Your Privacy Matters at
666z9 — Here Is How We Protect It

666z9 collects personal data only to the extent necessary to provide a safe, compliant, and functional online gaming experience. We categorise the data we collect into the following groups:

1.1 Registration and Identity Data

When you create a 666z9 account, we collect your full legal name, date of birth, email address, mobile phone number, and residential address including district and division within Bangladesh. This information is required to verify your identity, confirm you meet the minimum age requirement of 18 years, and comply with applicable anti-money-laundering obligations. You may also be asked to submit a copy of a government-issued photo identification document, such as a National Identity Card (NID), passport, or driver's licence, as part of the KYC (Know Your Customer) verification process.

1.2 Financial Transaction Data

When you make a deposit or request a withdrawal, 666z9 records the transaction amount, timestamp, payment method used (for example, bKash, Nagad, Rocket, Upay, or bank transfer), and the transaction reference number generated by the payment provider. Crucially, 666z9 does not store your full mobile wallet PIN, bank account passwords, or card CVV numbers. These credentials are transmitted directly to the relevant payment gateway over encrypted connections and are never logged on 666z9 servers.

1.3 Gameplay and Betting Activity Data

666z9 logs all gaming and betting activity on the platform, including game session records, bet amounts, outcomes, bonus activations, and withdrawal requests. This data serves multiple purposes: it enables accurate real-time account balance management, supports dispute resolution, helps detect problem gambling patterns so that responsible gaming interventions can be offered, and supports fair play monitoring across live casino tables and sports betting markets.

1.4 Technical and Device Data

When you access the 666z9 platform, our servers automatically collect certain technical data including your IP address, device type and model, operating system version, browser type and version, screen resolution, preferred language settings, and time zone (Bangladesh Standard Time, UTC+6, by default for users in Bangladesh). This data is used to optimise the platform experience for your device, to detect and prevent fraud, and to identify suspicious login patterns such as access from multiple geographic locations within a short timeframe.

1.5 Communication Data

If you contact the 666z9 customer support team via live chat, email, or any other support channel, we retain a record of that correspondence including the content of your messages, the date and time of the interaction, and the identity of the support agent who handled your query. These records are retained for quality assurance, training, and dispute resolution purposes.

666z9 processes personal data only for specific, legitimate purposes that are directly connected to the operation of a safe and well-functioning online gaming platform. We do not use your data for purposes that are incompatible with those described below. The principal purposes for which 666z9 processes personal data are as follows:

• Account Management: To create, maintain, and administer your 666z9 player account, including processing deposits and withdrawals, managing bonus allocations, and updating account settings upon your request.
• Identity Verification and KYC Compliance: To verify your identity and confirm that you are at least 18 years of age prior to permitting full account functionality, in accordance with responsible gaming obligations and standard industry practice.
• Fraud Detection and Security: To monitor account activity for indicators of fraudulent behaviour, unauthorised access, bonus abuse, multi-accounting, money laundering, or other conduct that violates the 666z9 Terms & Conditions.
• Responsible Gaming Monitoring: To analyse gameplay patterns and transaction behaviour for indicators of problem gambling, and to facilitate the delivery of responsible gaming tools such as deposit limits, cooling-off periods, and self-exclusion where required.
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and deliver assistance in a timely and informed manner.
• Platform Improvement: To analyse aggregated, anonymised usage data in order to improve the performance, stability, and user experience of the 666z9 platform — including game loading speeds, payment flow efficiency, and mobile layout optimisation for users in Dhaka, Chittagong, Sylhet, and across Bangladesh.
• Promotions and Personalisation: To deliver promotional communications (bonus offers, seasonal promotions for events such as BPL, Eid, and Pohela Boishakh) where you have opted in to receive marketing communications from 666z9. You may withdraw this consent at any time by contacting support or updating your notification preferences in your account settings.
• Legal and Regulatory Compliance: To fulfil any data disclosure obligations required by a valid court order, regulatory authority request, or applicable law. 666z9 will notify affected users of such disclosures to the extent permitted by law.

