Your Privacy Matters
at 66xz

This Privacy Policy ("Policy") describes how 66xz ("we", "us", "our", "the Platform") collects, uses, stores, discloses, and protects the personal information of individuals ("you", "the User", "the Player") who access or use the 66xz website and related services, including cricket betting, live casino, slots, and all other products available at 66xz.io.

66xz is committed to handling your personal data responsibly and in accordance with applicable data protection principles. We recognise that players across Bangladesh — from Dhaka and Chittagong to Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar — place their trust in us when they share their information, and we take that responsibility seriously.

By registering an account, making a deposit, or continuing to use the 66xz platform after the effective date of this Policy, you acknowledge that you have read and understood the practices described herein. If you do not agree with this Policy, please discontinue use of the platform and contact us to request account closure.

66xz collects personal data from you in the following categories, depending on how you interact with the platform:

When you create a 66xz account, we collect: your full legal name, date of birth, gender, residential address (including division, district, and upazila), registered mobile phone number, and email address. This information is used to verify your identity, confirm your eligibility to use the platform (21+ only), and communicate with you regarding your account.

To process deposits and withdrawals, we collect financial information including your bKash wallet number, Nagad account number, Rocket account number, Upay account number, Visa or Mastercard card details (card number, expiry date, CVV), and bank account details where bank transfer is selected. Full card numbers are never stored on 66xz servers — they are passed directly to our PCI-DSS-compliant payment processor via encrypted channels.

We maintain records of all deposits, withdrawals, bonuses credited, bets placed, games played, and winnings received on your account. This transactional history is retained for audit, compliance, and dispute resolution purposes.

When you access the 66xz platform, we automatically collect certain technical information including your IP address, device type, operating system, browser type and version, screen resolution, referring URL, pages visited, session duration, and clickstream data. This data helps us diagnose technical issues and improve platform performance.

If you contact our support team via live chat or email, we retain records of those communications including the content of messages, timestamps, and any attachments provided. This allows us to track the resolution of your enquiry and improve our service quality.

For Know Your Customer (KYC) and age verification purposes, we may collect copies of identity documents including your National ID card, passport, or driving licence. These documents are stored securely and accessed only by authorised compliance personnel.

66xz uses your personal data only for the purposes described in this Policy. We do not use your data for purposes incompatible with those stated here without first obtaining your explicit consent. The primary purposes for which we process your personal data include:

• Account Management: To create and maintain your 66xz player account, verify your identity, process login requests, and apply account settings such as deposit limits and self-exclusion preferences.
• Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and bank transfer in Bangladeshi Taka (BDT / ৳), and to maintain accurate financial records of all transactions on your account.
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and provide technical assistance through our 24/7 live chat and email support channels.
• Legal & Regulatory Compliance: To verify that you meet the minimum age requirement (21+), to conduct anti-money-laundering (AML) checks, to comply with KYC obligations, and to cooperate with any lawful requests from regulatory or law enforcement authorities.
• Responsible Gaming: To monitor gaming activity for signs of problem gambling behaviour, to apply responsible gaming tools you have activated (such as deposit limits or self-exclusion), and to proactively reach out to players who may require support.
• Platform Improvement: To analyse aggregated, anonymised usage data for the purpose of improving platform performance, user experience, and feature development. This analysis does not target individual users.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, account abuse, money laundering, identity theft, and other illegal activities that may harm 66xz or its players.
• Promotional Communications: Where you have opted in to receive marketing communications, to send you information about 66xz promotions, bonuses, and offers relevant to your interests. You may opt out of marketing at any time by contacting support.

66xz processes your personal data on one or more of the following legal grounds, depending on the nature and purpose of the processing activity:

• Contractual Necessity: Processing is required to perform our obligations under the contract we have with you — specifically, to operate your 66xz account, process transactions, and provide access to the platform's products and services.
• Legal Obligation: Processing is necessary to comply with applicable legal requirements, including age verification obligations, anti-money-laundering regulations, KYC requirements, and responses to lawful authority requests.
• Legitimate Interests: Processing is necessary for our legitimate interests in preventing fraud, maintaining platform security, improving our services, and communicating with players about account-related matters — provided those interests are not overridden by your privacy rights.
• Consent: Where we rely on your consent for specific processing activities (such as sending promotional emails or using non-essential cookies), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

66xz does not sell, rent, or trade your personal data. We share your data only in the following limited and controlled circumstances:

We share necessary financial data with payment processors including bKash, Nagad, Rocket, Upay, Visa, Mastercard, and our banking partners (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank) solely for the purpose of processing your deposit and withdrawal transactions. All payment processors are contractually required to maintain strict data security standards.

To fulfil our KYC and age verification obligations, we may share identity document copies and personal details with regulated identity verification service providers. These partners process your data solely on our behalf and under our instructions, and are prohibited from using it for any independent purpose.

Third-party game providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — may receive limited technical data (such as a pseudonymous player identifier and session token) necessary to deliver their games on the 66xz platform. These providers do not receive your full name, financial details, or contact information.

We may disclose personal data to regulatory bodies, law enforcement agencies, or courts where required to do so by applicable law, legal process, or in response to a lawful authority request. We will endeavour to notify you of such disclosure where legally permissible to do so.

66xz uses cookies and similar tracking technologies to enable the platform to function correctly, to remember your preferences, and to collect aggregate usage statistics. A cookie is a small text file stored on your device when you visit a website.

