Privacy Policy

1. Introduction

666win ("we", "us", "our") operates the online casino and sports betting platform accessible at 666win.bio. As part of providing our services to players in Bangladesh, we collect and process certain personal information. This Privacy Policy sets out in clear, formal terms what data we collect, why we collect it, how it is stored and protected, and the rights available to you as a data subject.

We are committed to maintaining the privacy and security of your personal information. We do not treat data collection as a commercial opportunity — every piece of data we hold about you serves a specific, documented purpose related to operating the 666win platform safely and fairly for all players.

This policy applies to all personal data collected through the 666win website at 666win.bio, through interactions with our customer support team, and through the payment and identity verification processes associated with your 666win account. It applies to all registered players and to visitors who browse the platform without registering.

2. Data We Collect

We collect personal data in two broad categories: data you provide to us directly, and data we collect automatically through your use of the platform.

2.1 Data You Provide Directly

• Registration data: Full legal name, date of birth, email address, mobile phone number, and residential address in Bangladesh (including city — Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar).
• Identity verification (KYC) documents: Scanned or photographed copies of government-issued photo identification such as a National Identity Card (NID), passport, or birth certificate; and proof of address documents where required.
• Payment information: Mobile wallet account identifiers for bKash, Nagad, Rocket, and Upay; bank account details for Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, or other supported institutions. We do not store full card numbers or mobile wallet PINs.
• Communications data: The content of messages sent to our support team via email or live chat, including any documents or screenshots you attach to support requests.
• Responsible gaming data: Preferences and limits you set via the responsible gaming tools, including deposit limits, session reminders, cooling-off periods, and self-exclusion elections.

2.2 Data Collected Automatically

• Technical data: IP address, device type, operating system, browser type and version, screen resolution, and time zone.
• Usage data: Pages visited, games played, bets placed (stake, odds, outcome), session start and end times, and navigation paths through the platform.
• Cookie and tracking data: Session identifiers, authentication tokens, and analytics data as described in Section 9 of this policy.
• Transaction data: Records of all deposits, withdrawals, bonus credits, wagers, and winnings associated with your account, denominated in BDT.

3. How We Collect Your Data

Personal data is collected through the following channels and interactions:

• Account registration: When you complete the registration form on 666win, you provide your core personal details voluntarily.
• KYC verification requests: When our compliance team requests identity or address verification, you submit documents directly through the secure upload interface in your account dashboard.
• Deposit and withdrawal transactions: Payment data is captured through our integration with local mobile wallet and banking payment gateways.
• Customer support interactions: When you contact our support team, data is collected from those communications and linked to your account record.
• Automated platform tracking: Our servers and analytics tools record technical and usage data each time you access the platform, as described in Section 2.2 above.
• Third-party game providers: Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe may share session and outcome data with us for the purpose of game history reporting and dispute resolution.

4. How We Use Your Data

The personal data we hold about you is used for the following specific purposes:

We do not use your personal data for automated decision-making that produces legal or similarly significant effects without human review. Responsible gaming tools that apply automatic limits do so based on preferences you set yourself.

5. Legal Basis for Processing

We process your personal data under the following legal bases:

• Contractual necessity: Processing required to fulfil our obligations to you under the 666win Terms & Conditions — including account management, transaction processing, and customer support.
• Legitimate interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and analytics, where our legitimate interests are not overridden by your privacy rights.
• Legal obligation: Processing required to comply with applicable laws, including identity verification and the retention of financial transaction records.
• Consent: Processing for optional marketing communications, where you have provided explicit, freely given consent at the time of registration or subsequently via your account settings. Consent may be withdrawn at any time.

6. Data Sharing & Disclosure

6.1 Trusted Service Providers

We share personal data with carefully selected third-party service providers who assist in operating the 666win platform. These providers are permitted to use your data only for the specific purpose for which it was shared and are bound by confidentiality obligations. Categories of providers include:

• Payment processors: bKash, Nagad, Rocket, Upay, and supported bank payment gateways — to process your BDT deposits and withdrawals.
• Identity verification providers: Third-party KYC services used to verify identity documents submitted during account verification.
• Game content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, Spribe, and other studios — to deliver game content and record game session data for dispute resolution purposes.
• Fraud prevention and security services: Specialist providers who analyse transaction patterns and technical data to identify and prevent fraudulent activity on the platform.
• Platform analytics services: Tools used to understand aggregate player behaviour and improve the 666win user experience. Analytics data is processed in aggregated or pseudonymised form wherever possible.

