k6666 Privacy Policy — How We Handle Your Personal Data

This Privacy Policy ("Policy") is issued by k6666 ("k6666", "we", "us", "our"), the operator of the online gaming platform accessible at https://k6666.im and its associated mobile interfaces and sub-domains. This Policy sets out how k6666 collects, uses, stores, discloses, and protects personal data relating to registered players, prospective players, and visitors to the platform ("you", "your").

k6666 takes the privacy of its users seriously. We are committed to handling your personal data responsibly, transparently, and in compliance with applicable data protection principles. This Policy should be read together with our Terms & Conditions and our Responsible Gaming policy, both of which are incorporated by reference.

This Policy is written in English and is effective from 1 January 2026. In the event of any inconsistency between a translated version of this Policy and the English version, the English version shall take precedence.

k6666 collects personal data through several channels: directly from you when you register an account or interact with the platform, automatically through your use of our services, and from third-party partners where necessary for identity verification and fraud prevention. The categories of personal data we collect are set out below.

2.1 Registration & Identity Data

When you create a k6666 account, we collect the following information:

• Full legal name as it appears on your government-issued identification
• Date of birth (for age verification — players must be 21 or older)
• Residential address, including city, district, and postal code
• Mobile phone number (used for account verification and security alerts)
• Email address (used for account communications and optional marketing)
• Username and encrypted password

2.2 Identity Verification (KYC) Data

To comply with anti-money-laundering regulations and to verify your eligibility to play, we may request documentary evidence including:

• National ID Card (NID) issued by the Bangladesh Election Commission
• Passport or driver's licence as an alternative form of photo identification
• Proof of residential address (utility bill, bank statement, government correspondence dated within three months)
• Proof of payment method ownership (screenshots or statements confirming bKash, Nagad, Rocket, or Upay account registration details)
• Source of funds documentation where transaction volumes trigger enhanced due diligence thresholds

2.3 Financial Transaction Data

We record all deposit and withdrawal transactions associated with your account, including the payment method used, transaction amounts in BDT or USDT equivalent, transaction timestamps, and transaction reference numbers. We do not store full credit or debit card numbers — card data is handled directly by our PCI-DSS-compliant payment processing partners.

2.4 Gameplay & Behavioural Data

We collect data about your activity on the k6666 platform, including:

• Games played, bet amounts, wager outcomes, and session duration
• Sports markets accessed and betting history
• Bonus and promotional offer claims and usage
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion status)

2.5 Technical & Device Data

When you access k6666, our systems automatically collect certain technical information, including your IP address, device type, operating system, browser type and version, screen resolution, referring URL, pages visited, and session timestamps. This data is used for security monitoring, fraud detection, and platform optimisation.

k6666 uses the personal data we collect for the following purposes:

• Account creation and management: To register your account, verify your identity, and maintain accurate records of your player profile.
• Service delivery: To enable you to access casino games, place sports bets, make deposits and withdrawals, and interact with all features of the k6666 platform.
• Payment processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, USDT, Visa, and Mastercard, and to detect and prevent payment fraud.
• Regulatory compliance: To fulfil our obligations under applicable anti-money-laundering regulations, including conducting KYC verification and reporting suspicious transactions where required by law.
• Responsible gaming: To monitor gameplay patterns that may indicate problem gambling behaviour, to enforce player-requested account restrictions, and to administer our self-exclusion programme.
• Security and fraud prevention: To detect, investigate, and prevent fraudulent activity, account takeovers, collusion, and any other activity that violates our Terms & Conditions.
• Customer support: To respond to your enquiries, process complaints, and resolve disputes in a timely and informed manner.
• Platform improvement: To analyse aggregate usage patterns, test new features, and improve the overall quality and reliability of the k6666 platform for all users.
• Marketing communications: Where you have provided explicit consent, to send you promotional offers, bonus notifications, and platform updates relevant to the Bangladesh market. You may withdraw consent at any time.

k6666 processes your personal data on the following legal bases, depending on the category of data and the purpose of processing:

• Contractual necessity: Processing required to fulfil our contractual obligations to you as a registered player, including account management, payment processing, and service delivery.
• Legal obligation: Processing required to comply with applicable laws and regulations, including KYC obligations, anti-money-laundering reporting requirements, and age verification mandates.
• Legitimate interests: Processing carried out to further the legitimate business interests of k6666, including fraud prevention, platform security, and service improvement, where those interests are not overridden by your privacy rights.
• Consent: Processing based on your explicit consent, including the sending of marketing communications. Where consent is the legal basis for processing, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

k6666 does not sell or trade personal data to third parties for commercial purposes. We may share your personal data with the following categories of recipients where necessary to operate the platform or to comply with legal obligations:

5.1 Service Providers

We engage trusted third-party service providers to support platform operations, including payment processors (for bKash, Nagad, Rocket, Upay, USDT, Visa, and Mastercard transactions), KYC and identity verification providers, fraud detection and cybersecurity firms, cloud hosting providers, and customer support software vendors. All service providers are contractually bound to process personal data only as instructed by k6666 and to apply security standards consistent with this Policy.

5.2 Game Content Providers

Certain gameplay data — specifically the bet amounts, game outcomes, and session identifiers necessary to deliver game content — is shared with licensed game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. This sharing is limited to data strictly necessary for game delivery and fair play verification. Game providers do not receive your identity or payment data.

5.3 Legal & Regulatory Disclosure

k6666 may disclose personal data to law enforcement authorities, regulatory bodies, or other governmental agencies where we are legally required to do so, where we receive a valid legal order or court direction, or where disclosure is necessary to protect the rights, property, or safety of k6666, its players, or the wider public.

