eg66 Privacy Policy

1 Who We Are & How to Contact Us

eg66 ("we", "us", "our", "the Company") operates the online betting and casino platform available at https://eg66.io (the "Platform"). eg66 is the data controller responsible for the personal data collected through the Platform. We are committed to protecting the privacy and security of all individuals who access or use our services, including registered players, prospective players, and visitors to the Platform.

This Privacy Policy applies to all personal data collected, processed, or stored by eg66 in connection with your use of the Platform, including account registration, deposits and withdrawals, betting and gaming activity, customer support interactions, and promotional communications. It should be read alongside our Terms & Conditions and our Responsible Gaming Policy.

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact our Data Support team at the details provided in Section 15 of this document.

2 What Personal Data We Collect

The categories of personal data that eg66 may collect and process about you include, but are not limited to, the following:

We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data. If any such data is incidentally shared with us (for example, in a customer support message), it will be deleted as soon as it is identified as not being required for any legitimate processing purpose.

3 How We Collect Your Data

eg66 collects personal data through the following primary channels:

• Direct interactions: Data you actively provide when you create an account, complete identity verification, make a deposit or withdrawal, contact our support team, respond to a survey, or enter a promotion.
• Automated technologies: Data collected automatically when you access the Platform, including server logs, session cookies, device fingerprinting data, and usage analytics. See Section 9 for full details on cookies.
• Payment processors: Transaction confirmation data, payment status, and fraud-screening outcomes received from bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard when you initiate a deposit or withdrawal.
• Identity verification providers: Data returned by third-party KYC (Know Your Customer) service providers when we request verification of your identity documents or address in connection with anti-money-laundering obligations.
• Game studios: Aggregated game session outcomes, RTP data, and technical event logs received from our game content providers, including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi, for the purpose of dispute resolution and platform integrity checks.
• Publicly available sources: In limited circumstances, eg66 may cross-reference data you have provided against publicly available records (such as sanctions lists or politically exposed persons databases) for compliance purposes.

4 Legal Bases for Processing

eg66 processes personal data only where a valid legal basis exists. The legal bases we rely on are as follows:

• Contractual necessity: Processing required to create and manage your account, process payments, settle bets, and deliver the Platform services you have contracted for.
• Legal obligation: Processing required to comply with applicable anti-money-laundering laws, age verification obligations, fraud prevention duties, and requests from competent regulatory authorities.
• Legitimate interests: Processing for platform security, fraud detection, responsible gaming monitoring, improving our services, and internal analytics — where these interests are not overridden by your data-protection rights.
• Consent: Processing for optional marketing communications, non-essential cookies, and personalised promotional offers, where you have provided a clear, specific, and freely given consent that you may withdraw at any time.

5 How We Use Your Personal Data

The personal data collected by eg66 is used for the following specific purposes:

• Account management: Creating, maintaining, and closing your registered account; authenticating your identity on login; enforcing account security including two-factor authentication.
• Payment processing: Facilitating deposits to and withdrawals from your account via your chosen payment method; reconciling transaction records; managing currency conversion where applicable.
• Identity verification and KYC: Verifying that you meet the minimum age requirement of 21 years; confirming your identity and address in compliance with anti-money-laundering obligations; screening against sanctions lists.
• Bet and game settlement: Recording, settling, and, where necessary, investigating the outcome of bets, wagers, and casino game sessions. Maintaining an accurate audit trail of your gaming activity.
• Responsible gaming: Monitoring betting patterns to identify indicators of problem gambling; enforcing self-exclusion periods, deposit limits, and cooling-off requests; contacting Players we have reasonable concern about.
• Fraud prevention and security: Detecting, investigating, and preventing unauthorised account access, payment fraud, bonus abuse, collusion, and other prohibited activities.
• Customer support: Responding to queries, resolving complaints, and maintaining records of support interactions for training and quality-assurance purposes.
• Marketing communications: Sending promotional emails, bonus notifications, and platform update announcements to Players who have opted in to receive such communications. You may unsubscribe at any time.
• Platform improvement: Analysing aggregated usage data to improve the Platform's performance, user experience, game selection, and payment options.
• Legal compliance: Fulfilling our obligations under applicable laws; responding to lawful requests from courts, regulators, and law enforcement agencies.

6 Data Retention Periods

eg66 retains personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, or as required by law. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any identifiable individual. Anonymised or aggregated data may be retained indefinitely for statistical and analytical purposes without restriction.

7 Sharing Your Data with Third Parties

eg66 does not sell, rent, or trade personal data to third parties for commercial or advertising purposes. We share personal data only where necessary for the following purposes, and only with recipients who are subject to appropriate data-protection obligations:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard, solely for the purpose of processing your deposits and withdrawals.
• Identity verification providers: Third-party KYC service providers engaged to verify identity documents and screen against sanctions and politically exposed persons lists in compliance with applicable AML obligations.
• Game content studios: Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi, and other licensed game providers, for the purpose of delivering game sessions and resolving technical disputes. These providers receive only the minimum data required (typically a pseudonymous session identifier, stake amount, and outcome) and are contractually prohibited from using your data for any other purpose.
• IT infrastructure and hosting providers: Cloud hosting, content-delivery, and cybersecurity service providers that support the operation of the Platform, all operating under strict data-processing agreements with eg66.
• Legal and regulatory authorities: Courts, regulators, law enforcement agencies, and financial intelligence units where eg66 is required to disclose personal data by law, court order, or applicable regulatory directive.
• Professional advisers: Lawyers, auditors, and accountants acting in a professional capacity, who are bound by confidentiality obligations.
• Business successors: In the event of a merger, acquisition, or sale of all or substantially all of eg66's assets, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections. You will be notified of any such transfer via the email address registered on your account.

