Privacy Policy — How 66bat Collects, Uses and Protects Your Personal Data

This Privacy Policy sets out the practices of 66bat in relation to the collection, use, storage, disclosure and protection of personal data belonging to players and visitors who access the 66bat platform at https://66bat.io. It is intended to provide clear and transparent information about how 66bat handles your personal data in accordance with applicable data protection principles.

This policy should be read together with the 66bat Terms & Conditions and the 66bat Responsible Gaming Policy, both of which are available on this platform and are incorporated by reference. Together these documents form the full framework governing your relationship with 66bat.

For the purposes of applicable data protection law, 66bat acts as the data controller in respect of all personal data collected from players and visitors on the platform. As data controller, 66bat determines the purposes and means by which your personal data is processed.

If you have any questions or concerns about how 66bat processes your personal data, or if you wish to exercise any of your data rights as described in Section 8 of this policy, you may contact the 66bat data protection team using the following details:

All data-related enquiries will be acknowledged within 5 business days and responded to in full within 30 calendar days of receipt, in accordance with applicable data protection obligations.

66bat collects the following categories of personal data from players and visitors. The table below summarises each category, the specific data types involved, and the primary purpose for which each category is collected:

We do not intentionally collect special categories of sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data unless specifically required for identity verification in accordance with applicable compliance obligations.

66bat collects personal data through the following channels and mechanisms:

• Direct Submission: Data you provide directly when registering an account, completing identity verification, making a deposit or withdrawal, contacting support, or responding to any platform communication.
• Automated Technical Collection: Technical and usage data collected automatically when you access the 66bat platform, including IP address, device identifiers, session data, and browsing behaviour on the platform. This is collected through server logs and standard web analytics mechanisms.
• Cookies and Similar Technologies: Data collected through cookies, local storage objects, and similar tracking mechanisms placed on your device when you browse the 66bat platform. Full details are provided in Section 9 of this policy.
• Payment Processing Partners: Transactional confirmation data received from payment partners such as bKash, Nagad, Rocket and Upay when you initiate a deposit or withdrawal through their respective systems. 66bat receives only the data necessary to confirm and reconcile the transaction.
• Game Providers: Session and outcome data from third-party game providers such as Pragmatic Play, Evolution Gaming, Spribe and Microgaming, relating to games played by you on their platforms via the 66bat interface. This data is used for account management, dispute resolution and responsible gaming purposes.
• Identity Verification Services: Confirmation data from third-party identity verification providers where 66bat uses such services to validate documents submitted by players during the account verification process.

66bat processes your personal data on one or more of the following legal bases, depending on the specific processing activity involved:

• Contractual Necessity: Processing required to perform the contract between you and 66bat — specifically, to operate your account, process your deposits and withdrawals, settle your bets, and deliver the gaming and betting services you have requested.
• Legal Obligation: Processing required to comply with applicable legal and regulatory obligations, including anti-money-laundering (AML) requirements, know-your-customer (KYC) obligations, and fraud prevention duties.
• Legitimate Interests: Processing carried out in pursuit of 66bat's legitimate business interests, where those interests are not overridden by your privacy rights. This includes platform security, fraud detection, responsible gaming monitoring, and service improvement activities. 66bat has conducted and documented legitimate interest assessments for all processing activities conducted on this basis.
• Consent: Processing carried out with your specific, informed and freely given consent. Consent-based processing at 66bat is limited primarily to optional communications such as promotional notifications. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

66bat uses the personal data it collects for the following specific purposes. Each purpose is linked to an appropriate legal basis as described in Section 5:

• Creating and maintaining your 66bat player account, including processing your registration information and verifying your identity.
• Processing deposits, withdrawals and in-platform transactions via bKash, Nagad, Rocket, Upay and other supported payment methods.
• Delivering the betting, sports gaming and casino services you access on the 66bat platform, including cricket betting markets, slot games, live casino sessions and fishing games.
• Conducting anti-money-laundering and fraud prevention checks in accordance with applicable compliance obligations.
• Monitoring your account activity for responsible gaming purposes, including identifying patterns that may indicate problem gambling behaviour and proactively offering support tools where appropriate.
• Communicating with you regarding your account status, transaction confirmations, verification requirements, and platform updates via your registered mobile number or email address.
• Responding to support enquiries, resolving disputes, and maintaining records of communications for quality assurance purposes.
• Analysing aggregated and anonymised usage data to improve platform performance, fix technical issues, and develop new features for Bangladeshi players.
• Sending you promotional communications about 66bat offers, bonuses and seasonal promotions — but only where you have provided consent for such communications and have not subsequently withdrawn that consent.
• Enforcing the 66bat Terms & Conditions and taking action against accounts engaged in prohibited conduct.

66bat does not sell your personal data to third parties under any circumstances. Data is shared with third parties only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose:

• Payment Processing Partners: bKash, Nagad, Rocket, Upay, Visa, Mastercard and relevant Bangladeshi banking institutions receive the transactional data necessary to process your deposits and withdrawals. These partners operate under their own privacy policies and applicable financial regulations.
• Game Technology Providers: Third-party game studios including Pragmatic Play, Evolution Gaming, Spribe, NetEnt and Microgaming receive session identifiers and gameplay data necessary to deliver their games through the 66bat platform interface.
• Identity Verification Providers: Where 66bat uses a third-party identity verification service, your identity documents and verification data are shared with that provider solely for the purpose of completing KYC compliance checks.
• Technology and Infrastructure Providers: Hosting, cloud infrastructure and platform security providers who process data on behalf of 66bat under contractual data processing agreements that require them to maintain appropriate security measures.
• Legal and Regulatory Authorities: Where 66bat is required by applicable law, court order, or legitimate regulatory authority to disclose personal data, we will comply with such obligations and, where legally permissible, will notify affected players of any such disclosure.
• Fraud Prevention and AML Agencies: Where 66bat is required or entitled to share data with fraud prevention or anti-money-laundering agencies as part of its legal compliance obligations.

