t6666 Privacy Policy

This Privacy Policy ("Policy") describes how t6666 ("we", "our", or "the Platform") collects, uses, stores, and protects personal data belonging to registered players and visitors to the t6666 website at https://t6666.ws (including any sub-domains and mobile-optimised versions operated under the t6666 brand, collectively referred to as the "Platform").

This Policy applies to all individuals who interact with the t6666 Platform, including registered account holders, persons who have commenced but not completed the registration process, and anonymous visitors who browse the Platform without registering. By accessing or using the Platform in any capacity, you acknowledge that you have read and understood this Policy.

This Privacy Policy should be read in conjunction with the t6666 Terms & Conditions and the t6666 Responsible Gaming policy, both of which are available on this website and are incorporated by reference into this Policy. Where a conflict arises between this Policy and the Terms & Conditions in relation to a data protection matter, this Policy shall take precedence.

We reserve the right to update this Policy at any time. The "Last Updated" date at the top of this page reflects when the current version entered into force. We encourage you to review this page periodically. Your continued use of the Platform following any update constitutes acceptance of the revised Policy.

t6666 is an online betting and casino platform operating at https://t6666.ws. The Platform provides cricket betting, live casino games, slots, and related services to eligible players located in Bangladesh and other permitted jurisdictions. For the purposes of this Policy, t6666 acts as the data controller in respect of all personal data submitted to or collected by the Platform.

As data controller, t6666 is responsible for determining the purposes and means by which personal data is processed. All enquiries relating to this Policy, data subject rights requests, and data protection concerns should be directed to our support team at the contact details provided in Section 14 of this Policy.

t6666 collects personal data through several channels: directly from you when you register an account or interact with the Platform; automatically through your use of the Platform via cookies and similar technologies; and from third-party payment providers and identity verification services where necessary to fulfil our compliance obligations.

The following table sets out the categories of personal data we collect, the primary source of that data, and the purpose for which it is collected:

3.1 Data We Do Not Collect

t6666 does not collect full payment card numbers, CVV codes, or bank account PINs. When payment card transactions are processed, card data is handled exclusively by the relevant payment gateway (e.g., Visa or Mastercard's issuing bank or processor) and is never stored on t6666 systems. Similarly, mobile wallet PINs for bKash, Nagad, Rocket, and Upay are entered directly in the respective mobile wallet app and are never transmitted to or stored by t6666.

3.2 Special Category Data

t6666 does not intentionally collect special category data (sometimes referred to as "sensitive personal data") such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data for identification purposes. In the event that you voluntarily disclose information of this nature to us (for example, in a support message), it will be treated with the highest level of confidentiality and will not be used for any purpose other than addressing the specific matter for which it was shared.

t6666 processes your personal data only for the purposes set out below. We do not process your data in any manner that is incompatible with these stated purposes without first obtaining your explicit consent.

• Account creation and management: To register your account, verify your identity, maintain your account profile, and provide you with access to all Platform features.
• Transaction processing: To process deposits and withdrawal requests in BDT (৳) via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard; to maintain accurate financial records; and to detect and prevent fraudulent transactions.
• KYC and compliance: To verify that you meet the minimum age requirement of 21 years; to fulfil our obligations under applicable anti-money-laundering (AML) best practices; and to respond to lawful requests from authorities where required.
• Service delivery: To provide cricket betting, live casino games, slots, and all other products available on the Platform; to settle bets and game outcomes accurately; and to apply bonuses and promotions to your account where you are eligible.
• Customer support: To respond to your enquiries, resolve disputes, investigate complaints, and provide technical assistance.
• Responsible gaming: To monitor your gambling behaviour for signs of problem gambling; to apply voluntary deposit limits, cool-off periods, and self-exclusion requests that you have activated; and to fulfil our commitment to player welfare.
• Security and fraud prevention: To detect, investigate, and prevent unauthorised access, account takeover, bonus abuse, collusion, match-fixing activity, and other prohibited conduct as described in the Terms & Conditions.
• Platform improvement: To analyse aggregated and anonymised usage data to improve the performance, design, and content of the Platform; to personalise your experience by presenting game recommendations and promotions relevant to your preferences.
• Marketing communications: To send you promotional emails or SMS messages about t6666 offers, seasonal promotions (e.g., BPL season, Eid offers, Pohela Boishakh specials), and new product launches — but only where you have provided your explicit consent to receive such communications. You may withdraw consent at any time by contacting [email protected].
• Legal obligations: To comply with applicable legal requirements, including record-keeping obligations and lawful authority requests.

