3666b Privacy Policy — How We Protect Your Personal Data
At 3666b, your privacy is a first-class commitment. This Privacy Policy explains exactly what personal data we collect, why we collect it, how we use and safeguard it, and what rights you hold as a player on our platform. We serve the Bangladesh market and apply rigorous data-protection standards across every transaction and interaction on 3666b.
Your Privacy at a Glance
A plain-English summary of how 3666b approaches your personal data. The full legal text follows below.
End-to-End Encryption
All data transmitted between your device and the 3666b platform is protected by 256-bit SSL/TLS encryption. Whether you are depositing via bKash or browsing the live casino lobby, every byte of your personal and financial data travels over a fully encrypted connection.
No Data Selling
3666b does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. Your information is shared only with certified service partners — such as payment processors and KYC verification providers — strictly as needed to operate the platform.
Your Data Rights
You have the right to access, correct, and request deletion of the personal data 3666b holds about you. Submit a data request at any time by contacting [email protected]. We will respond within the timeframes set out in this policy and handle all requests with full confidentiality.
Secure Data Storage
Personal data is stored on secured, access-controlled servers. Passwords are stored in hashed form — never in plain text — and are not accessible to any 3666b staff member. Regular security audits and penetration tests are conducted to maintain platform integrity.
Transparent Cookie Use
3666b uses cookies and similar tracking technologies solely to improve your on-platform experience — for session management, personalised game recommendations, and fraud prevention. We do not place advertising trackers or sell cookie data to ad networks. You can manage your cookie preferences at any time.
Marketing Opt-Out
Receiving promotional emails and SMS messages from 3666b is entirely optional. You can withdraw your marketing consent at any time by updating your account notification preferences or by contacting support. Opting out of marketing will never affect your ability to use the platform or receive essential account communications.
Full Privacy Policy
Important Notice
This Privacy Policy ("Policy") describes how 3666b ("Platform", "we", "us", "our") collects, uses, stores, and protects personal data provided by or collected from users ("Player", "you", "your") who access or use the 3666b platform at https://3666b.io. By creating an account or using the platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. This Policy forms part of the 3666b Terms & Conditions.
Introduction
3666b is an offshore online casino and sports betting platform that serves the Bangladesh market. We are committed to protecting the privacy and personal data of every player who uses our platform. This Policy has been written to be clear, transparent, and comprehensive — covering every aspect of how personal data flows through the 3666b ecosystem, from the moment you first visit the website through to the processing of your withdrawals and beyond.
We recognise that personal data is sensitive and that our players place significant trust in us when they register an account and share their information. We take that trust seriously. Our data practices are guided by the principles of data minimisation, purpose limitation, storage limitation, and security by design.
This Policy applies to all players accessing 3666b from Bangladesh — whether from Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar — and to all interactions with the 3666b platform, including account registration, game play, sports betting, financial transactions, and customer support communications.
Data Controller
For the purposes of this Privacy Policy, 3666b acts as the data controller in respect of the personal data it collects directly from players. A data controller is the entity that determines the purposes and means of processing personal data.
When 3666b shares data with third-party service providers — such as KYC verification partners, payment processors (bKash, Nagad, Rocket, Upay), or game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) — those providers act as independent data processors or controllers in their own right, subject to their own privacy policies. 3666b takes reasonable steps to ensure that all data-sharing agreements with third parties include appropriate data protection obligations.
All privacy-related enquiries, data access requests, and complaints should be directed to the 3666b Data Protection contact at: [email protected]. Please use the subject line "Privacy Request" to ensure your enquiry is routed to the appropriate team.
Data We Collect
3666b collects the following categories of personal data from players:
Identity & Contact Data
- Full legal name
- Date of birth
- Email address
- Mobile telephone number
- Residential address (city, district, postal code)
- Nationality
Identity Verification (KYC) Data
- Government-issued photo identification (national identity card, passport, or driving licence)
- Proof of address documents
- Proof of payment method ownership (e.g., screenshot of bKash or Nagad account showing registered mobile number)
- Source of funds documentation (where required by AML procedures)
Financial Transaction Data
- Deposit amounts, dates, and payment method references
- Withdrawal requests, amounts, and processing status
- Transaction identifiers from bKash, Nagad, Rocket, Upay, and bank transfer records
- Account balance history
Gameplay & Betting Data
- Game history (titles played, bet amounts, outcomes)
- Sports betting history (markets, stakes, settlements)
- Session durations and login timestamps
- Bonus usage and wagering history
Technical & Device Data
- IP address and approximate geolocation derived from IP
- Device type, operating system, and browser version
- Session tokens and authentication logs
- Cookie identifiers (see Section 9 for full cookie details)
Communications Data
- Support chat transcripts and email correspondence
- Feedback and survey responses
- Complaint records and resolution notes
Data Minimisation Principle
3666b collects only the personal data that is necessary for the specific purpose for which it is being collected. We do not collect sensitive categories of personal data (such as health data, religious beliefs, or political opinions) unless explicitly required for responsible gaming self-exclusion procedures, and only with your express consent in that context.
