Privacy Policy — 3666com
At 3666com, protecting the personal data of our Bangladeshi players is a core responsibility. This Privacy Policy sets out precisely what information we collect, why we collect it, how we use and store it, and what rights you have over your own data.
Privacy at a Glance
Every piece of data transmitted between your device and 3666com is protected by industry-standard SSL/TLS encryption. Your personal details and payment information are never sent in plain text.
3666com never sells, rents, or trades your personal information to third-party marketers or advertisers. Your data is used solely to operate, improve, and secure the platform for your benefit.
Our data practices are designed with Bangladeshi players in mind. BDT payment records, bKash and Nagad transaction identifiers, and local phone numbers are handled with the same rigorous protection as all other personal data.
We only process your personal data for the specific purposes stated in this Privacy Policy. We do not repurpose data without notifying you and, where required, obtaining your renewed consent.
You have the right to access, correct, or request deletion of your personal data at any time. Contact our support team to exercise these rights — we will respond within 30 days of receiving your request.
When this Privacy Policy is updated in a material way, 3666com will notify registered players via email and through a prominent banner on the platform before the changes take effect.
Information We Collect
3666com collects only the personal data that is necessary to provide a safe, compliant, and enjoyable betting and casino experience. We do not collect data speculatively or beyond what is proportionate to the purposes described in this policy.
Data You Provide Directly
When you register an account, make a transaction, contact support, or participate in a promotion on 3666com, you provide us with certain information voluntarily. This includes:
- Registration data: Full legal name, date of birth, email address, and Bangladesh mobile number.
- Identity verification (KYC) data: Scanned copy or photograph of a government-issued identity document (National Identity Card, passport, or driving licence) and, where required, a document confirming proof of address (utility bill or bank statement).
- Payment data: bKash account number, Nagad account number, Rocket or Upay account number, or bank account details (account number, branch, bank name) used for deposits and withdrawals. We do not store full card numbers; payment card data is tokenised by the relevant payment processor.
- Account preferences: Preferred language, notification settings, Responsible Gaming limits you set voluntarily (deposit limits, session time reminders, self-exclusion requests).
- Support communications: Content of messages, emails, or live chat transcripts exchanged between you and the 3666com support team.
Data We Collect Automatically
When you access and use the 3666com platform, certain technical and behavioural data is collected automatically by our systems. This data helps us detect fraud, maintain platform security, and improve user experience.
- Device and technical data: IP address, device type (mobile, tablet, desktop), operating system and version, browser type and version, screen resolution.
- Usage and session data: Pages visited, games accessed, time spent on pages, navigation paths, search queries entered within the platform, session start and end times (recorded in Bangladesh Standard Time, UTC+6).
- Betting and gaming activity: Bets placed, games played, wager amounts in BDT, outcomes, bonus usage, and transaction history. This data is required for game integrity and financial record-keeping.
- Cookie and tracker data: First-party cookies used for session management, user preferences, and fraud prevention. See the Cookies section for full details.
- Location data: Approximate geographic location derived from IP address, used to apply appropriate content restrictions and to detect suspicious login activity.
How We Use Your Data
3666com processes your personal data only for lawful, specific, and clearly defined purposes. We do not use your data for any purpose that is incompatible with the reasons for which it was originally collected. The table below summarises our primary processing activities, the data categories involved, and the legal basis for each.
| Processing Purpose | Data Categories Used | Legal Basis |
|---|---|---|
| Account registration & management | Registration data, identity data | Contractual necessity |
| Processing deposits & withdrawals | Payment data, KYC data | Contractual necessity |
| Age & identity verification (KYC) | Identity documents, date of birth | Legal obligation, contractual necessity |
| Fraud detection & platform security | IP address, device data, session data, transaction history | Legitimate interest |
| Anti-money laundering (AML) monitoring | Transaction data, identity data, payment data | Legal obligation |
| Customer support & dispute resolution | Support communications, account data, transaction history | Contractual necessity, legitimate interest |
| Responsible Gaming programme | Gaming activity, self-set limits, self-exclusion records | Legal obligation, legitimate interest |
| Platform improvement & analytics | Usage data, session data, device data (anonymised where possible) | Legitimate interest |
| Promotional communications | Email address, mobile number, gaming preferences | Consent (opt-in only) |
Marketing communications are opt-in only. 3666com will only send you promotional emails or SMS messages about bonuses, new games, or seasonal offers (such as BPL cricket season promotions or Eid offers) if you have explicitly opted in during registration or through your account settings. You may withdraw consent at any time by updating your preferences or contacting our support team.
Data Sharing & Disclosure
3666com does not sell, rent, or trade your personal information to any third party for commercial purposes. We will never pass your data to advertisers, data brokers, or any organisation that intends to use it for their own marketing. Any sharing of your personal data with third parties is limited strictly to what is necessary for legitimate operational, legal, or security purposes as described below.
