dv66 Privacy Policy

1 Introduction

This Privacy Policy ("Policy") is published by dv66 ("dv66", "we", "us", "our"), the operator of the online betting and casino platform available at https://dv66.io ("the Platform"). This Policy explains how dv66 collects, processes, stores, uses, discloses, and protects personal information relating to registered players, visitors, and prospective users of the Platform ("you", "your").

dv66 is committed to safeguarding the privacy of every player who uses our Platform, particularly those based in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, and across Bangladesh. We recognise that personal data is sensitive and that our players trust us to handle it responsibly. This Policy has been written in clear, accessible English so that you can easily understand your rights and our obligations.

By accessing the Platform, creating an account, making a deposit, or using any service offered by dv66, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with this Policy, please do not use the Platform and contact our support team to close your account.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which are published on the Platform and incorporated herein by reference. In the event of any conflict between this Policy and those documents on matters of data protection, this Policy shall prevail.

2 Data We Collect

dv66 collects the following categories of personal data from players and visitors to the Platform:

2.1 Identity Data

• Full legal name as it appears on your government-issued identification document.
• Date of birth (for age verification purposes — 21+ policy enforcement).
• National ID card number, passport number, or driving licence number submitted during KYC verification.
• Photograph or scanned image of identity documents where provided.

2.2 Contact Data

• Email address used to register your account.
• Mobile phone number, particularly where used as the primary account identifier or linked to a bKash, Nagad, or Rocket mobile wallet.
• Residential address (city, district, and postcode where applicable) provided during registration or KYC.

2.3 Financial Data

• Mobile wallet identifiers (bKash account number, Nagad number, Rocket number, Upay number) used to process deposits and withdrawals.
• Bank account details where bank transfer is used as a payment method (e.g., Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank).
• Transaction history including deposit amounts, withdrawal requests, bet stakes, and winnings denominated in Bangladeshi Taka (৳).

2.4 Technical & Usage Data

• IP address and approximate geographic location derived from IP.
• Device type, operating system, and browser version used to access the Platform.
• Session timestamps, pages visited, features used, and duration of Platform sessions.
• Betting and gaming activity including game selections, stake amounts, game outcomes, and bonus usage.
• Cookie identifiers and similar tracking data (see Section 7).

2.5 Communications Data

• Records of communications you have with our support team via live chat, email, or any other channel.
• Feedback, complaints, and dispute correspondence submitted to dv66.
• Marketing preference settings (opt-in/opt-out records for promotional communications).

3 How We Collect Data

dv66 collects personal data through the following methods:

• Direct provision: Data you actively provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or updating your account profile.
• Automated collection: Technical and usage data collected automatically when you access and interact with the Platform, via server logs, cookies, and similar technologies (see Section 7).
• Third-party sources: Identity verification data cross-referenced with third-party identity verification services or fraud prevention databases where we are legally permitted to do so. Payment transaction confirmation data received from mobile wallet operators such as bKash, Nagad, and Rocket.
• Publicly available sources: In limited circumstances and where legally permitted, we may supplement your profile with data from publicly available sources for fraud detection or responsible gaming purposes.

4 How We Use Your Data

dv66 uses the personal data it collects for the following specific purposes:

dv66 will not use your personal data for any purpose not listed above without first obtaining your explicit consent, or unless we are required to do so by law. If we intend to use your data for a new purpose, we will notify you in advance and update this Privacy Policy accordingly.

5 Legal Basis for Processing

dv66 processes personal data only where a lawful basis for doing so exists. The following legal bases apply to the processing activities described in this Policy:

• Contractual necessity: Processing required to fulfil the contract between dv66 and you as a registered player — including account registration, transaction processing, and game provision.
• Legal obligation: Processing required to comply with applicable legal obligations, including anti-money laundering regulations, age verification requirements, and fraud prevention duties.
• Legitimate interests: Processing necessary for the legitimate interests of dv66, including fraud detection, platform security, responsible gaming monitoring, and product analytics — provided those interests are not overridden by your rights and interests.
• Consent: Processing carried out on the basis of your freely given, specific, and informed consent — primarily for the sending of promotional and marketing communications. You may withdraw consent at any time by contacting our support team or updating your account marketing preferences.

6 Data Sharing

dv66 does not sell, rent, or trade your personal data to third parties. We may share your personal data with the following categories of third party, strictly on a need-to-know basis and subject to appropriate data processing agreements:

6.1 Payment Service Providers

To process deposits and withdrawals in Bangladeshi Taka (৳), we share necessary financial and identity data with our payment partners, including bKash, Nagad, Rocket, Upay, and relevant banking institutions. These providers process your data only as required to complete the requested transaction and are bound by their own privacy and security obligations.

6.2 Game Studio Providers

Third-party game studios (including Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe) may receive limited technical identifiers necessary to deliver their games within the Platform. These providers do not receive your full identity or financial data.

6.3 Identity Verification Services

Where required for KYC compliance, we may share identity data with authorised third-party identity verification providers. These providers are contractually bound to process data solely for verification purposes.

6.4 Legal and Regulatory Authorities

dv66 may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required to do so by applicable law, court order, or in connection with the investigation of suspected fraud, money laundering, or other criminal activity.

6.5 Business Transfers

In the event that dv66 undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, player data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and your rights under this Policy will continue to apply.

