666ed Privacy Policy — How We Handle Your Data

This Privacy Policy ("Policy") describes how 666ed ("Platform", "We", "Us") collects, processes, stores and protects the personal information of users ("Player", "You") who register for and use the 666ed online casino and sports betting platform at https://666ed.app. This Policy forms part of the Terms and Conditions, which you accept when you create an account. We are committed to handling your personal data with transparency, care and in a manner consistent with good data-protection practice.

By registering an account on 666ed, you acknowledge that you have read this Policy and consent to the collection and processing of your personal data as described. If you do not agree with the terms of this Policy, you should not register an account or use the platform.

666ed collects personal data through three primary channels: information you provide directly when registering and using the platform, information generated automatically by your use of the platform, and information received from trusted third-party partners such as payment processors and identity verification providers. The specific categories of data we collect are as follows.

• Registration information: full legal name, date of birth, Bangladeshi mobile phone number, and chosen username and password.
• Identity verification documents (KYC): national identity card, passport or other government-issued photo ID; proof of address where required.
• Financial data: bKash, Nagad, Rocket or Upay account identifiers; bank card details (card number, expiry, CVV — processed exclusively by our PCI-DSS compliant payment partners); transaction records including deposit amounts, withdrawal requests and payment timestamps.
• Usage and behavioural data: pages visited, games played, betting history, session start and end times, wager amounts, game outcomes, and in-app navigation paths.
• Technical data: IP address, device model, operating system, browser type and version, mobile network operator, screen resolution, and session cookie identifiers.

We do not collect sensitive personal data such as biometric data, ethnic origin, political opinions, religious beliefs or health information unless specifically required for a legally mandated process.

666ed uses your personal data only for specific, legitimate purposes related to the operation of the platform and our obligations as a service provider. We do not use your data for purposes beyond those described in this Policy. The specific purposes for which we process your data are as follows.

• Account creation, authentication and management: to register your account, verify your identity, process logins, and maintain your account settings and preferences.
• Payment processing: to facilitate deposits via bKash, Nagad, Rocket, Upay and card networks, and to process withdrawal requests to your nominated payment method.
• KYC and regulatory compliance: to verify your age and identity as required by our internal policies, to screen against sanctions lists, and to comply with applicable anti-money laundering obligations.
• Responsible gaming monitoring: to identify patterns of gambling behaviour that may indicate problem gambling, and to enforce deposit limits and self-exclusion settings at a player's request.
• Platform improvement and analytics: to analyse aggregated usage data in order to improve the performance, reliability and user experience of the platform.
• Customer support: to respond to your support requests, resolve disputes, and communicate with you regarding your account, transactions or promotions.

666ed processes your personal data on one or more of the following legal bases, depending on the specific purpose of the processing activity.

• Contractual necessity: processing required to fulfil the Terms and Conditions you accepted when registering, including account management, payment processing and service delivery.
• Legal obligation: processing required to comply with applicable laws and regulations, including KYC verification, anti-money laundering screening and the prevention of fraud.
• Legitimate interests: processing for purposes such as fraud prevention, security monitoring, platform analytics and responsible gaming enforcement, where those interests are not overridden by your own privacy rights.
• Consent: where you have given explicit consent to a specific processing activity, such as receiving promotional communications. You may withdraw this consent at any time by contacting support.

666ed does not sell, rent or trade your personal data to third parties for their own marketing or commercial purposes. We share your data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.

• Payment service providers: bKash, Nagad, Rocket, Upay and card processing partners receive the minimum data necessary to process your deposits and withdrawals securely.
• Identity verification providers: KYC partners receive identity documents and personal details solely for the purpose of verifying your identity and age as required by our policies.
• Game and technology providers: technical session data may be shared with game providers such as Evolution Gaming and Pragmatic Play solely to deliver the games you play.
• Regulatory and law-enforcement authorities: we may be required by law to disclose personal data to regulators, tax authorities or law-enforcement agencies. 666ed will comply with lawful requests while taking reasonable steps to protect player privacy.

