Your Privacy Matters at 666bd

1 Introduction

This Privacy Policy describes how 666bd ("we", "us", "our") collects, uses, stores, and protects the personal data of individuals ("you", "your", "Player") who register for or access the 666bd platform at https://666bd.bar (the "Platform"). This policy applies to all Players, visitors, and any individual whose personal data is processed in connection with the Platform's services.

666bd is committed to handling personal data responsibly and in accordance with applicable data protection principles. We recognise that the players who use our platform — across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and beyond — trust us with sensitive personal and financial information. That trust is something we take seriously.

By registering an account on the 666bd Platform or by continuing to use the Platform after this policy has been published or updated, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

2 Data We Collect

666bd collects personal data through several channels: directly from you when you register or use the Platform, automatically through your device and browser interactions, and from trusted third-party sources where necessary for verification and compliance purposes.

2.1 Registration Data

When you open a 666bd account, we collect the following information:

• Full legal name (as it appears on your government-issued identity document)
• Date of birth (to verify you are 21 years of age or older)
• Residential address (district, city, and full postal address)
• Email address
• Mobile phone number
• Preferred payment method and associated account identifiers (e.g., bKash, Nagad, or Rocket mobile number)
• Username and encrypted password

2.2 Identity Verification (KYC) Data

To comply with know-your-customer (KYC) obligations and to confirm your eligibility to use the Platform, we may request and retain copies of:

• National Identity Card (NID) — front and back
• Passport biographical data page
• Driving licence
• Proof of residential address (utility bill, bank statement, or government correspondence dated within 90 days)
• Selfie photograph for liveness verification
• Screenshot or statement confirming payment method ownership

2.3 Transactional Data

We automatically record all financial and wagering activity associated with your account, including:

• Deposit amounts, timestamps, and payment method used
• Withdrawal requests, amounts, and processing status
• Bonus credits and wagering progress
• Individual bet or wager records (event, market, odds, stake, outcome)
• Casino game session records (game name, provider, bet size, result)
• Account balance history

2.4 Technical & Device Data

When you access the Platform, our servers and analytics infrastructure automatically capture:

• IP address and approximate geographic location derived from IP
• Device type, operating system, and browser version
• Session timestamps and duration
• Pages visited, features accessed, and clickstream data
• Referral URL (the website or link that directed you to 666bd)
• Cookie identifiers and similar tracking data (see Section 6)

2.5 Communications Data

Any messages you send to 666bd support — whether via email, live chat, or a support ticket system — are retained as part of your account record. This includes support queries, complaints, and any documents you attach to those communications.

3 How We Use Your Data

The personal data we collect is used exclusively for the purposes listed below. We do not use your data for any purpose that is incompatible with the original purpose for which it was collected without obtaining fresh consent from you.

4 Legal Basis for Processing

666bd processes your personal data on the following legal grounds, depending on the nature and purpose of the processing activity:

• Contractual necessity: Processing your registration data, payment information, and transactional records is necessary to fulfil our obligations to you under the 666bd Terms & Conditions. Without this processing, we cannot provide you with a functioning account.
• Legal obligation: Certain processing activities — including KYC identity verification, AML transaction monitoring, and record retention — are required by applicable law. We must conduct this processing regardless of your preferences.
• Legitimate interests: We process technical and device data to detect fraud, prevent abuse, maintain platform security, and improve user experience. These interests do not override your fundamental privacy rights.
• Consent: Where processing is not required by contract or law — particularly for direct marketing communications — we will only proceed with your explicit, informed consent, which you may withdraw at any time.

5 Data Sharing & Disclosure

666bd does not sell your personal data to any third party under any circumstances. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection obligations:

5.1 Service Providers

We engage trusted third-party service providers who process data on our behalf to deliver the Platform's core functions. These include:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank — to process your deposits and withdrawals securely
• KYC verification providers: Specialist identity verification services that cross-check documents you submit against authoritative databases
• Game providers: Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi — who may receive your account identifier and session data to facilitate game play and settle wager outcomes
• Cloud hosting and infrastructure providers: Who store and process Platform data under strict contractual security obligations
• Customer support platforms: Tools used to manage and respond to support tickets and chat queries

All service providers are bound by contractual data processing agreements that prohibit them from using your data for any purpose other than delivering the specific service they provide to 666bd.

5.2 Legal & Regulatory Disclosure

666bd may disclose personal data to law enforcement agencies, regulatory bodies, or other authorities where required to do so by applicable law, court order, or in response to a lawful request. We will notify you of such disclosure where we are legally permitted to do so.

5.3 Business Transfers

In the event that 666bd undergoes a merger, acquisition, or sale of all or part of its business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any changes to this Privacy Policy that result from it before your data is transferred.

6 Cookies & Tracking Technologies

666bd uses cookies and similar tracking technologies to operate the Platform effectively, maintain session security, and gather analytics data that helps us improve the player experience. The following categories of cookies are used:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication tokens, load-balancing cookies, and security cookies. They cannot be disabled without breaking core functionality.
• Performance & analytics cookies: Used to understand how players navigate the Platform — which pages are most visited, where sessions begin and end, and how long features are used. This data is aggregated and anonymised where possible.
• Functional cookies: Store your preferences such as language setting, display preferences, and responsible gaming reminder intervals so you do not need to re-enter them on each visit.
• Fraud prevention cookies: Help us identify unusual or potentially fraudulent access patterns across sessions and devices.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the Platform. Third-party advertising cookies are not used on the 666bd Platform.

