1666bd Privacy Policy

01 Data We Collect

1666bd collects personal data from players in Bangladesh through a number of channels, including account registration, identity verification, payment processing, platform usage, and communications with our support team. The categories of data we collect are set out below.

1.1 Registration & Identity Data

When you create a 1666bd account, we collect the following information:

• Full legal name as it appears on your government-issued identification.
• Date of birth (used to verify that you are aged 18 or above).
• Mobile phone number registered in Bangladesh.
• Username and a hashed (non-reversible) version of your password.
• Copies of identity documents provided during KYC verification, such as your National Identity Card (NID) or passport.

1.2 Payment & Transaction Data

To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard, we collect:

• The mobile wallet number or bank account number used for transactions (masked after verification).
• Transaction reference numbers and amounts in Bangladeshi Taka (BDT).
• Deposit and withdrawal history associated with your account.

1666bd does not store full card numbers, CVV codes, or mobile banking PINs on its own servers. Payment authentication is handled directly by the respective payment networks.

1.3 Usage & Technical Data

When you access the 1666bd platform, our systems automatically record certain technical information:

Data Type	Examples	Purpose
Device information	Device type, operating system, browser version	Platform optimisation, fraud detection
IP address	Approximate location (city-level), ISP name	Security monitoring, duplicate account detection
Session data	Login time, session duration, pages visited	Responsible gaming monitoring, UX improvement
Betting & game history	Markets placed, stakes, outcomes, game titles	Account management, dispute resolution, AML compliance
Communication logs	Live chat transcripts, support email content	Customer support, quality assurance

1.4 Voluntarily Provided Data

From time to time you may provide additional data voluntarily, for example when completing a responsible gaming self-assessment, submitting a formal complaint, or participating in a survey or promotion. This data is stored alongside your account record and used only for the purpose for which it was provided.

02 How We Use Your Data

1666bd uses the personal data we collect for the following purposes. We process your data only where we have a legitimate basis to do so, which includes performing our contract with you, complying with legal obligations, protecting our legitimate business interests, or where you have given us your consent.

2.1 Account Management & Service Delivery

• Creating, maintaining, and securing your 1666bd player account.
• Verifying your identity and age to meet our 18+ obligation.
• Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfer.
• Delivering the sports betting, live casino, slots, and fishing game services you have requested.
• Responding to your customer support queries and resolving disputes.

2.2 Security & Fraud Prevention

• Detecting and preventing fraudulent activity, money laundering, and collusion.
• Identifying and closing duplicate accounts.
• Monitoring for unusual transaction patterns that may indicate financial crime.
• Verifying that accounts subject to self-exclusion or cooling-off periods do not re-register.

2.3 Responsible Gaming

1666bd uses session data, betting history, and deposit patterns to monitor player behaviour for signs of problem gambling. Where our systems or support team identify indicators of potential harm, we may contact you proactively to offer responsible gaming tools, including deposit limits, session reminders, and self-exclusion options. This use of your data is in your direct interest and forms part of our responsible gaming obligations.

2.4 Legal & Regulatory Compliance

We are required to retain certain categories of data — including identity documents, transaction records, and communication logs — to meet our anti-money laundering (AML) and know-your-customer (KYC) obligations. Data processed for compliance purposes may be retained for periods longer than data processed for service delivery.

2.5 Platform Improvement & Analytics

Aggregated, anonymised usage data is analysed to improve the performance, design, and content of the 1666bd platform. This analysis does not identify individual players and is used solely to enhance the overall user experience for players across Bangladesh.

03 Data Sharing & Third Parties

1666bd does not sell your personal data to any third party. We share your data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

3.1 Payment Service Providers

To process your deposits and withdrawals, 1666bd shares the minimum necessary transaction data with our payment partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. These providers are bound by their own privacy obligations and applicable financial regulations and are not permitted to use your data for any purpose other than completing your transaction.

3.2 Game Technology Providers

Games on the 1666bd platform are supplied by third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you access a game supplied by one of these providers, your game session data (including stakes, outcomes, and session duration) is processed by that provider's platform. These providers operate under their own data protection frameworks and do not receive your identity or payment data from 1666bd.

3.3 Compliance & Legal Authorities

1666bd may be required by law to disclose your personal data to regulatory bodies, law enforcement agencies, or financial intelligence units in connection with an active investigation into suspected money laundering, fraud, or other financial crime. Such disclosures are made strictly in accordance with applicable legal requirements and only to the extent required. Where permissible, we will notify you of such a disclosure.

3.4 Business Transfers

In the event that 1666bd undergoes a merger, acquisition, or sale of its assets, player data may form part of the transferred assets. In such circumstances, the acquiring entity will be bound by the terms of this Privacy Policy or an equivalent policy providing no lesser protection of your data. You will be notified of any material change to the data controller responsible for your information.

