666bed Privacy Policy —
Your Data, Handled
With Transparency & Care

1 Data We Collect

666bed collects personal data from you through several channels: directly when you register and use the platform, automatically as you interact with our website and services, and occasionally from trusted third-party sources as part of our identity verification process. We collect only what is necessary to provide you with a safe, fair, and personalised experience on the 666bed platform.

1.1 Registration Data

When you create a 666bed account, we collect the following information:

• Full legal name (as it appears on your official identity document)
• Date of birth (to verify you meet the 18+ age requirement)
• Email address (used for account communication and security alerts)
• Mobile phone number (used for two-factor authentication and payment verification)
• Residential address (city and district — Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar)
• Preferred currency (Bangladeshi Taka / BDT)
• Username and encrypted password

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) process, we may request and securely store copies of:

• National Identity Card (NID) — front and back
• Passport biographical data page
• Selfie photograph taken alongside your identity document
• Proof of address documents (utility bills, bank correspondence, official letters dated within three months)
• Proof of payment method ownership (screenshot of your bKash, Nagad, Rocket, or Upay registered account)

1.3 Financial Transaction Data

Every deposit, withdrawal, and account balance movement on 666bed generates a transaction record. We retain the following financial data in association with your account:

• Deposit amounts, timestamps, and mobile banking reference numbers
• Withdrawal requests, approval status, and settlement timestamps
• Payment method identifiers (mobile number associated with bKash, Nagad, Rocket, Upay accounts)
• Bank account details where bank transfer methods are used (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank)
• Card payment data where Visa or Mastercard is used — stored in tokenised form only; raw card numbers are never stored on 666bed servers

1.4 Betting & Gaming Activity Data

We maintain a complete record of your activity on the 666bed platform, including all bets placed, games played, results, bonus usage, and session durations. This data is used for account management, dispute resolution, responsible gaming monitoring, and platform improvement.

1.5 Technical & Device Data

When you access 666bed, our servers and analytics systems automatically collect certain technical information, including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, pages visited, and the time and duration of your sessions. This data helps us detect fraud, maintain platform security, and optimise the user experience across different devices commonly used in Bangladesh.

2 How We Use Your Data

666bed uses the personal data we collect for clearly defined purposes. We do not use your data for any purpose that is incompatible with the reasons for which it was originally collected. The table below summarises the primary purposes for which we process your data and the legal basis for each processing activity.

2.1 Marketing Communications

666bed will only send you promotional emails, SMS notifications, or in-platform messages about bonuses, seasonal offers (such as Eid promotions, Pohela Boishakh special events, or BPL cricket season offers), and new game launches if you have explicitly opted in to marketing communications during registration or through your account preferences. You may withdraw your marketing consent at any time by updating your notification preferences in your account settings or by contacting [email protected]. Withdrawing marketing consent does not affect the lawfulness of any processing carried out prior to withdrawal.

2.2 Automated Decision-Making

666bed uses automated systems to flag accounts for fraud review, responsible gaming intervention, and bonus abuse detection. Where an automated decision has a significant impact on your account — such as a temporary suspension or withdrawal hold — you have the right to request that a human member of our team reviews the automated decision. Contact [email protected] to make such a request. We aim to respond to human review requests within 3 business days (Bangladesh Standard Time, UTC+6).

3 Data Sharing & Disclosure

666bed shares your personal data only in the limited circumstances described below. In all cases, we apply contractual safeguards to ensure that third parties receiving your data treat it with the same standard of care that we apply internally.

3.1 Payment Processing Partners

To process your deposits and withdrawals, 666bed must share relevant financial identifiers with payment processors. This includes sharing your mobile number with mobile banking services (bKash, Nagad, Rocket, Upay) and account details with banking partners (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank) and card networks (Visa, Mastercard) strictly as required to settle each transaction. Payment processors receive only the minimum data necessary to execute the transaction and are contractually prohibited from using this data for any other purpose.

3.2 Identity Verification Services

666bed may use reputable third-party KYC and identity verification service providers to assist in verifying the authenticity of identity documents submitted by players. These providers process your KYC data solely on behalf of 666bed and under our instruction. They do not retain your data beyond the period required to complete the verification process.

3.3 Legal and Regulatory Disclosure

666bed may be required by law, court order, or regulatory authority to disclose certain player data. Where we receive a valid legal request for player data, we will comply with our legal obligations. Where permitted by the applicable legal framework, we will notify the affected player of the disclosure requirement before complying. We will always challenge any data request that we consider to be overly broad, disproportionate, or not supported by proper legal authority.

3.4 Business Continuity

In the event that 666bed undergoes a merger, acquisition, or transfer of business assets, player data held by 666bed may be transferred to the successor entity as part of that transaction. We will notify affected players of any such change that materially alters how their data is processed, and you will retain the right to close your account and request deletion of your data at any time during or after such a transition.

4 Cookies & Tracking Technologies

The 666bed website uses cookies and similar tracking technologies to ensure the platform functions correctly, to keep you securely logged in between sessions, to remember your preferences, and to help us understand how players navigate and use our platform so that we can continuously improve it.

4.1 Types of Cookies We Use

4.2 Managing Cookies

You can manage cookie preferences through your browser settings. Most modern browsers allow you to view, delete, and block cookies on a per-site basis. However, please be aware that disabling essential or fraud prevention cookies will impair your ability to use the 666bed platform, as these cookies are fundamental to the operation of our login system, payment processing, and security infrastructure.

