and in full compliance with internationally recognised data protection standards. This Policy applies to all 666d users, including registered account holders and unregistered visitors browsing the public-facing areas of the platform.

This Policy should be read alongside the Terms & Conditions and the Responsible Gaming policy, which together form the full legal framework governing your relationship with 666d.

The effective date of this Privacy Policy is 1 January 2026. If material changes are made to this Policy, we will notify registered users by email and display a prominent notice on the platform prior to the changes taking effect.

666d collects personal data in the following categories. The full breakdown of data points, purposes, and retention periods is available in the summary table in the section above this document.

2.1 Identity Data. When you register a 666d account, we collect your full legal name, date of birth, nationality, and — where required for KYC verification — a copy of a government-issued photo identification document such as a National Identity Card (NID), passport, or driving licence. This data is essential for confirming that you are at least 21 years of age and for verifying that you are who you claim to be.

2.2 Contact Data. We collect your email address, mobile phone number, and city or district of residence within Bangladesh (for example, Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar). Contact data is used for account-related communications, withdrawal notifications, support correspondence, and — where you have opted in — promotional messages.

2.3 Financial Data. To facilitate deposits and withdrawals in Bangladeshi Taka (BDT), 666d collects the mobile banking account numbers associated with bKash, Nagad, Rocket, or Upay, or the last four digits and expiry date of any Visa or Mastercard used on the platform. Full card numbers and mobile banking PINs are never stored by 666d — all payment authorisations are handled directly by the respective payment providers.

2.4 Technical Data. Our servers automatically record certain technical information when you access the 666d platform, including your IP address, device type and model, browser name and version, operating system, and the timestamps of your login and logout sessions. This data is used for platform security, fraud detection, and service reliability monitoring.

2.5 Usage Data. We collect data about how you interact with the 666d platform, including which pages you visit, which games you play (cricket sportsbook, live casino, slots, Multi Bet, Nine), how long your sessions last, and which features you engage with. This data is used for responsible gaming monitoring and for improving the platform experience.

2.6 Communications Data. All correspondence you exchange with the 666d support team — whether by email, live chat, or any other channel — is recorded and retained for the purposes of customer support, dispute resolution, and quality assurance review.

666d collects personal data through several distinct mechanisms, all of which are disclosed here:

• Direct input at registration: When you create a 666d account, you voluntarily provide identity, contact, and financial data through the registration form.
• Account activity: As you use the platform — placing bets, playing casino games, making deposits and withdrawals — usage and financial transaction data is generated and recorded automatically.
• KYC submissions: Where account verification is required, you submit identity documents directly through the secure KYC portal integrated into the 666d platform.
• Payment providers: When you initiate a deposit or withdrawal via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, the payment provider shares confirmation data (transaction reference, amount, timestamp) with 666d for reconciliation purposes.
• Cookies and tracking technologies: When you browse the 666d website, cookies and similar technologies collect technical and usage data automatically. See Section 7 for full details on our cookie practices.
• Support interactions: When you contact the 666d support team, the content of your messages, your account identifier, and the timestamp of contact are recorded.
• Third-party game providers: Game studios such as Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, Spribe, and Ezugi may share session and gameplay data with 666d for the purpose of settling bets, resolving disputes, and detecting irregular activity.

666d uses the personal data it collects for the following purposes:

• Account management: Creating, maintaining, and securing your 666d account; verifying your identity and age (21+); and processing account closure requests.
• Service delivery: Accepting and settling bets on cricket, football, kabaddi, and other sports markets; providing access to live casino games, slots, Multi Bet, and Nine products; and processing BDT deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard.
• Fraud prevention and AML compliance: Monitoring account and transaction activity for signs of fraudulent conduct, money laundering, collusion, bonus abuse, or multi-accounting; reporting suspicious activity to relevant authorities where legally required.
• Responsible gaming: Monitoring gameplay patterns for indicators of problem gambling; applying deposit limits, session limits, and self-exclusion measures as requested or required; sending responsible gaming communications to at-risk accounts.
• Customer support: Responding to queries, complaints, and disputes submitted by account holders; maintaining records of support interactions for quality assurance and dispute resolution purposes.
• Platform improvement: Analysing aggregated usage data to identify areas for platform enhancement, fix technical issues, and develop new features and game categories.
• Marketing and promotions (with consent only): Sending promotional emails, SMS notifications, and bonus offers to account holders who have opted in to marketing communications. You may opt out at any time — see Section 11.
• Legal and regulatory compliance: Retaining records as required by applicable financial crime, anti-money-laundering, and consumer protection regulations.

