36666 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how 36666 ("36666", "we", "us", "our") collects, uses, stores, discloses, and protects the personal data of individuals ("you", "your", "Player") who access or use the 36666 online gaming platform, including all associated web pages, services, and features available at https://36666.vu.

36666 is committed to protecting the privacy of all players, with particular attention to the needs and expectations of players based in Bangladesh. We process personal data responsibly and in accordance with the principles of transparency, purpose limitation, data minimisation, accuracy, storage limitation, and security.

By registering an account with 36666, making a deposit, or otherwise using the platform, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you should not use the 36666 platform.

2. Data Controller

For the purposes of this Privacy Policy, 36666 acts as the data controller in respect of all personal data collected from players using the platform. As data controller, 36666 determines the purposes for which and the means by which personal data is processed.

All enquiries, requests, or concerns regarding the processing of your personal data should be directed to the 36666 data protection contact at the following address: [email protected]. This email address is provided as plain text only and is not a clickable link. We aim to respond to all data-related enquiries within five (5) business days.

3. Personal Data We Collect

36666 collects the following categories of personal data from players, either directly at the point of registration or through the player's ongoing use of the platform:

3.1 Identity and Contact Data

• Full legal name as it appears on your official identification document.
• Date of birth (used to verify that you meet the 18+ age eligibility requirement).
• Residential address, including district (e.g., Dhaka, Chittagong, Sylhet, Rajshahi, Khulna, Barisal, Rangpur, Mymensingh) and postcode.
• Valid Bangladeshi mobile phone number.
• Email address associated with your 36666 account.
• National Identity Card (NID) number or passport number, where provided for KYC verification purposes.

3.2 Financial and Transaction Data

• Mobile financial service account details used for deposits and withdrawals, including bKash, Nagad, Rocket, and Upay account numbers (last digits only, for reference purposes).
• Transaction history including deposit amounts, withdrawal requests, and dates of transactions, all denominated in Bangladeshi Taka (৳ / BDT).
• Records of bonuses credited, wagering activity, and game round outcomes associated with your account.

3.3 Technical and Usage Data

• IP address and approximate geographic location at the time of login.
• Device type, operating system, browser type and version.
• Session data including login timestamps, pages visited, and features used.
• Clickstream data and in-platform navigation patterns collected via cookies and server logs.

3.4 Communications Data

• Content of support tickets, live chat transcripts, and email correspondence between you and the 36666 support team.
• Records of any responsible gaming requests, self-exclusion applications, or account restriction instructions submitted by you.

4. How We Collect Your Data

36666 collects personal data through the following channels:

• Direct submission: Data you provide when registering an account, completing identity verification, making a deposit or withdrawal, or contacting the support team.
• Automated technologies: Data collected automatically when you access the platform, including cookies, server logs, and session tracking tools that record your device information, IP address, and on-site behaviour.
• Payment processors: Confirmation data received from bKash, Nagad, Rocket, Upay, and other payment service providers following a completed transaction, limited to transaction reference numbers and status indicators.
• Identity verification providers: Data received from third-party KYC service providers when you submit identity documents for account verification, limited to the verification outcome and document type confirmed.
• Fraud prevention services: Device fingerprinting and behavioural analytics data collected via integrated fraud-detection tools to identify patterns consistent with account abuse or unauthorised access.

5. Purpose and Legal Basis for Processing

The table below summarises the primary purposes for which 36666 processes your personal data, together with the legal basis relied upon for each processing activity:

36666 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or establishing a separate lawful basis for processing.

6. Data Sharing and Disclosure

6.1 Service Providers

36666 shares personal data with carefully selected third-party service providers who assist in operating the platform. These providers are contractually bound to process data only on 36666's instructions and to apply appropriate security measures. Categories of service providers include:

• Payment processing partners (bKash, Nagad, Rocket, Upay, and associated banking infrastructure).
• Identity verification and KYC service providers.
• Fraud detection and cybersecurity service providers.
• Customer support platform providers.
• Cloud hosting and data storage infrastructure providers.
• Game content providers (including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi), limited to session tokens and game round identifiers necessary to deliver game content.

6.2 Legal and Regulatory Disclosure

36666 may disclose personal data to government authorities, law enforcement agencies, or regulatory bodies where required to do so by applicable law, court order, or regulatory direction. In such cases, 36666 will disclose only the minimum data necessary to comply with the legal obligation and will, where permitted, notify the affected player of the disclosure.

6.3 Business Transfers

In the event that 36666 undergoes a merger, acquisition, or sale of all or substantially all of its assets, personal data held by 36666 may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and any material changes to data processing arrangements that result from it.

6.4 No Sale of Personal Data

36666 does not sell, rent, or trade your personal data to any third party for that party's own marketing or commercial purposes. Personal data is shared only as described in this section and for no other purpose.

7. Data Security

36666 implements a layered approach to data security designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our technical and organisational security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the 36666 platform.
• Encryption at rest for sensitive personal data and financial records stored on 36666 servers.
• Access controls that restrict access to personal data to authorised personnel only, on a need-to-know basis.
• Regular security audits and penetration testing to identify and remediate vulnerabilities in the platform's infrastructure.
• Intrusion detection systems and real-time monitoring to identify and respond to suspicious activity.
• Multi-factor authentication for administrative access to systems that process personal data.