4.3 No Third-Party Advertising Cookies

666bed does not deploy third-party advertising networks or cross-site tracking cookies on our platform. We do not share your browsing behaviour on 666bed.app with advertising platforms, social media networks, or data brokers. Your activity on our platform stays within our platform.

5 Data Retention & Deletion

666bed retains your personal data for as long as your account remains active and for a defined period after account closure, in accordance with our legal and regulatory obligations. We do not retain data beyond the period for which a legitimate purpose exists.

5.1 Retention Periods

• Account and registration data: Retained for the lifetime of your account, plus a minimum of 5 years following account closure, to satisfy anti-money laundering (AML) record-keeping requirements.
• KYC identity documents: Retained for a minimum of 5 years from the date of your last financial transaction on the platform, in accordance with applicable financial compliance obligations.
• Financial transaction records: Retained for a minimum of 7 years from the date of each transaction, consistent with financial record-keeping best practices.
• Betting and gaming activity logs: Retained for 3 years following account closure, then anonymised for aggregate statistical purposes.
• Customer support communications: Retained for 3 years from the date of the support interaction.
• Technical and device logs: Retained for 12 months on a rolling basis, then automatically purged.

5.2 Requesting Data Deletion

You may request deletion of your 666bed account and associated personal data at any time by contacting [email protected]. Upon receiving your request, we will process account closure and initiate deletion of your data except where retention is required by law (see retention periods above). We will confirm completion of the deletion process within 30 days of your request. Please note that data subject to legal retention obligations cannot be deleted within the mandatory retention period regardless of your request.

6 Data Security Measures

Protecting your personal data is a core operational priority at 666bed. We implement a layered approach to data security that combines technical controls, organisational policies, and ongoing staff training to minimise the risk of unauthorised access, loss, or misuse of your data.

6.1 Technical Security Controls

• Transport Layer Security (TLS 1.3): All data transmitted between your device and 666bed servers is encrypted using TLS 1.3, the current industry standard for secure web communications. Our SSL certificate is verified and current.
• Password hashing: Passwords are never stored in plain text. We use industry-standard bcrypt hashing with a sufficiently high work factor to make brute-force attacks computationally infeasible.
• Database encryption: Sensitive data fields (including KYC document references, payment identifiers, and NID numbers) are encrypted at rest using AES-256 encryption.
• Access controls: Access to production systems and player data is restricted to authorised personnel on a strict need-to-know basis. All internal access is logged and regularly audited.
• Two-factor authentication: 2FA is available to all players and is mandatory for all 666bed internal staff accounts that have access to player data.

6.2 Incident Response

In the unlikely event of a data security incident that affects your personal data, 666bed maintains a documented incident response procedure. If a breach occurs that is likely to result in a risk to your rights and freedoms, we will notify you without undue delay — and in no event later than 72 hours after we become aware of the incident — by email to the address registered on your account. The notification will describe the nature of the incident, the categories of data affected, and the steps we are taking to address it.

7 Your Privacy Rights

As a player on the 666bed platform, you hold the following rights in relation to the personal data we hold about you. We are committed to honouring these rights promptly and without unnecessary barriers.

7.1 Right of Access

You have the right to request a copy of all personal data that 666bed holds about you. We will provide this in a structured, commonly used, machine-readable format within 30 days of receiving a valid request. Submit your access request to [email protected] with the subject line "Data Access Request" along with your account username and the email address registered to your account.

7.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You can update many personal details directly through your account settings. For data that cannot be self-corrected (such as KYC document records), contact our support team with the correct information and supporting documentation.

7.3 Right to Erasure

You may request deletion of your personal data as described in Section 5.2 above. We will fulfil erasure requests to the fullest extent permitted by our legal obligations. Where data must be retained for compliance reasons, we will clearly explain the basis for retention and the period after which deletion will take place.

7.4 Right to Restrict Processing

You may request that we restrict the processing of your personal data in certain circumstances — for example, while a complaint you have raised is under investigation, or where you have contested the accuracy of data we hold. During a processing restriction, we will continue to store your data but will not actively process it for any other purpose without your consent.

7.5 Right to Object

You have the right to object to our processing of your personal data where that processing is based on our legitimate interests. You also have the absolute right to object to your data being used for direct marketing purposes at any time, without needing to provide a reason. We will honour all marketing objections within 5 business days.

7.6 Right to Data Portability

Where processing is based on your consent or on a contractual necessity, you have the right to receive your personal data in a portable format that allows you to transfer it to another service provider if you choose. Contact [email protected] to make a portability request.

8 Contact & Privacy Queries

If you have any questions, concerns, or complaints about how 666bed handles your personal data, or if you wish to exercise any of the privacy rights described in Section 7, please contact our dedicated privacy support team using the details below.

8.1 Privacy Contact Details

All privacy-related queries should be directed to our support team. Please include "Privacy Query" or the specific right you are exercising (e.g., "Data Access Request", "Data Deletion Request") in the subject line of your message to ensure it reaches the appropriate team member promptly.

• Email (privacy queries): [email protected]
• Support availability: 24 hours a day, 7 days a week, including all public holidays in Bangladesh
• Response time target: Acknowledgement within 2 business days; full response within 30 calendar days
• Business hours timezone: Bangladesh Standard Time (BST, UTC+6)

8.2 Updates to This Privacy Policy

666bed reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform services. When we make material changes to this Policy, we will update the "Last Updated" date at the top of this document and, where the changes are significant, notify registered players by email to the address associated with their account. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data. Your continued use of the 666bed platform after any update constitutes acceptance of the revised Privacy Policy.