666d processes personal data under the following legal bases:

• Contractual necessity: Processing your identity, contact, and financial data is necessary for 666d to fulfil its obligations under the account agreement — including registering your account, processing payments, and settling bets.
• Legal obligation: Certain data processing activities — particularly KYC verification, transaction record-keeping, and suspicious activity reporting — are required by applicable financial crime prevention standards and cannot be waived.
• Legitimate interests: 666d processes technical and usage data on the basis of its legitimate interest in maintaining platform security, preventing fraud, detecting problem gambling patterns, and improving service quality — provided that such interests are not overridden by your fundamental privacy rights.
• Consent: Marketing communications and non-essential cookies are processed only where you have provided explicit, informed consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

666d does not sell, rent, or trade your personal data. We share personal data only in the following limited circumstances:

6.1 Payment Providers. To process deposits and withdrawals in BDT, 666d shares the minimum necessary financial and identity information with bKash, Nagad, Rocket, Upay, Visa, and Mastercard. Each payment provider operates under its own data protection standards and privacy policy, which governs its independent handling of transaction data.

6.2 Game Studio Providers. To deliver casino and live dealer games, 666d shares session identifiers and game activity data with third-party studio providers including Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, Spribe, and Ezugi. This data exchange is necessary for game delivery, outcome certification, and dispute resolution.

6.3 Technology and Infrastructure Partners. 666d uses third-party hosting, cloud storage, and platform security providers to operate the 666d website. These providers act as data processors under instruction from 666d and are contractually bound to process data solely for the purposes specified by 666d and not for their own commercial purposes.

6.4 Legal and Regulatory Disclosure. 666d may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required by applicable law, court order, or regulatory mandate. Such disclosures are made only to the extent required and are not notified to the affected user where prohibited by law.

6.5 Business Transfers. In the event of a merger, acquisition, or sale of the 666d platform, personal data may be transferred to the acquiring entity as part of the business assets. You will be notified of any such transfer and of any resulting changes to this Privacy Policy.

The 666d platform uses cookies and similar tracking technologies to deliver a functional, secure, and personalised experience. A cookie is a small text file placed on your device by the website server when you visit a page. Cookies do not execute code and cannot carry viruses.

7.1 Strictly Necessary Cookies. These cookies are essential for the 666d platform to function. They maintain your login session, preserve your language and currency preferences, and protect the platform against cross-site request forgery attacks. These cookies cannot be disabled without impairing platform functionality.

7.2 Performance and Analytics Cookies. With your consent, 666d uses analytics cookies to understand how players navigate the platform — which pages are most visited, where users encounter friction, and how game categories perform. This data is used in aggregate form to improve the platform. Individual user sessions are not sold or shared.

7.3 Functional Cookies. Functional cookies allow 666d to remember your preferences — such as your preferred payment method, default bet stake, and notification settings — so that you do not need to reconfigure them on every visit.

7.4 Managing Cookies. You may control cookie settings through your browser preferences at any time. Disabling strictly necessary cookies will impair your ability to log in and use the platform. Disabling analytics or functional cookies will not affect your ability to place bets or access games but may reduce platform personalisation.

• Session cookies expire automatically when you close your browser.
• Persistent cookies remain on your device for a defined period (typically 30 to 365 days) unless manually deleted.
• 666d does not use third-party advertising cookies or pixel trackers embedded by advertising networks.

666d applies a layered technical and organisational security architecture to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure.

• 256-bit SSL/TLS encryption protects all data in transit between your device and the 666d servers.
• Encrypted database storage ensures that all personal data at rest is protected by strong encryption keys managed under strict key management protocols.
• Role-based access controls limit access to personal data records to authorised personnel with a demonstrated operational need only.
• Audit logging records all internal access events to personal data stores, enabling retrospective security review and incident investigation.
• Two-factor authentication is available to all 666d account holders and is strongly recommended for additional account security.
• Regular security assessments are conducted to identify and remediate vulnerabilities in the 666d platform infrastructure.
• Incident response procedures are in place to detect, contain, and communicate data security incidents to affected users within a reasonable timeframe.

While 666d employs substantial technical safeguards, no online platform can guarantee absolute security against all possible threats. You are responsible for maintaining the confidentiality of your account credentials and for notifying 666d promptly at [email protected] if you suspect unauthorised access to your account.

666d retains personal data for no longer than is necessary for the purpose for which it was collected, subject to any mandatory retention requirements imposed by applicable law. The general retention periods applied by 666d are as follows:

• Identity and KYC data: Retained for the duration of your active account plus five (5) years following account closure, to comply with anti-money-laundering record-keeping obligations.
• Financial transaction data: Retained for the duration of your active account plus seven (7) years, in accordance with financial record-keeping requirements.
• Contact data: Retained for the duration of your active account plus three (3) years following closure.
• Technical and IP data: Retained for thirteen (13) months from the date of collection, after which it is automatically purged from active systems.
• Usage and gameplay data: Retained for the duration of your active account plus two (2) years following closure.
• Support communications: Retained for three (3) years from the date of the last relevant interaction.
• Marketing preferences: Retained until you withdraw your consent to marketing communications, at which point preference records are updated to reflect opt-out status.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be associated with any individual. Data subject to an active legal hold or ongoing dispute investigation will be retained until resolution of that matter, regardless of standard retention schedules.

