Privacy Policy — Your Data Rights at d6666

1. About This Privacy Policy

This Privacy Policy ("Policy") explains how d6666 ("d6666", "the Platform", "we", "us", "our") collects, uses, stores, and shares personal information about you when you visit, register, or use any part of the d6666 website and its associated services (collectively, the "Platform"). It also explains the rights you have in relation to your personal data and how to exercise them.

By registering an account on d6666, making a deposit, placing a bet, or otherwise using any feature of the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must not use the Platform.

This Policy should be read together with our Terms and Conditions, which govern your overall use of the d6666 Platform. In the event of any conflict between this Policy and the Terms and Conditions, the Terms and Conditions will prevail. This Policy is written in English, which is the official language of all d6666 communications.

2. Data Controller

d6666 is the data controller responsible for the personal data you provide or that is collected in connection with your use of the Platform. As data controller, d6666 determines the purposes for which and the means by which your personal data is processed. d6666 is operated as a safe and reliable platform, and all data processing activities are conducted in a manner consistent with fair and transparent information practices.

All data rights requests, privacy enquiries, and complaints regarding the handling of your personal data should be directed to the d6666 privacy team via the contact details set out in Section 15 of this Policy. d6666 aims to respond to all privacy-related communications within 14 business days.

3. Information We Collect

d6666 collects personal information from you in the following ways: information you provide to us directly when registering or using the Platform, information generated automatically through your use of the Platform, and information received from third-party service providers where necessary for the operation of your account.

3.1 Information You Provide Directly

• Full legal name and date of birth (required for account registration and age verification).
• Email address and mobile phone number (used for account communications and two-factor authentication).
• Residential address in Bangladesh (required for KYC verification).
• National Identity Card (NID) number and a copy of your NID or passport (required for identity verification).
• Payment information including bKash account number, Nagad account number, Rocket number, or bank account details (used for processing deposits and withdrawals).
• Username and password (used to secure your account — passwords are stored in encrypted form only).
• Any communications you send to d6666 support, including live chat transcripts and email correspondence.

3.2 Information Collected Automatically

• IP address and approximate geographic location (used for fraud detection and regional access management).
• Device type, operating system, and browser version (used for technical optimisation and security monitoring).
• Session data including login times, pages visited, betting and gaming activity, and session duration (used for personalisation, responsible gaming monitoring, and fraud detection).
• Cookies and similar tracking data as described in Section 6 of this Policy.

3.3 Information from Third Parties

• Identity verification data from KYC and AML compliance partners used to confirm your identity and prevent fraud.
• Transaction confirmation data from payment providers such as bKash, Nagad, Rocket, and Upay, confirming the completion of deposits and withdrawals.
• Risk and fraud signals from fraud prevention service providers.

4. How We Use Your Data

d6666 uses the personal information it collects for the specific purposes set out in the table below. We do not use your personal data for any purpose beyond what is described here without first obtaining your separate consent.

Where d6666 processes your personal data on the basis of legitimate interest, we have assessed that our legitimate interest is not overridden by your fundamental rights and freedoms. You have the right to object to processing based on legitimate interest — see Section 9 for details of how to exercise this right.

5. Legal Basis for Processing

d6666 processes your personal data on one or more of the following legal bases, depending on the specific processing activity involved:

• Contract Performance: Processing that is necessary for d6666 to fulfil its contractual obligations to you as a registered player — including maintaining your account, processing bets and payments, and providing customer support.
• Legal Obligation: Processing that is required to comply with applicable legal requirements — including anti-money laundering (AML) regulations, Know Your Customer (KYC) obligations, age verification requirements, and fraud prevention obligations.
• Legitimate Interest: Processing that is necessary for the legitimate business interests of d6666, including Platform security, fraud detection, responsible gaming monitoring, service improvement, and analytics — provided these interests are not overridden by your rights.
• Consent: Processing that is based on your freely given, specific, informed, and unambiguous consent — primarily in the context of promotional email communications and non-essential cookies. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6. Cookies and Tracking Technologies

d6666 uses cookies — small text files placed on your device — and similar technologies such as local storage objects and session tokens to operate the Platform effectively. Cookies allow us to recognise your browser, maintain your logged-in session, remember your preferences, and collect anonymised analytics data about how the Platform is used.

