Privacy Policy — Your Data at www666

When you interact with the www666 platform — whether by visiting our website, registering an account, making a deposit, placing a bet, or contacting our support team — we may collect the following categories of personal data:

1.1 Registration and Identity Data

When you create a www666 account, we collect the information you provide directly, including:

• Full legal name as it appears on your official identification document.
• Date of birth (used to verify that you are aged 18 or above).
• Email address (used as your primary account identifier and for service communications).
• Country of residence (used for geographic eligibility assessment and localisation).
• Phone number, if you choose to provide it for two-factor authentication or account recovery.
• Username and encrypted password (your password is never stored in plain text).

1.2 Know Your Customer (KYC) Verification Data

To comply with our anti-money laundering obligations and to verify your identity before processing withdrawals, we may request and retain copies of the following documents:

• A government-issued photographic ID, such as a National Identity Card (NID), passport, or driver's licence.
• Proof of address, such as a recent utility bill, bank statement, or mobile financial service statement issued to your registered address.
• Proof of payment method ownership, such as a screenshot of your bKash, Nagad, or Rocket account displaying your registered mobile number and name.
• Source of funds documentation, if requested as part of an enhanced due diligence review.

All KYC documents are stored in encrypted form and accessed only by authorised www666 compliance personnel.

1.3 Financial and Transaction Data

When you deposit or withdraw funds on www666, we record the following transaction-related information:

• Deposit and withdrawal amounts in Bangladeshi Taka (৳).
• Payment method used (e.g., bKash, Nagad, Rocket, Upay, Visa, Mastercard).
• Transaction reference numbers and timestamps.
• Running account balance history.
• Bonus credits issued, wagering progress, and promotional participation records.

www666 does not store full card numbers, CVV codes, or bank PINs. Card payments are processed via PCI-DSS-compliant third-party payment gateways that tokenise your payment credentials.

1.4 Betting and Gaming Activity Data

A detailed record of your activity on the www666 platform is maintained for operational, compliance, and responsible gaming purposes:

• All sports bets placed, including market, selection, stake, odds, and settlement outcome.
• All casino game sessions, including game name, provider, session start and end time, total stakes, and outcomes.
• Instant game activity on titles such as Mines Gold.
• Session duration, login times, and logout times.
• Responsible gaming tool activations, including deposit limits set, self-exclusion requests, and cooling-off periods taken.

1.5 Technical and Device Data

When you visit www666.bet, our servers automatically collect the following technical data:

• IP address (used for fraud detection, geographic access assessment, and session security).
• Browser type and version.
• Operating system and device type.
• Screen resolution and language settings.
• Pages visited, time spent on each page, referring URL, and exit URL.
• Cookie identifiers (see Section 4 — Cookies and Tracking Technologies).

1.6 Communications Data

If you contact www666 via email, live chat, or any other support channel, we retain a record of that correspondence, including the content of the messages and any attachments you send. This is used to resolve your query, maintain a support history, and improve our customer service processes.

www666 does not sell, rent, or trade your personal data. We may share data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.

3.1 Payment Processing Partners

To process deposits and withdrawals, www666 shares the minimum necessary transaction data with our payment processing partners, including bKash, Nagad, Rocket, Upay, and our international card processing gateway. The data shared is limited to the information required to execute the transaction (e.g., account number, transaction amount, reference ID). Payment partners operate under their own privacy policies and are independently responsible for the security of data within their systems.

3.2 Identity Verification and KYC Providers

Where www666 uses a third-party identity verification provider to assist with KYC document checks, we may transmit your identification documents to that provider for automated or manual review. All such providers are contractually bound to process your data solely for the purpose of identity verification and to maintain appropriate data security standards.

3.3 Game and Software Providers

www666 integrates games from third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game hosted by one of these providers, certain session data (such as your session token and stake amounts) is transmitted to the provider's servers to enable game functionality. Game providers receive session-level data only and do not receive your full personal profile, payment method details, or identity documents.

3.4 Fraud Prevention and Security Services

www666 may share IP addresses, device fingerprints, and behavioural data with specialist fraud prevention and cybersecurity service providers. This sharing is undertaken on the basis of our legitimate interest in protecting the platform and all players from fraudulent activity, money laundering, and account takeover attacks.

3.5 Legal and Regulatory Obligations

www666 may disclose your personal data to law enforcement agencies, government authorities, courts, or regulatory bodies where required to do so by applicable law, by a valid court order, or in response to a lawful request from a competent authority. In such cases, we will disclose only the data specifically requested and will, where legally permitted, notify you that a request has been received.

3.6 Business Transfers

In the event that www666 undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, your personal data may be transferred to the acquiring or successor entity as part of that transaction. You will be notified of any such transfer and of any material changes to how your data will be processed by the new entity via email to your registered address.

3.7 No Third-Party Advertising

www666 does not share your personal data with third-party advertising networks, social media platforms, data analytics resellers, or marketing agencies for the purpose of targeted advertising. Your www666 account data and betting activity remain confidential and are not used to build commercial advertising profiles.

www666 does not retain your personal data for longer than is necessary to fulfil the purpose for which it was collected, subject to any legal obligation that requires us to keep data for a minimum period. The following retention schedule applies to the principal categories of personal data we hold:

Data Category	Retention Period	Reason
Account registration data	Duration of account + 5 years after closure	Anti-money laundering compliance
KYC identity documents	Duration of account + 5 years after closure	AML / fraud investigation obligations
Financial transaction records	Duration of account + 7 years after closure	Financial record-keeping obligations
Betting and gaming history	Duration of account + 5 years after closure	Dispute resolution / compliance audit
Customer support correspondence	3 years from date of last contact	Complaint escalation and service review
Marketing consent records	Until withdrawal of consent + 2 years	Demonstrate lawful basis for marketing
Technical / server log data	90 days (rolling)	Security incident investigation
Anonymised analytics data	Indefinite (no personal identifiers)	Product improvement — not personal data

Data Storage Location

www666 stores personal data on secure servers operated by reputable cloud infrastructure providers. Data may be stored in data centres located outside of Bangladesh. Wherever data is stored or processed, www666 ensures that appropriate contractual and technical safeguards are in place to protect it to a standard equivalent to or exceeding the protections described in this Privacy Policy.

Data Deletion on Account Closure

When your www666 account is closed — whether at your request or by www666 — we initiate a data review process. Data that has passed its retention period is securely deleted or irreversibly anonymised. Data subject to an ongoing retention obligation (see the table above) is placed in a restricted, access-controlled archive and is not used for any active processing purpose during the retention period.