66bat Privacy Policy — Your Data, Your Rights

This policy explains what personal information 66bat collects from players in Bangladesh, how we use it, how we protect it, and what rights you hold over your own data.

📅 Last Updated: 1 January 2026

Introduction

66bat ("we", "us", "the Platform", "the Operator") is committed to protecting the privacy of all players and users who access our online casino and sportsbook. This Privacy Policy ("Policy") describes the types of personal data we collect, the purposes for which we process it, the conditions under which we may share it, and the rights available to you as a data subject. This Policy applies to all personal data collected through the 66bat website, mobile interface, and any associated services provided to players located in Bangladesh or elsewhere.

By registering an account on 66bat, depositing funds, or otherwise using any service on the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the 66bat platform. This Policy should be read in conjunction with our Terms and Conditions, which govern your use of the platform overall.

This Privacy Policy applies to all 66bat users in Bangladesh and internationally. We do not knowingly collect data from persons under 21 years of age. If you believe a minor has provided data to 66bat, please contact us immediately at [email protected] so we can take appropriate action.

Our Privacy Commitments at a Glance

Six core principles guide how 66bat handles your personal data. Full details are set out in the sections below.

SSL Encryption

All data transmitted between your device and the 66bat platform is encrypted using SSL (Secure Sockets Layer) technology. Your login credentials, payment details, and personal information are never transmitted in plain text.

No Data Selling

66bat does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. Your data is used exclusively for the purposes set out in this Policy.

Access and Correction

You have the right to access the personal data 66bat holds about you and to request corrections to inaccurate or outdated information. Requests can be submitted via the support team.

Right to Deletion

You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations that may apply.

No Cross-Border Transfer Without Safeguards

Where your data is processed by third-party service providers outside Bangladesh, 66bat ensures that appropriate data protection safeguards are in place before any transfer occurs.

Marketing Opt-Out

You may opt out of receiving promotional communications from 66bat at any time by contacting support or adjusting your account notification settings. Opting out of marketing does not affect your ability to use the platform.

What Data We Collect

66bat collects personal data from you directly (when you register, verify your account, deposit, or contact support) and indirectly (through cookies, device data, and platform usage logs). The categories of data we collect are summarised below.

Identity
Full legal name, date of birth, nationality, and government-issued identification (National Identity Card, passport, or birth certificate) collected during registration and KYC verification.
Contact
Mobile phone number and email address provided at registration. These are used for account communications, security alerts, and (where opted in) promotional messages.
Financial
Payment method details (bKash number, Nagad number, Rocket number, bank account number, Visa/Mastercard details) required to process deposits and withdrawals. Card numbers are tokenised and never stored in full.
Technical
IP address, device type, operating system version, browser or app version, screen resolution, and connection type. Used for security monitoring, fraud prevention, and platform optimisation.
Behavioural
Session duration, games played, bet amounts, deposit and withdrawal history, bonus usage, and responsible gaming tool usage. Used to personalise your experience and to monitor for problem gambling indicators.

66bat does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, or health data, unless specifically required as part of a responsible gaming intervention or legal obligation. Where such data is collected in that limited context, it is processed under a strict need-to-know basis and is not used for any commercial purpose.

How We Use Your Data

66bat processes your personal data only for specific, legitimate purposes. We do not use your data for any purpose that is incompatible with the purposes stated below without first obtaining your explicit consent.

Account
To create and manage your 66bat account, authenticate your identity, process your KYC verification, and maintain the security of your account and funds.
Transactions
To process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, and local bank transfers; to verify payment method ownership; and to maintain accurate financial records of all transactions on your account.
Legal & Compliance
To comply with applicable anti-money laundering (AML) obligations, fraud prevention requirements, age verification requirements, and any legal requests from competent authorities in accordance with applicable law.
Platform Improvement
To analyse platform usage patterns, improve the performance and user experience of the 66bat interface for players in Bangladesh, resolve technical issues, and develop new features and services.
Marketing
To send you promotional offers, bonus notifications, and news about new games or features — but only where you have opted in to receive such communications. You may withdraw this consent at any time by contacting support or updating your account settings.

KYC and Identity Verification

66bat is required to verify the identity of all players before processing withdrawals and, in certain circumstances, before processing deposits above specified thresholds. This KYC (Know Your Customer) process involves collecting and verifying one or more of the following documents: a valid National Identity Card (NID) issued by the Bangladesh Election Commission, a valid passport, or a valid birth certificate. 66bat may also request a utility bill or bank statement as proof of address, and a selfie or live photo as proof of likeness.

KYC documents submitted to 66bat are stored securely and used solely for the purposes of identity verification, age confirmation, fraud prevention, and compliance with applicable AML regulations. These documents are not shared with third parties for commercial purposes and are not accessible to 66bat staff beyond those with a specific need-to-know role in the verification process. Document images are encrypted at rest and in transit.

Payment Data and Financial Information

When you make a deposit or withdrawal on 66bat, your payment details are transmitted directly to the relevant payment processor (for example, bKash, Nagad, Rocket, or your bank). 66bat does not store full card numbers or full mobile wallet account credentials on its own servers. Payment data is processed using tokenisation and encryption standards consistent with industry practice. For mobile wallet transactions in Bangladesh, 66bat retains only the last four digits of the registered wallet number and the transaction reference ID for reconciliation purposes.

All transaction records — including deposit amounts, withdrawal amounts, payment method types, and timestamps — are retained by 66bat for a minimum of five years from the date of each transaction. This retention period exists to satisfy audit, AML, and dispute resolution requirements. After the applicable retention period has elapsed and there is no legal obligation requiring further retention, financial records are securely deleted.

