eg666 Privacy Policy

1. Introduction & Scope

This Privacy Policy ("Policy") describes how eg666 ("eg666", "we", "us", "our") collects, uses, stores, shares, and protects personal data in connection with your use of the online gaming platform accessible at https://eg666.io (the "Platform"). This Policy applies to all registered players, prospective players who browse the Platform, and any individual who contacts eg666 through our support channels.

By registering an account, accessing the Platform, or otherwise engaging with eg666's services, you acknowledge that you have read and understood this Policy. If you do not agree with how we handle your personal data, you must refrain from using the Platform and, if you hold an account, contact us to arrange its closure.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming guidelines, both of which are incorporated by reference.

2. Data Controller

For the purposes of this Policy, the data controller responsible for the personal data of eg666 players is the operator of the eg666 Platform. eg666 is the entity that determines the purposes and means of processing your personal data. All data-related enquiries, subject access requests, and complaints should be directed to eg666 using the contact details set out in Section 14 of this Policy.

eg666 operates as a safe and reliable platform and takes its responsibilities as a data controller seriously. We maintain internal data-protection policies, conduct periodic reviews of our data-handling practices, and ensure that all staff members who have access to personal data are bound by strict confidentiality obligations.

3. Data We Collect

eg666 collects personal data from you through several channels: directly when you register an account or contact support; automatically when you use the Platform; and from third parties such as payment providers and identity verification services. The categories of personal data we collect are described below.

3.1 Registration & Identity Data

When you open an eg666 account, we collect the information you provide in the registration form, including your full legal name, date of birth, residential address (including city — for example, Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar), email address, and mobile phone number.

3.2 Identity Verification (KYC) Data

To comply with age verification and anti-money-laundering obligations, eg666 requires players to undergo a Know Your Customer ("KYC") process. During KYC we may collect copies of government-issued identity documents such as your National Identity Card (NID), passport, or driving licence, as well as documents confirming your residential address and, where required, your source of funds.

3.3 Financial & Transaction Data

When you make a deposit or withdrawal, eg666 collects data relating to that transaction, including the payment method used (such as bKash, Nagad, Rocket, Upay, Visa, or Mastercard), the transaction amount in Bangladeshi Taka (BDT), the transaction date and time, and associated reference numbers. eg666 does not store full card numbers or mobile banking PINs — these are handled exclusively by the relevant payment provider.

3.4 Gaming Activity Data

eg666 records your activity on the Platform, including games played, bets placed (including sports markets such as BPL, IPL, and T20 World Cup fixtures), wager amounts, outcomes, session durations, and responsible gaming tool settings. This data is used to operate your account, resolve disputes, and monitor for problem gambling indicators.

3.5 Technical & Usage Data

When you access the Platform, our servers automatically collect certain technical data, including your IP address, browser type and version, operating system, device identifiers, referring URL, pages viewed, time spent on each page, and error logs. This information is used for security monitoring, fraud prevention, and aggregate analytics.

3.6 Communications Data

If you contact eg666 via email, WhatsApp, or live chat, we retain a record of that correspondence, including the content of your message, the date and time of contact, and any attachments. This data is used to manage your query, maintain support quality, and resolve any subsequent disputes.

4. How We Use Your Data

eg666 uses the personal data we collect for the following specific purposes:

• Account Management: To create, maintain, and administer your eg666 account, including processing login requests, managing your balance, and applying responsible gaming settings you configure.
• Identity Verification: To confirm that you meet the minimum age requirement of 21 years and to comply with our KYC obligations, including verifying the identity documents you submit.
• Payment Processing: To facilitate deposits and withdrawals via your chosen payment method (bKash, Nagad, Rocket, Upay, Visa, or Mastercard) and to maintain accurate financial records of all transactions denominated in BDT.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeovers, and other prohibited conduct as defined in our Terms & Conditions.
• Customer Support: To respond to your queries, manage complaints, and resolve disputes in a fair and timely manner.
• Legal Compliance: To fulfil our obligations under applicable law, including anti-money-laundering regulations, record-keeping requirements, and responses to lawful requests from regulatory or law-enforcement authorities.
• Platform Improvement: To analyse aggregate usage data and improve the functionality, performance, and content of the eg666 Platform. This analysis is conducted on anonymised or pseudonymised data wherever possible.
• Responsible Gaming: To monitor gaming activity for signs of problem gambling and to enforce the responsible gaming tools you have activated on your account, in accordance with our Responsible Gaming policy.
• Service Communications: To send you transactional emails relating to your account activity, such as deposit confirmations, withdrawal notifications, and security alerts. We do not send unsolicited marketing communications without your explicit consent.

