dk66 Privacy Policy — How We Handle Your Personal Data

1 Who We Are

dk66 is an online betting and casino platform operated for players in Bangladesh. References in this Privacy Policy to "dk66", "we", "us", or "our" refer to the operator of the dk66 Platform accessible at https://dk66.io. References to "you", "your", or "the player" refer to any individual who accesses, registers on, or uses any service provided through the Platform.

As the operator of the Platform, dk66 acts as the data controller in respect of personal data collected from players and prospective players. This means we determine the purposes for which personal data is processed and the means by which that processing takes place. We are responsible for ensuring that personal data is handled in accordance with this Privacy Policy and applicable data protection standards.

If you have any questions about this Privacy Policy or how dk66 handles your personal data, please contact our support team at [email protected]. We aim to respond to all privacy-related enquiries within 5 business days.

2 Data We Collect

dk66 collects the following categories of personal data in connection with your use of the Platform. We collect only the data that is genuinely necessary for the purposes described in this Policy.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is necessary for identity verification purposes. Where verification documents containing photographs are submitted, those images are used solely for confirming your identity and are not processed for facial recognition or biometric profiling.

3 How We Collect Data

dk66 collects personal data through the following channels:

• Direct interactions: Data you provide when creating your dk66 account, completing the identity verification process, making deposits or withdrawals, contacting our support team, or responding to surveys or promotions.
• Automated technologies: When you access the dk66 Platform, we automatically collect technical data such as your IP address, device identifiers, browser fingerprint, and session activity logs through server logs, cookies, and similar tracking technologies.
• Payment partners: When you process a deposit or withdrawal via bKash, Nagad, Rocket, Upay, or a partner bank, the payment provider shares transaction confirmation data with dk66 to reconcile your account balance.
• Identity verification providers: Where you submit identity documents for KYC (Know Your Customer) or AML (Anti-Money Laundering) verification, the verification service provider may share the outcome of their checks with dk66.
• Game providers: Third-party game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, and Spribe may share game session data — including bet amounts, game outcomes, and session duration — with dk66 for account management and dispute resolution purposes.

4 Why We Use Your Data

dk66 processes personal data for the following purposes. Each purpose is linked to a specific legal basis described in Section 5.

• Account creation and management: To register your dk66 account, verify your identity, maintain your account balance, and provide you with access to the Platform's betting and gaming services.
• Payment processing: To receive deposits, process withdrawal requests to your registered bKash, Nagad, Rocket, Upay, or bank account, and maintain an accurate transaction history in Bangladeshi Taka (৳).
• Legal and regulatory compliance: To comply with applicable anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, age verification (21+ only), and any other legal requirements applicable to the operation of the Platform.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, unauthorised account access, bonus abuse, multi-accounting, match-fixing exploitation, and other prohibited conduct described in the dk66 Terms & Conditions.
• Customer support: To respond to your enquiries, resolve disputes, investigate complaints, and provide technical assistance in connection with your dk66 account.
• Responsible gaming: To monitor your gaming activity for indicators of problem gambling behaviour, enforce deposit limits and self-exclusion requests, and comply with responsible gaming obligations.
• Platform improvement: To analyse aggregated usage patterns, identify technical issues, improve the user experience on dk66, and develop new features or products for our players in Bangladesh.
• Marketing communications: Where you have given consent or where we have a legitimate interest, to send you information about dk66 promotions, bonuses, new game releases, and cricket or sports betting offers relevant to the Bangladesh market. You may opt out at any time.

5 Legal Basis for Processing

dk66 processes your personal data on the following legal bases:

• Performance of a contract: Processing necessary to create and manage your account, process payments, settle bets, and deliver the services you have registered to use on the dk66 Platform.
• Legal obligation: Processing required by law, including identity verification, age verification (21+), anti-money laundering checks, fraud reporting, and data retention obligations.
• Legitimate interests: Processing for fraud prevention, platform security, abuse detection, responsible gaming monitoring, and improving our services — where those interests are not overridden by your fundamental privacy rights.
• Consent: Processing for optional marketing communications, certain cookies, and any other processing activity for which dk66 specifically requests your consent. Where we rely on consent, you have the right to withdraw it at any time without affecting the lawfulness of prior processing.

6 Sharing Your Data

dk66 does not sell your personal data. We share personal data with third parties only where it is necessary to operate the Platform or where we are required to do so by law. The categories of recipients with whom we may share your data are as follows:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, and other financial institutions involved in processing your deposit and withdrawal transactions. These entities receive only the minimum data required to process each transaction.
• Identity verification providers: Third-party KYC and AML service providers who verify the authenticity of identity documents submitted during account verification. These providers process data under strict confidentiality agreements and are not permitted to use your data for any purpose other than verification.
• Game studios: Licensed game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive session identifiers and wager data to deliver game content and resolve game-specific disputes. These providers do not receive your full identity data.
• Technology and infrastructure partners: Cloud hosting providers, content delivery networks, cybersecurity services, and platform analytics tools used to operate, secure, and improve dk66. These partners act as data processors under binding data processing agreements.
• Legal and regulatory authorities: Law enforcement agencies, financial intelligence units, or other competent authorities where dk66 is required by law to disclose personal data, or where disclosure is necessary to protect the rights, safety, or property of dk66 or its players.
• Business successors: In the event of a merger, acquisition, or transfer of dk66's business assets, your personal data may be transferred to the acquiring entity, subject to the same privacy commitments set out in this Policy.

All third-party service providers who process personal data on behalf of dk66 are required to implement appropriate technical and organisational security measures and to handle your data strictly in accordance with our documented instructions.

