l66 Privacy Policy — How We Collect, Use, and Protect Your Personal Data
l66 is committed to protecting the privacy and personal data of every player on our platform. This Privacy Policy explains in plain terms what data we collect, why we collect it, how it is used, who it may be shared with, and what rights you have as a data subject. Please read this document carefully alongside our Terms & Conditions.
This Privacy Policy applies to all users of the l66 platform accessible at l66.club, including all products and services offered through that domain. By registering an account or using any l66 service, you acknowledge that you have read and understood this policy. Where l66 processes your personal data, it does so in accordance with the principles of data minimisation, purpose limitation, transparency, and security described in this document.
Who this policy covers: This Privacy Policy applies to all registered l66 players in Bangladesh and any other jurisdiction where l66 operates. It covers all personal data collected through the l66 website, mobile browser experience, customer support channels, and any other interaction you have with l66. It does not apply to third-party websites or services linked from the l66 platform — those parties operate under their own privacy policies.
Data Minimisation
l66 collects only the personal data that is strictly necessary for the purposes described in this policy. We do not request or retain data beyond what is needed to operate the platform, comply with legal obligations, or deliver the services you have requested.
No Data Selling
l66 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. Any sharing of data with external parties is limited to what is required for platform operations, payment processing, fraud prevention, or legal compliance.
Your Data, Your Rights
You have the right to access, correct, and in certain circumstances request deletion of your personal data held by l66. To exercise any of these rights, contact our support team at [email protected] with your registered account details and a clear description of your request.
1. Data We Collect
l66 collects personal data from you at various points during your relationship with us. The categories of data collected, and the circumstances in which they are collected, are set out in detail below. We collect data both directly from you (for example, when you complete the registration form) and automatically through your use of the platform (for example, through cookies and server logs).
| Data Category | Specific Data Points | Collection Method |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, national ID number, passport number | Registration form; KYC verification submission |
| Contact Data | Email address, mobile phone number, residential address (city, district, division) | Registration form; account settings updates |
| Financial Data | bKash/Nagad/Rocket account number, bank account details, transaction history, deposit and withdrawal records | Payment processing; cashier interactions |
| Gaming Data | Game history, bet amounts, win/loss records, session duration, preferred game categories | Automated platform logging |
| Technical Data | IP address, device type, browser type and version, operating system, screen resolution, time zone | Automatic collection via server logs and cookies |
| Communications Data | Support chat transcripts, email correspondence, complaint records | Customer support interactions |
| Verification Documents | Scanned copies or photographs of NID, passport, utility bills, payment method screenshots | KYC verification process |
Sensitive data: l66 does not intentionally collect special categories of sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data. If any such data is inadvertently provided to us through a support communication or document upload, it will be deleted as soon as it is identified and will not be used for any purpose.
Where you choose not to provide personal data that l66 requires in order to fulfil a legal obligation or to deliver a requested service — such as KYC identity documentation — l66 may be unable to open your account, process withdrawals, or continue providing services to you. l66 will inform you at the point of data collection if provision of specific data is mandatory or voluntary.
2. How We Use Your Data
l66 processes your personal data only for specific, legitimate purposes. We do not use your data in ways that are incompatible with the purposes for which it was collected. The table below sets out the primary purposes for which l66 uses your personal data, together with the legal basis relied upon for each processing activity.
Account Management & Service Delivery
- Creating and maintaining your l66 player account.
- Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and supported banks.
- Providing access to casino games, sports betting markets, live dealer tables, and other l66 products.
- Sending transactional communications (deposit confirmations, withdrawal notifications, account alerts).
- Responding to customer support queries and resolving complaints.
Legal Compliance & Fraud Prevention
- Verifying your identity and age as required for KYC compliance (18+ requirement).
- Detecting, investigating, and preventing fraudulent transactions, money laundering, and other financial crime.
- Complying with applicable laws, court orders, and regulatory requirements.
- Sharing data with law enforcement or regulatory bodies where legally required.
- Enforcing the l66 Terms & Conditions and other platform policies.
Platform Improvement & Analytics
- Analysing aggregate usage patterns to improve platform performance, game selection, and user experience.
- Conducting internal research and statistical analysis using anonymised or pseudonymised data sets.
- Testing new features, promotions, and platform updates before broader rollout.
