fd66 Privacy Policy

Introduction and Scope

This Privacy Policy ("Policy") describes how fd66 ("fd66", "the Platform", "we", "us", "our") collects, uses, stores, discloses, and otherwise processes personal information relating to individuals ("you", "the User", "the Player") who visit fd66.io, register an account, make deposits, place bets, or otherwise interact with any product or service offered under the fd66 brand.

This Policy applies to all personal data processed by fd66 in connection with the operation of the fd66 platform, including data collected through the website, via customer support communications, and through payment processing activities. It does not apply to third-party websites that may be linked from fd66.io — fd66 has no responsibility for the privacy practices of external sites.

This Policy is intended to be read alongside fd66's Terms and Conditions, which are published separately at fd66.io/terms-conditions. In the event of any conflict between this Policy and the Terms and Conditions, the Terms and Conditions shall prevail unless the conflict relates specifically to a matter of data privacy, in which case this Policy governs.

Data Controller Information

For the purposes of this Privacy Policy, fd66 acts as the data controller in respect of all personal data collected from users of the fd66 platform. As data controller, fd66 determines the purposes and means of processing your personal information.

All data-related enquiries, rights requests, and concerns should be directed to the fd66 data team using the contact details set out in Section 15 of this Policy. fd66 is committed to responding to all legitimate data enquiries promptly and in accordance with the principles described in this Policy.

Personal Data We Collect

fd66 collects the following categories of personal data from users of the platform. The specific data collected in any individual case will depend on the nature and extent of your engagement with the platform.

fd66 collects only the personal data that is reasonably necessary for the purposes described in this Policy. Where collection of specific data is optional, this will be clearly indicated at the point of collection.

How We Collect Your Data

fd66 collects personal data through the following means:

• Direct collection: Information you provide voluntarily when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or update your account settings.
• Automated collection: Technical data collected automatically when you browse or use the fd66 platform, including through cookies, server logs, and similar tracking technologies. See Section 10 for full details of fd66's cookie practices.
• Third-party collection: Information received from payment providers (bKash, Nagad, Rocket, Upay, Visa, Mastercard) in connection with deposit and withdrawal processing, and from identity verification service providers engaged to assist with KYC compliance.
• Publicly available sources: In cases where fd66 has a legitimate interest or legal obligation to verify information, data may be cross-referenced against publicly available records.

fd66 does not purchase personal data lists from data brokers or marketing agencies. All personal data held by fd66 was collected directly from you or from a third party acting on your behalf in connection with a transaction on the platform.

Legal Basis for Processing

fd66 processes personal data on one or more of the following legal bases, depending on the specific processing activity:

• Performance of a contract: Processing that is necessary to fulfil fd66's obligations to you under the Terms and Conditions, including account administration, payment processing, and delivery of gaming services.
• Legal obligation: Processing that is required to comply with applicable legal and regulatory obligations, including anti-money-laundering (AML) requirements, KYC verification obligations, and fraud prevention duties.
• Legitimate interests: Processing carried out to pursue fd66's legitimate business interests, including platform security, fraud detection, responsible gaming monitoring, customer support improvement, and business analytics — provided these interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, and informed consent, such as optional communication preferences. Where consent is the legal basis, you may withdraw it at any time without affecting the lawfulness of processing carried out prior to withdrawal.

How We Use Your Data

fd66 uses the personal data it collects for the following purposes:

• Account creation and management: To register your account, maintain your account profile, process password resets, and communicate account-related notices.
• Identity verification (KYC): To verify your identity, confirm your age (21+), and satisfy fd66's anti-money-laundering and fraud prevention obligations before processing withdrawals or granting access to higher-tier account features.
• Payment processing: To process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and other accepted payment methods, and to maintain accurate financial records.
• Gaming services delivery: To provide access to cricket betting, live casino, slots, and all other game products available on the fd66 platform.
• Customer support: To respond to your enquiries, resolve complaints, and manage disputes in connection with your use of the fd66 platform.
• Responsible gaming: To monitor gaming activity for signs of problematic gambling behaviour and to administer self-exclusion, deposit limit, and cooling-off requests in compliance with fd66's responsible gaming commitments.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, account takeover attempts, collusion, bot activity, and other security threats to the fd66 platform and its users.
• Regulatory compliance: To fulfil obligations arising from applicable laws and regulations, including cooperation with lawful requests from government authorities and law enforcement agencies.
• Platform improvement: To analyse aggregated, anonymised usage data to understand how the platform is used and to improve the quality, performance, and features of fd66's services.
• Promotional communications: To send you information about bonuses, promotions, and new features available on fd66, where you have consented to receive such communications. You may opt out of promotional communications at any time by contacting [email protected].