For each processing activity described in Section 4, t6666 relies on one or more of the following legal bases:

t6666 does not sell, rent, or trade your personal data to any third party. We share personal data with third parties only in the limited circumstances described below, and only to the extent necessary for the specific purpose.

6.1 Payment Processing Partners

To process your deposits and withdrawals, t6666 shares your relevant financial and identity data with the payment service provider you have selected (e.g., bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, Mastercard). These providers act as independent data controllers for the payment transaction itself and are subject to their own privacy policies and security standards.

6.2 Game Content Providers

The t6666 Platform integrates casino games and live dealer services supplied by third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. To deliver these games, a limited set of non-identifying session data (such as a pseudonymous session token and bet/win values) may be shared with the relevant provider for the purpose of game delivery, bet settlement, and jackpot calculation. No full identity data (name, mobile number, national ID) is shared with game providers.

6.3 Identity Verification Services

Where t6666 employs a third-party KYC service provider to assist in verifying player identity documents, your identity document images and associated data will be transmitted to that provider over an encrypted connection. The KYC provider processes your data solely for the purpose of identity verification and is contractually prohibited from using it for any other purpose.

6.4 Legal & Regulatory Disclosure

t6666 may disclose your personal data to competent authorities, law enforcement bodies, courts, or other public institutions where we are required to do so by law, or where such disclosure is necessary to protect the legal rights of t6666 or to prevent or investigate suspected illegal activity, including match-fixing, money laundering, or fraud.

6.5 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of t6666's business assets, your personal data may be transferred to the acquiring entity as part of that transaction, subject to equivalent privacy protections being maintained. You will be notified of any such transfer in accordance with applicable law.

The t6666 Platform uses cookies and similar tracking technologies (including local storage and session storage) to ensure the Platform functions correctly, to remember your preferences, and to collect analytical data that helps us improve the Platform experience.

7.1 Types of Cookies Used

7.2 Managing Cookies

You can control non-essential cookies through your browser settings at any time. Most modern browsers allow you to refuse, delete, or receive alerts about cookies. Please note that disabling strictly necessary cookies will impair your ability to use the Platform, including the ability to log in and place bets. For instructions specific to your browser, refer to the browser's built-in help documentation.

t6666 retains your personal data for as long as your account remains active and for a further period as required by our compliance obligations and legitimate business interests. The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years after account closure, in accordance with AML record-keeping best practices.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, in line with financial record-keeping requirements.
• KYC document images: Retained for the duration of the account verification and for a minimum of five (5) years after account closure.
• Bet and game history: Retained for a minimum of three (3) years from the date of each transaction, available on request during this period.
• Support communications: Retained for three (3) years from the date of the last interaction, unless a longer retention period is required for dispute resolution.
• Technical and analytical data (anonymised): Retained indefinitely in aggregated, non-personally-identifiable form for Platform analytics purposes.
• Marketing consent records: Retained for the duration of your consent and for one (1) year after withdrawal of consent, as proof of the consent record.

Upon expiry of the applicable retention period, t6666 will securely delete or anonymise your personal data so that it can no longer be linked to you as an identifiable individual.

t6666 takes the security of your personal data seriously and has implemented a range of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, alteration, or disclosure. These measures include but are not limited to:

• 256-bit SSL/TLS encryption on all data transmitted between your device and t6666 servers, ensuring that your login credentials, payment details, and personal information cannot be intercepted in transit.
• Encrypted password storage: User passwords are never stored in plain text. t6666 uses a strong one-way cryptographic hash function with a unique salt per user to store password credentials.
• Access controls: Personal data is accessible only to t6666 staff members who require it to perform their role. Access is granted on a least-privilege basis and is subject to role-based access controls and audit logging.
• Infrastructure security: t6666 servers are hosted in data centres with physical security controls, redundant power and network connectivity, and regular security patching.
• Fraud detection systems: Automated systems monitor account activity for signs of unauthorised access, suspicious login attempts, and anomalous transaction patterns, with alerts triggered for manual review.
• Regular security reviews: t6666 conducts periodic internal security assessments to identify and remediate vulnerabilities in the Platform and its supporting infrastructure.