6.1 Categories of Cookies We Use

6.2 Managing Your Cookie Preferences

You can control non-essential cookies through your browser settings at any time. Most modern browsers allow you to block, delete, or be notified about cookies. Please note that blocking strictly necessary cookies will impair the functionality of the d6666 Platform and may prevent you from logging in or using core features. Detailed instructions for managing cookies are available in your browser's help documentation.

7. Sharing Your Personal Data

d6666 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. Your personal information is shared only in the limited circumstances described below, and only to the extent strictly necessary for each purpose.

7.1 Payment Service Providers

To process your deposits and withdrawals, d6666 shares the minimum necessary payment information with our certified payment partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank (DBBL), BRAC Bank, City Bank, and Islami Bank. These providers process your payment data under their own privacy policies and are bound by data processing agreements with d6666.

7.2 Game Software Providers

Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Red Tiger, and Ezugi may receive session-level data (such as a pseudonymous player ID, bet amounts, and game outcomes) solely to operate the games you play. These providers do not receive your name, contact details, or payment information.

7.3 Identity Verification and Fraud Prevention

To fulfil our KYC and AML obligations, d6666 may share identity verification documents and supporting data with third-party KYC service providers and fraud prevention platforms. All such partners are contractually bound to use your data only for the purposes of identity verification and fraud prevention and not for any other purpose.

7.4 Legal and Regulatory Disclosures

d6666 may disclose your personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required to do so by applicable law, a valid court order, or a legitimate legal process. In such cases, d6666 will disclose only the minimum information legally required and will, where legally permitted, notify you of the disclosure.

7.5 Business Transfers

In the event of a merger, acquisition, asset sale, or restructuring of d6666's business, your personal data may be transferred to the acquiring entity as part of the transaction. In such circumstances, d6666 will ensure that the acquiring entity is bound by privacy obligations at least equivalent to those set out in this Policy, and you will be notified of any material change in data controller.

8. Data Retention

d6666 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, accounting, and reporting obligations. The table below sets out d6666's standard data retention periods for the main categories of personal information held.

Upon the expiry of the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be linked back to you as an individual. Anonymised and aggregated statistical data (from which no individual can be identified) may be retained indefinitely for analytical purposes.

9. Your Data Rights

As an individual whose personal data is processed by d6666, you have the following rights in respect of your personal information. To exercise any of these rights, please contact the d6666 privacy team using the details in Section 15. d6666 will respond to all valid data rights requests within 30 days of receipt.

• Right of Access: You have the right to request a copy of the personal data that d6666 holds about you, along with information about how it is being used. This is sometimes referred to as a Subject Access Request (SAR).
• Right to Rectification: You have the right to request the correction of any inaccurate or incomplete personal data that d6666 holds about you. You can update many details directly through your account settings.
• Right to Erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn your consent (where consent was the basis for processing), or where processing was unlawful. This right is subject to legal retention obligations that may require d6666 to retain certain data.
• Right to Restriction: You have the right to request that d6666 restricts the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data or have objected to processing based on legitimate interest.
• Right to Data Portability: Where processing is based on your consent or on the performance of a contract, you have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, and to have that data transmitted to another controller where technically feasible.
• Right to Object: You have the right to object to processing based on d6666's legitimate interests at any time. You also have an absolute right to object to processing of your data for direct marketing purposes, which d6666 will honour without question.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that took place before withdrawal.

10. Data Security

d6666 implements a comprehensive range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures are reviewed and updated on a regular basis to reflect the latest security standards and emerging threat vectors.

10.1 Technical Security Measures

• 256-bit SSL (TLS) encryption on all data transmitted between your browser or device and the d6666 Platform.
• Encrypted storage of all passwords using industry-standard hashing algorithms — d6666 staff cannot view your password in plain text.
• Encryption of sensitive stored data including identity documents and payment references.
• Two-factor authentication (2FA) available on all player accounts for additional login security.
• Automated intrusion detection and real-time security monitoring of all Platform infrastructure.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.

10.2 Organisational Security Measures

• Access to personal data is restricted on a strict need-to-know basis — only staff who genuinely need access to personal data to perform their job function are granted it.
• All staff with access to personal data are trained in data protection obligations and bound by confidentiality agreements.
• A formal data breach response procedure is in place, including notification protocols for material breaches that affect player data.

