fg66d Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how fg66d ("fg66d", "we", "us", "our"), the operator of the online gaming and sports betting platform accessible at fg66d.io ("Platform"), collects, uses, stores, shares, and protects the personal data of registered players, visitors, and any other individuals who interact with the Platform ("you", "your").

fg66d is committed to handling personal data with transparency, integrity, and strict security measures. This Policy has been prepared in accordance with generally accepted international data protection principles and reflects our ongoing commitment to responsible data stewardship for players across Bangladesh.

This Policy should be read alongside the fg66d Terms & Conditions and the fg66d Responsible Gaming Policy. Together, these three documents form the complete agreement governing your relationship with fg66d.

2 Data We Collect

fg66d collects personal data through several channels: directly from you when you register or use the Platform, automatically through technical systems when you interact with the Platform, and from third-party identity verification and payment services.

2.1 Registration Data

When you create an fg66d account, we collect the following information:

• Full legal name (as it appears on your National ID Card or passport)
• Date of birth (to verify you are aged 21 or over)
• Residential address (district, city, and division within Bangladesh)
• Mobile phone number registered in your own name
• Email address
• Mobile financial service account number (bKash, Nagad, Rocket, or Upay) registered in your own name
• Chosen username and encrypted password

2.2 Identity Verification Data

Prior to processing your first withdrawal, fg66d is required to verify your identity. During this process, we may collect copies of:

• National Identity Card (NID) — front and back
• Passport (biographical data page)
• Birth registration certificate (for secondary verification purposes only)
• A recent selfie photograph for facial matching

These documents are processed by our third-party identity verification provider and are not stored in full on fg66d's primary application servers. Only the verification outcome (pass/fail) and masked reference data are retained in your fg66d profile.

2.3 Financial & Transaction Data

For every deposit and withdrawal you make via the Platform, fg66d records:

• Transaction type (deposit or withdrawal)
• Amount in ৳ BDT
• Masked mobile financial service number (e.g., 01XXXXX789)
• Payment method used (bKash, Nagad, Rocket, Upay, bank transfer, Visa, Mastercard)
• Date, time (Bangladesh Standard Time, UTC+6), and transaction reference number
• Account balance before and after the transaction

We do not store your full bKash, Nagad, or Rocket PIN, password, or full account number at any point.

2.4 Gaming Activity Data

fg66d records a detailed log of all betting and gaming activity associated with your account, including:

• Game sessions (game title, provider, start time, end time, stakes, outcomes, and session RTP)
• Sports bets (market, selection, odds, stake, settlement outcome)
• Bonus activity (bonus claimed, wagering progress, bonus balance changes)
• Responsible gaming tool activations (deposit limits set, self-exclusion requests)

2.5 Technical & Device Data

When you access the Platform, our systems automatically collect:

• IP address (used for fraud detection and geographic access control)
• Device type, operating system, and browser version
• Device fingerprint (a pseudonymous identifier derived from device characteristics, used for fraud and duplicate account detection)
• Session timestamps and page interaction logs
• Referring URL (if you arrived at fg66d from another website)

2.6 Communications Data

If you contact fg66d's customer support team via email or live chat, we retain records of those communications — including the content of your messages, timestamps, and the outcome of any support actions taken — for quality assurance and dispute resolution purposes.

3 How We Use Your Data

fg66d uses your personal data only for the following defined purposes:

3.1 Account Operation

Your registration data is used to create and maintain your fg66d account, authenticate your identity at login, process deposits and withdrawals to and from your registered mobile financial service accounts, and communicate with you about your account status, security alerts, and transaction confirmations.

3.2 Identity Verification & Fraud Prevention

fg66d uses your identity documents and device data to verify that you are who you claim to be, that you are aged 21 or older, and that your account has not been compromised by unauthorised access. Device fingerprinting and IP analysis are used to detect and prevent the opening of duplicate accounts, bonus abuse, and other fraudulent activity.

3.3 Responsible Gaming

Your gaming activity data — including session duration, deposit frequency, stake amounts, and loss patterns — is analysed by fg66d's responsible gaming systems to identify potential problem gambling behaviour. If our systems flag your account, our responsible gaming team may contact you proactively to offer support tools such as deposit limits, session time alerts, or self-exclusion options. This use of your data is a core platform safety obligation.