7 Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Active account data: Retained for the full duration of your account's active status, plus a minimum of 5 years following account closure, to satisfy AML and regulatory record-keeping requirements.
• KYC documents: Retained for a minimum of 5 years from the date of submission or from the date of account closure, whichever is later.
• Transactional records (deposits, withdrawals, wagers): Retained for a minimum of 5 years from the date of each transaction.
• Support communications: Retained for 3 years from the date of the last communication, unless they form part of an ongoing dispute or regulatory matter.
• Technical and device data: Retained in raw form for up to 12 months; aggregated and anonymised analytics data may be retained indefinitely.
• Marketing consent records: Retained until consent is withdrawn, plus 2 years as a compliance record of the consent action.

Upon the expiry of applicable retention periods, data is securely deleted from our systems or anonymised in a manner that makes re-identification impossible.

8 Your Data Rights

As a player whose data is processed by 666bd, you have the following rights in relation to your personal information. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request". We will respond within 30 days of receiving your request.

• Right of access: You may request a copy of all personal data that 666bd holds about you, along with information about how it is being used and with whom it has been shared.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay.
• Right to erasure: You may request that we delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. Note that this right is subject to overriding legal retention obligations — we cannot erase data that we are legally required to retain.
• Right to restriction: You may request that we temporarily restrict the processing of your data while the accuracy of that data is contested or while a legitimate-interest objection is being assessed.
• Right to data portability: Where processing is based on your consent or on a contract, you may request that we provide your personal data in a structured, commonly used, machine-readable format so that you may transfer it to another service provider.
• Right to object: You may object at any time to the processing of your data for direct marketing purposes. You may also object to processing based on legitimate interests, though such objections will be assessed against 666bd's compelling legitimate grounds.
• Right to withdraw consent: Where processing is based solely on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before the withdrawal.

9 Data Security

666bd implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Our current security posture includes:

• TLS/SSL encryption: All data transmitted between your device and the 666bd Platform is encrypted using Transport Layer Security (TLS). This protects your credentials, payment data, and personal information from interception in transit.
• Password hashing: Account passwords are never stored in plain text. They are hashed using a strong one-way hashing algorithm before storage, ensuring that even in the event of a data breach, your password cannot be recovered from stored data.
• Access controls: Access to personal data within 666bd's systems is restricted to staff and systems on a strict need-to-know basis. All access is logged and audited.
• Infrastructure security: Our hosting infrastructure is protected by firewalls, intrusion detection systems, and regular security patching protocols.
• Regular security reviews: We conduct periodic internal reviews of data handling practices and security controls to identify and remediate vulnerabilities.

Despite these measures, no digital platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights or freedoms, 666bd will notify affected players via their registered email address as promptly as the circumstances allow, with information about the nature of the breach and recommended protective steps.

10 Children & Underage Players

The 666bd Platform is strictly intended for individuals who are 21 years of age or older. We do not knowingly collect personal data from any person under the age of 21. If you are under 21, you must not register for an account or use the Platform in any capacity.

If 666bd becomes aware that personal data has been collected from a player who is under 21 years of age, we will immediately suspend the relevant account, void any wagers placed, return net deposits (minus bonuses), and permanently delete the underage player's personal data from our systems, except where retention is required for legal or regulatory purposes related to the underage gambling incident.

Parents and guardians who believe that a minor has registered on the 666bd Platform are encouraged to contact us immediately at [email protected] with the subject line "Underage Account Report" so that we can take prompt action.

11 Marketing Communications

666bd may send you promotional communications about bonuses, seasonal offers (such as Eid, Pohela Boishakh, or Victory Day promotions), new game launches, and other Platform updates, but only where you have explicitly opted in to receive such communications at registration or through your account settings.

You may withdraw your consent to receive marketing communications at any time by:

• Clicking the "unsubscribe" link in any marketing email sent by 666bd;
• Updating your notification preferences in your account dashboard; or
• Contacting [email protected] with the subject line "Marketing Opt-Out".

Withdrawal of marketing consent does not affect your ability to use the Platform or receive service-essential communications such as account verification emails, transaction confirmations, and security alerts. These operational communications are sent regardless of your marketing preferences and cannot be disabled while your account is active.

12 Third-Party Links

The 666bd Platform may contain links to third-party websites or services — for example, game provider information pages or payment partner support portals. This Privacy Policy applies solely to data processed by 666bd on the Platform. We are not responsible for the privacy practices of any third-party website or service that you access via a link from the Platform.

We encourage you to review the privacy policies of any third-party services you visit, particularly before providing them with personal information. The presence of a link on the 666bd Platform does not constitute an endorsement of that third party's data handling practices.

13 Updates to This Privacy Policy

666bd reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or operational requirements. When material changes are made, we will notify active account holders via:

• A prominent notice on the Platform's homepage or login area;
• An email to your registered address where the changes are significant.

The effective date at the top of this policy will be updated to reflect the date of the most recent revision. Your continued use of the Platform after the effective date of any revised policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you should cease using the Platform and request account closure before the updated policy takes effect.

We recommend that you review this Privacy Policy periodically to stay informed about how 666bd protects your personal data.

14 Contact & Data Enquiries

If you have any questions, concerns, or formal requests regarding this Privacy Policy or the way 666bd handles your personal data, please reach out to our support team using the contact details below:

• Email: [email protected] (plain text — not a clickable link)
• Subject line for data rights requests: "Data Rights Request"
• Subject line for privacy complaints: "Privacy Complaint"
• Response time: Within 5 business days for acknowledgement; within 30 calendar days for a full response
• Operating hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)
• Language: English

For responsible gaming concerns, self-exclusion requests, or deposit limit adjustments, please visit our Responsible Gaming page or contact support with the subject line "Responsible Gaming Request".

For a complete overview of your account terms, wagering rules, and platform obligations, please review our Terms & Conditions.