Payment processors and financial partners. To process deposits and withdrawals in BDT, we share necessary transaction data with our payment partners, including bKash, Nagad, Rocket, Upay, and partner banks such as Dutch-Bangla Bank and BRAC Bank. These partners receive only the minimum data required to execute the transaction and are contractually bound to use it solely for that purpose.
Game providers. When you play games powered by third-party providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi, certain session and bet data is transmitted to those providers' systems to run the game and calculate outcomes. Game providers act as data processors on our behalf and are bound by data processing agreements that restrict their use of your data.
Identity verification services. During the KYC process, your identity documents may be shared with a third-party identity verification provider to authenticate their validity. These providers are vetted security partners operating under strict confidentiality agreements.
Legal and regulatory disclosure. 3666com may disclose personal data to regulatory authorities, law enforcement agencies, or courts of competent jurisdiction where we are legally compelled to do so, or where disclosure is necessary to investigate suspected fraud, money laundering, or other criminal activity. In such cases, we will disclose only the minimum data required and will notify you of the disclosure wherever legally permitted to do so.
Business transfers. In the event of a merger, acquisition, restructuring, or sale of all or part of 3666com's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer in advance, and the acquiring entity will be required to honour the commitments made in this Privacy Policy.
We Share Data With
- bKash, Nagad, Rocket, Upay (payment processing)
- Partner banks for BDT bank transfers
- Game providers (Pragmatic Play, Evolution, etc.)
- KYC / identity verification partners
- Fraud detection and AML screening services
- Customer support platform providers
- Legal / regulatory authorities (when required by law)
We Never Share Data With
- Third-party advertisers or ad networks
- Data brokers or data resellers
- Unrelated commercial partners
- Social media platforms (without your explicit consent)
- Any party outside our contracted processor network
Cookies & Tracking Technologies
3666com uses cookies and similar tracking technologies (such as local storage and session tokens) to operate core platform functions, maintain session security, remember your preferences, and analyse aggregate usage patterns. By using the 3666com platform, you acknowledge our use of these technologies as described below.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Session authentication, login state, CSRF protection, load balancing. Cannot be disabled without breaking core platform functionality. | Session / up to 24 hours |
| Functional | Remembers your language preferences, display settings, and notification preferences so you do not need to re-enter them on each visit. | Up to 12 months |
| Security & Fraud Prevention | Device fingerprinting tokens used to detect suspicious login patterns, duplicate account attempts, and bot activity. These are essential for platform integrity. | Up to 6 months |
| Analytics (First-Party) | Aggregated, anonymised data on page views, navigation paths, and feature usage. Helps us improve the platform. No personally identifiable information is stored in these cookies. | Up to 13 months |
You can manage or delete cookies through your browser settings at any time. Please be aware that disabling strictly necessary or security cookies may prevent you from logging in or using key features of the 3666com platform. Deleting functional cookies will cause your saved preferences to be lost and will require you to re-enter them on your next visit. Instructions for managing cookies vary by browser — consult your browser's help documentation for guidance specific to your device.
Data Security Measures
3666com implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security programme is reviewed and updated on a regular basis to address evolving threats and to maintain alignment with recognised security standards.
Key technical measures include:
- Transport Layer Security (TLS): All data in transit between your browser or mobile device and our servers is encrypted using TLS 1.2 or higher. This applies to login sessions, game activity, and all payment-related communications.
- Data encryption at rest: Sensitive personal data — including identity documents submitted for KYC and payment account identifiers — is stored in encrypted form on our servers. Encryption keys are managed separately from the data they protect.
- Access controls: Access to player personal data within 3666com's internal systems is restricted on a strict need-to-know basis. Staff who require access to personal data for their job functions are granted role-based permissions. All access is logged and subject to periodic audit.
- Two-factor authentication (2FA): Players are strongly encouraged to enable 2FA on their accounts. 2FA is mandatory for all 3666com staff who have access to player data.
- Intrusion detection and monitoring: Our infrastructure is monitored continuously for anomalous activity. Automated alerts are triggered by unusual login patterns, large or atypical withdrawal requests, and other indicators of potential fraud or unauthorised access.
- Vulnerability management: Our technical team conducts regular security assessments and promptly addresses identified vulnerabilities. Third-party penetration testing is performed periodically.
Despite these measures, no platform can guarantee absolute security. If you believe your 3666com account has been compromised, please contact our support team immediately at support@3666com and change your password without delay. We will investigate all security reports promptly.
In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, 3666com will notify affected players without undue delay and will take all reasonable steps to contain and remediate the breach.
