66jj Privacy
Policy

This Privacy Policy ("Policy") describes how 66jj ("the Platform", "We", "Us", "Our") collects, uses, stores, shares, and protects personal data belonging to players and visitors ("You", "Your", "Player") who access or use the 66jj website located at https://66jj.io and all associated services, games, betting markets, and account features available through that domain.

66jj is an entertainment platform offering sports betting, live casino, slot games, and crash games to adult players in Bangladesh. Because the platform handles financial transactions, identity verification, and account management on behalf of players, responsible and transparent data handling is central to how we operate. We take our obligations to every player in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, and across Bangladesh seriously, and this Policy reflects that commitment.

This Policy should be read alongside the 66jj Terms and Conditions, which are incorporated by reference and available at 66jj.io/terms-conditions. In the event of any conflict between the Terms and Conditions and this Policy on data-related matters, this Policy will prevail.

For the purposes of this Privacy Policy, the data controller — the entity that determines the purposes and means of processing your personal data — is the 66jj platform, operated under the domain https://66jj.io. All data-related enquiries, access requests, and complaints should be directed to the 66jj data team using the contact details provided in Section 15 of this Policy.

66jj collects the following categories of personal data from players and visitors to the platform:

We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information. If any such information is incidentally disclosed during a support interaction, it will not be processed for any purpose other than handling that specific query and will not be stored beyond the minimum necessary period.

66jj collects personal data through the following channels:

• Direct collection: Data you provide voluntarily when you register an account, complete the KYC verification process, make a deposit or withdrawal request, contact our support team, or update your account preferences.
• Automated technical collection: Data collected automatically by our platform systems when you visit the website or use platform features, including IP address, browser and device data, session duration, pages visited, and clickstream data. This data is collected via server logs and first-party analytics tools.
• Payment provider data: Confirmation data passed to 66jj by payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard) when a transaction is completed or declined. 66jj receives only the data necessary to confirm payment status — we do not receive or store full card numbers or mobile banking PINs.
• KYC verification data: Identity documents and supporting materials submitted by you during the verification process. These documents are reviewed by the 66jj verification team and may be processed by a trusted third-party identity verification service operating under confidentiality obligations to 66jj.
• Cookies and tracking technologies: Data collected via cookies and similar technologies placed on your device when you visit the 66jj platform. See Section 8 of this Policy for full details of our cookie practices.

66jj uses the personal data it collects for the following specific purposes:

• Account creation and management: To register your account, verify your identity, maintain your account settings, and provide you with access to the platform's games, betting markets, and services.
• Payment processing: To process deposits and withdrawals via your chosen payment method (bKash, Nagad, Rocket, Upay, Visa, or Mastercard), to verify that payment methods are registered in your name, and to maintain accurate financial records of all transactions on your account.
• KYC and fraud prevention: To verify that you meet the minimum age requirement of 21 years, to confirm your identity, to detect and prevent fraudulent activity, money laundering, and unauthorised account access, and to ensure that each player holds only one account on the platform.
• Bonus and promotional administration: To determine your eligibility for bonuses and promotions, to credit qualifying bonuses to your account, to apply wagering requirements, and to monitor for patterns consistent with bonus abuse.
• Platform personalisation: To display relevant game recommendations, betting markets, and promotional content based on your platform activity and stated preferences, where you have consented to such personalisation.
• Customer support: To handle your enquiries, resolve disputes, process responsible gaming requests, and communicate with you about your account via email or live chat.
• Platform security and integrity: To monitor the platform for security threats, to detect unusual betting patterns that may indicate match-fixing or prohibited conduct, and to enforce the 66jj Terms and Conditions.
• Legal and compliance obligations: To comply with any legal obligations applicable to the operation of the platform, including responding to lawful requests from authorities and maintaining financial records for the required retention period.
• Platform improvement: To analyse anonymised and aggregated usage data to improve the platform's features, performance, and user experience. This analytical processing uses data in a form that cannot be linked back to individual players.

66jj processes personal data on the following legal bases, depending on the specific purpose for which the data is used:

• Contractual necessity: Processing that is necessary to enter into and perform the contract between you and 66jj — specifically, the Terms and Conditions you accept when creating your account. This covers account registration, payment processing, KYC verification, bonus administration, and customer support.
• Legitimate interests: Processing that is necessary for 66jj's legitimate business interests, provided those interests are not overridden by your rights and interests. This covers fraud prevention, platform security monitoring, detection of prohibited conduct, and anonymised analytics for platform improvement.
• Consent: Processing for optional purposes where you have given your clear, informed, and freely given consent — specifically, marketing communications and platform personalisation based on your activity. You may withdraw consent for these purposes at any time without affecting the lawfulness of any prior processing or your ability to continue using the platform.
• Legal obligation: Processing that is required by applicable law, including maintenance of financial transaction records and cooperation with lawful authority requests.