8 International Data Transfers

Some of the third-party service providers with whom eg66 shares data operate outside of Bangladesh. Where personal data is transferred to a country that does not provide an equivalent level of data protection, eg66 will implement appropriate safeguards, which may include:

• Data processing agreements incorporating standard contractual clauses that require the recipient to protect your personal data to a standard equivalent to that applied by eg66.
• Transfers to recipients in countries that have been assessed as providing adequate data protection standards by recognised international frameworks.
• Technical measures including end-to-end encryption to protect data in transit and at rest, regardless of the recipient's jurisdiction.

If you wish to obtain further information about the safeguards applied to international data transfers, please contact our Data Support team at the address provided in Section 15.

9 Cookies & Tracking Technologies

eg66 uses cookies and similar technologies to operate the Platform and improve your experience. A cookie is a small text file placed on your device when you visit the Platform. The following cookie categories are used:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in while you navigate between pages, and security tokens that protect against cross-site request forgery. These cookies cannot be disabled without preventing use of the Platform.
• Functional cookies: Used to remember your preferences, such as your chosen language, display settings, and last-visited game category. These improve your experience but are not essential to Platform operation.
• Analytics cookies: Used to collect aggregated, anonymised data about how Players use the Platform — such as which pages are most visited and where users encounter errors — to help us improve the Platform. This data does not identify individual users.

eg66 does not use third-party advertising cookies, social-media tracking pixels, or cross-site behavioural tracking technologies. You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in to your account.

10 Security Measures

eg66 takes the security of your personal data seriously and implements a layered set of technical and organisational measures to protect it against unauthorised access, loss, alteration, or disclosure. These measures include:

• SSL/TLS encryption: All data transmitted between your device and the Platform is encrypted in transit using industry-standard TLS protocols.
• Encrypted data storage: Sensitive data including financial credentials and identity documents is stored in encrypted form on secured servers with strict access controls.
• Password hashing: Account passwords are stored exclusively as salted cryptographic hashes. eg66 staff cannot access your plaintext password under any circumstances.
• Access controls: Internal access to personal data is restricted on a strict need-to-know basis. All access events are logged and subject to periodic audit.
• Two-factor authentication: Optional 2FA is available for all registered accounts as an additional layer of login security.
• Intrusion detection: The Platform is monitored 24/7 for anomalous activity, potential intrusion attempts, and data breach indicators.
• Third-party audits: eg66 engages independent security professionals to conduct periodic vulnerability assessments and penetration tests of the Platform infrastructure.

Despite these measures, no security system is entirely impenetrable. In the event of a data breach that is likely to result in a risk to your rights and freedoms, eg66 will notify affected Players without undue delay and will take all reasonable steps to mitigate the impact of the breach.

11 Your Rights & How to Exercise Them

Subject to applicable law, you hold the following rights in respect of the personal data that eg66 holds about you:

• Right of access: You may request a copy of the personal data we hold about you, along with information about how it is used and with whom it is shared.
• Right to rectification: You may request that we correct any inaccurate or incomplete personal data held about you without undue delay.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing was unlawful. This right is subject to our legal retention obligations (see Section 6).
• Right to restriction: You may request that we restrict processing of your personal data in certain circumstances, for example while a rectification request is being evaluated.
• Right to data portability: You may request a copy of the personal data you have provided to us in a structured, commonly used, machine-readable format, for transmission to another data controller.
• Right to object: You may object to processing of your personal data where it is based on legitimate interests, including profiling for responsible gaming monitoring purposes, by contacting us with the specific grounds of your objection.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please submit your request to [email protected] with the subject line "Data Rights Request" and include your full name and the email address registered on your account. We will respond within 30 days of receipt. We may request proof of identity before processing your request to protect your data from unauthorised disclosure.

12 Children & Minors

The eg66 Platform is strictly for adults aged 21 years and above. eg66 does not knowingly collect personal data from any person under the age of 21. If you are a parent or guardian and believe that a minor has registered on the Platform or submitted personal data to eg66, please contact us immediately at [email protected]. We will promptly investigate the matter, close any underage account identified, and delete the associated personal data.

eg66 employs age-verification procedures at the point of registration and may request documentary proof of age at any time during a Player's use of the Platform. We operate a zero-tolerance policy on underage gambling and take all reasonable steps to prevent minors from accessing our services.

13 Links to Third-Party Services

The eg66 Platform may contain links to third-party game studios, payment provider portals, or other external services. This Privacy Policy applies only to the eg66 Platform and does not govern the data practices of any third-party website or service. We encourage you to review the privacy policies of any third-party service you access via a link from the Platform. eg66 accepts no responsibility or liability for the content or privacy practices of third-party sites.

14 Changes to This Privacy Policy

eg66 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform functionality. Material changes will be communicated to registered Players via the email address on file at least 7 days before the amended policy takes effect. The current version of this Privacy Policy, marked with an effective date, is always available on the Platform at https://eg66.io/privacy-policy.

Your continued use of the Platform after the effective date of any amendment constitutes your acknowledgement of, and agreement to, the revised Privacy Policy. If you do not agree with any material change, you should cease using the Platform and close your account before the change takes effect.

15 Contact & Data Requests

For all privacy-related queries, data rights requests, or concerns about how eg66 handles your personal data, please contact our Data Support team using the information below. Our support team operates 24 hours a day, 7 days a week, on Bangladesh Standard Time (BST, UTC+6).

• Email: [email protected] (plain text — not a clickable link)
• Subject line for data rights requests: "Data Rights Request"
• Response target: Within 30 days for data rights requests; within 24 hours for general privacy queries
• Language: English