5. Legal Basis for Processing

eg666 processes your personal data on one or more of the following legal bases, depending on the specific processing activity in question:

• Contractual Necessity: Processing is necessary to perform our contractual obligations to you as an eg666 account holder — for example, creating your account, processing payments, and recording your gaming activity.
• Legal Obligation: Processing is required for eg666 to comply with applicable legal requirements — for example, conducting KYC checks, retaining transaction records for AML purposes, and reporting suspicious activity.
• Legitimate Interests: Processing is carried out on the basis of eg666's legitimate interests in operating a secure, reliable, and commercially sustainable gaming platform — for example, fraud detection, security monitoring, and aggregate Platform analytics. We conduct a balancing test to ensure our interests do not override your fundamental privacy rights.
• Consent: Where we rely on your consent as the legal basis for processing — for example, in relation to optional marketing communications — you may withdraw that consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

6. Data Sharing & Disclosure

eg666 does not sell, rent, or trade your personal data. We share personal data with third parties only in the following limited circumstances:

6.1 Payment Service Providers

We share transaction-related data with payment service providers — including bKash, Nagad, Rocket, Upay, and card-network processors (Visa, Mastercard) — strictly to the extent necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are bound by contractual data-protection obligations when processing data on eg666's behalf.

6.2 Identity Verification Partners

eg666 may engage third-party identity verification services to assist with KYC checks. Where we do so, we share only the specific data required to complete the verification (for example, a scan of your NID and a selfie). These partners are contractually prohibited from using your data for any purpose other than the verification service they provide to eg666.

6.3 Legal & Regulatory Authorities

eg666 will disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required to do so by applicable law, a court order, or a lawful regulatory request. We will notify you of such a disclosure unless legally prohibited from doing so.

6.4 Business Transfers

In the event of a merger, acquisition, or sale of all or part of eg666's business assets, personal data held by eg666 may be transferred to the acquiring entity as part of that transaction. In such circumstances, we will notify affected players prior to the transfer and inform them of any changes to this Policy that may result.

6.5 Aggregate & Anonymised Data

eg666 may share aggregated, anonymised statistical data with analytics partners or for industry-research purposes. Such data does not identify any individual player and is not subject to the protections applicable to personal data under this Policy.

7. Cookies & Tracking Technologies

eg666 uses cookies and similar technologies (collectively, "cookies") to operate the Platform effectively. Cookies are small text files stored on your device when you visit a website. They allow the site to recognise your browser, maintain your session, and remember your preferences.

7.1 Categories of Cookies We Use

7.2 Managing Cookies

Strictly necessary and security cookies cannot be disabled, as they are essential for the Platform to function. You may disable functional and analytics cookies through your browser settings. Please note that disabling certain cookies may affect the performance and usability of the Platform. Instructions for managing cookies are available in your browser's help documentation.

eg666 does not use third-party advertising cookies or cross-site tracking pixels. All analytics data collected via cookies is processed in aggregate form and is not linked to individual player identities for marketing purposes.

8. Data Retention

eg666 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to applicable legal minimum retention periods. The following retention periods apply:

• Active Account Data: Retained for the duration of your eg666 account, plus a minimum of five (5) years following account closure, to satisfy anti-money-laundering and financial record-keeping obligations.
• KYC & Identity Documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant KYC check, whichever is later.
• Transaction Records: Retained for a minimum of five (5) years following the date of each transaction.
• Support Communications: Retained for a minimum of three (3) years following the resolution of the relevant query or complaint.
• Technical & Usage Logs: Retained for a maximum of twelve (12) months, after which they are deleted or anonymised.
• Cookie & Analytics Data: Retained in accordance with the durations specified in Section 7.1 above.