6.2 Legal Disclosures

We may disclose personal data to law enforcement agencies, courts, or regulatory bodies where we are required to do so by applicable law, by a binding legal order, or where disclosure is necessary to protect the safety and security of the platform and its users. We will notify you of any such disclosure where we are legally permitted to do so.

6.3 No Sale of Personal Data

666win does not sell, rent, or trade your personal data to any third party for their own commercial purposes. Any sharing of data is limited strictly to what is necessary for the operation of the services described in this policy.

6.4 Business Transfers

In the event of a merger, acquisition, or sale of all or part of 666win's business operations, personal data held about registered players may form part of the transferred assets. In such circumstances, you will be notified in advance by email and this Privacy Policy will be updated to reflect any changes in data controller identity.

7. Data Retention

We retain personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following specific retention periods:

• Active account data: Retained for the full duration of your registered account on 666win, plus a period of five (5) years following account closure to meet financial record-keeping obligations.
• KYC and identity documents: Retained for a minimum of five (5) years from the date of submission, in accordance with applicable anti-money-laundering record-keeping requirements.
• Transaction records: All deposit, withdrawal, bet, and bonus records are retained for a minimum of five (5) years from the date of the transaction.
• Customer support communications: Retained for three (3) years from the date of the last interaction, or longer if the communication relates to an unresolved dispute or legal proceeding.
• Marketing consent records: Retained for the duration of your consent and for twelve (12) months following consent withdrawal, as evidence of the consent status at any given time.
• Analytics and technical logs: Retained in aggregated or anonymised form for up to twenty-four (24) months and then purged or permanently anonymised.

When personal data is no longer required, it is securely deleted or permanently anonymised so that it can no longer be attributed to any individual.

8. Data Security

666win implements a layered approach to data security. The following technical and organisational measures are in place to protect your personal information against unauthorised access, disclosure, alteration, or destruction:

• Transport encryption: All data transmitted between your device and the 666win platform is encrypted using 256-bit SSL/TLS protocols. You can verify this by checking for the padlock icon in your browser's address bar when visiting 666win.bio.
• Encryption at rest: Sensitive data stored in 666win's databases — including identity documents, payment identifiers, and account credentials — is encrypted at rest using industry-standard encryption algorithms.
• Access controls: Access to personal data within 666win's internal systems is restricted on a strict need-to-know basis. Staff with access to player data are subject to confidentiality obligations and receive data protection training.
• Two-factor authentication: Internal system access requires multi-factor authentication. We strongly encourage players to enable two-factor authentication on their 666win accounts for additional personal security.
• Security monitoring: Our technical team monitors platform infrastructure for anomalous activity, intrusion attempts, and data breach indicators on a continuous basis.
• Third-party security audits: 666win engages independent security professionals to conduct periodic penetration testing and vulnerability assessments of its platform and data infrastructure.

9. Cookies & Tracking Technologies

9.1 What Are Cookies

Cookies are small text files placed on your device by a website you visit. They are used to remember your preferences, maintain your session, and collect analytical information about how the site is used. 666win uses cookies and similar tracking technologies (such as web beacons and local storage) on the 666win.bio platform.

9.2 Categories of Cookies We Use

• Strictly necessary cookies: These are essential for the platform to function. They include session authentication tokens, CSRF protection tokens, and load-balancing identifiers. These cookies cannot be disabled without breaking core platform functionality.
• Functional cookies: These remember your preferences — such as language and display settings — to improve your experience across sessions. They are set only with your consent.
• Analytics cookies: These collect anonymous or pseudonymised data about how players navigate the platform, which pages are most visited, and how long sessions last. This data is used to improve the 666win platform. Analytics cookies are set only with your consent.
• Security cookies: Used to detect and prevent fraud and bot activity, including identifying unusual login behaviour and suspicious transaction patterns.

