Privacy Policy of 66f999

1. Introduction

This Privacy Policy ("Policy") describes how 66f999 ("we", "us", "our", "the Platform") collects, uses, stores, shares, and protects the personal information of users ("you", "your", "Player") who access or register on the website located at https://66f999.club and all associated services, features, and content.

66f999 is committed to protecting your privacy and handling your personal data with transparency, care, and in accordance with applicable data protection principles. We believe that every player in Bangladesh and beyond has a right to understand exactly what information we hold about them and how that information is used.

By creating a 66f999 account, accessing the platform, or using any of our services, you acknowledge that you have read, understood, and agree to the data practices described in this Privacy Policy. If you do not agree with any part of this Policy, you must discontinue use of the platform immediately.

This Policy should be read in conjunction with the 66f999 Terms & Conditions, which govern your use of the platform more broadly. Capitalised terms not defined in this Policy carry the meaning assigned to them in the Terms & Conditions.

2. Personal Data We Collect

66f999 collects several categories of personal data from and about registered players and website visitors. The specific data collected depends on the nature of your interaction with the platform and the services you use.

2.1 Registration & Identity Data

• Full legal name
• Date of birth (for age verification purposes)
• Email address
• Mobile phone number
• Residential address (city, district, country)
• Username and account password (stored in hashed form — never in plaintext)

2.2 Identity Verification Documents

• National ID card (NID) scan or photograph
• Passport data page scan or photograph
• Proof of address documentation (utility bill, bank statement)
• Payment method ownership confirmation documents
• Selfie or live photograph for biometric matching where required

2.3 Financial & Transaction Data

• bKash, Nagad, Rocket, or Upay mobile banking account numbers associated with deposits or withdrawals
• Transaction reference numbers and amounts (in Bangladeshi Taka ৳)
• Deposit and withdrawal history
• Bonus and promotional credit history
• Account balance information

2.4 Gaming Activity Data

• Game session logs (games played, bet amounts, outcomes, session duration)
• Sports betting history (markets, stakes, selections, settlement outcomes)
• Responsible gaming tool settings (deposit limits, session reminders, self-exclusion status)

2.5 Technical & Device Data

• IP address and geolocation data
• Device type, operating system, and browser version
• Screen resolution and device identifiers
• Session timestamps, page views, and click-stream data
• Cookie identifiers and similar tracking technology data

2.6 Communication Data

• Customer support chat transcripts and email correspondence
• Complaint and dispute records
• Promotional communication preferences and opt-in/opt-out records

3. How We Collect Your Data

66f999 collects personal data through the following channels and mechanisms:

3.1 Directly From You

The majority of personal data we hold is provided directly by you during the account registration process, identity verification procedures, payment transactions, customer support interactions, and when you complete any form or survey on the platform.

3.2 Automatically During Platform Use

When you access the 66f999 website, our servers and analytics systems automatically collect technical data including your IP address, device identifiers, browser information, and browsing behaviour on the platform. This data collection occurs via server logs, cookies, and similar technologies described in Section 7 of this Policy.

3.3 From Third-Party Service Providers

We may receive data about you from third-party partners who assist us in operating the platform, including:

• Payment processors (bKash, Nagad, Rocket, Upay) who provide transaction confirmation data
• Identity verification service providers who assist with KYC (Know Your Customer) document checks
• Fraud prevention and risk management partners who provide risk scoring data
• Game technology providers (Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, Microgaming) who may transmit game session data to us for settlement and dispute resolution purposes

3.4 From Publicly Available Sources

In limited circumstances — primarily for fraud prevention and AML compliance — we may supplement our records with information from publicly available sources such as sanctions lists, politically exposed persons (PEP) databases, and publicly accessible social media profiles where relevant to a compliance review.

4. How We Use Your Personal Data

66f999 uses the personal data it collects for the following specific purposes:

66f999 does not use your personal data for automated decision-making that produces legal effects or significantly affects you without human oversight, except where automated fraud detection systems flag an account for review — in which case the final decision on any account action is always reviewed by a member of our compliance team.

5. Legal Basis for Processing Personal Data

66f999 processes your personal data on the following legal bases, depending on the specific purpose and context of each processing activity:

• Contractual Necessity: Processing required to fulfil our obligations to you under the Terms & Conditions, including account management, payment processing, game delivery, and customer support.
• Legal Obligation: Processing required for us to comply with applicable laws and regulations, including AML obligations, KYC requirements, age verification mandates, and responding to lawful requests from regulatory or law enforcement authorities.
• Legitimate Interests: Processing carried out for the legitimate business interests of 66f999, including fraud detection, platform security, responsible gaming monitoring, and analytics — provided that our interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing carried out based on your freely given, specific, informed, and unambiguous consent — primarily for the delivery of marketing and promotional communications. You may withdraw your consent at any time by contacting our support team or updating your communication preferences within your account settings.

6. Sharing Your Personal Data

66f999 does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial purposes. We may share your data with the following categories of recipients, strictly as necessary to operate the platform and fulfil our legal obligations:

6.1 Payment Service Providers

We share necessary transaction data with bKash, Nagad, Rocket, and Upay to process your deposits and withdrawals. These providers operate their own privacy policies and are independently responsible for data they hold as controllers in their own right.

6.2 Identity Verification Partners

We engage regulated third-party KYC and AML service providers to assist in verifying your identity and screening your information against sanctions lists and PEP databases. These providers act as data processors under contractual obligation to 66f999 and are not permitted to use your data for any other purpose.

6.3 Game Technology Providers

Game studios and providers including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming may receive limited session-level data (such as player ID, stake, and outcome) to facilitate game delivery, RTP verification, and dispute resolution. These providers are subject to contractual data protection obligations.

