w666 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how w666 ("we", "us", "our") collects, uses, stores, and protects the personal information of users ("you", "your") who access or use the w666 platform, including its website, mobile interface, games, betting markets, promotional features, and customer support services (collectively, the "Platform"). This Policy forms part of our Terms & Conditions and should be read together with them. By using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein.

w666 operates as an online casino and sports betting platform serving players primarily in Bangladesh. We are committed to protecting the privacy and security of all personal data we handle. We collect only the data that is necessary for us to provide our services safely, fairly, and in compliance with our legal obligations. This Policy applies to all users of the Platform, regardless of how they access it — via mobile browser, desktop browser, or any other method.

2. Information We Collect

We collect personal information in several ways: information you provide directly to us, information generated automatically through your use of the Platform, and information we receive from third-party payment providers. The categories of data we may collect include:

• Identity data: full name, date of birth, gender, Bangladesh National Identity Card (NID) number or passport number, where provided for KYC verification purposes.
• Contact data: mobile phone number, email address, and in some cases a residential address, as provided during account registration or KYC.
• Financial data: deposit and withdrawal amounts, transaction history, payment method identifiers (e.g. bKash wallet number, Nagad number), and any other financial information generated through your use of the Platform.
• Technical data: IP address, device type, operating system, browser type and version, time zone, session duration, pages visited, and other diagnostic and usage data collected automatically.
• Gaming and betting data: game history, betting history, session data, wager amounts, win/loss records, bonus usage, and responsible gaming tool activations (e.g. deposit limits set, self-exclusion requests).

We collect only data that is necessary, relevant, and proportionate to the purposes for which it is processed. We do not collect sensitive categories of personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, except where identity documents are submitted for KYC verification, in which case document images are processed solely for identity verification purposes and are not used for any other purpose.

3. How We Use Your Information

w666 uses your personal data for the following purposes, each of which has a clear legal basis as described in Section 4:

• Account management: to register your account, verify your identity, manage your login credentials, and provide you with access to the Platform.
• Service delivery: to process your deposits and withdrawals, settle bets, credit bonus funds, resolve disputes, and generally deliver the services you have requested.
• Fraud prevention and security: to detect, investigate, and prevent fraudulent transactions, account takeovers, money laundering, and other prohibited activities on the Platform.
• Legal and regulatory compliance: to fulfil our obligations under applicable anti-money laundering (AML), know-your-customer (KYC), and data protection regulations, and to respond to lawful requests from regulatory authorities or law enforcement.
• Responsible gaming: to monitor gaming behaviour and identify indicators of problem gambling, in order to apply responsible gaming tools and protective measures where appropriate.
• Customer support: to respond to your queries, complaints, and support requests, and to keep records of interactions for quality and training purposes.

4. Legal Basis for Processing

We process your personal data on the following legal bases, which are consistent with applicable data protection principles:

• Contractual necessity: processing that is necessary to perform the contract we have with you as a registered player — including account creation, deposits, withdrawals, bet settlement, and customer support.
• Legal obligation: processing that is necessary to comply with applicable laws and regulations, including AML and KYC obligations, age verification requirements, and responses to lawful regulatory or law enforcement requests.
• Legitimate interests: processing that is necessary for our legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and improvement of our services — provided those interests are not overridden by your rights and freedoms.
• Consent: where we process data based on your consent (for example, for optional marketing communications), you have the right to withdraw that consent at any time by contacting our support team or adjusting your account notification settings.

5. Sharing Your Information

w666 does not sell your personal data. We share your data only in the limited circumstances described below, and only to the extent necessary for the specific purpose:

• Payment service providers: we share financial transaction data with payment processors (including bKash, Nagad, Rocket, Upay, Visa, and Mastercard) as necessary to process your deposits and withdrawals. These providers operate under their own privacy and data security frameworks.
• Identity verification providers: where we use a third-party KYC provider to verify player identity documents, the minimum necessary data is shared with that provider under a contractual arrangement that requires them to maintain equivalent data protection standards.
• Regulatory and law enforcement authorities: we may be required to disclose personal data to regulatory bodies or law enforcement agencies where we receive a lawful request, or where disclosure is necessary to prevent or detect crime or to protect the safety of individuals.
• Fraud prevention and security services: we may share technical and account data with fraud prevention and cybersecurity services that help us protect the Platform and its users from malicious activity.

All third parties with whom we share personal data are required to handle that data in accordance with applicable data protection standards and our contractual requirements. We do not permit third parties to use your personal data for their own marketing or commercial purposes.

