Your Privacy at 666det

When you register for a 666det account and use the platform, we collect certain categories of personal information. We collect only the data that is genuinely necessary to provide a safe, compliant, and high-quality betting and gaming experience to players in Bangladesh. Below is a full breakdown of the categories of data we may collect.

Registration and Identity Data

When you create your 666det account, we ask for your full legal name, date of birth, Bangladesh mobile number, and a valid email address. This information is required to establish your identity, verify your age (minimum 18 years), and link your account to a unique, verifiable individual. If you are asked to complete KYC (Know Your Customer) verification at any point — for example, before processing your first withdrawal — we may also request a scan or photograph of a government-issued identity document such as your National Identity Card (NID) or passport.

Financial and Transaction Data

To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, bank transfer, or USDT, we collect the payment method identifier associated with each transaction (such as your bKash or Nagad registered mobile number, or your bank account number). We record transaction amounts, timestamps, and reference IDs. We do not store full card numbers, mobile banking PINs, or private cryptocurrency keys.

Technical and Device Data

When you access 666det via a browser or mobile device, our servers automatically log certain technical data. This includes your IP address, browser type and version, operating system, device type, screen resolution, referring URL, and session duration. This data is used for fraud detection, platform security, and performance optimisation — not for building advertising profiles.

Behavioural and Gaming Data

We record your activity on the 666det platform, including games played, bet amounts and outcomes, sports markets viewed, session timestamps, and feature interactions. This data is used to detect problem gambling patterns (as part of our Responsible Gaming obligations), to personalise your in-platform experience, and to comply with AML monitoring requirements.

Communications Data

If you contact 666det support via live chat or email, we retain a record of those communications. This allows our support team to provide consistent service across multiple interactions, and enables us to investigate any complaints or disputes accurately.

Summary of Data Categories

666det processes your personal data only for legitimate, clearly defined purposes. We do not use your data for any purpose that was not disclosed at the time of collection, and we do not apply automated decision-making that produces legal or similarly significant effects without human oversight. The following are the specific purposes for which 666det processes your personal data.

Account Management

Your registration data is used to create and maintain your 666det account, authenticate your identity at login, and ensure that only you can access your balance and betting history. Mobile OTP verification at 666det Login and at sensitive account actions (such as password resets and withdrawal requests) relies on your registered mobile number.

Payment Processing

Financial data is used exclusively to process your deposit and withdrawal transactions through the payment method you have selected. We pass the minimum necessary data to the relevant payment provider (bKash, Nagad, Rocket, Upay, or the relevant bank) to complete each transaction. We do not share your financial data with any party beyond the immediate payment processing chain.

Fraud Prevention and AML Compliance

Technical data (IP address, device fingerprint) and transaction data are analysed by 666det's risk management systems to detect patterns associated with fraud, money laundering, account takeover attempts, and collusion. Where suspicious activity is detected, 666det may suspend an account pending investigation and, where legally required, report the activity to the relevant authorities.

Responsible Gaming Monitoring

Gaming behaviour data — including bet frequency, session length, deposit velocity, and loss patterns — is monitored against responsible gaming benchmarks. If your behaviour matches the profile of a player experiencing gambling-related harm, 666det's Responsible Gaming team may contact you proactively, apply account restrictions, or suggest self-exclusion tools. This processing is carried out in your interest and forms part of our duty of care as a platform.

Customer Support

Communications data (support chat logs and emails) is used to resolve your support requests accurately and to maintain a consistent service record. Support interactions are reviewed periodically for quality assurance and staff training purposes. Individual chat logs are not shared outside the 666det support team.

Platform Improvement and Analytics

Aggregated, anonymised technical and behavioural data is used to analyse platform performance, identify popular game categories, optimise page load speeds, and guide product development. This analysis uses anonymised data sets — it does not involve profiling individual players for commercial purposes.

Promotional Communications

If you have not opted out of marketing communications, 666det may send you promotional emails and SMS messages about new games, bonus offers, BPL cricket specials, seasonal promotions (Eid, Pohela Boishakh), and platform updates. You may opt out of promotional communications at any time by contacting [email protected]. Opting out of marketing does not affect transactional or security communications.

