66bed Privacy
Policy

1. Information We Collect

66bed collects personal information from users in several ways: directly when you register an account or interact with our services, automatically when you use our platform, and occasionally from trusted third-party sources to verify the accuracy of the information you have provided. This Privacy Policy applies to all data collected by 66bed in connection with the website at 66bed.app and all associated services offered to players in Bangladesh and internationally.

1.1 Information You Provide Directly

When you create a 66bed account, we collect the following information that you submit voluntarily:

• Identity data: Full legal name, date of birth, gender.
• Contact data: Email address, active mobile phone number (used for bKash, Nagad, or Rocket payment linking).
• Residential data: City and district of residence (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi).
• Account credentials: Username and hashed password (your plaintext password is never stored).
• KYC documents: Copies of your Bangladesh National ID Card (NID), passport, or BRTA driving licence submitted during the identity verification process.
• Financial data: Mobile wallet numbers (bKash, Nagad, Rocket, Upay, SureCash) and cryptocurrency wallet addresses used for deposits and withdrawals.
• Communications: Any messages you send to our support team via email or live chat, including their content and timestamps.

1.2 Information Collected Automatically

When you access and use the 66bed platform, we automatically collect certain technical and behavioural data:

• Device and browser data: IP address, device type (desktop, mobile, tablet), operating system, browser type and version, screen resolution.
• Usage data: Pages visited, games played, bet amounts, session duration, click patterns, and navigation paths through the site.
• Transaction data: Records of all deposits, withdrawals, wagers placed, game outcomes, and bonus redemptions associated with your account.
• Location data: Approximate geographic location derived from your IP address. We do not collect precise GPS coordinates.
• Cookie and tracking data: Session identifiers, preference tokens, and analytics identifiers collected via cookies and similar tracking technologies (see Section 4 for full details).

1.3 Information from Third Parties

In limited circumstances, 66bed may receive personal data about you from trusted third-party sources, including:

• Identity verification partners who confirm the authenticity of your NID or passport against official government databases.
• Payment processors (bKash, Nagad, Rocket, Upay, SureCash) who confirm the successful completion or failure of a transaction and provide the associated wallet identifier.
• Fraud prevention and anti-money-laundering screening services that cross-reference account data against international watchlists.
• Cryptocurrency network providers who confirm blockchain transaction confirmations for USDT, BTC, and ETH deposits and withdrawals.

2. How We Use Your Data

66bed processes your personal data only for legitimate, clearly defined purposes. We do not use personal data for purposes that are incompatible with those stated at the time of collection. Below is a full account of the purposes for which your data is used, together with the legal basis for each processing activity.

Where our processing is based on your consent — for example, receiving promotional email communications or optional analytics cookies — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to the withdrawal. To withdraw marketing consent, contact us at [email protected] or update your communication preferences in your account settings.

3. Data Sharing & Disclosure

66bed does not sell, rent, or otherwise commercially transfer your personal data to any third party. We share personal data only in the limited circumstances described below, and only to the extent necessary to fulfil the specific purpose for which it is shared.

3.1 Service Providers and Processors

We engage carefully vetted third-party service providers to perform specific functions on our behalf. These providers are permitted to process your personal data only in accordance with our documented instructions and are contractually prohibited from using it for their own purposes. Categories of service providers include:

• Payment processors: bKash, Nagad, Rocket, Upay, and SureCash for local mobile financial service transactions; cryptocurrency gateway providers for USDT, BTC, and ETH transactions.
• Identity verification providers: KYC and AML screening partners who verify NID documents and perform watchlist screening.
• Game content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive only the minimum session data required to deliver their games (e.g., session token, player ID) and are not given access to your personal identity information.
• Cloud infrastructure and hosting: Server infrastructure providers who store encrypted platform data in secure data centres.
• Analytics providers: Aggregated, anonymised usage analytics to improve platform performance. Individual user identities are not disclosed to analytics providers.

3.2 Legal and Regulatory Disclosure

66bed may disclose personal data to competent authorities, law enforcement agencies, or regulatory bodies when we are legally required to do so — for example, in response to a valid court order, a formal law enforcement investigation request, or obligations arising under anti-money-laundering regulations. In such cases, we will disclose only the minimum data required by the specific legal obligation and will notify you of the disclosure where permitted by law.

3.3 Business Transfers

In the event of a merger, acquisition, sale of assets, or restructuring of the 66bed business, personal data held by 66bed may be transferred to the successor entity as part of that transaction. We will provide reasonable advance notice of any such transfer and ensure that the successor entity is bound by privacy commitments at least as protective as those in this Policy before any transfer takes place.

4. Cookies & Tracking Technologies

66bed uses cookies and similar technologies (including local storage tokens and session identifiers) to make the platform function correctly, remember your preferences, measure our audience, and — with your consent — serve you relevant promotional content. Below is a full breakdown of the cookie categories used on the 66bed website.

