Privacy Policy
for 66zzi Players
At 66zzi, your privacy is not a formality — it is a core commitment. This Privacy Policy explains exactly what personal data we collect from players across Bangladesh, why we collect it, how it is stored and protected, and what rights you have over your information. We believe you deserve full transparency about how your data is handled.
1 Introduction
66zzi ("we", "us", "our") operates the online betting and gaming platform accessible at 66zzi.io. This Privacy Policy describes how 66zzi collects, uses, stores, shares, and protects personal information provided by players ("you", "your") who access or use the 66zzi platform, including its website, mobile-optimised interface, customer support channels, and any related services.
This policy is intended to be read alongside the 66zzi Terms and Conditions and the Responsible Gaming Policy, both of which are available on the platform. Where this Privacy Policy conflicts with any other document, this Privacy Policy governs with respect to data protection matters.
By registering an account on 66zzi, placing a bet, making a deposit, or otherwise using our services, you acknowledge that you have read and understood this Privacy Policy in its entirety and consent to the processing of your personal data as described herein. If you do not agree with any part of this policy, you must not use the 66zzi platform.
2 Data We Collect
66zzi collects personal data that is necessary to deliver a safe, compliant, and high-quality gaming experience. The categories of data we collect include:
| Category | Examples | Required? |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality | Mandatory |
| Contact Data | Mobile number, email address, city/district (e.g., Dhaka, Chittagong, Sylhet) | Mandatory |
| Verification Data | National ID (NID) copy, selfie photograph, proof of address | Required for withdrawals |
| Financial Data | bKash/Nagad/Rocket account number, transaction amounts, deposit and withdrawal history | Mandatory |
| Account Data | Username, password hash, account creation date, login history | Mandatory |
| Technical Data | IP address, device type, browser, operating system, session timestamps | Automatic |
| Usage Data | Games played, bets placed, pages visited, session duration, betting patterns | Automatic |
| Communications Data | Support chat transcripts, email correspondence, feedback submitted | When applicable |
| Marketing Preferences | Opt-in/opt-out status for promotional communications, preferred sports/games | Optional |
We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data beyond what is strictly necessary for identity verification.
3 How We Collect Your Data
66zzi collects personal data through a number of channels and methods, including:
- Direct registration: When you create an account on 66zzi, you voluntarily provide identity, contact, and financial data through the registration form.
- KYC verification: When you submit identity documents to complete the Know Your Customer process prior to your first withdrawal, we collect verification data including copies of government-issued identification.
- Deposits and withdrawals: When you initiate financial transactions via bKash, Nagad, Rocket, Upay, or other supported payment methods, we collect transactional and financial data necessary to process and record those transactions.
- Platform usage: As you browse and interact with the 66zzi website and games, we automatically collect technical and usage data through server logs, session tracking, and analytical tools.
- Customer support: When you contact our support team by any channel, we collect and retain the content of those communications along with any personal data you choose to share in that context.
- Cookies and tracking technologies: We use cookies, local storage, and similar technologies to maintain your session, recognise returning visitors, and measure platform performance. See Section 7 for full details.
- Third-party sources: In limited cases, we may receive data about you from third-party payment processors or identity verification partners solely for the purpose of confirming the accuracy of information you have already provided to us.
4 Why We Use Your Data
66zzi uses personal data only for clearly defined and legitimate purposes. The primary purposes for which we process your data are set out below:
- Account management: To create, maintain, and secure your player account, including authentication and access control.
- Service delivery: To provide access to the sports betting, live casino, slots, fishing games, and all other products available on the 66zzi platform.
- Payment processing: To facilitate deposits and withdrawals in BDT via your registered payment methods, and to maintain accurate financial records of all transactions.
- Identity verification (KYC): To comply with our obligations to verify player identity and prevent underage gambling. Players under 21 years of age are not permitted to use the platform.
- Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeovers, and other prohibited conduct described in the Terms and Conditions.
- Responsible gaming: To monitor betting patterns and identify players who may be exhibiting signs of problem gambling, allowing our team to offer appropriate support, deposit limit suggestions, or self-exclusion options.
- Legal compliance: To meet our obligations under applicable anti-money laundering (AML) and counter-financing of terrorism (CFT) frameworks, and to respond to lawful requests from regulatory or law enforcement authorities.
- Customer support: To respond to queries, resolve disputes, and improve the quality of our support services based on historical communication records.
- Marketing communications (opt-in only): To send you promotional offers, bonus notifications, tournament alerts (BPL, IPL, T20 World Cup, Eid specials, and Pohela Boishakh promotions), and platform updates — but only where you have explicitly opted in to receive such communications.
- Platform improvement: To analyse aggregated and anonymised usage data in order to improve the 66zzi platform, fix technical issues, and develop new features.
