Information We Collect
At o666, we collect information necessary to provide our gaming platform and comply with regulatory requirements in Bangladesh. This data falls into several categories:
Account Registration
When you create an o666 account, we ask for your full name, email address, phone number, date of birth, and residential address. We verify this information during signup to prevent fraud and underage account creation. Your phone number may be used for login verification via SMS or OTP codes.
Payment Information
To process deposits and withdrawals, o666 collects details related to your chosen payment method. If you use bKash, Nagad, Rocket, or Bank Transfer, we store transaction references, amounts, and timestamps. For bank transfers, we may record your account number and bank details. We do not store full card numbers or sensitive payment credentials; payment processing is handled by PCI-DSS compliant third-party providers.
KYC & Identity Verification
Before your first withdrawal, o666 requires Know Your Customer (KYC) verification. You must upload a government-issued ID (National ID Card, Passport, or Driving Licence) and proof of address. These documents are stored securely and retained only as long as needed for compliance. Identity verification helps us prevent money laundering and ensure legal compliance under Bangladeshi regulations.
Behavioral Data
o666 logs your gaming activity, including games played, bet amounts, winnings, deposit/withdrawal history, and login timestamps. This data helps us personalize your experience, detect problem gambling patterns, and investigate account disputes. We also track your interactions with promotions, email opens, and website navigation through standard analytics tools.
Device & Connection Information
We collect technical details such as your IP address, device type, operating system version, browser information, and connection speed. This data is used to detect fraudulent access, prevent account takeovers, and optimize platform performance. Device fingerprinting helps identify suspicious login attempts from unusual locations or devices.
How We Use Your Data
Primary Purposes
- Account creation, login, and account management
- Processing deposits, withdrawals, and payment reconciliation
- KYC verification and anti-money laundering (AML) compliance
- Calculating bonuses, cashback, and VIP rewards based on your activity
- Detecting and preventing fraud, collusion, and account abuse
- Responding to your support inquiries via live chat or email
Marketing & Communication
If you opted in during registration, o666 sends promotional emails about new games, bonus offers, and platform updates. You can unsubscribe from marketing emails at any time by clicking the "Unsubscribe" link or contacting [email protected]. SMS notifications are sent only with your explicit consent and relate to login alerts, withdrawal confirmations, and urgent account security matters.
Legal Compliance
o666 is required by Bangladeshi law and international anti-gaming regulations to retain records of your account activity, identity verification documents, and transaction history. We cooperate with law enforcement inquiries when legally required. Your data may be disclosed to regulatory authorities if we receive a lawful request or suspect illegal activity on your account.
Platform Improvement
We analyze aggregated, anonymized data to understand user preferences, identify technical issues, and improve our gaming selection and website performance. This analysis never identifies you personally and helps us maintain a better platform experience for all o666 players.
Data Storage & Security
Encryption & Access Controls
o666 uses industry-standard TLS 1.2+ encryption for all data transmitted between your device and our servers. This is indicated by the HTTPS protocol and padlock icon in your browser. All sensitive data at rest—including payment details, identity documents, and account credentials—is encrypted using AES-256 encryption. Only authorized staff members with a legitimate business need can access your personal information, and all access is logged and monitored.
Security Infrastructure
Our servers are hosted in secure data centers with physical access controls, 24/7 surveillance, and backup power systems. We maintain firewalls, intrusion detection systems, and regular security audits to prevent unauthorized access. Payment processing is handled through PCI-DSS Level 1 compliant providers to ensure maximum protection of financial data.
Data Breach Notification
If o666 discovers a data breach affecting your personal information, we will notify you by email and through your account dashboard within 72 hours, as required by data protection standards. We will provide details of the breach, the data affected, and steps you should take to protect yourself. We will also work with relevant authorities to investigate and remediate the incident.
Cookies & Tracking
Session Cookies
o666 uses session cookies to keep you logged in and remember your preferences (language, currency, theme). These cookies expire when you close your browser. Without these cookies, you would need to enter your login credentials on every page, making the platform unusable.