4.1 Strictly Necessary Cookies

These cookies are essential for the 66bed website to operate and cannot be disabled without breaking core functionality. They include session authentication tokens, security tokens (CSRF protection), load-balancing identifiers, and in-game session state identifiers. No consent is required for strictly necessary cookies as they are fundamental to service delivery.

4.2 Functional Cookies

Functional cookies remember your preferences and settings to provide a more personalised experience. Examples include your preferred language setting (English), your display preferences, and your previously selected deposit method. These cookies do not track your activity on other websites.

4.3 Analytics Cookies

With your consent, 66bed uses analytics cookies to understand how players navigate the website, which pages are most visited, and where users encounter friction. This data is collected in aggregated, anonymised form and is used exclusively to improve the platform experience. Analytics cookies are activated only where you have provided explicit consent.

4.4 Marketing and Personalisation Cookies

With your consent, 66bed may use cookies to record your gameplay interests and browsing behaviour on the 66bed website in order to serve you personalised bonus offers and promotions relevant to your gaming preferences (for example, cricket betting promotions during IPL or BPL season, or slot promotions aligned with your most-played game categories). These cookies are strictly limited to activity on the 66bed website and are not used to track your behaviour across unrelated third-party websites.

5. Data Security Measures

66bed employs industry-standard and best-practice technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security infrastructure includes the following controls:

• Transport encryption: All data in transit between your browser/device and the 66bed servers is encrypted using TLS 1.2 or higher (256-bit SSL certificates).
• Data-at-rest encryption: Sensitive personal data stored in our databases — including KYC document copies and financial identifiers — is encrypted at rest using AES-256 encryption.
• Password security: Passwords are never stored in plaintext. They are processed using bcrypt hashing with a unique per-user salt.
• Two-factor authentication (2FA): Players are strongly encouraged to enable 2FA on their 66bed accounts using an authenticator app. 2FA significantly reduces the risk of unauthorised account access.
• Access controls: Internal access to personal data is restricted to 66bed staff members who have a genuine operational need to access it. Access is governed by role-based permission systems and is subject to audit logging.
• Penetration testing: The 66bed platform undergoes regular third-party security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Incident response: 66bed maintains a documented data breach response plan. In the event of a breach that materially affects your personal data, we will notify affected users promptly and take immediate steps to contain and investigate the incident.

While 66bed takes all reasonable measures to protect your data, no transmission over the internet and no method of electronic storage is completely secure. We cannot guarantee absolute security, but we are committed to continuous improvement of our security posture.

6. Data Retention Policy

66bed retains personal data only for as long as is necessary to fulfil the purpose for which it was collected or to comply with applicable legal, regulatory, or contractual obligations. The following retention periods apply to the principal data categories:

When a retention period expires, personal data is either securely and permanently deleted or — where full deletion is not possible due to the structure of a backup system — anonymised so that it can no longer be linked to any identifiable individual. Anonymised data is no longer considered personal data and may be retained for statistical or analytical purposes without a defined expiry.

7. Your Privacy Rights

As a 66bed user, you have meaningful rights over your personal data. 66bed is committed to facilitating the exercise of these rights promptly and without unnecessary friction. To exercise any of the rights listed below, please submit a written request to [email protected] from the email address registered to your 66bed account.

7.1 Right of Access

You have the right to request a copy of the personal data that 66bed holds about you, together with information about how it is being used. We will provide this information in a structured, readable format within fourteen (14) days of receiving a verified request.

7.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For minor corrections such as updating your email address or mobile number, this can be done directly via your account settings page. For identity data corrections, a written request accompanied by supporting documentation is required.

7.3 Right to Erasure

You have the right to request the deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you withdraw the consent on which processing was based. Please note that the right to erasure is not absolute: 66bed may be required to retain certain data to comply with legal obligations (such as anti-money-laundering record-keeping requirements) even after you have requested deletion. Where we are unable to delete data, we will explain the specific legal reason for retention.

7.4 Right to Data Portability

Where processing is based on your consent or on contract performance and is carried out by automated means, you have the right to receive the personal data you have provided to 66bed in a structured, commonly used, machine-readable format (such as CSV or JSON), and to have that data transmitted directly to another service provider where technically feasible.

7.5 Right to Object and Restrict Processing

You have the right to object to processing of your personal data where that processing is based on legitimate interest, including profiling for direct marketing purposes. You also have the right to request restriction of processing in certain circumstances — for example, while the accuracy of data is contested or while an objection is being evaluated. During a restriction period, 66bed will continue to store your data but will not actively use it for the purpose you have objected to.

8. Updates to This Policy

66bed reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, applicable law, or the services offered on the platform. When we make material changes to this Policy — changes that meaningfully affect how we collect, use, or share your personal data — we will notify registered users via the email address associated with their account at least seven (7) days before the updated Policy takes effect.

For non-material changes (such as formatting corrections, clarifications that do not alter the substance of the Policy, or updates to contact details), we will update the "Last Updated" date at the top of this page without sending individual notifications. We encourage you to review this page periodically to stay informed of any updates.

Your continued use of the 66bed platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with a material change to this Policy, you should discontinue use of the platform and may request account closure by contacting [email protected].