sb66 Privacy Policy

1 Information We Collect

sb66 collects personal data through several channels: directly from you when you register an account or interact with the platform, automatically through your use of the site, and in limited circumstances from trusted third-party sources. We collect only what is necessary to provide our services, maintain account security, comply with applicable legal obligations, and improve the player experience.

1.1 Registration and Account Data

When you create an sb66 account, we collect the information you provide at registration. This typically includes:

• Full legal name as it appears on your government-issued identification document.
• Date of birth for the purpose of age verification (players must be 18 or older).
• Residential address, including division, district, and postal code (Bangladesh addresses accepted).
• Email address, used for account communications, transaction confirmations, and support.
• Mobile phone number, used for account security, two-factor authentication, and support contact.
• Username and encrypted password credentials for platform access.

1.2 Identity Verification (KYC) Data

In accordance with Know Your Customer (KYC) requirements, sb66 may request copies of identity and address verification documents. These may include a national identity card (NID), passport, or other government-issued photo ID, as well as proof of address documents such as a utility bill or bank statement. Where payment verification is required, we may also request confirmation of your mobile financial service account (bKash, Nagad, Rocket, or Upay account details).

1.3 Financial Transaction Data

sb66 records all deposits, withdrawals, and in-platform transactions. This includes transaction amounts in Bangladeshi Taka (৳), timestamps, payment method identifiers (partial account numbers or mobile wallet reference codes), and transaction status. Full payment credentials (e.g., complete card numbers or full mobile wallet PINs) are never stored by sb66 — they are handled directly by our payment processing partners.

1.4 Betting and Gaming Activity Data

We maintain detailed records of your betting and gaming activity on sb66. This includes the markets and games you participate in, stake amounts, odds accepted, game outcomes, bonus usage, and session duration. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory compliance purposes.

1.5 Technical and Device Data

When you access sb66.im, our systems automatically collect certain technical data about your device and connection. This includes your IP address, browser type and version, operating system, device identifiers, screen resolution, referring URL, and pages visited during each session. This information helps us maintain platform security, detect fraudulent access patterns, and optimise the platform experience across different devices.

2 How We Use Your Data

sb66 processes personal data only for clearly defined, legitimate purposes. We do not use your data for any purpose that is incompatible with the reasons for which it was originally collected. The following outlines the primary purposes for which your data is processed and the legal basis for each type of processing.

2.1 Service Delivery and Account Management

The most fundamental use of your data is to operate your sb66 account and deliver the services you have requested. This includes processing your registration, verifying your identity and age, enabling deposits and withdrawals via bKash, Nagad, Rocket, Upay, or bank transfer, displaying your betting history, and maintaining your account preferences and responsible gaming settings. Without this processing, we would be unable to provide the sb66 platform to you.

2.2 Legal and Regulatory Compliance

As an international gambling platform, sb66 is required to maintain records of player identity, transactions, and activity for compliance purposes. This includes conducting KYC checks, monitoring for money laundering indicators, detecting and preventing fraud and collusion, and retaining transaction records for the minimum period required under applicable financial regulations. We process data for these purposes as a legal obligation, and this processing cannot be opted out of as a condition of using the platform.

2.3 Responsible Gaming Monitoring

sb66 uses your gaming activity data — including session frequency, stake patterns, deposit behaviour, and self-exclusion or limit settings — to monitor for signs of problem gambling. Where our systems flag a player as potentially at risk, we may contact the player via their registered email or phone number to offer responsible gaming resources or apply protective account restrictions. This processing is carried out in the legitimate interest of player welfare.

2.4 Platform Security and Fraud Prevention

Technical and behavioural data collected during your sessions is used to protect the platform and all players from fraudulent activity, unauthorised access, account takeovers, and betting manipulation. This includes automated monitoring for login anomalies, unusual transaction patterns, and multi-account behaviour. Security processing is a legitimate interest of sb66 and is essential to the safe operation of the platform.

2.5 Marketing Communications

Where you have given your explicit consent at registration or at a later point, sb66 may send you promotional communications about offers, bonuses, and new features via email or SMS. You may withdraw your marketing consent at any time by updating your notification preferences in the account settings section or by contacting support at [email protected]. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before the withdrawal.

2.6 Customer Support

When you contact sb66 support — whether via live chat, email, or WhatsApp — we collect and retain a record of the communication in order to resolve your query, investigate complaints, and maintain a history for follow-up purposes. Support communications are stored for a minimum of two years.

