Privacy Policy — How r666 Protects Your Data

1 Introduction

This Privacy Policy ("Policy") describes how r666 ("we", "us", "our", "the Platform") collects, uses, stores, shares, and protects personal data relating to individuals ("you", "your", "the Player") who register for or use any r666 service available at r666.today. r666 operates as an online gaming and sports betting platform serving players in Bangladesh.

r666 is committed to handling personal data responsibly and in accordance with applicable data protection principles. By registering an account with r666 or by continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein.

2 Personal Data We Collect

r666 collects personal data in several categories, depending on how you interact with the platform. The table below summarises each category, together with specific examples of the data types involved.

Data Category	Examples
Identity Data	Full legal name, date of birth, nationality, national identity number (NID), passport number, photograph (where verification is required)
Contact Data	Residential address in Bangladesh (including district, division, and postal code), email address, mobile phone number
Account Data	Username, encrypted password, account creation date, account status, preferred language, responsible gaming settings
Financial Data	Deposit and withdrawal history, transaction amounts in BDT, payment method identifiers (e.g., bKash account number, Nagad account number, Rocket number, masked Visa/Mastercard digits), bonus and promotion usage records
Gaming & Betting Data	Betting history, game session logs, wager amounts, game outcomes, sport and event preferences, responsible gaming interaction records
Technical Data	IP address, device type and model, operating system, browser type and version, screen resolution, session timestamps, approximate geolocation derived from IP
Communication Data	Records of support tickets, live chat transcripts, emails and messages exchanged with the r666 support team, responses to surveys or feedback requests

r666 does not collect or process special categories of sensitive personal data, such as health information, religious beliefs, or political opinions, unless you voluntarily disclose such information in the context of a responsible gaming request (for example, disclosing a gambling-related health concern when requesting self-exclusion).

3 How We Collect Your Data

r666 collects personal data through the following channels:

• Direct interactions: Data you provide when registering your r666 account, completing identity verification, making deposits or withdrawals, contacting our support team, or completing any other form or request on the platform.
• Automated technologies: Technical data collected automatically when you visit or use the r666 platform, including cookies, server logs, and similar tracking technologies. See Section 11 for full details of our cookie usage.
• Third-party payment providers: Transaction confirmation and fraud-screening signals received from payment service providers such as bKash, Nagad, Rocket, Upay, Visa, and Mastercard when you initiate a deposit or withdrawal.
• Identity verification services: Where r666 engages a third-party identity verification provider to confirm your identity documents, that provider may share verification results with r666. r666 does not receive raw document images from such providers; only pass/fail outcomes and relevant identity data points are shared.
• Fraud prevention and security services: r666 may receive risk signals and fraud indicators from third-party security service providers to help protect the platform and its players.

4 Legal Basis for Processing

r666 processes personal data only where a valid legal basis exists for doing so. The primary legal bases on which r666 relies are:

• Contractual necessity: Processing is necessary to perform the contract between r666 and you — that is, to operate your account, accept and process deposits, settle bets and payouts, and deliver the gaming services you have requested.
• Legal obligation: Processing is necessary to comply with applicable legal requirements, including anti-money-laundering (AML) obligations, age verification requirements, and any disclosure obligations imposed by law.
• Legitimate interests: Processing is necessary for r666's legitimate business interests, provided those interests are not overridden by your rights and interests. This basis covers fraud prevention, platform security, responsible gaming monitoring, and aggregate service analytics.
• Consent: Where r666 relies on your consent to process personal data — for example, to send you marketing communications about r666 promotions — you may withdraw that consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

5 How We Use Your Data

r666 uses the personal data it collects for the following purposes:

• To create and manage your r666 account, including verifying your identity and age eligibility.
• To process deposits and withdrawals via your chosen payment method (bKash, Nagad, Rocket, Upay, Visa, Mastercard) and to maintain accurate financial records.
• To provide access to all r666 betting and gaming services, including cricket betting, live casino, slots, and table games.
• To administer bonuses, promotions, and loyalty programmes in accordance with the applicable promotion terms.
• To communicate with you regarding your account, including responding to support requests, sending transaction confirmations, and notifying you of changes to these policies.
• To comply with anti-money-laundering, fraud prevention, and responsible gaming obligations, including monitoring your account activity for unusual patterns that may indicate a problem.
• To improve the r666 platform through aggregate analysis of usage patterns. This analysis uses anonymised or pseudonymised data and does not involve identifying individual players.
• To send you marketing communications about r666 offers and promotions, where you have provided consent to receive such communications.

6 Sharing Your Personal Data

r666 does not sell or rent personal data to any third party. r666 may share your personal data with third parties only in the following limited circumstances:

• Payment service providers: Necessary financial data is shared with bKash, Nagad, Rocket, Upay, Visa, Mastercard, and other payment processors solely to facilitate your requested transactions.
• Identity and age verification providers: Identity data is shared with certified verification partners solely for the purpose of confirming your eligibility to hold an r666 account.
• Game software providers: Your account identifier and relevant session data are shared with third-party game studios (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) to the extent necessary to deliver their games on the r666 platform. These providers act as data processors under contract with r666.
• Fraud and security service providers: Risk signals and relevant technical data may be shared with fraud prevention services to protect r666 and its players from unauthorised access and financial crime.
• Legal and regulatory authorities: r666 will disclose personal data to law enforcement, regulatory bodies, or courts where required to do so by applicable law, or where disclosure is necessary to protect the rights, safety, or property of r666 or its players.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of r666's business, personal data held by r666 may be transferred to the acquiring entity. Affected players will be notified in advance of any such transfer, and the receiving entity will be required to honour this Privacy Policy.