All payment transactions on 666ed are processed by PCI-DSS compliant payment service providers. 666ed does not store full card numbers, CVV codes or full bKash/Nagad PIN details on its own servers. When you initiate a deposit or withdrawal, your payment credentials are transmitted directly to the payment processor via a secure, encrypted connection. 666ed retains only transaction metadata — amounts, timestamps, reference numbers and payment method types — necessary for account management, dispute resolution and regulatory compliance.

We recommend that you never share your bKash, Nagad or Rocket account PIN or password with anyone, including 666ed support staff. 666ed will never ask you for your mobile banking PIN. Any communication claiming to be from 666ed and requesting your mobile banking credentials should be treated as fraudulent and reported to our support team immediately.

666ed uses cookies and similar technologies to operate the platform, remember your session, maintain security, and analyse usage patterns. Cookies are small text files stored on your device by your browser. We use the following categories of cookies.

• Strictly necessary cookies: required for the platform to function. These enable your session to remain active, keep you logged in, and prevent cross-site request forgery. They cannot be disabled without breaking the platform.
• Functional cookies: remember your language preference, display settings and responsible gaming configuration so you do not need to re-enter them on each visit.
• Analytics cookies: collect aggregated, anonymised data about how players navigate and interact with the platform. This data is used exclusively for internal improvement of the 666ed service.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent the platform from functioning correctly and you will not be able to log in or place bets.

666ed retains your personal data for as long as your account remains active and for a defined period after account closure, as required by applicable law and our internal data governance policy. The general retention periods we apply are as follows: account and identity data is retained for a minimum of five years after account closure to meet regulatory requirements; transaction and financial records are retained for a minimum of seven years; usage and session logs are retained for up to twelve months and then deleted or anonymised.

When your data is no longer required for the purposes for which it was collected and no legal obligation requires its continued retention, 666ed will securely delete or irreversibly anonymise it. Requests for early deletion of data are considered subject to applicable law — we cannot delete data that we are legally obliged to retain.

666ed implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, alteration or disclosure. These measures include TLS/SSL encryption for all data in transit between your device and our servers; encryption of sensitive data fields at rest within our database infrastructure; strict access controls ensuring that only authorised personnel with a legitimate business need can access personal data; regular security audits and vulnerability assessments; and multi-factor authentication requirements for administrative access to production systems.

While 666ed takes all reasonable steps to secure your data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the security of your own account credentials. If you believe your account has been compromised, contact support immediately at [email protected].

As a player using the 666ed platform, you have the following rights with respect to your personal data. To exercise any of these rights, contact our support team at [email protected] with the subject line "Data Rights Request". We will respond within a reasonable period and in accordance with applicable law.

Please note that some rights may be limited where 666ed has a legal obligation to retain or continue processing your data, or where exercising the right would adversely affect the rights of others. We will always explain clearly if a request cannot be fulfilled in full and the reason why.

The 666ed platform is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If you are a parent or guardian and believe that a minor has registered an account or provided personal data to 666ed without your consent, please contact us immediately at [email protected]. We will promptly investigate the matter and, if a minor's account is confirmed, close the account and delete all associated personal data without undue delay.

The 666ed platform may contain references to game providers, payment services and other third-party services. While we take care to work only with reputable partners, 666ed is not responsible for the privacy practices or content of any third-party service. This Privacy Policy applies only to data processed by 666ed. We encourage you to read the privacy policies of any third-party service you use in connection with the 666ed platform.

666ed reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, where we begin processing your data for a new purpose or sharing it with a new category of third party — we will take reasonable steps to notify you in advance, either via a notice on the platform or by contacting you directly. The date at the bottom of this page reflects when the Policy was last revised. Your continued use of the platform after the revised Policy has been published constitutes acceptance of the updated terms.

If you have questions about this Privacy Policy, wish to exercise your data rights, or need to report a potential data security incident, please contact the 666ed data team. Our support agents are available 24 hours a day, 7 days a week via live chat on the platform.

You may also contact us by email at [email protected]. Please use the subject line "Privacy Enquiry" or "Data Rights Request" so we can route your message to the correct team. Do not include sensitive account credentials such as passwords or full payment account numbers in your email.