v66 Privacy Policy

This Privacy Policy describes how v66 ("v66", "we", "us", or "our") collects, uses, stores, and protects the personal data of individuals ("you", "your", or "Player") who access or use the v66 online casino and sports betting platform available at v66.lat, including all associated subdomains, mobile interfaces, and account management systems (collectively, "the Platform").

v66 is an internationally operated online gambling platform that provides casino games, live dealer experiences, crash games, and sports betting markets to players in Bangladesh and other eligible jurisdictions. In the course of providing these services, v66 necessarily collects and processes certain personal data about registered players and visitors to the Platform. This Policy explains what data we collect, why we collect it, how we protect it, and what control you have over it.

This Privacy Policy should be read in conjunction with v66's Terms & Conditions, which are available at v66.lat/terms-conditions. In the event of any conflict between this Privacy Policy and the Terms & Conditions regarding the treatment of personal data, this Privacy Policy prevails.

v66 collects personal data through several channels, including direct submission by you during registration and account management, automated technical collection during your use of the Platform, and third-party sources such as payment processors and identity verification services. The categories of personal data we collect include:

v66 does not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information unless specifically required for responsible gaming assessment purposes and disclosed to you at the time of collection.

v66 uses the personal data it collects for the following purposes. We do not use your data for purposes that are incompatible with those listed below without first providing you with clear notice and, where required, obtaining your consent.

• Account Creation & Management: To register your account, verify your identity, process your v66 Login credentials securely, and maintain an accurate record of your account status and settings.
• Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and other supported payment methods. Financial data is shared with payment processors solely for the purpose of executing your requested transactions.
• KYC & Fraud Prevention: To verify your identity before processing withdrawals, to screen against sanctions lists, and to detect, investigate, and prevent fraudulent activity, money laundering, and other financial crimes on the Platform.
• Platform Operation & Improvement: To deliver the games, live tables, and sports betting markets you access; to diagnose and fix technical issues; and to analyse aggregate usage patterns in order to improve the Platform's features and performance.
• Responsible Gaming Monitoring: To identify patterns of behaviour associated with problem gambling, to administer responsible gaming tools you activate (such as deposit limits and self-exclusion), and to comply with our duty of care obligations toward players.
• Customer Support: To respond to your enquiries, resolve account disputes, process complaints, and communicate important account-related notifications.
• Legal Compliance: To comply with applicable legal obligations, respond to lawful requests from regulatory or law enforcement bodies, and enforce v66's Terms & Conditions.
• Marketing Communications: Where you have provided explicit consent, to send you promotional offers, bonus notifications, and news about seasonal promotions (for example, Eid specials, BPL cricket season offers, Pohela Boishakh promotions). You may withdraw consent to marketing communications at any time by contacting [email protected].

v66 processes your personal data on the following legal bases:

• Contractual Necessity: Processing that is necessary to fulfil our contractual obligations to you as a registered player — including account creation, payment processing, game delivery, and customer support — is carried out on the basis that it is required to perform the contract between you and v66.
• Legal Obligation: Processing carried out to comply with applicable anti-money laundering laws, KYC regulations, financial reporting requirements, and lawful requests from government or law enforcement bodies is conducted on the basis of legal obligation.
• Legitimate Interests: Processing carried out for fraud detection, platform security, responsible gaming monitoring, and aggregate analytics is carried out on the basis of v66's legitimate interest in operating a safe, fair, and sustainable platform. We carry out a balancing assessment to ensure that our legitimate interests do not override your fundamental privacy rights.
• Consent: Processing for marketing communications and non-essential cookies is carried out only where you have given your explicit, informed, and freely withdrawable consent. You may withdraw consent at any time without affecting the lawfulness of any processing carried out prior to withdrawal.

v66 may share your personal data with the following categories of third parties, and only to the extent necessary for the stated purpose:

• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and any other payment service provider used to process your deposits and withdrawals. These entities receive only the financial data strictly required to execute your requested transaction.
• Identity Verification Providers: Third-party KYC service providers engaged by v66 to assist with identity verification and document authentication. These providers are bound by strict data processing agreements and may not use your data for any purpose other than the verification service they provide to v66.
• Game Software Providers: Casino game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, PG Soft, Spribe, and Ezugi receive technical session data necessary to deliver game content to your device. These providers do not receive your full registration profile or financial details.
• Legal and Regulatory Authorities: v66 will disclose personal data to government bodies, law enforcement agencies, or regulatory authorities where required to do so by a lawful order, court directive, or applicable regulation. v66 will notify you of such a disclosure where legally permitted to do so.
• Fraud Prevention Services: Third-party fraud screening and anti-money laundering services that assist v66 in identifying and blocking suspicious activity on the Platform. Data shared with these services is subject to strict contractual confidentiality obligations.

