Privacy Policy — Your Data at 3666 Bad

3666 bad is an online casino and gaming platform serving players in Bangladesh. When you register and play on 3666 bad, we act as the data controller responsible for your personal information. That means we decide how and why your data is collected and processed.

This privacy policy applies to all users of the 3666 bad website and mobile app, including registered players, visitors who browse without registering, and anyone who contacts our support team. It covers all personal data collected through any part of the 3666 bad platform.

3666 bad collects personal data in three main ways: information you provide directly, information generated by your use of the platform, and information received from third-party verification services.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data unless specifically required by law or responsible gaming obligations.

Every piece of data 3666 bad collects is used for a specific purpose. We do not process your data in ways that are incompatible with the reasons it was originally collected. Here is how we use the data we hold:

• Account management: Creating and maintaining your 3666 bad player account, including login authentication and account security.
• Identity verification: Confirming your age and identity to comply with legal requirements and prevent underage gambling.
• Payment processing: Handling deposits and withdrawals via bKash, Nagad, and Rocket, and maintaining accurate transaction records.
• Fraud prevention: Detecting and investigating suspicious activity, multiple accounts, and potential money laundering.
• Responsible gaming: Monitoring gameplay patterns to identify signs of problem gambling and applying protective measures where necessary.
• Customer support: Responding to your queries, complaints, and requests through our support channels.
• Platform improvement: Analysing usage data to understand how players use 3666 bad and improve the experience.
• Legal compliance: Meeting our obligations under applicable laws and regulations, including record-keeping requirements.
• Communications: Sending you account-related notifications, security alerts, and — where you have opted in — promotional messages about 3666 bad offers.

We will never use your data to make automated decisions that have a significant legal or similarly significant effect on you without giving you the opportunity to request human review.

3666 bad processes your personal data on one or more of the following legal grounds:

• Contract performance: Processing is necessary to provide the services you signed up for — running your account, processing bets, and handling payments.
• Legal obligation: We are required by law to verify your identity, maintain transaction records, and report certain activities to regulatory authorities.
• Legitimate interests: We process certain data to protect the platform from fraud, improve our services, and ensure the security of all players — provided these interests do not override your rights.
• Consent: Where we rely on your consent — for example, to send you promotional emails — you can withdraw that consent at any time by contacting our support team or updating your account preferences.

3666 bad does not sell your personal data to any third party. We share data only in the following limited circumstances, and only to the extent necessary for the stated purpose:

• Payment processors: bKash, Nagad, and Rocket receive the transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and security standards.
• Identity verification providers: Third-party KYC services receive your identity documents to verify your age and identity. These providers are contractually bound to handle your data securely and use it only for verification purposes.
• Regulatory and law enforcement authorities: We may be required by law to share data with government bodies, regulators, or law enforcement agencies. We will only do so when legally obligated.
• Fraud prevention services: We may share data with industry fraud prevention databases to protect the platform and all players from financial crime.
• Technology service providers: Companies that help us operate the platform — such as hosting providers and analytics tools — may process data on our behalf. All such providers are bound by data processing agreements that restrict how they can use your information.

All third parties who receive data from 3666 bad are required to maintain appropriate security standards and to use the data only for the purposes for which it was shared.

3666 bad retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. The following general retention periods apply:

• Account data: Retained for the duration of your account and for a period after closure as required by applicable regulations.
• Transaction records: Financial transaction data is retained for a minimum of five years to comply with anti-money laundering regulations.
• Identity verification documents: Retained for the period required by law following account closure.
• Support communications: Records of support interactions are retained for up to three years.
• Technical and usage data: Aggregated and anonymised usage data may be retained indefinitely for platform improvement purposes. Individual-level technical data is deleted or anonymised after a shorter period.

When data is no longer required, 3666 bad deletes or anonymises it securely. If you request deletion of your account, we will action this subject to any legal retention obligations that apply.

3666 bad implements a range of technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These include:

• TLS encryption: All data transmitted between your device and the 3666 bad platform is encrypted in transit using Transport Layer Security (TLS).
• Encrypted storage: Sensitive data including payment details and identity documents is encrypted at rest.
• Access controls: Access to personal data within 3666 bad is restricted to staff who need it to perform their job functions, and is protected by role-based access controls.
• Regular security reviews: We conduct periodic reviews of our security practices and update them in response to emerging threats.
• Incident response: In the event of a data breach that poses a risk to your rights, 3666 bad will notify affected players and relevant authorities as required by law.

While we take every reasonable precaution, no online platform can guarantee absolute security. You also play a role in keeping your account safe — use a strong, unique password and never share your login credentials with anyone.

3666 bad uses cookies and similar tracking technologies to operate the platform and improve your experience. A cookie is a small text file stored on your device when you visit a website.

You can manage cookie preferences through your browser settings. Note that disabling non-essential cookies will not affect your ability to play on 3666 bad, but some features may not work as smoothly.

As a 3666 bad player, you have the following rights over your personal data. To exercise any of these rights, contact our support team and we will respond within a reasonable timeframe.

3666 bad is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. Age verification is a mandatory part of the registration and withdrawal process on 3666 bad.

If we discover that an account has been registered by someone under 18, we will immediately close the account, void any bets placed, and return any real-money deposits made. Any bonus funds or winnings associated with the account will be forfeited.

If you believe a minor has registered on 3666 bad using false information, please contact our support team immediately. We take underage gambling extremely seriously and will act on any credible report without delay.

Parents and guardians are encouraged to use parental control software to prevent minors from accessing online gambling platforms. More information is available on our Responsible Gaming page.

3666 bad may update this privacy policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make significant changes, we will notify registered players via email or an on-platform notification before the changes take effect.

The updated policy will be published on this page with a revised "last updated" date. We encourage you to review this page periodically so you are always aware of how 3666 bad handles your personal data.

Continued use of the 3666 bad platform after the publication of an updated privacy policy constitutes your acknowledgement of the changes. If you do not agree with an updated policy, you should close your account before the changes take effect.

If you have any questions, concerns, or requests relating to this privacy policy or the way 3666 bad handles your personal data, please get in touch with us. We aim to respond to all privacy-related enquiries promptly.

• Support page: 3666-bad.com/support
• Email: [email protected]

If you are not satisfied with our response to a privacy concern, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction.