tt66 Privacy Policy — Your Data, Your Rights

Introduction and Scope

This Privacy Policy ("Policy") is published by tt66 ("tt66", "we", "us", "our") and applies to all personal data collected from individuals ("you", "the Player", "the User") who access or use the tt66 Platform at tt66.club, including its associated subdomains, mobile browser interface, and any linked support communication channels.

For the purposes of this Policy, "personal data" means any information that relates to an identified or identifiable natural person. This includes, but is not limited to, your full name, date of birth, mobile phone number, email address, payment method identifiers, device identifiers, IP address, and behavioural data generated through your use of the Platform.

This Policy governs data collected from players located in Bangladesh and is written with Bangladeshi players as its primary audience. By registering an account on tt66, making a deposit, or continuing to use the Platform after this Policy has been made available to you, you acknowledge that you have read and understood the practices described herein and consent to the collection and processing of your personal data as set out in this Policy.

tt66 reserves the right to update this Policy at any time. Where material changes are made, we will notify registered players via their registered email address or through a prominent notice on the Platform. The "Effective" date at the top of this document reflects the date of the most recent revision. We encourage you to review this Policy periodically.

Data We Collect

tt66 collects personal data through several channels: directly from you when you register and use the Platform, automatically through your device and browser as you navigate the site, and from third-party payment processors and identity verification providers as part of our KYC obligations.

Data Provided Directly by You

When you register a tt66 account, complete identity verification, contact support, or participate in promotions, you may provide the following categories of data:

• Identity data: Full legal name, date of birth, nationality, and government-issued identification document details (National ID, passport, or driving licence).
• Contact data: Mobile phone number registered with your bKash, Nagad, Rocket, or Upay account; email address; and, where provided voluntarily, a residential address in Bangladesh.
• Account credentials: Username and encrypted password hash. tt66 does not store your password in plain text at any point.
• Financial data: Mobile financial service account numbers used for deposits and withdrawals (bKash, Nagad, Rocket, Upay). tt66 does not store full payment credentials — only masked identifiers sufficient to match your account for withdrawal processing.
• Communications data: The content of any support chat messages, emails, or dispute correspondence you send to tt66.

Data Collected Automatically

When you access the tt66 Platform, our servers and analytics systems automatically collect the following technical and behavioural data:

How We Use Your Data

tt66 processes your personal data only where we have a lawful basis for doing so. The primary legal bases we rely on are: (a) the performance of a contract with you (i.e., providing the Platform services you have registered for); (b) compliance with a legal obligation; (c) our legitimate business interests, provided those interests are not overridden by your rights; and (d) your explicit consent, where required.

Primary Uses

• Account creation and management: To register your tt66 account, verify your identity, maintain your account settings and preferences, and process your deposits and withdrawals in Bangladeshi Taka.
• Service delivery: To grant you access to casino games, sports betting markets (including cricket BPL, T20, IPL, Bangladesh Tigers matches), live dealer tables, and all other Platform features.
• Payment processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, and Upay, and to reconcile your account balance accurately.
• Identity and age verification (KYC): To confirm that you are at least 18 years of age and that the personal details you have provided are accurate, as required by our responsible gaming obligations.
• Fraud and security: To detect and investigate suspicious account activity, multi-accounting, bonus abuse, payment chargebacks, and unauthorised access attempts.
• Responsible gaming: To monitor behavioural patterns that may indicate problem gambling and to facilitate self-exclusion, deposit limits, and time-out requests in accordance with our Responsible Gaming Policy.
• Customer support: To respond to your enquiries, resolve disputes, and provide 24/7 support in English and Bengali.
• Legal compliance: To fulfil any obligation imposed on tt66 by applicable law, court order, or direction from a competent authority.

Marketing and Promotional Communications

With your consent, tt66 may use your contact data to send you information about promotions, bonuses, and platform updates relevant to Bangladesh players. You may withdraw consent for marketing communications at any time by contacting support at [email protected] or by using the opt-out link included in any marketing message. Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to withdrawal, and does not affect your ability to use the Platform.

Cookies and Tracking Technologies

The tt66 Platform uses cookies, web beacons, and similar tracking technologies to deliver a functional, personalised, and secure experience. A cookie is a small text file placed on your device by the Platform when you visit. Cookies do not contain executable code and cannot access other files on your device.

Categories of Cookies We Use

Managing Cookies

You may control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies, or to prompt you before accepting new ones. Please note that disabling strictly necessary cookies will prevent you from logging in to your tt66 account and using the Platform. Instructions for managing cookies are available in the help documentation of your browser. Clearing cookies will also log you out of any active tt66 session.

tt66 does not currently respond to browser "Do Not Track" signals, as there is no consistent industry standard for interpreting such signals. We rely instead on the cookie consent and opt-out mechanisms described above.