All third-party data processors engaged by v66 are required to enter into data processing agreements that bind them to appropriate data protection standards consistent with this Privacy Policy. v66 does not permit third-party processors to use player data for their own independent purposes.

v66 uses cookies and similar technologies (including session tokens, local storage, and browser fingerprinting where technically necessary) on the Platform. The following table describes the categories of cookies v66 uses and their purpose:

v66 does not use advertising cookies, retargeting pixels, or third-party behavioural tracking cookies. You can manage or delete cookies at any time through your browser's privacy settings. Disabling essential cookies will prevent you from logging in to the Platform; disabling functional or analytics cookies will not affect your ability to play.

v66 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

• Active Account Data: Retained for the full duration of your registered account. While your account remains open, v66 retains your registration details, KYC documents, transaction history, and gameplay records as part of your account profile.
• Closed Account Data: Following account closure, v66 retains core account records — including registration details, KYC documents, and transaction history — for a minimum period of five years in order to comply with anti-money laundering record-keeping obligations and to resolve any disputes that may arise after closure.
• Support Communications: Email and chat correspondence with v66 support is retained for three years from the date of the most recent communication in a given thread, after which it is securely deleted unless retention is required for an ongoing dispute or investigation.
• Session and Technical Logs: IP address logs, login history, and device data are retained for 12 months from the date of the session, after which they are deleted or anonymised.
• Marketing Consent Records: Records of marketing consent and consent withdrawal are retained for the duration of your account and for three years following account closure.

Where data is no longer required for any legal or operational purpose, v66 will either securely delete it or anonymise it so that it can no longer be linked to any identifiable individual. Requests for early deletion of personal data are handled under the "Your Rights" section of this Policy.

v66 takes the security of your personal data seriously and implements a comprehensive set of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encryption in Transit: All data transmitted between your device and the v66 Platform is encrypted using 256-bit SSL/TLS technology. Any attempt to intercept communications between your browser and our servers will encounter encrypted data that cannot be read without the decryption key.
• Encryption at Rest: Sensitive personal data held in v66's databases — including KYC documents, financial records, and identity data — is stored using AES-256 encryption at rest. Encryption keys are managed separately from the encrypted data and are rotated on a regular schedule.
• Password Security: Player passwords are never stored in plain text. All passwords are processed through a one-way cryptographic hashing algorithm (bcrypt with a high cost factor) before storage. This means that even v66 staff with database access cannot read your password.
• Access Controls: Access to player data within v66's internal systems is restricted on a strict need-to-know basis. Staff accounts use role-based access controls, and all internal access to sensitive data is logged and auditable.
• Monitoring & Incident Response: v66 operates automated monitoring systems that detect anomalous access patterns, unusual login behaviour, and potential data security incidents. In the event of a confirmed data breach that poses a risk to players, v66 will notify affected players without undue delay and will take immediate steps to contain the breach and mitigate harm.

While v66 implements industry-standard security measures, no online platform can guarantee absolute security. Players are encouraged to protect their own accounts by using strong, unique passwords and by contacting [email protected] immediately if they suspect any unauthorised access to their account.

As a player registered with v66, you hold the following rights in relation to your personal data. You may exercise any of these rights at any time by submitting a written request to [email protected]. v66 will acknowledge your request within 48 hours and will provide a substantive response within 30 calendar days of receipt.

Please note that certain rights — particularly the right of erasure — may be limited where v66 is required by law to retain your data, for example to comply with anti-money laundering record-keeping obligations. Where a request cannot be fulfilled in full, v66 will explain the specific legal basis for any limitation. There is no charge for exercising your rights for the first request in any 12-month period; v66 reserves the right to apply a reasonable administrative fee for manifestly repetitive requests.

v66 does not knowingly collect, process, or retain personal data belonging to any individual under the age of 18. All registration applications are subject to age verification as part of the KYC process, and any account discovered to belong to a minor will be immediately closed and all associated data permanently deleted, with the exception of any records that must be retained to comply with applicable legal obligations.

If you are a parent or guardian and believe that a person under the age of 18 in your care has registered an account with v66 without your knowledge, please contact us immediately at [email protected] with as much detail as possible. v66 will investigate promptly, close the account, and delete associated personal data as quickly as the applicable legal framework allows.

v66 is an internationally operated platform. In the course of providing its services, personal data submitted by players in Bangladesh may be transferred to and processed in countries outside of Bangladesh where v66's servers, game providers, or payment processors are located. These jurisdictions may not have data protection laws equivalent in scope to those applicable in your home jurisdiction.

When v66 transfers personal data internationally, it takes steps to ensure that appropriate safeguards are in place to protect the transferred data. These safeguards include contractual data processing agreements with all third-party processors that impose data protection obligations consistent with the standards described in this Privacy Policy, and technical measures such as encryption that protect data during transit across international networks.

By using the v66 Platform and submitting your personal data, you acknowledge and consent to the international transfer of your data as described in this section, subject always to the safeguards described above.

v66 reserves the right to amend or update this Privacy Policy at any time to reflect changes in our data practices, Platform functionality, or applicable legal requirements. Where a material change is made to this Policy — for example, a new category of data collection, a new class of data recipient, or a change to retention periods — v66 will notify registered players via email or a prominent notice on the Platform at least 14 days before the change takes effect.

The most current version of this Privacy Policy is always available at v66.lat/privacy-policy. The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. We encourage you to review this Policy periodically to stay informed of how v66 protects your personal data. Continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way v66 handles your personal data, please contact our privacy team using the details below. We are committed to responding to all privacy-related enquiries promptly and transparently.

• Email: [email protected] (plain text — not a clickable link)
• Response Time: We aim to acknowledge all privacy enquiries within 48 hours (Bangladesh Standard Time, UTC+6) and to provide a full substantive response within 30 calendar days.
• Subject Line: Please include "Privacy Request" or "Data Rights" in your email subject line so that your message is routed directly to the appropriate team member.
• Identity Verification: To protect player privacy, v66 may ask you to verify your identity before processing any data access, correction, or deletion request. This is to ensure that personal data is disclosed only to the rightful account holder.