Your Privacy Matters
to dc6666

1. Information We Collect

dc6666 collects personal data in several ways: directly from you when you register or interact with the platform, automatically as you use the service, and in some cases from trusted third-party sources for verification purposes. The categories of data we collect are as follows.

1.1 Registration and Account Data

When you create a dc6666 account, we collect the information you provide during the registration process. This includes:

• Full legal name as it appears on your government-issued identity document.
• Date of birth, used for age verification to confirm you are 18 years of age or older.
• Mobile phone number, used for account authentication and two-factor verification.
• Email address, used for account notifications, support correspondence, and promotional communications where you have opted in.
• Residential address, including city and district (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi).
• Username and encrypted password.

1.2 Identity Verification Data

To comply with our Know Your Customer (KYC) and anti-money-laundering obligations, we may request:

• A copy of your National Identity Card (NID), passport, or other government-issued photo identification.
• Proof of address (utility bill, bank statement) issued within the last three months.
• Proof of payment method ownership (screenshot of bKash, Nagad, or Rocket account in your name).
• Source-of-funds documentation where required by applicable regulations.

1.3 Financial Transaction Data

When you deposit or withdraw funds, we record transaction data including the payment method used (e.g., bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank), transaction amounts in Bangladeshi Taka (৳), transaction timestamps, and reference numbers. We do not store full card numbers or mobile banking PINs — these are handled by your payment provider.

1.4 Usage and Behavioural Data

As you interact with the dc6666 platform, we automatically collect data about your activity, including:

• Games played, bet amounts, win/loss outcomes, and session duration.
• Pages visited, features used, and navigation paths within the platform.
• Device type, operating system, browser type and version.
• IP address and approximate geographic location (city-level).
• Login timestamps and session identifiers.

This data is used to personalise your experience, detect fraud, and ensure platform integrity — not to build advertising profiles for sale to third parties.

1.5 Support and Communications Data

When you contact our support team — via live chat, email, or any other channel — we record the content of that communication together with your account identifier and timestamp. These records allow us to provide consistent service and resolve disputes accurately.

2. How We Use Your Data

dc6666 uses personal data only for legitimate, clearly defined purposes. We do not use your data for purposes incompatible with those stated below.

Purpose	Data Categories Used	Legal Basis
Account creation and management	Registration data, identity data	Contractual necessity
Age and identity verification (KYC)	Identity documents, date of birth	Legal obligation
Processing deposits and withdrawals	Financial transaction data	Contractual necessity
Fraud prevention and security	Usage data, IP address, transaction data	Legitimate interest
Responsible gaming monitoring	Behavioural data, session data	Legal obligation / legitimate interest
Customer support	Communications data, account data	Contractual necessity
Marketing communications (opted-in only)	Email address, name	Consent
Platform analytics and improvement	Usage data, device data	Legitimate interest

2.1 Marketing Communications

dc6666 will only send you promotional emails, bonus offers, or marketing messages if you have expressly opted in to receive them at the time of registration or subsequently through your account settings. You may unsubscribe from marketing communications at any time by updating your notification preferences in your account dashboard or by contacting [email protected]. Opting out of marketing does not affect service-related communications such as deposit confirmations, withdrawal notifications, or security alerts.

3. Data Sharing & Disclosure

3.1 Service Providers

dc6666 engages trusted third-party service providers who assist in operating the platform. These providers may process your personal data on our behalf, strictly limited to the services they provide to us. Categories of service providers include:

• Payment processors: bKash, Nagad, Rocket, Upay, and partnered banks process your financial transactions. Each has its own privacy policy governing data they independently collect.
• KYC and identity verification providers: Third-party identity verification services that validate the documents you submit.
• Game content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other providers may receive anonymised session identifiers to facilitate game delivery and resolve technical disputes.
• IT infrastructure and hosting: Cloud and server infrastructure providers that store platform data under enterprise-grade security agreements.
• Customer support tools: Live chat and ticketing platforms used to manage support interactions.

All service providers are bound by data processing agreements that prohibit them from using your data for any purpose beyond what dc6666 has instructed.

3.2 Legal and Regulatory Disclosures

dc6666 may disclose your personal data to government authorities, law enforcement agencies, or regulatory bodies when required to do so by applicable law, court order, or legitimate official request. We will notify you of any such disclosure where we are legally permitted to do so.

3.3 Business Transfers

In the event of a merger, acquisition, or transfer of all or part of dc6666's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify you of any such change and ensure the acquiring entity is bound by privacy obligations at least as protective as those in this Policy.

4. Cookies & Tracking Technologies

dc6666 uses cookies and similar technologies (including pixel tags, local storage, and session tokens) to deliver a functional and personalised platform experience. Below is a summary of the cookie categories we use.

