dk666 Privacy Policy

1 Introduction

This Privacy Policy describes how dk666 ("we", "us", "our", "the Platform") collects, processes, stores, and protects the personal data of individuals ("you", "the User", "the Player") who access or use the dk666 online gaming platform available at dk666.io, including all associated subdomains, mobile-optimised versions, and related services.

dk666 is committed to handling your personal information with transparency, integrity, and respect. We understand that Bangladeshi players entrust us with sensitive financial and identity data when they register and transact on our platform, and we take that responsibility seriously. This policy is written in plain English to ensure every player — regardless of technical background — can understand exactly how their data is handled.

This Privacy Policy should be read alongside the dk666 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. By using any part of the dk666 platform — including browsing, registering an account, making a deposit via bKash or Nagad, placing a cricket bet, or accessing a live casino game — you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.

2 Data Controller

dk666 acts as the data controller for all personal information collected through the dk666 platform. As data controller, dk666 determines the purposes and means by which your personal data is processed. If you have any questions about how your data is handled, or wish to exercise any of your data rights, you may contact dk666 directly at:

All data-related enquiries and formal requests submitted to [email protected] with the subject line "Data Privacy Request" will be prioritised and handled by our designated data management team.

3 Data We Collect

dk666 collects personal data across several categories depending on the nature of your interaction with the platform. The table below summarises the main categories of personal data we may hold about you:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, biometric data for identification purposes (beyond the liveness check described above), or health data, except where specifically required by applicable law or for the operation of responsible gaming tools (e.g., self-exclusion records).

4 How We Collect Data

dk666 collects your personal data through the following channels and mechanisms:

4.1 Information You Provide Directly

The majority of personal data we hold is provided directly by you when you interact with dk666. This includes information submitted during account registration (name, date of birth, contact details), information provided during the KYC identity verification process (NID scan, address proof), financial details entered during deposit and withdrawal transactions via bKash, Nagad, Rocket, or other supported payment methods, and communications you send to us via Live Chat, email, or WhatsApp.

4.2 Automated Data Collection

When you access and use the dk666 platform, certain technical and usage data is collected automatically by our systems. This includes your IP address, the type of device and browser you are using, your session timestamps, the pages and game interfaces you visit, and interaction patterns within the platform. This automated collection is essential for security monitoring, fraud prevention, and ensuring the stability and performance of the dk666 platform for all Bangladeshi players.

4.3 Data from Third Parties

In limited circumstances, dk666 may receive personal data about you from trusted third-party sources. These include identity verification service providers (who confirm the authenticity of your NID or passport against national databases), payment processors (who confirm the status and ownership of bKash, Nagad, or bank accounts used to fund your dk666 account), and fraud prevention and anti-money laundering screening services. Data received from these third parties is used exclusively for the purposes for which it was shared.

5 Why We Use Your Data

dk666 uses your personal data only for legitimate, clearly defined purposes. We do not process your data for purposes that are incompatible with those set out at the time of collection. The main purposes for which dk666 processes personal data are as follows:

• Account creation and management: To register your dk666 account, authenticate your identity at login, and maintain your account settings and preferences.
• Age and identity verification: To confirm that you meet the 21+ age requirement and that your identity matches the details on file, as required before processing any withdrawal.
• Payment processing: To facilitate deposits via bKash, Nagad, Rocket, Upay, and supported banks, and to process withdrawal requests accurately to your verified payment account in BDT.
• Fraud and financial crime prevention: To detect, investigate, and prevent fraudulent activity, money laundering, account takeover, and other financial crimes that could harm you or other players on the platform.
• Responsible gaming: To monitor gameplay patterns and identify potential signs of problem gambling behaviour, to administer deposit limits and self-exclusion requests, and to ensure compliance with responsible gaming obligations.
• Customer support: To respond to your enquiries, resolve disputes, and maintain records of support interactions for quality assurance and audit purposes.
• Platform security and integrity: To protect the dk666 platform against unauthorised access, bot activity, collusion, and other forms of abuse that would undermine fair play for all users.
• Legal and regulatory compliance: To meet obligations imposed by applicable law, including anti-money laundering (AML) requirements, and to respond to lawful requests from competent authorities.
• Marketing and personalisation (with consent): To send you promotional communications about dk666 offers, new games, and special events where you have provided your consent to receive such communications. You may withdraw this consent at any time by contacting [email protected].
• Platform improvement: To analyse aggregated, anonymised usage data to improve the dk666 product, fix technical issues, and develop new features that better serve our Bangladeshi player community.

6 Legal Basis for Processing

dk666 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to perform the contract between you and dk666 — most notably, account registration, identity verification, payment processing, game delivery, and support services.
• Legal obligation: Processing required to comply with applicable legal requirements, including anti-money laundering regulations, age verification obligations, and responses to lawful orders from competent governmental or law enforcement authorities.
• Legitimate interests: Processing carried out in pursuit of dk666's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and general platform improvement — provided that these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — in particular, the sending of direct marketing communications. Where consent is the basis, you have the right to withdraw it at any time without affecting the lawfulness of processing that occurred before the withdrawal.

