k66 Privacy Policy — How We Handle Your Data

The six principles below summarise how k66 approaches the personal data of its users. The full detail behind each principle is in the numbered sections that follow.

k66 (operated at k66.cam) is an online betting and casino platform serving users in Bangladesh. We are committed to handling the personal data of our users responsibly, transparently, and in a manner consistent with applicable data protection principles. This Privacy Policy explains what personal data we collect when you use the k66 platform, how we use it, who we share it with, how long we keep it, what your rights are, and how to contact us with privacy-related requests.

By registering on or using k66.cam, you acknowledge that you have read this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not consent to this Privacy Policy, you should not create an account or use the k66 platform. This Privacy Policy forms part of the k66 Terms and Conditions, which you are also required to accept when registering.

k66 collects personal data through two main channels: data you provide directly when registering and using the platform, and data we collect automatically when you interact with the platform. The categories of personal data we may collect include:

• Identity data: your full name, date of birth, and government-issued identification document details (collected during KYC verification).
• Contact data: your mobile phone number, email address, and residential address. Phone number is required for account verification and two-factor authentication where applicable.
• Financial data: transaction records including deposit amounts, withdrawal requests, payment method references (e.g. the last four digits of a card or a registered bKash number), and account balance history. k66 does not store full card numbers or mobile banking PINs.
• Technical data: IP address, device type and operating system, browser type and version, session duration, pages visited, and general geographic location derived from IP address. This data is collected automatically using cookies and similar technologies.
• Gameplay and wagering data: records of games played, bets placed, bet amounts, outcomes, and bonus usage. This data is used for account management, responsible gaming monitoring, fraud detection, and regulatory compliance.

You are not required to provide all categories of data at the point of registration. However, certain data — particularly identity and contact data — is required before k66 can process deposits, withdrawals, or bonus claims. Incomplete verification may result in temporary account restrictions.

k66 uses the personal data it collects for the following purposes:

• Account administration: creating and managing your k66 account, verifying your identity, processing your deposits and withdrawals, and providing customer support.
• Platform improvement: analysing how users interact with k66 to identify technical issues, improve the user experience, and develop new features that serve Bangladesh players better.
• Fraud prevention and security: detecting and investigating suspicious activity, preventing money laundering, and protecting users from unauthorised access to their accounts.
• Responsible gaming: monitoring betting patterns to identify users who may be at risk of problem gambling and to offer appropriate support tools or interventions where warranted.
• Marketing communications: sending you information about promotions, bonuses, and new features on k66 that may be of interest to you. You may opt out of marketing communications at any time by contacting support at [email protected].
• Legal and regulatory compliance: meeting obligations under applicable law, responding to lawful requests from regulatory authorities, and maintaining records as required by financial crime prevention regulations.

k66 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contract performance: processing necessary to provide the k66 service you have signed up for, including account management, transaction processing, and game delivery.
• Legal obligation: processing required to comply with applicable law, including identity verification, transaction record-keeping, and anti-money-laundering obligations.
• Legitimate interests: processing conducted to prevent fraud, improve platform security, and maintain the integrity of k66's gaming environment, where those interests are not overridden by your data protection rights.
• Consent: where k66 sends you optional marketing communications or uses non-essential cookies. You may withdraw consent for these activities at any time without affecting the lawfulness of processing based on consent before withdrawal.

k66 does not sell your personal data. We share personal data only in the limited circumstances described below:

• Payment processors: we share the minimum necessary transaction data with our payment partners (including bKash, Nagad, Rocket, Upay, Visa and Mastercard processors) to authorise and complete your deposit and withdrawal requests. These providers process data under their own privacy policies and applicable financial regulations.
• Game providers: to enable live casino tables and slot games from third-party studios (including Evolution Gaming, Ezugi, Pragmatic Play, NetEnt and Microgaming), your session data and wagering activity may be shared with those providers solely for the purpose of delivering the game experience and auditing outcomes.
• Technology and security service providers: we use third-party service providers to assist with platform hosting, fraud detection, and identity verification. These providers act on our instructions and are contractually bound to process data only as directed by k66.
• Regulatory and law enforcement authorities: k66 will disclose personal data to relevant authorities where required to do so by applicable law, court order, or regulatory direction. k66 will not notify the affected account holder of such disclosure where prohibited from doing so by law.

Beyond these four categories, k66 does not share your personal data with any other party. In particular, k66 does not share data with advertising networks for the purpose of serving targeted advertisements on third-party platforms, and does not sell data to data brokers or marketing agencies.

k66 takes particular care with financial data. When you make a deposit or withdrawal using bKash, Nagad, Rocket, Upay, or a card, k66 records a reference to that transaction — typically a transaction ID, the payment method type, and a masked identifier (such as the last four digits of a card or the last three digits of a mobile wallet number). k66 does not store full card numbers, card security codes (CVV/CVC), or mobile banking PINs. These sensitive credentials are handled exclusively by the relevant payment processor and never pass through or reside on k66 servers.