5 Legal Basis for Processing
66zzi processes your personal data on the following legal grounds:
- Contractual necessity: Processing is required to fulfil the contract between you and 66zzi — specifically, to operate your account, process transactions, and deliver the services you have requested.
- Legal obligation: Processing is necessary to comply with applicable legal requirements, including KYC/AML obligations and responses to lawful authority requests.
- Legitimate interests: Processing is carried out for 66zzi's legitimate business interests — including fraud prevention, platform security, and responsible gaming monitoring — provided these interests are not overridden by your rights and freedoms.
- Consent: Where processing is based on your consent (such as receiving marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. To withdraw consent, contact [email protected] or update your account preferences directly.
6 Data Sharing & Disclosure
66zzi does not sell your personal data to third parties. We share personal data only in the following limited circumstances:
- Payment processors: We share financial data with bKash, Nagad, Rocket, Upay, and other payment partners solely to the extent necessary to process your deposit or withdrawal transactions.
- Identity verification providers: We may share identity documents with third-party KYC service providers who are contractually bound to use your data only for the specific purpose of identity verification on behalf of 66zzi.
- Game providers: Game session data (but not full personal profiles) may be shared with licensed game studios such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, and Microgaming for the purpose of delivering and auditing game outcomes.
- Legal and regulatory authorities: We may disclose personal data to law enforcement, regulatory bodies, or courts where we are legally required to do so, or where we reasonably believe disclosure is necessary to prevent fraud, money laundering, or harm to individuals.
- Business transfers: In the event of a merger, acquisition, or sale of all or part of our business, player data may be transferred to the successor entity, subject to the same privacy protections described in this policy.
- Professional advisers: We may share data with lawyers, auditors, or accountants where necessary for the conduct of our business, subject to confidentiality obligations.
All third parties with whom 66zzi shares personal data are subject to data processing agreements that require them to handle your data securely, use it only for specified purposes, and comply with applicable data protection standards.
7 Cookies & Tracking Technologies
66zzi uses cookies and similar tracking technologies on its platform. Cookies are small text files stored on your device that help us deliver a better experience. The types of cookies we use are as follows:
| Cookie Type | Purpose | Duration |
|---|---|---|
| Essential | Maintain your login session and security state. Cannot be disabled. | Session |
| Functional | Remember your preferences, language settings, and display options. | Up to 12 months |
| Analytical | Measure page visits, navigation paths, and feature usage to improve the platform. | Up to 24 months |
| Security | Detect suspicious login patterns, bot activity, and prevent cross-site request forgery. | Session / 30 days |
You can control cookie preferences through your browser settings. Note that disabling essential cookies will prevent you from logging in and using core platform features. 66zzi does not use third-party advertising cookies or behavioural tracking cookies for external ad networks.
8 Data Retention
66zzi retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:
- Active account data: Retained for the full duration of your account's active status plus a minimum of 5 years after account closure, to satisfy AML and financial record-keeping obligations.
- KYC and identity documents: Retained for a minimum of 5 years following the date of verification or account closure, whichever is later.
- Transaction records: Retained for a minimum of 5 years from the date of each transaction in accordance with financial compliance requirements.
- Customer support communications: Retained for 3 years from the date of the final communication in each support case.
- Marketing preferences and consent records: Retained for the duration of your account plus 2 years, to provide evidence of consent or withdrawal of consent.
- Technical and usage logs: Retained for up to 12 months in full detail; aggregated and anonymised usage statistics may be retained indefinitely for platform analytics.
When data is no longer required, it is securely deleted or anonymised so that it can no longer be associated with any individual player.
9 Data Security
66zzi implements a multi-layered security framework to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security measures include:
- SSL/TLS encryption: All data transmitted between your device and the 66zzi platform is encrypted using industry-standard TLS protocols. A valid SSL certificate is maintained at all times.
- Password hashing: Player passwords are never stored in plaintext. We use strong one-way cryptographic hashing algorithms to store password credentials.
- Access controls: Access to player data is restricted to authorised 66zzi personnel on a strict need-to-know basis. All internal access is logged and audited.
- Session security: Sessions are protected with secure, HttpOnly cookies and automatic timeout after periods of inactivity.
- Intrusion detection: We operate server-side monitoring to detect and respond to anomalous access patterns, brute-force attempts, and other potential security incidents.
- Third-party security audits: Our platform undergoes periodic security assessments to identify and remediate vulnerabilities before they can be exploited.
While 66zzi takes all reasonable precautions to protect your data, no system is completely immune to security risk. You are responsible for maintaining the confidentiality of your own account credentials. If you suspect unauthorised access to your account, contact [email protected] immediately.
