666g Privacy Policy — Your Data, Your Rights, Our Obligations
At 666g, protecting the personal data of every player in Bangladesh is a core operational responsibility — not a legal formality. This Privacy Policy explains in plain, formal English exactly what data we collect, why we collect it, how we use it, who we share it with, and what rights you have over your own information. We encourage every player to read this document in full before creating an account or making a deposit.
Six Core Privacy Principles at 666g
These six principles summarise how 666g approaches data privacy. They are provided for convenience and do not replace the full Privacy Policy set out below.
Data Minimisation
666g collects only the personal data that is strictly necessary for account registration, identity verification, payment processing, and regulatory compliance. We do not collect data speculatively or for purposes that are not clearly disclosed in this policy. If a piece of data is not needed, we do not ask for it.
SSL Encryption on All Data
Every data exchange between your device and the 666g platform — including login credentials, deposit details, and personal information submitted during KYC — is protected by industry-standard SSL/TLS encryption. Data at rest in our systems is encrypted using AES-256. Your information cannot be intercepted in transit under normal circumstances.
No Sale of Personal Data
666g does not sell, rent, trade, or otherwise transfer your personal data to third parties for their own commercial or marketing purposes. Data is shared with third parties only where operationally necessary — for example, with KYC verification providers, payment processors, or fraud prevention services — and always under strict contractual data protection obligations.
Your Right to Access and Control
You have the right to request a copy of the personal data 666g holds about you, to correct inaccurate records, to request deletion of data that is no longer required, and to withdraw consent for marketing communications at any time. These rights can be exercised by contacting our support team at [email protected].
Defined Data Retention Periods
Personal data is not retained indefinitely. Account data is held for the duration of your active account relationship with 666g plus a post-closure retention period required for regulatory and legal compliance purposes. Transaction records are retained for a minimum of five years in line with standard financial record-keeping requirements. Marketing data is deleted upon opt-out.
Bangladesh-Context Data Handling
666g is designed specifically for the Bangladesh market. Our data handling practices reflect the payment methods, identity documentation, and communication channels used by players in Bangladesh — including bKash, Nagad, Rocket, and National ID verification. Data collected is relevant to this market context and processed in accordance with the purposes described in this policy.
Data Rights Every 666g Player Holds
Regardless of where you are located in Bangladesh, you retain the following rights over your personal data held by 666g. To exercise any of these rights, contact [email protected] with the subject line "Data Rights Request".
Right of Access
Request a full copy of the personal data 666g holds about you, including account details, transaction history, KYC records, and communications logs. We will respond within 30 days of a verified request.
Right of Rectification
If any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected. We will update the relevant records promptly and notify any third parties who received the incorrect data where feasible.
Right to Erasure
You may request deletion of personal data that is no longer required for the purposes for which it was collected. This right is subject to overriding legal and regulatory retention obligations. Data required for fraud prevention or financial records cannot be erased on request.
Right to Restrict Processing
You may ask 666g to suspend the processing of your personal data in certain circumstances — for example, while a data accuracy dispute is being resolved. During a restriction period, we will store your data but not actively process it beyond what is legally required.
Right to Data Portability
Where technically feasible, you may request a structured, machine-readable copy of the personal data you provided to 666g, so that it can be transferred to another service provider. This right applies primarily to data processed on the basis of your consent or a contract.
Right to Withdraw Marketing Consent
If you have opted in to receiving promotional communications from 666g, you may withdraw that consent at any time by contacting [email protected] or by using the unsubscribe option included in any marketing message. Withdrawal of marketing consent does not affect your account or the lawfulness of prior processing.
Table of Contents
- 1. Data Controller
- 2. Data We Collect
- 3. Purposes of Processing
- 4. Legal Basis for Processing
- 5. Sharing Your Data
- 6. Cookies and Tracking
- 7. Data Retention
- 8. Security Measures
- 9. Minors and Age Restriction
- 10. International Data Transfers
- 11. Exercising Your Rights
- 12. Changes to This Policy
- 13. Contact and Complaints
1 Data Controller
For the purposes of this Privacy Policy, the data controller responsible for the personal data of registered players and website visitors is 666g, operating the platform at https://666g.io. The data controller determines the purposes and means of processing personal data collected through account registration, platform use, payment transactions, and customer support interactions.
All data protection enquiries, rights requests, and formal privacy complaints should be directed to our dedicated privacy contact point at [email protected] with the subject line "Privacy Request". We will acknowledge all privacy communications within 48 hours of receipt.
