Privacy Policy for 2666bd

1 Information We Collect

2666bd collects personal information through several channels during the course of your relationship with the platform. The categories of data we collect, and the primary context in which each category is gathered, are set out below.

1.1 Registration & Account Data

When you create a 2666bd account, we collect the information you voluntarily provide during the sign-up process. This includes your full legal name, date of birth, email address, mobile number, and your chosen username. Where you elect to provide it, we may also collect your home city or district (for example, Dhaka, Chittagong, Sylhet, Rajshahi, or Khulna) to assist with localised promotions and support.

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer obligations and responsible gaming commitments, we may request copies of identity documents including your National Identity Card (NID), passport, or driving licence. We may also request proof of address documents such as utility bills or bank statements. These documents are used exclusively for identity verification and fraud prevention purposes.

1.3 Financial &amp ; Payment Data

To process deposits and withdrawals in Bangladeshi Taka (BDT), we collect payment-related information. This includes your bKash, Nagad, Rocket, or Upay mobile wallet number, or the card details (card number, expiry date) associated with your Visa or Mastercard. For bank transfer transactions via Dutch-Bangla Bank or BRAC Bank, we collect the account number and branch details necessary to process the transfer. 2666bd does not store full card numbers on its own servers — card data is handled by PCI-DSS compliant payment processors.

1.4 Gameplay & Betting Data

We maintain records of your activity on the 2666bd platform, including the games you play (slots, live dealer tables, crash games), sports bets placed on cricket (BPL, T20 World Cup, IPL), football, kabaddi, and other markets, wager amounts, outcomes, bonus claims, and session durations. This data is used for account management, dispute resolution, responsible gaming monitoring, and platform improvement.

1.5 Technical & Device Data

When you access 2666bd, we automatically collect certain technical information from your device and browser. This includes your IP address, device type (mobile or desktop), operating system, browser type and version, screen resolution, time zone setting (Bangladesh Standard Time, UTC+6), referring URL, and pages visited within the platform. This data helps us maintain platform security, detect fraud, and improve the user experience.

1.6 Communications Data

If you contact our customer support team by email or live chat, we retain a record of that correspondence including your name, contact details, the nature of your query, and the support response provided. If you opt in to receive promotional communications from 2666bd (such as bonus alerts, BPL season promotions, or Eid special offers), we record that consent and maintain a log of communications sent to you.

The table below summarises the lawful basis on which 2666bd processes each category of personal data:

2 How We Use Your Data

The personal data 2666bd collects is used for the following specific purposes. We do not use your data for any purpose not described in this policy without first obtaining your explicit consent or where otherwise required by law.

• Account management: Creating, maintaining, and securing your 2666bd player account, including processing login requests, password resets, and account preference updates.
• Transaction processing: Executing deposit and withdrawal requests via bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and BRAC Bank. All financial transactions are processed in BDT.
• Identity and age verification: Confirming that you are aged 18 or above and that your identity matches the registration details provided, in compliance with our responsible gaming obligations.
• Fraud prevention and security: Monitoring transactions and account activity for signs of fraudulent behaviour, money laundering, unauthorised access, or bonus abuse. Where suspicious activity is detected, the relevant data may be shared with law enforcement or financial intelligence authorities.
• Customer support: Responding to account queries, technical issues, payment disputes, and responsible gaming requests. Support communications are retained to maintain a consistent service history.
• Responsible gaming monitoring: Analysing gameplay patterns to identify potential signs of problem gambling. Where our monitoring flags a concern, we may proactively contact the affected player and apply temporary account restrictions in line with our Responsible Gaming policy.
• Promotional communications: Where you have opted in, sending you promotional emails or notifications about bonuses, cricket season offers, BPL promotions, Eid specials, Pohela Boishakh events, and other platform news. You may withdraw this consent at any time by contacting support at [email protected].
• Platform improvement: Using aggregated, anonymised usage data to analyse player behaviour patterns, identify popular games, optimise the platform interface, and develop new features. This analysis does not involve individual profiling for automated decision-making.
• Legal compliance: Retaining records as required by applicable law, responding to lawful requests from competent authorities, and maintaining audit trails for regulatory purposes.

