How 666rr Collects, Uses, and Protects Your Personal Data
Your privacy matters to us. This Privacy Policy explains exactly what personal information 666rr collects from players in Bangladesh, why we collect it, how it is stored and protected, who we may share it with, and what rights you have over your own data. We are committed to full transparency in every aspect of how we handle your information.
Six Principles That Guide How 666rr Handles Your Data
Before reading the full legal text, these six cards outline the core privacy commitments 666rr makes to every registered player. These principles are not aspirational — they describe actual, operational standards enforced across the platform every day.
666rr collects personal data only to the minimum extent necessary to operate the platform, verify player identity, process payments, prevent fraud, and comply with applicable legal obligations. We do not collect data for its own sake or build profiles beyond what platform operation requires.
All personal data held by 666rr is stored on secured, encrypted infrastructure. Access to player data is restricted to authorised 666rr personnel on a strict need-to-know basis. Data at rest is encrypted and data in transit is protected by TLS/SSL. We conduct regular internal security reviews to maintain these standards.
666rr does not sell, rent, auction, or otherwise commercially transfer your personal data to any unaffiliated third party. Data sharing with third parties is limited strictly to service providers who assist in running the platform (such as payment processors and KYC verification services) and to legal or regulatory obligations.
666rr will only send you promotional communications — including bonus offers, game announcements, and seasonal campaigns — if you have explicitly opted in to receiving them during registration or in your account preferences. You may withdraw this consent at any time by updating your communication preferences or contacting support.
Registered 666rr players have the right to request access to the personal data we hold about them, request corrections to inaccurate data, request deletion of their data (subject to legal retention obligations), and object to specific types of data processing. Requests are handled within 30 days of receipt via the support channel.
Privacy law and platform capabilities evolve. 666rr commits to reviewing this Privacy Policy at least once every twelve months and updating it to reflect any changes in data collection practices, third-party relationships, or applicable legal requirements. Players are notified of material changes via their registered contact details before changes take effect.
Summary: 666rr collects personal data to operate your account, verify your identity, process payments, prevent fraud, and comply with legal obligations. We do not sell your data. You may request access to, correction of, or deletion of your data at any time by contacting [email protected].
1. Introduction
This Privacy Policy ("Policy") describes how 666rr ("we", "us", "the Platform") collects, uses, stores, shares, and protects personal data belonging to individuals ("you", "the Player") who access or register on the 666rr website at https://666rr.io and use any of its associated services, including online casino games, sports betting, crash games, live dealer tables, and promotional features (collectively, "the Services").
This Policy is effective from 1 January 2026 and supersedes all previously published versions. By registering an account with 666rr or continuing to use the Services after this Policy's effective date, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein.
This Policy should be read alongside the 666rr Terms & Conditions, which govern the overall use of the platform. In the event of any conflict between this Policy and the Terms & Conditions on matters of data privacy, this Policy shall take precedence.
2. Who We Are
666rr is an internationally operated online gaming and sports betting platform serving players in Bangladesh and other permitted jurisdictions. The platform is accessible at https://666rr.io. For all data-related enquiries, the primary point of contact is the 666rr support team, reachable at [email protected].
References to "666rr", "we", "us", or "the Platform" in this Policy refer to the operating entity responsible for the Services and for the personal data processed in connection with those Services. If you require the full registered legal name and jurisdiction of the operating entity, please submit a written request to the support address above and we will respond within 10 business days.
3. Personal Data We Collect
666rr collects personal data through several channels: directly from you when you register an account or use the Services; automatically through your interaction with the platform; and from third-party verification and payment partners where necessary to deliver the Services.
3.1 Data You Provide Directly
- Registration data: Full name, date of birth, mobile number, and email address provided at the time of account creation.
- Identity verification (KYC) data: Government-issued photo identification (National ID card, passport, or driving licence), selfie or live photograph where required, and proof of payment method ownership.
- Payment data: Mobile wallet identifiers (bKash, Nagad, Rocket, Upay account numbers), bank card details (card number, expiry — stored only in tokenised form), and transaction references.
- Communications data: Content of messages sent to the 666rr support team via live chat, email, or any other support channel.
- Responsible gaming data: Self-declared deposit limits, cool-off requests, and self-exclusion elections made via the account dashboard or through support.
3.2 Data Collected Automatically
- Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and device identifier.