7 Cookies & Tracking Technologies

dk66 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, analyse usage patterns, and support fraud detection. The main categories of cookies we use are as follows:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without impairing your ability to use dk66.
• Functional cookies: Remember your language preferences, last-used payment method, and responsible gaming settings such as deposit limits or session reminders.
• Analytics cookies: Collect anonymised data about how players navigate the Platform — which pages are visited most frequently, how long sessions last, and which games are most popular. This data is used in aggregate form to improve the dk66 experience.
• Fraud detection cookies: Help us identify unusual activity patterns associated with multi-accounting, bot activity, or other prohibited conduct described in the dk66 Terms & Conditions.

You may manage your cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent you from logging into or using the dk66 Platform. Disabling analytics or functional cookies will not prevent you from accessing the Platform but may affect certain personalised features.

8 Data Security

dk66 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, loss, alteration, or disclosure. Key measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser or mobile device and dk66 servers.
• One-way cryptographic hashing for stored account passwords, meaning dk66 staff cannot read your password in plain text.
• Role-based access controls ensuring that personal data is accessible only to authorised dk66 personnel who require it to perform their specific job function.
• Regular penetration testing and security audits of Platform infrastructure.
• Secure, geographically redundant data storage with automated backup procedures.
• Logging and alerting on unusual access patterns to detect potential data breaches promptly.

While dk66 takes data security seriously and applies industry-standard protections, no online platform can guarantee absolute security against all threats. If you suspect that your dk66 account has been compromised, please contact [email protected] immediately so we can investigate and take appropriate action.

9 Data Retention

dk66 retains personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Our general retention guidelines are as follows:

• Account data: Retained for the duration of your active account plus a period of 5 years following account closure, to comply with anti-money laundering record-keeping obligations.
• Transaction records: Deposit, withdrawal, and betting transaction records are retained for a minimum of 5 years following the date of each transaction.
• Identity verification documents: KYC documents such as NID scans and selfies are retained for the period required by applicable AML regulations, typically 5 years from the date of verification or account closure, whichever is later.
• Support communications: Customer support chat logs and email records are retained for 3 years from the date of each interaction, unless the communication relates to an ongoing dispute or legal matter.
• Marketing preferences: Records of your marketing consent or opt-out are retained for as long as we may need to demonstrate compliance with applicable rules.
• Technical and analytics data: Aggregated, anonymised usage data may be retained indefinitely for Platform improvement purposes. Raw session logs are retained for 12 months.

When data is no longer required and retention obligations have been met, dk66 will securely delete or irreversibly anonymise it.

10 Your Rights

As a dk66 player, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Rights Request".

• Right of access: You may request a copy of the personal data dk66 holds about you, including information about how it is used and with whom it has been shared.
• Right to rectification: If the personal data we hold about you is inaccurate or incomplete, you may request that we correct it. For example, if your registered mobile number has changed, you may ask us to update your account details.
• Right to erasure: You may request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose it was collected. Note that we may be unable to delete data where we have a legal obligation to retain it (e.g., AML record-keeping requirements).
• Right to restrict processing: You may request that we limit the way we use your personal data in certain situations, such as while a dispute about data accuracy is being resolved.
• Right to object: You may object to processing based on legitimate interests, including direct marketing. We will stop processing for marketing purposes immediately upon receiving a valid objection.
• Right to data portability: Where processing is based on your consent or performance of a contract and carried out by automated means, you may request a machine-readable copy of the data you provided to dk66.
• Right to withdraw consent: Where dk66 processes your data on the basis of your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred before withdrawal.

dk66 will respond to rights requests within 30 days of receipt. Where a request is particularly complex or we receive a high volume of requests, we may extend this period by up to 60 days with notice to you. We will not charge a fee for handling rights requests unless they are manifestly unfounded or excessive.

11 Children's Privacy

The dk66 Platform is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If you are under 21, you must not register a dk66 account or use any service on the Platform.

If dk66 becomes aware that personal data has been collected from a person under the age of 21, we will take prompt steps to delete that data and close the associated account. If you believe that a minor may have registered a dk66 account, please notify us immediately at [email protected].

12 Third-Party Services

The dk66 Platform integrates with third-party services — including game providers, payment processors, and analytics tools — that operate under their own privacy policies. While dk66 selects partners carefully and requires them to meet our data protection standards through contractual commitments, we are not responsible for the privacy practices of third-party services in respect of data those services collect independently outside of their integration with dk66.

Game content provided by studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi is delivered through secure iFrame or API integrations. These providers may maintain their own session data logs for game integrity and dispute resolution purposes. Any data shared with these providers in connection with your dk66 gaming session is governed by both this Privacy Policy and the respective provider's own data governance arrangements.

Payment services provided by bKash, Nagad, Rocket, Upay, and partner banks are governed by the respective privacy policies and terms of service of those financial institutions. dk66 is not responsible for how these providers handle data collected directly by them through your use of their mobile wallet or banking apps.

13 Changes to This Policy

dk66 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, Platform features, or applicable legal requirements. When we make material changes, we will publish the revised Policy on this page and update the effective date shown at the top of the document.

Where changes are significant, we will take reasonable steps to notify registered players — for example by sending a notification to the mobile number on your account. We encourage you to review this Privacy Policy periodically to remain informed about how dk66 protects your data. Continued use of the Platform following the effective date of a revised Policy constitutes your acceptance of the changes.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way dk66 handles your personal data, please contact our support team:

• Email: [email protected] (subject line: "Privacy Enquiry")
• Response time: We aim to respond to all privacy-related enquiries within 5 business days.
• Formal complaints: Mark your email "Formal Privacy Complaint" for escalated handling. Formal complaints will receive a written response within 20 business days.

For requests to exercise your data subject rights (access, rectification, erasure, portability, etc.), please use the subject line "Privacy Rights Request" and include your registered mobile number so we can verify your identity before processing the request.