662zz Privacy Policy

662zz collects personal data in order to operate a secure, compliant, and personalised gaming service. The categories of data we collect, and the circumstances in which each category is collected, are set out below.

1.1 Registration Data

When you create a 662zz account, we collect the information you provide directly during sign-up. This includes your chosen username, email address, mobile phone number (used for mobile money account linkage via bKash, Nagad, or Rocket), date of birth, and the country and city of your residence. Providing accurate registration data is a condition of account creation — false information constitutes a breach of the 662zz Terms & Conditions.

1.2 Identity Verification (KYC) Data

To comply with anti-money-laundering best practices and to process withdrawals above certain thresholds, 662zz requires identity verification. During this process we may collect copies or photographs of government-issued identity documents such as your Bangladesh National Identity Card (NID), passport, or birth certificate, as well as a selfie or liveness check for facial verification purposes.

1.3 Financial Transaction Data

We record all deposit and withdrawal transactions conducted through your 662zz account. This includes the payment method used (bKash, Nagad, Rocket, Upay, USDT, BTC, Visa, or Mastercard), transaction reference numbers, amounts in Bangladeshi Taka (৳) or cryptocurrency, timestamps, and the outcome of each transaction. We do not store full card numbers or mobile banking PINs.

1.4 Device & Technical Data

When you access the 662zz platform, our servers automatically record certain technical information associated with your session. This includes your IP address, browser type and version, operating system, device model, screen resolution, time zone (typically Bangladesh Standard Time, UTC+6), referring URL, and session duration. This data is used for security monitoring, fraud detection, and platform performance optimisation.

1.5 Behavioural & Gaming Activity Data

We collect data about how you interact with the 662zz platform, including the games you play, bet amounts, win/loss outcomes, session times, bonus offers you claim, and pages you visit within the platform. This data supports responsible gaming monitoring, customer support, and the personalisation of promotional offers where you have opted in to receive such communications.

1.6 Communications Data

If you contact the 662zz support team via live chat, email, or any other channel, we retain a record of that communication — including the content of messages exchanged, the date and time of contact, and the resolution reached. These records are used for quality assurance and for resolving any future disputes.

662zz uses the personal data it collects exclusively for the purposes described in this Privacy Policy. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which your data is processed are as follows:

662zz does not use automated decision-making or profiling in a manner that produces legal or similarly significant effects on users, except where such processing is required for fraud detection and account security purposes. In those cases, any automated decision that adversely affects your account access is reviewed by a member of the 662zz compliance team upon your request.

662zz processes your personal data on the following legal grounds, depending on the specific processing activity involved:

• Contractual necessity: The majority of our data processing activities are necessary to deliver the services you have agreed to receive by creating a 662zz account. This includes account creation, payment processing, KYC verification, and customer support. Without this processing, we cannot fulfil our contractual obligations to you.
• Legitimate interests: We process certain categories of data — particularly device and behavioural data — on the basis of our legitimate interests in maintaining platform security, detecting fraudulent activity, preventing money laundering, and improving the quality of our service. We ensure that our legitimate interests do not override your fundamental privacy rights.
• Legal obligation: Some processing is required for 662zz to comply with applicable financial crime prevention and record-keeping obligations. This includes the retention of KYC documents and transaction records for a defined period following account closure.
• Consent: Where we process your data for optional purposes — such as sending personalised promotional offers or newsletters — we do so on the basis of your freely given, specific, and informed consent. You may withdraw this consent at any time by updating your communication preferences in your account settings or by contacting [email protected].

662zz does not sell, rent, or otherwise disclose your personal data to third parties for their own commercial purposes. However, in order to operate the platform and deliver our services, we share limited categories of data with carefully selected third-party service providers under strict contractual data protection obligations. These providers include:

• Payment processors: bKash, Nagad, Rocket, Upay, and cryptocurrency payment gateway providers receive the transaction data necessary to process your deposit and withdrawal instructions. Each of these providers operates under their own published privacy policy and applicable financial regulation.
• Identity verification providers: Third-party KYC and document verification platforms may process your identity documents on our behalf to confirm their authenticity. These providers are contractually bound to use your data solely for the verification task and to delete or return raw documents upon completion of the verification.
• Game content providers: Software studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive a session token and game-specific gameplay data to deliver game content. These providers do not receive your full registration profile or financial transaction history.
• Cloud hosting and infrastructure providers: Our platform infrastructure is operated on secure cloud servers. Hosting providers process data only as instructed by 662zz and are not permitted to use that data for any independent purpose.
• Analytics and fraud prevention tools: Aggregated and, where possible, anonymised platform usage data is processed by analytics tools to help us understand performance patterns and detect anomalous behaviour. No individually identifiable data is shared with analytics providers beyond what is required for fraud flagging.

In addition to the above, 662zz may disclose personal data to competent authorities or regulators where required to do so by applicable law, court order, or where we have a good-faith belief that disclosure is necessary to prevent fraud, protect the safety of users, or defend against legal claims.

The 662zz platform uses cookies and similar browser-based storage technologies to support the operation, security, and performance of our services. A cookie is a small text file placed on your device by a web server when you visit a site. Cookies allow the server to recognise your device across requests within and between sessions.

