Privacy Policy

1Introduction and Scope

tc666 ("we", "us", "our") is the operator of the tc666 online casino and sports betting platform accessible at tc666.asia. We are committed to protecting the privacy and personal data of all individuals who interact with our Platform, including registered players, prospective players, and visitors to our website.

This Privacy Policy explains what personal data we collect, the legal basis on which we collect and process it, how we use it, with whom we may share it, how long we retain it, and what rights you have in relation to your personal data. This Policy applies to all data processing activities carried out by tc666 in connection with the operation of the Platform.

2Personal Data We Collect

We collect two broad categories of personal data: information you provide to us directly, and information we collect automatically when you use the Platform. We collect only the data that is necessary for the purposes described in this Policy.

Information You Provide Directly

• Identity data: full name, date of birth, national identification number or passport number (collected during KYC verification).
• Contact data: mobile phone number, email address, and residential address (city and district, e.g. Dhaka, Chittagong, Sylhet, Khulna).
• Account credentials: username and encrypted password.
• Financial data: payment method details (e.g. bKash mobile wallet number, Nagad account number, Rocket number, bank account or card details sufficient to process transactions). We do not store full card numbers — only masked card references.
• Communications data: messages and enquiries you send to our customer support team via email or live chat, including the content of those communications.

Information Collected Automatically

• Device and technical data: IP address, device type, operating system, browser type and version, screen resolution.
• Usage data: pages visited, time and duration of visits, game sessions played, betting history, deposit and withdrawal activity.
• Cookies and similar tracking technologies: session cookies, persistent cookies, and local storage tokens used to maintain your login state and remember your preferences. See Section 11 for full cookie details.
• Geolocation data: approximate location derived from your IP address, used solely to verify that you are accessing the Platform from a permitted region.

3How We Use Your Personal Data

We use your personal data only for legitimate, specified purposes. The table below sets out the primary purposes for which we process your data and the legal basis for each.

4Sharing Your Personal Data

tc666 does not sell, rent, or trade your personal data to third parties for marketing purposes. We may share your data only in the following limited circumstances, and only to the extent necessary for the stated purpose:

• Payment processors and banking partners (e.g. bKash, Nagad, Rocket, Upay, Visa, Mastercard) — solely to facilitate the processing of your financial transactions.
• Game content providers (e.g. Pragmatic Play, Evolution Gaming, Spribe) — limited to session identifiers and account-level data necessary to run the games you play.
• Identity verification (KYC) service providers — for the purpose of verifying your identity documents during account registration or withdrawal processing.
• Regulatory and law enforcement authorities — where tc666 is legally required to disclose information in connection with anti-money laundering obligations, fraud investigations, or court orders.
• IT infrastructure and cloud hosting providers — who process data solely on our behalf under strict data processing agreements that prohibit any independent use of your data.

5Data Security

tc666 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security framework includes the following controls:

Encryption

All data transmitted between your device and the tc666 Platform is encrypted using TLS 1.2 or higher (SSL). Passwords are stored using a one-way cryptographic hash function and are never held in plain text. Sensitive financial data is encrypted at rest using AES-256 encryption.

Access Controls

Access to personal data within tc666's internal systems is restricted to authorised personnel on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and regular security awareness training.

Incident Response

In the event of a personal data breach that is likely to result in a risk to your rights or freedoms, tc666 will notify you without undue delay, and in any event within 72 hours of becoming aware of the breach, in accordance with applicable data protection law.

6Data Retention

tc666 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Account data (identity, contact, financial): retained for the duration of your active account plus a minimum of 5 years following account closure, in compliance with anti-money laundering record-keeping obligations.
• Transaction records: retained for a minimum of 5 years from the date of each transaction, as required under applicable financial regulations.
• Customer support communications: retained for 2 years from the date of the last communication, to assist with resolving follow-up enquiries.
• Technical and usage logs: retained for up to 90 days for security monitoring purposes, after which they are automatically deleted or anonymised.