7 Data Sharing & Third Parties

dk666 does not sell your personal data to any third party under any circumstances. Your data may be shared with the following categories of trusted third parties only where strictly necessary and only to the extent required for the stated purpose:

7.1 Payment Service Providers

To process your deposits and withdrawals, dk666 shares necessary financial and identity information with payment processors including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank. These providers process your data solely to execute payment transactions and are bound by their own data protection obligations.

7.2 Identity Verification Providers

dk666 uses specialist third-party identity verification services to conduct KYC checks on new accounts prior to processing withdrawals. These providers may access your NID number, passport details, and supporting documentation to verify your identity. All identity verification providers engaged by dk666 are contractually bound to use your data exclusively for the verification purpose and to protect it in accordance with applicable data protection standards.

7.3 Game Content Providers

dk666 hosts games developed and operated by licensed game studios including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe. These providers may process limited technical and gameplay data (such as session identifiers and bet results) within their game environments. dk666 ensures that all game providers operate under appropriate data handling agreements.

7.4 Fraud Prevention and AML Services

To fulfil its anti-money laundering and fraud prevention obligations, dk666 may share account and transaction data with specialist AML screening and fraud detection services. These services help identify suspicious patterns and ensure that the platform is not misused for financial crime.

7.5 Legal and Regulatory Authorities

dk666 may disclose your personal data to competent governmental bodies, law enforcement agencies, or regulatory authorities where required to do so by applicable law, court order, or other binding legal process. In such cases, dk666 will disclose only the minimum data necessary to satisfy the legal requirement and will notify you of such disclosure where permitted by law.

7.6 Business Transfers

In the event that dk666 undergoes a corporate restructuring, merger, acquisition, or sale of assets, your personal data may be transferred to the relevant successor entity as part of that transaction. In such circumstances, your data will continue to be protected in accordance with this Privacy Policy, and you will be notified of any material change to the data controller identity.

8 Cookies & Tracking

dk666 uses cookies and similar tracking technologies on its platform to enable essential functionality and to improve your experience. Cookies are small text files stored on your device when you visit a website. The following categories of cookies are used by dk666:

• Strictly necessary cookies: These are essential for the platform to function and cannot be disabled. They enable core features such as user authentication, session management, security token validation, and navigation between pages. No personal data is shared with third parties via these cookies.
• Functional cookies: These remember your preferences — such as your preferred language, currency display (BDT), and notification settings — to provide a more personalised experience on subsequent visits.
• Analytics cookies: dk666 uses anonymised analytics data to understand how the platform is used and to identify areas for improvement. Analytics data is aggregated and does not identify individual users.
• Security cookies: Used to detect and prevent fraudulent activity, bot traffic, and other security threats. These cookies analyse device and behaviour patterns to distinguish legitimate users from automated or malicious actors.

You may adjust your browser settings to block or delete cookies; however, disabling strictly necessary cookies will prevent core platform functions from operating correctly and may make it impossible to log in to your dk666 account or process transactions.

9 Data Retention

dk666 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law. The following general retention principles apply:

• Active accounts: Personal data associated with an active dk666 account is retained for the full duration of the account relationship and for a minimum of five (5) years following account closure.
• Financial transaction records: Transaction histories, deposit and withdrawal records, and associated financial data are retained for a minimum of five (5) years following the date of the transaction, in accordance with applicable financial record-keeping requirements.
• KYC verification documents: Identity documents submitted for KYC verification are retained for a minimum of five (5) years following account closure or the last transaction, whichever is later.
• Support communications: Live chat transcripts, email correspondence, and WhatsApp support records are retained for a minimum of two (2) years from the date of the communication.
• Responsible gaming records: Self-exclusion records and responsible gaming tool usage logs are retained for the full duration of the exclusion period plus five (5) years, to prevent circumvention of self-exclusion requests.
• Marketing consent records: Records of your consent to receive marketing communications (and any subsequent withdrawal of that consent) are retained for five (5) years from the date of the last interaction.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with dk666's internal data disposal procedures.

10 Data Security

dk666 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, disclosure, or misuse. Key security measures include:

• 256-bit SSL/TLS encryption: All data transmitted between your device and the dk666 platform is encrypted using industry-standard 256-bit SSL/TLS protocols, ensuring that your personal and financial information cannot be intercepted in transit.
• Encrypted data storage: Sensitive data fields — including identity document data, financial account numbers, and passwords — are stored in encrypted form within dk666's secure data infrastructure. Passwords are hashed using modern one-way hashing algorithms and are never stored in plain text.
• Access controls: Access to personal data within dk666's internal systems is strictly limited to employees and contractors who require it to perform their specific role. All staff with access to personal data are subject to confidentiality obligations and receive regular data protection training.
• Multi-factor authentication (MFA): Internal systems containing personal data are protected by multi-factor authentication requirements, reducing the risk of unauthorised access resulting from compromised credentials.
• Intrusion detection and monitoring: dk666's platform is continuously monitored for suspicious activity, unauthorised access attempts, and anomalous behaviour patterns by automated security systems and the dk666 security team.
• Regular security assessments: dk666 conducts periodic security reviews and vulnerability assessments of its platform infrastructure to identify and remediate potential weaknesses before they can be exploited.