66jj shares personal data only in the following limited, specific circumstances. We do not share data for any purpose beyond those listed below:

• Payment processors: We share the minimum necessary data with bKash, Nagad, Rocket, Upay, and card network processors (Visa, Mastercard) to complete your requested deposits and withdrawals. These providers process your data only as instructed by 66jj and under binding data-processing agreements.
• Identity verification providers: In some cases, KYC document verification may be handled by a specialist third-party verification service. This provider processes your identity documents only for the purpose of confirming your identity and age on behalf of 66jj, and is bound by strict confidentiality obligations.
• Game content providers: Game providers including Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe may receive session-level data (such as a pseudonymous player identifier, bet amounts, and game outcomes) necessary to operate the games you play. These providers do not receive your identity data or payment details.
• Platform infrastructure providers: Third-party providers who supply hosting, content delivery, server infrastructure, and analytics tools for the 66jj platform. These providers act as data processors operating on 66jj's instructions and are prohibited from using your data for their own purposes.
• Law enforcement and legal process: 66jj will disclose personal data to law enforcement agencies, courts, or other competent authorities where required to do so by law, by a valid legal process, or where disclosure is necessary to protect the security and integrity of the platform and its players.

The 66jj platform uses cookies and similar tracking technologies to provide a functional, secure, and personalised experience. A cookie is a small text file placed on your device by the platform when you visit. Cookies do not contain executable code and cannot access other information stored on your device.

66jj uses the following categories of cookies:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during your visit, security cookies that protect against cross-site request forgery, and load-balancing cookies that ensure stable platform performance. These cookies cannot be disabled without breaking core platform functionality.
• Functional cookies: Used to remember your preferences — such as your preferred language, game display settings, and responsible gaming tool configurations — so that you do not need to reset them on each visit. These cookies improve your experience but are not essential to platform operation.
• Analytics cookies: Used to collect anonymised data about how players navigate the platform — which pages are visited most frequently, where sessions begin and end, and which features are used most often. This data is used in aggregate form only to improve the platform. Analytics data is not linked to your personal account without your consent.
• Fraud prevention cookies: Short-lived cookies used by our security systems to identify unusual patterns of platform access, such as multiple account creation attempts from a single device, that may indicate fraud or prohibited conduct.

66jj does not use third-party advertising cookies or allow advertising networks to place tracking cookies on the platform. The cookies described above are all first-party or platform-infrastructure cookies under 66jj's operational control.

66jj retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or for as long as required by applicable law. The following retention periods apply to the main categories of data we hold:

When a retention period expires, personal data is either securely deleted from all 66jj systems and backups, or irreversibly anonymised so that it can no longer be associated with any individual player. Players who request account closure before a retention period expires should note that 66jj is required to retain certain categories of data for the post-closure period specified above, even after the account itself has been closed.

66jj employs a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your browser or app and the 66jj platform, including account login pages, deposit and withdrawal pages, and all account settings pages.
• Encrypted storage of sensitive data fields — including passwords (stored as salted hashes, never in plain text), identity document images, and financial account references — on access-controlled servers.
• Role-based access controls that limit access to personal data to 66jj staff members who have a specific operational need for it. Access logs are maintained and reviewed regularly to detect any unauthorised access attempts.
• Regular security assessments of the platform infrastructure, including vulnerability scanning and review of third-party component security.
• Incident response procedures that define how 66jj will respond to a suspected data breach, including containment, investigation, and notification of affected players where the breach poses a material risk to their rights or interests.

