dl666 Privacy Policy
— Your Data, Handled Responsibly

1 Data We Collect

When you access the dl666 platform — whether you are browsing as a guest, registering a new account, making a deposit via bKash or Nagad, placing a bet on a cricket match, or playing a slot game — certain categories of personal information are collected. This section details precisely what data dl666 collects, and at what point in your interaction with the platform that collection takes place.

1.1 Registration and Identity Data

When you create a dl666 account, we collect the following personal information that you provide directly:

• Full legal name as it appears on your government-issued identification document
• Date of birth (used to verify that you are 18 years of age or older)
• Residential address, including city (Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, or other Bangladeshi city)
• Email address used to register the account
• Mobile phone number registered in Bangladesh
• Username and encrypted password for account access

1.2 Identity Verification (KYC) Documents

As part of our mandatory Know Your Customer (KYC) process — required for withdrawal processing and regulatory compliance — we may collect copies of the following documents:

• Government-issued photo identification (National ID card, passport, or driving licence)
• Proof of residential address (utility bill, bank statement, or official correspondence dated within three months)
• Proof of payment method ownership (confirmation screenshot of your bKash, Nagad, Rocket, or Upay account in your name)

1.3 Financial Transaction Data

dl666 records details of all financial transactions processed through your account, including deposit amounts in Bangladeshi Taka (৳), withdrawal requests and their processing status, the payment method used (bKash, Nagad, Rocket, Upay, Visa, Mastercard), and transaction reference numbers provided by the payment gateway. dl666 does not store full card numbers or mobile banking PINs — these are handled exclusively by the relevant payment processors under their own security frameworks.

1.4 Behavioural and Usage Data

When you use the dl666 platform, we automatically collect certain technical and behavioural data, including:

• IP address and approximate geographic location (country and city level)
• Device type, operating system, browser version, and screen resolution
• Pages visited on dl666, session duration, and navigation patterns
• Games played, bet amounts, wagering history, and win/loss records
• Time and date of login and logout events
• Referral source (the URL from which you arrived at dl666, if applicable)

1.5 Communications Data

If you contact dl666's support team via live chat or email, we retain records of those communications — including the content of your messages and any documents or screenshots you share — for quality assurance, training, and dispute resolution purposes.

2 How We Use Your Data

dl666 processes personal data for clearly defined, legitimate purposes. We do not use your data for any purpose that is incompatible with the purposes listed below, and we do not sell, rent, or trade your personal information to any third party for their own commercial use.

2.1 Account Management and Service Delivery

The primary use of your personal data is to provide you with the dl666 service. This includes creating and managing your player account, processing deposits and withdrawals through bKash, Nagad, Rocket, Upay, Visa, and Mastercard, verifying your identity in compliance with KYC requirements, enabling participation in cricket betting, slot games, live dealer tables, and promotional offers, and delivering customer support via live chat and email at [email protected].

2.2 Fraud Prevention and Security

dl666 uses personal and behavioural data to detect and prevent fraudulent activity, including multi-accounting, bonus abuse, money laundering, identity fraud, and unauthorised account access. This is a legitimate interest processing activity that is fundamental to maintaining a safe and fair environment for all Bangladesh players on the platform. Automated systems may flag unusual account activity for human review by our security team.

2.3 Legal and Regulatory Compliance

dl666 is required to process certain personal data — particularly identity and financial data — to meet its obligations under applicable anti-money laundering (AML) legislation, counter-terrorism financing (CTF) requirements, and other regulatory obligations applicable to internationally operated online gambling platforms. Records of transactions, KYC verifications, and account history may be retained for the periods prescribed by applicable law, irrespective of account closure.

2.4 Responsible Gaming

dl666 uses your betting and account activity data to monitor for signs of problematic gambling behaviour. This includes tracking bet frequency, session duration, changes in deposit patterns, and use of self-exclusion or deposit limit tools. Where our responsible gaming algorithms identify potential concern, we may proactively contact you with support information or apply temporary account restrictions in accordance with our Responsible Gaming policy.

2.5 Marketing Communications

Where you have provided consent to receive marketing communications during registration or via your account preferences settings, dl666 may send you promotional emails, SMS notifications, or in-platform messages regarding bonus offers, new game releases, cricket season promotions (such as BPL and IPL specials), and seasonal campaigns tied to Eid, Pohela Boishakh, or other Bangladesh market events. You may withdraw your consent to marketing communications at any time by updating your account notification preferences or by contacting our support team.

