Data Protection
66six Privacy Policy
Your privacy matters to us. This Privacy Policy explains in plain, formal English what personal data 66six collects from users in Bangladesh, how that data is used, stored, and protected, and what rights you hold in relation to your information. Please read this document carefully before using the 66six Platform.
Scope of This Policy: This Privacy Policy applies to all personal data processed by 66six in connection with the operation of the website https://66six.net, its associated mobile-optimised interface, and any related customer support channels. By accessing or using the 66six Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, you should discontinue use of the Platform and contact support@66six.net to request account closure.
Identity Data
Full legal name, date of birth, and government-issued identification details collected at registration and during KYC verification to confirm your identity and age.
Contact Data
Email address and mobile phone number used to communicate account updates, verify transactions, and deliver customer support. Bangladesh mobile numbers on Grameenphone, Banglalink, Robi, and Teletalk are all supported.
Financial Data
Deposit and withdrawal transaction records, bKash and Nagad mobile wallet references, bank account details where applicable, and transaction timestamps — used to process payments and comply with anti-money-laundering obligations.
Gaming Activity Data
Bet history, game session logs, wagering amounts, win/loss records, bonus usage, and responsible gaming interactions — retained to operate the Platform fairly, detect fraud, and fulfil bonus terms.
Technical & Device Data
IP address, device type, operating system, browser version, screen resolution, and connection type. Collected automatically when you visit the Platform to maintain security and optimise performance.
Support Communications
Records of all communications with the 66six support team via email (support@66six.net), including enquiry content, timestamps, and resolution notes — retained to ensure quality and resolve disputes.
Section 1
Data We Collect
66six collects personal data only to the extent necessary to provide a safe, functional, and compliant online gambling service to players in Bangladesh. The categories below describe the personal data we collect and the circumstances in which it arises.
Data Provided Directly by You: The majority of personal data held by 66six is information you provide directly when creating a 66six account, completing identity verification, making a deposit, raising a support request, or participating in a promotion. This includes your full legal name, date of birth, residential address, email address, and mobile number.
Data Collected During KYC Verification: As part of our Know Your Customer (KYC) process, we may collect copies of identity documents such as a national identity card (NID), passport, or driver's licence, as well as proof of address documents and confirmation of payment method ownership. These documents are processed securely and are retained only for as long as required by our compliance obligations.
Data Collected Automatically: When you access the 66six Platform through any device — including smartphones on Grameenphone, Banglalink, Robi, or Teletalk networks — certain technical data is collected automatically. This includes your IP address, device identifiers, browser type and version, operating system, referral URL, and pages visited within the Platform. This data is used to maintain the security and performance of the Platform and to detect suspicious activity.
Transaction and Payment Data: Every deposit and withdrawal you make on the 66six Platform generates a transaction record. This record includes the payment method used (e.g., bKash, Nagad, Rocket, Upay, Visa, Mastercard, or a Bangladeshi bank account), the transaction amount in BDT, the date and time, and a transaction reference number. We do not store full card numbers or mobile banking PINs — such sensitive credentials are handled directly by the payment provider.
Behavioural and Gaming Data: 66six records game session data including the games played, bet amounts, outcomes, duration of sessions, and use of responsible gaming tools such as deposit limits or session timers. This data is used to operate the Platform, settle disputes, audit fairness, and monitor for problem gambling indicators.
Data from Third Parties: In some cases, 66six may receive supplementary identity or fraud-check data from third-party verification providers. This data is used solely for account verification and anti-fraud purposes and is not used for marketing or sold to third parties.
Data Categories at a Glance
- Identity: Name, DOB, NID / passport
- Contact: Email, mobile number, address
- Financial: Transaction records, payment method references
- Gaming: Bet history, session logs, bonus usage
- Technical: IP address, device data, browser info
- Communications: Support emails and chat logs
- Verification: KYC documents and third-party checks
Minimum Data Principle: 66six collects only the data that is genuinely necessary for the stated purposes. We do not collect sensitive data such as religious beliefs, political opinions, or health information, except where you voluntarily disclose health-related information in the context of a responsible gaming self-exclusion request.
Section 2
How We Use Your Data
Personal data collected by 66six is used exclusively to operate, secure, and improve the Platform and to meet our compliance obligations. We do not sell your data to advertisers or unrelated third parties.