2 Data We Collect
666g collects personal data through several channels, including account registration forms, identity verification submissions, payment transactions, platform usage activity, and customer support interactions. The categories of data we collect are described in the table below.
| Data Category | Specific Data Points | Collection Method |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality, National ID number or passport number | Registration form, KYC submission |
| Contact Data | Mobile number, email address, city of residence (e.g., Dhaka, Chittagong, Sylhet) | Registration form, account settings |
| Financial Data | bKash / Nagad / Rocket / Upay account number, deposit amounts, withdrawal amounts, transaction history | Payment processor integration |
| Identity Verification Documents | Scanned copy or photograph of National ID card, passport, or driving licence; selfie for liveness verification | KYC upload portal |
| Technical Data | IP address, device type, operating system, browser type and version, session timestamps | Automated collection via platform logs |
| Usage Data | Games played, bets placed, bet amounts, win/loss records, bonus claims, session duration | Platform activity tracking |
| Communications Data | Live chat transcripts, support email correspondence, complaint records | Customer support system |
| Marketing Preferences | Opt-in / opt-out status for promotional communications, preferred notification channel | Account settings, consent forms |
We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health records, or biometric data beyond the liveness check used solely for identity verification purposes.
3 Purposes of Processing
666g processes personal data for the following clearly defined purposes:
- Account Registration and Management: To create, maintain, and administer your 666g account, including password reset, session management, and account settings.
- Identity and Age Verification (KYC): To verify that you are who you claim to be and that you are aged 21 or above, in compliance with our responsible gaming obligations and internal anti-fraud policies.
- Payment Processing: To facilitate deposits via bKash, Nagad, Rocket, and Upay, and to process withdrawal requests to your verified payment method.
- Platform Operation and Personalisation: To deliver the betting and casino game services you use, to record your wager history, and to provide a consistent, personalised experience across sessions.
- Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, unauthorised account access, and abuse of promotional offers.
- Regulatory and Legal Compliance: To retain transaction and identity records as required by applicable laws, and to respond to lawful requests from competent authorities.
- Customer Support: To handle your enquiries, resolve disputes, process complaints, and provide responsible gaming assistance.
- Marketing Communications (with consent): To send you promotional offers, bonus notifications, and seasonal promotions related to 666g products, where you have opted in to receive such communications.
- Platform Improvement: To analyse aggregated, anonymised usage data to improve platform performance, game selection, and user experience.
666g does not use your personal data for automated decision-making that produces legal or similarly significant effects without a human review step. Fraud flagging systems alert our security team; a human agent reviews all cases before any account action is taken.
4 Legal Basis for Processing
666g processes personal data under one or more of the following legal bases, depending on the specific processing activity:
- Contractual Necessity: Processing required to perform our contract with you — including account management, payment processing, and service delivery — is carried out on the basis that it is necessary for the fulfilment of that contract.
- Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and internal analytics is carried out on the basis of 666g's legitimate business interests, provided those interests are not overridden by your data protection rights.
- Legal Obligation: Processing required to comply with applicable laws — including financial record-keeping, identity verification, and responses to lawful authority requests — is carried out on the basis of legal obligation.
- Consent: Processing for direct marketing communications is carried out only where you have given clear, affirmative consent. You may withdraw this consent at any time without affecting any other aspect of your account.
5 Sharing Your Data
666g does not sell, rent, or trade your personal data. We share data with third parties only in the following limited, controlled circumstances:
- KYC and Identity Verification Providers: Accredited third-party services that verify the authenticity of identity documents and confirm player age. These providers receive only the data necessary to complete the verification task and are contractually prohibited from using it for any other purpose.
- Payment Processors: Mobile financial service providers (bKash, Nagad, Rocket, Upay) and bank transfer gateways receive transactional data necessary to process deposits and withdrawals. These providers operate under their own regulated data protection frameworks.
- Fraud Prevention and Security Partners: Specialist fraud detection services that analyse transaction and behavioural patterns to identify suspicious activity. Data shared is limited to the technical and transactional data required for risk scoring.
- Game Technology Providers: Casino and betting game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive anonymised session identifiers necessary to operate their game engines within the 666g platform. These providers do not receive your identity or payment data.
- Legal and Regulatory Authorities: In the event of a lawful, documented request from a competent authority, 666g will disclose the minimum personal data required to comply with that obligation. We will notify you of such a disclosure where legally permitted to do so.
- Professional Advisors: Legal counsel, auditors, and compliance consultants who are bound by professional confidentiality obligations may access personal data on a strictly need-to-know basis in connection with specific advisory engagements.
All third parties with whom 666g shares personal data are required to implement appropriate technical and organisational security measures and are prohibited from using your data for purposes beyond those specified in their contract with 666g.
6 Cookies and Tracking Technologies
The 666g platform uses cookies and similar tracking technologies to maintain session continuity, remember your login state, and collect anonymised usage analytics. The following categories of cookies are used:
- Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies, security tokens, and load-balancing identifiers. They cannot be disabled without disrupting core platform functionality.
- Functional Cookies: Used to remember your preferences such as language settings, display preferences, and responsible gaming tool configurations between sessions.
- Analytics Cookies: Used to collect aggregated, anonymised data about how players navigate and use the platform. This data informs product improvements and is not linked to individual identities.
- Marketing Cookies: Used only where you have provided consent, to deliver promotional messages relevant to your interests and to measure the effectiveness of marketing campaigns.
You may manage your cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from accessing core platform features, though some personalisation functions may be reduced. Strictly necessary cookies cannot be disabled via browser settings as they are required for platform security.