Types of Cookies We Use

662zz does not use third-party advertising cookies, retargeting pixels, or social media tracking scripts. You will not find Facebook Pixel, Google Ads remarketing tags, or similar cross-site advertising trackers on the 662zz platform.

You may configure your browser to block or delete cookies. Please note that disabling strictly necessary cookies will impair your ability to log in and use core platform features. Blocking functional or analytical cookies will not prevent you from accessing the platform but may affect certain personalisation features.

662zz retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or for as long as is required by applicable law or legitimate business necessity. The following retention periods apply to the main categories of data we hold:

• Account registration data: Retained for the lifetime of your active account, plus a period of five years following permanent account closure. This retention supports dispute resolution and anti-money-laundering record-keeping obligations.
• KYC and identity documents: Retained for a minimum of five years from the date of verification, or from the date of account closure, whichever is later. Copies are securely deleted at the end of this period.
• Financial transaction records: Retained for seven years following the date of each transaction, in line with standard financial record-keeping practices.
• Customer support communications: Retained for three years from the date of the most recent communication in a given support thread, unless the matter relates to an ongoing dispute or legal claim, in which case records are retained until the matter is fully resolved.
• Device and technical session data: Retained for up to 90 days for active fraud monitoring, then aggregated or anonymised for long-term platform analytics.
• Marketing consent records: Retained for the duration of your account plus two years after withdrawal of consent, to evidence compliance with consent-based processing obligations.

When a retention period expires, 662zz securely deletes or anonymises the relevant data. Anonymised data — from which all personally identifiable information has been removed — may be retained indefinitely for statistical and analytical purposes, as it no longer constitutes personal data.

As a user of the 662zz platform, you have the following rights with respect to your personal data. To exercise any of these rights, please contact the 662zz data team at [email protected] with a clear description of your request. We will acknowledge receipt within two business days and aim to fulfil requests within 30 days.

• Right of access: You may request a copy of the personal data 662zz holds about you, along with information about how it is used, where it is stored, and with whom it has been shared.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update many details directly through your account settings.
• Right to erasure: You may request that 662zz delete your personal data. We will honour such requests unless retention is required by law, by a legitimate business need such as pending dispute resolution, or by our anti-money-laundering record-keeping obligations.
• Right to restrict processing: You may request that 662zz temporarily stop processing certain categories of your data — for example, while a dispute regarding data accuracy is under review — without requesting full deletion.
• Right to data portability: Where processing is based on consent or contractual necessity and carried out by automated means, you may request that your data be provided to you in a structured, commonly used, machine-readable format.
• Right to withdraw consent: For processing activities based on your consent — such as receiving promotional communications — you may withdraw that consent at any time by updating your account preferences or contacting support. Withdrawal does not affect the legality of prior processing.
• Right to object: You may object to processing carried out on the basis of 662zz's legitimate interests, including profiling for fraud detection. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.

662zz implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Key measures include:

• Transport Layer Security (TLS): All data in transit between your browser or app and the 662zz servers is encrypted using industry-standard TLS 1.2 or higher. You can verify this via the padlock icon in your browser's address bar when accessing https://662zz.app.
• Data encryption at rest: Sensitive data categories — including identity documents, financial records, and hashed account credentials — are stored in encrypted form on our servers. Encryption keys are managed separately from the encrypted data they protect.
• Access controls: Access to personal data within 662zz's internal systems is restricted on a strict need-to-know basis. Staff members are granted the minimum level of data access required to perform their designated role. All internal data access is logged and subject to periodic audit.
• Two-factor authentication: 662zz supports and strongly recommends the use of two-factor authentication (2FA) on your account. Enabling 2FA significantly reduces the risk of unauthorised account access in the event that your password is compromised.
• Vulnerability management: The 662zz platform undergoes regular security assessments. Identified vulnerabilities are prioritised and remediated according to their severity rating.
• Incident response: In the event of a confirmed data security incident that poses a risk to your personal data, 662zz will notify affected users via their registered email address within a reasonable timeframe and will take immediate steps to contain the breach and prevent further exposure.

While 662zz takes all commercially reasonable precautions to protect your data, no internet-based system can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials and for promptly notifying us if you suspect any unauthorised access to your 662zz account.

662zz reviews this Privacy Policy periodically and may update it to reflect changes in our data processing practices, changes in applicable law, or improvements to our platform services. When material changes are made — meaning changes that significantly affect how we collect, use, or share your personal data — we will notify registered users via a notice on the platform and, where appropriate, via the email address registered to your account.

The "Last Updated" date at the top of this document reflects the date on which the most recent version of this Privacy Policy came into effect. We encourage you to review this page periodically so that you remain informed about how 662zz handles your personal data. Continued use of the 662zz platform following the publication of a revised Privacy Policy constitutes your acknowledgement of the changes.

Minor editorial changes — including corrections to grammar, formatting, or clarification of existing language without substantive change to meaning — do not constitute material updates and may be made without specific notification. The operative data processing practices described in this policy remain unchanged by such editorial corrections.

If you have questions about this Privacy Policy, about how 662zz handles your personal data, or if you wish to exercise any of your privacy rights as described in Section 7, please contact us at [email protected]. Our support team is available around the clock, operating on Bangladesh Standard Time (BST, UTC+6).