3 Data Sharing & Third Parties

sb66 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share data with carefully selected third parties only to the extent necessary to operate the platform, fulfil our legal obligations, or protect the integrity of the service. All third-party service providers engaged by sb66 are contractually bound to process your data only in accordance with sb66's instructions and applicable data protection standards.

3.1 Payment Processing Partners

To facilitate deposits and withdrawals in Bangladeshi Taka (৳), sb66 shares necessary transaction data with licensed payment service providers. These include mobile financial service operators (bKash, Nagad, Rocket, Upay) and card processing networks (Visa, Mastercard) where applicable. These partners receive only the minimum data required to process a specific transaction and are bound by their own regulatory obligations regarding data security.

3.2 Game Content Providers

Live dealer games and casino titles on sb66 are powered by third-party game studios including Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe. These providers may receive anonymised session and game outcome data necessary to deliver the game, process results, and provide technical support. No personally identifiable information beyond what is strictly required for game delivery is shared with game studios.

3.3 Identity Verification Services

sb66 may use third-party identity verification services to assist with KYC document checks. These providers receive the documents and personal data you submit as part of the verification process and return a verification decision. They are prohibited from retaining or using your data for any purpose other than the specific verification task.

3.4 Legal and Regulatory Disclosures

In circumstances where sb66 is required by law, court order, or a binding request from a competent authority to disclose personal data, we will comply with that obligation. Where legally permissible, we will notify the affected player of such a disclosure request before complying. sb66 may also share data with law enforcement agencies where it has reasonable grounds to suspect that the data relates to criminal activity including money laundering or fraud.

4 Cookies & Tracking Technologies

sb66.im uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your authenticated session, and understand how visitors interact with the site. This section explains the types of cookies we use and how you can manage them.

4.1 Strictly Necessary Cookies

These cookies are essential for the platform to function. They include session authentication tokens (which keep you logged in as you navigate between pages), security cookies that detect and mitigate cross-site request forgery (CSRF) attacks, and cookies that remember your language and region preference. These cookies cannot be disabled without breaking core platform functionality.

4.2 Performance and Analytics Cookies

sb66 uses performance cookies to collect aggregated, anonymised data about how players use the platform — such as which pages are visited most frequently, average session length, and common navigation paths. This data helps us identify areas for improvement and optimise the platform experience. These cookies do not identify you as an individual.

4.3 Functional Cookies

Functional cookies allow the platform to remember choices you have made — such as your preferred deposit method, responsible gaming limit settings, and notification preferences — so that you do not need to re-enter them on every visit. These cookies enhance usability and are set only after you interact with the relevant feature.

4.4 Managing Cookies

You can control or delete cookies through your browser settings at any time. Most modern browsers allow you to block all third-party cookies, delete existing cookies, or receive a notification before a new cookie is set. Please note that disabling strictly necessary cookies will prevent you from logging into your sb66 account. For more detailed guidance on managing cookies in your specific browser, please refer to your browser's help documentation.

5 Data Retention & Storage

sb66 retains personal data for as long as is necessary to fulfil the purposes for which it was collected and to comply with applicable legal retention requirements. The following general retention periods apply:

• Active account data is retained for the full duration of your account's lifetime plus a minimum of five years following account closure.
• Financial transaction records (deposits, withdrawals, and bet history) are retained for a minimum of five years from the date of the transaction.
• KYC documents are retained for a minimum of five years from the date of submission or from the date of account closure, whichever is later.
• Support communications are retained for a minimum of two years from the date of the most recent message in a given thread.
• Marketing consent records are retained for the duration of the consent's validity plus two years to evidence compliance.
• Technical and session logs are retained for up to 12 months and then automatically purged from active systems.

All personal data held by sb66 is stored on servers located in secure data centre facilities. Access to stored personal data is restricted to authorised personnel on a strict need-to-know basis. Data at rest is encrypted using AES-256 encryption. Data in transit between your browser and sb66.im is protected by TLS 1.2 or higher (commonly known as HTTPS / SSL).

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be associated with an individual. Where anonymised data is retained beyond the retention period (for example, for statistical analysis of platform usage), it is no longer considered personal data and falls outside the scope of this Privacy Policy.