6. Cookies and Tracking Technologies

w666 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain your session, and improve your experience. Cookies are small data files stored on your device. We use the following categories of cookies:

• Essential cookies: strictly necessary for the Platform to function. These cannot be disabled. They include session authentication cookies, security cookies, and cookies that remember your language preference.
• Analytics cookies: we use anonymised analytics data to understand how users navigate the Platform, which pages are most visited, and where technical issues occur. This data helps us improve the platform experience for all users.
• Fraud detection cookies: technical cookies that help our security systems identify suspicious behaviour patterns, such as automated login attempts, unusual session activity, or device fingerprinting anomalies.

You may adjust your browser settings to refuse or delete cookies, however doing so may affect your ability to use certain features of the Platform, including login and session persistence. Disabling essential cookies may prevent you from accessing your account.

7. Data Retention

w666 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by law. In general: account data is retained for the duration of your account plus a period of up to 7 years following account closure, to fulfil our AML and regulatory record-keeping obligations. Transaction data is retained for a minimum of 5 years. Gaming and session data is retained for up to 3 years for responsible gaming monitoring purposes. Customer support correspondence is retained for up to 3 years.

When personal data is no longer required and there is no legal obligation to retain it, w666 will securely delete or anonymise the data in accordance with our internal data destruction procedures. Anonymised aggregated data (from which individual users cannot be identified) may be retained indefinitely for platform analytics and improvement purposes.

8. Data Security

w666 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include: SSL/TLS encryption on all data transmissions; encrypted storage of sensitive data including passwords and payment identifiers; access controls that restrict internal access to personal data on a need-to-know basis; regular security audits and penetration testing of our platform infrastructure; and staff training on data protection and security practices.

While we take all reasonable steps to protect your data, no system is completely immune to security threats. In the event of a data breach that is likely to result in a risk to your rights and freedoms, w666 will notify affected users as promptly as is practicable, in accordance with applicable notification requirements. We will also take immediate remedial action to contain the breach and prevent further unauthorised access.

9. Your Data Rights

As a user of the w666 platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected]. We will respond to all verified requests within 30 days:

• Right of access: you have the right to request a copy of the personal data we hold about you. We will provide this in a clear, readable format within 30 days of a verified request.
• Right to rectification: you have the right to request correction of inaccurate or incomplete personal data we hold about you. We will correct the records and notify you once the update is complete.
• Right to erasure: you have the right to request deletion of your personal data in certain circumstances, including where the data is no longer necessary for the purpose for which it was collected, or where you withdraw consent. This right is subject to legal retention obligations.
• Right to restrict processing: you have the right to request that we restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where you have objected to processing based on legitimate interests.
• Right to data portability: where we process your data on the basis of consent or contractual necessity, and processing is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.

We will not charge a fee for handling data rights requests unless a request is manifestly unfounded or excessive, in which case we reserve the right to charge a reasonable administrative fee or refuse to act on the request. We may ask you to verify your identity before processing a data rights request to ensure we are responding to the correct individual.

10. Third-Party Links and Services

The w666 Platform may contain references to third-party payment providers and game content suppliers. While we take care to work only with reputable partners, w666 is not responsible for the privacy practices or data handling of any third-party provider. Payment providers such as bKash, Nagad, and Rocket operate under their own privacy policies and terms of service, which we encourage you to review. Any personal data you provide directly to a third-party provider — for example, when completing a mobile wallet transaction — is subject to that provider's privacy policy, not this Policy.

11. Children's Privacy

w666 is strictly an adult platform. We do not knowingly collect personal data from individuals under the age of 21. Our registration process includes age verification steps designed to prevent underage access. If we become aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the w666 platform, please contact our support team immediately at [email protected].

12. Changes to This Privacy Policy

w666 reserves the right to update or amend this Privacy Policy at any time. When we make changes, we will update the "Last updated" date at the top of this page. Where the changes are material — meaning they significantly affect your rights or how we handle your data — we will take reasonable steps to notify registered users, such as sending a notification to your registered mobile number.

Your continued use of the Platform following the publication of an updated Privacy Policy constitutes your acceptance of the changes. We encourage you to review this Policy periodically to stay informed about how we protect your personal data. If you have any concerns about changes to this Policy, please contact our support team before continuing to use the Platform.

13. Contact Us About Privacy

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have concerns about how w666 handles your personal information, please contact our support team. We aim to respond to all privacy-related enquiries within 2 business days.