All financial transactions processed through k66 are transmitted over encrypted connections. k66 conducts regular reviews of its payment data handling procedures and works only with payment partners who maintain recognised security standards. If you believe an unauthorised transaction has been made from your k66 account, you must notify k66 support immediately via live chat.

k66 uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyse usage patterns. The types of cookies used on k66.cam include:

• Essential cookies: required for the platform to function. These enable your login session to persist, keep your account basket intact during a session, and prevent certain types of fraud. Essential cookies cannot be disabled without breaking core platform functionality.
• Analytics cookies: used to understand how users navigate k66, which pages are most visited, and where users encounter issues. This data is aggregated and used only to improve the platform. Analytics cookies are not used to build individual advertising profiles.
• Preference cookies: used to remember your language setting, display preferences, and other customisations so that you do not have to re-enter them on every visit to k66.cam.

You may manage non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the k66 platform — for example, disabling session cookies may prevent you from staying logged in during a visit. k66 does not use third-party advertising cookies or cross-site tracking technologies.

k66 retains your personal data for as long as your account is active and for a period thereafter as required by applicable law or legitimate business need. Financial transaction records are retained for a minimum of five years from the date of the transaction to comply with anti-money-laundering record-keeping requirements. Identity verification documents are retained for a minimum of five years from the date of account closure. Gameplay and wagering records are retained for a minimum of three years from the date they were generated.

When the retention period for a category of data has expired and there is no longer a legal or business justification for retaining it, k66 will securely delete or anonymise that data. Where data is anonymised rather than deleted, the anonymised data set no longer constitutes personal data and may be retained indefinitely for statistical or research purposes.

As a user of the k66 platform, you have the following rights in relation to your personal data. To exercise any of these rights, contact k66 support at [email protected] with the subject line "Data Rights Request" and your registered username:

• Right of access: you may request a copy of the personal data k66 holds about you. k66 will provide this within a reasonable period, typically 30 days of receiving a valid request.
• Right to rectification: if any personal data held by k66 about you is inaccurate or incomplete, you may request that it be corrected or completed. Where the correction is straightforward — for example, a misspelled name — k66 will action this promptly.
• Right to erasure: you may request that k66 delete your personal data where there is no longer a legitimate reason to retain it. k66 will assess erasure requests on a case-by-case basis. Note that k66 may be legally required to retain certain categories of data (particularly financial records) even after account closure, and erasure of this data may not be possible until the mandatory retention period has elapsed.
• Right to restriction of processing: in certain circumstances — for example, where you contest the accuracy of your data while k66 verifies it — you may request that k66 restrict the processing of your data to storage only until the matter is resolved.
• Right to object: you may object to processing of your personal data that is based on k66's legitimate interests, including responsible gaming profiling. You may also object to receiving marketing communications at any time and k66 will cease sending them promptly.

k66 will respond to all data rights requests within 30 days. Where a request is complex or k66 receives a high volume of requests, this period may be extended by a further 30 days with notice. k66 will not charge a fee for handling data rights requests unless a request is manifestly unfounded or excessive.

k66 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include 256-bit SSL/TLS encryption for all data in transit, encrypted storage for sensitive data at rest, role-based access controls that limit which k66 staff members can access personal data and under what circumstances, regular internal security reviews and penetration testing, and automatic session timeouts to reduce the risk of unauthorised account access on shared or unattended devices.

Despite these safeguards, no internet-based platform can guarantee absolute security. In the unlikely event of a data breach that is likely to result in a risk to your rights and freedoms, k66 will take immediate steps to contain the breach and will notify affected users as promptly as circumstances allow. You can help protect your account by choosing a strong, unique password, not sharing your login credentials with anyone, and contacting k66 support immediately if you suspect any unauthorised access.

k66 is strictly a platform for adults aged 21 and above. k66 does not knowingly collect personal data from anyone under the age of 21. During registration, users are required to confirm they meet the minimum age requirement, and k66 may request government-issued identification to verify age as part of the KYC process. If k66 becomes aware that personal data has been collected from a person under 21 — whether through a fraudulent registration or any other means — k66 will promptly close the account, reverse any transactions where possible, and delete the personal data associated with that account. If you believe an underage person has registered on k66, please notify us immediately at [email protected].

k66 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or the structure of the k66 platform. When a material change is made, k66 will update the "Last updated" date at the top of this page and, where the change significantly affects your rights or how we use your data, will endeavour to provide notice via the platform — for example by displaying a notification upon your next login.

Your continued use of k66.cam after a revised Privacy Policy has been posted constitutes your acceptance of the updated policy. We encourage you to review this page periodically so that you are always aware of the current terms under which k66 processes your personal data.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how k66 handles your personal data, please contact the k66 support team. Our team is available 24 hours a day, 7 days a week via live chat on k66.cam and will acknowledge privacy-related queries promptly.

Email: [email protected] (plain text — not a clickable link). Please include "Privacy Query" in your message subject and provide your registered username so we can locate your account records promptly.