666det does not sell your personal data. We share your data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose. All third parties who receive 666det player data are bound by confidentiality obligations and are prohibited from using your data for any purpose beyond what we have authorised.

Payment Providers

To process your transactions, 666det shares the minimum necessary payment data with bKash, Nagad, Rocket, Upay, partnered Bangladesh banks (City Bank, BRAC Bank, Islami Bank, Dutch-Bangla Bank, Sonali Bank), and USDT network infrastructure. Each payment provider operates under its own privacy policy, which governs how that provider handles your data within their own systems.

Game Technology Providers

Live casino games and slots on 666det are powered by third-party providers including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive technical session data (such as a session token and bet amount) necessary to deliver the game experience. They do not receive your full name, NID, or bank details.

Identity Verification Services

When KYC verification is required, 666det may use a third-party identity verification service to authenticate your submitted documents. The verification provider confirms whether the document is genuine and whether it matches the account details on file. The verification provider is contractually prohibited from retaining your identity documents beyond the verification process.

Legal and Regulatory Disclosure

666det may disclose your personal data to law enforcement agencies, financial intelligence units, or other competent authorities where we are legally required to do so — for example, in response to a lawful request related to suspected money laundering, fraud, or match-fixing investigation. Such disclosures are made only to the extent required by applicable law and do not require your prior consent.

Business Transfers

In the event that 666det's business operations are transferred, merged, or acquired by a third party, player data held by 666det may form part of that transfer. In such circumstances, the acquiring entity will be required to honour the data protection commitments set out in this Privacy Policy. You will be notified of any such change via the email address registered on your account.

666det uses a limited set of cookies and similar technologies on the platform. These technologies are used strictly to make the platform function correctly and securely — not to track your activity across other websites or build an advertising profile.

Strictly Necessary Cookies

These cookies are essential for the 666det platform to operate. They include your session authentication token (which keeps you logged in during a browsing session), CSRF protection tokens (which prevent cross-site request forgery attacks), and security cookies used by our fraud detection systems. These cookies cannot be disabled without breaking the platform's core functionality.

Performance and Analytics Cookies

666det uses anonymised performance tracking to understand how players navigate the platform — which pages load slowly, which game categories are most visited, and where players encounter errors. This data is aggregated and does not identify individual users. It is used solely to improve the 666det platform.

Preference Cookies

These cookies remember your platform preferences, such as your most recently viewed game category, display settings, and language selection. They persist across sessions so that you do not have to reconfigure the platform each time you log in.

What We Do Not Use

666det does not use third-party advertising cookies, retargeting pixels, social media tracking pixels (Facebook Pixel, Twitter Pixel, TikTok Pixel, etc.), or any cross-site tracking technology that follows your activity outside of the 666det domain. If you clear your browser cookies, the only effect on the 666det platform will be that you will need to log in again and your preference settings will be reset.

666det employs a multi-layered security architecture designed to protect your personal data against unauthorised access, data breach, and misuse. While no digital platform can guarantee absolute security against all conceivable threats, 666det's security posture reflects current industry best practices for online gaming and financial services platforms.

Transport Security

All connections to the 666det platform are enforced over HTTPS using TLS 1.2 or higher. Unencrypted HTTP connections are automatically redirected to HTTPS. The 666det domain uses HTTP Strict Transport Security (HSTS) to prevent protocol downgrade attacks. These measures ensure that your login credentials, session tokens, and payment data cannot be intercepted in transit.

Access Controls

Internal access to player data is restricted on a strict need-to-know basis. 666det staff members are assigned role-based access permissions, and access to sensitive player records (identity documents, transaction histories) requires elevated authorisation. All administrative access is logged and reviewed periodically by the security team.

Password Security

666det account passwords are stored in hashed form using a strong one-way cryptographic algorithm. 666det staff cannot see your plain-text password — they can only reset it. If you receive a communication purporting to be from 666det that asks for your full password, treat it as a phishing attempt and report it to [email protected] immediately.

Breach Response

In the event that a data security incident occurs that affects your personal data, 666det will notify affected players via their registered email address as soon as practically possible following discovery of the incident. The notification will describe the nature of the breach, the categories of data affected, and the steps 666det is taking to contain the incident and prevent recurrence.

