5666d Privacy Policy — How We Handle Your Personal Data

1. Data Controller Information

For the purposes of this Privacy Policy, the data controller responsible for the personal information collected through the 5666d platform is the operating entity behind the 5666d brand ("5666d", "we", "us", "our"). The 5666d platform is accessible at https://5666d.app and is operated for the benefit of players primarily based in Bangladesh.

As the data controller, 5666d determines the purposes and means by which your personal data is processed. We are committed to processing your data lawfully, fairly, and transparently, and to implementing appropriate technical and organisational measures to keep it secure at all times.

If you have any questions, concerns, or requests relating to your personal data or this Privacy Policy, you may contact our data protection point of contact at:

2. Information We Collect

5666d collects personal data through several channels: directly from you when you register an account or contact support, automatically when you interact with our platform, and from trusted third-party verification providers when you complete the KYC identity check. The categories of data we collect, their source, and the legal basis for collection are summarised in the table below.

Special Category Data

5666d does not intentionally collect special category data (including health data, biometric data, racial or ethnic origin, political opinions, or religious beliefs) as part of normal platform operation. If you voluntarily disclose such information during a support interaction — for example, when raising a responsible gaming concern — it will be treated with the highest level of confidentiality and used solely to address your specific support request.

Data Relating to Minors

The 5666d platform is strictly for individuals aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. If we discover that a minor has provided us with personal data, we will delete that data immediately and close the associated account. If you believe a minor has registered on the platform, please notify us at [email protected] without delay.

3. How We Use Your Information

5666d processes personal data only for specific, documented purposes. We do not use your data for any purpose that is incompatible with the reason it was originally collected without first obtaining your explicit consent. The primary purposes for which we use your data are as follows:

Account Management & Service Delivery

• Creating and maintaining your 5666d player account, including verifying your identity and age through the KYC process.
• Processing your deposits and withdrawals through bKash, Nagad, Rocket, Upay, bank transfer, and card payment channels.
• Crediting winnings, applying bonuses, and managing the wagering requirements associated with promotional offers.
• Responding to your support requests, resolving disputes, and communicating important account-related updates.

Legal & Regulatory Compliance

• Conducting anti-money laundering (AML) checks and sanctions screening as required under applicable international compliance frameworks.
• Maintaining transaction records for the legally required retention periods to support audit and regulatory reporting obligations.
• Enforcing self-exclusion orders and responsible gaming restrictions where these have been applied to your account.

Fraud Prevention & Security

• Detecting and investigating suspicious betting patterns, duplicate accounts, chargeback fraud, and bonus abuse.
• Monitoring IP addresses and device fingerprints to identify access from prohibited jurisdictions or under active self-exclusion.
• Protecting the integrity of game outcomes and the fairness of the platform for all registered players.

Platform Improvement & Analytics

• Analysing aggregated, anonymised usage data to understand how players navigate the platform and identify areas for improvement.
• Testing new features, games, and payment methods in controlled groups before broader deployment.
• Measuring the effectiveness of promotional campaigns based on anonymised cohort performance data, not individual profiling.

Marketing Communications

Where you have provided explicit consent at registration, or where we have a legitimate interest based on your existing customer relationship, we may send you promotional communications about new games, bonus offers, and seasonal promotions relevant to the Bangladesh market — such as Eid specials, BPL cricket season promotions, or Pohela Boishakh offers. You may opt out of marketing communications at any time by contacting our support team or using the unsubscribe link in any email we send you. Opting out of marketing communications does not affect your ability to use the 5666d platform.

4. Data Sharing & Third Parties

5666d does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share personal data with external parties only where it is strictly necessary for one of the following purposes, and only to the extent required for that specific purpose:

Payment Processing Partners

To process your deposits and withdrawals, we share the minimum necessary financial data with our payment processing partners, including the operators of bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and card processing networks (Visa, Mastercard). These partners are contractually bound to process your data solely for the purpose of completing the transaction you have requested and are prohibited from using it for any other purpose.

Identity Verification Providers

During the KYC verification process, we share identity document data and personal details with third-party identity verification service providers who check the authenticity of the documents you submit. These providers operate under strict data processing agreements and are permitted to retain verification records only for as long as required by applicable AML regulations.

Game Content Providers

Games on the 5666d platform are supplied by licensed third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game supplied by one of these studios, your session data — including wager amounts, game outcomes, and session timestamps — is processed by the respective studio's platform systems. These studios operate under their own privacy policies and are independently licensed. 5666d does not share your identity data (name, NID, address) with game studios.

Legal & Regulatory Disclosure

In certain circumstances, 5666d may be required to disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction in response to a lawful request, court order, or legal obligation. We will notify you of any such disclosure where we are legally permitted to do so.

Business Transfers

In the event that 5666d undergoes a merger, acquisition, or sale of all or substantially all of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy practices of the new entity prior to your data being transferred, and you will retain all data rights described in this policy.