Data Sharing and Third Parties

tt66 does not sell your personal data to any third party. We may, however, share limited and necessary personal data with the following categories of trusted third parties, strictly for the purposes described:

• Payment processors: bKash, Nagad, Rocket (Dutch-Bangla Bank), and Upay receive the minimum data necessary (masked account identifiers and transaction amounts) to process your deposits and withdrawals. These providers operate their own privacy policies, which we encourage you to review.
• Identity verification providers: Third-party KYC service providers may process your identity documents solely for the purpose of verifying your age, identity, and address. They are contractually prohibited from using your data for any other purpose.
• Game providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive a pseudonymous player identifier and game session data to deliver real-time gameplay. They do not receive your full name, contact details, or payment data.
• Analytics providers: Aggregate, anonymised usage data may be shared with analytics platforms to help us understand Platform performance. This data cannot be used to identify individual players.
• Legal and regulatory authorities: tt66 will disclose personal data to courts, law enforcement agencies, or competent authorities in Bangladesh where required to do so by a valid legal order, warrant, or applicable statute. We will, where legally permitted, notify affected players of such disclosures.
• Business transfers: In the event of a merger, acquisition, or sale of all or a substantial portion of tt66's business assets, player data may be transferred to the successor entity as part of that transaction. Affected players will be notified in advance where required by law.

Data Security and Storage

tt66 implements a layered set of technical and organisational security measures to protect your personal data from unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:

• SSL/TLS encryption for all data in transit between your device and our servers.
• AES-256 encryption at rest for sensitive data fields including identity document images and payment identifiers stored in our databases.
• Bcrypt password hashing — your account password is never stored in plain text. Even tt66 staff cannot view your password; only a cryptographic hash is retained.
• Access controls: Personal data is accessible only to tt66 staff who require it for their specific job function. Access is logged and audited on a regular basis.
• Intrusion detection and monitoring: Our infrastructure is monitored around the clock for anomalous access patterns, suspicious queries, and potential data exfiltration attempts.
• Regular security assessments: tt66 conducts periodic vulnerability assessments and engages third-party security reviews of its platform infrastructure.

Data Retention

tt66 retains your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following general retention guidelines apply:

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Where deletion is technically complex (for example, data held in backup archives), tt66 will isolate the data from active processing until it can be deleted in the next scheduled maintenance cycle.

Your Privacy Rights

As a player on the tt66 Platform, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact us using the details in Section 8. tt66 will respond to all legitimate privacy rights requests within 30 calendar days of receipt.

• Right of access: You may request a copy of the personal data tt66 holds about you, including the categories of data held, the purposes for which it is processed, and any third parties it has been shared with.
• Right to rectification: If any personal data held about you is inaccurate or incomplete, you may request that it be corrected or completed without undue delay.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data where: (a) the data is no longer necessary for the purpose it was collected; (b) you withdraw consent and there is no other lawful basis for processing; or (c) you object to processing and there are no overriding legitimate grounds. This right is subject to our legal retention obligations — we cannot erase transaction records within the mandatory retention period.
• Right to restriction of processing: You may request that tt66 restrict the processing of your data in certain circumstances, for example while a correction request is being verified.
• Right to data portability: You may request that certain personal data you have provided to tt66 be delivered to you in a structured, commonly used, machine-readable format (for example, CSV), so that it can be transferred to another service provider.
• Right to object: You may object to processing of your personal data where tt66 relies on legitimate interests as the lawful basis. You have an absolute right to object to processing for direct marketing purposes at any time.
• Right to withdraw consent: Where tt66 processes your data on the basis of your consent (for example, marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

Please note that exercising certain rights (for example, requesting erasure of identity data) may result in tt66 being unable to continue providing services to your account, as some data is strictly necessary for Platform operation and legal compliance. In such cases, tt66 will inform you of the consequences before acting on your request.

Contact and Data Enquiries

If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or wish to raise a concern about how tt66 has handled your personal data, please contact our support team using the details below. All privacy-related enquiries are handled by tt66's data protection function and are treated with strict confidentiality.

Email (plain text — not a clickable link):
[email protected]

Response time: tt66 aims to acknowledge all privacy enquiries within 2 business days (Bangladesh Standard Time, UTC+6) and to provide a substantive response within 30 calendar days. Where a request is complex or involves a large volume of data, tt66 may extend this period by a further 30 days with prior notification.

Language of correspondence: Privacy enquiries may be submitted in English. Our support team can also communicate in Bengali for the convenience of players based in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and other areas of Bangladesh.

If you are dissatisfied with tt66's response to a privacy concern, you have the right to escalate your complaint to the appropriate data protection authority in your jurisdiction.

Last updated: 1 January 2026. This Privacy Policy supersedes all previous versions. Together with the Terms & Conditions and the Responsible Gaming Policy, this document forms part of the full legal agreement between you and tt66 governing your use of the Platform.