04 Cookies & Tracking Technologies

The 1666bd platform uses cookies and similar tracking technologies to deliver a functioning, secure, and personalised experience. A cookie is a small text file stored on your device by your browser when you visit our platform. The cookies we use fall into the following categories:

Cookie Type	Purpose	Can Be Disabled?
Essential / Session	Maintain your login session, remember your account between pages, enable secure transactions	No — required for the platform to function
Security	Detect and prevent fraudulent logins, identify suspicious device behaviour	No — required for account protection
Analytics	Understand aggregated page usage, identify performance issues, improve platform design	Yes — via your browser cookie settings
Preference	Remember your language preference, display settings, and last visited sections	Yes — via your browser cookie settings

4.1 Managing Cookies

You can control or delete non-essential cookies at any time through your browser settings. The steps to do so vary by browser — consult your browser's help documentation for guidance. Please note that disabling essential or security cookies will prevent you from logging in and using the 1666bd platform. Disabling analytics or preference cookies will not affect your access to core platform features.

4.2 Third-Party Tracking

1666bd does not permit third-party advertising networks to place tracking cookies on our platform. Analytics data collected through our own tools is aggregated and anonymised before analysis and is not linked back to individual player identities.

05 Data Security & Storage

The security of your personal data is a core operational priority at 1666bd. We implement a layered set of technical and organisational controls designed to protect your information against unauthorised access, loss, destruction, or alteration.

5.1 Technical Safeguards

• SSL/TLS Encryption: All data in transit between your device and our servers is encrypted using SSL/TLS protocols. You can verify this by checking for the padlock icon in your browser's address bar when visiting 1666bd.app.
• Password Hashing: Your account password is stored as a one-way cryptographic hash. 1666bd staff cannot read your password. If you forget it, a reset is required — recovery of the original password is not possible.
• Access Controls: Access to systems that store player data is restricted to authorised personnel on a need-to-know basis, protected by multi-factor authentication and access logging.
• Regular Security Audits: Our platform undergoes periodic security assessments to identify and remediate vulnerabilities before they can be exploited.

5.2 Data Storage Location

Player data is stored on servers located in secure data centres. Where data is processed by third-party service providers (such as game technology vendors), those providers are contractually required to maintain equivalent security standards and to process your data only for the purpose agreed with 1666bd.

5.3 Breach Notification

In the unlikely event of a data breach that poses a risk to your rights or interests, 1666bd will notify affected players as soon as reasonably practicable following discovery of the breach. Notification will be sent to the mobile number or email address associated with your account and will describe the nature of the breach, the data affected, and the steps we are taking to address it.

06 Your Data Rights

As a player using the 1666bd platform, you hold a number of rights in relation to the personal data we hold about you. You may exercise any of these rights by contacting our support team at [email protected]. We will respond to all verified requests within 14 business days.

6.1 Summary of Your Rights

• Right of Access: You may request a copy of all personal data we hold about you, including your account details, betting history, transaction records, and any identity documents submitted during KYC.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. Minor details such as contact numbers can be updated directly in your account settings.
• Right to Erasure: You may request deletion of your personal data where we no longer have a legal basis to retain it. Please note that data required for AML, KYC, or ongoing compliance purposes cannot be deleted until the applicable retention period has elapsed.
• Right to Restrict Processing: You may request that we pause the processing of your data in certain circumstances, for example while a correction request is under review.
• Right to Data Portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format where the data was provided by you and processed on the basis of your consent or a contract.
• Right to Object: You may object to the processing of your data where that processing is based on our legitimate interests, including profiling for responsible gaming monitoring.
• Right to Human Review: Where an automated system has made a decision affecting your account, you have the right to request that a human member of our compliance team reviews that decision.

07 Data Retention

1666bd retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by our legal and compliance obligations. The retention periods below are indicative and may vary based on specific regulatory requirements applicable at the time.

Data Category	Retention Period	Reason
Account registration data	Duration of account + 5 years after closure	AML and KYC compliance obligations
Identity verification documents	Duration of account + 5 years after closure	Regulatory record-keeping requirements
Transaction records	Duration of account + 5 years after closure	Financial audit trail and AML compliance
Betting & game history	Duration of account + 2 years after closure	Dispute resolution, responsible gaming review
Support communications	2 years from last interaction	Quality assurance, dispute evidence
Analytics & session data	13 months (rolling)	Platform performance improvement
Self-exclusion records	Indefinite (or duration of exclusion + 5 years)	Prevention of re-registration during exclusion period

Once a retention period has elapsed and there is no ongoing legal requirement to retain your data, 1666bd will securely delete or anonymise it so that it can no longer be linked to you as an individual.

08 Policy Updates & Contact

8.1 Changes to This Privacy Policy

1666bd reviews and updates this Privacy Policy periodically to reflect changes in our services, technology, legal requirements, or business practices. When we make a material change — that is, a change that meaningfully affects how we collect, use, or share your data — we will notify you by posting a prominent notice on the 1666bd platform and, where appropriate, by sending a notification to your registered mobile number.

The "Effective" date at the top of this policy indicates when the current version came into force. We encourage you to review the Privacy Policy whenever you visit the platform to stay informed about how your data is handled. Continued use of the 1666bd platform following publication of an updated Privacy Policy constitutes your acceptance of the changes.

8.2 Contact Us About Privacy

If you have any questions, concerns, or complaints about how 1666bd handles your personal data, or if you wish to exercise any of your data rights, please contact our support team. We aim to handle all privacy-related enquiries with care and to respond within 14 business days of receipt.

For questions specifically about your account security, suspicious activity, or to report an unauthorised login, please contact support immediately at [email protected] and include "Security Concern" in the subject line. Our team monitors security-related requests around the clock and will prioritise your case.