666det retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal or regulatory obligations. The following retention periods apply to the main categories of data we hold.

• Account and Identity Data: Retained for the duration of your active account and for a minimum of 5 years following account closure, in order to comply with AML record-keeping requirements.
• Transaction and Financial Data: Retained for a minimum of 5 years from the date of each transaction, in accordance with financial record-keeping obligations applicable to online payment platforms operating in Bangladesh.
• KYC Documents: Identity documents submitted for KYC verification are retained for 5 years from the date of submission or from the date of account closure, whichever is later. Documents are stored in an encrypted document management system with access restricted to the compliance team.
• Gaming and Behavioural Data: Betting and gaming history is retained for the lifetime of your active account and for 2 years following account closure. Anonymised, aggregated analytics data derived from gaming behaviour may be retained indefinitely as it can no longer be linked to an individual.
• Support Communications: Live chat logs and email correspondence are retained for 2 years from the date of the interaction, or until the associated dispute or complaint is fully resolved, whichever is later.
• Technical and Log Data: Server access logs (IP addresses, session data) are retained for 90 days, after which they are automatically purged unless retained for an active security investigation.

When personal data has reached the end of its applicable retention period and there is no ongoing legal or regulatory requirement to retain it further, 666det will securely delete or anonymise it so that it can no longer be linked to you as an individual.

As a 666det player, you hold a number of rights in relation to the personal data we hold about you. 666det is committed to honouring these rights promptly and transparently. To exercise any of the rights described below, submit a written request to [email protected] with the subject line "Data Rights Request" and include your registered account username and mobile number so we can verify your identity before processing the request.

Right of Access

You have the right to request a copy of all personal data that 666det holds about you. We will provide this in a structured, readable format within 30 days of verifying your request. The data export will cover your registration data, transaction history, gaming history, KYC records, and any support communications associated with your account.

Right to Rectification

If any personal data that 666det holds about you is inaccurate or incomplete, you have the right to request that we correct it. For account details such as your registered mobile number or email address, you can update these directly within your Account Settings. For identity documents and KYC data, contact [email protected] to initiate a correction.

Right to Erasure

You may request that 666det delete your personal data. This right applies where the data is no longer necessary for the purposes it was collected, where you withdraw your consent (for consent-based processing), or where the processing was unlawful. Note that erasure requests cannot override our legal obligation to retain certain data for AML and financial record-keeping purposes as described in the Data Retention section above. In such cases, we will inform you of exactly which data must be retained and why.

Right to Restriction of Processing

In certain circumstances — for example, while we are verifying the accuracy of data you have contested — you may request that we restrict our processing of your data to storage only, without using it for any other purpose.

Right to Data Portability

You may request that 666det provide your personal data in a machine-readable format (such as JSON or CSV) so that you can transfer it to another service provider of your choice. This right applies to data you provided to us directly and that we process on the basis of your consent or to perform a contract with you.

Right to Object to Marketing

You have the absolute right to object to 666det processing your data for direct marketing purposes. To opt out of promotional emails and SMS from 666det, send an email to [email protected] with the subject line "Marketing Opt-Out" and include your registered mobile number. Opt-out requests will be processed within 5 business days.

666det reviews and updates this Privacy Policy periodically to reflect changes in our data practices, technology, legal requirements, or platform features. The effective date at the top of this page indicates when the current version was last revised. When we make material changes to the Privacy Policy — particularly changes that affect your rights or how we use your data — we will notify registered players via email at least 7 days before the changes take effect.

Minor or administrative updates (such as clarifying existing language without changing substance) may be applied without advance notice, though the effective date on this page will always reflect the most recent revision. Your continued use of the 666det platform after a Privacy Policy update constitutes your acceptance of the revised policy.

Contact for Privacy Matters

All privacy-related enquiries, data rights requests, and concerns about how 666det handles your personal data should be directed to the 666det support team at [email protected]. Please include "Privacy" in your email subject line so your message is routed to the appropriate team member promptly. Our support team is available 24 hours a day, 7 days a week, and responds to privacy-related requests in English.

If you are contacting us about a data rights request (access, rectification, erasure, portability, or marketing opt-out), please include your registered 666det account username and mobile number to assist us in verifying your identity before we process your request.