Privacy Policy

1. Information We Collect

When you register for and use a tc66 account, we collect personal information that is necessary to provide you with a safe, functional, and compliant gaming experience. The categories of information we collect are described below.

Registration & Identity Data

• Full name — as it appears on your government-issued identity document.
• Date of birth — used to verify that you meet the minimum age requirement of 18 years.
• Mobile phone number — a valid Bangladeshi number used for OTP verification and account security alerts.
• Email address — used for account communications, withdrawal confirmations, and support correspondence.
• Username and password — your chosen credentials for accessing the tc66 platform. Passwords are stored in hashed form and are never stored in plain text.

Identity Verification Data

To comply with our Know Your Customer (KYC) obligations and to verify your age and identity, tc66 may request copies of the following documents at any point during your membership:

• National Identity Card (NID) issued by the Government of Bangladesh.
• Valid passport (biographical data page).
• Birth certificate, where NID or passport is unavailable.
• Proof of address — a recent utility bill, bank statement, or official correspondence addressed to your registered address, dated within the last three months.

Financial & Transaction Data

• Payment method identifiers — such as your bKash wallet number, Nagad account number, Rocket account reference, or bank account details used for deposits and withdrawals.
• Transaction history — a record of all deposits, withdrawals, and bonus transactions associated with your account.
• Account balance history — maintained for audit and dispute resolution purposes.

Technical & Usage Data

• IP address and approximate geolocation at the time of login and each significant account event.
• Device type, operating system version, and browser type used to access tc66.
• Pages visited, games launched, time spent in session, and clickstream data — collected to improve platform performance and user experience.
• Log data — server access logs, error logs, and security event logs maintained for platform integrity.

2. How We Use Your Data

tc66 uses the personal data we collect for the following specific purposes. Each purpose is linked to a lawful basis described in Section 3.

tc66 does not use your personal data for automated decision-making that produces legal or similarly significant effects on you without human review. Where automated tools are used to flag accounts for fraud or responsible gaming review, a qualified member of the tc66 compliance team will conduct a manual assessment before any account action is taken.

3. Legal Basis for Processing

tc66 processes your personal data on one or more of the following lawful grounds, consistent with internationally recognised data protection principles:

• Contract performance: Processing is necessary to fulfil the agreement between you and tc66 — specifically, to operate your account, process your transactions, and deliver the gaming services you have signed up for.
• Legal obligation: tc66 is required to collect and retain certain data to comply with anti-money laundering (AML) regulations, KYC requirements, and responsible gaming obligations applicable to online gaming operators.
• Legitimate interest: tc66 has a legitimate interest in preventing fraud, ensuring platform security, improving service quality, and communicating important operational information to members. We conduct a balancing test to ensure our legitimate interests do not override your fundamental rights.
• Consent: Where tc66 asks for your consent — for example, to send you promotional offers via SMS or email — we will only proceed with that processing if you have given clear, informed, and freely given consent. You may withdraw consent at any time by contacting [email protected] or by using the unsubscribe link in any marketing communication.

4. Data Sharing & Disclosure

tc66 does not sell or rent personal data to any third party. We share personal data only in the following defined circumstances, and only to the extent necessary for the stated purpose:

• Payment providers: When you make a deposit or withdrawal, your payment details are shared with the relevant payment provider (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, or Sonali Bank) to process the transaction. Each provider operates under its own privacy and data security standards.
• Game technology providers: To enable you to play games on tc66, certain technical session data (such as a session token and game round data) is shared with our licensed game providers including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi. These providers do not receive your full identity data.
• Identity verification services: tc66 may use third-party KYC service providers to assist in verifying the authenticity of identity documents submitted by members. These services process identity data strictly for verification purposes and are contractually prohibited from using it for any other purpose.
• Fraud prevention and security services: Anonymised or pseudonymised technical data (such as device fingerprints and IP reputation scores) may be processed by fraud prevention technology partners to protect the platform and all members.
• Legal and regulatory authorities: tc66 will disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required to do so by law, court order, or in response to a valid official request. tc66 will, where legally permitted, notify affected members of such disclosures.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of tc66's business assets, personal data held by tc66 may be transferred to the acquiring entity as part of that transaction. Affected members will be notified of any material change in data controller identity and given an opportunity to request account closure if they do not consent to the transfer.

All third parties with whom tc66 shares personal data are required to maintain appropriate technical and organisational security measures and to process such data only for the specific, documented purpose for which it was shared.