3.4 Legal & Regulatory Compliance

fg66d retains transaction records, identity documents, and account history data to comply with its anti-money laundering (AML) obligations and to respond to any lawful requests for information from relevant authorities.

3.5 Platform Improvement

Aggregated and anonymised gaming activity data is used by fg66d's product team to improve game selection, user interface design, and betting market availability. This processing is performed only on anonymised data sets and cannot be used to identify any individual player.

3.6 Marketing Communications

With your explicit consent at the time of registration, fg66d may send you promotional communications via email or SMS regarding new games, deposit bonuses, cricket betting promotions, BPL special offers, Eid bonus campaigns, and other seasonal promotions. You may withdraw your marketing consent at any time — see Section 9 (Your Rights) for details.

4 Legal Basis for Processing

fg66d processes personal data under the following legal bases:

• Contractual Necessity: Processing your registration data, transaction data, and identity verification data is necessary to perform the contract between you and fg66d (the Terms & Conditions). Without this processing, fg66d cannot provide you with a functional account or process your deposits and withdrawals.
• Legitimate Interests: Processing technical data (IP address, device fingerprint) for fraud prevention and duplicate account detection is in the legitimate interests of fg66d and its player community, as it protects the integrity of the Platform and the safety of all accounts.
• Legal Obligation: Retaining transaction records and identity verification data for AML compliance purposes is required by applicable financial crime prevention obligations.
• Consent: Sending marketing communications via email or SMS is performed only on the basis of your explicit, freely given consent at the point of registration. You may withdraw this consent at any time without penalty.

5 Data Sharing & Third Parties

fg66d does not sell, rent, or trade your personal data to any third party for marketing or advertising purposes. We share your personal data only in the following limited and controlled circumstances:

5.1 Payment Processors

To process your deposits and withdrawals, fg66d shares the minimum necessary transaction data with the relevant payment gateway or mobile financial service provider (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, Mastercard). Each provider processes your data in accordance with their own privacy policy and terms of service.

5.2 Identity Verification Providers

fg66d uses a third-party Know Your Customer (KYC) and identity verification service to validate the identity documents you submit. Your identity documents are transmitted to this provider via an encrypted API connection. The provider does not retain your documents beyond the verification window specified in our service contract.

5.3 Game Content Providers

Third-party game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — host game sessions on their own certified platforms. When you launch a game, a pseudonymous session token (not your full name or account number) is passed to the game provider to initialise the session. Game providers do not receive your mobile financial service details or full registration data.

5.4 Fraud Prevention & Security

fg66d may share device fingerprint data and IP address information with specialist fraud prevention and cybersecurity service providers. These providers assist fg66d in identifying account takeover attempts, bot-driven bonus abuse, and coordinated fraud schemes targeting the Platform.

5.5 Legal Authorities

fg66d will disclose personal data to relevant authorities where required to do so by law, court order, or lawful regulatory request. fg66d will notify affected players of any such disclosure to the extent permitted by law, unless notification is expressly prohibited by the requesting authority.

6 Cookies & Tracking

6.1 What Are Cookies

Cookies are small text files placed on your device by the fg66d Platform when you visit the site. They allow the Platform to remember your session state, language preferences, and other settings between visits.

6.2 Cookies Used by fg66d

fg66d does not use third-party advertising cookies or cross-site tracking cookies. You may configure your browser to block or delete cookies at any time, however blocking essential session cookies will prevent you from logging in to your fg66d account.

7 Data Retention

fg66d retains your personal data for only as long as is necessary for the purposes for which it was collected. The following retention periods apply:

Upon expiry of the applicable retention period, your data is securely deleted or permanently anonymised in accordance with fg66d's internal data lifecycle management procedures.