5.4 Business Transfers

In the event of a merger, acquisition, reorganisation, or sale of all or part of the k6666 business, personal data held by k6666 may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and any change to this Privacy Policy that results from it.

k6666 uses cookies and similar tracking technologies on the platform to provide a functional, secure, and personalised experience. A cookie is a small text file stored on your device when you visit a website. The types of cookies we use are as follows:

6.1 Strictly Necessary Cookies

These cookies are essential for the platform to function. They include session authentication cookies that keep you logged in to your account, security tokens that protect against cross-site request forgery, and cookies that remember your responsible gaming preferences such as deposit limits and session time alerts. These cookies cannot be disabled without severely impairing platform functionality.

6.2 Performance & Analytics Cookies

We use aggregated analytics data to understand how players navigate the k6666 platform — which game categories are most visited, where users encounter technical difficulties, and how pages perform on different device types. This data is collected in aggregate form and does not identify you individually. It is used solely for platform improvement purposes.

6.3 Functional Cookies

Functional cookies remember your preferences such as language settings, preferred display options, and recently visited game categories. They allow us to provide a more personalised experience without requiring you to reset preferences on each visit.

You may manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the k6666 platform. Strictly necessary cookies cannot be disabled via browser settings as they are required for core platform security.

k6666 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, subject to any applicable legal or regulatory requirements that mandate longer retention periods. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be linked to any individual player.

k6666 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security programme includes the following key controls:

• Encryption in transit: All data transmitted between your device and our servers is encrypted using TLS 1.3 with 256-bit AES encryption.
• Encryption at rest: Sensitive personal data stored on k6666 servers — including identity documents and payment records — is encrypted at rest using AES-256 encryption.
• Access controls: Internal access to personal data is restricted on a strict need-to-know basis. All internal access events are logged and subject to regular audit review.
• Two-factor authentication: Privileged internal accounts used to access player data systems are protected by mandatory multi-factor authentication.
• Vulnerability management: Our platform undergoes regular penetration testing and vulnerability assessments conducted by independent cybersecurity specialists.
• Incident response: k6666 maintains a documented data breach response procedure. In the event of a breach affecting your personal data, we will notify affected players without undue delay, and in any case within the timeframe required by applicable regulations.

As a player whose personal data is processed by k6666, you hold the following rights with respect to your information. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request". We will respond within 30 calendar days of receiving a valid request.

9.1 Right of Access

You have the right to request a copy of the personal data k6666 holds about you, along with information about how that data is being used and with whom it has been shared.

9.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Please note that certain data, particularly KYC documentation, may require re-verification before corrections can be applied.

9.3 Right to Erasure

In certain circumstances you may request that k6666 delete your personal data. This right is subject to limitations — for example, we are not able to delete financial transaction records or KYC documentation that we are legally required to retain under applicable anti-money-laundering regulations.

9.4 Right to Restrict Processing

You may request that k6666 restrict the processing of your personal data in circumstances where you contest the accuracy of the data, where processing is unlawful, or where you have objected to processing and wish us to halt it pending resolution of your objection.

9.5 Right to Object

You have the right to object to the processing of your personal data where that processing is based on our legitimate interests, including profiling for responsible gaming monitoring purposes. You also have an unconditional right to object to the use of your personal data for direct marketing purposes at any time.

9.6 Right to Data Portability

Where data processing is based on your consent or on a contract between you and k6666, and where processing is carried out by automated means, you may request a copy of your personal data in a structured, commonly used, machine-readable format.

The k6666 platform is strictly restricted to individuals aged 21 years and above. We do not knowingly collect personal data from anyone under the age of 21. Age verification is a mandatory step in our registration and KYC process, and we apply automated and manual checks to enforce this restriction.

If k6666 becomes aware that personal data has been collected from an individual under the age of 21, we will immediately suspend the relevant account, delete the associated personal data, and refund any deposits made, net of any winnings generated in violation of our age restriction policy. If you believe that an underage individual has created an account on k6666, please report this to [email protected] immediately.

The k6666 platform does not contain links to external third-party websites. However, game content delivered by licensed game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others) is provided through integrated iFrames and APIs. The privacy practices of individual game studios are governed by their own respective policies and are separate from this Privacy Policy.

k6666 is not responsible for the privacy practices or content of any external game studio or third-party service provider beyond our contractual data processing obligations with those parties. If you have concerns about how a specific game provider handles data, please contact that provider directly.

k6666 reserves the right to amend this Privacy Policy at any time. Where changes are material — for example, changes to the categories of data we collect, the purposes for which we use it, or the third parties with whom we share it — we will notify registered players by email and by posting a prominent notice on the k6666 platform at least 14 days before the changes take effect.

For minor amendments (such as clarifications of existing language that do not alter the substance of the Policy), the updated Policy will be published on this page with a revised effective date. Your continued use of the k6666 platform following publication of an amended Privacy Policy constitutes your acceptance of the changes. If you do not accept the amended Policy, you must stop using the platform and may close your account by contacting our support team.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a concern about how k6666 handles your personal data, please contact our Data Protection team using the following details:

• Email: [email protected] — please use the subject line "Privacy Enquiry" or "Data Rights Request"
• Support Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (UTC+6)
• Response Time: We aim to acknowledge all privacy-related enquiries within 48 hours and to resolve them within 30 calendar days

We take all privacy complaints seriously and will investigate every concern raised by our players. If you are not satisfied with our response to a privacy complaint, you may seek further guidance from your local consumer protection authority or data protection regulator.