10 Your Rights
As a player whose personal data is processed by 66zzi, you have the following rights with respect to your personal information:
- Right of access: You may request a copy of the personal data we hold about you at any time. We will respond to verified access requests within 30 days.
- Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected. Some corrections may require identity re-verification.
- Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal obligations to retain certain records (see Section 8).
- Right to restriction: You may request that we restrict processing of your data in certain circumstances — for example, while a dispute about accuracy is being resolved.
- Right to data portability: Where processing is based on your consent or contractual necessity, you may request that we provide your personal data in a structured, machine-readable format.
- Right to object: You may object to processing based on legitimate interests, including profiling for responsible gaming purposes. We will consider your objection and cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
- Right to withdraw consent: Where processing is based on consent (e.g., marketing emails), you may withdraw consent at any time without penalty, by contacting our support team or updating your account preferences.
To exercise any of the above rights, please contact our support team at [email protected] with the subject line "Data Rights Request". We will verify your identity before processing any request. We will not charge a fee for data rights requests unless they are manifestly unfounded or excessive.
11 Children & Minors
The 66zzi platform is strictly for adults aged 21 years and above. We do not knowingly collect personal data from anyone under the age of 21. If we become aware that personal data has been collected from an individual under 21, we will immediately suspend the associated account, delete the data, and — where warranted — report the incident to relevant authorities.
If you are a parent or guardian and believe that your child has registered on the 66zzi platform, please contact us immediately at [email protected] so that we can take appropriate action. We take underage access seriously and have KYC controls in place to detect and prevent it. However, parental supervision of online activity remains an important supplementary safeguard.
12 Third-Party Links
The 66zzi platform may, from time to time, reference or display content from third-party services such as game providers (e.g., Pragmatic Play, Evolution Gaming, Spribe) or payment partners (e.g., bKash, Nagad). These third-party services operate under their own privacy policies, which are entirely independent of this Privacy Policy.
66zzi is not responsible for the privacy practices or data handling procedures of any third-party service. We encourage you to review the privacy policies of any third-party provider whose services you use in connection with the 66zzi platform. The presence of a game provider's content on the 66zzi platform does not constitute an endorsement of that provider's data practices.
13 Changes to This Privacy Policy
66zzi reserves the right to update or revise this Privacy Policy at any time. When material changes are made — such as changes to the categories of data we collect, the purposes for which we use it, or the third parties with whom we share it — we will notify registered players via their registered contact details at least 7 days before the revised policy takes effect.
The version number and "Last Updated" date at the top of this document indicate the current version in force. The most current version of the Privacy Policy is always published on this page. Continued use of the 66zzi platform after the effective date of any revision constitutes acceptance of the updated policy.
If you do not accept the revised Privacy Policy, you must stop using the platform and may request account closure by contacting our support team. Any data collected prior to closure will be retained for the minimum periods required by law as described in Section 8.
14 Contact Us
If you have any questions, concerns, or requests related to this Privacy Policy or the way 66zzi handles your personal data, please reach out to our dedicated support team using the information below. All privacy-related communications are treated with strict confidentiality:
- Email: [email protected] (plain text — not a clickable link)
- Subject Line: Use "Privacy Policy Enquiry" or "Data Rights Request" for faster routing
- Response Time: Within 24 hours for all written queries
- Languages Supported: English
- Operating Hours: 24/7, Bangladesh Standard Time (BST, UTC+6)
When submitting a data rights request, please include your registered account username and a clear description of your request. Do not include your full password or PIN in any correspondence with our team.
How 66zzi Protects Your Privacy
Six core principles that underpin every data decision we make on the 66zzi platform.
End-to-End Encryption
All data exchanged between your device and 66zzi is protected by TLS encryption. Your personal details, payment information, and session data are never transmitted in plaintext.
No Data Sales
66zzi does not sell your personal data to any third party for advertising, profiling, or commercial purposes. Your data is used exclusively to operate your account and improve your experience.
Full Player Control
You can access, correct, restrict, or request deletion of your personal data at any time. Marketing opt-outs take effect immediately. Data rights requests are processed within 30 days.
Minimal Data Collection
We collect only what is strictly necessary. Optional data such as marketing preferences is never mandatory. We do not collect sensitive categories of data beyond what is required for KYC.
Strict Access Controls
Player data is accessible only to authorised 66zzi personnel with a legitimate operational need. All internal access to personal data is logged, audited, and subject to strict confidentiality obligations.
21+ Player Protection
66zzi uses KYC verification to prevent underage access. No data is knowingly collected from anyone under 21. Accounts found to belong to minors are closed immediately and data is deleted.
Questions About Your Privacy?
Our support team is available around the clock to address any privacy concern or data rights request. You can also explore our FAQ for quick answers, or review our Terms and Conditions for the full legal framework governing your account.