ed666 Privacy Policy

01 Information We Collect

ed666 collects personal data from players through several channels: directly when you register an account or make a transaction, automatically when you use the platform, and occasionally from trusted third-party sources such as payment processors and identity verification providers. The categories of data we collect are described in detail below.

Registration Data

When you create an ed666 account, we collect the following information, which is required to establish and maintain your player account:

• Full legal name (as it appears on your government-issued identification document).
• Date of birth (used to verify that you meet the 18+ age requirement).
• Email address (used for account communications, verification, and support).
• Mobile phone number (used for account security and payment processing via bKash, Nagad, or Rocket).
• Residential address in Bangladesh (city, district, and postal code).
• Chosen username and an encrypted password (we never store passwords in plain text).

Identity Verification (KYC) Data

In accordance with our Know Your Customer (KYC) obligations and our commitment to responsible gaming, we may request the following documents at account opening or prior to processing withdrawal requests:

• National ID card (NID), passport, or other government-issued photo identification.
• Proof of address (e.g., a utility bill or bank statement dated within the last three months, issued to an address in Bangladesh).
• Proof of payment method ownership (e.g., a screenshot confirming the bKash or Nagad account is registered in your name).

Transaction Data

Every deposit and withdrawal made on ed666 generates a transaction record. We retain the following transaction data for each financial operation on your account:

Data Type	Examples	Purpose
Payment method identifier	bKash mobile number, Nagad account reference, DBBL account number	Process deposits and withdrawals; verify payment ownership
Transaction amount	৳500 deposit, ৳2,000 withdrawal	Account balance management; financial reporting
Transaction timestamp	Date and time in Bangladesh Standard Time (UTC+6)	Audit trail; dispute resolution
Transaction reference number	System-generated unique reference ID	Transaction tracing; customer support
Transaction status	Pending, Completed, Declined, Under Review	Player account transparency; compliance

Gameplay and Betting Data

We record all betting activity, game sessions, and lottery participation on your ed666 account. This includes bet amounts, selected markets, game titles played (e.g., Pragmatic Play slots, Evolution Gaming live tables), stake history, win and loss records, and session durations. This data is used to administer your account, detect bonus abuse, and support our responsible gaming obligations — including identifying potentially problematic gambling patterns.

Technical and Device Data

When you access ed666 via a browser or mobile device, we automatically collect certain technical data, including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, and pages visited within the ed666 platform. This data is collected for security purposes, fraud prevention, and platform performance optimisation. We do not use IP address data to block access based on geographic location, but we may use it to detect account sharing or fraudulent multi-account activity.

02 How We Use Your Data

ed666 uses the personal data we collect exclusively for the purposes described in this Policy. We do not use your data for purposes beyond those listed below without first obtaining your explicit consent, except where we are required to do so by applicable law.

Account Administration

The primary purpose for which we process your registration data is to create and maintain your ed666 player account. This includes verifying your identity and age, managing your account balance in BDT, processing your deposits and withdrawals via bKash, Nagad, Rocket, Upay, DBBL, City Bank, and BRAC Bank, delivering account notifications and security alerts to your registered email address or phone number, and providing customer support in response to your enquiries.

Fraud Prevention and Platform Security

We use your technical and device data, transaction data, and gameplay data to detect and prevent fraud, unauthorised account access, money laundering, multi-accounting, and bonus abuse. This processing is fundamental to the integrity of the ed666 platform and to the protection of all players who use it. Where we detect suspicious activity, we may suspend account access, request additional verification, or share relevant data with law enforcement authorities as required by applicable law.

Responsible Gaming Monitoring

ed666 takes its responsible gaming obligations seriously. We analyse betting patterns, session lengths, deposit frequency, and loss trajectories to identify players who may be exhibiting signs of problem gambling. Where such patterns are detected, we may proactively contact the player with responsible gaming information, suggest self-exclusion tools, or impose temporary deposit or betting limits as a protective measure. This analysis is carried out in the interests of player wellbeing and is not used for marketing purposes.

Promotions and Marketing Communications

If you have given your explicit consent during registration or at a later point, we may send you promotional communications about ed666 offers, bonuses, and seasonal promotions (such as BPL cricket offers, Eid specials, or Pohela Boishakh bonuses) by email or SMS. You may withdraw this consent at any time by contacting our support team at [email protected] or by using the unsubscribe link included in any marketing email. Withdrawal of marketing consent does not affect our ability to send you transactional account communications, which are necessary for the operation of your account.

Legal and Regulatory Compliance

We are required by applicable law and by our operational obligations to retain certain categories of data for defined periods. We process your data to comply with these retention obligations, to respond to lawful requests from competent authorities, and to defend or establish legal claims in the event of a dispute. See Section 6 (Data Retention) for full details of our retention schedule.