Upon the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with eg666's internal data-destruction procedures. Where legal proceedings are ongoing at the point of scheduled deletion, data may be retained until the proceedings are concluded.

9. Data Security

eg666 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security framework includes, but is not limited to, the following measures:

• TLS/SSL Encryption: All data transmitted between your device and the eg666 Platform is encrypted using industry-standard Transport Layer Security (TLS) protocols. The Platform operates exclusively over HTTPS.
• Access Controls: Access to personal data within eg666's systems is restricted to authorised personnel on a strict need-to-know basis. All staff with access to personal data are bound by confidentiality obligations and receive regular data-protection training.
• Secure Password Storage: Account passwords are stored using a one-way cryptographic hashing algorithm with salting. eg666 does not store passwords in plain text under any circumstances.
• Fraud Detection Systems: eg666 employs automated systems to detect and flag suspicious login attempts, unusual transaction patterns, and other indicators of unauthorised account access or fraudulent activity.
• Periodic Security Reviews: eg666 conducts periodic reviews of its data-security practices and engages qualified third-party specialists to assess and improve our security posture on a regular basis.
• Incident Response: In the event of a data security incident that poses a risk to your rights and freedoms, eg666 will notify affected players promptly and take all reasonable steps to mitigate harm.

10. Your Rights

As an eg666 player, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact us using the details in Section 14. eg666 will respond to all valid requests within 30 calendar days of receipt.

• Right of Access: You have the right to request a copy of the personal data eg666 holds about you, together with information about how it is processed.
• Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal data held in your eg666 account.
• Right to Erasure ("Right to be Forgotten"): You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations. Note that data we are required to retain by law (for example, AML transaction records) cannot be deleted until the mandatory retention period expires.
• Right to Restriction of Processing: You may request that we restrict the processing of your personal data in certain circumstances — for example, while we verify the accuracy of data you have disputed.
• Right to Data Portability: Where processing is based on consent or contract and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on eg666's legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

eg666 will not charge a fee for processing reasonable subject access requests. However, we reserve the right to charge a reasonable administrative fee for requests that are manifestly unfounded, repetitive, or excessive. We may also request proof of your identity before processing a data rights request to ensure that we disclose information only to the correct individual.

11. Children & Minors

The eg666 Platform is strictly intended for adults aged 21 years or older. eg666 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that a minor has registered an eg666 account, please contact us immediately at [email protected] so that we can investigate and take appropriate action. We take the protection of minors from gambling-related harm with the utmost seriousness.

12. Third-Party Links

The eg666 Platform may contain links to third-party websites, payment provider portals, or game provider interfaces. This Privacy Policy applies solely to data collected and processed by eg666 through the eg666 Platform. eg666 has no control over, and accepts no responsibility for, the privacy practices or content of any third-party website or service. We encourage you to review the privacy policies of any third-party services you access through or in connection with the eg666 Platform.

13. Policy Amendments

eg666 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data-processing practices, applicable law, or the services we offer. Amendments will be published on this page with a revised "Effective Date". Where changes are material — meaning they significantly affect how we process your personal data or the rights available to you — eg666 will provide reasonable advance notice by email to the address registered on your account or via a notice displayed upon login to the Platform.

Your continued use of the eg666 Platform following publication of any amendment to this Policy constitutes your acknowledgement of the updated terms. If you do not agree with the amended Policy, you must stop using the Platform and contact support to arrange account closure.

14. Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise a data right, or wish to raise a complaint about how eg666 has handled your personal data, please contact us using the following details:

• Email:  [email protected]
• WhatsApp:  +880 1700-000000
• Live Chat:  24/7 Available via the Platform
• Response Time:  Within 30 calendar days of receipt (Bangladesh Standard Time, UTC+6)