666z9 does not sell, rent, or commercially exploit your personal data. However, to operate the platform effectively, 666z9 engages a limited number of trusted third-party service providers who process data strictly on our behalf and under our instruction. All third-party processors are required to maintain data security standards commensurate with those applied by 666z9 itself.

Categories of third parties with whom data may be shared:

• Payment Processors: When you make a deposit or withdrawal, the necessary transaction details (such as your registered mobile number for bKash or Nagad, or your bank account reference for Dutch-Bangla Bank, City Bank, or BRAC Bank transfers) are shared with the relevant payment provider solely to execute the transaction. These providers operate under their own published privacy policies and data security frameworks.
• Game Software Providers: Live casino and slot game content on 666z9 is supplied by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive anonymised session identifiers to facilitate game loading and fair-outcome verification. They do not receive your name, address, or payment details.
• Identity Verification Services: To complete KYC checks, 666z9 may engage a third-party identity verification provider to cross-reference submitted documents against government databases or commercially available identity registries. Any such provider is contractually bound to process your data solely for verification purposes.
• IT Infrastructure and Cloud Services: 666z9's platform infrastructure is hosted on enterprise-grade cloud servers. The hosting provider processes technical data (server logs, access records) as a necessary part of providing the hosting service, but does not have access to player personal data in any meaningful way.
• Legal and Regulatory Authorities: In cases where 666z9 is subject to a valid legal obligation — such as a court order, a directive from a financial intelligence unit, or a request from a law enforcement authority with proper jurisdiction — 666z9 may be required to disclose specific player data. Such disclosures are made only to the extent strictly required by the applicable legal instrument and are logged internally.

The 666z9 platform uses cookies and similar technologies to ensure that the site functions correctly, to remember your session preferences, and to gather performance data that helps us improve the platform experience for users across Bangladesh. A cookie is a small text file stored on your device by your web browser when you visit a website. Cookies do not contain executable code and cannot access other files on your device.

666z9 uses the following categories of cookies:

666z9 does not use third-party advertising cookies, cross-site tracking pixels, or social media tracking scripts. No data collected via cookies on the 666z9 platform is shared with external advertising networks or social media platforms.

You may manage, restrict, or delete cookies at any time through your browser's privacy settings. Note that disabling strictly necessary or security cookies may impair the functionality of your 666z9 account, including the ability to log in and access the cashier. For guidance on managing cookies in popular browsers, refer to your browser provider's official support documentation.

Protecting the integrity and confidentiality of your personal data is a technical and organisational priority for 666z9. We implement a layered security framework that addresses data protection at the network, application, and procedural levels.

Key security measures in place at 666z9 include:

• TLS/SSL Encryption: All data in transit between your device and the 666z9 platform is encrypted using Transport Layer Security (TLS) with a minimum of 256-bit encryption. This prevents interception of your login credentials, payment information, and personal data during transmission.
• Password Hashing: Account passwords are never stored in plain text. 666z9 uses industry-standard cryptographic hashing algorithms to store password data, meaning that even internal staff cannot retrieve your actual password.
• Access Controls: Access to personal data within the 666z9 organisation is governed by the principle of least privilege. Only staff members with a specific operational need — such as a customer support agent handling your open query — are permitted to access your account information, and all such access is logged.
• Firewalls and Intrusion Detection: The 666z9 platform infrastructure is protected by enterprise-grade firewalls and automated intrusion detection systems that monitor for suspicious traffic patterns around the clock.
• Regular Security Reviews: 666z9 conducts periodic internal and third-party security reviews of its platform infrastructure to identify and remediate potential vulnerabilities before they can be exploited.
• Payment Security: 666z9 does not store full payment credentials. Mobile wallet transactions via bKash, Nagad, Rocket, and Upay are routed through the official APIs of those providers over encrypted channels. At no point does 666z9 have visibility of your wallet PIN or bank account login credentials.

Despite these measures, no online platform can guarantee absolute security against all possible threats. In the event that 666z9 becomes aware of a data security incident affecting player personal data, we will notify all affected users within 24 hours of confirmed detection, via the email address registered to your account, with a clear explanation of the nature of the incident, the categories of data affected, and the steps being taken to mitigate harm.