As a 666d account holder, you have the following rights in relation to your personal data. To exercise any of these rights, please contact the 666d support team at [email protected] with your registered email address and a clear description of your request. All requests are handled within 30 days of receipt.

• Right of access: You may request a copy of all personal data 666d holds about you, along with information about how it is being used and with whom it has been shared.
• Right to rectification: If any personal data held by 666d is inaccurate or incomplete, you may request that it be corrected or updated. Identity and contact data corrections may require re-verification.
• Right to erasure: In certain circumstances, you may request that 666d delete your personal data. This right is not absolute — data that 666d is required to retain by law (for example, financial transaction records) cannot be erased upon request.
• Right to restrict processing: You may request that 666d suspend active processing of your personal data while a dispute about its accuracy or the lawfulness of its use is being resolved.
• Right to data portability: You may request a machine-readable copy of the personal data you have provided to 666d, for the purpose of transferring it to another service provider.
• Right to object: You may object to the processing of your personal data where 666d relies on legitimate interests as its legal basis. 666d will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

666d sends promotional communications — including bonus offers, free bet alerts, seasonal promotions tied to events such as BPL, IPL, T20 World Cup, Eid, and Pohela Boishakh — only to account holders who have explicitly opted in to receive marketing messages during account registration or via the account settings panel.

Marketing communications are delivered via email to your registered address and, where you have provided consent, via SMS to your registered Bangladesh mobile number. 666d does not send marketing communications through WhatsApp, Telegram, or any third-party messaging application unless you have separately consented to that channel.

You may unsubscribe from marketing communications at any time by:

• Clicking the unsubscribe link present in every marketing email sent by 666d.
• Replying "STOP" to any marketing SMS message sent by 666d.
• Updating your communication preferences in the 666d account settings panel.
• Contacting the 666d support team at [email protected] with a written opt-out request.

Opting out of marketing communications does not affect the delivery of transactional communications — such as deposit confirmations, withdrawal notifications, KYC requests, and responsible gaming alerts — which are sent regardless of marketing preference status as they are necessary for account management.

The 666d platform does not contain links to third-party websites for general browsing purposes. All links within the 666d website direct users to pages within the 666d domain (https://666d.ws). Game studio providers (Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, Spribe, Ezugi) deliver their games through embedded interfaces within the 666d platform environment, not through outbound links to external websites.

666d is not responsible for the privacy practices of any third-party payment provider or game studio. If you navigate to the website of bKash, Nagad, Rocket, Upay, Visa, or Mastercard independently, the privacy practices of those platforms are governed entirely by their own published privacy policies, not by this document.

The 666d platform is strictly for adults aged 21 years and older. 666d does not knowingly collect, process, or retain personal data from individuals under the age of 21. If you are under 21, you are not permitted to register an account, access any game or betting product, or make any financial transaction on the 666d platform.

During account registration, all applicants are required to confirm their date of birth and, where required by our KYC process, submit a government-issued identity document confirming that they meet the minimum age requirement of 21 years. Any account found to belong to a person under 21 will be immediately suspended, all funds will be returned, and any winnings generated will be voided.

If you believe that a minor has registered an account on the 666d platform, please notify us immediately at [email protected]. We take underage gambling extremely seriously and will act swiftly on any credible report. Parents and guardians in Bangladesh are encouraged to use device-level parental controls to prevent minors from accessing online gambling platforms.

666d reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or platform features. All changes will be posted on this page with an updated effective date clearly displayed at the top of the document.

Where changes are material — meaning they meaningfully affect how we collect, use, or share your personal data — registered account holders will be notified by email to their registered address at least 14 days before the changes take effect. Continued use of the 666d platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms.

We encourage you to review this Privacy Policy periodically to stay informed about how 666d is protecting your personal data. The version published on this page is always the current operative version.

If you have any questions, concerns, or requests relating to this Privacy Policy or to how 666d handles your personal data, please contact our dedicated data protection support team using the details below. All communications regarding data privacy are treated with priority and handled by trained personnel.

• Email: [email protected] (plain text — not a clickable link)
• Support hours: 24 hours a day, 7 days a week — Bangladesh Standard Time (UTC+6)
• Response commitment: All privacy-related enquiries acknowledged within 5 working days; fully resolved within 30 calendar days
• Subject line recommended: "Privacy Policy Enquiry" or "Data Rights Request" for fastest routing

If you are not satisfied with how 666d has handled your privacy concern after raising it directly with our support team, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction. 666d will cooperate fully with any such investigation and will not take any adverse action against an account holder for exercising their data protection rights in good faith.