5. Cookies & Tracking Technologies

tc66 uses cookies and similar browser storage technologies to operate certain features of the platform and to understand how members use the site. A cookie is a small text file placed on your device by a website. Cookies do not contain executable code and cannot access other data stored on your device.

tc66 uses the following categories of cookies:

• Strictly necessary cookies: These cookies are essential for the tc66 platform to function. They maintain your login session, remember your account preferences during a visit, and prevent cross-site request forgery attacks. These cookies cannot be disabled without breaking core platform functionality.
• Functional cookies: These cookies remember choices you make — such as your preferred language or display settings — so you do not need to re-enter them on subsequent visits. Disabling these cookies may reduce platform convenience but will not prevent you from using tc66.
• Analytics cookies: tc66 uses anonymised, first-party analytics data to understand which games are most popular, how members navigate the site, and where technical errors occur. This data is aggregated and does not identify individual members. No third-party analytics scripts (such as Google Analytics) are loaded on tc66 pages.

You can control cookie behaviour through your browser settings. Most modern browsers allow you to view, block, or delete cookies at any time. Please note that blocking strictly necessary cookies will prevent you from logging in to your tc66 account. For detailed instructions on managing cookies, refer to the help documentation for your specific browser.

6. Data Retention

tc66 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

• Active account data: Retained for the full duration of your membership with tc66, plus a minimum period of five years following permanent account closure, to comply with anti-money laundering record-keeping requirements.
• Transaction records: Financial transaction records are retained for a minimum of seven years from the date of the transaction, in line with standard financial record-keeping obligations.
• KYC and identity documents: Retained for a minimum of five years from the date of account closure. Where a specific legal obligation requires a longer retention period, the longer period will apply.
• Support and complaint records: Correspondence related to formal complaints is retained for five years from the date of resolution. General support tickets are retained for two years.
• Session and usage logs: Technical session logs are retained for up to 90 days for security and debugging purposes, after which they are permanently deleted or anonymised.
• Marketing consent records: Records of consent or opt-out for marketing communications are retained indefinitely to demonstrate compliance with consent obligations.

When personal data is no longer required and no legal obligation compels its retention, tc66 will securely delete or irreversibly anonymise that data. Anonymised, aggregated data derived from your usage may be retained indefinitely for statistical and platform improvement purposes, as it can no longer be linked back to you as an individual.

7. Your Privacy Rights

tc66 respects your rights over the personal data we hold. You may exercise any of the following rights at any time by contacting [email protected] with your registered account details and a clear description of your request:

• Right of access: You have the right to request a copy of all personal data tc66 holds about you. We will provide this in a structured, readable format within 30 days of receiving a verified request.
• Right to rectification: If any of the data tc66 holds about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay.
• Right to erasure: You may request that tc66 delete your personal data. This right applies in full following permanent account closure, subject to legal retention obligations described in Section 6. Erasure requests cannot be fulfilled for data that tc66 is legally required to retain.
• Right to restrict processing: In certain circumstances — for example, while a dispute is under investigation — you may request that tc66 restrict the use of your data to storage only, without further processing.
• Right to data portability: You may request that tc66 provide your personal data in a machine-readable format, or transfer it directly to another service provider where technically feasible.
• Right to object: You have the right to object to processing carried out on the basis of legitimate interest. tc66 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.

tc66 may ask you to verify your identity before fulfilling any rights request, to ensure that we do not disclose or delete data belonging to another person in error. This verification step is a security measure and not a means of obstructing your rights.

8. Data Security

tc66 applies a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Key security measures include:

• Transport Layer Security (TLS): All data transmitted between your device and tc66 servers is encrypted using TLS 1.2 or higher with 256-bit encryption. The padlock icon in your browser confirms this connection is active.
• Password hashing: Member passwords are stored using a strong, salted cryptographic hashing algorithm. tc66 staff cannot view your password in plain text under any circumstances.
• Access controls: Access to personal data within tc66's internal systems is restricted to staff who have a genuine operational need. Access is governed by role-based permissions and is logged for audit purposes.
• Two-factor authentication (2FA): tc66 offers OTP-based two-factor authentication for member accounts. Members are encouraged to enable 2FA for an additional layer of account security.
• Regular security reviews: tc66 conducts periodic internal security audits and vulnerability assessments of its platform infrastructure to identify and remediate potential security risks.
• Incident response: In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, tc66 will notify affected members without undue delay and will take prompt remediation action.

While tc66 takes all reasonable precautions to protect your data, no online system can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials and for ensuring that your device is secured against unauthorised use. If you believe your tc66 account has been accessed without your authorisation, please contact [email protected] immediately.

9. Updates to This Policy

tc66 reviews this Privacy Policy periodically and will update it whenever there is a material change to our data practices, a change in applicable law, or a new processing activity that requires disclosure. When this policy is updated, the "Last updated" date at the top of this page will be revised accordingly.

Where changes are material — such as the introduction of a new category of data collection, a new third-party data processor, or a change to how long data is retained — tc66 will notify active members by email or by a prominent notice within the platform prior to the change taking effect. Minor clarifications or formatting changes will not be separately notified.

Your continued use of the tc66 platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the revised terms. If you do not agree with the updated policy, you should stop using tc66 and request account closure by contacting [email protected].