All third-party service providers who process personal data on r666's behalf are required to do so only on our documented instructions and to maintain appropriate technical and organisational security measures.

7 Data Retention

r666 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your r666 account and for a minimum period of five (5) years following account closure, in accordance with anti-money-laundering record-keeping requirements.
• Financial and transaction data: Retained for a minimum of five (5) years from the date of the transaction.
• Gaming and betting records: Retained for a minimum of three (3) years from the date of each gaming session or bet settlement.
• Communication records: Support interactions and correspondence are retained for two (2) years from the date of last contact.
• Technical and log data: Server log and session data is retained for up to twelve (12) months, after which it is either deleted or anonymised.

Where r666 is required by law to retain data for a longer period, the legally mandated retention period will take precedence. Once the applicable retention period has expired, personal data is securely deleted or anonymised in a manner that prevents reconstruction.

8 Data Security

r666 implements and maintains a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and the r666 platform.
• Encryption of sensitive data fields — including passwords and financial identifiers — at rest within r666's database infrastructure.
• Role-based access controls that restrict access to personal data to only those r666 personnel who have a documented need to access it in the performance of their duties.
• Regular internal security reviews and vulnerability assessments of the r666 platform infrastructure.
• Incident response procedures that include player notification protocols in the event of a data breach that is likely to result in a risk to the rights and interests of affected individuals.

Despite these measures, no method of data transmission over the internet or electronic storage is entirely secure. r666 cannot guarantee the absolute security of your personal data. In the event that you become aware of any unauthorised access to your r666 account, you must notify us immediately at [email protected].

9 Your Data Rights

As an individual whose personal data is processed by r666, you hold the following rights with respect to your data. To exercise any of these rights, contact r666 at [email protected] with a clear description of your request. r666 will respond within a reasonable timeframe, and in any event no later than thirty (30) calendar days of receiving your request.

• Right of access: You may request a copy of the personal data r666 holds about you, together with information about how it is used and with whom it is shared.
• Right to rectification: You may request that r666 correct any inaccurate or incomplete personal data held about you.
• Right to erasure: You may request that r666 delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to any overriding legal retention obligations.
• Right to restriction: You may request that r666 restrict the processing of your personal data in certain circumstances, for example while a rectification request is being assessed.
• Right to object: You may object to r666's processing of your personal data where that processing is based on legitimate interests. r666 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.

10 Children's Privacy

The r666 platform is intended exclusively for adults aged 18 years and above. r666 does not knowingly collect or process personal data relating to individuals under the age of 18. If r666 becomes aware that personal data has been collected from a person under 18, we will take immediate steps to close the associated account and securely delete all personal data relating to that individual.

If you are a parent or guardian and believe that your child may have registered an r666 account, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

11 Cookies and Tracking Technologies

r666 uses cookies and similar technologies (such as local storage and session tokens) on the r666.today website. Cookies are small text files placed on your device by a website you visit. They serve a range of functions, from keeping you logged in to helping r666 understand how players use the platform in aggregate.

r666 uses the following categories of cookies:

• Strictly necessary cookies: These cookies are essential for the r666 platform to function. They manage your login session, maintain your account security token, and remember your responsible gaming settings. These cookies cannot be disabled without impairing core platform functionality.
• Functional cookies: These cookies remember your preferences — such as preferred language and display settings — to personalise your experience. They are not used for tracking or advertising.
• Analytics cookies: r666 uses anonymised, aggregate analytics cookies to understand how players navigate the platform, which features are most used, and where errors occur. This data is used solely to improve r666 services and is never linked back to an individual player's identity.

r666 does not use third-party advertising or retargeting cookies. Your browsing activity on r666 is not shared with any advertising network or social media platform for profiling purposes. You may configure your browser to refuse cookies or to alert you when cookies are being placed, though doing so may affect the functionality of certain r666 platform features.

12 Third-Party Links

The r666 platform does not contain links to third-party websites. In the event that any third-party content or game software hosted on the r666 platform maintains its own independent privacy practices, r666 accepts no responsibility for those practices. We encourage you to review the privacy policies of any third-party service provider whose services you access in connection with your r666 account.

13 Updates to This Privacy Policy

r666 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made, r666 will display a prominent notice on the platform and, where appropriate, notify registered players by email or in-platform message.

The date of the most recent revision is always displayed at the top of this document. Your continued use of the r666 platform following publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you should cease using the platform and contact [email protected] to request account closure.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way r666 processes your personal data, please contact us using the details below:

• Email: [email protected]
• Support availability: 24 hours a day, 7 days a week
• Response time: r666 aims to respond to all privacy-related enquiries within 24 hours

r666 takes data privacy seriously and is committed to resolving any concern you may have in a fair, transparent, and timely manner.