2.6 Platform Improvement and Analytics

Aggregated and anonymised usage data is used by dl666 to analyse platform performance, improve the user experience for Bangladesh players, optimise game loading times, and develop new features. Where analytics data is used, it is processed in an aggregated form that does not identify individual users.

3 Data Sharing & Disclosure

dl666 does not sell, lease, or trade your personal information to any third party for commercial purposes. Your data is shared only in the limited, specific circumstances described in this section, and only to the extent necessary for the stated purpose.

3.1 Payment Processing Partners

To process deposits and withdrawals, dl666 shares the minimum necessary transaction data with our payment processing partners — including bKash, Nagad, Rocket, Upay, Visa, and Mastercard. These providers receive only the data required to execute the specific transaction (such as account reference and transaction amount) and are contractually prohibited from using that data for any other purpose.

3.2 Game Content Providers

dl666 integrates game content from third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game delivered by one of these providers, certain technical and session data (such as a session token, bet amount, and game result) is transmitted to the relevant provider's servers to enable fair game delivery. These providers operate under their own data processing agreements with dl666 and are not permitted to use game session data for independent marketing or profiling purposes.

3.3 Legal and Regulatory Disclosure

dl666 may disclose personal data to competent regulatory authorities, law enforcement agencies, courts, or other government bodies where required to do so by applicable law, court order, or regulatory instruction. Such disclosures are made only to the extent strictly required by the applicable legal obligation and are documented internally for accountability purposes.

3.4 Service Providers and Processors

dl666 works with a limited number of vetted third-party service providers who process data on our behalf — including cloud hosting infrastructure, cybersecurity monitoring, and customer support tooling. All such providers operate under data processing agreements that bind them to process dl666 player data only on our documented instructions and to maintain appropriate security standards.

3.5 Business Transfers

In the event of a merger, acquisition, or sale of all or part of dl666's business assets, player data may be transferred to the acquiring entity as part of the transaction. In such circumstances, dl666 will notify affected players via email and in-platform notification prior to any transfer taking effect, and players will be given the opportunity to request account deletion if they do not wish their data to be transferred.

4 Cookies & Tracking

dl666 uses cookies and similar tracking technologies to operate the platform effectively and to deliver a personalised, secure experience for Bangladesh players. This section explains what cookies we use, why we use them, and how you can manage your cookie preferences.

4.1 What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They allow the website to remember your actions and preferences — such as your login session, language settings, and recently viewed pages — over a period of time so you don't have to re-enter this information every time you return to the site or navigate between pages.

4.2 Types of Cookies Used by dl666

• Strictly Necessary Cookies: These cookies are essential for the dl666 platform to function. They enable core features such as account login sessions, security tokens, and payment gateway redirects. Without these cookies, services you have requested — such as logging in or making a deposit — cannot be provided. These cookies cannot be disabled.
• Performance and Analytics Cookies: These cookies collect anonymous information about how players interact with dl666 — including which pages are visited most frequently, how long sessions last, and which game categories attract the most engagement. This data helps us improve platform performance and content relevance for Bangladesh players.
• Functional Cookies: These cookies remember your preferences — such as your preferred game view, notification settings, and account display options — to deliver a more personalised dl666 experience on return visits.
• Fraud Prevention and Security Cookies: dl666 uses specialised security cookies to detect bot activity, prevent automated account registration, and identify unusual login patterns that may indicate credential stuffing or account takeover attempts.

4.3 Managing Cookies

You can control and delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will impair your ability to use core dl666 features including account login and payment processing. Most modern browsers provide cookie management options under Settings or Preferences — consult your browser's help documentation for specific instructions.

5 Data Security

dl666 implements robust technical and organisational security measures to protect the personal data of all Bangladesh players against unauthorised access, accidental loss, destruction, or disclosure. The following security controls are in place across the dl666 platform:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and dl666's servers
• Encrypted storage of passwords using industry-standard one-way hashing algorithms — dl666 staff cannot view your password in plain text
• Two-factor authentication (2FA) available for all player accounts as an optional additional security layer
• Continuous automated monitoring for unusual login activity, including anomalous geographic access patterns and brute-force login attempts
• Regular third-party security audits and penetration testing of the dl666 platform infrastructure
• Strict role-based access controls limiting employee access to player data on a strict need-to-know basis
• Payment card and mobile banking data handled exclusively by PCI-DSS compliant payment processors — dl666 servers do not store raw payment credentials

5.1 Data Breach Response

In the event of a personal data breach that poses a risk to the rights and freedoms of affected players, dl666 will take immediate containment action, assess the scope and severity of the breach, notify affected players by email within 72 hours of becoming aware of the breach (where feasible), and report the incident to relevant regulatory authorities as required by applicable law. The notification to affected players will clearly explain what data was involved, what steps dl666 is taking in response, and what actions players should take to protect themselves.