- Monitoring platform uptime, security incidents, and technical errors.
Marketing & Promotions
- Sending promotional offers, bonus notifications, and VIP programme updates to players who have opted in to marketing communications.
- Personalising promotional content based on your gaming history and preferences, where consent has been given.
- You may opt out of marketing communications at any time by contacting [email protected] or using the unsubscribe mechanism in any marketing email.
- Opting out of marketing does not affect transactional or account communications.
3. Data Sharing & Third Parties
l66 does not sell, rent, or otherwise transfer your personal data to unaffiliated third parties for their own commercial purposes. However, in order to operate the platform and deliver services to you, l66 shares certain categories of personal data with trusted third-party service providers and, where legally required, with regulatory or law enforcement bodies. All third parties who receive data from l66 are required to handle that data in accordance with appropriate data protection standards.
Categories of Recipients
- Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and other payment partners receive the minimum financial data necessary to process your transactions.
- Identity verification providers: Third-party KYC services may process your identity documents to assist with age and identity verification.
- Game content providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session data for game integrity and RNG certification purposes.
- Fraud prevention services: Risk management and anti-fraud platform providers may receive technical data (IP address, device fingerprint) to detect suspicious activity.
- IT infrastructure providers: Cloud hosting, content delivery, and data storage providers who process data on l66's behalf under strict data processing agreements.
Regulatory & Legal Disclosures
- l66 may disclose personal data to law enforcement agencies, courts, or regulatory authorities where required by applicable law or in response to a lawful request.
- In the event of a suspected financial crime, l66 may report relevant data to the Bangladesh Financial Intelligence Unit (BFIU) or other competent authorities without prior notice to the affected player.
- Where l66 undergoes a business restructuring, merger, or acquisition, personal data held by l66 may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and your rights will be preserved.
- l66 will never voluntarily share your data with advertisers, data brokers, or social media platforms for their own commercial use.
International data transfers: Some of l66's third-party service providers operate outside Bangladesh. Where personal data is transferred internationally, l66 ensures that appropriate safeguards are in place, such as contractual data protection clauses, to maintain a level of protection consistent with the standards described in this policy.
4. Cookies & Tracking Technologies
l66 uses cookies and similar tracking technologies (including local storage, session storage, and web beacons) to operate the platform, remember your preferences, maintain your login session, and gather analytical data about how the platform is used. By continuing to use the l66 platform, you consent to the use of cookies as described in this section.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Maintain your authenticated session, remember login state, enforce security tokens, support CSRF protection | Session (deleted on browser close) |
| Functional | Remember your language preference, display preferences, and previously selected game categories | Up to 12 months |
| Analytics | Measure page visits, session duration, bounce rates, and feature usage to improve platform performance | Up to 24 months |
| Fraud Prevention | Device fingerprinting, IP logging, and behavioural analysis to detect account takeover and financial fraud | Up to 12 months |
You can control or disable cookies through your browser settings. Please note that disabling strictly necessary cookies will prevent the l66 platform from functioning correctly — you may be unable to log in or maintain an active session. Disabling functional or analytics cookies will not prevent you from using the platform but may affect your experience. Instructions for managing cookies are available in the help documentation of all major browsers.
No cross-site tracking: l66 does not use third-party advertising cookies or behavioural tracking pixels that follow you across other websites outside the l66 platform. Our cookie use is limited to what is necessary to operate, secure, and improve our own platform.
5. Data Retention
l66 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply to the main categories of personal data held by l66:
Active Account Data
Personal data associated with an active l66 account — including identity data, contact data, and gaming history — is retained for the duration of the account relationship and for a minimum period of five years following account closure. This retention period reflects standard financial record-keeping obligations applicable to online gaming platforms.
Financial Transaction Records
Records of all deposits, withdrawals, and internal transfers are retained for a minimum of seven years from the date of the transaction. This retention period is required to support anti-money laundering compliance, audit obligations, and dispute resolution processes. Financial records cannot be deleted on request before this retention period expires.
Support & Communications Data
Customer support transcripts and email correspondence are retained for three years from the date of the interaction. This period allows l66 to reference prior communications in the event of an escalated complaint or dispute. Communications data related to an ongoing legal matter may be retained for longer at the discretion of l66's legal team.