How We Collect Data
3666b collects personal data through the following means:
Directly From You
The majority of data we hold is provided directly by you at key points in your player journey, including:
- Account registration: name, date of birth, email, mobile number, and address;
- KYC verification: identity documents uploaded to the secure verification portal;
- Deposit and withdrawal requests: payment method details and transaction references;
- Support interactions: messages, emails, and chat conversations with our support team;
- Responsible gaming tools: self-exclusion requests, deposit limit settings, and cool-off applications.
Automatically During Platform Use
When you access and use the 3666b platform, certain technical data is collected automatically through our servers and analytics infrastructure:
- IP address and device fingerprint at each login;
- Pages visited, games launched, and features interacted with;
- Session start and end times, duration, and activity logs;
- Error logs and performance metrics for platform stability purposes.
From Third Parties
In limited circumstances, 3666b may receive data about you from authorised third parties:
- KYC verification partners: document authentication results and identity confidence scores;
- Payment providers: transaction status confirmations from bKash, Nagad, Rocket, and banking partners;
- Fraud prevention services: risk signals and device reputation data used to protect your account and the platform.
Purpose & Legal Basis for Processing
3666b processes your personal data for specific, documented purposes. The table below sets out the primary purposes, the data categories involved, and the legal basis that justifies each processing activity.
| Purpose | Data Categories | Legal Basis |
|---|---|---|
| Account registration and management | Identity, contact data | Contractual necessity |
| Age and identity verification (KYC) | Identity, KYC documents | Legal obligation / contractual necessity |
| Processing deposits and withdrawals | Financial transaction data | Contractual necessity |
| Anti-money laundering (AML) compliance | Financial data, identity data | Legal obligation |
| Fraud prevention and security monitoring | Technical data, transaction data | Legitimate interest |
| Providing and improving platform services | Gameplay data, technical data | Contractual necessity / legitimate interest |
| Customer support and complaint handling | Communications data, account data | Contractual necessity |
| Responsible gaming monitoring | Gameplay data, account data | Legal obligation / legitimate interest |
| Sending promotional communications | Contact data, preferences | Consent (freely given and withdrawable) |
| Analytics and platform optimisation | Technical data, aggregated usage data | Legitimate interest |
Where processing is based on consent (e.g., marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. Withdrawal of marketing consent does not affect your access to platform services.
Where processing is based on legitimate interest, 3666b has carried out a balancing assessment and determined that our legitimate interests are not overridden by your fundamental rights and freedoms, taking into account the reasonable expectations of users of an online gaming platform.
Data Retention
3666b retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or for as long as is required to meet legal, regulatory, or contractual obligations. Our key retention periods are as follows:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | AML / legal compliance |
| KYC documents | 5 years from verification date | Regulatory obligation |
| Financial transaction records | 5 years from transaction date | AML / financial record-keeping |
| Gameplay and betting logs | 3 years from date of activity | Dispute resolution / platform integrity |
| Support communications | 3 years from last interaction | Quality assurance / dispute resolution |
| Technical / server logs | 12 months | Security monitoring |
| Marketing consent records | Until consent withdrawn + 2 years | Evidence of lawful marketing |
After the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised, aggregated data (which can no longer identify any individual) may be retained indefinitely for platform analytics and business reporting purposes.
Data Sharing
3666b does not sell, rent, or commercially transfer your personal data to any third party. We share personal data only in the following limited and controlled circumstances:
Service Providers & Data Processors
We engage trusted third-party service providers who process data strictly on 3666b's behalf and under our instructions:
- KYC / Identity Verification Partners: for age verification and document authentication during onboarding and withdrawal processing;
- Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank — solely for processing your deposit and withdrawal transactions;
- Game Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — game session data (e.g., bet amounts and outcomes) is shared with the relevant provider to power the game you are playing. These providers operate their own privacy policies.