8 Data Security

fg66d implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS Encryption in Transit: All data transmitted between your device and the fg66d Platform is encrypted using TLS 1.2 or higher. This applies to login sessions, game sessions, deposit and withdrawal requests, and customer support communications.
• AES-256 Encryption at Rest: All personally identifiable data stored in fg66d's databases is encrypted at rest using AES-256. Database encryption keys are managed via a dedicated key management service and are rotated on a quarterly basis.
• Password Hashing: Account passwords are hashed using bcrypt with a per-user salt. Plaintext passwords are never stored or transmitted internally.
• Two-Factor Authentication (2FA): fg66d supports SMS-based 2FA for all player accounts. Players are strongly encouraged to activate 2FA via their account security settings.
• Access Controls: fg66d employee access to player data is restricted on a strict need-to-know basis. Access to sensitive data is logged, audited, and reviewed on a monthly basis by the fg66d security team.
• Penetration Testing: fg66d's Platform undergoes external penetration testing on a regular schedule. Critical findings are remediated within 48 hours; high-severity findings within 7 days.
• Incident Response: In the event of a data security incident affecting your personal data, fg66d will notify affected players within 72 hours of becoming aware of the incident, and will describe the nature of the incident, the categories of data affected, and the remediation steps taken.

9 Your Rights

As a registered fg66d player, you have the following rights in respect of your personal data:

• Right of Access: You may request a copy of all personal data fg66d holds about you at any time. We will respond to access requests within 30 days.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update most registration details directly through your account settings, or by contacting support.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data. This right applies where the data is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent and there is no overriding legal basis for continued processing. Note that fg66d may be required to retain certain data (e.g., transaction records) for legal and regulatory compliance periods regardless of an erasure request.
• Right to Restrict Processing: You may request that fg66d restricts the processing of your data in certain circumstances — for example, while a rectification request is being evaluated.
• Right to Data Portability: You may request a machine-readable export of the personal data you provided to fg66d (registration data and transaction history) in CSV or JSON format.
• Right to Withdraw Marketing Consent: You may withdraw your consent to receive marketing communications at any time by clicking the unsubscribe link in any fg66d marketing email, replying STOP to any fg66d SMS, or updating your communication preferences in your account settings. Withdrawal of marketing consent does not affect your ability to use the Platform.
• Right to Object: You may object to fg66d's processing of your data on the basis of legitimate interests (see Section 4). fg66d will evaluate such objections and cease the processing unless we have compelling legitimate grounds that override your interests.

To exercise any of these rights, contact the fg66d data team at [email protected] with the subject line "Data Rights Request". Please include your registered email address and specify the right you wish to exercise. We will verify your identity before processing any data rights request to protect you against fraudulent requests.

10 Children & Minors

The fg66d Platform is strictly intended for adults aged 21 years or older. fg66d does not knowingly collect personal data from any person under the age of 21. If we become aware that a registered account belongs to a person under this age threshold, we will immediately suspend the account, delete the associated personal data (except where retention is required for regulatory compliance), and void any transactions associated with the account.

If you are a parent or guardian and you believe that a minor in your care has registered an fg66d account, please contact us immediately at [email protected] with the subject line "Underage Account Report". We will investigate and act on all such reports within 24 hours.

11 International Transfers

fg66d's primary data infrastructure is designed to keep player data within server environments that serve the South and Southeast Asia region. However, certain third-party service providers engaged by fg66d — including game content providers and identity verification platforms — may process data in server environments located outside Bangladesh.

Where such international transfers occur, fg66d ensures they are governed by appropriate data transfer safeguards, including contractual clauses in our data processing agreements with each third party that require the recipient to provide an equivalent level of data protection to that described in this Policy.

12 Policy Amendments

fg66d reserves the right to update this Privacy Policy at any time. When material changes are made, we will notify registered players by email and via an in-platform notification at least seven (7) days before the revised Policy takes effect. The "Last Updated" date at the top of this page will always reflect the most recent revision.

Your continued use of the fg66d Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you must stop using the Platform and may close your account in accordance with the account closure procedure described in the fg66d Terms & Conditions.

13 Contact & Complaints

If you have any questions, concerns, or complaints about this Privacy Policy or about the way fg66d handles your personal data, please contact our support team using the details below. All contact details are provided as plain text — they are not clickable links.

• Email: [email protected] (plain text — not a link)
• Subject Line for Data Queries: "Privacy Policy Query" or " Data Rights Request"
• Support Hours: 24/7 — Bangladesh Standard Time (UTC+6)
• Response Time: We aim to respond to all privacy-related queries within 72 hours during normal operating conditions.

fg66d takes all privacy complaints seriously. Upon receiving a complaint, we will acknowledge receipt within 24 hours, investigate the matter thoroughly, and provide a substantive written response within 14 days. If you are not satisfied with our response, you may escalate the matter through the account dispute resolution process described in the fg66d Terms & Conditions.