These cookies are strictly necessary for the 66xz platform to operate. They manage your login session, maintain your account security state, and ensure that your language and currency preferences are retained across pages. Essential cookies cannot be disabled without breaking core platform functionality.

With your consent, we use analytics cookies to collect anonymised, aggregated data about how visitors use the 66xz platform. This data helps us understand which features are most popular, identify performance bottlenecks, and prioritise improvements. Analytics data does not identify individual users.

These cookies remember choices you make on the platform — such as your preferred deposit method or notification settings — to provide a more personalised experience during subsequent visits.

You can manage cookie preferences through your browser settings. Note that disabling non-essential cookies will not affect your ability to access core platform features, but may reduce the quality of your experience on certain pages.

66xz retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Our standard retention periods are as follows:

• Account Data (Active Accounts): Retained for the full duration of your account being open and active on the 66xz platform, plus a minimum of 5 years after account closure to satisfy record-keeping obligations.
• Financial Transaction Records: Retained for a minimum of 7 years from the date of the transaction, in accordance with financial record-keeping requirements applicable to betting platforms.
• KYC & Identity Verification Documents: Retained for 5 years from the date of verification or from the date of account closure, whichever is later.
• Support Communications: Retained for 3 years from the date of the most recent interaction in a given support thread.
• Technical & Usage Data: Retained in identifiable form for 12 months; thereafter anonymised and retained indefinitely for statistical purposes only.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where deletion is not technically immediately feasible (for example, data held in backup archives), the data will be isolated from active use and deleted as soon as the next scheduled backup purge occurs.

66xz respects your right to control your personal data. Subject to applicable law and certain limited exceptions, you have the following rights in relation to the personal data we hold about you:

• Right of Access: You may request a copy of all personal data 66xz holds about you. We will provide this information within 30 days of a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You may also update certain information directly within your account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where you believe we are processing it unlawfully. This right is subject to our legal retention obligations.
• Right to Restrict Processing: You may request that we restrict the processing of your data in certain circumstances — for example, while the accuracy of that data is contested.
• Right to Data Portability: Where processing is based on your consent or on a contractual necessity, you may request that we provide your personal data in a structured, machine-readable format.
• Right to Object: You may object to processing carried out on the basis of our legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where we rely on your consent for a specific processing activity, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

66xz implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Our security framework includes:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• AES-256 encryption for sensitive data at rest in our databases, including financial records and identity documents.
• Bcrypt hashing with salt for all account passwords — passwords are never stored in recoverable form.
• Role-based access controls ensuring that 66xz employees can access only the data necessary for their specific job function.
• Regular third-party security audits and penetration testing of platform infrastructure.
• Automated intrusion detection and real-time alerting for suspicious access patterns.
• Secure encrypted backup procedures with geographically distributed storage.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, 66xz will notify affected players without undue delay, and within 72 hours of becoming aware of the breach, providing details of the nature of the breach, the categories of data affected, and the steps we are taking to address it.

The 66xz platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or retain personal data from individuals under the age of 21. If we discover or are notified that an account has been registered by a person under 21 years of age, we will immediately suspend the account, delete all associated personal data (subject to any mandatory legal retention requirements), and return any deposited funds.

If you believe a minor may have accessed or registered an account on the 66xz platform, please contact us immediately at [email protected]. We treat all such reports with the highest priority and will investigate and act within 24 hours of receiving a verified report.

66xz primarily operates for and serves players based in Bangladesh. However, to deliver certain platform services — including game software from international providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — your data may be processed on servers located outside Bangladesh.

Where such international transfers occur, 66xz ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy. These safeguards may include contractual data protection clauses with the relevant service providers, or confirmation that the recipient operates under an adequately protective legal framework.

By using the 66xz platform and accepting this Privacy Policy, you acknowledge and consent to the transfer of your personal data to third-party service providers operating internationally, solely for the limited purposes described in Section 5 of this Policy.

The 66xz platform may, from time to time, contain references to or links to third-party services — for example, links to payment provider portals such as bKash or Nagad that open in a separate browser context. These third-party services are not operated by 66xz and are governed by their own privacy policies and terms of service.

66xz has no control over and accepts no responsibility for the content, privacy practices, or data handling of any third-party website or service. We encourage you to review the privacy policy of any third-party service you access in connection with using the 66xz platform. The inclusion of a link to or reference to a third-party service does not constitute an endorsement of that service's privacy practices.

66xz reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable legal requirements, platform features, or business operations. The most current version of this Policy will always be available at 66xz.io/privacy-policy, with the effective date clearly stated at the top of the document.

When we make material changes to this Policy — meaning changes that significantly affect how we collect, use, or share your personal data — we will notify registered players via email to their registered address and/or via a prominent notice within the account dashboard. Such notice will be provided at least 14 days before the changes take effect, giving you time to review the updated Policy.

Your continued use of the 66xz platform after a revised Policy has taken effect constitutes your acceptance of the updated terms. If you do not agree with any changes to this Policy, you must cease using the platform and contact us to close your account.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 66xz handles your personal data, please contact our Data Support team using the details below. We aim to respond to all privacy-related enquiries within 5 business days (Bangladesh Standard Time, UTC+6).

Please include "Data Privacy Request" in the subject line of your email and provide your registered account username or email address so we can verify your identity before processing your request. We may require additional verification before actioning sensitive data requests such as erasure or data portability.