5666d Privacy Policy

Section 01

Introduction

This Privacy Policy ("Policy") describes how 5666d ("we", "us", "our") collects, uses, stores, discloses, and protects the personal information of individuals ("you", "your", "Player") who access or use the 5666d online betting and casino platform, including the website at https://5666d.io and all associated mobile and digital interfaces (collectively, the "Platform").

We are committed to handling your personal data responsibly and in accordance with internationally recognised data protection principles. By registering an account on the 5666d Platform, making a deposit, or otherwise accessing any part of our services, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein.

This Policy forms an integral part of our Terms & Conditions. If you do not agree with this Policy, you must not use the 5666d Platform. For any privacy-related questions, please contact us at [email protected].

Section 02

Data We Collect

5666d collects personal data that is necessary to provide our services safely, legally, and effectively. The categories of personal data we collect include the following:

2.1 Identity & Contact Data

• Full legal name as it appears on your government-issued identification
• Date of birth (for age verification — players must be 21 or older)
• Residential address including city, district, and postcode
• Email address (used for account communications and verification)
• Mobile phone number (used for account security and transaction notifications)
• Nationality and country of residence

2.2 Identity Verification (KYC) Documents

• Scanned copy or photograph of a government-issued photo ID (National ID card, passport, or driving licence)
• Proof of residential address (utility bill, bank statement, or official correspondence dated within 3 months)
• Proof of payment method ownership (mobile wallet screenshot or bank statement confirming the account is registered in your name)
• Selfie photograph or video for liveness verification where required

2.3 Financial & Transaction Data

• Deposit and withdrawal amounts, dates, and payment method references
• bKash, Nagad, Rocket, Upay, or bank account identifiers (partial/masked as required by security standards)
• Transaction IDs and payment gateway reference numbers
• Bonus claims, wagering activity, and balance history

2.4 Technical & Usage Data

• IP address and approximate geographic location derived from IP
• Device type, operating system, browser type and version
• Session timestamps, login history, and platform activity logs
• Pages visited, game sessions played, bet history, and click-path data
• Cookies and similar tracking identifiers (see Section 7)

2.5 Communications Data

• Records of live chat, email, or other correspondence between you and 5666d support staff
• Complaint and dispute records
• Survey responses and feedback submissions (where voluntarily provided)

Section 03

How We Collect Data

5666d collects personal data through the following channels and mechanisms:

3.1 Directly From You

The majority of personal data we hold is provided directly by you when you:

• Register an account on the 5666d Platform
• Complete the KYC identity verification process
• Make a deposit or request a withdrawal
• Contact our customer support team via live chat or email
• Claim a bonus, enter a promotion, or respond to a survey
• Update your account profile or security settings

3.2 Automatically Through Platform Use

When you interact with the 5666d Platform, we automatically collect technical and usage data through:

• Server logs that record IP addresses, access times, and pages requested
• Session cookies and local storage identifiers that maintain your logged-in state
• Analytics tools that aggregate platform usage patterns (no individual profiling for advertising)
• Game engines and casino software that record bet placements, outcomes, and session durations for fairness auditing and dispute resolution

3.3 From Third-Party Service Providers

In limited circumstances, 5666d may receive personal data from verified third-party partners, including:

• Payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, City Bank) who confirm transaction status and account ownership
• Identity verification service providers who assist with KYC document authentication
• Fraud detection and anti-money laundering (AML) screening services

In all cases, third-party data is received only where you have authorised the relevant provider to share your data with us, or where we are legally required to conduct such checks.

Section 04

How We Use Your Data

5666d processes your personal data for the following purposes. Each purpose is supported by a legal basis described in Section 5:

4.1 Marketing Communications

Where you have opted in to receive marketing communications, 5666d may contact you by email or mobile notification about new games, promotions, bonuses, and platform updates. You may withdraw your marketing consent at any time by contacting [email protected] or updating your account notification preferences. Withdrawal of marketing consent does not affect the lawfulness of any processing that occurred before withdrawal.

4.2 Automated Decision-Making

5666d may use automated processes for fraud risk scoring, AML transaction screening, and responsible gaming alerts. Where an automated decision has a significant legal or similarly significant effect on you (such as account restriction), you have the right to request human review of that decision. Please contact [email protected] to exercise this right.

Section 05

Legal Basis for Processing

5666d processes your personal data only where we have a valid legal basis to do so. The legal bases we rely upon are:

• Contract Performance: Processing is necessary to deliver the services you have contracted with us for, including account operation, payment processing, and game delivery.
• Legal Obligation: Processing is required to comply with our legal obligations, including KYC/AML requirements, age verification mandates, regulatory reporting, and tax record-keeping.
• Legitimate Interests: Processing is necessary for our legitimate business interests — such as fraud prevention, platform security, and service improvement — provided those interests are not overridden by your fundamental rights.
• Consent: Where we rely on consent (primarily for marketing communications), you have the right to withdraw that consent at any time without penalty to your account standing.

Section 06

Data Sharing & Disclosure

5666d does not sell, rent, or trade your personal data to any third party. We may share your personal data only in the following limited and controlled circumstances:

6.1 Service Providers & Data Processors

We engage trusted third-party service providers who process personal data on our behalf under strict contractual data processing agreements. These include:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and City Bank — for deposit and withdrawal processing
• KYC / identity verification providers: For automated and manual document authentication
• Game studios: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, Ezugi — for game delivery and fairness auditing (game session data only, no contact data)
• Cloud infrastructure & hosting providers: For secure data storage and platform operation
• Fraud & AML screening services: For transaction monitoring and suspicious activity reporting
• Customer support platforms: For live chat and email ticketing system operation

All service providers are contractually bound to process data only for the specified purpose, to implement appropriate security measures, and to delete or return data upon termination of the contract.

