66rr Privacy Policy

1. Introduction

66rr ("we", "us", "the Platform") operates 66rr.ws and is committed to protecting the privacy of every person who visits or registers on our platform. This Privacy Policy ("Policy") describes in detail the categories of personal data we collect, the purposes for which we process that data, the parties with whom we may share it, and the rights available to you in relation to your personal data.

By accessing 66rr.ws or registering an account, you acknowledge that you have read this Policy in full and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you should not use 66rr.ws.

2. Data We Collect

66rr collects personal data in two broad categories: data you provide directly to us, and data we collect automatically when you use the platform.

2.1 Data You Provide Directly

When you register, deposit, withdraw or contact our support team, you may provide the following categories of personal data:

• Identity data: full name, date of birth, gender, nationality and a copy of a government-issued photo identification document.
• Contact data: mobile phone number, email address (if provided), and residential address for verification purposes.
• Financial data: payment method identifiers (e.g. registered bKash, Nagad or Rocket mobile number; masked Visa or Mastercard numbers), deposit amounts and withdrawal request amounts.
• Account credentials: your chosen username and a hashed (never plain-text) version of your password.
• Support communications: the content of messages you send to our support team, including any attachments or screenshots you choose to provide.

2.2 Data Collected Automatically

When you access 66rr.ws, our servers and analytics tools automatically record certain technical information about your session. This may include:

• Device and browser data: device type (mobile, tablet, desktop), operating system version, browser type and version, screen resolution, and language settings.
• Network data: IP address, internet service provider (ISP) name, approximate geographic location derived from IP (city and region level only — not precise GPS coordinates).
• Session and gameplay data: pages visited, time spent on each page, game sessions initiated, bets placed, game outcomes and session durations.
• Cookie and tracking data: session identifiers, preference cookies, and (where consented) analytics cookies — see Section 9 for full cookie details.

3. How We Use Your Data

66rr processes personal data only where there is a lawful basis for doing so. The purposes for which we use your data, and the corresponding lawful basis for each, are set out below.

3.1 Account Registration and Operation

We use your identity and contact data to create and maintain your account, verify your age (21+), authenticate your logins, process deposits and withdrawals, and provide the gaming services you have requested. This processing is necessary for the performance of the contract between you and 66rr.

3.2 Identity Verification and Fraud Prevention

We use identity, financial and device data to verify your identity, comply with our anti-money laundering obligations, detect and prevent fraudulent activity, and protect the integrity of the platform. This processing is based on our legal obligations and our legitimate interests in operating a safe and compliant gaming environment.

3.3 Customer Support

We use your contact data and support communications to respond to your enquiries, resolve complaints, and maintain a record of correspondence for quality assurance purposes. This processing is necessary for the performance of our contract with you.

3.4 Responsible Gaming

We use gameplay and session data to power the responsible gaming tools available on your account dashboard, including deposit limits, time-out features, session reminders and self-exclusion. This processing is in both your interests and our legitimate interest in providing a responsible gaming environment. Where required by applicable rules, it is also a legal obligation.

4. Data Sharing and Disclosure

66rr does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. We may share your data with third parties only in the following limited circumstances:

• Payment processors: we share the minimum financial data necessary with payment partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard) solely to facilitate your deposit and withdrawal transactions. These partners process your data under their own privacy policies and are contractually obligated to handle it securely.
• Game providers: session identifiers and bet data are shared with our game technology providers (such as Evolution Gaming, Pragmatic Play, Spribe and Ezugi) for the purpose of delivering and recording game results. These providers do not receive your name, address or full financial details.
• Legal and regulatory authorities: we may disclose your data to law enforcement agencies, courts, or government authorities where we are legally compelled to do so or where disclosure is necessary to protect 66rr's legal rights, prevent crime, or protect the safety of our users.
• Service providers: we may engage trusted technical service providers (hosting, analytics, fraud-detection) who process data on our behalf under strict data processing agreements that prohibit them from using your data for their own purposes.
• Business transfers: in the event of a merger, acquisition or sale of all or substantially all of 66rr's assets, your personal data may be transferred to the successor entity, subject to the same privacy protections described in this Policy.

5. Data Retention

66rr retains your personal data only for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable law. The following general retention periods apply:

5.1 Active Accounts

For active accounts, we retain all account data, transaction records and gameplay logs for the duration of the account's existence and for a period of five (5) years after the account is closed. Transaction records are retained for a minimum of seven (7) years to comply with anti-money laundering obligations.

5.2 Closed Accounts

Following account closure, your personal data is retained for five (5) years. After this period, data is securely deleted or anonymised unless a longer retention period is required by law or is necessary to defend 66rr's legal interests in ongoing or anticipated proceedings.

5.3 Support Records

Support communications are retained for three (3) years from the date of the final message in a support thread, or for five (5) years where the communication is related to a formal complaint, financial dispute, or regulatory enquiry.

6. Data Security

66rr implements technical and organisational measures designed to protect your personal data against accidental loss, unauthorised access, alteration or disclosure. These measures include 256-bit SSL/TLS encryption on all data in transit, encrypted storage for sensitive data at rest, strict access controls limiting staff access to personal data on a need-to-know basis, and regular security reviews of our systems and processes.

6.1 Password Security

Passwords are stored using one-way cryptographic hashing. This means 66rr staff cannot see or retrieve your password in plain text. You are responsible for choosing a strong, unique password and keeping it confidential. If you believe your account has been compromised, contact [email protected] immediately.

6.2 Security Breach Notification

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, 66rr will notify affected users without undue delay, providing details of the nature of the breach, the categories of data involved, the likely consequences, and the measures taken or proposed to address it.