While 36666 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, 36666 will notify affected players promptly and take all necessary remedial action.

8. Data Retention

36666 retains personal data for the duration of your account relationship and for a defined period thereafter, as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

• Account and identity data: Retained for the lifetime of the account and for a minimum of five (5) years following account closure, to comply with anti-money-laundering and KYC record-keeping obligations.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of the transaction, consistent with financial record-keeping requirements.
• Communications and support records: Retained for three (3) years from the date of the communication, unless the communication forms part of an ongoing dispute or legal matter.
• Technical and usage data: Retained for up to twelve (12) months from collection, after which it is aggregated and anonymised for analytical purposes.
• Marketing consent records: Retained for the duration of your marketing consent and for one (1) year following withdrawal of consent, as evidence of the consent previously given.

When personal data is no longer required for its original purpose and no legal obligation requires its continued retention, 36666 will securely delete or anonymise the data in a manner that prevents reconstruction.

9. Cookies and Tracking Technologies

9.1 What Are Cookies

Cookies are small text files placed on your device by a website when you visit it. 36666 uses cookies and similar tracking technologies (such as local storage and session tokens) to enable core platform functionality and to improve your experience on the site.

9.2 Types of Cookies Used by 36666

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies that keep you logged in securely and prevent cross-site request forgery. These cookies cannot be disabled without impairing platform functionality.
• Performance and analytics cookies: Used to collect anonymised data about how players interact with the platform, including which pages are visited most frequently and where errors occur. This data is used to improve platform performance and user experience.
• Preference cookies: Used to remember your display preferences, such as language or currency display settings, so that you do not need to reconfigure them on each visit.
• Fraud detection cookies: Used by integrated security and fraud-prevention tools to detect suspicious device behaviour or account access patterns.

9.3 What 36666 Does Not Use Cookies For

36666 does not use cookies to build advertising profiles, track your activity across third-party websites, or share your browsing behaviour with advertising networks. The 36666 platform contains no third-party advertising cookies.

10. Your Rights Over Your Personal Data

36666 respects your rights as a data subject. The following rights are available to all players in respect of their personal data held by 36666:

• Right of access: You may request a copy of the personal data 36666 holds about you at any time. We will provide this within a reasonable timeframe, subject to verification of your identity.
• Right to rectification: If any personal data held by 36666 is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain account details directly within your account settings.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected and where no legal obligation requires its retention. This right is subject to 36666's data retention obligations under applicable law.
• Right to restriction of processing: You may request that 36666 restrict the processing of your personal data in certain circumstances, for example while the accuracy of the data is being contested.
• Right to data portability: You may request a machine-readable copy of the personal data you have provided to 36666 so that it can be transferred to another service provider.
• Right to withdraw consent: Where 36666 processes your personal data on the basis of your consent (for example, for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to object: You may object to the processing of your personal data where 36666 relies on legitimate interest as the legal basis for processing, unless 36666 can demonstrate compelling legitimate grounds that override your interests.

To exercise any of the above rights, please contact the 36666 support team at [email protected] (plain text — not a clickable link). Please include your full name, account username, and a description of the right you wish to exercise. We may require proof of identity before processing your request.

11. Children's Privacy

The 36666 platform is strictly intended for adults aged 18 and above. 36666 does not knowingly collect, process, or retain personal data from any person under the age of 18. If we become aware that personal data has been collected from a minor, we will take immediate steps to delete that data and close the associated account.

If you have reason to believe that a minor has registered an account on 36666 or that personal data belonging to a minor is being processed by the platform, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

12. International Data Transfers

36666 operates a platform that serves players in Bangladesh. In the course of providing our services, certain personal data may be processed by service providers or infrastructure partners located in jurisdictions outside Bangladesh. Where such transfers occur, 36666 takes steps to ensure that appropriate safeguards are in place to protect the transferred data, including contractual data processing agreements with relevant service providers.

36666 does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without first implementing appropriate technical and contractual safeguards. If you have questions about international data transfers affecting your personal data, please contact [email protected].

13. Third-Party Links

The 36666 platform may contain references to game providers and payment services. 36666 does not control the privacy practices of third-party service providers and is not responsible for the privacy policies or data handling practices of those parties. We encourage you to review the privacy policies of any third-party services you interact with in connection with the use of the 36666 platform.

14. Amendments to This Policy

36666 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform operations. When material changes are made to this Policy, 36666 will notify active players via the email address or mobile number registered to their account, or by displaying a prominent notice within the platform upon login.

The revised Policy will take effect on the date specified in the amendment notice. Your continued use of the 36666 platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. We encourage you to review this Policy periodically to stay informed about how 36666 protects your personal data.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data by 36666, please contact our support team using the details below:

• Email: [email protected] (plain text only — not a clickable link)
• Response Time: We aim to respond to all data-related enquiries within five (5) business days during normal operating hours, Bangladesh Standard Time (BST, UTC+6).
• Support Hours: 7 days a week, Bangladesh Standard Time (BST, UTC+6).

This Privacy Policy was last reviewed and updated on 1 January 2026. The version published on this page supersedes all prior versions of the 36666 Privacy Policy.