Privacy Policy — ev6666

ev6666 collects personal data in three primary ways: information you provide voluntarily, information collected automatically as you use the platform, and information obtained from verified third-party partners. We collect only the minimum data necessary to deliver a safe, compliant, and enjoyable experience to players across Bangladesh.

Information You Provide Directly

When you register an account with ev6666 or interact with the platform, we collect the following categories of personal data:

• Identity data: Full legal name, date of birth, gender (where provided), and National Identity Card (NID) or passport number submitted during KYC verification.
• Contact data: Email address, mobile phone number registered in Bangladesh, and city or division of residence (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar).
• Account credentials: Username and hashed password. Passwords are never stored in plain text.
• Payment data: Mobile wallet numbers for bKash, Nagad, Rocket, or Upay; bank account details for Dutch-Bangla Bank, City Bank, BRAC Bank, or other supported institutions. Card numbers, where applicable, are tokenised and never stored in full on ev6666 servers.
• KYC documents: Photographs or scanned copies of government-issued identity documents, proof of address, and selfie photographs submitted to satisfy verification requirements.
• Support communications: The content of live chat conversations, emails, and any attachments you send to the ev6666 support team.
• Responsible gaming data: Deposit limits, cooling-off periods, and self-exclusion elections you set through the platform.

Information Collected Automatically

When you access ev6666.org, our systems automatically collect certain technical and behavioural data:

• Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and preferred language settings.
• Usage data: Pages visited, time spent on each page, games launched, bets placed, session duration, click-stream data, and feature interaction logs.
• Location data: Approximate geographic location inferred from your IP address, used to verify that you are accessing the platform from a permitted location. We do not collect precise GPS location data.
• Cookie and tracking data: Session cookies, persistent cookies, and similar technologies. See the Cookies & Tracking Technologies section for full details.

Information From Third Parties

We may receive limited personal data about you from trusted third-party service providers who assist in operating the ev6666 platform, including payment processors (bKash, Nagad, Rocket, Upay, and partner banks), identity verification agencies engaged for KYC checks, fraud detection and anti-money laundering screening services, and game studio providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) whose APIs interact with your account session. Data received from these sources is used solely for the purposes described in this Privacy Policy and is subject to the same protections applied to data you provide directly.

ev6666 uses the personal data it collects for clearly defined, legitimate purposes. We do not use your data for purposes incompatible with those stated at the time of collection without first obtaining your explicit consent.

ev6666 will send you marketing communications about promotions, bonuses, and seasonal offers (such as Eid, Pohela Boishakh, BPL season, and IPL promotions) only if you have opted in to receive such communications during registration or subsequently through your account settings. You may withdraw your consent to marketing communications at any time by contacting support or updating your preferences in your account dashboard.

ev6666 does not use personal data for automated individual decision-making that produces legal or similarly significant effects, except where such processing is required for fraud detection or identity verification as part of our KYC obligations, and only where you are informed and can request human review.

ev6666 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to fulfil our obligations to you under the ev6666 Terms & Conditions — including account management, payment processing, game delivery, and customer support.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including anti-money laundering (AML) obligations, know your customer (KYC) mandates, and responsible gaming compliance.
• Legitimate interests: Processing necessary for ev6666's legitimate business interests, including fraud prevention, platform security monitoring, business analytics, and service improvement — where those interests are not overridden by your data protection rights.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications and optional analytics cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Where ev6666 relies on legitimate interests as the legal basis for processing, we conduct a balancing assessment to ensure that our interests do not override your fundamental rights and freedoms. Records of these assessments are maintained internally.

ev6666 may share your personal data with the following categories of recipient, strictly for the purposes outlined in this Privacy Policy:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank receive the minimum data necessary to process your deposits and withdrawals. All payment partners operate under their own privacy policies and are required to handle your data in accordance with applicable standards.
• KYC and identity verification providers: Specialist third-party agencies engaged to verify your identity, age, and documents as part of the ev6666 KYC process. These providers are contractually prohibited from using your data for any purpose other than verification on ev6666's behalf.
• Game studio providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other licensed studios may receive session tokens and anonymised player identifiers necessary to deliver their games via the ev6666 platform. Full personal identity data is not passed to game studios.
• Fraud detection and security services: Third-party tools used to detect suspicious account activity, prevent unauthorised access, and screen transactions for AML compliance. These services process behavioural and technical data under strict data processing agreements.
• IT and hosting infrastructure providers: Cloud hosting and content delivery providers who store and process platform data on ev6666's behalf, under binding data processing agreements that impose the same security standards applied internally.
• Legal and regulatory authorities: Where required by applicable law, court order, or the direction of a competent regulatory authority, ev6666 may disclose personal data to law enforcement, government bodies, or financial regulators. ev6666 will notify the affected Member of any such disclosure where legally permitted to do so.

All third-party recipients of personal data are subject to contractual data processing agreements that require them to: process data only on ev6666's documented instructions; maintain appropriate technical and organisational security measures; not engage sub-processors without prior written consent from ev6666; and delete or return personal data upon termination of their engagement.

ev6666 does not transfer personal data to countries or jurisdictions outside Bangladesh except where necessary to operate the platform (e.g., using internationally hosted cloud infrastructure), and only where adequate safeguards are in place to ensure an equivalent level of data protection.

ev6666 uses cookies and similar tracking technologies to ensure the proper functioning of the platform, to remember your preferences, to analyse how players interact with the site, and — where you have consented — to deliver relevant promotional content.

Types of Cookies Used

Managing Cookies

You can control and manage cookies through your browser settings. Most modern browsers allow you to view, delete, and block cookies from specific sites. Please note that disabling strictly necessary cookies will impair your ability to use the ev6666 platform. Instructions for managing cookies in common browsers are available via the browser's own help documentation.

In addition to browser controls, ev6666 Members can manage their analytics and marketing cookie preferences directly from their account settings dashboard once logged in. Changes to cookie preferences take effect within one business day.

ev6666 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

• Active account data: Retained for the full duration of your account being open and active with ev6666, plus a post-closure period as described below.
• KYC and identity verification documents: Retained for a minimum of five (5) years following account closure to satisfy anti-money laundering record-keeping obligations.
• Transaction and payment records: Retained for a minimum of five (5) years following the date of each transaction, in accordance with financial record-keeping requirements.
• Support communications: Retained for three (3) years following the closure of each support interaction, to enable dispute resolution and service quality review.
• Marketing consent records: Retained for the duration of your account plus three (3) years, to demonstrate compliance with consent requirements.
• Analytics data: Anonymised and aggregated analytics data may be retained indefinitely for platform improvement purposes, as it cannot be traced back to an individual.
• Security and fraud logs: Retained for up to two (2) years following account closure to support investigation of any post-closure disputes or fraud claims.

When personal data is no longer required, ev6666 securely deletes or anonymises it using industry-standard data destruction methods. Physical documents are shredded; digital records are overwritten to prevent recovery.

As a Member of ev6666, you have the following rights in relation to your personal data:

• Right of access: You may request a copy of all personal data ev6666 holds about you, along with information about how it is being used. This is commonly known as a Subject Access Request (SAR). ev6666 will provide the requested data in a structured, machine-readable format where technically feasible.
• Right to rectification: If any personal data ev6666 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Some data (such as your registered name) can be updated directly in your account settings; other changes may require submission of supporting documentation.
• Right to erasure: You may request that ev6666 delete your personal data where it is no longer necessary for the purposes it was collected, where you have withdrawn consent and no other legal basis applies, or where the data has been processed unlawfully. This right is subject to legal retention obligations; ev6666 may be required to retain certain data (particularly KYC and transaction records) even after an erasure request is received.
• Right to restriction of processing: You may request that ev6666 temporarily restrict the processing of your personal data while a rectification request is being reviewed, or while you contest the legitimate interests basis for processing.
• Right to data portability: Where processing is based on your consent or contractual necessity, you may request that ev6666 provide your personal data in a structured, commonly used, machine-readable format suitable for transfer to another service provider.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications, optional analytics cookies), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Right to object: You may object to processing based on ev6666's legitimate interests at any time. ev6666 will cease such processing unless it can demonstrate compelling legitimate grounds that override your rights, or where processing is necessary for legal claims.

To exercise any of these rights, please contact the ev6666 support team via live chat (available 24/7) or by emailing [email protected]. We may need to verify your identity before processing a request to protect against unauthorised data access. All verified requests are processed within 30 days. Where a request is complex or involves a high volume of data, the response period may be extended by a further 30 days with notice to you.

ev6666 implements a layered security architecture designed to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Our technical and organisational security measures include:

• Encryption in transit: All data transmitted between your browser or mobile device and ev6666 servers is encrypted using 256-bit TLS (Transport Layer Security). Outdated SSL protocol versions are disabled.
• Encryption at rest: Sensitive data stored on ev6666 servers — including KYC documents, payment tokens, and personal identifiers — is encrypted at rest using AES-256 encryption.
• Access control: Access to personal data within ev6666's systems is strictly limited to authorised personnel with a documented, role-specific need. Multi-factor authentication is required for all internal system access.
• Firewalls and intrusion detection: ev6666's infrastructure is protected by enterprise-grade firewalls and active intrusion detection and prevention systems (IDS/IPS) that monitor for anomalous activity around the clock.
• Penetration testing: ev6666 commissions regular third-party penetration tests and vulnerability assessments of its platform infrastructure to proactively identify and remediate security weaknesses.
• Password security: Member passwords are never stored in plain text. All passwords are hashed using a computationally expensive one-way hashing algorithm, making reversal computationally infeasible even in the event of a data breach.
• Secure payment tokenisation: Payment card numbers and mobile wallet credentials are tokenised. Full account numbers are never stored on ev6666 servers; only tokens recognised by the respective payment processor are retained.
• Data minimisation: ev6666 collects and retains only the minimum personal data necessary to operate the platform. Unnecessary data is purged on a regular schedule.

Despite these measures, no internet-based platform can guarantee absolute security. ev6666 strongly encourages all Members to use a strong, unique password for their ev6666 account, enable any available two-factor authentication features, and to log out fully from shared or public devices after each session.

If you believe your ev6666 account has been compromised, please contact the support team immediately via live chat so that protective measures can be applied without delay.

ev6666 is an adults-only platform. The minimum age requirement to register an account and use any service on ev6666.org is 18 years. ev6666 implements mandatory age verification as part of the KYC process to ensure this requirement is enforced.

ev6666 does not knowingly collect, store, or process personal data from any individual under the age of 18. If ev6666 becomes aware — through its verification processes or any other means — that an account has been registered by or is being used by a person under 18 years of age, the following steps will be taken immediately:

• The account will be permanently closed without notice.
• Any deposited funds will be returned to the originating payment source, minus any applicable transaction fees, after verification of the source.
• All personal data associated with the account will be securely deleted from ev6666 systems, except where retention is required for legal compliance purposes (e.g., AML record-keeping).
• The incident will be logged internally for safeguarding and audit purposes.

If you are a parent or guardian and you believe that your child has registered an account with ev6666, please contact the support team immediately at [email protected]. We will act on such reports promptly and confidentially.

ev6666 also recommends that parents and guardians make use of internet parental control tools and filtering software to restrict access to gambling websites by minors. A number of free resources are available online for this purpose.

ev6666 reviews and updates this Privacy Policy periodically to reflect changes to our data processing practices, changes in applicable law, the introduction of new platform features, or feedback received from Members. The "Last Updated" date at the top of this page is revised whenever a material change is made.

When we make material changes to this Privacy Policy — for example, introducing a new category of data collection, a new third-party data sharing arrangement, or a change to our retention periods — we will notify active Members via their registered email address at least 7 days before the changes take effect. For minor, non-material clarifications (such as grammar corrections or rewording for clarity), the updated policy will be published without separate email notification.

Your continued use of the ev6666 platform after the effective date of any revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with the changes, you have the right to close your account before the revised policy takes effect by contacting the support team via live chat.

The current version of this Privacy Policy is always accessible at ev6666.org/privacy-policy. Previous versions are maintained in an internal archive and are available on request from the support team.

For any questions, concerns, or requests relating to this Privacy Policy or ev6666's handling of your personal data, please contact the support team at [email protected] or via 24/7 live chat available on every page of the ev6666.org website.