7. Your Rights Over Your Data

Subject to applicable law, you have the following rights in relation to the personal data 66rr holds about you. To exercise any of these rights, please write to [email protected] with your registered mobile number and a clear description of your request.

• Right of access: you may request a copy of all personal data 66rr holds about you. We will provide this within 30 days of a valid request.
• Right to rectification: if any personal data we hold about you is inaccurate or incomplete, you may request that we correct or complete it without undue delay.
• Right to erasure: you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn your consent, or where processing is unlawful — subject to 66rr's legal obligations to retain certain data.
• Right to restriction: you may request that we restrict processing of your personal data in certain circumstances, for example while you contest the accuracy of the data or object to our processing.
• Right to data portability: where processing is based on your consent or on a contract with you, and is carried out by automated means, you may request that we provide your personal data in a structured, commonly used and machine-readable format.

8. International Data Transfers

66rr's primary operations are directed at players in Bangladesh. Some of the third-party service providers we use (including game providers and cloud hosting services) may store or process data outside Bangladesh. Where data is transferred to providers in other countries, 66rr takes steps to ensure that appropriate safeguards are in place, including contractual data protection clauses, to ensure your data receives a level of protection equivalent to that described in this Policy.

8.1 Safeguards for Cross-Border Transfers

Before engaging any service provider that processes data outside Bangladesh, 66rr conducts due diligence to verify that the provider implements data security measures at least as stringent as those described in Section 6 of this Policy. All such providers are bound by contractual data processing agreements that restrict them to using your data only for the specific purpose for which it was shared.

8.2 Your Consent to Transfer

By using 66rr.ws and providing your personal data, you consent to the transfer of your data to these carefully selected third-party providers in the manner described above. If you do not consent to such transfers, you should not use 66rr.ws.

9. Cookies and Tracking Technologies

66rr uses cookies and similar tracking technologies on 66rr.ws. Cookies are small text files stored on your device that allow the platform to recognise you, remember your preferences, and measure how the platform is used. We use the following categories of cookies:

• Strictly necessary cookies: these are essential to the operation of 66rr.ws. They maintain your login session, remember your language preference, and enable core platform functions. They cannot be disabled.
• Analytics cookies: these allow us to understand how visitors interact with 66rr.ws — which pages are visited most often, where users spend the most time, and what features are used. This data is aggregated and does not identify individual users. These cookies are only placed with your consent.
• Functional cookies: these remember choices you make (such as your preferred language or display settings) and provide enhanced, more personalised features. They are placed with your consent.
• Session security cookies: short-lived tokens used to prevent cross-site request forgery (CSRF) and to validate that actions taken during a session originate from your authenticated browser. These expire when you close your browser.
• Managing cookies: you can control and delete cookies through your browser settings. Disabling strictly necessary cookies may prevent you from logging into your account or using core platform features. Disabling analytics and functional cookies will not affect your ability to access your account.

10. Children and Minors

66rr is strictly for adults aged 21 and above. We do not knowingly collect personal data from any person under the age of 21. If we become aware that personal data has been submitted by a person under 21, we will delete that data immediately and close the associated account. If you believe a minor has registered on 66rr, please contact us immediately at [email protected].

10.1 Parental Controls

Parents and guardians of adults aged 21 or above are not subject to this section. However, if you are a parent or guardian and are concerned that a person under 21 in your care may be attempting to access 66rr, please contact [email protected] and we will investigate immediately. We cooperate fully with any request from a parent or guardian to verify and, if necessary, close an account held by an underage individual.

10.2 Age Verification

66rr employs age verification checks at registration and may request additional documentary proof of age at any point during the account lifecycle, including before processing any withdrawal. Accounts where age verification cannot be satisfactorily completed will be suspended pending resolution.

11. Changes to This Policy

66rr may update this Privacy Policy at any time. When we make material changes, the last-updated date shown at the top of this page will be revised. Your continued use of 66rr.ws following the posting of an updated Policy constitutes your acceptance of the changes. We encourage you to review this Policy periodically. If the changes are significant, we may also notify you directly via your registered contact details.

12. Third-Party Links

66rr.ws does not contain links to external third-party websites. However, some game providers may display content within their game interfaces that references external services. 66rr is not responsible for the privacy practices of any third-party content displayed within game interfaces provided by our game technology partners. We encourage you to review the privacy policies of any third-party provider whose services you interact with.

• Game provider interfaces: game content streamed or displayed from third-party game providers operates under those providers' own terms and privacy practices. 66rr does not control the data practices of game providers within their game environments.
• Payment provider interfaces: when you interact with a bKash, Nagad, Rocket, Upay, Visa or Mastercard payment interface during a deposit or withdrawal, that interaction is governed by the relevant payment provider's own privacy policy. 66rr does not store your full card details or full mobile wallet credentials.
• Support tools: if 66rr uses a third-party live-chat or ticketing tool to handle support queries, that tool processes your support messages in accordance with its own data processing terms, under a data processing agreement with 66rr.

13. Contact and Complaints

For any questions, concerns or complaints about this Privacy Policy or about how 66rr handles your personal data, please contact our support team in writing at [email protected]. Please include your registered mobile number and a clear description of your query. We aim to acknowledge all privacy-related correspondence within 24 hours (Bangladesh Standard Time, UTC+6) and to provide a substantive response within 10 business days.

14. Governing Language

This Privacy Policy is drafted in English. In the event of any inconsistency between the English version and any translated version, the English version shall prevail in all respects.

15. Acknowledgement

By registering an account on 66rr or continuing to use 66rr.ws, you confirm that you have read this Privacy Policy in full and consent to the collection, use and processing of your personal data as described herein. You further confirm that you are 21 years of age or older and are legally permitted to use online gaming services.