When the applicable retention period expires, your personal data is securely deleted or anonymised in such a way that it can no longer be linked back to you as an individual.

7Your Data Rights

Subject to applicable law, you have the following rights in relation to your personal data held by tc666. You may exercise any of these rights by contacting our support team at [email protected]. We will respond to all valid requests within 30 calendar days.

• 📋 Right of Access — request a copy of all personal data we hold about you (a "Subject Access Request").
• ✏️ Right of Rectification — request correction of any inaccurate or incomplete personal data we hold about you.
• 🗑️ Right of Erasure — request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
• ⏸️ Right to Restriction — request that we restrict the processing of your personal data in certain circumstances (e.g. while accuracy is disputed).
• 📦 Right to Data Portability — request a structured, machine-readable copy of the personal data you have provided to us, where technically feasible.
• 🙅 Right to Object — object to the processing of your personal data where we rely on legitimate interests as the legal basis, including profiling for responsible gaming purposes.

8International Data Transfers

tc666's primary servers and data infrastructure are operated in jurisdictions that maintain adequate data protection standards. In limited circumstances, personal data may be transferred to or processed by service providers located outside Bangladesh, for example cloud hosting providers or game platform providers with international infrastructure.

Where such transfers occur, tc666 ensures that appropriate safeguards are in place — including standard contractual clauses, data processing agreements, or reliance on adequacy decisions — so that your personal data receives a level of protection equivalent to that provided under applicable data protection standards.

9Children's Privacy

The tc666 Platform is strictly intended for adults aged 21 and above. We do not knowingly collect, process, or retain personal data from any person under the age of 21. If you are under 21, you must not use the Platform or submit any personal data to tc666.

• If a parent or guardian becomes aware that their child under the age of 21 has registered an account or provided personal data to tc666, please contact us immediately at [email protected].
• Upon receiving such a notification, tc666 will promptly suspend the account, delete all associated personal data, and refund any real-money balance to the payment method on record, subject to identity verification.
• tc666 employs age verification checks at registration to minimise the risk of underage account creation. However, we also rely on parents and guardians to supervise minors' internet usage and to prevent access to age-restricted platforms.

If tc666 discovers that a registered account belongs to a person under the age of 21, whether through proactive checks or third-party reports, the account will be immediately suspended and all relevant data reviewed in accordance with this Policy.

10Changes to This Privacy Policy

tc666 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or the services we offer. When we make material changes to this Policy, we will notify registered account holders by email or by displaying a prominent notice on the Platform prior to the changes taking effect.

The date at the top of this Policy indicates when it was last revised. We encourage you to review this Policy periodically to stay informed about how tc666 protects your personal data.

11Cookies and Tracking Technologies

tc666 uses cookies and similar technologies to operate the Platform, maintain your session, remember your preferences, and analyse usage patterns for the purpose of improving our services. We do not use cookies for cross-site advertising or for selling your data to advertisers.

Essential Cookies

These cookies are strictly necessary for the Platform to function. They include session authentication tokens, security tokens, and load-balancing cookies. You cannot opt out of essential cookies without disabling your ability to use the Platform.

Analytics Cookies

We use first-party analytics cookies to understand how players navigate the Platform, which pages are most visited, and where technical errors occur. This data is aggregated and anonymised — it is not used to identify you as an individual. You may opt out of analytics cookies by contacting [email protected].

12Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way tc666 handles your personal data, please contact our Data Privacy team. We aim to acknowledge all privacy-related enquiries within 24 hours and to provide a substantive response within 30 calendar days.

13Governing Law

This Privacy Policy is governed by and construed in accordance with applicable law. tc666 is committed to operating its data processing activities in a lawful, fair, and transparent manner consistent with applicable data protection standards and the rights of individuals whose data we process.

Any dispute arising from the application or interpretation of this Privacy Policy shall be subject to the dispute resolution process set out in tc666's Terms and Conditions, available at tc666.asia/terms-conditions.