Privacy Policy — 5666bed

Data You Are Not Required to Provide. Certain fields at registration are optional (for example, a secondary email address). Clearly marked optional fields are never a condition of account creation. However, some data — particularly identity documents and a valid Bangladeshi mobile number — are mandatory because we are required to verify player identity and age before processing withdrawals.

Sensitive Data. 5666bed does not intentionally collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, biometric data for identification purposes, or health data. NID documents collected for age and identity verification are handled with enhanced access controls and are not used for any purpose beyond KYC compliance.

Every use of your personal data by 5666bed is grounded in a specific lawful basis. We do not process your data for any purpose that is incompatible with the original reason it was collected. The primary purposes for which we use your personal data are described below.

2.1 Account Creation and Management. We use your identity data, contact data, and financial data to create and maintain your 5666bed account, authenticate your identity at each login, process deposits and withdrawals in BDT via bKash, Nagad, Rocket, and Upay, and enforce the one-account-per-person rule that protects the integrity of our platform.

2.2 Service Delivery. Your account activity data is used to deliver the core services of 5666bed: serving the correct game library, recording wagers and outcomes accurately, calculating and crediting bonus eligibility, and settling sports betting markets based on official results from bodies such as the ICC, BCB, and BCCI.

2.3 Identity and Age Verification (KYC). KYC document data and identity data are processed exclusively to verify that you are at least 18 years of age and that you are the person you claim to be. This processing is a legal obligation and a condition of operating a responsible gambling platform. KYC data is not used for marketing or profiling.

2.4 Fraud Prevention and Platform Security. Technical data (including IP address and device fingerprint) and account activity data are analysed by our security systems to detect suspicious login attempts, identify multi-accounting behaviour, flag transactions consistent with money laundering patterns, and prevent the use of stolen payment credentials. This processing is in our legitimate interest as a platform operator and is required by applicable financial crime prevention obligations.

2.5 Responsible Gaming Compliance. Account activity data — including session duration, deposit frequency, loss thresholds, and self-exclusion requests — is monitored to identify players who may be exhibiting signs of problem gambling. Where our systems or support team identify such patterns, we may proactively reach out or apply protective account measures. This processing is carried out in the vital interests of our players and as part of our responsible gaming obligations.

2.6 Customer Support. Communications data is used to handle your support queries, investigate complaints, resolve disputes, and improve the quality of our support services. Support conversations may be recorded and reviewed for training and quality assurance purposes.

2.7 Marketing and Promotions. With your consent (given at registration or subsequently updated via your account settings), we may send you promotional emails or platform notifications about new games, seasonal bonuses (such as BPL cricket offers, Eid promotions, and Pohela Boishakh specials), and personalised reload bonus offers based on your recent play history. You may opt out of marketing communications at any time by updating your notification preferences or contacting support.

2.8 Legal and Regulatory Compliance. We are required to retain certain player data for specified periods to comply with financial record-keeping requirements and to respond to lawful requests from competent Bangladeshi authorities. Processing for this purpose is mandatory and cannot be opted out of.

5666bed does not sell your personal data. We share personal data with third parties only where necessary to operate our services, comply with legal obligations, or protect the safety of our platform and players. The categories of recipients are listed below.

3.1 Payment Service Providers. When you make a deposit or request a withdrawal, your financial data and identity data are shared with the relevant payment service provider — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, or Sonali Bank — solely for the purpose of processing that specific transaction. These providers operate under their own privacy policies and regulatory obligations.

3.2 Game Content Providers. To deliver certified casino games, 5666bed integrates with third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers receive a session token and minimal technical data (such as currency code and stake value) necessary to run the game. They do not receive your full name, NID number, or payment account details.

3.3 Identity Verification Services. For KYC purposes, 5666bed may use a third-party identity verification service to cross-check document authenticity. Such services receive only the specific documents and data required for verification and are contractually prohibited from using that data for any other purpose.

3.4 Fraud Detection and Security Providers. Our platform integrates with fraud detection services that analyse technical data (IP address, device fingerprint, behavioural patterns) to identify and prevent fraudulent activity. These services process data under strict data processing agreements that limit their use of data to fraud prevention only.

3.5 Legal and Regulatory Authorities. 5666bed may disclose player data to competent Bangladeshi legal or regulatory authorities where required by a valid court order, statutory obligation, or lawful investigative request. We will notify you of any such disclosure where we are legally permitted to do so.

3.6 Business Transfers. In the event that 5666bed undergoes a merger, acquisition, or sale of substantially all of its assets, player data may be transferred to the acquiring entity as part of that transaction. You will be notified by email and via a platform notice at least 30 days before any such transfer, and the acquiring entity will be bound by this Privacy Policy or will provide a materially equivalent policy.

