Privacy Policy — 66zza

Introduction & Scope

This Privacy Policy ("Policy") describes how 66zza collects, uses, stores, shares and protects the personal information of users ("you", "Player") who access or use the 66zza platform at https://66zza.app and all associated services. By registering an account or using any feature of the Platform, you consent to the data practices described in this Policy.

This Policy applies to all personal data processed in connection with your use of 66zza, regardless of the device or access method used. It should be read alongside our Terms and Conditions and Responsible Gaming Policy, both of which form part of the agreement between you and 66zza.

What Personal Data We Collect

66zza collects the minimum personal data required to operate your account, process transactions, verify your identity, and comply with our legal obligations. The categories of data we collect include:

• Identity data: full name, date of birth, gender and a government-issued identification document (e.g. national ID card or passport) where KYC verification is required.
• Contact data: email address and mobile phone number, used for account notifications, security alerts and support communications.
• Financial data: payment method details (e.g. bKash/Nagad/Rocket mobile wallet numbers, Visa/Mastercard last four digits), transaction history and deposit/withdrawal records.
• Technical data: IP address, browser type and version, device type, operating system, session timestamps and login history, used for fraud prevention and platform security.
• Usage data: games played, bet amounts, session durations, bonus usage and feature interactions, used to improve platform performance and personalise your experience.
• Communications data: the content of support tickets, live chat transcripts and emails exchanged with 66zza's team, retained for dispute resolution and quality assurance.

How We Use Your Data

66zza processes your personal data only for legitimate, specified purposes. We do not use your data for any purpose incompatible with those listed below:

• Account management: creating and maintaining your account, processing deposits and withdrawals, and communicating account-related information.
• Identity verification (KYC): confirming your age, identity and payment method ownership in line with our anti-fraud and responsible gaming obligations.
• Fraud prevention and platform security: monitoring for suspicious activity, preventing money laundering and protecting players from unauthorized account access.
• Service improvement and personalisation: analysing usage data to improve our games, promotions and platform features, and to tailor the experience for Bangladeshi players.
• Marketing communications: sending you relevant bonus offers, game updates and promotional content where you have consented to receive such communications. You may opt out at any time.

Data Sharing & Third Parties

66zza does not sell, rent or trade your personal data to any third party. We share data only in strictly limited circumstances with trusted partners who are contractually bound to protect it:

• Payment processors: bKash, Nagad, Rocket, Upay and card networks (Visa, Mastercard) receive only the transaction data necessary to complete your deposit or withdrawal.
• Identity verification providers: KYC partners who assist in verifying identity documents and confirming that players meet the 21+ age requirement.
• Game content providers: providers such as Pragmatic Play, Evolution Gaming and Spribe receive anonymised session data necessary to deliver their game content and calculate outcomes.
• Legal and regulatory authorities: where we are legally required to disclose personal data to law enforcement or regulatory bodies, we will comply and, where permitted, notify you promptly.

All third-party service providers engaged by 66zza are subject to data processing agreements that restrict their use of your data to the specified purpose only and require them to maintain appropriate security standards.

Cookies & Tracking Technologies

66zza uses cookies and similar tracking technologies (including local storage and session storage) to operate the Platform, remember your preferences, maintain your login session and gather analytics data. The types of cookies we use include: (a) Essential cookies — strictly necessary for the Platform to function, such as session authentication and security tokens; (b) Functional cookies — remember your language preference and display settings; (c) Analytics cookies — collect anonymised data on how players use the Platform so we can improve navigation, game loading times and promotional relevance.

You can manage or disable non-essential cookies through your browser settings. Please note that disabling essential cookies will affect the functionality of the Platform and may prevent you from logging in or completing transactions. For detailed information on the specific cookies in use, please contact [email protected].

Data Retention

66zza retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal obligations. Our standard retention periods are:

• Active account data: retained for the lifetime of your account and for a minimum period of five years following account closure, in line with anti-money-laundering record-keeping requirements.
• Transaction records: financial transaction data is retained for a minimum of seven years to satisfy statutory accounting and audit requirements.
• Support communications: ticket and chat data is retained for a period of two years after the last interaction, for dispute resolution and training purposes.
• Marketing preferences: retained until you withdraw consent, at which point we will suppress your details from future marketing communications within 10 business days.

Your Data Rights

66zza respects your rights in relation to your personal data. Subject to applicable law and certain limited exceptions, you have the following rights:

• Right of access: you may request a copy of all personal data we hold about you. We will provide this within 30 days of receiving a valid request.
• Right to rectification: if any personal data we hold is inaccurate or incomplete, you have the right to ask us to correct it without undue delay.
• Right to erasure: you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to restrict processing: in certain circumstances you may ask us to temporarily suspend processing of your data while a dispute or accuracy complaint is resolved.
• Right to withdraw consent: where processing is based on consent (e.g. marketing emails), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Data Security

66zza employs a range of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction or disclosure. These include SSL/TLS encryption for all data in transit, encrypted storage for sensitive data at rest, access controls limiting data access to authorised personnel only, regular security audits and penetration testing, and two-factor authentication options for player accounts.

While 66zza takes every reasonable precaution to safeguard your data, no system is entirely immune from risk. In the unlikely event of a data breach that is likely to result in a high risk to your rights, we will notify affected players and, where required, the relevant authorities as soon as reasonably practicable.

Children & Minors

The 66zza Platform is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from anyone under the age of 21. If you are a parent or guardian and believe that a minor has registered on 66zza or provided us with personal data, please contact [email protected] immediately (plain text — not a clickable link) so that we can take appropriate action, including closing the account and deleting any associated data.

• We employ age verification checks during the registration process and may request documentary proof of age at any point. Any account found to belong to a person under 21 will be closed immediately and all balances forfeited.
• 66zza supports responsible gaming tools designed to help adult players maintain control of their gambling activity. Please visit our Responsible Gaming page for full details on deposit limits, time-out features and self-exclusion options.
• If you are concerned about your own gambling behaviour or that of someone you know, please reach out to our support team at [email protected] (plain text — not a clickable link) at any time. We are available 24/7, 365 days a year.

International Data Transfers

66zza's primary operations and data infrastructure are designed to serve the Bangladesh market. In some cases, data may be processed by our trusted service providers in other countries in order to deliver the services described in this Policy (for example, cloud hosting, KYC verification or game content delivery). Where such transfers occur, 66zza ensures that appropriate safeguards are in place — including contractual clauses that require the recipient to protect your data to a standard equivalent to this Policy.

We do not transfer personal data to countries with inadequate data protection standards without first implementing appropriate contractual and technical safeguards. If you have questions about international transfers of your data, please contact us at [email protected] (plain text — not a clickable link).

Changes to This Policy

66zza may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements or platform features. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify active players via a prominent notice on the Platform or by email. We encourage you to review this Policy periodically.

Your continued use of the 66zza Platform following the posting of a revised Policy constitutes acceptance of the updated terms. If you do not agree with any change, you should stop using the Platform and may request account closure by contacting our support team.

Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or the way 66zza handles your personal data, please contact our support team. We are committed to resolving all data-related enquiries promptly and transparently.

Email: [email protected] (plain text only — not a clickable link). Response time: within 24 hours Bangladesh Standard Time (BST, UTC+6). Our support team is available 24/7 every day of the year.