- Usage data: Pages visited, games played, bets placed, session duration, click-stream data, and deposit and withdrawal history.
- Geolocation data: Approximate location derived from IP address, used to verify that access is from a permitted jurisdiction and to apply appropriate responsible gaming controls.
- Cookie and tracking data: Data collected via cookies, web beacons, and similar technologies as described in Section 7 of this Policy.
3.3 Data Received From Third Parties
- Payment processors: Transaction confirmation status and fraud-risk signals from bKash, Nagad, Rocket, Upay, Visa, and Mastercard processing networks.
- KYC verification providers: Identity verification outcomes from third-party document authentication services used to confirm the validity of identity documents submitted during account verification.
- Fraud prevention services: Risk scores and flagging data from third-party fraud detection tools used to protect the platform and its players from fraudulent activity.
Sensitive Data Notice: 666rr does not intentionally collect sensitive personal data categories such as racial or ethnic origin, religious beliefs, health data, or political opinions. If you disclose such information voluntarily (for example, in a support message), it will be handled with the highest level of confidentiality and will not be used for any purpose other than resolving your specific query.
4. How We Use Your Personal Data
The table below sets out the primary purposes for which 666rr uses the personal data it collects, together with the category of data used for each purpose.
| Purpose | Data Categories Used |
|---|---|
| Creating and managing your player account | Registration data, device data |
| Verifying your identity and age (KYC) | KYC data, registration data |
| Processing deposits and withdrawals | Payment data, KYC data, transaction history |
| Delivering platform Services (games, betting) | Account data, usage data, device data |
| Preventing fraud and money laundering (AML) | All data categories, third-party risk signals |
| Responsible gaming monitoring and intervention | Usage data, responsible gaming elections, payment data |
| Providing customer support | Communications data, account data |
| Sending opted-in promotional communications | Registration data, usage data, marketing preferences |
| Complying with legal and regulatory obligations | All data categories as required by applicable law |
| Improving platform performance and user experience | Usage data, device data, cookie data (anonymised) |
5. Legal Basis for Processing
666rr processes your personal data on the following legal bases, depending on the purpose of processing:
- Contractual necessity: Processing required to fulfil our obligations to you under the Terms & Conditions — including account creation, payment processing, game delivery, and customer support — is carried out because it is necessary to perform the contract between you and 666rr.
- Legal obligation: Processing carried out to comply with applicable anti-money-laundering (AML) regulations, identity verification requirements, and any other legal obligations imposed on 666rr as an internationally operating gaming platform.
- Legitimate interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and internal analytics is conducted on the basis of 666rr's legitimate interest in maintaining a safe, fair, and commercially viable platform. These interests have been assessed against your privacy rights and do not override your fundamental interests.
- Consent: Processing for marketing and promotional communications is conducted solely on the basis of your freely given, specific, and informed consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.
6. Sharing Your Personal Data
666rr does not sell, rent, or otherwise commercially disclose your personal data to unaffiliated third parties. We share data only in the following limited circumstances:
6.1 Service Providers
We share personal data with carefully selected third-party service providers who assist us in operating the 666rr platform. These providers are contractually bound to process your data only on our instructions, to maintain appropriate security standards, and to delete or return data at the end of their engagement with us. Current categories of service provider include:
- Payment processing partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard processing networks)
- Identity verification and KYC document authentication providers
- Fraud detection and AML compliance technology providers
- Cloud infrastructure and data hosting providers
- Customer support platform providers (live chat and ticketing systems)
- Third-party game studios (Pragmatic Play, Evolution Gaming, NetEnt, Ezugi, Spribe) — limited to session data required to deliver the game experience
6.2 Legal and Regulatory Disclosure
666rr may disclose personal data to law enforcement agencies, regulatory authorities, or courts where we are legally required to do so, where disclosure is necessary to protect the rights, property, or safety of 666rr or its players, or where disclosure is required in connection with legal proceedings to which 666rr is a party.
6.3 Business Transfers
In the event that 666rr undergoes a merger, acquisition, asset sale, or corporate restructuring, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and the privacy terms applicable to your data following the transaction before the transfer takes effect.
No Data Sales: 666rr has never sold player personal data to a third party for commercial purposes and has no intention of doing so. If this position ever changes, affected players will be notified in advance and given the opportunity to object or close their accounts.