7 Cookies & Tracking Technologies

dv66 uses cookies and similar tracking technologies (including web beacons and local storage) to enhance your experience on the Platform, ensure Platform security, and analyse usage patterns. Cookies are small text files placed on your device when you visit a website. They do not contain executable code and cannot access other files on your device.

7.1 Types of Cookies We Use

• Strictly necessary cookies: Essential for the Platform to function correctly. These include session authentication cookies that keep you logged in, security tokens that prevent cross-site request forgery, and cookies that remember your in-session preferences. These cookies cannot be disabled without impairing Platform functionality.
• Functional cookies: Enable enhanced features such as remembering your preferred language, layout settings, and responsible gaming display preferences across sessions.
• Analytics cookies: Help us understand how players use the Platform — which pages are most visited, how long sessions last, and where players encounter difficulty. This data is collected in aggregated, anonymised form and used solely to improve the Platform experience.
• Security cookies: Used to detect and prevent fraudulent activity, bot access, and multiple-account abuse. These cookies record device fingerprint data and session behavioural signals.

7.2 Managing Cookies

You may manage or disable cookies through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to log in to your dv66 account and use the Platform. Instructions for managing cookies in common browsers (Chrome, Firefox, Safari, Edge) are available in the help documentation of each browser.

8 Data Retention

dv66 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following general retention periods apply:

When data is no longer required, it is securely deleted or anonymised in accordance with our internal data destruction procedures. Anonymised, aggregated data (from which individual players cannot be identified) may be retained indefinitely for statistical and product improvement purposes.

9 Your Rights

As a player on the dv66 Platform, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team via live chat or at support at dv66.io.

• Right of access: You have the right to request a copy of the personal data that dv66 holds about you, free of charge, within 30 days of your request.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data where we no longer have a legitimate purpose or legal obligation to retain it. Note that certain data (such as financial transaction records) must be retained for legal compliance periods even after account closure.
• Right to restrict processing: You may request that we limit the way we use your personal data in certain circumstances, such as where you contest the accuracy of the data or where processing is unlawful but you prefer restriction over deletion.
• Right to data portability: You may request a machine-readable copy of the personal data you have provided to dv66 directly, in order to transfer it to another service provider.
• Right to object: You have the right to object to processing of your personal data based on legitimate interests, including profiling for marketing purposes. You may also withdraw consent for marketing communications at any time.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

10 Data Security

dv66 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or disclosure. These measures include but are not limited to:

• SSL/TLS encryption on all pages of the Platform, ensuring data in transit between your device and our servers is protected at all times.
• Encrypted storage of sensitive personal data including identity documents, financial records, and password hashes on access-controlled servers.
• Role-based access controls ensuring that only authorised dv66 personnel with a specific operational need can access player personal data.
• Multi-factor authentication requirements for all dv66 staff accessing internal systems that contain player data.
• Regular security audits, penetration testing, and vulnerability assessments conducted by qualified security professionals.
• Real-time fraud monitoring and anomaly detection systems that flag unusual access patterns or suspicious account activity.
• Incident response procedures in place to address any personal data breach promptly, including notifying affected players without undue delay where required.

While dv66 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You also have a role to play: keep your account credentials confidential, use a strong and unique password, and contact our support team immediately if you believe your account has been compromised.

11 Third-Party Links

The dv66 Platform may contain references to third-party services, payment providers, and game studio content. Where links or integrations to third- party platforms exist, please be aware that those third parties operate their own privacy policies and data practices independently of dv66. We are not responsible for the privacy practices of third-party websites, game studios, or payment service providers. We encourage you to review the privacy policy of any third-party service before providing them with your personal data.

dv66 does not endorse and is not liable for the content, privacy practices, or data security of any third-party platform. Our Privacy Policy applies solely to data collected and processed by dv66 in connection with your use of the Platform at https://dv66.io.

12 Children & Minors

dv66 operates an adults-only platform. All players must be aged 21 or above to register an account and use the Platform. We do not knowingly collect, process, or store personal data from individuals under the age of 21. Age verification is conducted as part of the account registration and KYC process to enforce this requirement.

If you believe that a minor has created an account on the Platform or has submitted personal data to dv66 without parental or guardian authorisation, please contact us immediately at support at dv66.io. We will promptly investigate, close the account, and securely delete any personal data associated with the minor in question.

13 Policy Updates

dv66 reserves the right to update or amend this Privacy Policy at any time. Changes may be made to reflect updates in applicable law, changes in our data processing activities, the introduction of new products or services, or improvements to how we communicate our privacy practices.

When we make material changes to this Policy, we will notify you by posting a prominent notice on the Platform and, where we hold your email address, by sending you a notification to your registered email. The updated Policy will display a revised effective date at the top of the document.

Your continued use of the Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the updated Policy, you should discontinue use of the Platform and contact our support team to request account closure.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way dv66 handles your personal data, please reach out to us through any of the following channels:

• Live Chat: Available 24/7 directly from your account dashboard. This is the fastest way to reach our support team for time-sensitive data requests.
• Email: support at dv66.io — please use the subject line "Privacy Enquiry" or "Data Rights Request" to ensure your message is routed to the correct team. We aim to respond within 48 hours and resolve all requests within 30 days.
• Support Hours: 24/7, Bangladesh Standard Time (BST, UTC+6).

We take every privacy enquiry seriously and are committed to resolving your concerns promptly and transparently. Our support team is trained in data protection matters and can assist with access requests, corrections, deletions, and any other data rights exercise described in Section 9 of this Policy.