w6666 Privacy Policy — How We Handle Your Data

w6666 processes your personal data only for lawful, specified, and legitimate purposes. Below is a complete description of each purpose for which your data may be used, along with the legal basis for that processing.

2.1 Account Management

We use your identity and contact data to create and maintain your w6666 account, authenticate your login sessions, and communicate important account-related information such as withdrawal confirmations, security alerts, and policy updates. This processing is necessary for the performance of the contract between you and w6666.

2.2 Payment Processing

Your financial data and identity data are used to process deposits and withdrawals in Bangladeshi Taka (৳) via your chosen payment method. We verify that the payment account belongs to you to comply with anti-money laundering (AML) requirements. This processing is necessary for contract performance and legal compliance.

2.3 Identity Verification (KYC)

Before approving a player's first withdrawal request, w6666 is required to verify the player's identity, age, and the source of their deposited funds. The verification documents you submit are processed for this purpose and are stored securely for the duration required by applicable record-keeping obligations. This processing is required for legal compliance.

2.4 Responsible Gaming and Player Protection

We monitor player behaviour — including session frequency, deposit amounts, loss patterns, and game preferences — to identify indicators of problem gambling and to enforce the responsible gaming limits set in your account dashboard. This processing is carried out to protect the vital interests of players and to meet our responsible gaming obligations. For more information, visit the Responsible Gaming page.

2.5 Fraud Prevention and Platform Security

Technical data including IP address, device fingerprint, and session patterns are analysed to detect and prevent unauthorised account access, bonus abuse, collusion, money laundering, and other forms of fraud. This processing is in the legitimate interests of w6666 and its player community.

2.6 Customer Support

Communications you send to the w6666 support team — including emails, live chat transcripts, and feedback submissions — are stored and processed to resolve your enquiry and to improve the quality of our support services. Support records are retained for a period of three years from the date of the interaction.

2.7 Marketing and Promotions

With your explicit consent, we may use your contact data to send you promotional communications about w6666 bonuses, seasonal offers (such as Eid promotions or BPL cricket season specials), and new game releases. You may withdraw your marketing consent at any time by updating your notification preferences in the account dashboard or by emailing [email protected]. Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to withdrawal.

w6666 does not sell your personal data to third parties under any circumstances. We may share limited data with trusted service providers who help us operate the platform, subject to strict data processing agreements that prohibit those providers from using your data for any purpose other than the service they provide to w6666.

4.1 Categories of Third-Party Recipients

• Payment processors — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank receive only the transaction data required to process your specific deposit or withdrawal request.
• Identity verification providers — third-party KYC service providers receive copies of the documents you submit for identity verification. These providers are contractually bound to process documents solely for verification purposes.
• Game content providers — Pragmatic Play, Evolution Gaming, Ezugi, Microgaming, Spribe, and other licensed game studios receive a unique player token (not your real name or contact details) to manage your game session and return results to the w6666 platform.
• Cloud infrastructure providers — server and database hosting providers who store w6666 platform data in secure, access-controlled data centres. These providers act as data processors under binding contractual terms.
• Fraud prevention services — anonymised device and behavioural signals may be shared with fraud detection databases to identify known bad actors.

4.2 Legal Disclosures

w6666 may disclose your personal data to law enforcement agencies, regulatory authorities, or courts where required to do so by applicable law, court order, or lawful government request. We will notify you of any such disclosure where we are legally permitted to do so. We will not disclose more data than is strictly required to satisfy the legal obligation.

4.3 Business Transfers

In the event that w6666 is acquired by, merges with, or transfers substantially all of its assets to another entity, registered player data may form part of the transferred assets. You will be notified of any such transfer via the email address registered to your account prior to your data being transferred and subjected to a new privacy policy.

w6666 implements a layered approach to data security, combining technical controls, organisational policies, and staff training to protect player personal data against unauthorised access, accidental loss, destruction, or disclosure.

6.1 Technical Security Controls

• TLS/SSL encryption — all data in transit between your browser and the w6666 platform is encrypted using TLS 1.2 or higher.
• Data encryption at rest — sensitive personal data stored in w6666 databases is encrypted using AES-256 encryption.
• Access controls — access to personal data is restricted to w6666 staff members who have a legitimate operational need. Access is governed by role-based permissions and requires multi-factor authentication.
• Intrusion detection — w6666 operates continuous network monitoring and intrusion detection systems to identify and respond to security incidents in real time.
• Regular security audits — w6666 conducts periodic internal security reviews and engages third-party security professionals to perform penetration testing on the platform.

6.2 Incident Response

In the event of a personal data breach that poses a risk to the rights and freedoms of affected players, w6666 will notify affected players via their registered email address without undue delay. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the measures taken or proposed to address the breach.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or need to report a potential data security issue, please contact the w6666 data support team using the details below. All privacy-related correspondence is handled in English.

8.1 How to Submit a Data Request

To exercise any of your data rights — including access, rectification, erasure, portability, or objection — send an email to [email protected] with the subject line "Data Rights Request". Your request must include:

• Your full registered name as it appears on your w6666 account
• The email address associated with your w6666 account
• A clear description of the right you wish to exercise and the data it relates to
• A copy of a valid government-issued photo ID to verify your identity (required for access, erasure, and portability requests)

We will acknowledge your request within 5 business days and provide a full response within 30 calendar days. Identity verification is required before we can action any request that involves disclosing, modifying, or deleting account data to ensure we do not inadvertently process a fraudulent request on your account.

8.2 Reporting a Security Concern

If you believe you have discovered a security vulnerability in the w6666 platform, or if you suspect that your account has been accessed without your authorisation, please contact us immediately at [email protected] with the subject line "Security Report". Our security team monitors this address around the clock and will respond to urgent security reports within 24 hours.

8.3 Policy Updates

w6666 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, new service features, or evolving legal and regulatory requirements. When a material change is made to this policy, we will notify registered players via their account email address at least 14 days before the change takes effect. The updated policy will also be published on this page with a revised "Last Updated" date at the top. Continued use of the w6666 platform after the effective date of a revised policy constitutes acceptance of the updated terms.