3 Data Sharing & Third Parties

2666bd does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share personal data only in the specific, limited circumstances described below, and only to the extent necessary for each purpose.

• Payment processors: To execute deposits and withdrawals, we share necessary payment data with our payment processing partners including mobile financial service providers (bKash, Nagad, Rocket, Upay) and card processors (Visa, Mastercard network acquirers). These processors handle your data under their own privacy frameworks and applicable PCI-DSS standards.
• Game content providers: The games available on 2666bd are provided by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you launch a game, basic session data (player ID, wager amounts, game outcomes) may be transmitted to the relevant provider's servers to run the game. These providers are contractually prohibited from using this data for purposes beyond game delivery.
• Identity verification services: Where automated KYC checks are conducted, we may share document images and identity data with specialist identity verification service providers. These providers operate under strict data processing agreements with 2666bd and may not retain your documents beyond the verification period.
• Analytics providers: We use privacy-respecting web analytics tools to understand how players interact with the 2666bd platform. Any data shared with analytics providers is anonymised or pseudonymised before transmission and cannot be used to identify you individually.
• Legal and regulatory authorities: We may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities in Bangladesh where we are legally required to do so, or where disclosure is necessary to prevent fraud, money laundering, or other criminal activity.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of the 2666bd business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy practices of the new controller before your data is processed under different terms.

4 Cookies & Tracking Technologies

2666bd uses cookies and similar tracking technologies on its website to provide core platform functionality, remember your preferences, maintain session security, and analyse usage patterns. A cookie is a small text file placed on your device by your browser when you visit a website. Cookies do not contain executable code and cannot access other files on your device.

The following categories of cookies are used on the 2666bd platform:

• Strictly necessary cookies: These cookies are essential for the operation of the 2666bd platform and cannot be switched off. They include session authentication tokens, CSRF protection tokens, and load-balancing cookies. Without these cookies, core platform functions such as login, game loading, and cashier access would not be possible. No consent is required for strictly necessary cookies.
• Functional cookies: These cookies remember your platform preferences such as your preferred display language (English), default bet denomination, and interface layout settings. They persist across sessions to provide a consistent experience each time you log in from Bangladesh or abroad.
• Analytics cookies: We use anonymised analytics cookies to understand aggregate usage patterns — which pages are visited most frequently, where users encounter friction in the deposit journey, and how long sessions last on average. This data is used only in aggregated form to improve the platform and cannot be used to identify you personally.
• Marketing / retargeting cookies: If you have opted in to marketing communications, limited cookies may be used to associate your browsing session with promotional campaigns. These cookies do not share your data with third-party advertising networks and are used solely for 2666bd's own promotional communications.

Managing cookies: You can control or delete cookies through your browser settings at any time. Most modern browsers (Chrome, Firefox, Safari, Edge) allow you to block all third-party cookies, clear existing cookies, or receive a notification each time a new cookie is set. Please note that disabling strictly necessary cookies will impair or entirely prevent access to the 2666bd platform. Disabling functional cookies will mean your preferences are not saved between sessions.

5 Data Security Measures

Protecting your personal data from unauthorised access, loss, or misuse is a technical and operational priority for 2666bd. We maintain a layered security architecture that covers data in transit, data at rest, and access control within our internal systems.