66bat uses cookies and similar tracking technologies on its website and mobile interface to provide core platform functionality, maintain your session state, improve performance, and (where you have consented) deliver relevant promotional content. A cookie is a small text file stored on your device by your browser when you visit the 66bat platform.

The following categories of cookies are used on the 66bat platform. You may control non-essential cookies via your browser settings, though disabling certain cookies may affect the functionality of the platform.

Essential
Required for the platform to function correctly. Includes session cookies that maintain your logged-in state, security tokens, and CSRF protection. Cannot be disabled without breaking core functionality.
Analytics
Used to measure how players interact with the platform — which games are loaded, how long sessions last, which pages are visited. Data is aggregated and anonymised. Helps 66bat improve platform performance and user experience for Bangladesh players.
Marketing
Used to deliver relevant promotional content to players who have opted in to marketing communications. May include retargeting cookies that recognise your device across sessions. Can be disabled via your browser or by opting out of marketing in your account settings.

Sharing Your Data

66bat does not sell your personal data to third parties. We may share your data with carefully selected third-party service providers who assist us in operating the platform — including payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard), KYC and identity verification providers, fraud detection services, customer support platform providers, and cloud hosting infrastructure providers. These third parties are permitted to process your data only for the specific purpose for which it was shared and are contractually required to maintain appropriate data security standards.

66bat may also be required to disclose your personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required by applicable law or pursuant to a valid legal order. In such cases, 66bat will disclose only the minimum data necessary to comply with the legal requirement, and will notify you of the disclosure where permitted by law to do so.

66bat will never share your personal data with third parties for their own independent marketing, advertising, or commercial purposes without your explicit prior consent. If you receive unsolicited communications claiming to be from 66bat, please contact [email protected] immediately — these are not sent by us.

Data Retention

66bat retains your personal data for as long as your account is active and for a period after account closure as required by applicable law and our internal data retention policy. The default retention period for account and transaction records is five years from the date of account closure. This period is set to satisfy potential audit requirements, AML reporting obligations, and dispute resolution needs. Certain categories of data — such as KYC documents and payment records — may be subject to longer mandatory retention periods where required by law.

Where your personal data is no longer required for any legitimate purpose and no legal retention obligation applies, 66bat will securely delete or anonymise the data. Anonymised and aggregated data — from which no individual can be identified — may be retained indefinitely for statistical and platform improvement purposes.

Your Data Rights

As a 66bat account holder, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact the support team at [email protected] (plain text — not a clickable link). 66bat will respond to verified data rights requests within 30 days.

Access
You have the right to request a copy of the personal data 66bat holds about you. We will provide this in a structured, commonly used format. Identity verification is required before data is released.
Correction
You have the right to request correction of inaccurate or incomplete personal data held about you. Corrections to core account data (name, date of birth) require KYC re-verification to prevent fraudulent amendments.
Erasure
You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected. This right is subject to overriding legal obligations — for example, AML regulations may require 66bat to retain certain records even after your account is closed.
Objection
You have the right to object to the processing of your personal data for direct marketing purposes at any time. You also have the right to object to processing based on legitimate interests where you believe your interests override those of 66bat. 66bat will cease the relevant processing unless it can demonstrate compelling legitimate grounds.

To exercise any of the rights described above, please contact the 66bat support team. We may ask you to verify your identity before actioning a data rights request to ensure your data is not disclosed to an unauthorised person. We aim to respond to all data rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by up to a further 30 days, and we will notify you of any extension within the initial 30-day window.

Data Security

66bat implements technical and organisational security measures designed to protect your personal data from unauthorised access, accidental loss, alteration, or disclosure. These measures include SSL/TLS encryption for all data in transit; AES-256 encryption for sensitive data stored at rest; access controls that restrict data access to authorised personnel only; regular security audits and penetration testing of the platform; two-factor authentication (2FA) available for all player accounts; and secure, redundant server infrastructure hosted in monitored data centres.

Whilst 66bat takes all reasonable steps to protect your personal data, no data transmission over the internet or electronic storage system is completely secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, 66bat will notify affected players as required by applicable law and will take immediate steps to contain and remediate the breach.

Children and Minors

The 66bat platform is strictly for adults aged 21 years and above. We do not knowingly collect, process, or store personal data relating to individuals under the age of 21. If we discover or are notified that personal data belonging to a person under 21 has been submitted to the platform — whether through a falsified registration, a shared device, or any other means — we will immediately close the associated account, delete the data, and refund any deposits to the originating payment method where technically possible.

If you are a parent or guardian and believe that a person under 21 in your household has registered on 66bat, please contact us immediately at [email protected]. We treat such reports as urgent and will act within 24 hours of a verified report being received.

Changes to This Privacy Policy

66bat reserves the right to update this Privacy Policy at any time. When material changes are made — those that significantly affect how your personal data is collected, used, or shared — the "Last Updated" date at the top of this page will be revised and we will endeavour to notify active account holders via the platform or by email. Your continued use of the 66bat platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this Policy periodically to stay informed about how we protect your data.

Contact and Data Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 66bat processes your personal data, please contact our support team. You can reach us by email at [email protected] (plain text — not a clickable link). Our support team is available 24 hours a day, 7 days a week. Data rights requests and privacy enquiries are handled by our compliance team and will typically receive a response within 5 business days for general enquiries and within 30 calendar days for formal data rights requests.

For formal data rights requests (access, correction, erasure, or objection), please state clearly in your message which right you wish to exercise, the email address and mobile number associated with your account, and sufficient details to allow us to identify and verify your identity before actioning the request. 66bat will not action a data rights request without first completing identity verification to protect your data from unauthorised third-party requests.

Have More Questions About 66bat?

Visit our FAQ page for quick answers to common questions, or read our About Us page to learn more about who we are and how we serve Bangladesh players.

Visit FAQ About 66bat