5. Cookies & Tracking Technologies

5666d uses cookies and similar technologies — including local storage, session tokens, and server-side logging — to make the platform function correctly, remember your preferences, and help us understand how you use our services. Below is a description of the cookie categories we use.

Managing Cookies

You can control non-essential cookies through your browser settings. Most modern browsers allow you to view, manage, and delete cookies stored on your device. Please note that disabling strictly necessary cookies or security cookies will prevent you from logging into your 5666d account and may impair core platform functionality. Instructions for managing cookies in common browsers are available through each browser's help documentation.

5666d does not use third-party advertising cookies, cross-site tracking pixels, or social media tracking tags on the platform.

6. Data Retention

5666d retains personal data only for as long as is necessary for the purposes described in this Privacy Policy, or as required by applicable legal, regulatory, or contractual obligations. The retention periods we apply to the main categories of personal data are as follows:

• Account and identity data — Retained for the full duration of your active account and for a minimum of five (5) years following permanent account closure, in compliance with applicable anti-money laundering record-keeping requirements.
• Financial transaction records — Retained for a minimum of five (5) years from the date of each transaction, in line with financial record-keeping obligations.
• KYC verification documents — Retained for five (5) years from the date of verification, or longer if required by a regulatory authority or court order.
• Gaming activity logs — Retained for three (3) years from the date of activity for responsible gaming monitoring and dispute resolution purposes.
• Support communications — Retained for two (2) years from the date of the most recent communication in a support thread.
• Technical and analytics data — Retained in anonymised, aggregated form for up to twelve (12) months; raw IP and device logs are deleted after ninety (90) days.
• Marketing consent records — Retained for the duration of your account and for one (1) year after consent withdrawal, to demonstrate compliance with consent obligations.

Upon expiry of the applicable retention period, personal data is either permanently deleted from our systems or irreversibly anonymised so that it can no longer be linked to any individual. Where deletion is not immediately possible due to backup system cycles, the data is isolated and protected from any further processing until it can be deleted.

7. Your Privacy Rights

As a registered player of 5666d, you hold a set of rights with respect to the personal data we hold about you. We are committed to honouring these rights within the timeframes specified. To exercise any of the rights listed below, please submit a written request to [email protected] with the subject line "Data Rights Request" and include your registered username and a description of the right you wish to exercise.

We will respond to all verified data rights requests within thirty (30) calendar days of receipt. In complex cases requiring extended investigation, we may extend this period by a further thirty (30) days with prior notice. We will not charge a fee for exercising your rights unless a request is manifestly unfounded or excessive, in which case we reserve the right to charge a reasonable administrative fee or decline the request.

8. Data Security

5666d implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:

• Transport Layer Security (TLS 1.3): All data exchanged between your browser or device and 5666d servers is encrypted using TLS 1.3, the current industry standard for secure communications.
• At-rest encryption: Sensitive data stored in our databases — including KYC documents, payment references, and identity fields — is encrypted using AES-256 encryption.
• Access controls: Access to personal data within our organisation is restricted on a strict need-to-know basis. Staff with access to sensitive player data are subject to background checks and confidentiality agreements.
• Multi-factor authentication (MFA): Internal administrative access to production systems containing player data requires multi-factor authentication.
• Intrusion detection and monitoring: Our infrastructure is monitored continuously for anomalous access patterns, with automated alerts and response procedures for suspected security incidents.
• Regular security assessments: 5666d conducts periodic vulnerability assessments and penetration tests on its platform infrastructure to identify and remediate security weaknesses.
• Secure data disposal: Physical and digital data that has reached the end of its retention period is disposed of securely in a manner that prevents recovery.

Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 5666d will notify affected players without undue delay — and in any case within 72 hours of becoming aware of the breach — providing clear information about the nature of the breach, the data affected, the likely consequences, and the measures we are taking to address it.

Your Role in Security

While 5666d takes its security responsibilities seriously, the security of your account also depends on the actions you take. You are responsible for keeping your login credentials confidential, choosing a strong and unique password, enabling any available two-factor authentication features, and logging out of your account when using a shared or public device. If you suspect your account has been compromised, contact [email protected] immediately.

9. Policy Updates & Contact

Updates to This Privacy Policy

5666d reviews this Privacy Policy periodically and updates it as necessary to reflect changes in our data practices, legal obligations, or platform functionality. When we make material changes — meaning changes that significantly affect how we use your data or the rights available to you — we will notify registered players by email and/or by posting a prominent notice on the platform at least seven (7) calendar days before the changes take effect.

The effective date at the top of this document will always reflect the date of the most recent revision. We encourage you to bookmark this page and check it periodically, particularly when you receive a policy update notification. Your continued use of the 5666d platform after the effective date of an updated policy constitutes your acceptance of the revised terms.

Where a proposed change to this Privacy Policy requires your fresh consent under applicable data protection law, we will obtain that consent separately before the change takes effect with respect to your data.

Contact Us About Privacy

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to report a privacy concern, please reach out to the 5666d support team: