Your Privacy Matters at k5666

Information We Collect

k5666 collects personal information from you in several ways: directly when you register and use the Platform, automatically when you interact with our website, and occasionally from third-party sources such as payment providers and identity verification services. The categories of information we collect are detailed below.

Information You Provide Directly

• Registration data: Full legal name, date of birth, email address, mobile phone number (Bangladesh-registered), and a username of your choosing.
• Identity verification (KYC) documents: National ID Card (NID), passport, or driving licence; and proof of address such as a recent utility bill or bank statement.
• Financial information: The mobile financial service (MFS) account numbers or bank account details associated with your bKash, Nagad, Rocket, Upay, or bank transfer transactions. We do not store full card numbers or MFS PINs.
• Support communications: The content of any messages, emails, or live chat conversations you submit to our customer support team, including any attachments.
• Preference and profile data: Responsible gaming limits you set, promotional preferences, and any other information you voluntarily add to your player profile.

Information Collected Automatically

• Device and browser data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage and behavioural data: Pages visited, time spent on each page, games played, bet amounts and outcomes, session duration, click paths, and feature interactions.
• Transaction data: Deposit and withdrawal amounts, timestamps, payment methods used, and transaction reference numbers.
• Cookie and tracking data: Information gathered via first-party cookies, session cookies, and analytics tools. See the Cookies section for full details.

Information from Third Parties

• Payment providers: Transaction confirmation data from bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, and City Bank to verify deposits and withdrawals.
• Identity verification services: Confirmation of identity document authenticity from third-party KYC verification partners when required.
• Fraud and risk screening: Risk signals from industry-standard fraud prevention databases used to detect suspicious account activity.

How We Use Your Data

k5666 uses the personal information we collect for specific, legitimate purposes. We do not use your data in ways that are incompatible with the purposes listed below.

Marketing Communications

k5666 may send you promotional emails, SMS messages, or in-platform notifications about bonuses, new games, or special events — but only where you have given explicit opt-in consent at registration or through your account preferences. You may withdraw consent and unsubscribe from marketing communications at any time by updating your notification preferences in your account settings or by contacting [email protected]. Withdrawal of marketing consent does not affect your ability to continue using the Platform.

Legal Basis for Processing

k5666 processes personal data only where a valid legal basis exists. We rely on four principal bases, each applied to the appropriate processing activity:

• Contract performance: Processing is necessary to open and manage your player account, process transactions, and deliver the services you have requested. Without this processing, we cannot provide the Platform to you.
• Legal obligation: Processing is required to comply with applicable laws and regulations, including anti-money-laundering (AML) requirements, Know Your Customer (KYC) obligations, age verification mandates, and record-keeping requirements.
• Legitimate interest: Processing is necessary for k5666's legitimate business interests where these do not override your rights and interests. This includes fraud prevention, platform security, abuse detection, analytics, and business improvement activities.
• Consent: For processing activities that are not strictly necessary — primarily direct marketing communications — we rely on your freely given, specific, and informed consent. You may withdraw consent at any time without penalty.

Data Sharing & Disclosure

k5666 does not sell, rent, or trade your personal data to any third party. We share your information only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

Categories of Recipients

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, and other payment partners receive the transactional data necessary to process your deposits and withdrawals. These parties are independent data controllers for their own payment processing operations.
• Identity verification partners: Third-party KYC service providers receive copies of identity documents solely for the purpose of verifying your identity. They are contractually bound to use this data for no other purpose.
• Game software providers: Providers such as Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, Spribe, and Ezugi may receive a session token and minimal player identifier to deliver their games within the k5666 Platform. These providers do not receive your full personal profile.
• Fraud prevention and security services: Specialist third-party providers assist k5666 in detecting and preventing fraudulent activity. They receive device signals and risk indicators, not full personal profiles.
• Analytics providers: Aggregated, anonymised usage data may be processed by analytics partners to help us understand Platform performance and user behaviour. No individually identifiable data is shared for analytics purposes.
• Legal and regulatory authorities: k5666 will disclose personal data to law enforcement, regulatory bodies, or courts where required to do so by applicable law, by court order, or where necessary to protect the rights, property, or safety of k5666 or its players.

Cookies & Tracking Technologies

k5666 uses cookies and similar tracking technologies to operate the Platform, maintain your session, remember your preferences, and analyse how players use the website. A cookie is a small text file placed on your device when you visit a website. Cookies do not contain executable code and cannot access other files on your device.

Types of Cookies We Use

Managing Cookies

You can control cookie settings through your browser's privacy or security settings. Most modern browsers allow you to block or delete cookies, or to receive a notification before a cookie is placed. Please note that disabling strictly necessary cookies will prevent you from logging in to your k5666 account and using core Platform features. Disabling analytics or marketing cookies will not affect your ability to play.

k5666 does not use third-party advertising cookies or cross-site tracking pixels. Any analytics data collected is processed in aggregate form and is not linked to your individual identity for advertising purposes.