6.2 Legal & Regulatory Disclosure

5666d may disclose personal data to competent authorities, law enforcement agencies, or regulatory bodies where we are required to do so by applicable law, court order, or regulatory direction. We will notify you of such disclosures where legally permitted to do so.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of 5666d's business assets, personal data may be transferred to the acquiring entity as part of that transaction. We will notify registered players via the email address on their account before any such transfer occurs and will ensure the acquiring entity commits to processing your data under terms consistent with this Policy.

Section 07

Cookies & Tracking Technologies

5666d uses cookies and similar technologies (local storage, session tokens) to operate the Platform, maintain your session, and understand how players interact with our services. We use the following categories of cookies:

5666d does not use third-party advertising cookies, retargeting pixels, or social media tracking scripts. You may control cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may prevent you from logging in or using certain Platform features.

Section 08

Data Retention

5666d retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

• Account data & KYC documents: Retained for the lifetime of the account and for a minimum of 5 years after account closure, in compliance with AML and regulatory record-keeping requirements.
• Transaction records: Retained for a minimum of 5 years from the date of the transaction for financial compliance purposes.
• Communications & support records: Retained for 2 years from the date of the last interaction, unless the record is relevant to an ongoing dispute or investigation.
• Technical & session logs: Retained for up to 12 months for security and fraud detection purposes, then deleted or anonymised.
• Marketing consent records: Retained for the duration of the marketing relationship and for 12 months following withdrawal of consent.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to any individual. Where anonymised data is retained for analytical purposes, it is no longer considered personal data and is not subject to this Policy.

Section 09

Data Security

5666d implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes:

• SSL/TLS Encryption: All data transmitted between your browser or device and the 5666d Platform is encrypted in transit using TLS 1.2 or higher.
• Encryption at Rest: Sensitive personal data and KYC documents stored on our servers are encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted to authorised personnel on a strict need-to-know basis. All staff with data access undergo regular security training and background verification.
• Network Security: Our infrastructure is protected by firewalls, intrusion detection systems, and continuous network monitoring.
• Penetration Testing: 5666d conducts regular vulnerability assessments and penetration testing to identify and remediate security weaknesses.
• Incident Response: We maintain a documented data breach response procedure. In the event of a breach that poses a risk to your rights, we will notify affected players without undue delay.

Section 10

Your Rights

As a data subject whose personal information is processed by 5666d, you have the following rights with respect to your personal data. To exercise any of these rights, contact us at [email protected].

5666d will acknowledge all rights requests within 48 hours of receipt and will provide a substantive response within 14 calendar days. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days, with notice to you. We will never charge a fee for handling a data rights request unless the request is manifestly unfounded or repetitive.

Section 11

Children & Minors

The 5666d Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step during the account registration and KYC process, and we employ automated and manual checks to enforce this requirement.

If we discover or are notified that we have inadvertently collected personal data from an individual under the age of 21, we will immediately suspend the relevant account, delete all associated personal data, and reverse any financial transactions connected to that account as permitted by our payment processors.

If you are a parent or legal guardian and believe that a minor under your care has registered an account with 5666d, please contact us immediately at [email protected] so that we can take prompt corrective action.

Section 12

International Data Transfers

5666d operates primarily to serve players in Bangladesh. However, as an international online gaming platform, certain operational functions — including cloud infrastructure, game delivery, and payment processing — involve the transfer of personal data to servers and service providers located outside of Bangladesh.

Where personal data is transferred internationally, 5666d ensures that appropriate safeguards are in place to protect your data, including:

• Transfers to countries or organisations that provide an adequate level of data protection as recognised by applicable standards
• Contractual data processing agreements incorporating standard data protection clauses with all international service providers
• Technical security measures (encryption in transit and at rest) applied uniformly regardless of where data is stored or processed

By using the 5666d Platform, you acknowledge and consent to your personal data being transferred to and processed in jurisdictions outside Bangladesh where our trusted service providers are located, subject always to the safeguards described above.

Section 13

Third-Party Links

The 5666d Platform may contain references or links to third-party services, payment providers, or game studio platforms. These third-party services operate under their own privacy policies and data practices, which are entirely independent of this Policy. 5666d accepts no responsibility or liability for the privacy practices or content of any third-party service.

We encourage you to review the privacy policies of any third-party services you access in connection with your use of the 5666d Platform. Your interactions with payment providers such as bKash, Nagad, or Rocket are governed by those providers' own terms and privacy policies, and 5666d has no control over the data those providers independently collect from you.

Section 14

Policy Updates

5666d reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, operational requirements, or applicable legal obligations. When we make material changes to this Policy, we will:

• Update the "Effective Date" and "Last Updated" date at the top of this page
• Display a prominent notice on the 5666d Platform for a period of not less than 14 days following the update
• Send a notification to the email address registered on your account where the changes are significant

Your continued use of the 5666d Platform after the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not agree with the updated Policy, you must cease using the Platform and may request account closure by contacting [email protected].

We recommend that you review this Privacy Policy periodically to stay informed about how we are protecting your personal data. Previous versions of this Policy are available upon request.

Section 15

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which 5666d handles your personal data, please contact our Privacy Support team using the details below. We take all privacy enquiries seriously and are committed to responding promptly and transparently.

When contacting us regarding a data rights request, please include your registered account username or email address and a brief description of your request so that we can locate your records efficiently. We may need to verify your identity before processing certain requests to ensure we release or modify data only at the direction of the correct account holder.

For responsible gaming support or self-exclusion requests, please visit our dedicated Responsible Gaming page. For general account queries or payment support, our 24/7 customer support team is reachable at [email protected].