fd66 does not use personal data for automated decision-making that produces significant legal effects for users, except as part of fraud detection and responsible gaming monitoring systems, where human review is available upon request.

Data Sharing and Disclosure

fd66 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. Personal data may be disclosed to the following categories of recipient where necessary and in accordance with this Policy:

• Payment service providers: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and other payment processors engaged to facilitate deposits and withdrawals. These providers receive only the data necessary to process your specific transaction.
• Identity verification providers: Third-party KYC and identity verification services engaged by fd66 to assist in confirming user identities and complying with anti-money-laundering obligations.
• Game technology providers: Game software studios and platform technology suppliers (such as Pragmatic Play, Evolution Gaming, Spribe, and similar providers) may receive technical data necessary for the delivery of their game products to fd66 users.
• IT and security service providers: Cloud infrastructure, cybersecurity, and fraud monitoring service providers engaged to support the secure operation of the fd66 platform.
• Legal and regulatory authorities: Competent government authorities, law enforcement agencies, and regulatory bodies where fd66 is required by law to disclose information, or where fd66 determines disclosure is necessary to protect the rights, property, or safety of the platform or its users.
• Professional advisers: Lawyers, accountants, auditors, and other professional advisers engaged by fd66 in connection with the operation of the business, subject to professional confidentiality obligations.

International Data Transfers

The fd66 platform serves players primarily in Bangladesh. However, due to the global nature of internet infrastructure and the international operations of some of fd66's technology and payment partners, your personal data may be transferred to and processed in countries outside Bangladesh.

Where such transfers occur, fd66 takes reasonable steps to ensure that your personal data receives a level of protection consistent with the principles set out in this Policy. This may include entering into data processing agreements with international service providers that impose appropriate data protection obligations.

By using the fd66 platform and accepting this Privacy Policy, you consent to the transfer of your personal data to fd66's service providers in other jurisdictions where such transfer is necessary for the purposes described in this Policy.

Data Retention

fd66 retains personal data only for as long as is necessary for the purposes for which it was collected, or for as long as is required by applicable legal or regulatory obligations. The following general retention periods apply:

• Account data: Retained for the duration of your active account plus a minimum of five years following account closure, in accordance with anti-money-laundering record-keeping requirements.
• KYC and identity documents: Retained for a minimum of five years from the date of verification or from the date of account closure, whichever is later, in accordance with applicable compliance obligations.
• Financial transaction records: Retained for a minimum of five years from the date of the transaction.
• Gaming activity records: Retained for a minimum of three years from the date of the activity, or longer where required by responsible gaming obligations or ongoing investigations.
• Customer support communications: Retained for a minimum of two years from the date of the last communication in a support thread.
• Technical and log data: Retained for a maximum of twelve months from the date of collection, unless a longer retention period is required for security or fraud investigation purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that ensures it can no longer be associated with an identifiable individual. Anonymised or aggregated data derived from your personal data may be retained indefinitely for business analytics and platform improvement purposes.

Cookies and Tracking Technologies

fd66 uses cookies and similar web technologies to support the operation of the platform and to understand how users interact with the site. A cookie is a small text file placed on your device by a web server when you visit a website. The following types of cookies are used on fd66.io:

• Strictly necessary cookies: These cookies are essential for the platform to function. They enable core features such as user session management, account authentication, and security token validation. The platform cannot function properly without these cookies, and they cannot be disabled.
• Performance and analytics cookies: These cookies collect information about how visitors use the fd66 platform — for example, which pages are visited most frequently, how long sessions last, and where errors occur. This information is used in aggregated, anonymised form to improve platform performance and user experience.
• Functionality cookies: These cookies remember your preferences and settings (such as display preferences and responsible gaming limit configurations) so that you do not need to re-enter them each time you visit the platform.

