h666 Privacy Policy

This Privacy Policy (the "Policy") describes how h666 (referred to throughout this document as "h666", "we", "us", or "our") collects, uses, stores, and discloses personal data in connection with the operation of the h666 online betting and casino platform, accessible at https://h666.ws and any associated mobile interfaces (collectively, the "Platform").

This Policy applies to all individuals who visit, register on, or otherwise interact with the h666 Platform, including registered players, prospective players who browse the Platform without registering, and individuals who contact h666 customer support (collectively referred to as "you" or "the User").

h666 is designed to serve adult players located in Bangladesh. All data processing activities described in this Policy are conducted in accordance with applicable data protection principles, including the principles of lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, and integrity and confidentiality.

This Policy should be read alongside h666's Terms & Conditions and Responsible Gaming Policy, all of which together constitute the full framework of obligations and rights governing your use of the h666 Platform.

h666 collects personal data through several channels, including your registration form, your ongoing use of the Platform, your communications with our support team, and through automated technical means such as cookies and server logs. The categories of personal data we collect are as follows:

2.1 Registration & Identity Data

• Full legal name
• Date of birth (for age verification purposes)
• Registered mobile number (used as primary account identifier)
• Email address
• Residential address
• National ID number or passport number (collected during KYC verification)
• Scanned copies of government-issued photo ID and proof of address documents

2.2 Financial & Transaction Data

• bKash, Nagad, Rocket, or Upay wallet numbers used for deposits and withdrawals
• Bank account numbers and bank names where bank transfer is used
• Deposit amounts, dates, and transaction reference numbers
• Withdrawal requests, amounts, and settlement records
• Bonus and promotional credit history

2.3 Gameplay & Betting Data

• Betting history across all markets (cricket, football, kabaddi, live casino, slots, fishing games)
• Game session durations and timestamps
• Win/loss records and account balance history
• Responsible gaming settings you have configured (deposit limits, session reminders, cooling-off periods)

2.4 Technical & Device Data

• IP address at time of login and account activity
• Device type, operating system, and browser version
• Mobile network carrier (where relevant)
• Geolocation data (city-level, derived from IP address)
• Cookie identifiers and session tokens

2.5 Communications Data

• Records of live chat conversations with h666 support agents
• Email correspondence sent to or received from [email protected]
• Responses to surveys or feedback forms (where you choose to participate)

h666 uses your personal data for the following specific purposes. We process data only for purposes that are compatible with the reason it was originally collected:

h666 does not use your personal data to make fully automated decisions that have a significant legal or similarly significant effect on you without human review. Automated risk-scoring systems used in fraud detection are always subject to human oversight when they result in account action.

h666 processes your personal data on the following legal bases:

• Contractual Necessity: Processing your registration data, KYC documents, and financial transaction data is necessary to provide the services described in h666's Terms & Conditions. Without this processing, we cannot create or maintain your account or process your deposits and withdrawals.
• Legal Obligation: h666 is required to collect and retain certain data to fulfil obligations related to anti-money laundering (AML) compliance, fraud prevention, and responsible gaming requirements. This processing is mandatory and cannot be opted out of by the player.
• Legitimate Interests: h666 processes technical and device data for fraud detection, platform security, and service improvement purposes. These legitimate interests are balanced against player privacy rights and do not override the fundamental rights of the individuals concerned.
• Consent: Where h666 sends you marketing communications about promotions, new games, or seasonal offers (such as BPL betting specials, Eid promotions, or Pohela Boishakh campaigns), this processing is based on your consent. You may withdraw your consent to marketing communications at any time by contacting [email protected] or using the unsubscribe option in any marketing email you receive.

h666 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and gather analytical data that helps us understand how players use the Platform. The following categories of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They maintain your logged-in session, remember your language and display preferences, and ensure the security of your session. These cookies cannot be disabled without preventing you from using the Platform.
• Functional Cookies: These cookies remember your preferences (such as your preferred deposit method or responsible gaming settings) and personalise your experience within the h666 Platform. Disabling these cookies may reduce the convenience of your experience.
• Analytical Cookies: h666 uses anonymised analytics data to understand platform usage patterns, identify technical errors, and optimise the user experience. This data does not identify individual players and is aggregated before any analysis is performed.
• Security Cookies: Short-lived cookies used to detect and prevent fraudulent login attempts, session hijacking, and other security threats. These are essential and cannot be disabled.

h666 does not use third-party advertising cookies or tracking pixels that share your browsing behaviour with external advertising networks. The cookies set by h666 are first-party cookies and are limited to those described above.

h666 does not sell, rent, or trade your personal data to any third party for commercial purposes. We share your information only in the following limited and controlled circumstances:

• Payment Processors: When you make a deposit or request a withdrawal, your financial data (wallet number, transaction amount, reference) is shared with the relevant payment provider — bKash, Nagad, Rocket, Upay, or your bank — to the extent necessary to complete the transaction. Each of these providers operates under its own privacy policy and security standards.
• Identity Verification Partners: h666 may use third-party KYC verification services to cross-reference identity documents you submit during account verification. These partners process your data solely for the purpose of verification and are prohibited from using it for any other purpose.
• Game Content Providers: Game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, Habanero, and Spribe may receive anonymised session data necessary to deliver their game content. These providers do not receive your identity or financial data unless required for a specific game feature with your explicit awareness.
• IT Infrastructure Providers: h666's platform is hosted on secure cloud infrastructure. The service providers operating this infrastructure have access to data only as required to maintain server availability and are bound by strict data processing agreements.
• Legal & Regulatory Authorities: h666 will disclose your personal data to law enforcement agencies, financial intelligence authorities, or other government bodies where we are legally required to do so — for example, in response to a valid court order, a regulatory investigation, or a mandatory suspicious transaction report.
• Fraud Prevention Networks: h666 may share data with fraud prevention databases and platforms to protect the integrity of our platform and the wider online gaming industry. Information shared through these channels is processed only for fraud and money laundering prevention purposes.

h666 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any legal requirements that mandate minimum retention periods. The following retention schedule applies:

Upon expiry of the applicable retention period, personal data is either securely deleted from h666's systems or anonymised in a manner that makes it impossible to re-identify the individual to whom it relates. Anonymised aggregated data may be retained indefinitely for statistical and platform improvement purposes.

As an h666 player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request". h666 will respond to all verified requests within 30 days.

h666 operates a strict 21+ policy. The Platform is not directed at, and is not intended to be used by, any person under the age of 21. h666 does not knowingly collect personal data from individuals under 21 years of age.

If h666 discovers or is credibly informed that it has collected personal data from a person who is under 21 years of age, it will take immediate steps to:

• Suspend the account in question pending investigation.
• Delete all personal data associated with the account from its active systems.
• Reverse any financial transactions associated with the underage account where technically possible.
• Report the matter to relevant authorities where required by applicable law.

Age verification is conducted as part of the standard KYC process. h666 reserves the right to request additional age verification documentation at any point during a player's account lifetime if there is any reason to question whether the player meets the minimum age requirement.

h666 takes the security of your personal data seriously and implements a comprehensive set of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, alteration, or disclosure. Our security framework includes the following measures:

• Encryption in Transit: All data transmitted between your device and the h666 Platform is protected using TLS 1.2 or higher. This ensures that your login credentials, payment details, and personal information cannot be intercepted during transmission.
• Encryption at Rest: Sensitive data stored on h666 servers — including identity documents and financial records — is encrypted using AES-256 encryption. Encryption keys are stored separately from the encrypted data and are subject to strict access controls.
• Access Controls: Access to systems containing personal data is restricted to authorised h666 staff on a strict need-to-know basis. All staff with access to player data undergo background screening and complete data protection training. Multi-factor authentication is enforced for all administrative access.
• Intrusion Detection: h666 operates continuous network monitoring and intrusion detection systems that identify and respond to unusual access patterns, potential breaches, and denial-of-service attempts in real time.
• Regular Security Audits: h666 engages independent security specialists to conduct penetration testing and vulnerability assessments on a regular basis. Any identified vulnerabilities are remediated according to a prioritised schedule based on risk severity.
• Incident Response: In the event of a data security incident that is likely to result in a risk to the rights and freedoms of affected players, h666 will notify affected individuals without undue delay and will take immediate remediation steps to contain and resolve the incident.

h666 reserves the right to update or amend this Privacy Policy at any time. Updates may be made to reflect changes in applicable law, changes in our data processing activities, improvements to our platform, or in response to guidance from data protection authorities.

When material changes are made to this Policy, h666 will notify registered players through one or more of the following channels:

• A notice displayed prominently on the h666 Platform upon your next login.
• An email notification sent to the address registered on your account.
• An SMS notification sent to your registered mobile number.

The date at the top of this Privacy Policy (the "Last Updated" date) will always reflect when the most recent revision was made. We encourage you to review this Policy periodically to stay informed about how h666 protects your personal data.

Your continued use of the h666 Platform after a revised Privacy Policy has been made available to you constitutes your acceptance of the updated terms. If you do not agree with any changes to this Policy, you should discontinue use of the Platform and may request closure of your account by contacting [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or to how h666 handles your personal data, please contact our Data Protection team using the following details:

• Email: [email protected] (subject line: "Privacy Enquiry")
• Response Time: h666 aims to respond to all privacy-related enquiries within 2 business days (Bangladesh Standard Time, UTC+6).
• Support Hours: 24 hours a day, 7 days a week, including all Bangladesh public holidays.

If you have submitted a data rights request (as described in Section 8) and are not satisfied with h666's response, or if you believe that your personal data has been processed in a manner that is inconsistent with this Privacy Policy, you have the right to escalate your complaint by contacting h666's senior compliance team at [email protected] with the subject line "Privacy Complaint — Escalation".

h666 will maintain a record of all privacy complaints received and the actions taken to resolve them, as part of our ongoing commitment to accountability and continuous improvement in our data protection practices.