- Fraud Prevention & Cybersecurity Providers: for real-time threat detection and account security monitoring.
Legal & Regulatory Disclosure
3666b may disclose personal data to government authorities, law enforcement agencies, or judicial bodies where we are legally required to do so — for example, in response to a court order, regulatory investigation, or AML reporting obligation. Such disclosures will be limited to the minimum data required to satisfy the legal obligation.
Business Transfers
In the event that 3666b undergoes a merger, acquisition, or sale of all or a substantial portion of its assets, player data may be transferred as part of that transaction. Affected players will be notified in advance by email where this occurs, and data will remain subject to equivalent privacy protections under any new controller.
What We Do Not Do
- We do not sell your data to advertisers or data brokers;
- We do not share your data with social media platforms for targeted advertising;
- We do not provide player data to any third party for their own independent marketing purposes.
Data Security
3666b employs a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our key security measures include:
- Transport Encryption: All data in transit is protected by 256-bit TLS/SSL encryption. Every connection to https://3666b.io is encrypted end-to-end.
- Password Hashing: Account passwords are hashed using industry-standard one-way cryptographic algorithms. No 3666b employee can view your password in plain text.
- Access Controls: Access to databases containing personal data is restricted on a strict need-to-know basis. Administrative access requires multi-factor authentication.
- Regular Security Audits: 3666b conducts periodic internal and external security reviews, including penetration testing, to identify and remediate vulnerabilities.
- Intrusion Detection: Automated monitoring systems flag unusual access patterns and potential breaches in real time.
- Two-Factor Authentication (2FA): Players are encouraged to enable 2FA on their accounts for an additional layer of login security.
In the Event of a Data Breach
If 3666b becomes aware of a data breach that is likely to result in a risk to the rights and freedoms of players, we will notify affected players without undue delay by email. The notification will describe the nature of the breach, the data affected, the likely consequences, and the steps 3666b is taking to address it. We will also notify the relevant supervisory authority where required by applicable law.
While 3666b takes every reasonable technical and organisational measure to protect your data, no internet-based system can be guaranteed to be 100% secure. You play a critical role in keeping your account safe: never share your password with anyone, use a strong and unique password for your 3666b account, and contact us immediately at [email protected] if you suspect unauthorised access.
Cookies & Tracking Technologies
3666b uses cookies and similar technologies — including local storage, session storage, and pixel tags — to operate and improve the platform. A cookie is a small text file stored on your device when you visit a website. The table below summarises the types of cookies 3666b uses:
| Cookie Type | Purpose | Retention | Required? |
|---|---|---|---|
| Strictly Necessary | Authentication, session management, security tokens. Without these, the platform cannot function. | Session | Yes — cannot be disabled |
| Functional | Remember language preference, last-visited game category, lobby layout choices. | 30 days | Optional |
| Analytics | Aggregate usage statistics — pages visited, game popularity, error rates — used to improve the platform. No individual profiling. | 12 months | Optional |
| Fraud Prevention | Device fingerprinting and behavioural signals used to detect suspicious activity and protect your account from unauthorised access. | 90 days | Yes — cannot be disabled |
No Advertising Cookies
3666b does not place advertising cookies, retargeting pixels, or any third-party tracking tags on the platform. We do not share behavioural data with ad networks, social media platforms, or data aggregators for the purpose of displaying targeted advertisements.
Managing Your Cookie Preferences
You can control optional cookies through your account settings on the platform. You may also configure your browser to block or delete cookies; however, please note that disabling strictly necessary or fraud-prevention cookies will impair your ability to log in and use the platform safely. Most modern browsers provide built-in tools for cookie management — consult your browser's help documentation for instructions specific to your device.
Your Rights
As a player on the 3666b platform, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request". We will verify your identity before processing any request and will respond within 30 calendar days.
Right of Access
You have the right to request a copy of the personal data 3666b holds about you, together with information about how it is being used. This is known as a Subject Access Request (SAR). We will provide a structured, commonly used, machine-readable copy of your data at no charge.
Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or supplement it. Some corrections (such as a legal name change) will require supporting documentation before they can be applied to your account.