Managing Cookies. You may manage or delete non-essential cookies through your browser settings or through the notification preferences section of your 5666bed account. Please note that disabling certain cookies (particularly session and fraud prevention cookies) may prevent parts of the platform from functioning correctly or may result in automatic logout for security reasons.

No Third-Party Ad Tracking. 5666bed does not embed Facebook Pixel, Google Ads tags, TikTok trackers, or any other third-party advertising pixel. We do not build advertising profiles using your browsing behaviour and we do not share cookie data with external marketing platforms.

5666bed retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The specific retention periods applicable to each data category are summarised below.

5.1 Active Account Data. While your account remains open and active, 5666bed retains all data categories associated with your account — including identity data, contact data, financial data, and account activity data — as these are necessary to provide ongoing services.

5.2 Post-Closure Retention. Following the closure of an account (whether voluntary or enforced), 5666bed retains the following data for the periods specified:

• Identity and KYC documents: 5 years from account closure, in accordance with financial record-keeping requirements.
• Transaction records (deposits and withdrawals): 5 years from the date of each transaction.
• Account activity logs (game history, bet records): 3 years from account closure or the date of the last recorded activity, whichever is later.
• Support communications: 2 years from the date of the last communication in each support case.
• Self-exclusion records: Retained for the duration of the self-exclusion period plus 3 years, to prevent accidental re-registration during an active exclusion.

5.3 Marketing Data. If you have opted in to marketing communications, your contact data used for marketing purposes is retained until you withdraw consent or request deletion, subject to the minimum retention periods above where they overlap.

5.4 Secure Deletion. At the end of each applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be attributed to an individual player. Anonymised statistical data (such as aggregate game participation rates or seasonal deposit trend data) may be retained indefinitely for business analysis purposes.

5666bed implements a layered security architecture to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Our security measures include both technical controls and organisational procedures.

6.1 Encryption in Transit. All data transmitted between your device and 5666bed servers is encrypted using TLS 1.2 or higher. This applies to all platform pages including login, registration, deposit, withdrawal, and account management screens. Our SSL certificate status can be verified in your browser's address bar.

6.2 Encryption at Rest. Sensitive personal data — including KYC document files, financial account references, and hashed authentication credentials — is encrypted at rest using AES-256 encryption on our storage infrastructure. Encryption keys are managed through a dedicated key management system with restricted administrative access.

6.3 Access Controls. Access to player personal data within 5666bed's systems is granted on a strict role-based, need-to-know basis. All internal staff access to the player database is logged, timestamped, and subject to periodic review. Support staff can view only the account data necessary to resolve a support query; they cannot see full payment account numbers or unhashed passwords.

6.4 Password Security. Player passwords are never stored in plaintext. They are processed through a one-way cryptographic hash function with a unique salt per account. Even in the unlikely event of a database breach, your password would not be retrievable in its original form.

6.5 Incident Response. In the event of a data security incident that is likely to result in a risk to your rights or interests, 5666bed will notify affected players by email within 72 hours of becoming aware of the incident. The notification will describe what data was involved, what happened, what we have done to contain the incident, and what steps you should take to protect yourself.

6.6 Your Role in Security. 5666bed's security measures are designed to protect data at the platform level. You also play an important role in keeping your account secure: use a strong, unique password; never share your login credentials; log out from shared devices; and contact us immediately if you suspect unauthorised access to your account.

How to Submit a Rights Request. To exercise any of the rights listed above, please email support@5666bed with the subject line "Privacy Rights Request" and clearly state your full name, registered email address, and the specific right you wish to exercise. We may ask you to verify your identity before processing the request to ensure that personal data is not disclosed to the wrong person.

8.1 Changes to This Policy. 5666bed reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, new legal requirements, new service features, or feedback from players and regulators. The effective date at the top of this document is updated each time a new version is published.

8.2 Notification of Material Changes. Where a change to this Privacy Policy is material — for example, a change to the categories of data we collect, the purposes for which we use it, or the third parties with whom we share it — we will notify registered players by email at least seven (7) days before the updated policy takes effect. Non-material changes (such as clarifications of existing language, corrections to typographical errors, or updates to contact information) may be made without advance notice.

8.3 Continued Use as Acceptance. Your continued use of 5666bed after the effective date of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the updated policy, you should close your account before the new version takes effect and submit a data erasure request as described in Section 7.

8.4 Governing Language. This Privacy Policy is published in English. In the event of any translation or interpretation dispute, the English version is the authoritative version and shall prevail.

8.5 Contact Us. If you have any questions, concerns, or complaints about how 5666bed handles your personal data, or if you wish to exercise any of the rights described in Section 7, please contact our data protection team at:

We take all privacy complaints seriously and will work transparently with you to resolve any concern. If you are not satisfied with our response, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.