66xz Privacy Policy

1. Data We Collect

When you register a 66xz account, deposit funds, request a withdrawal, or contact our support team, you provide us with certain personal information. The categories of data we collect include:

Information You Provide Directly

Information We Collect Automatically

When you access and use the 66xz platform, our systems automatically record certain technical and behavioural data. This data is collected to maintain platform security, detect fraud, and improve the overall user experience. Automatically collected data includes:

• Device and network data: IP address, device type, operating system, browser type and version, screen resolution, and mobile carrier information.
• Session and usage data: Pages visited, time spent on each page, games played, bets placed, login and logout timestamps, and navigation paths through the platform.
• Transaction data: Deposit and withdrawal amounts, transaction timestamps, payment method used, and transaction status records.
• Cookie and tracking data: Session identifiers, preference cookies, and anonymised analytics data. See Section 4 for full details on our cookie use.
• Geolocation data: Approximate geographic location derived from your IP address, used for fraud detection and jurisdictional eligibility checks. We do not collect precise GPS-level location data.

We do not knowingly collect personal data from individuals under the age of 18. If we become aware that we have inadvertently collected personal data from a minor, we will delete that data immediately and close the associated account. If you believe a minor has provided us with their data, please contact us at [email protected] without delay.

2. How We Use Your Data

66xz uses the personal data we collect for specific, legitimate purposes directly related to operating the platform and providing our services to you. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which we use your data are set out below.

• Account management: To create and maintain your 66xz account, verify your identity and age, manage your login credentials securely, and communicate important account-related information such as transaction receipts, security alerts, and policy updates.
• Processing transactions: To process your deposits and withdrawal requests via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and any other accepted payment method. Transaction data is retained as required to maintain accurate financial records.
• Platform security and fraud prevention: To monitor account activity for signs of unauthorised access, detect and prevent fraud, money laundering, collusion, and bonus abuse, and to protect the integrity of the 66xz gaming environment for all players.
• Legal and regulatory compliance: To comply with applicable anti-money-laundering (AML) obligations, age verification requirements, and any other legal or regulatory duty to which 66xz is subject. This may include retaining certain records for prescribed periods.
• Customer support: To respond to your enquiries, resolve disputes, process complaints, and improve the quality of our support services using anonymised analysis of past interactions.
• Marketing communications (opt-in only): To send you information about 66xz promotions, bonus offers, new game launches, and seasonal campaigns — but only if you have explicitly opted in to receive such communications. You can withdraw your consent and unsubscribe at any time by contacting [email protected].
• Platform improvement: To analyse aggregated, anonymised usage data to understand how players interact with the platform, identify areas for improvement, and develop new features that better serve our Bangladesh-based player community.
• Responsible gaming: To monitor for patterns of play that may indicate problem gambling behaviour and, where appropriate, reach out to players with information about responsible gaming tools and resources.

66xz will not use your personal data for any automated decision-making process that has a significant legal or similarly significant effect on you without first providing appropriate notice and, where required, obtaining your consent.

3. Data Sharing & Disclosure

66xz does not sell, rent, or otherwise transfer your personal data to unaffiliated third parties for their own independent commercial use. We share your data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

Payment Processing Partners

To process your deposits and withdrawals, 66xz shares relevant transaction and identity data with our payment processing partners, including mobile financial service providers such as bKash, Nagad, Rocket, and Upay, as well as card processing networks (Visa, Mastercard). These partners receive only the minimum data required to complete the transaction and are bound by their own privacy and security obligations.

Identity Verification Services

When you complete our Know Your Customer (KYC) or age verification process, your identity documents and associated data may be processed by a third-party identity verification provider engaged by 66xz. This provider operates under strict data processing agreements and may not use your data for any purpose other than identity verification on behalf of 66xz.

Legal and Regulatory Disclosure

66xz may be required to disclose your personal data to law enforcement agencies, regulatory bodies, financial intelligence units, or other government authorities where we are legally obligated to do so. We will always seek to limit such disclosures to the minimum data necessary and, where legally permissible, will notify you of any such request.

Business Transfers

In the event that 66xz undergoes a merger, acquisition, asset sale, or restructuring, your personal data may be transferred to the relevant successor entity as part of that transaction. We will notify you in advance of any such transfer and will ensure that the receiving entity is bound by privacy obligations no less protective than those set out in this policy.

Aggregate and Anonymised Data

66xz may share aggregated, fully anonymised statistical data (such as total number of active players by region, average deposit amounts, or most-played game categories) with business partners, analytics providers, or in published reports. This data cannot be used to identify any individual player and is not subject to the same protections as personal data.

4. Cookies & Tracking Technologies

The 66xz platform uses cookies and similar tracking technologies (including local storage and session storage) to deliver a functional, personalised, and secure experience. The categories of cookies we use are described below.

Strictly necessary cookies cannot be disabled as they are essential to the operation of the 66xz platform. All other cookie categories can be managed through your browser settings. Most modern browsers allow you to view, block, or delete cookies via their privacy or settings menu. Please note that disabling functional or analytics cookies may affect the quality of your experience on the platform but will not prevent you from accessing core services.

66xz does not use third-party advertising cookies or allow advertising networks to place cookies on your device through our platform. We do not engage in cross-site behavioural tracking for advertising purposes.