5.2 Player Responsibilities

While dl666 implements comprehensive security measures on the platform side, the security of your account also depends on actions you take. You are responsible for keeping your login credentials confidential, using a strong and unique password for your dl666 account, logging out of your account on shared or public devices, and promptly notifying dl666 if you suspect any unauthorised access to your account. dl666 cannot be held responsible for security breaches that result from a player's failure to take reasonable precautions with their own account credentials.

6 Data Retention

dl666 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply to the main categories of data held by dl666:

• Account and identity data: Retained for the duration of your active account relationship with dl666, plus a minimum of five years following account closure to meet anti-money laundering record-keeping requirements.
• KYC verification documents: Retained for a minimum of five years from the date of verification or account closure (whichever is later), in accordance with AML regulatory requirements.
• Financial transaction records: Retained for a minimum of five years from the date of each transaction, in accordance with financial record-keeping regulations.
• Betting and gaming history: Retained for five years from the date of each wagering event for dispute resolution, responsible gaming monitoring, and regulatory audit purposes.
• Customer support communications: Retained for three years from the date of the communication, to support dispute resolution and quality assurance.
• Marketing preferences and consent records: Retained for the duration of the account relationship and for three years thereafter as evidence of consent management.
• Technical and behavioural logs: Retained for a maximum of 13 months in identifiable form, then aggregated or anonymised for longer-term analytics use.

7 Your Privacy Rights

dl666 is committed to respecting the privacy rights of all players. The following rights are available to you in relation to the personal data dl666 holds about you. To exercise any of these rights, please contact our support team via live chat or at [email protected], clearly identifying the right you wish to exercise and providing sufficient information to verify your identity.

7.1 Right of Access

You have the right to request a copy of all personal data that dl666 holds about you. We will provide this information in a structured, commonly used format within 30 days of receiving a valid request. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

7.2 Right to Rectification

If any personal data that dl666 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain account details — such as your contact email address and phone number — directly via your account settings. For corrections to identity data such as your name or date of birth (which require KYC re-verification), please contact our support team.

7.3 Right to Erasure

You may request the deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purposes for which it was collected, or where you withdraw consent and there is no other legal basis for processing. Please note that dl666's ability to fulfil erasure requests is subject to overriding legal retention obligations (see Section 6). Where data cannot be erased due to a legal obligation, we will inform you of this and explain which retention requirement applies.

7.4 Right to Restrict Processing

You have the right to request that dl666 restricts the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or where processing is unlawful but you prefer restriction over erasure. During a restriction period, dl666 will continue to store the relevant data but will not actively process it beyond what is required to maintain the restriction itself.

7.5 Right to Data Portability

Where dl666 processes your personal data by automated means on the basis of your consent or a contract with you, you have the right to receive that data in a structured, machine-readable format (such as JSON or CSV) for the purpose of transferring it to another service provider. Portability requests can be submitted to [email protected].

7.6 Right to Object to Marketing

You have an absolute right to object to the processing of your personal data for direct marketing purposes at any time. Upon receipt of a valid objection, dl666 will cease all marketing communications to you within 5 business days. You may also manage your marketing preferences at any time directly within your dl666 account settings panel.

8 Policy Updates & Contact

dl666 reviews this Privacy Policy periodically and will update it to reflect changes in our data practices, regulatory requirements, or the services we offer. Where material changes are made — such as a new category of data being collected, a new third-party processor being engaged, or a change to the purposes for which data is used — we will notify registered players by email and via an in-platform notification at least 14 days before the changes take effect.

The date of the most recent revision to this Privacy Policy is displayed in the "Last updated" badge at the top of this page. Your continued use of dl666 following the effective date of any such update constitutes acceptance of the revised Privacy Policy. If you do not agree with the updated policy, you must discontinue use of the platform and may request account closure by contacting our support team.

8.1 Privacy Contact

All privacy-related queries, data subject access requests, rectification requests, erasure requests, and complaints regarding dl666's handling of personal data should be directed to our support team using the following contact details:

• Email: [email protected] (please include "Privacy Request" in the subject line for fastest routing)
• Live Chat: Available 24/7 directly on the dl666 platform — click the support icon when logged in to your account

dl666 is committed to resolving all privacy-related concerns promptly and professionally. Our support team will acknowledge your query within 24 hours and escalate it to the appropriate internal team for handling within 2 business days of receipt.