7. Cookies and Tracking Technologies
666rr uses cookies and similar tracking technologies on the platform website. Cookies are small text files stored on your device that allow the platform to recognise your browser, maintain your session, remember your preferences, and collect anonymous usage statistics.
7.1 Types of Cookies Used
- Strictly necessary cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during an active session and security cookies that help detect and prevent fraudulent access. These cookies cannot be disabled without breaking core platform functionality.
- Functional cookies: Used to remember your preferences, such as language settings and display options, so that you do not need to reconfigure them on every visit.
- Analytics cookies: Used to collect anonymised data about how players navigate and use the platform, helping 666rr identify areas for improvement. Analytics data is not linked to individual player identities.
- Marketing cookies: Used only where you have explicitly consented to receive personalised promotional communications. These cookies help ensure that offers shown to you are relevant to your account activity and preferences.
7.2 Managing Cookies
You may control or delete cookies through your browser settings at any time. Instructions for managing cookies vary by browser; please refer to your browser's help documentation for specific guidance. Please note that disabling strictly necessary cookies will affect your ability to log in and use core platform features. Disabling functional or analytics cookies will not affect access to the platform but may reduce the quality of your experience.
8. Data Retention
666rr retains personal data for as long as it is necessary to fulfil the purposes for which it was collected, and for as long as required to comply with applicable legal and regulatory obligations. The following indicative retention periods apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | Legal and AML compliance |
| KYC identity documents | Duration of account + 5 years post-closure | Regulatory identity verification obligations |
| Payment transaction records | 7 years from transaction date | Financial record-keeping and AML requirements |
| Betting and gaming history | Duration of account + 3 years post-closure | Dispute resolution and responsible gaming review |
| Support communications | 3 years from last interaction | Dispute resolution and service improvement |
| Marketing preferences and consent records | Duration of consent + 3 years | Evidence of lawful processing basis |
| Anonymised analytics data | Indefinite (anonymised, non-personal) | Platform improvement; not linked to individuals |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an individual player. Where a player requests account closure before the end of a retention period, the data will be retained for the remaining period but will not be used for any active platform purpose.
9. Data Security
666rr implements a layered approach to data security, combining technical, organisational, and procedural controls to protect your personal data against unauthorised access, loss, alteration, or disclosure. Key security measures in place include:
- Encryption in transit: All data transmitted between your device and the 666rr platform is encrypted using TLS (Transport Layer Security) with a minimum of 256-bit encryption. The padlock icon in your browser's address bar confirms an active encrypted connection.
- Encryption at rest: Sensitive personal data stored on 666rr infrastructure, including payment details and identity documents, is encrypted at rest using industry-standard encryption protocols.
- Access controls: Internal access to player personal data is restricted to authorised personnel only, on a strictly defined need-to-know basis. Access rights are reviewed regularly and revoked immediately upon change of role or departure.
- Two-factor authentication: Internal administrative systems that handle player data are protected by two-factor authentication (2FA) requirements for all staff accounts.
- Penetration testing: 666rr conducts periodic security assessments and penetration tests to identify and remediate vulnerabilities in the platform infrastructure before they can be exploited.
- Incident response: In the event of a confirmed personal data breach that poses a risk to affected players, 666rr will notify affected players as promptly as practicable, describing the nature of the breach, the categories of data affected, and the steps being taken to address it.
Your Role in Data Security: While 666rr maintains robust technical security measures, the security of your account also depends on you. Use a strong unique password, enable two-factor authentication if offered, and never share your login credentials with anyone. 666rr staff will never ask for your password.
10. Your Data Rights
As a 666rr player, you have the following rights in respect of the personal data we hold about you. To exercise any of these rights, please submit a written request to [email protected] with sufficient detail to identify your account. We will respond within 30 calendar days of receiving a valid request.
- Right of access: You may request a copy of the personal data 666rr holds about you, together with information about how it is processed and on what legal basis.
- Right to rectification: You may request that inaccurate or incomplete personal data held about you be corrected or completed without undue delay.
- Right to erasure ("right to be forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (for consent-based processing), or where you object to processing and there are no overriding legitimate grounds. This right is subject to legal retention obligations described in Section 8.
- Right to restriction: You may request that processing of your data be restricted in certain circumstances — for example, while the accuracy of data is being contested or while an objection is being considered.