7 Data Retention
666g retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, subject to overriding legal, regulatory, and contractual obligations. The following retention periods apply as a general guide:
- Active Account Data: Retained for the full duration of your active account relationship with 666g, plus a post-closure period of up to 5 years for regulatory compliance purposes.
- Transaction and Financial Records: Retained for a minimum of 5 years from the date of each transaction, in line with standard financial record-keeping requirements.
- KYC and Identity Documents: Retained for the duration of the account relationship plus 5 years post-closure, to support any future regulatory audit or legal inquiry.
- Customer Support Communications: Retained for up to 3 years from the date of the most recent support interaction, to support dispute resolution and quality assurance.
- Marketing Data: Retained until you withdraw your marketing consent, after which it is deleted within 30 days. Opt-out records are retained indefinitely to prevent accidental re-enrolment.
- Technical and Log Data: Retained for up to 12 months for security monitoring and fraud detection purposes, then anonymised or deleted.
When personal data is no longer required and no legal retention obligation applies, it is securely deleted or anonymised so that it can no longer be linked to any individual.
8 Security Measures
666g implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:
- SSL/TLS encryption for all data in transit between your device and our servers.
- AES-256 encryption for sensitive data stored at rest, including identity documents and payment method references.
- Multi-factor authentication (MFA) options for player account access, including OTP verification via your registered mobile number.
- Role-based access controls that limit internal staff access to personal data on a strict need-to-know basis.
- Continuous monitoring of platform infrastructure for unusual activity, unauthorised access attempts, and security incidents.
- Regular security reviews and vulnerability assessments of platform systems and third-party integrations.
- Staff training on data protection obligations and secure data handling procedures.
Despite these measures, no internet-based system can guarantee absolute security. If you have reason to believe your 666g account has been compromised, please contact [email protected] immediately so that your account can be secured without delay.
In the event of a data security incident that poses a risk to your personal data, 666g will notify affected players without undue delay and will take all reasonable steps to contain and remediate the incident.
9 Minors and Age Restriction
The 666g platform is strictly restricted to individuals aged 21 years or older. We do not knowingly collect personal data from individuals under the age of 21. If 666g becomes aware that personal data has been collected from a person under 21, the relevant account will be immediately suspended and all associated data will be securely deleted, subject to any legal obligation to retain evidence of the underage registration attempt.
Parents, guardians, and responsible adults who believe that a minor may have accessed or attempted to register on the 666g platform are encouraged to contact us immediately at [email protected] so that the matter can be investigated and resolved promptly.
10 International Data Transfers
In some circumstances, personal data collected by 666g may be transferred to, or processed by, servers or service providers located outside Bangladesh. This may occur in connection with KYC verification providers, game technology partners, or cloud infrastructure services.
Where personal data is transferred internationally, 666g ensures that appropriate safeguards are in place, including standard contractual clauses, data processing agreements, and, where applicable, adequacy assessments of the receiving country's data protection framework. We do not transfer personal data to jurisdictions that do not provide an adequate level of data protection without appropriate safeguards in place.
11 Exercising Your Rights
To exercise any of the data rights described in this Privacy Policy — including access, rectification, erasure, restriction of processing, data portability, or withdrawal of marketing consent — please send a written request to [email protected] with the subject line "Data Rights Request". Please include your registered mobile number or email address so that we can verify your identity before processing the request.
666g will respond to all verified data rights requests within 30 calendar days of receipt. In cases of particular complexity or volume, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reasons for it. There is no charge for exercising your data rights, unless a request is manifestly unfounded or repetitive, in which case a reasonable administrative fee may apply.
12 Changes to This Policy
666g reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, platform features, applicable laws, or regulatory requirements. When material changes are made, we will notify registered players by email or via a prominent platform notification at least 7 days before the revised policy takes effect.
The most current version of this Privacy Policy is always available at https://666g.io/privacy-policy. The effective date at the top of this document indicates when the policy was last reviewed. Your continued use of the 666g platform after any update constitutes your acknowledgement of the revised policy. If you do not accept a material change, you should contact us to discuss your options before the effective date.
13 Contact and Complaints
For all privacy-related enquiries, data rights requests, or concerns about how 666g handles your personal data, please contact us at [email protected]. Our support team is available 24 hours a day, 7 days a week, and our dedicated privacy team responds to data-related enquiries within 48 hours.
If you are not satisfied with 666g's response to a privacy complaint, or if you believe that your personal data is being processed in a manner that does not comply with applicable data protection principles, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction. 666g cooperates fully with regulatory investigations and is committed to resolving all privacy concerns in a fair and transparent manner.
All privacy correspondence must be submitted in English to ensure accurate documentation and timely resolution. Communications submitted in other languages may be subject to delays while translation is arranged.
Ready to Play?
Join 666g — Bangladesh's Trusted Gaming Platform
Your data is protected, your bets are fair, and your withdrawals are fast. Explore cricket betting, casino games, and slots — all in BDT via bKash and Nagad. For adults aged 21 and above only.
21+ only. For entertainment purposes only. Please gamble responsibly. SSL secured.