666z9 Privacy Policy

Introduction and Scope

This Privacy Policy ("Policy") describes how 666z9 ("we", "us", "our") collects, uses, stores and protects personal data obtained from users of the 666z9 online gaming platform, accessible at https://666z9.pro ("Platform"). This Policy applies to all registered account holders, visitors who browse the Platform without registering, and any person who interacts with 666z9 through any channel, including live chat and email support.

By creating an account or continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you should discontinue use of the Platform and contact [email protected] to close your account. This Policy forms part of the 666z9 Terms and Conditions and should be read alongside them.

Personal Data We Collect

666z9 collects only the personal data that is necessary for the purposes described in this Policy. The categories of personal data we collect include:

• Registration data: full name, date of birth, gender, residential address in Bangladesh (city, district), and a valid Bangladeshi mobile number used as the primary account identifier.
• Identity verification documents: national identity card (NID), passport or driving licence, submitted when requested as part of our KYC process.
• Financial data: bKash, Nagad, Rocket or Upay mobile wallet numbers used for deposit and withdrawal; transaction amounts and timestamps; bank account details where applicable.
• Gameplay and activity data: game sessions, bet amounts, win/loss history, bonus claims, login timestamps, and session durations. This data is used for responsible gaming monitoring and fraud prevention.
• Technical data: IP address, device type and model, operating system, browser type and version, screen resolution, and general geographic location (city level, derived from IP). This data is used for fraud detection and platform optimisation.

We do not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or biometric data for the purpose of uniquely identifying a natural person. If any such data is inadvertently included in documents submitted for KYC purposes, it will not be processed beyond what is necessary for identity verification and will be handled with additional care.

How We Use Your Personal Data

666z9 processes personal data for the following lawful purposes:

• Account creation and management: to register your account, verify your identity, maintain your player profile, and ensure your account reflects your current preferences and limits.
• Payment processing: to process deposits via bKash, Nagad, Rocket or Upay and to process withdrawal requests to the same or a verified alternative payment method.
• Legal and regulatory compliance: to carry out anti-money laundering (AML) checks, verify player eligibility (age and jurisdiction), and comply with any applicable legal obligation or lawful authority request.
• Responsible gaming: to monitor gameplay patterns, enforce player-set deposit and session limits, apply cool-off and self-exclusion measures, and identify players who may be showing signs of problem gambling.
• Customer support: to respond to enquiries, resolve disputes, investigate complaints, and deliver service messages such as account verification codes and transaction confirmation notifications sent to your registered mobile number.

Data Sharing and Third Parties

666z9 does not sell, rent or otherwise transfer your personal data to third parties for their own marketing or commercial purposes. We share personal data only where strictly necessary for the following purposes:

• Payment service providers: bKash, Nagad, Rocket, Upay, and where applicable Dutch-Bangla Bank, City Bank, BRAC Bank and other banking partners — solely for processing deposits and withdrawals on your behalf.
• Game technology providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi and other licensed game studios — limited technical session data is shared to facilitate gameplay and resolve technical disputes.
• Identity verification and AML partners: third-party KYC and compliance service providers engaged to verify player identity and conduct anti-money laundering screening.
• Legal authorities: law enforcement agencies, courts, regulators or other public authorities, where 666z9 is legally required or compelled to disclose information by a valid court order, subpoena or regulatory direction.

All third-party service providers who receive personal data from 666z9 are contractually bound to process that data only for the specific purpose for which it was shared, to maintain appropriate security measures, and not to share it further without 666z9's written authorisation. We do not use advertising networks, data brokers or social media tracking partners.

Data Retention

666z9 retains personal data only for as long as is necessary for the purposes for which it was collected, and in accordance with any applicable legal retention obligation. The following retention periods apply:

• Active account data is retained for the full duration that your account remains open and active. Inactive accounts (no login for 24 months) are flagged for review and data minimisation.
• Transaction and financial records are retained for a minimum of 5 years following the last transaction date, in compliance with anti-money laundering record-keeping obligations.
• KYC and identity verification documents are retained for a minimum of 5 years from the date of the last account activity or account closure, whichever is later.
• Support communication records (live chat transcripts, email exchanges) are retained for 2 years from the date of the last interaction, for the purpose of dispute resolution and service quality improvement.

When personal data is no longer required, 666z9 will securely delete or anonymise it so that it can no longer be used to identify you. We do not archive or sell data that has passed its applicable retention period.