6.4 Fraud Prevention & Risk Management Partners

We share technical and transactional data with fraud prevention partners to detect and investigate suspicious activity. These partners process data under contractual obligations and may maintain shared fraud databases that are accessible to other regulated operators for cross-platform fraud prevention purposes.

6.5 Legal & Regulatory Authorities

We may be required to disclose personal data to law enforcement agencies, financial intelligence units, courts, or other government bodies where required or permitted by applicable law. We will always seek to ensure that such disclosures are limited to what is strictly necessary and legally required.

7. Cookies & Tracking Technologies

66f999 uses cookies and similar technologies (including local storage, session storage, and pixel tags) to operate the platform effectively and to understand how players use the site. The following categories of cookies are used:

66f999 does not use advertising cookies, retargeting pixels, or third-party behavioural tracking technologies that serve targeted advertisements based on your browsing behaviour across external websites.

Most web browsers allow you to control cookie settings through the browser's preferences panel. You may disable or delete cookies at any time; however, please note that disabling strictly necessary cookies will impair your ability to log in and use the platform.

8. Data Retention

66f999 retains personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy, and for as long as required by applicable law. Our standard retention periods are as follows:

• Active Account Data: Retained for the full duration of your registered account plus a minimum of 5 years following permanent account closure. This retention period exists to satisfy AML record-keeping obligations and to facilitate the resolution of any late-arising disputes.
• Transaction Records: Retained for a minimum of 7 years following each transaction, in accordance with financial record-keeping requirements.
• Identity Verification Documents: Retained for a minimum of 5 years following account closure. In certain circumstances involving suspected fraud or regulatory investigation, these documents may be retained for longer at the direction of competent authorities.
• Customer Support Communications: Retained for 3 years from the date of the last interaction relating to a specific query or complaint.
• Marketing Consent Records: Retained for the duration of your account, plus 2 years following account closure, to demonstrate compliance with consent requirements.
• Technical & Log Data: Typically retained for up to 13 months, then anonymised or deleted, except where extended retention is required for a fraud or security investigation.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with our internal data deletion procedures.

9. Your Privacy Rights

Subject to applicable law and certain limitations, you have the following rights in relation to the personal data held about you by 66f999:

• Right of Access: You have the right to request a copy of the personal data we hold about you. We will provide this information within 30 days of a verified request.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. Minor data corrections (such as phone number updates) can often be made directly within your account settings.
• Right to Erasure: You may request the deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected. This right is not absolute and does not apply where we are required to retain data by law (for example, for AML or fraud investigation purposes).
• Right to Restrict Processing: You may request that we restrict the processing of your personal data in certain circumstances while a dispute or correction request is being resolved.
• Right to Data Portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to the processing of your personal data where that processing is based on our legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent (primarily marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

10. Data Security

66f999 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers
• AES-256 encryption for sensitive data at rest, including identity documents and financial records
• Bcrypt password hashing — your account password is never stored in plaintext form
• Multi-factor authentication (MFA) available to all registered players and enforced for all internal staff accessing player data systems
• Role-based access controls (RBAC) ensuring that staff members can only access the data necessary for their specific job functions
• Continuous automated monitoring for unusual access patterns, brute-force attempts, and anomalous data export activity
• Regular penetration testing conducted by independent cybersecurity professionals
• Secure development practices including code review, dependency scanning, and vulnerability assessment as part of our software release process

11. Children's Privacy

The 66f999 platform is strictly intended for adults aged 18 years and above. We do not knowingly collect, process, or store personal data belonging to any person under the age of 18. Age verification is a mandatory step in the account registration process, and we conduct additional verification checks at our discretion.

If we become aware that we have inadvertently collected personal data from a person under the age of 18, we will immediately suspend the associated account, delete all personal data collected from that individual, and refund any balance held in the account. If you have reason to believe that a minor has registered an account on 66f999, please notify us immediately at [email protected].

12. International Data Transfers

66f999 operates primarily within the Bangladesh market and stores the majority of player data on servers located within secure data centre facilities. However, some of our third-party service providers — including game technology partners such as Pragmatic Play, Evolution Gaming, and Spribe — are headquartered or operate infrastructure in jurisdictions outside Bangladesh.

Where personal data is transferred to a third-party service provider operating in another jurisdiction, 66f999 ensures that appropriate safeguards are in place to protect your data, including:

• Contractual data processing agreements that impose equivalent data protection obligations on the recipient
• Restricting transfers to service providers located in or certified under jurisdictions with adequate data protection frameworks
• Conducting due diligence on the data security practices of third-party recipients prior to engagement and on an ongoing annual basis

By using the 66f999 platform, you acknowledge that your personal data may be processed in jurisdictions outside Bangladesh as described above, subject to the safeguards detailed in this section.

13. Updates to This Privacy Policy

66f999 reserves the right to update, revise, or replace any part of this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. Material changes to this Policy will be communicated to registered players via email notification or an in-platform notice prior to the changes taking effect.

The most current version of this Privacy Policy is always accessible at https://66f999.club/privacy-policy. The "Last Updated" date at the top of this page reflects the date on which the most recent revision was published.

Your continued use of the 66f999 platform following publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you must discontinue use of the platform and contact our support team to request account closure.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which 66f999 handles your personal data, please contact our data team using the following details:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: Please use "Privacy Enquiry" or "Data Rights Request" so your message is routed to the correct team
• Live Chat: Available 24 hours a day, 7 days a week via the platform interface
• Response Time: General privacy enquiries are acknowledged within 24 hours and substantively responded to within 30 calendar days

When contacting us about a data rights request, please provide your registered account username or email address so that we can verify your identity before processing your request. We take data subject requests seriously and are committed to responding accurately and within the required timeframe.