The personal data 66six collects is used for the following specific purposes. Where a legal basis for processing is identified, it is noted alongside each purpose.
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account registration and management | Identity, contact data | Contractual necessity |
| Identity verification (KYC / AML) | Identity, KYC documents, financial data | Legal obligation |
| Processing deposits and withdrawals | Financial data, identity data | Contractual necessity |
| Operating games and settling bets | Gaming activity data, account data | Contractual necessity |
| Fraud detection and prevention | Technical data, financial data, gaming data | Legitimate interest |
| Customer support and dispute resolution | Communications, account data, gaming data | Contractual necessity |
| Responsible gaming monitoring | Gaming activity, session data | Legal obligation / legitimate interest |
| Platform security and performance | Technical data, device data | Legitimate interest |
| Bonus and promotion administration | Gaming data, financial data, account data | Contractual necessity |
| Service communications (account alerts) | Contact data | Contractual necessity |
| Promotional communications (opt-in only) | Contact data, gaming preferences | Consent |
Marketing Communications: 66six may send you promotional communications about bonuses, new games, and seasonal offers (including Eid promotions, BPL cricket season offers, and Pohela Boishakh specials) via the email address or mobile number associated with your account. You will only receive such communications where you have opted in. You may withdraw your consent and unsubscribe from marketing communications at any time by contacting support@66six.net. Withdrawal of marketing consent does not affect the processing of your data for contractual or legal purposes.
Automated Decision-Making: 66six uses automated systems to flag potentially fraudulent account activity, detect bonus abuse, and monitor responsible gaming thresholds. Where an automated flag results in a restriction on your account, you have the right to request human review of that decision by contacting support@66six.net.
No Profiling for Sale: 66six does not build advertising profiles on users for sale to third-party marketers. Any internal profiling carried out — for example, identifying users who may benefit from responsible gaming interventions — is done solely to operate the Platform responsibly and in users' interests.
Section 3
Data Sharing & Disclosure
66six does not sell, rent, or trade your personal data. Disclosure to third parties occurs only in the limited circumstances described below, and always with appropriate safeguards in place.
Payment Processors: To process your deposits and withdrawals, 66six shares the minimum necessary transaction and identity data with the relevant payment service provider — for example, bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, or the relevant card scheme (Visa or Mastercard). Each payment provider operates under its own privacy policy and data protection obligations. 66six is not responsible for the data practices of payment providers once data has been transmitted to them.
Game Content Providers: The games available on the 66six Platform are supplied by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive session identifiers and bet data necessary to operate the game content. They do not receive your full name, contact details, or payment information.
Identity Verification Services: 66six uses certified third-party identity verification providers to assist with KYC processing. These providers receive identity document data solely for the purpose of verifying your identity and age. They are contractually prohibited from using your data for any other purpose.
Fraud Prevention and Security: 66six may share data with fraud prevention agencies, cybersecurity providers, and industry-wide responsible gaming databases where required to detect, prevent, or respond to fraudulent activity, money laundering, or problem gambling. Such sharing is carried out under legitimate interest grounds and only to the extent necessary.
Legal and Regulatory Disclosure: 66six may disclose personal data to law enforcement agencies, government authorities, or courts where required by applicable law, court order, or regulatory requirement. In such cases, 66six will disclose only what is strictly required and will, where legally permissible, notify the affected user.
Business Transfers: In the event that 66six undergoes a restructuring, acquisition, or sale of assets, user data may form part of the transferred assets. In such circumstances, the acquiring entity would be bound by this Privacy Policy or a substantially equivalent one, and users would be notified in advance.
Third Parties We May Share With
- bKash, Nagad, Rocket, Upay (payment processing)
- Visa / Mastercard card networks
- Dutch-Bangla Bank, City Bank, BRAC Bank (banking channels)
- Pragmatic Play, Evolution, NetEnt, Spribe (game content)
- KYC / identity verification providers
- Fraud prevention and cybersecurity services
- Law enforcement / courts (where legally required)
No Advertising Networks: 66six does not share your personal data with advertising networks, data brokers, social media platforms, or any third party for marketing purposes unrelated to the 66six Platform itself.
Section 5
Data Security
66six implements technical and organisational security measures to protect your personal data against unauthorised access, loss, or misuse.