As a player on the 66jj platform, you have the following rights in relation to your personal data. These rights can be exercised at any time by contacting 66jj at [email protected] with the subject line "Data Rights Request":

• Right of access: You have the right to request a copy of all personal data that 66jj holds about you. We will provide this in a clear, readable format within 30 days of receiving a valid request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For account data such as your registered name, mobile number, or email address, corrections may require re-verification through the KYC process.
• Right to erasure: You may request that 66jj delete your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and there is no other legal basis for processing. Please note that this right is subject to our legal obligation to retain certain categories of data for post-closure retention periods as described in Section 9.
• Right to data portability: You may request that 66jj provide your personal data in a structured, machine -readable format so that you can transfer it to another service. This right applies to data you have provided directly to 66jj and which is processed on the basis of your consent or contractual necessity.
• Right to object: You have the right to object to processing carried out on the basis of 66jj's legitimate interests, including profiling for platform personalisation purposes. Where you object, 66jj will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to withdraw consent: Where processing is based on your consent — specifically, marketing communications and optional personalisation features — you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal, and it does not affect your ability to continue using the 66jj platform.
• Right to restriction: In certain circumstances — for example, while a dispute about data accuracy is being resolved — you may request that 66jj restrict the processing of your personal data to storage only, pausing any active use of that data.

To submit a data rights request, email [email protected] with the subject line "Data Rights Request", your registered username, and a description of the right you wish to exercise. We may ask you to verify your identity before processing the request to ensure that data is not disclosed to or acted upon at the request of an unauthorised person.

The 66jj platform is strictly for adults aged 21 years and above. We do not knowingly collect personal data from any person under the age of 21. Age verification is a mandatory step in the 66jj account registration and KYC process, and accounts where the registered player cannot confirm they are at least 21 years old will be suspended and any funds returned through the original payment method pending verification.

If you are a parent or guardian and believe that a person under 21 in your care has registered an account on the 66jj platform or has provided personal data to us, please contact us immediately at [email protected]. We will investigate the matter promptly, close the account if the age verification concern is confirmed, and delete any personal data associated with that account from our systems as quickly as our legal retention obligations permit.

When you use 66jj's responsible gaming tools — including deposit limits, session time reminders, cooling-off periods, and self-exclusion — the data associated with those settings is treated with the highest level of care and is subject to additional protections beyond those applied to standard account data.

• Self-exclusion records are flagged at the account level and retained for the full post-closure retention period (5 years) specifically to prevent a self-excluded player from re-registering on the platform before their exclusion period has expired. This retention is in your interest and is not waivable by a data erasure request during the exclusion period.
• Deposit limit and session reminder settings are stored as account preferences and are applied immediately upon activation. Requests to increase a deposit limit are subject to a mandatory 24-hour cooling-off period before the new higher limit takes effect, to ensure the change reflects a considered decision.
• Responsible gaming communications — including emails or chat messages about gambling-related concerns — are treated as sensitive support communications and access to them is restricted to the 66jj responsible gaming team only.

66jj does not use responsible gaming data for marketing profiling or for any purpose other than administering the responsible gaming tools you have activated and monitoring for patterns that may indicate a player is experiencing difficulty with their gambling. If our monitoring systems flag a concern, the responsible gaming team may proactively reach out to you with support information — this is a player protection measure, not a marketing activity.

For more information about the responsible gaming tools available on the 66jj platform, please visit our dedicated Responsible Gaming page at 66jj.io/responsible-gaming.

66jj reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, changes in the services we offer, or changes in applicable law. The effective date shown at the top of this Policy indicates when the current version came into force.

When we make material changes to this Policy — that is, changes that meaningfully affect how we collect, use, or share your personal data — we will notify registered players by email to the address associated with their account at least 7 days before the amended Policy takes effect. Non-material changes such as corrections of typographical errors or clarifications that do not alter the substance of any provision may be made without advance notice.

If you do not accept a material change to this Policy, you may request account closure and withdraw your available Real Money Balance at any time before the change takes effect. Please note that post-closure data retention obligations will still apply as described in Section 9, regardless of the reason for account closure.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights as described in Section 11, or have a concern about how your personal data has been handled by 66jj, please contact our support team. We are available 24 hours a day, 7 days a week, in Bangladesh Standard Time (BST, UTC+6), and all privacy-related enquiries are treated as a priority.

You can reach us by email at [email protected]. Please note that this email address is provided as plain text only and is not a clickable link — copy it manually into your email client to send a message. To help us route your enquiry to the correct team as quickly as possible, please use one of the following subject lines:

• "Data Rights Request" — for access, rectification, erasure, portability, or objection requests.
• "Privacy Concern" — for general questions about this Policy or concerns about how your data has been handled.
• "Responsible Gaming Request" — for requests related to deposit limits, cooling-off periods, or self-exclusion.
• "Security Concern" — if you believe your account has been compromised or you have detected suspicious activity.

We aim to acknowledge all privacy-related enquiries within 5 business days and to resolve them within 30 calendar days. If additional time is required due to the complexity of a request, we will inform you of the delay and the revised resolution timeline before the original 30-day period expires.