Right to Erasure ("Right to Be Forgotten")
In certain circumstances, you may request that 3666b delete the personal data it holds about you. This right is not absolute — we may be legally required to retain certain data (e.g., AML records, financial transaction logs) even after an erasure request. Where erasure is not possible in full, we will explain which data must be retained and why.
Right to Restrict Processing
You may ask 3666b to restrict the processing of your data in specific situations — for example, while you contest the accuracy of data we hold, or while a legitimate interest assessment is being reviewed. Restriction means we will store but not actively process the data during the restricted period.
Right to Data Portability
Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to transmit it to another controller where technically feasible.
Right to Object
You have the right to object to processing of your personal data where it is based on legitimate interest, including profiling for responsible gaming risk assessment. You also have an unconditional right to object to processing for direct marketing purposes at any time.
Right to Withdraw Consent
Where processing is based on your consent (e.g., marketing emails and SMS), you may withdraw that consent at any time via your account notification settings or by contacting support. Withdrawal of consent does not affect the lawfulness of processing prior to withdrawal and will not restrict your access to platform services.
Identity Verification for Rights Requests
To protect your data from fraudulent access requests, 3666b will verify your identity before fulfilling any data rights request. You may be asked to confirm account details and, in some cases, provide a copy of identification. We will handle your verification information confidentially and delete it promptly once the rights request is fulfilled.
Minors & Age Policy
The 3666b platform is strictly restricted to players who are 21 years of age or older. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step during account registration and is reinforced during KYC document review.
If 3666b discovers or is notified that a player is under 21 years of age, we will immediately suspend the relevant account, quarantine all associated personal data, and initiate a review of all transactions made during the period of underage access. Any funds found to have been deposited by a minor will be refunded to the original payment method and the account will be permanently closed.
If you are a parent or guardian and believe that a person under the age of 21 has registered an account on 3666b using your details or their own, please contact us immediately at [email protected] with the subject line "Underage Account Report". We will treat the matter with urgency and full confidentiality.
International Data Transfers
3666b operates as an offshore platform and, as a result, your personal data may be processed and stored on servers located outside of Bangladesh. These international transfers may be to jurisdictions that have different data protection laws from those applicable in Bangladesh.
When we transfer personal data internationally, we ensure that appropriate safeguards are in place to protect your data, including:
- Contractual data processing agreements with all third-party processors that include standard data protection clauses;
- Technical security measures (encryption in transit and at rest) applied consistently regardless of the data's physical storage location;
- Limiting international transfers to jurisdictions with recognised data protection frameworks or to partners who have contractually agreed to equivalent standards.
By registering an account and using the 3666b platform, you acknowledge and consent to the transfer of your personal data to servers and processors located outside Bangladesh where necessary for the operation of the platform. If you have questions about specific international transfers, please contact us at [email protected].
Changes to This Policy
3666b reserves the right to update or amend this Privacy Policy at any time. Changes may be necessary to reflect updates to our data practices, new features or services on the platform, changes in applicable law, or feedback from players and regulators.
When we make material changes to this Policy, we will notify registered players by email at the address registered to their account, and we will update the "Last Updated" date at the top of this document. The updated Policy will be posted at https://3666b.io/privacy-policy and will take effect on the date specified in the notification.
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data. If you disagree with any changes to this Policy, you have the right to close your account and request deletion of your personal data (subject to our retention obligations) before the changes take effect.
Your continued use of the 3666b platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised Policy.
Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data 3666b holds about you, please reach out to our Data Protection team using the contact details below. All privacy communications are handled in English and treated with strict confidentiality.
Data Protection Contact
Email: [email protected]
Subject Line: "Privacy Request" or "Data Rights Request"
Availability: 24 hours a day, 7 days a week
Time Zone: Bangladesh Standard Time (BST, UTC+6)
Response Time: Within 30 calendar days for data rights requests; within 24 hours for urgent security matters
For responsible gaming concerns, including self-exclusion requests and deposit limit adjustments, please visit our Responsible Gaming page or contact support directly. For general platform queries, our FAQ page at 3666b FAQ covers the most common topics.
Please do not send sensitive personal data such as full payment card numbers, passwords, national ID numbers, or bank account details via email. 3666b support and data protection staff will never ask for your account password under any circumstances.
Your Data Is Safe — Now Enjoy the Platform
You have reviewed how 3666b protects your privacy. Explore the full 3666b experience — from live cricket betting and premium slots to live casino table games, all with instant BDT deposits via bKash and Nagad.