Data Deletion After Retention Period
Upon expiry of the applicable retention period, l66 will securely delete or anonymise personal data so that it can no longer be associated with any identifiable individual. Anonymised, aggregated data — from which no individual can be identified — may be retained indefinitely for statistical and research purposes without being subject to this policy.
6. Your Privacy Rights
As an l66 player, you have a number of rights in relation to the personal data we hold about you. These rights are described below. To exercise any of these rights, please contact the l66 privacy team at [email protected], clearly stating the right you wish to exercise and providing sufficient information to verify your identity. l66 will respond to all valid requests within 30 calendar days.
Right of Access
You have the right to request a copy of the personal data l66 holds about you, along with information about how it is processed. l66 will provide this in a structured, commonly used format.
Right to Rectification
If any personal data l66 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Contact support with the specific details you wish to update.
Right to Erasure
In certain circumstances, you may request that l66 delete your personal data. This right is subject to legal retention obligations — financial records, for example, cannot be deleted before the mandatory retention period has elapsed.
Right to Restrict Processing
You may request that l66 restrict the processing of your data in specific circumstances, such as where you contest the accuracy of the data or where processing is unlawful but you prefer restriction over deletion.
Right to Data Portability
Where l66 processes your data on the basis of your consent or for the performance of a contract, you have the right to receive that data in a machine-readable format and, where technically feasible, to have it transferred directly to another service provider.
Right to Object
You have the right to object at any time to the processing of your personal data for direct marketing purposes. You may also object to other processing activities where l66 relies on legitimate interests as the legal basis, though this right is subject to a balancing assessment.
7. Data Security Measures
l66 takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, accidental loss, alteration, or disclosure. While no online platform can guarantee absolute security, l66 applies industry-standard practices and continuously reviews its security posture to address emerging threats.
Technical Safeguards
- All data transmitted between your browser and the l66 platform is encrypted using TLS 1.2 or higher (256-bit SSL encryption).
- Player account passwords are stored using strong one-way hashing algorithms — l66 staff cannot view your password in plain text.
- Access to systems containing personal data is restricted to authorised personnel on a need-to-know basis using role-based access controls.
- l66 maintains firewall protections, intrusion detection systems, and regular vulnerability scanning across its infrastructure.
- Payment data is handled via PCI-DSS compliant payment processing partners — l66 does not store full card numbers on its own servers.
Organisational Safeguards
- All l66 staff and contractors with access to personal data are subject to confidentiality obligations.
- l66 conducts regular internal reviews of data handling practices and access logs.
- Third-party data processors are assessed for security compliance before engagement and are bound by contractual data protection obligations.
- In the event of a data breach that is likely to result in risk to your rights, l66 will notify affected players without undue delay and take immediate steps to contain and remediate the breach.
Your responsibility: The security of your l66 account also depends on you. Please use a strong, unique password for your l66 account, do not share your login credentials with anyone, and contact l66 support immediately at [email protected] if you suspect your account has been accessed without your authorisation. l66 will never ask you to disclose your password via email or chat.
8. Contact & Privacy Enquiries
If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which l66 processes your personal data, please contact the l66 privacy team using the details below. l66 takes all privacy enquiries seriously and aims to acknowledge all communications within 24 hours and provide a substantive response within 30 calendar days.
Privacy Contact Details
- Email: [email protected] (please include "Privacy Enquiry" in the subject line)
- Response time: Acknowledgement within 24 hours; full response within 30 calendar days
- Support hours: 24/7, Bangladesh Standard Time (BST, UTC+6)
- Languages: English and Bengali support available
l66 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered players via a prominent notice on the l66 platform and, where appropriate, by email to your registered address. The date of the most recent revision is displayed at the top of this document. Continued use of the l66 platform following notification of a change to this policy constitutes your acceptance of the revised terms. We encourage you to review this page periodically to stay informed about how l66 protects your personal data.
For matters relating to responsible gaming, self-exclusion, deposit limits, or account closure for wellbeing reasons, please visit the Responsible Gaming page or review the Terms & Conditions for full account management guidance.
Your Privacy Is Protected at l66
We are committed to keeping your data safe while you enjoy the best of online casino and sports betting in Bangladesh. Have a question? Our team is available around the clock to help.