03 Legal Basis for Processing

ed666 processes your personal data on one or more of the following legal grounds, depending on the nature of the processing activity:

Legal Basis	Processing Activities Covered
Contractual Necessity	Account creation, deposit and withdrawal processing, delivering gaming services, providing customer support, enforcing Terms & Conditions.
Legitimate Interests	Fraud detection and prevention, platform security, responsible gaming monitoring, technical performance analytics, and multi-account detection.
Consent	Marketing and promotional communications by email or SMS. Consent is freely given, specific, and withdrawable at any time.
Legal Obligation	KYC identity verification, AML (anti-money laundering) monitoring, data retention for audit and compliance purposes, responding to lawful authority requests.

04 Data Sharing & Disclosure

ed666 does not share your personal data with third parties except in the specific, limited circumstances described below. In all cases where data sharing occurs, ed666 requires that the recipient processes your data only for the purpose for which it was shared, maintains appropriate security standards, and does not use it for their own commercial purposes.

Payment Processors

To process your deposits and withdrawals, ed666 shares the minimum necessary transaction data with our payment processing partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank (DBBL), City Bank, and BRAC Bank. This data sharing is strictly necessary to execute the payment you have requested. Each payment provider operates under its own privacy policy, which governs how that provider handles the data it receives. ed666 is not responsible for the data practices of third-party payment processors.

Identity Verification Providers

For KYC purposes, ed666 may share your identity document data with accredited third-party identity verification service providers. These providers assist ed666 in confirming that the identification documents submitted by players are genuine and that the player meets the 18+ age requirement. All identity verification providers used by ed666 are contractually bound to process identity data solely for verification purposes and to maintain strict data security standards.

Game Providers

Casino and slot games on ed666 are delivered by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. To facilitate gameplay, limited account data (such as a player ID and session token) may be passed to the relevant game provider's system. Game providers do not receive your full name, contact details, or financial data. Each game provider operates under its own data processing agreements, which meet industry-standard security requirements.

Law Enforcement and Regulatory Authorities

ed666 will disclose your personal data to law enforcement agencies, financial intelligence units, or other competent authorities in Bangladesh or internationally where we are required to do so by applicable law, by a valid court order, or where we have a good-faith belief that disclosure is necessary to prevent or investigate fraud, money laundering, criminal activity, or a threat to the safety of a person. Where permitted by law, ed666 will notify you of such a disclosure.

Business Transfers

In the event that ed666 undergoes a merger, acquisition, sale of assets, or other corporate restructuring, your personal data may be transferred to the acquiring or successor entity as part of that transaction. If such a transfer occurs, the acquiring entity will be required to honour the privacy commitments made in this Policy. We will notify you of any such transfer by publishing an updated Privacy Policy on ed666.app.

05 Cookies & Tracking

ed666 uses cookies and similar tracking technologies (such as local storage and session tokens) to operate the platform, maintain your logged-in session, and improve your user experience. A cookie is a small text file placed on your browser or device when you visit ed666. Cookies do not contain executable code and cannot be used to access other data stored on your device.

Types of Cookies We Use

Cookie Type	Purpose	Duration
Strictly Necessary	Maintain your login session, remember your account preferences, enable secure deposits and withdrawals. These cookies are essential to the operation of ed666 and cannot be disabled without breaking core platform functionality.	Session / up to 30 days
Performance & Analytics	Collect anonymised data about how players navigate the platform, which games are most popular, and where technical errors occur. Used exclusively to improve platform performance and user experience.	Up to 12 months
Security	Detect fraudulent login attempts, identify suspicious device fingerprints, and protect your account from unauthorised access.	Up to 6 months
Functional	Remember your preferred language (English), display settings, and last-visited game category to personalise your ed666 experience.	Up to 12 months

Managing Cookies

You can manage or disable cookies through your browser settings. Most modern browsers (Chrome, Firefox, Safari, Edge) allow you to view, block, or delete cookies stored by websites you visit. Please be aware that disabling strictly necessary cookies will prevent you from logging into your ed666 account and using core platform features. Disabling performance or functional cookies will not affect your ability to access the platform but may result in a less personalised experience.

06 Data Retention

ed666 retains your personal data only for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable law and our operational obligations. The table below summarises our standard data retention periods by category.