9.3 Managing Cookies

You can manage or disable non-essential cookies through your browser's cookie settings. Please note that disabling functional or analytics cookies will not prevent you from using the core features of 666win, but may affect the quality of your browsing experience. Instructions for managing cookies in common browsers are available through the browser's built-in help documentation.

10. Marketing Communications

With your explicit consent at registration or through your account settings, 666win may send you promotional communications by email or SMS about offers, bonuses, new games, seasonal promotions (such as Eid, Pohela Boishakh, and IPL / BPL season campaigns), and other platform news relevant to Bangladesh players.

You may withdraw your consent to receive marketing communications at any time by:

• Clicking the "Unsubscribe" link in any marketing email you receive from 666win; or
• Updating your communication preferences in the 666win account settings dashboard; or
• Contacting our support team at [email protected] with a written request to unsubscribe.

Withdrawal of marketing consent does not affect your ability to continue using the 666win platform. You will continue to receive essential transactional communications — such as deposit confirmations, withdrawal notifications, and account security alerts — regardless of your marketing preference, as these are necessary for the operation of your account.

11. Your Privacy Rights

As a data subject, you have the following rights in relation to the personal data 666win holds about you. To exercise any of these rights, please contact us at [email protected]. We will respond to all verified requests within thirty (30) days of receipt.

• Right of access: You may request a copy of all personal data 666win holds about you, including the categories of data, the purposes for which it is processed, and the third parties with whom it has been shared.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Where correction of data held for KYC purposes is necessary, you may be asked to resubmit supporting documentation.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been unlawfully processed. This right is subject to our legal obligation to retain certain financial and identity records as described in Section 7.
• Right to restriction of processing: You may request that we restrict the processing of your data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
• Right to data portability: You may request that we provide a copy of the personal data you have provided to us in a structured, commonly used, machine-readable format, where the processing is based on consent or contractual necessity.
• Right to withdraw consent: Where processing is based on your consent (including marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to object: You may object to processing carried out on the basis of our legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, or the processing is necessary for the establishment, exercise, or defence of legal claims.

12. Children's Privacy

If you are a parent or guardian and believe that a person under 18 in your care has registered on 666win or provided personal data to us, please contact our support team at [email protected] immediately. We will investigate and take prompt action. We encourage parents and guardians in Bangladesh to make use of parental control software to restrict access to online gambling platforms.

13. Third-Party Links

The 666win platform does not contain links to external third-party websites. In the event that any third-party content is ever embedded within the platform (for example, game provider iframes), please be aware that those third-party services are governed by their own privacy policies, which are independent of this 666win Privacy Policy. We encourage you to review the privacy practices of any third-party service provider whose content you interact with.

666win is not responsible for the privacy practices or content of any third-party game provider's own platforms or websites, accessed independently of the 666win interface.

14. International Data Transfers

Some of the third-party service providers with whom we share data — including certain game content providers and fraud-prevention services — may be located or operate infrastructure outside Bangladesh. Where personal data is transferred internationally, 666win takes steps to ensure that adequate protections are in place, including contractual obligations on the receiving party to maintain standards of data protection equivalent to those applied under this policy.

By using the 666win platform, you acknowledge and consent to the transfer of your personal data as described in this section, for the purposes set out in Section 4 of this policy.

15. Changes to This Privacy Policy

666win may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, we will update the "Last Updated" date at the top of this policy and, where we hold your email address, send a notification to inform you of the key changes.

We encourage you to review this Privacy Policy periodically. Your continued use of the 666win platform following any update constitutes acceptance of the revised policy. If you do not agree to the revised terms, you may request account closure in accordance with the account termination procedure described in the 666win Terms & Conditions.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the personal data 666win holds about you, please contact our data support team using the following details:

• Email: [email protected] (plain text — not a clickable link)
• Subject line: Please include "Privacy Request" in the subject line of your email to ensure prompt routing to the correct team.
• Response time: We aim to respond to all privacy-related enquiries within 30 days of receipt. Complex requests such as full data access exports may take additional time, in which case we will notify you of the expected completion date within the initial 30-day window.
• Support hours: Our team operates 24 hours a day, 7 days a week, on Bangladesh Standard Time (BST, UTC+6).