Cookie Type	Purpose	Can Be Disabled?
Strictly Necessary	Maintain your login session, remember cart/game state, prevent CSRF attacks	No — required for basic functionality
Performance / Analytics	Understand how users navigate the platform, identify errors, improve UX	Yes — via browser settings
Functional	Remember your language preference, display settings, and notification choices	Yes — may affect experience
Security	Detect suspicious login behaviour, flag unusual session activity	No — required for account safety

dc6666 does not use advertising or retargeting cookies. You can control non-essential cookies through your browser's settings menu. Note that disabling certain cookies may affect the functionality of the platform. For instructions on managing cookies, refer to your browser's help documentation.

5. Data Security Measures

dc6666 employs a multi-layered security framework to protect your personal data from unauthorised access, alteration, disclosure, or destruction. Our security measures include:

• Transport Layer Security (TLS): All data exchanged between your browser or app and our servers is encrypted in transit using TLS 1.2 or higher.
• Encryption at Rest: Sensitive data fields — including identity document copies, payment references, and verification records — are encrypted in storage using AES-256 or equivalent standards.
• Access Controls: Access to personal data within dc6666 is restricted to staff members who require it to perform their job functions. All access is logged and subject to regular audit.
• Intrusion Detection: Automated systems monitor platform traffic for anomalous patterns indicative of unauthorised access attempts or data exfiltration.
• Regular Security Reviews: dc6666 conducts periodic internal security reviews and engages third-party security specialists to assess our systems.
• Two-Factor Authentication: dc6666 supports two-factor authentication (2FA) for player accounts to provide an additional layer of login security.

6. Data Retention Policy

dc6666 retains personal data only for as long as it is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention guidelines apply:

• Active account data: Retained for the duration of your account's active status plus a minimum of 5 years following account closure, to satisfy regulatory record-keeping obligations.
• Financial transaction records: Retained for a minimum of 7 years from the date of the transaction in compliance with applicable financial regulations.
• KYC and identity verification documents: Retained for the duration of the account and for 5 years following closure or the last transaction, whichever is later.
• Support communications: Retained for 3 years from the date of the interaction, or longer if the matter is subject to ongoing dispute or legal proceedings.
• Marketing opt-in records: Retained for the duration of your consent and for 2 years following withdrawal of consent, as evidence of the consent that was given.
• Usage and session data: Typically retained in identified form for 13 months, after which it is aggregated or anonymised.

When the applicable retention period expires, dc6666 will securely delete or irreversibly anonymise your personal data. Anonymised data (which can no longer be linked back to you) may be retained indefinitely for statistical or research purposes.

7. Your Rights Over Your Data

dc6666 respects your rights with respect to your personal data. Depending on your circumstances, you may be entitled to exercise the following rights by contacting us at [email protected]:

• Right of Access: You may request a copy of the personal data dc6666 holds about you, along with information about how it is used.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay.
• Right to Erasure: Subject to legal retention obligations, you may request that dc6666 delete your personal data. Note that we may be unable to erase data we are required to retain under financial or regulatory law.
• Right to Restriction of Processing: You may ask us to restrict how we use your data in certain circumstances, for example while a rectification request is being investigated.
• Right to Data Portability: Where technically feasible, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.
• Right to Object: You may object to processing carried out on the basis of legitimate interests. dc6666 will assess your objection and either cease processing or provide compelling grounds for continuing.

dc6666 will respond to all data rights requests within 30 calendar days of receipt. In complex cases, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it. There is no charge for exercising your rights in most circumstances.

8. Contact for Data Queries

If you have any questions, concerns, or requests regarding this Privacy Policy or dc6666's data practices, please contact our dedicated data support team using the details below. We are committed to resolving all privacy-related enquiries promptly and transparently.

• Email: [email protected]
• Subject line recommended: "Privacy Policy Query" or "Data Rights Request"
• Response time: We aim to respond to all privacy-related queries within 5 business days, and to complete data rights requests within 30 calendar days.

8.1 Changes to This Privacy Policy

dc6666 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or the services we offer. When we make material changes, we will notify registered players by email or via a prominent notice on the platform at least 14 days before the changes take effect. The "Last Updated" date at the top of this Policy will always reflect the most recent revision. We encourage you to review this Policy periodically.

Continued use of dc6666 following the effective date of any amendment constitutes your acknowledgement and acceptance of the updated Policy. If you do not agree to the revised terms, you must stop using the platform and may request account closure by contacting our support team.

8.2 Children's Privacy

dc6666 is strictly an 18+ platform. We do not knowingly collect or process personal data belonging to individuals under the age of 18. If we become aware that a minor has provided us with personal data, we will immediately close the associated account and delete the data. If you believe a minor has registered on our platform, please contact us immediately at [email protected].

8.3 Links to Third-Party Services

The dc6666 platform may reference third-party payment providers (bKash, Nagad, Rocket, Upay) and game content providers. These third parties operate their own privacy policies, and dc6666 is not responsible for the data practices of any third-party service. We encourage you to review the privacy policies of any third-party services you use in connection with your dc6666 account.