66kb Privacy Policy – How We Handle Your Data

66kb ("the Platform", "we", "us", or "our") is committed to protecting the privacy and personal data of all members and visitors. This Privacy Policy describes the practices we apply to personal information collected through your use of the 66kb website, mobile browser experience, and all associated services. It should be read alongside our Terms and Conditions, which govern the broader relationship between 66kb and its members.

By accessing or using 66kb, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your personal data as described herein. If you do not agree with any part of this Privacy Policy, you should cease use of the Platform immediately.

When you register, use, or interact with the 66kb platform, we may collect the following categories of personal information:

• Identity and contact information: full name, date of birth, registered mobile number, and email address provided at registration.
• Financial information: transaction records including deposit amounts, withdrawal amounts, payment method identifiers (e.g. the last four digits of a registered bKash or Nagad number), and transaction timestamps.
• Gaming activity data: game history, betting records, session durations, wager amounts, and promotional activity linked to your account.
• Technical and device data: IP address, device type, operating system version, browser type, and general geographic location derived from your IP address.
• KYC verification documents: where required by our verification process, copies of government-issued identification documents and proof of address submitted for age and identity verification.

We collect this information directly from you when you register or use the Platform, automatically through technical tracking mechanisms (such as cookies and server logs) as you use the Platform, and from third-party payment providers who process your transactions on our behalf.

66kb processes your personal data on the following legal bases, depending on the nature of the processing activity:

• Contractual necessity: processing required to provide the gaming and betting services you have contracted for when you registered a 66kb account.
• Legal obligation: processing required to comply with applicable laws and regulations, including anti-money laundering requirements, KYC obligations, and age verification requirements.
• Legitimate interests: processing necessary to protect 66kb's legitimate business interests, including fraud prevention, Platform security, and the detection of prohibited conduct.
• Consent: processing for optional activities such as sending marketing communications, which relies on your freely given, specific, and informed consent. You may withdraw this consent at any time.

All financial transactions on 66kb are processed through our payment provider partners. 66kb does not store complete payment credentials such as full mobile wallet PINs, bank account passwords, or complete card numbers on our servers. Payment data received from providers is limited to transaction identifiers, amounts, timestamps, and partial account reference numbers sufficient to support account reconciliation and withdrawal processing.

Transaction records are retained for the period required to support withdrawal processing, dispute resolution, and our legal and regulatory obligations. All financial data in transit between your device and 66kb's systems is transmitted over encrypted connections using SSL/TLS protocols.

66kb retains your personal data for as long as your account remains active and for such further period as is necessary to fulfil the purposes described in this Privacy Policy, including our legal and regulatory obligations. In practice, this means that account data, transaction records, and KYC documentation are typically retained for a minimum of five (5) years following account closure, in order to satisfy anti-money laundering record-keeping requirements and to support any dispute resolution that may arise during that period.

Personal data that is no longer required for any legitimate purpose is securely deleted or anonymised in accordance with 66kb's internal data lifecycle management procedures. If you request deletion of your account, 66kb will process that request within a reasonable timeframe, subject to the retention obligations described above. Data that must be retained for legal reasons will be held in a restricted-access environment and will not be used for any active processing purposes during the retention period.

66kb implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include SSL/TLS encryption for all data in transit, access controls limiting personal data access to authorised personnel only, secure server infrastructure with regular security patching, and internal data handling policies binding all staff and contractors.

While 66kb takes all reasonable steps to safeguard your data, no digital system can guarantee absolute security against all possible threats. In the event of a data security incident that may affect your personal data, 66kb will take prompt action to contain and remediate the incident and will notify affected members as required by applicable law.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how 66kb has handled your personal data, please contact our support team. Support is available 24 hours a day, 7 days a week via the live chat feature accessible from within your 66kb account dashboard.

You may also reach the 66kb privacy team by email at [email protected]. Please include "Privacy Request" in your email subject line to help us direct your query to the appropriate team member promptly. We aim to acknowledge all privacy-related correspondence within two business days and to resolve requests fully within thirty (30) days of receipt, in accordance with applicable data protection standards.