The security of your personal data is a priority for 66six. We apply a range of technical and administrative controls designed to protect your information throughout its lifecycle on the Platform. These measures include:
- SSL/TLS Encryption: All data transmitted between your browser or mobile device and the 66six Platform is encrypted using industry-standard TLS (Transport Layer Security) protocols. You can verify this by checking for the padlock icon in your browser's address bar when visiting https://66six.net.
- Encrypted Data Storage: Sensitive data fields — including identity verification documents, financial records, and account credentials — are stored in encrypted form. Encryption keys are managed separately from the data they protect.
- Access Controls: Access to personal data within 66six's operational infrastructure is restricted on a need-to-know basis. Staff with access to user data are subject to confidentiality obligations and undergo regular training on data handling procedures.
- Account Security: Your 66six account is protected by a password that only you know. We strongly recommend using a strong, unique password for your 66six account and not reusing it across other services. 66six will never ask for your password by email or through support channels.
- Fraud Monitoring: Automated systems continuously monitor the Platform for suspicious activity, including unusual login patterns, device changes, and irregular transaction behaviour. Alerts are reviewed by trained personnel and acted upon promptly.
- Breach Response: In the event of a data security incident that affects your personal data, 66six has an incident response procedure in place. Affected users will be notified promptly where required by applicable standards, and all reasonable steps will be taken to contain and remediate the incident.
While 66six takes all reasonable precautions, no system is entirely immune to security threats. You are responsible for keeping your login credentials secure and for notifying support@66six.net immediately if you believe your account has been accessed without your authorisation.
Security Measures in Place
- TLS/SSL encryption on all data in transit
- Encrypted storage for sensitive data fields
- Role-based access controls for internal staff
- Automated fraud and anomaly detection
- 24/7 monitoring and incident response
- Regular security reviews and staff training
Report a Security Concern: If you discover or suspect a security vulnerability on the 66six Platform, please report it to support@66six.net immediately. Do not attempt to exploit any vulnerability you identify. We take all security reports seriously and will investigate promptly.
Section 6
Data Retention
66six retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and compliance obligations.
The retention periods below reflect the balance between operational necessity, legal compliance, and your right to have personal data deleted when it is no longer needed. Retention periods are reviewed periodically and may be updated to reflect changes in legal requirements or operational practice.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | Legal / compliance obligations |
| KYC / identity documents | Duration of account + 5 years after closure | Anti-money-laundering requirements |
| Financial transaction records | Duration of account + 7 years after closure | Financial record-keeping obligations |
| Gaming activity logs | Duration of account + 3 years after closure | Dispute resolution, fairness audits |
| Support communications | 3 years from date of communication | Dispute resolution and quality assurance |
| Technical / device logs | 90 days on a rolling basis | Security and fraud monitoring |
| Marketing preferences | Until withdrawn, then deleted within 30 days | Consent-based — deleted on withdrawal |
Post-Closure Data Handling: When a 66six account is closed — whether voluntarily by the player or by 66six — the account is deactivated and access is removed. The underlying data is retained for the periods specified above to meet legal, compliance, and dispute-resolution obligations. After the retention period expires, data is securely deleted or anonymised so that it can no longer be associated with an individual.
Self-Exclusion Records: Where a player has requested self-exclusion, a record of that exclusion is retained for the full duration of the self-exclusion period plus a reasonable period thereafter, to prevent re-registration and to fulfil responsible gaming obligations. Even where a general deletion request is made, self-exclusion records are exempted to protect the individual's interests.
Section 7
Your Privacy Rights
As a user of the 66six Platform, you hold a number of rights in relation to your personal data. These rights can be exercised by contacting support@66six.net at any time.
66six is committed to respecting and facilitating your data rights. The following rights are available to all registered users of the Platform. To exercise any of these rights, please submit a written request in English to support@66six.net, including your registered account email address and a brief description of your request. 66six will acknowledge your request within 5 business days and aim to fulfil it within 30 calendar days, or notify you if additional time is required.
Right of Access
You may request a copy of all personal data 66six holds about you, together with information about how it is being processed.
Right to Rectification
If any personal data held about you is inaccurate or incomplete, you may request that it be corrected or updated.