Data Category	Retention Period	Reason
Account registration data	Duration of account + 5 years after closure	Legal compliance, dispute resolution, AML obligations
KYC / identity documents	Duration of account + 5 years after closure	Regulatory compliance, fraud prevention
Transaction records	Duration of account + 7 years after closure	Financial audit obligations, AML compliance
Gameplay and betting history	Duration of account + 3 years after closure	Responsible gaming monitoring, dispute resolution
Technical / device data	Up to 12 months from collection	Fraud detection, platform security
Marketing consent records	Until consent is withdrawn + 2 years	Proof of consent for compliance purposes
Support correspondence	3 years from last interaction	Service quality, dispute resolution

When the applicable retention period expires, ed666 will securely delete or anonymise your personal data so that it can no longer be associated with your identity. Anonymised, aggregated data (from which you cannot be identified) may be retained indefinitely for statistical and platform improvement purposes.

07 Your Privacy Rights

As a player on the ed666 platform, you hold a set of rights in relation to the personal data we hold about you. ed666 is committed to honouring these rights promptly and transparently. To exercise any of the rights described below, please contact our support team in writing at [email protected], clearly identifying the right you wish to exercise and providing sufficient information to verify your identity.

Right to Access

You have the right to request a copy of the personal data that ed666 holds about you. Upon receiving a verified access request, ed666 will provide you with a summary of your personal data in a clear, readable format within a reasonable timeframe. This includes your registration data, transaction history, gameplay records, and any KYC documents held on file.

Right to Rectification

If any personal data that ed666 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may update basic account details (such as your contact email or phone number) directly via your account settings. For changes to your registered name or date of birth, you will need to contact our support team and provide appropriate documentation.

Right to Erasure

You have the right to request the deletion of your personal data from the ed666 platform, subject to any overriding legal retention obligations. Where a deletion request is received, ed666 will erase your personal data to the extent permitted by law. Please note that data which must be retained to comply with financial, anti-money laundering, or responsible gaming obligations cannot be deleted prior to the expiry of the applicable retention period, as described in Section 6.

Right to Restrict Processing

In certain circumstances (for example, where you contest the accuracy of your data, or where you have objected to processing and a review is pending), you have the right to request that ed666 restrict the processing of your personal data. During a restriction period, we will continue to store your data but will not actively process it beyond what is strictly necessary.

Right to Object

You have the right to object to ed666's processing of your personal data where that processing is based on legitimate interests, including profiling for responsible gaming monitoring purposes. Where you raise a valid objection, ed666 will review the relevant processing activity and cease or modify it unless we can demonstrate compelling legitimate grounds that override your interests.

Right to Withdraw Consent

Where ed666 processes your data based on your consent (principally for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of any processing carried out prior to the withdrawal. To withdraw marketing consent, contact us at [email protected] or use the unsubscribe mechanism included in any marketing message we send you.

08 Data Security

ed666 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security programme is reviewed and updated on a regular basis to reflect evolving threats and best practices in the online gaming industry.

Technical Security Measures

• SSL/TLS Encryption: All data transmitted between your browser or device and the ed666 platform is encrypted using industry-standard SSL/TLS protocols. The padlock icon in your browser's address bar confirms that your connection to ed666.app is secure.
• Password Hashing: Account passwords are never stored in plain text. We apply strong cryptographic hashing algorithms to all passwords so that even ed666's own technical team cannot read your password.
• Access Controls: Personal data is accessible only to ed666 team members who require it to perform their job function. Access is governed by role-based permissions and all access events are logged for audit purposes.
• Intrusion Detection: ed666's platform is monitored 24/7 by automated intrusion detection systems that flag unusual access patterns, failed login attempts, and potential data exfiltration events for immediate review by our security team.
• Data Minimisation: We collect and retain the minimum personal data necessary to fulfil each stated purpose. Data that is no longer required is securely deleted in accordance with our retention schedule.

Your Role in Account Security

While ed666 takes extensive measures to protect your data on our side, account security is a shared responsibility. You are strongly encouraged to use a unique, strong password for your ed666 account, to never share your login credentials with another person, and to log out of your account when using a shared or public device. If you suspect that your account has been accessed without your authorisation, contact our support team immediately at [email protected] so that we can take protective action without delay.

Data Breach Response

In the event of a personal data breach that poses a risk to the rights and freedoms of players, ed666 will take immediate steps to contain the breach, assess its scope and impact, and notify affected players as promptly as possible. Our breach response procedure includes a thorough internal investigation, remediation of the vulnerability that allowed the breach to occur, and a post-incident review to prevent recurrence.

Policy Updates

ed666 reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, applicable law, or the services we offer. The most current version of this Policy is always available at ed666.app/privacy-policy. The effective date at the top of this Policy indicates when the current version was last updated. Your continued use of ed666 following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you have any questions about this Policy or our data practices , please contact us at [email protected] — we are happy to assist.