d5666 Privacy Policy

01 Data We Collect

d5666 collects personal data from players at several stages of the account lifecycle. We collect only the information that is necessary to operate the platform safely, verify player identities, process transactions, and comply with applicable legal obligations. The categories of personal data we collect are described below.

Registration Data

• Full legal name as it appears on your national identity document.
• Date of birth (used to verify that you meet the 18+ age requirement).
• Mobile phone number registered with your preferred payment method (bKash, Nagad, Rocket, or Upay).
• Email address used for account communications and security notifications.
• Preferred username and encrypted account password.

KYC Verification Data

• Copy of your Bangladesh National Identity Card (NID) or valid passport.
• Proof of address documentation (utility bill, bank statement, or mobile financial service statement dated within three months).
• Proof of ownership of the payment method used to deposit funds.
• Selfie photograph where required for enhanced identity verification.

Transactional Data

• Deposit and withdrawal amounts, dates, and associated mobile financial service transaction references.
• Betting history, game session records, wager amounts, and win/loss outcomes.
• Bonus and promotional offer usage records.

Technical & Device Data

• IP address and approximate geographic location derived from it.
• Browser type, operating system, and device identifiers.
• Session timestamps, page interaction logs, and in-platform navigation data.
• Cookie identifiers and local storage values (see the Cookies section below).

02 How We Use Your Data

d5666 processes your personal data only for specified, explicit, and legitimate purposes. We do not use your data in ways that are incompatible with the original purpose for which it was collected. The table below summarises the primary purposes for which your data is used and the lawful basis for each processing activity.

Where d5666 relies on your consent as the lawful basis for processing — for example, sending promotional emails or SMS notifications about new games, bonuses, or seasonal offers — you may withdraw that consent at any time by contacting [email protected] or updating your communication preferences in your account dashboard. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

03 Data Sharing & Disclosure

d5666 does not sell, rent, or otherwise commercially transfer your personal data to any third party. We share personal data only in the limited circumstances described below, and only to the extent strictly necessary for each purpose.

• Payment processors: Your mobile number and transaction reference data are shared with bKash, Nagad, Rocket, and Upay solely to facilitate deposit and withdrawal processing. These providers operate under their own privacy policies and are bound by their respective data protection obligations.
• Game studios and content providers: When you play a game hosted by a third-party studio (such as Pragmatic Play, Evolution Gaming, Ezugi, or Spribe), a session token and anonymised player identifier are transmitted to that studio's servers to enable gameplay. No directly identifiable personal data such as your NID or mobile number is shared with game studios.
• KYC and fraud prevention services: Identity verification documents may be processed by certified third-party KYC service providers operating under strict data processing agreements with d5666. These providers are contractually prohibited from using your data for any purpose other than the verification service.
• Legal and regulatory authorities: d5666 may disclose personal data to law enforcement agencies, financial intelligence units, or other governmental authorities where required to do so by applicable law, court order, or regulatory direction. We will notify affected players of such disclosures where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of d5666's business assets, player data may be transferred to the acquiring entity. Players will be notified of any such transfer and the applicable privacy terms of the successor entity prior to the transfer taking effect.

04 Cookies & Tracking Technologies

d5666 uses cookies and similar client-side storage technologies to operate the platform, maintain your login session, remember your preferences, and gather aggregate analytics data that helps us improve the user experience. By continuing to use d5666.app after being presented with this Privacy Policy, you consent to our use of cookies as described below.

d5666 does not use third-party advertising cookies or cross-site tracking pixels. You may manage or delete cookies through your browser settings at any time. Please note that disabling essential cookies will prevent you from accessing certain features of the platform, including maintaining a logged-in session.

05 Data Security

d5666 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security controls in place include:

• 256-bit SSL/TLS encryption applied to all data transmitted between your device and d5666 servers, ensuring that your login credentials, payment details, and personal information cannot be intercepted in transit.
• Passwords stored exclusively in hashed and salted form using a modern cryptographic algorithm. d5666 staff cannot view or retrieve your password in plain text under any circumstances.
• Role-based access controls restricting internal access to personal data to only those staff members whose job function requires it, subject to formal authorisation procedures.
• Regular security audits and vulnerability assessments conducted on platform infrastructure and application code.
• Isolated server environments for production data, separated from development and testing environments, with strict data classification policies in place.
• Automated monitoring systems that detect and alert on anomalous access patterns, failed authentication attempts, and other indicators of potential security incidents.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, d5666 will notify affected players without undue delay and will take all appropriate steps to contain the breach, mitigate its impact, and prevent recurrence. Notifications will be sent to your registered email address.

06 Data Retention

d5666 retains your personal data for as long as your account remains active and for a defined period following account closure, in accordance with our legal obligations and legitimate operational interests. The following retention periods apply:

• Active account data: Retained for the full duration of your account being open and active on the platform.
• Transaction and financial records: Retained for a minimum of five (5) years following the date of each transaction, in compliance with anti-money-laundering record-keeping requirements applicable in Bangladesh.
• KYC verification documents: Retained for a minimum of five (5) years following account closure or the completion of the customer relationship.
• Customer support communications: Retained for three (3) years following the resolution of the support interaction, to enable dispute resolution and service quality review.
• Marketing preference records: Retained for the duration of your account and for one (1) year following opt-out, to evidence that consent was properly managed.
• Technical and session logs: Retained for twelve (12) months from the date of generation, after which they are permanently deleted or fully anonymised.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with you as an individual. Where anonymised data is retained for aggregate analytics purposes, it is no longer considered personal data and falls outside the scope of this Privacy Policy.

07 Your Privacy Rights

As a d5666 player, you hold the following rights in relation to your personal data. d5666 is committed to honouring these rights promptly and transparently. To exercise any of the rights described below, contact us at [email protected] with the subject line "Privacy Request" and include sufficient information to verify your identity.

• Right of Access: You may request confirmation of whether d5666 holds personal data about you and, if so, receive a structured copy of that data along with information about how it is being processed.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Where possible, you may update basic account information directly through your account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other lawful basis applies), or where the data has been processed unlawfully. This right is subject to legal retention obligations — certain financial and KYC records must be retained regardless of an erasure request.
• Right to Restriction: You may request that d5666 restrict the processing of your personal data in certain circumstances, such as while the accuracy of the data is being contested or while a legitimate interest objection is being assessed.
• Right to Object: Where d5666 processes your personal data on the basis of legitimate interest, you have the right to object to that processing. d5666 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent (such as for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to Data Portability: Where processing is based on consent or contract performance and is carried out by automated means, you may request a copy of your personal data in a structured, commonly used, machine-readable format.

08 Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way d5666 handles your personal data, please contact our support team at the following address. Please write "Privacy" or "Data Request" in the subject line of your message so that your inquiry is routed to the appropriate team member promptly.

Contact email: [email protected] (plain text — not a clickable link)

If you are not satisfied with d5666's response to a privacy complaint, you have the right to escalate the matter to the relevant data protection authority or consumer protection body in your jurisdiction. d5666 will always cooperate fully with any such investigation.

d5666 reserves the right to update this Privacy Policy periodically to reflect changes in our data processing practices, legal obligations, or platform functionality. When material changes are made, we will notify registered players via their registered email address and by displaying a prominent notice on the platform for a minimum of thirty (30) days following the update. Your continued use of d5666 after the effective date of any update constitutes acceptance of the revised Privacy Policy.