5. Data Security & Retention

66xz takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include, but are not limited to:

• TLS/SSL encryption for all data transmitted between your browser or app and our servers.
• Encryption at rest for sensitive fields including passwords (hashed with a strong one-way algorithm), payment details, and identity document data.
• Role-based access controls ensuring that only authorised personnel with a documented business need can access personal data, with all access events logged and auditable.
• Two-factor authentication (2FA) available for player accounts and mandatory for all internal system access by 66xz staff.
• Regular security reviews of platform infrastructure, code dependencies, and third-party integrations to identify and remediate vulnerabilities.
• Incident response procedures that specify how we detect, contain, and communicate any data breach, including notification to affected players within a reasonable timeframe.

Data Retention

66xz retains your personal data for as long as your account remains active and for a reasonable period thereafter to allow for the resolution of any outstanding transactions, disputes, or legal obligations. Specific retention periods are as follows:

• Account and identity data: Retained for the lifetime of your account plus a minimum of 5 years following account closure, to comply with anti-money-laundering record-keeping requirements.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction.
• Support communications: Retained for up to 3 years from the date of the interaction unless part of an ongoing dispute or legal matter.
• Marketing preferences: Retained until you withdraw consent. Upon withdrawal, your data is removed from marketing lists within 10 business days.
• Analytics data: Retained in anonymised, aggregated form indefinitely. Personally identifiable usage data is anonymised within 13 months of collection.

When retention periods expire and there is no legal basis for continued storage, 66xz securely deletes or anonymises the relevant personal data. Deletion is carried out using industry-standard data erasure procedures to ensure that the data cannot be recovered.

6. Your Privacy Rights

As a player on the 66xz platform, you have a number of rights in relation to the personal data we hold about you. These rights are summarised below. To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Request" and include your registered account username. We will acknowledge your request within 5 business days and provide a substantive response within 30 days.

• Right of Access: You may request a copy of the personal data that 66xz holds about you, along with information about how it is being used. This is sometimes called a Subject Access Request (SAR).
• Right to Rectification: If any of the personal data we hold about you is inaccurate or incomplete, you may request that we correct or update it. For straightforward corrections (such as a misspelled name), you can also update your account details directly through the account settings section of the platform.
• Right to Erasure: In certain circumstances, you may request that 66xz delete the personal data we hold about you. Note that this right is subject to legal and regulatory retention obligations — we may be required to retain certain data even after an account is closed, as described in Section 5.
• Right to Restrict Processing: You may request that we restrict the processing of your data in certain circumstances, for example while a dispute about the accuracy of your data is being resolved.
• Right to Object: You may object to our use of your personal data for direct marketing purposes at any time. You may also object to any processing based on our legitimate interests, though we may be able to demonstrate overriding legitimate grounds in some cases.
• Right to Withdraw Consent: Where we are processing your personal data on the basis of your consent (for example, for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to the withdrawal.
• Right to Data Portability: Where technically feasible and legally applicable, you may request a structured, machine-readable copy of the personal data you have provided to us directly, for the purpose of transferring it to another service provider.

We will not charge a fee for handling any privacy request in standard circumstances. If a request is manifestly unfounded or excessive, particularly if it is repetitive in nature, we reserve the right to charge a reasonable administrative fee or decline to process the request, in which case we will explain our reasons in writing.

7. Third-Party Services

The 66xz platform integrates with a number of third-party service providers to deliver core functionality. These include game content providers (such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming), payment processing partners, and platform infrastructure providers. When you interact with features powered by these third-party services, the relevant provider may independently collect certain technical data about your interaction with their content, subject to their own privacy policies.

66xz carefully evaluates all third-party service providers before integration and requires that they maintain appropriate data protection standards and enter into formal data processing agreements with us. We do not permit third-party game providers to use data collected within the 66xz platform environment for their own independent marketing or profiling purposes.

The 66xz platform may contain links to external pages, for example in support documentation or in game provider information sections. 66xz is not responsible for the privacy practices of any third-party website and encourages you to review the privacy policy of any external site you visit. This Privacy Policy applies solely to data collected and processed by 66xz on the 66xz platform at https://66xz.app.

Our live chat support feature may be powered by a third-party customer support platform. Chat transcripts are stored securely and are used solely for the purpose of resolving your support query and improving the quality of our support service. They are not used for advertising purposes and are not shared with unaffiliated third parties.

8. Policy Updates & Contact

66xz reviews and updates this Privacy Policy periodically to reflect changes in our data practices, changes in applicable law, and feedback from our players. When we make a material change to this policy, we will update the "Last updated" date at the top of this page and, where the change is significant, we will notify you directly via your registered email address or via an in-platform notification.

Minor changes — such as corrections to wording, improved clarity, or formatting updates — may be made without direct notification. We encourage you to review this page periodically to stay informed about how 66xz protects your personal data. Your continued use of the 66xz platform after any update to this policy constitutes your acceptance of the revised terms.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data that 66xz holds about you, please contact our support team using the details below. We are committed to resolving all privacy-related enquiries promptly and transparently.

This Privacy Policy was last reviewed and approved on 1 January 2026 and is effective from that date. All previous versions of the 66xz Privacy Policy are hereby superseded in their entirety.