While dk666 takes every reasonable precaution to protect your data, no online platform can guarantee absolute security. In the unlikely event of a data breach that poses a significant risk to your rights and freedoms, dk666 will notify affected users promptly and take all necessary remedial action.

11 Your Rights

As a user of the dk666 platform, you hold the following rights in respect of your personal data. These rights may be exercised by submitting a written request to [email protected] with the subject line "Data Privacy Request":

• Right of access: You have the right to request a copy of the personal data that dk666 holds about you, along with information about how it is being used and with whom it has been shared.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may also update certain account details directly through your dk666 account settings.
• Right to erasure: In certain circumstances, you have the right to request that dk666 delete your personal data. This right is subject to exceptions where dk666 is required to retain data by law (for example, financial transaction records and KYC documents subject to mandatory retention periods).
• Right to restriction of processing: You have the right to request that dk666 restrict the processing of your personal data in certain circumstances — for example, while a dispute about data accuracy is being resolved.
• Right to data portability: Where processing is based on your consent or the performance of a contract, you have the right to receive a copy of the personal data you provided to dk666 in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to the processing of your personal data where dk666 relies on legitimate interests as its legal basis. You also have an unconditional right to object to the use of your data for direct marketing purposes at any time.
• Right to withdraw consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

dk666 will respond to all valid data rights requests within 30 days of receipt. Where a request is complex or involves a large volume of data, this period may be extended by up to an additional 60 days, with notice provided to you within the initial 30-day period. dk666 will not charge a fee for processing data rights requests unless they are manifestly unfounded or excessive.

12 Children & Minors

If dk666 becomes aware that personal data has been collected from an individual under the age of 21, we will take immediate steps to permanently close the associated account and securely delete all personal data collected from that individual. If you believe that a minor under the age of 21 has submitted personal data to dk666, please notify us immediately at [email protected] with the subject line "Minor Data Concern". We take such matters extremely seriously and will investigate promptly.

Parents and guardians are encouraged to use appropriate parental control tools to prevent minors from accessing online gambling platforms, including dk666. Several third-party parental control services are available at no cost and can restrict access to gambling websites on shared or family devices.

13 International Data Transfers

dk666 primarily serves players located in Bangladesh and processes the majority of personal data within server infrastructure serving the Bangladesh and surrounding Asia-Pacific region. However, certain third-party service providers engaged by dk666 — including game content providers such as Evolution Gaming, Pragmatic Play, Ezugi, and NetEnt, as well as identity verification and fraud prevention services — may process personal data in jurisdictions outside of Bangladesh.

When personal data is transferred outside of Bangladesh, dk666 ensures that appropriate safeguards are in place to protect your data in a manner consistent with this Privacy Policy. These safeguards may include standard contractual clauses, data processing agreements that impose equivalent data protection obligations on the receiving party, and selection of service providers operating under recognised international data protection frameworks.

By using the dk666 platform and accepting this Privacy Policy, you acknowledge and consent to the transfer of your personal data to service providers located outside of Bangladesh where necessary for the delivery of the services described in this policy.

14 Changes to This Policy

dk666 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the services we offer. The most current version of this Privacy Policy will always be published on the dk666 Privacy Policy page with the date of the most recent revision clearly indicated at the top of the document.

Where changes to this Privacy Policy are material — meaning they significantly affect how we collect or use your personal data, or alter your data rights — dk666 will notify registered users via email or in-platform notification at least 14 days prior to the effective date of the change. For minor, non-material updates (such as typographical corrections or clarifications that do not affect substance), the revised policy will be published without individual notification.

Your continued use of the dk666 platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes to this Privacy Policy, you must cease using the platform and may request account closure by contacting [email protected].

15 Contact & Data Requests

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way dk666 handles your personal data, or if you wish to exercise any of your data rights as described in Section 11 above, please contact us through any of the following channels:

• Support Email: [email protected] — use subject line "Data Privacy Request" for all data-related matters
• Live Chat: Available 24/7 within the dk666 platform
• WhatsApp (no calls): +880 1700 000000
• Support Hours: 24 hours a day, 7 days a week — Bangladesh Standard Time (BST, UTC+6)

dk666 aims to acknowledge all privacy-related queries within 48 hours and to provide a substantive response within 30 days of receipt. If you are not satisfied with dk666's response to a privacy concern, you have the right to escalate the matter through appropriate dispute resolution channels.