As a player whose personal data is processed by 66bat, you hold the following rights in relation to your data. These rights may be subject to certain legal limitations in specific circumstances, but 66bat will always respond to your request transparently and in good faith:

To exercise any of the rights described above, please contact the 66bat data protection team at [email protected] with a clear description of your request. 66bat will verify your identity before processing any data rights request and will respond within 30 calendar days of receipt.

The 66bat platform uses cookies and similar tracking technologies to support essential platform functionality, maintain your session while you are logged in, and gather anonymous usage statistics that help us improve the platform experience for Bangladeshi players.

• Essential Cookies: These are strictly necessary for the platform to function correctly. They enable core features such as session management, authentication state, and security token validation. These cookies cannot be disabled without significantly impairing your ability to use the platform.
• Functional Cookies: These cookies remember your preferences and settings — such as your preferred display language and any accessibility configurations — so that you do not need to re-enter them each time you visit.
• Analytics Cookies: These cookies collect anonymised information about how visitors use the platform — such as which pages are most visited and how long sessions last. This data is used in aggregate form to improve platform performance and is not linked to individual player identities.
• Security Cookies: These cookies support fraud detection and account security functions by enabling 66bat to identify unusual access patterns, detect unauthorised login attempts, and protect player accounts from compromise.

Most web browsers allow you to manage cookie preferences through their settings menus. You may choose to block or delete cookies, but doing so may affect the functionality of the 66bat platform and may prevent you from accessing certain features, including account login. 66bat does not use cookies to deliver third-party advertising or to track your activity across external websites.

66bat retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or to satisfy applicable legal and regulatory retention obligations. The following retention periods apply to the principal data categories held by 66bat:

Upon expiry of the applicable retention period, 66bat will securely delete or anonymise the relevant personal data. Anonymised data — which can no longer be linked to an individual — may be retained beyond these periods for statistical and analytical purposes.

66bat implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure or destruction. Our current security programme includes the following key controls:

• SSL/TLS encryption for all data transmitted between your device and the 66bat platform, ensuring that your credentials, payment details and personal information cannot be intercepted in transit.
• Access controls that restrict internal access to personal data on a strict need-to-know basis. Only authorised 66bat team members whose role requires access to specific data categories are granted that access.
• Secure server infrastructure with physical and logical access controls, regular security patching, and vulnerability management procedures.
• Password hashing using industry-standard algorithms. Plain-text passwords are never stored by 66bat systems.
• Regular internal security reviews and, where appropriate, third-party security assessments to identify and remediate vulnerabilities in platform systems.
• Incident response procedures that enable 66bat to rapidly detect, assess and respond to any data security incident, and to notify affected players in accordance with applicable obligations.

The 66bat platform is primarily designed to serve players based in Bangladesh. The majority of data processing activities take place within infrastructure serving the Bangladesh and South Asia region. However, certain third- party service providers engaged by 66bat — including game technology providers such as Pragmatic Play, Evolution Gaming and Microgaming — may process data on servers located outside Bangladesh. Where such international transfers occur, 66bat takes steps to ensure that your personal data receives an equivalent level of protection to that afforded within Bangladesh, including by entering into appropriate contractual arrangements with the relevant third parties.

66bat does not transfer personal data to jurisdictions that do not offer an adequate level of data protection without first putting appropriate safeguards in place. If you have questions about the specific safeguards applied to any international transfer of your data, please contact [email protected].

The 66bat platform is strictly intended for adults aged 21 years and above. 66bat does not knowingly collect or process personal data belonging to individuals under the age of 21. All players are required to confirm their age and identity during the account registration and verification process.

66bat strongly encourages parents and guardians in Bangladesh to make use of available internet filtering and parental control tools to prevent minors from accessing online betting and gaming platforms.

66bat reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable laws, or the services we offer. All changes will be published on this page at https://66bat.io/privacy-policy with a revised effective date shown at the top of the document.

Where a change is material — meaning it significantly affects how we use your personal data or the rights available to you — 66bat will notify registered players via their registered email address or via a prominent notice on the platform prior to the change taking effect. Your continued use of the 66bat platform following publication of an updated Privacy Policy constitutes your acceptance of the revised terms.

If you have any questions, concerns or complaints regarding this Privacy Policy or the way in which 66bat processes your personal data, please contact the 66bat data protection team in the first instance:

66bat is committed to resolving all privacy-related complaints promptly and fairly. If you are not satisfied with the outcome of your complaint after engaging with the 66bat support team, you retain the right to escalate your complaint to the relevant data protection or supervisory authority in your jurisdiction.

All correspondence relating to data protection matters should clearly state your registered 66bat username or account email address so that your identity can be verified and your request handled accurately. Please do not include sensitive financial data such as full payment account numbers in email correspondence.