In the event of a personal data breach that poses a risk to your rights and freedoms, t6666 will take prompt action to contain the breach and will notify affected individuals in accordance with our incident response procedures and applicable obligations.

As a data subject, you have the following rights in relation to the personal data that t6666 holds about you. To exercise any of these rights, please submit a written request to [email protected] from the email address registered to your t6666 account. t6666 will respond to all rights requests within a reasonable timeframe and will not charge a fee for handling your request in ordinary circumstances.

10.1 Right of Access

You have the right to request a copy of the personal data that t6666 holds about you, along with information about how that data is being used, the categories of data held, the purposes of processing, and the third parties with whom it has been shared.

10.2 Right to Rectification

You have the right to request that t6666 correct any inaccurate personal data held about you, or complete any incomplete data. You can update basic profile information (such as your email address or mobile number) directly from within your account settings. For corrections to identity data that is subject to KYC verification, you will need to submit supporting documentation.

10.3 Right to Erasure

You have the right to request that t6666 delete your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent and there is no other legal basis for processing. Please note that this right is not absolute: t6666 may be required to retain certain data for compliance purposes (see Section 8) even where a deletion request is received.

10.4 Right to Restrict Processing

You have the right to request that t6666 restrict the processing of your personal data in certain circumstances, such as while a dispute about the accuracy of the data is being resolved, or where you object to processing based on legitimate interests and t6666 is assessing whether its interests override yours.

10.5 Right to Data Portability

Where t6666 processes your personal data on the basis of your consent or for the performance of a contract, and where that processing is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format, and to request that it be transferred to another data controller where technically feasible.

10.6 Right to Object

You have the right to object to t6666's processing of your personal data where that processing is based on legitimate interests, including profiling for in-Platform personalisation purposes. You also have an unconditional right to object to the use of your personal data for direct marketing purposes (including personalised bonus communications), which you may exercise by contacting [email protected] at any time.

10.7 Rights Related to Automated Decision-Making

t6666 may use automated processes to make certain decisions, such as flagging accounts for fraud review or applying deposit limits triggered by responsible gaming monitoring algorithms. You have the right to request human review of any automated decision that significantly affects you. To make such a request, contact [email protected] with details of the specific decision you are challenging.

If t6666 becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data from our records and to close the associated account. Any funds deposited by or on behalf of a minor may be withheld pending investigation in accordance with the Terms & Conditions.

If you are a parent or guardian and believe that a minor may have registered on the t6666 Platform using your personal details or payment methods, please contact us immediately at [email protected] so that we can investigate and take the appropriate action.

The t6666 Platform does not contain links to external third-party websites in its navigation or page content. However, in the event that you arrive at the t6666 Platform via a referral or affiliate link from an external source, please be aware that t6666 has no control over the privacy practices of any third-party websites and accepts no responsibility for their content or data handling policies.

t6666 is not responsible for the privacy practices or content of any external website that links to, or is linked from, the t6666 Platform, including the websites or apps of payment partners such as bKash, Nagad, Rocket, or Upay. We encourage you to review the privacy policies of any third-party service you use in connection with your t6666 account.

t6666 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to our privacy framework. When we make material changes to this Policy, we will update the "Last Updated" date at the top of this page and, where the changes are significant, we will take reasonable steps to notify registered users via email or an in-Platform notification.

We encourage you to review this Privacy Policy periodically to remain informed about how t6666 protects your personal data. The most current version of this Policy is always available at https://t6666.ws/privacy-policy. Your continued use of the Platform after any changes have been published constitutes your acceptance of the updated Policy.

If you do not agree with any changes made to this Privacy Policy, you have the right to close your account and request deletion of your personal data (subject to the retention requirements described in Section 8) by contacting our support team at [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which t6666 handles your personal data, please contact our support team using the details below. All privacy-related enquiries will be handled promptly and in strict confidence.

When submitting a data rights request (see Section 10), please include your registered username and the email address associated with your t6666 account so that we can verify your identity before processing the request. t6666 will not process data rights requests submitted by unverified third parties.

For responsible gaming support, self-exclusion requests, or assistance with deposit limits and cool-off periods, please also refer to our Responsible Gaming page, which provides detailed guidance on the tools and resources available to help you maintain control over your gambling activity.