Right to Erasure
You may request deletion of your personal data where it is no longer needed for the purposes for which it was collected, subject to legal retention obligations.
Right to Restriction
You may request that processing of your data be restricted in certain circumstances, such as while the accuracy of data is being verified.
Right to Portability
Where processing is based on consent or contract, you may request a copy of your data in a structured, machine-readable format.
Right to Object
You may object to processing based on legitimate interest, including any profiling carried out for responsible gaming or fraud detection purposes.
Right to Withdraw Consent
Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
Right Against Automated Decisions
Where a significant decision affecting your account is made solely by automated means, you have the right to request human review of that decision.
Identity Verification for Rights Requests: To protect the security of your account and data, 66six may ask you to verify your identity before fulfilling a data rights request. This is to ensure that personal data is not disclosed to, or deleted at the request of, an unauthorised party. Verification will typically involve confirming details associated with your registered account.
Limitations on Rights: Certain rights are subject to limitations. For example, the right to erasure does not apply where 66six is required by law to retain data — such as KYC records, transaction logs, or self-exclusion records. Where a right cannot be fulfilled in full, 66six will explain the reason in writing and fulfil the request to the maximum extent possible.
Complaints: If you are not satisfied with how 66six has handled your personal data or a data rights request, you have the right to escalate your concern in writing to support@66six.net. 66six treats all privacy complaints seriously and will investigate and respond to each one. For players located in Bangladesh, disputes regarding data handling may also be raised with the relevant national consumer protection authority.
Section 8
Policy Updates & Contact
66six reserves the right to update this Privacy Policy periodically to reflect changes in law, technology, or business practice. All changes will be communicated to registered users in advance.
Policy Amendments: 66six reviews this Privacy Policy regularly and may update it from time to time. Where changes are material — for example, where a new category of data is collected or a new third-party processor is engaged — registered users will be notified by email to the address associated with their account at least 14 days before the change takes effect. Continued use of the Platform after the effective date of an updated policy constitutes acceptance of the revised terms.
Minor Amendments: For minor, non-substantive changes (such as corrections to spelling or formatting, or clarifications that do not alter the meaning of any clause), 66six may update the policy without advance notice. The "Last updated" date at the top of this page will always reflect when the most recent change was made.
Version History: If you require a copy of a prior version of this Privacy Policy for reference purposes — for example, in connection with a historical account transaction — please contact support@66six.net with the specific version date you require. 66six retains previous policy versions internally and can provide them on request.
Children and Minors: The 66six Platform is strictly for adults aged 18 and above. 66six does not knowingly collect personal data from individuals under the age of 18. If you believe that a minor has registered an account or provided personal data to 66six, please notify us immediately at support@66six.net and we will investigate and take appropriate action, including deletion of the relevant data and closure of the account.
Cross-Border Data Transfers: The 66six Platform serves players throughout Bangladesh, including in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. Where personal data is transferred to or processed by infrastructure or service providers located outside Bangladesh, 66six takes appropriate measures to ensure that such transfers are subject to equivalent data protection standards.
Contact the Privacy Team: For all privacy-related enquiries, data rights requests, complaints, or questions about this Privacy Policy, please contact the 66six privacy team by email at support@66six.net. Please include "Privacy Enquiry" in your subject line and provide your registered account email address so we can locate your account and respond promptly. Support is available in English, 24 hours a day, 7 days a week, operating on Bangladesh Standard Time (BST, UTC+6).
Privacy Contact Details
- Email: support@66six.net
- Subject line: "Privacy Enquiry"
- Response time: Within 5 business days
- Language: English
- Availability: 24/7, UTC+6 (BST)
- Platform: https://66six.net
18+ Policy: The 66six Platform is intended for adults aged 18 and above only. If you are under 18, you must not register an account or submit personal data to 66six. For guidance on responsible gaming tools and age verification procedures, please visit our Responsible Gaming page.
Effective Date: This Privacy Policy is effective from January 2026 and supersedes all prior versions. The controlling language of this policy is English. In the event of any conflict between this English-language version and any translated summary, the English version shall prevail.
Continue Exploring
Have Questions About Your Privacy?
Our support team is available around the clock to answer any questions about how your data is handled on the 66six Platform. You can also explore our FAQ for quick answers, or review our Responsible Gaming page for information on account controls and self-exclusion tools.