• TLS/SSL encryption: All data transmitted between your browser or app and the 2666bd servers is encrypted using TLS 1.2 or higher. The presence of HTTPS in the browser address bar confirms that your connection to 2666bd is encrypted at all times.
• Data at rest encryption: Sensitive data stored on 2666bd servers — including identity documents, payment method details, and account credentials — is encrypted at rest using industry-standard AES-256 encryption.
• Password hashing: Your account password is never stored in plain text. It is hashed using a strong, salted cryptographic algorithm before storage, meaning that even internal staff cannot read your password.
• Access controls: Access to personal data within 2666bd's internal systems is restricted to staff members who require it to perform their specific job function. Access is granted on a least-privilege basis and is subject to regular review and audit.
• Two-factor authentication: Players are strongly encouraged to enable two-factor authentication (2FA) on their accounts. 2FA adds a second verification step — typically a one-time code sent to your registered mobile number — that prevents account access even if your password is compromised.
• Fraud monitoring: 2666bd operates automated and manual monitoring systems that flag unusual login patterns, atypical transaction behaviour, and other indicators of account compromise. Flagged accounts may be temporarily suspended pending security review.
• Incident response: In the event of a confirmed data security incident that poses a material risk to your personal data, 2666bd will notify affected players without undue delay and will take all reasonable steps to contain the breach, assess its scope, and prevent recurrence.

6 Data Retention Periods

2666bd retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply to the principal categories of personal data we hold:

• Account data (active accounts): Retained for the full duration of the account relationship plus a minimum of five years following account closure, to comply with anti-money laundering record-keeping obligations.
• KYC / identity documents: Retained for a minimum of five years following account closure or the completion of the transaction to which the KYC check relates, in accordance with AML compliance requirements.
• Financial transaction records: Retained for a minimum of five years from the date of each transaction. This retention period applies regardless of account status and is a legal compliance requirement.
• Gameplay and betting records: Retained for five years from the date of each session or wager, to support dispute resolution and responsible gaming monitoring obligations.
• Customer support correspondence: Retained for three years from the date of the last communication in a support thread, to provide a consistent service history and support any future complaints.
• Marketing consent records: Retained for the duration of the marketing relationship plus two years following withdrawal of consent, to demonstrate compliance with consent requirements.
• Server log and technical data: Typically retained for 90 days on a rolling basis, except where a specific log is required for a security investigation, in which case it may be retained for the duration of that investigation.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual. If you submit a data erasure request (see Your Privacy Rights below), we will assess it against applicable retention obligations before processing.

7 Your Privacy Rights

As a player on the 2666bd platform, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact us at [email protected] with your account username and a clear description of your request. We will acknowledge your request within five business days and aim to complete it within 30 days.

• Right of access: You have the right to request a copy of the personal data 2666bd holds about you. We will provide this in a structured, commonly used, machine-readable format. Your first access request each calendar year is provided free of charge.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Account details such as your email address and mobile number can typically be updated directly within your account settings.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other lawful basis applies), or where the data has been processed unlawfully. Please note that we may be required to retain certain data for legal compliance reasons even following an erasure request.
• Right to restrict processing: In certain circumstances (for example, where you contest the accuracy of data we hold, or where processing is unlawful but you prefer restriction over erasure), you may request that we limit how we use your data while the matter is under review.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you have the right to receive your personal data in a structured, machine-readable format and to request that it be transferred directly to another data controller where technically feasible.
• Right to withdraw consent: Where 2666bd processes your data on the basis of your consent (such as for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. To withdraw marketing consent, contact [email protected].
• Right not to be subject to automated decisions: 2666bd does not make legally significant automated decisions about individual players based solely on automated processing. Human review is applied to all account suspension decisions, KYC rejections, and responsible gaming interventions.

8 Policy Updates & Contact

2666bd reviews and updates this Privacy Policy periodically to reflect changes in platform functionality, applicable law, or industry best practice. When a material change is made to this policy, we will notify registered players via email to the address associated with their account and display a prominent notice on the 2666bd platform for a minimum of 30 days following the update.

The date of the most recent revision is displayed at the top of this page under the "Last Updated" label in the hero section. We recommend that you review this policy periodically, especially following any notification of an update. Continued use of the 2666bd platform after a policy update constitutes your acceptance of the revised terms.

Governing Language: This Privacy Policy is written in English and shall be interpreted according to its English-language text. In the event of any ambiguity or dispute over interpretation, the English version of this document is the authoritative reference.

Contact the 2666bd Privacy Team: If you have any questions, concerns, or complaints regarding this Privacy Policy or the way 2666bd handles your personal data, please contact us using the details below. We are committed to addressing all privacy-related enquiries promptly and transparently.