Security Commitments
- TLS 1.2+ encryption in transit
- Encryption of sensitive data at rest
- Role-based access controls (RBAC)
- Mandatory 2FA for staff with data access
- Continuous intrusion monitoring
- Regular penetration testing
- Prompt breach notification to affected players
- Separate encryption key management
Data Retention
3666com retains your personal data for as long as your account is active and for a defined period thereafter, in accordance with our legal and regulatory obligations and legitimate operational interests. We do not retain personal data for longer than is necessary for the purposes for which it was collected.
The following retention periods apply to the main categories of personal data we hold:
- Account and registration data — retained for the duration of your account relationship with 3666com, plus a minimum of five years following account closure to comply with applicable record-keeping obligations.
- Transaction and financial records (deposits, withdrawals, bet history) — retained for a minimum of seven years from the date of the transaction, in line with standard financial record-keeping requirements.
- KYC and identity verification documents — retained for a minimum of five years from the date of verification or account closure, whichever is later.
- Customer support communications — retained for three years from the date of the interaction, to support dispute resolution and service quality review.
- Responsible Gaming records (self-exclusion, deposit limits) — retained for the duration of the restriction plus a minimum of five years, to prevent circumvention through re-registration.
- Marketing consent records — retained for as long as you hold an active account or until consent is withdrawn, whichever comes first.
- Technical and analytics data (logs, device data) — retained for a maximum of thirteen months in identifiable form, after which data is aggregated and anonymised.
When personal data is no longer required for any lawful purpose and the applicable retention period has elapsed, it is securely deleted or anonymised in a manner that prevents reconstruction. Where data is anonymised rather than deleted, it may be retained indefinitely for aggregate statistical analysis.
If you submit a deletion request before the relevant retention period has expired, we will assess your request in the context of our outstanding legal obligations. Where deletion is not immediately possible due to legal holds, we will restrict processing of the relevant data and delete it as soon as the legal obligation permits.
Your Privacy Rights
As a player on 3666com, you have a number of rights in relation to the personal data we hold about you. These rights are summarised below. To exercise any of these rights, please contact our support team at support@3666com with the subject line "Privacy Rights Request". We will acknowledge your request within five business days and respond in full within 30 calendar days.
You may request a copy of all personal data we hold about you, along with information about how it is processed.
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay.
You may request deletion of your personal data in certain circumstances, subject to our legal retention obligations.
You may ask us to restrict the processing of your data while a dispute is under review or while you contest its accuracy.
You may request a structured, machine-readable copy of the personal data you provided to us, for transfer to another service.
You may object to processing based on our legitimate interests or for direct marketing purposes at any time.
Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting prior processing.
You have the right not to be subject to decisions based solely on automated processing where those decisions produce significant legal or similarly significant effects.
Please note that certain rights may be limited or overridden by our legal obligations. For example, if you request deletion of your account data but we are legally required to retain financial transaction records for seven years, we will retain those records until the retention period expires, while restricting all other uses of your data. We will explain any such limitations clearly when responding to your request.
Contact & Data Enquiries
If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or have a concern about how 3666com handles your personal data, please contact our support team using the details below. All privacy-related enquiries are handled by our dedicated data compliance team, who have the authority and expertise to address your concerns appropriately.
Email: support@3666com
Please include the subject line "Privacy Rights Request" or "Privacy Enquiry" in your email so that it is routed directly to our data compliance team. For account-related requests (such as access requests or deletion requests), please send your email from the address registered on your 3666com account to help us verify your identity efficiently.
We aim to acknowledge all privacy enquiries within five business days and to provide a substantive response within 30 calendar days of receiving a complete request. For complex requests or where a large volume of data is involved, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reason for it within the initial 30-day window.
If you are dissatisfied with our response to a privacy enquiry or believe that we have not handled your personal data in accordance with this Privacy Policy, you have the right to escalate your complaint through the appropriate channels available to you under applicable law.
3666com reserves the right to update this Privacy Policy periodically. The "Last Updated" date at the top of this policy reflects when the most recent changes were made. We encourage you to review this policy regularly to stay informed about how we protect your personal data.
Contact Our Privacy Team
For all data protection and privacy enquiries:
Email (plain text — not a link):
support@3666com
Subject line: "Privacy Rights Request"
Response time: within 5 business days (acknowledgement); within 30 calendar days (full response).
Support available 24 hours a day, 7 days a week including public holidays.
Useful Related Pages
- Terms & Conditions — full platform usage rules
- Responsible Gaming — self-exclusion and deposit limits
- FAQ — quick answers on account and security topics
- About Us — who operates 3666com
Ready to Play Safely at 3666com?
Now that you understand how we protect your data, explore our full range of games, cricket betting markets, and casino tables — all designed for Bangladeshi players and secured by the measures described in this policy.