Analytics & Performance
We use Google Analytics to track how visitors use our website—which pages are popular, how long users stay, and where they navigate. This data is anonymized and aggregated; it does not identify you personally. Google Analytics sets cookies that persist for up to 24 months. You can opt out of Google Analytics tracking using their official opt-out browser extension.
Third-Party Cookies
Our payment providers and game developers may set cookies to process transactions and track game performance. These are governed by their own privacy policies. You can control cookie settings in your browser to accept only essential cookies, though this may limit platform functionality.
Do Not Track (DNT)
If your browser's DNT setting is enabled, o666 respects your preference and minimizes non-essential tracking. However, some functionality (login persistence, fraud detection) requires basic tracking to operate.
Your Rights & Choices
Access & Portability
You have the right to request a copy of all personal data o666 holds about you. Submit a request to [email protected] with the subject "Data Access Request," and we will provide your information in a machine-readable format (typically CSV or JSON) within 14 days. This includes your account details, transaction history, and KYC documents.
Correction & Deletion
If your personal information is inaccurate or incomplete, you can update it directly through your o666 account settings (name, address, phone number). For identity documents or payment details, contact support. You may request deletion of your account and associated data, though we are legally required to retain transaction records and identity verification documents for 5–7 years for AML and tax compliance.
Withdrawal of Consent
You can withdraw consent to marketing communications at any time by clicking "Unsubscribe" in emails or logging in to your account and adjusting notification settings. Withdrawing consent does not affect the lawfulness of processing before the withdrawal or essential communications (security alerts, withdrawal confirmations).
Third-Party Sharing
Payment Processors
o666 shares payment information (amount, reference ID, your phone number or bank account) with bKash, Nagad, Rocket, and our banking partners to facilitate deposits and withdrawals. These third parties are contractually bound to protect your data and use it only for transaction processing.
Game Developers & Providers
When you play games from CQ9, JDB, Sexy Gaming, Ezugi, and Pragmatic Play, your gameplay data (bets, winnings, session duration) is shared with the game provider. Each provider has their own privacy policy. o666 does not sell your data to these providers; sharing is necessary to deliver the games you play.
Compliance & Law Enforcement
If legally required, o666 will disclose your information to Bangladeshi authorities, tax agencies, anti-gaming regulators, or international law enforcement bodies investigating money laundering or fraud. We will comply with lawful requests unless prohibited by law.
No Sale to Third Parties
o666 never sells, rents, or leases your personal data to marketing companies, data brokers, or advertisers for their own purposes. Your information is not monetized beyond its necessary use in providing our platform services.
Data Retention
| Data Type | Retention Period | Reason |
|---|---|---|
| Account credentials & profile | Until account deletion + 2 years | Regulatory compliance, dispute resolution |
| Transaction records | 7 years | AML/KYC requirements, tax compliance |
| Identity documents (NID, Passport) | 5 years after last activity | Verification record, legal hold |
| Gameplay logs & bet history | 2 years | Bonus dispute resolution, player fairness |
| Payment method details | Until account deletion + 1 year | Chargeback defense, reconciliation |
| IP & device logs | 90 days | Fraud detection, security incidents |
| Marketing consent records | Until withdrawal + 1 year | CAN-SPAM & email compliance |
| Support chat transcripts | 1 year | Dispute resolution, quality review |
After retention periods expire, data is permanently deleted or anonymized. Exceptions apply if a legal hold, ongoing investigation, or regulatory requirement mandates longer retention.
Contact & Policy Updates
Privacy Officer
If you have questions about this Privacy Policy or wish to exercise your data rights, contact our Privacy Officer:
- Email: [email protected]
- Live Chat: Available 24/7 on the o666 website
- Response Time: 24–48 hours for all inquiries
Policy Changes
o666 may update this Privacy Policy to reflect changes in our practices, technology, or legal requirements. Significant changes will be announced via email and your account dashboard at least 30 days before taking effect. Continued use of o666 after updates implies your acceptance of the revised policy. We encourage you to review this page periodically for the latest version.