Data Retention

k5666 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following retention periods apply as general guidelines:

• Active account data: Retained for the full duration of your account's active status. If your account is closed, core identity and transaction records are retained for a minimum of five years from the date of closure to satisfy anti-money-laundering record-keeping requirements.
• KYC and identity documents: Retained for a minimum of five years from the date of account closure or the last transaction, whichever is later, in accordance with financial compliance obligations.
• Transaction records: Retained for a minimum of five years from the date of each transaction for accounting and AML compliance purposes.
• Support communications: Retained for up to three years from the date of the interaction, unless a longer period is required in connection with an ongoing dispute or legal matter.
• Analytics and usage data: Aggregated analytics data is retained for up to two years. Individual session logs are deleted within 90 days unless linked to a security investigation.
• Marketing preferences and consent records: Retained until you withdraw consent, plus a further 12 months to demonstrate compliance with consent requirements.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual player. Anonymised aggregated data may be retained indefinitely for statistical and business analysis purposes.

Your Data Rights

As a k5666 player, you hold a number of rights in relation to the personal data we hold about you. k5666 is committed to honouring these rights and responding to all valid requests within a reasonable timeframe, and in any case within 30 days of receipt of a verified request.

How to Exercise Your Rights

To exercise any of the above rights, please contact our Data Protection team at [email protected] with the subject line "Data Rights Request". Please include your registered username and a clear description of your request. We may need to verify your identity before processing your request. We will acknowledge receipt within 5 business days and aim to complete all valid requests within 30 days.

Data Security Measures

k5666 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. While no digital platform can guarantee absolute security, we maintain robust controls at every layer of our infrastructure.

Technical Controls

• SSL/TLS encryption: All data transmitted between your browser or app and k5666's servers is protected by industry-standard SSL/TLS encryption, preventing interception in transit.
• Encryption at rest: Sensitive data fields — including identity document references and financial account identifiers — are encrypted at rest in our databases using strong encryption algorithms.
• Access controls: Access to production systems and player data is restricted to authorised personnel only, using role-based access controls and multi-factor authentication.
• Intrusion detection: Our infrastructure is monitored around the clock by automated intrusion detection and anomaly alerting systems that flag unusual activity for immediate review.
• Regular security audits: k5666 conducts periodic security reviews and vulnerability assessments to identify and remediate potential weaknesses before they can be exploited.

Organisational Controls

• All k5666 staff with access to personal data are subject to strict confidentiality obligations and receive regular data protection training.
• Data access logs are maintained and regularly reviewed to detect any inappropriate or unauthorised access to player records.
• In the event of a personal data breach that poses a risk to your rights, k5666 will notify affected players without undue delay and take immediate remedial action.

Third-Party Services

The k5666 Platform integrates with third-party services to deliver certain functionality — including game content from licensed studios, payment processing via MFS providers and banks, and technical infrastructure services. This Privacy Policy applies only to data processed by k5666 in connection with the Platform. When you interact with a third-party service — for example, when you complete a bKash or Nagad transaction — you are also subject to that provider's own privacy policy and terms of service.

• k5666 is not responsible for the privacy practices of third-party payment providers, game studios, or other external services. We recommend reviewing their respective privacy policies.
• Game content providers such as Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, Spribe, and Ezugi operate under their own data protection frameworks. k5666 shares only the minimal data required to authenticate your game session.
• The k5666 Platform does not contain links to external third-party websites for advertising or affiliate purposes. Any links present on the Platform are internal navigation links only.

Updates to This Policy

k5666 reserves the right to update or revise this Privacy Policy at any time. Changes may be made to reflect updates to our data practices, changes in applicable law, new features added to the Platform, or other operational developments.

1. When material changes are made to this Privacy Policy, k5666 will notify registered players by email to their registered address, or by displaying a prominent notice on the Platform, at least 7 days before the changes take effect.
2. Continued use of the Platform after the effective date of any revised Privacy Policy constitutes your acknowledgement of the updated version.
3. If you do not agree to the revised Privacy Policy, you should stop using the Platform and contact [email protected] to request account closure.
4. Minor updates — such as corrections to typographical errors or clarifications that do not alter the substance of our data practices — may be made without prior notice.

The effective date of the most recent version of this Privacy Policy is displayed at the top of this page. We encourage you to review this page periodically to remain informed of any changes that may affect your rights or our obligations.

Contact & Privacy Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data k5666 holds about you, please contact our Data Protection team using the details below. We are committed to responding to all privacy-related enquiries promptly and transparently.

When cont acting us regarding a data rights request or privacy concern, please include the following in your message to help us locate your records and respond efficiently:

• Your registered k5666 username
• The email address associated with your account
• A clear description of your request or concern
• Any relevant transaction references or dates, if applicable

We may need to verify your identity before processing certain requests, particularly Subject Access Requests and erasure requests. This is to protect your data from being disclosed to or deleted by an unauthorised party. Identity verification is a standard step and does not indicate any suspicion on our part.