Privacy Policy — How 66jili Protects Your Data

This Privacy Policy ("Policy") describes how 66jili ("the Platform", "we", "us", "our") collects, uses, stores, discloses, and protects personal information obtained from individuals ("you", "the User", "the Member") who access or use the 66jili website located at 66jili.bid, including all associated pages, services, features, and applications (collectively, "the Service").

This Policy applies to all categories of users, including visitors who browse the website without registering, prospective members who begin but do not complete registration, active registered members, and former members whose accounts have been closed. By continuing to use the Service, you acknowledge that you have read and understood this Policy.

This Policy should be read in conjunction with the Terms & Conditions and the Responsible Gaming Policy, both of which are incorporated by reference into this document. Where any conflict exists between this Policy and those documents on matters of data handling, this Privacy Policy takes precedence.

For the purposes of applicable data protection law, 66jili acts as the data controller in respect of the personal data it collects and processes in connection with the Service. As data controller, 66jili determines the purposes for which and the means by which personal data is processed, and is responsible for ensuring that such processing is conducted lawfully, fairly, and transparently.

If you have any questions about how 66jili processes your personal data, or if you wish to exercise any of your data rights as described in Section 10, you may contact the Data Protection team using the details provided in Section 14 of this Policy.

Where 66jili engages third-party service providers to process personal data on its behalf — for example, payment processors, KYC verification partners, or cloud infrastructure providers — those parties act as data processors and are contractually obligated to process your data only on 66jili's documented instructions and in compliance with applicable data protection requirements.

66jili collects personal data in several categories depending on the nature of your interaction with the Service. The table below summarises the principal categories of data collected:

66jili does not intentionally collect special categories of personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) unless this is strictly necessary for compliance with legal obligations such as responsible gaming or AML regulations, and only with your explicit consent where required.

66jili collects personal data through the following primary channels:

• Direct Submission: Information you provide voluntarily when you register an account, complete your profile, submit KYC documents, make deposits or withdrawals, contact the support team, or respond to surveys or promotions.
• Automated Technical Collection: Technical and usage data collected automatically when you access the Service, including through cookies, web beacons, pixel tags, log files, and similar tracking technologies (see Section 7 for full details).
• Payment Processors: Transaction confirmation data received from mobile wallet providers (bKash, Nagad, Rocket, Upay) and banking partners when you initiate a deposit or withdrawal. 66jili receives confirmation and reference data only — full wallet credentials are never stored on our servers.
• KYC & Identity Verification Partners: Where 66jili uses a third-party identity verification service to assist with document checks, that service may provide a verification outcome and risk score to 66jili. The underlying document images are processed under strict data processor agreements.
• Fraud Prevention & AML Services: Risk signals and screening results received from third-party compliance screening providers as part of 66jili's anti-money laundering obligations.
• Public Sources: In limited circumstances, 66jili may cross-reference information you provide against publicly available data sources — such as public court records or sanctions screening databases — for fraud prevention purposes.

66jili processes your personal data only where a clear and lawful purpose exists. The following table sets out the primary purposes for which data is processed and the legal basis relied upon in each case:

Where 66jili relies on consent as the legal basis for processing — such as for direct marketing communications — you may withdraw that consent at any time by updating your account notification preferences or by contacting the support team. Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal.

66jili does not sell, rent, or trade your personal data to third parties for their own commercial purposes. Data is shared with external parties only in the following carefully controlled circumstances:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — solely to process transaction instructions you initiate. These providers operate under their own privacy frameworks and applicable Bangladeshi financial regulations.
• Identity & KYC Verification Partners: Third-party services engaged to verify identity documents and perform age verification. These partners act as data processors under written agreements and may not use your data for any purpose beyond the verification service they provide to 66jili.
• AML & Fraud Screening Services: Compliance technology providers who screen account and transaction data against sanctions lists and known fraud patterns as part of 66jili's regulatory obligations. Data shared is limited to the minimum necessary for screening purposes.
• Cloud Infrastructure & Hosting Providers: Secure cloud platform providers that host the 66jili application and database infrastructure. All hosting partners are contractually bound to maintain the security and confidentiality of your data.
• Customer Support Technology: Live chat platform providers who facilitate the delivery of 24/7 support services. Conversation data is stored on their servers under data processing agreements with 66jili.
• Legal & Regulatory Authorities: Where required by applicable law, court order, or a valid request from a competent regulatory or law enforcement authority, 66jili may disclose personal data without prior notice to you. 66jili will, where legally permitted, seek to notify you of such disclosure requirements.
• Business Transfers: In the event of a merger, acquisition, sale of assets, or restructuring of the 66jili business, personal data held by 66jili may be transferred to the successor entity. You will be notified of any such change and of any resulting changes to this Privacy Policy.

66jili uses cookies and similar client-side tracking technologies to provide, maintain, secure, and improve the Service. A cookie is a small data file stored on your device when you visit the platform. The following types of cookies are used:

• Strictly Necessary Cookies: Essential for the platform to function correctly. These include session authentication cookies (to keep you logged in), security tokens, and load-balancing cookies. These cannot be disabled without significantly impairing your use of the Service.
• Functional Cookies: Remember your preferences such as language settings, display preferences, and game lobby configuration. These improve your experience across sessions but are not required for core functionality.
• Analytics Cookies: Collect aggregated, anonymised data about how users interact with the platform — such as pages visited, session length, error events, and navigation paths. This data is used exclusively to improve the 66jili product and is not linked to your personal identity.
• Security & Fraud Prevention Cookies: Help 66jili identify anomalous login patterns, detect bot activity, and prevent account takeover attacks. These operate silently in the background and are necessary for the security of every user's account.