6 Your Privacy Rights

sb66 respects your rights in relation to your personal data. The following rights are available to all registered players. To exercise any of these rights, please contact the sb66 data team by emailing [email protected] with "Privacy Rights Request" in the subject line. We will respond to all valid requests within 30 days.

6.1 Right of Access

You have the right to request a copy of the personal data sb66 holds about you. Upon receiving a verified access request, we will provide a structured summary of the data we hold, the purposes for which it is processed, and the categories of third parties with whom it has been shared.

6.2 Right to Rectification

If any personal data sb66 holds about you is inaccurate or incomplete, you have the right to request correction. You can update many details — such as your email address and phone number — directly through your account settings. For corrections to identity documents or legal name, please contact support with supporting documentation.

6.3 Right to Erasure

In certain circumstances, you have the right to request that sb66 delete your personal data. This right applies where the data is no longer necessary for the purpose for which it was collected, where you withdraw consent (and there is no other legal basis for processing), or where the data has been processed unlawfully. Please note that this right is subject to override by legal retention obligations — in particular, financial transaction records and KYC data must be retained for the periods set out in Section 5 regardless of an erasure request.

6.4 Right to Restrict Processing

You may request that sb66 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or where processing is unlawful but you prefer restriction over erasure. During a period of restriction, your data will be stored but not actively processed for other purposes.

6.5 Right to Object to Marketing

You have an absolute right to object to the use of your personal data for direct marketing purposes at any time. You can exercise this right by updating your notification preferences in account settings or by contacting support at [email protected]. Upon receipt of an objection to marketing, sb66 will cease all marketing communications to your registered contact details within 5 business days.

6.6 Right to Data Portability

Where processing is carried out on the basis of your consent or on the basis of a contract with you, and the processing is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format. Please contact support to submit a portability request.

7 Data Security Measures

Protecting your personal and financial data is a core operational priority at sb66. We implement a layered set of technical and organisational security measures designed to prevent unauthorised access, accidental loss, destruction, or disclosure of personal data. While no online platform can guarantee absolute security, sb66's security framework represents current industry best practice for online gambling platforms serving the Bangladesh market and international players.

7.1 Encryption

All data transmitted between your browser or app and sb66.im is encrypted using TLS 1.2 or TLS 1.3 (HTTPS). Sensitive data stored on our servers — including identity documents and financial records — is encrypted at rest using AES-256. Passwords are hashed using a strong one-way hashing algorithm and are never stored in recoverable plain-text form.

7.2 Access Controls

Access to personal data within sb66's internal systems is restricted to staff members with a verified operational need. Access rights are assigned on a least-privilege basis and are reviewed regularly. All internal access to sensitive data is logged and subject to audit. Former employees' access credentials are revoked immediately upon departure.

7.3 Incident Response

sb66 maintains a documented data breach response procedure. In the event of a security incident that is likely to result in a risk to players' rights, affected players will be notified by email to their registered address as promptly as practicable. The notification will describe the nature of the incident, the categories of data affected, the likely consequences, and the steps sb66 is taking to address the breach.

7.4 Your Role in Security

You also play an important role in keeping your account secure. sb66 strongly recommends that you use a strong, unique password for your account, enable two-factor authentication (2FA) where available, never share your login credentials with any other person, and contact support immediately at [email protected] if you suspect your account has been accessed without your authorisation.

8 Policy Updates & Contact

8.1 Changes to This Policy

sb66 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. Where changes are material — meaning they significantly affect the way we process your data or the rights available to you — we will notify registered players via their registered email address at least 14 days before the changes take effect. Minor clarifications or editorial corrections may be made without prior notice. The "Last Updated" date at the top of this document will always reflect the most recent revision.

We encourage you to review this Privacy Policy periodically, particularly if you receive a notification from sb66 about an update. Continued use of the platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms.

8.2 How to Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights as described in Section 6, or want to raise a concern about how your personal data has been handled by sb66, please contact our support team using the following details:

• Email: [email protected] — please use the subject line "Privacy Policy Enquiry" or "Privacy Rights Request" as appropriate.
• Live Chat: Available 24/7 through the sb66 platform after logging in to your account.
• WhatsApp: +880 1XXX-XXXXXX — available during support hours (24/7, BST UTC+6).

We aim to respond to all privacy-related enquiries within 5 business days and to resolve formal privacy rights requests within 30 calendar days of receipt of a verified request.