666z9 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to a specific individual.

The following retention periods apply to the principal categories of personal data held by 666z9:

Where an account is subject to an ongoing investigation — whether internal, regulatory, or law enforcement-related — the relevant data will be retained beyond the standard periods set out above until the investigation is formally closed. Players will be informed of any extended retention where legally permissible.

When you close your 666z9 account voluntarily, your active profile is deactivated immediately. The underlying personal data associated with the account is retained for the periods specified above and then securely purged. You will not receive marketing communications after account closure unless you re-register.

As a user of the 666z9 platform, you hold a set of rights with respect to your personal data. 666z9 is committed to honouring these rights promptly and without unnecessary obstacles. The following rights are available to all 666z9 account holders:

• Right of Access: You may request a copy of all personal data that 666z9 holds about you. Upon receipt of a verified request, 666z9 will provide a structured summary of your data within 30 days.
• Right to Rectification: If any personal data held by 666z9 is inaccurate or incomplete, you have the right to request that it be corrected or updated. Minor corrections (such as a change of email address or phone number) can be made directly via your account settings. More substantive corrections (such as a name correction supported by updated identity documents) must be submitted to customer support.
• Right to Erasure ("Right to be Forgotten"): You may request that 666z9 delete your personal data. Note that this right is subject to certain limitations — data that must be retained to fulfil a legal or regulatory obligation (such as KYC records and financial transaction logs) cannot be erased until the applicable statutory retention period has elapsed. Outside of those limitations, 666z9 will action a verified erasure request within 30 days.
• Right to Restriction of Processing: In certain circumstances — for example, while a dispute is being investigated or while you contest the accuracy of data held about you — you may request that 666z9 restrict the processing of your data to storage only, without further active use.
• Right to Data Portability: You may request that 666z9 provide your personal data in a commonly used, machine-readable format (such as CSV or JSON) so that it can be transferred to another service provider of your choosing.
• Right to Object: You have the right to object at any time to the processing of your personal data for direct marketing purposes. Upon receipt of such an objection, 666z9 will immediately cease all marketing communications to you. You also have the right to object to processing carried out on the basis of legitimate interests, although such objections will be weighed against the specific operational necessity of the processing activity in question.
• Right to Withdraw Consent: Where 666z9 processes your data on the basis of your consent (for example, for optional marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place prior to withdrawal.

To exercise any of the above rights, please contact the 666z9 data team at [email protected] with the subject line "Privacy Rights Request" and a clear description of the right you wish to exercise. 666z9 may ask you to verify your identity before actioning the request, to protect against unauthorised data access by third parties. All requests will receive an initial acknowledgement within 72 hours and a substantive response within 30 calendar days.

If you have any questions, concerns, or complaints about the way in which 666z9 handles your personal data, or about any aspect of this Privacy Policy, please contact our dedicated data protection team using the details below. We take all privacy-related communications seriously and aim to respond within 72 hours on business days (Bangladesh Standard Time, UTC+6).

Privacy and Data Protection Contact:
Email: [email protected]
Subject line: "Privacy Policy Enquiry" or "Data Rights Request"

Policy Updates and Versioning

666z9 reserves the right to update or revise this Privacy Policy at any time, in order to reflect changes in our data practices, applicable law, or platform functionality. When a material change is made to this policy — meaning any change that alters the scope of data collection, the purposes for which data is used, or the rights available to users — 666z9 will notify registered users by email to the address on file at least 14 days before the updated policy takes effect. The current version number and effective date are displayed at the top of this page.

For minor or administrative updates (such as corrections of typographical errors or clarifications that do not alter the substantive meaning of any provision), the revised policy will be published on this page with an updated version number and effective date, without individual email notification.

Your continued use of the 666z9 platform after the effective date of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any change to the policy, you should discontinue use of the platform and may request account closure by contacting support. We encourage you to review this page periodically to stay informed of how 666z9 protects your personal data.