You may adjust cookie settings through your browser's privacy controls. Blocking all cookies will prevent you from logging in or using most features of the platform. 66jili does not currently use third-party advertising or retargeting cookies.

66jili retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with applicable legal obligations, to resolve disputes, and to enforce its agreements. The following retention periods apply as a general guide:

When data is no longer required and the applicable retention period has expired, 66jili securely destroys or anonymises that data in accordance with documented data disposal procedures. Anonymised data — which cannot reasonably be used to identify any individual — may be retained indefinitely for statistical and analytical purposes.

66jili employs a layered security architecture designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Key security measures include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and 66jili servers is encrypted end-to-end using industry-standard Transport Layer Security. This applies to every interaction — login, deposit, withdrawal, game session, and live chat.
• Password Hashing: Account passwords are never stored in plain text. 66jili uses a strong, salted cryptographic hashing algorithm to store password credentials, meaning even 66jili staff cannot read your password.
• Two-Factor Authentication (2FA): Members are strongly encouraged to enable 2FA on their 66jili account. 2FA adds a second verification layer — typically a one-time code sent to your registered mobile number — that significantly reduces the risk of unauthorised account access even if your password is compromised.
• Access Controls: Internal access to personal data is restricted on a strict need-to-know basis. 66jili staff roles are assigned minimum necessary permissions, and all access to sensitive data systems is logged and audited.
• Infrastructure Security: 66jili's servers are hosted in secure, access-controlled data centres with continuous monitoring, intrusion detection, and regular penetration testing by independent security professionals.
• Fraud Monitoring: Automated systems monitor account activity in real time for unusual patterns — such as rapid location changes, multiple failed login attempts, or anomalous transaction volumes — and may trigger temporary account holds pending investigation.

As a 66jili member, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact the support team using the details in Section 14. 66jili will respond to all valid data rights requests within 30 calendar days of receipt.

• Right of Access: You have the right to request a copy of the personal data that 66jili holds about you, along with information about how it is used, where it came from, and who it has been shared with.
• Right to Rectification: You have the right to request that inaccurate or incomplete personal data held about you be corrected or updated. You may update most account details directly through your profile settings without needing to contact support.
• Right to Erasure ("Right to Be Forgotten"): You may request the deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose it was collected, or where you withdraw your consent and no other legal basis applies. Note that 66jili may be legally required to retain certain data (such as transaction records) even after an erasure request.
• Right to Restriction of Processing: You may request that 66jili temporarily suspend certain types of processing of your data — for example, while the accuracy of data you have contested is being verified.
• Right to Data Portability: Where processing is based on your consent or contract performance, you may request that 66jili provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
• Right to Object: You have the right to object to processing based on 66jili's legitimate interests, including the use of your data for direct marketing. Upon receipt of an objection to direct marketing, 66jili will cease that processing immediately.
• Right to Withdraw Consent: Where processing relies on your consent, you may withdraw it at any time without affecting the lawfulness of earlier processing. Withdrawal can be effected through your account notification settings or by contacting support.

The 66jili Service is strictly intended for adults aged 18 years and over. 66jili does not knowingly collect, process, or store personal data from individuals under the age of 18. If you are under 18 years of age, you are not permitted to register an account, make a deposit, or use any feature of the Service.

If 66jili discovers or is notified that personal data has been collected from a person under the age of 18, that data will be deleted immediately, the associated account will be permanently closed, and any funds deposited will be returned to the source payment method after investigation. Age verification is conducted as a standard part of the KYC process for all new members.

Parents and guardians who believe their child may have accessed or registered an account on 66jili are encouraged to contact the support team immediately via live chat at [email protected] so that the matter can be investigated and resolved without delay.

The 66jili platform may contain references to game studios, payment partners, and other service providers whose names appear on the platform. While 66jili takes care to partner only with reputable organisations, this Privacy Policy applies exclusively to personal data processed by 66jili in connection with the Service.

When you interact with third-party payment providers such as bKash, Nagad, Rocket, or Upay to complete a transaction, you are interacting directly with those providers under their own terms of service and privacy policies. 66jili is not responsible for the privacy practices of these third parties and encourages you to review their policies independently before providing personal data to them.

Game content provided by third-party studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — may be delivered via iframes or embedded clients hosted on the respective studio's infrastructure. These studios may collect technical data (such as device type and session identifiers) for game delivery and integrity purposes under their own data handling policies.

66jili reserves the right to update, revise, or replace this Privacy Policy at any time to reflect changes in our data practices, applicable legal requirements, or the features and functionality of the Service. The "Last Updated" date at the top of this document indicates when the most recent changes were made.

Where changes are material — meaning they significantly affect your rights or the way in which your personal data is used — 66jili will provide advance notice of at least seven (7) days via a prominent notice on the website or by email to the address registered on your account. For minor administrative changes (such as typographical corrections or updated contact details), no advance notice will be given.

Your continued use of the 66jili Service following the effective date of any revision constitutes your acceptance of the updated Policy. If you do not accept the revised terms, you must stop using the Service and contact support to request account closure and data handling as described in Section 10.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 66jili handles your personal data, please contact us using the following details:

• Live Chat: Available 24 hours a day, 7 days a week via the chat widget on the 66jili website. This is the fastest channel for all privacy-related enquiries.
• Email: [email protected] — for formal data rights requests and written privacy complaints. Please include "Privacy Request" in the subject line to ensure prompt routing to the correct team. Allow up to 24 hours for email acknowledgement.
• Support Hours: The 66jili support team operates on Bangladesh Standard Time (BST, UTC+6) with full 24/7 coverage.

For formal data erasure, portability, or access requests, please provide your registered email address and a brief description of the specific request. 66jili will verify your identity before processing any data rights request and will respond within 30 calendar days of receiving a complete, verifiable request.