Despite these measures, no online platform can guarantee absolute security against all possible threats. You also play an important role in keeping your account secure: use a strong, unique password for your d6666 account, enable two-factor authentication, and never share your login credentials with anyone. If you suspect your account has been compromised, contact d6666 support immediately.

11. International Data Transfers

d6666 primarily stores and processes player data within secure data centre facilities. Some of our third-party service providers — including certain game software providers and KYC verification partners — may be located in, or process data in, countries outside Bangladesh. Where personal data is transferred internationally, d6666 takes steps to ensure that appropriate safeguards are in place to protect your information to a standard equivalent to the protections described in this Policy.

These safeguards may include: data processing agreements with contractual clauses requiring the recipient to apply appropriate data protection standards; transfers to organisations that are independently certified under recognised data protection frameworks; or other mechanisms that provide an equivalent level of protection for your personal data.

If you would like further information about the international transfer safeguards applicable to your data, please contact the d6666 privacy team using the details in Section 15 .

12. Third-Party Links

The d6666 Platform may contain references to third-party services, payment providers, or game developers. While d6666 takes care to work only with reputable partners, we have no control over the privacy practices of external websites or services. This Privacy Policy applies solely to the d6666 Platform and does not extend to any third-party website, application, or service that may be referenced in our content.

We encourage you to review the privacy policies of any third-party services you interact with — particularly those of payment providers such as bKash, Nagad, and Rocket — as their data practices are governed by their own separate policies, not by this document. d6666 accepts no responsibility or liability for the privacy practices of any third-party service.

13. Children and Minors

d6666 is strictly an adults-only platform. You must be at least 21 years of age to register an account or use any feature of the Platform. d6666 does not knowingly collect, process, or store personal data from any individual under the age of 21.

During the account registration process, all users are required to confirm that they are 21 years of age or older and to complete identity verification (KYC) procedures that include date-of-birth confirmation. Where d6666 has reasonable grounds to suspect that an account holder may be under the age of 21, the account will be suspended immediately pending age verification.

If d6666 determines — whether through the verification process or through any other means — that an account has been opened by an individual under the age of 21, the following steps will be taken without delay: the account will be permanently closed; all funds held in the account will be handled in accordance with our underage account procedures; and all personal data associated with the account will be securely deleted to the extent permitted by law.

If you are a parent or guardian and believe that a person under the age of 21 in your care may have registered an account on d6666, please contact our support team immediately at [email protected]. We take underage access to gambling platforms extremely seriously and will act on all such reports promptly.

14. Changes to This Privacy Policy

d6666 reserves the right to update or modify this Privacy Policy at any time. Changes may be necessary to reflect updates to our services, changes in applicable law, new security practices, or feedback from our players. The date of the most recent revision is always displayed at the top of this Policy.

Where a change is material — meaning it significantly affects how your personal data is collected or used — d6666 will provide advance notice to all registered players via their registered email address at least 14 days before the change takes effect. Continued use of the Platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms.

Where a change requires your fresh consent — for example, a change that introduces a new category of data processing based on consent — d6666 will seek that consent explicitly before the new processing commences. If you do not wish to accept a material change, you may close your account before the change takes effect by contacting support.

15. Contact and Data Rights Requests

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a complaint about how d6666 handles your personal information, please contact our privacy team using the details below. All privacy-related communications should be in English, and d6666 will respond in English within the timeframes indicated.

• Privacy Email: [email protected]
• Response Time: Data rights requests acknowledged within 5 business days; resolved within 30 days.
• Support Hours: 24/7, Bangladesh Standard Time (BST, UTC+6)
• Language: English

When submitting a data rights request, please include your registered account username or email address, a clear description of your request or complaint, and any supporting information that will help us locate your records and respond efficiently. d6666 may need to verify your identity before processing certain requests — particularly Subject Access Requests or erasure requests — in order to ensure that we do not disclose or delete data belonging to another individual.

d6666 is committed to resolving all privacy complaints fairly and promptly. If you are not satisfied with the outcome of your complaint after engaging with the d6666 privacy team, you may wish to seek independent advice or raise the matter through applicable consumer protection or data rights bodies in Bangladesh.