Cookies and Tracking Technologies

666z9 uses cookies and similar tracking technologies (such as local storage tokens and session identifiers) to operate the Platform and improve the user experience. The following categories of cookies are in use:

• Strictly necessary cookies: required for the Platform to function. These include session authentication tokens that keep you logged in during your visit and security cookies that help detect fraud. These cannot be disabled.
• Performance and analytics cookies: help us understand how players navigate the Platform, which game categories are most visited, and where technical errors occur. Data collected is aggregated and does not identify individual users.
• Functional cookies: remember your preferences such as language selection and responsible gaming limit settings, so you do not need to re-enter them on each visit.
• You may disable non-essential cookies by adjusting your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the Platform, including your ability to remain logged in across pages.

666z9 does not use cross-site tracking cookies, advertising network cookies, or any third-party cookie that tracks your behaviour across other websites. Our cookie usage is limited to the Platform itself.

Your Data Rights

As a user of the 666z9 Platform, you hold the following rights with respect to your personal data. To exercise any of these rights, contact us at [email protected]. We will respond within 30 days of receiving a verifiable request.

• Right of access: you may request a copy of all personal data held about you by 666z9, including the categories of data, the purposes for which it is processed, and the recipients to whom it has been disclosed.
• Right to rectification: if any personal data held about you is inaccurate or incomplete, you may request that it be corrected or completed. You may also update certain details directly from your account dashboard.
• Right to erasure: you may request that 666z9 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent, or where processing is unlawful. This right is subject to overriding legal retention obligations (e.g., AML record-keeping requirements).
• Right to restriction: you may request that 666z9 restrict the processing of your personal data in certain circumstances, for example while a rectification request is being assessed.
• Right to object: you may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, though 666z9 may continue processing where compelling legitimate grounds override your interests.

Data Security

666z9 implements and maintains industry-standard technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, alteration or disclosure. Key security measures include: SSL/TLS encryption for all data in transit between your device and our servers; encrypted storage of sensitive data fields including payment method identifiers and identity document references; access controls that restrict internal access to personal data to authorised personnel only, on a need-to-know basis; and regular security reviews of Platform infrastructure and third-party integrations.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 666z9 will notify affected users without undue delay. Notification will be sent to your registered mobile number or email address and will describe the nature of the breach, the categories of data affected, and the steps 666z9 is taking to address it. You should also contact 666z9 immediately if you suspect that your account has been accessed without your authorisation.

International Data Transfers

666z9 is operated primarily for users in Bangladesh. Personal data is stored on servers located in secure data centres. Where personal data is transferred to or accessed by our game technology providers or compliance service partners who are located outside Bangladesh, 666z9 takes appropriate steps to ensure that adequate protections are in place, including contractual obligations binding those parties to data protection standards consistent with this Policy.

• Right to access your data
• Right to request correction of inaccurate data
• Right to request deletion of your data (subject to legal retention obligations)
• Right to restrict or object to processing in certain circumstances
• Right to withdraw consent where processing is based on consent

To exercise any of these rights, please contact us in writing at [email protected]. We will verify your identity before processing your request and will respond within 30 days. In some cases, we may need to extend this period by a further 30 days where the request is complex or we have received multiple requests — we will inform you of any extension within the initial 30-day window.

Children and Minors

The 666z9 Platform is strictly for adults aged 21 and above. We do not knowingly collect personal data from any person under the age of 21. If we discover that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated account. If you believe a person under 21 has registered with 666z9, please contact us immediately at [email protected].

We use age verification checks as part of our registration and KYC process. Players are required to confirm their date of birth at registration and may be required to submit identity documentation to confirm they are 21 or over before withdrawals are processed. Any account found to belong to a person under 21 will be closed immediately and all funds returned via the original payment method.

Links to Other Platforms

The 666z9 Platform does not contain links to external third-party websites. All navigation within 666z9 remains within the platform domain https://666z9.pro. This Policy does not apply to any external websites, apps or services that you may access independently outside the Platform. 666z9 is not responsible for the privacy practices of any third party.

Payment service providers such as bKash, Nagad and Rocket operate their own independent privacy policies and data handling practices. When you use these services to deposit or withdraw funds from 666z9, your interactions with those services are governed by their own terms and privacy policies, not by this Policy.