a666 Privacy Policy — Your Data, Protected

Information You Provide Directly

• Registration data: your Bangladesh mobile phone number, chosen username, date of birth, and account password (stored in hashed form — a666 does not store plain-text passwords).
• KYC identity documents: government-issued National Identity Card (NID) or passport, and a live selfie photograph submitted for age and identity verification purposes.
• Payment information: the mobile wallet account numbers (bKash, Nagad, Rocket, Upay) you register for deposit and withdrawal purposes. a666 does not store your full mobile banking PIN or password.
• Support communications: messages, chat transcripts, and feedback submitted through a666's customer support channels, including live chat and email.

Information Collected Automatically

• Device and browser data: device type (Android or iOS), browser type and version, operating system version, screen resolution, and unique device identifiers.
• Network and location data: IP address, mobile network operator, and approximate geographic location derived from IP address. a666 does not collect precise GPS coordinates.
• Platform usage data: pages visited, game sessions started, bets placed, time spent on each section, click and interaction patterns, and session timestamps.
• Cookies and similar tracking technologies: session cookies, persistent cookies, and local storage items used to maintain login state, remember preferences, and analyse platform performance. See Section 8 for full details.

Information from Third-Party Partners

• Identity verification data: results and risk scores from the KYC identity verification process, including document authenticity checks and age confirmation outcomes.
• Payment transaction data: transaction confirmation records, reference numbers, and transaction status updates received from bKash, Nagad, Rocket, and Upay payment network APIs.
• Fraud prevention signals: device fingerprint data, behavioural risk signals, and cross-platform fraud indicators provided by a666's fraud detection and anti-money laundering compliance partners.

Primary Purposes of Data Use

• Account management: creating and maintaining your a666 account, verifying your identity, authenticating your login sessions, and managing your account settings and preferences.
• Transaction processing: processing your BDT deposits and withdrawals via bKash, Nagad, Rocket, and Upay; recording your transaction history; and resolving any payment disputes or discrepancies that may arise.
• Platform operation and improvement: analysing platform usage data to improve game performance, fix technical errors, optimise the mobile experience for Bangladesh players, and develop new features.
• Legal compliance: fulfilling our Know Your Customer (KYC), anti-money laundering (AML), and responsible gaming obligations under applicable law, including age verification for the 21+ requirement.
• Fraud prevention and security: detecting, investigating, and preventing fraudulent activity, bonus abuse, money laundering, account takeover attempts, and other prohibited conduct described in the a666 Terms & Conditions.
• Customer support: responding to your support requests, resolving account disputes, processing responsible gaming tool activations, and providing help with deposits and withdrawals via bKash, Nagad, or Rocket.

Applicable Legal Bases

• Contractual necessity: processing that is necessary to fulfil the a666 Terms & Conditions you agreed to when registering your account — for example, processing your deposits and withdrawals, verifying your identity, and maintaining your account.
• Legal obligation: processing that is required to comply with applicable laws, including KYC and AML obligations, age verification requirements, and any lawful requests from regulatory or law enforcement authorities.
• Legitimate interests: processing for purposes such as fraud prevention, platform security, technical performance monitoring, and responsible gaming analysis — where these interests are not overridden by your privacy rights.
• Consent: processing for specific purposes where you have given explicit consent — for example, receiving promotional communications from a666 about new games, cricket betting markets, or seasonal bonuses. You may withdraw consent at any time through your account settings.

Circumstances Where Data May Be Shared

• Payment processors: transaction reference data is shared with bKash, Nagad, Rocket, and Upay solely to process your BDT deposit and withdrawal instructions. These providers are independent data controllers for the data they hold under their own platforms.
• Identity verification partners: KYC document data is shared with a666's third-party identity verification service provider solely for the purpose of completing age and identity checks as required by a666's compliance obligations.
• Game providers: anonymised or pseudonymised session data may be shared with licensed game providers (such as Pragmatic Play, Evolution Gaming, or Spribe) for the purpose of game performance monitoring, RTP verification, and technical support.
• Legal and regulatory authorities: a666 will disclose personal data to law enforcement, regulatory bodies, or courts where required to do so by applicable law, lawful court order, or in connection with the investigation of suspected criminal activity.

General Retention Periods

• Active account data (registration details, KYC documents, transaction history): retained for the duration of your active account plus a minimum of 5 years after account closure to meet AML and compliance record-keeping requirements.
• Support communications: customer support chat transcripts and email correspondence are retained for 2 years from the date of the interaction, after which they are securely deleted unless required for ongoing dispute resolution.
• Platform analytics data: anonymised or aggregated platform usage data used for performance analysis is retained indefinitely as it contains no personally identifiable information.

Your Rights Include

• Right of access: you have the right to request a copy of all personal data a666 holds about you, free of charge, within 30 days of a verified request.
• Right to rectification: if any personal data a666 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
• Right to erasure: you have the right to request the deletion of your personal data, subject to legal retention requirements. Erasure requests will be processed within 30 days of account closure and identity verification.
• Right to object: you have the right to object to a666 processing your personal data on the basis of legitimate interests, including for direct marketing or profiling purposes. Objections will be reviewed and actioned within 14 days.
• Right to withdraw consent: where a666 processes your data on the basis of consent (for example, marketing communications), you have the right to withdraw that consent at any time through your account settings or by contacting customer support. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

Types of Cookies Used

• Essential cookies: strictly necessary for the platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
• Performance and analytics cookies: used to collect anonymised data on how players navigate the a666 platform, which pages are most visited, and where technical errors occur. This data helps a666 improve the platform experience for Bangladesh players.
• Preference cookies: used to remember your platform settings such as language selection (English or Bengali) and notification preferences, so these do not need to be reset on every visit.

Privacy Enquiries

Send your privacy requests to: [email protected]