- Right to object: You may object to processing carried out on the basis of legitimate interests (including profiling for responsible gaming purposes) where you feel the processing disproportionately impacts your rights. You have an absolute right to object to processing for direct marketing purposes at any time.
- Right to data portability: Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you may request a copy of your data in a structured, commonly used, machine-readable format.
- Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
If you are not satisfied with how 666rr has handled a data rights request, you have the right to escalate your complaint by contacting the relevant supervisory authority in your jurisdiction.
11. Children's Privacy and the 21+ Policy
The 666rr platform is strictly intended for adults aged 21 years and over. We do not knowingly collect personal data from individuals under the age of 21. If you are under 21, you must not attempt to register an account, submit any personal data, or use any part of the Services.
If 666rr becomes aware that personal data has been collected from an individual under the age of 21, we will take immediate steps to close the account, delete the data, and, where deposits were made, return funds to the originating payment source. Age verification checks are conducted as part of the KYC process to enforce this requirement.
Parents or guardians who believe that their child under the age of 21 may have registered an account on the 666rr platform should contact the support team immediately at [email protected] so that the account can be investigated and closed without delay.
12. Marketing Communications
666rr may send you promotional communications about bonuses, new games, seasonal campaigns (such as Eid and Pohela Boishakh offers), BPL cricket betting specials, and other platform features — but only if you have actively opted in to receiving such communications during registration or through your account preferences settings.
Marketing communications from 666rr are sent via SMS to your registered Bangladeshi mobile number, or via email to your registered email address, or via in-platform notifications when you are logged in. We do not send unsolicited marketing via third-party messaging applications.
You may opt out of marketing communications at any time by:
- Updating your communication preferences in your account dashboard under "My Preferences".
- Clicking the unsubscribe link present in any marketing email sent by 666rr.
- Contacting support at [email protected] with a request to be removed from all marketing communications.
Opting out of marketing communications does not affect transactional communications — you will still receive messages related to your account activity, security alerts, withdrawal confirmations, and other service-critical notifications.
13. International Data Transfers
As an internationally operated platform, 666rr may transfer your personal data to, or process it in, jurisdictions outside Bangladesh. This includes transfers to cloud infrastructure providers and third-party service providers whose operations are based in other countries.
Where personal data is transferred internationally, 666rr takes steps to ensure that the transfer is carried out with appropriate safeguards in place. These safeguards may include contractual clauses that bind the receiving party to data protection standards equivalent to those described in this Policy, or the use of service providers who are certified under recognised international data security frameworks.
If you would like further information about the specific safeguards applied to international transfers of your personal data, please contact the support team at [email protected].
14. Updates to This Privacy Policy
666rr reviews this Privacy Policy at least once every twelve months and updates it as needed to reflect changes in data collection or processing practices, new third-party partnerships, changes in applicable law, or feedback from players. The effective date at the top of this Policy reflects the date of the most recent review.
Where updates are material — meaning they represent a meaningful change to how your personal data is collected, used, shared, or retained — 666rr will notify you via your registered mobile number or email address at least 14 calendar days before the updated Policy takes effect. Continued use of the platform after the effective date of an updated Policy constitutes acceptance of the revised terms.
Where changes are non-material (for example, minor wording clarifications, formatting adjustments, or the correction of typographical errors), they may be made without advance notice. The current version of this Policy is always accessible at https://666rr.io/privacy-policy.
Last Updated: This Privacy Policy was last reviewed and updated on 1 January 2026. If you have questions about what has changed since a previous version, please contact our support team and we will be happy to explain the differences.
15. Contact Us About Privacy
If you have any questions, concerns, or requests relating to this Privacy Policy or the way 666rr handles your personal data, please contact us using the details below. All privacy-related enquiries are handled in English and receive a response within 5 business days under normal operating conditions.
- Email: [email protected] (plain text — not a clickable link)
- Subject line for privacy requests: "Privacy Request — [Your Account Username]"
- Live Chat: Available 24/7 via the 666rr platform (select "Privacy & Data" as the topic)
- Response time: Within 5 business days for general enquiries; within 30 calendar days for formal data rights requests
- Support hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (UTC+6)
Your Data Is Safe — Now Let's Get You Playing
666rr protects your privacy with SSL encryption and strict data policies. Ready to explore the platform? Check out our casino games, cricket betting markets, or visit the FAQ for quick answers about your account.