You can manage and delete cookies through your browser settings. Instructions for managing cookies vary by browser — please refer to your browser's help documentation. Please note that disabling strictly necessary cookies will affect your ability to use the fd66 platform, including the ability to log into your account.

Your Rights

As a user of the fd66 platform, you have the following rights in relation to the personal data fd66 holds about you. To exercise any of these rights, please contact fd66 at [email protected] with your full name, registered email address, and a clear description of the right you wish to exercise.

• Right of access: You have the right to request a copy of the personal data fd66 holds about you, together with information about how that data is processed.
• Right to rectification: You have the right to request that fd66 correct any inaccurate or incomplete personal data it holds about you.
• Right to erasure: You have the right to request that fd66 delete your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis for processing applies. This right is subject to fd66's legal retention obligations — data required by law to be retained cannot be erased on request.
• Right to restriction of processing: You have the right to request that fd66 restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where you object to processing based on legitimate interests.
• Right to data portability: Where processing is based on your consent or on the performance of a contract, you have the right to request that fd66 provide your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing of your personal data where fd66 relies on legitimate interests as the legal basis, unless fd66 can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.

fd66 will acknowledge receipt of all data rights requests within five business days and will aim to provide a substantive response within thirty days. Where a request is complex or where a large volume of requests is received, fd66 may extend this period by a further thirty days, and will notify you accordingly.

fd66 will not charge a fee for handling data rights requests unless a request is manifestly unfounded or excessive, in which case a reasonable administrative fee may be applied or the request may be declined.

Children and Minors

The fd66 platform is strictly intended for adults aged 21 years and above. fd66 does not knowingly collect personal data from individuals under the age of 21. The minimum age restriction is enforced through the KYC identity verification process, which requires all registered users to provide government-issued identification confirming their date of birth.

If fd66 becomes aware that personal data has been collected from an individual who is under the age of 21, fd66 will take immediate steps to close the relevant account, forfeit any outstanding balances in accordance with the Terms and Conditions, and securely delete all personal data associated with that account.

Security Measures

fd66 takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• SSL/TLS encryption: All data transmitted between your browser or device and the fd66 platform is encrypted using industry-standard SSL/TLS protocols, protecting your personal and financial information in transit.
• Access controls: Access to personal data held by fd66 is restricted on a strict need-to-know basis. Personnel authorised to access personal data are subject to confidentiality obligations and undergo appropriate security training.
• Secure server infrastructure: fd66's data is hosted on secured server infrastructure with physical and logical access controls, firewalls, intrusion detection systems, and regular vulnerability assessments.
• Password security: User account passwords are stored in hashed form. fd66 never stores passwords in plain text and never asks users to reveal their password in any support communication.
• Fraud monitoring: fd66 operates real-time transaction monitoring and behavioural analysis systems to detect and respond to potential security threats, including account takeover attempts and fraudulent financial activity.

While fd66 employs robust security measures, no digital platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials and for notifying fd66 immediately at [email protected] if you suspect any unauthorised access to your account. Please refer to Section 3 of the fd66 Terms and Conditions for your obligations regarding account security.

Changes to This Policy

fd66 reserves the right to update, amend, or replace this Privacy Policy at any time. Any changes to this Policy will be published on the fd66 platform at fd66.io/privacy-policy, and where changes are material, fd66 will notify registered users via the email address associated with their account.

The "Last Updated" date at the top of this Policy indicates when the most recent revision was made. fd66 recommends that all registered players review this Policy periodically to remain informed of how their personal data is being handled.

Your continued use of the fd66 platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to any revisions made to this Policy, you should cease using the fd66 platform and contact [email protected] to request account closure.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to fd66's handling of your personal data, please contact the fd66 data team using the details below. All communications will be treated in strict confidence.

Please note that the email address above is provided as plain-text contact information only. When submitting a data rights request, please include your full registered name, the email address associated with your fd66 account, and a clear description of your request. fd66 may need to verify your identity before processing a data rights request.

This Privacy Policy was last reviewed and updated on 1 January 2026. fd66 is committed to transparent, responsible data handling and to maintaining the trust of every player on its platform.