Your Privacy Matters to 266bd

1 Data We Collect

When you interact with the 266bd platform — from the moment you begin a registration through to your ongoing gaming activity — we collect several categories of personal data. The following table summarises the main categories, the specific data points within each, and the lawful basis under which 266bd processes that data.

Data You Provide Directly

The primary source of personal data on 266bd is information you provide voluntarily during the account registration process, KYC verification, payment transactions, and any direct communications with our support team at [email protected]. We do not collect sensitive personal data such as racial or ethnic origin, religious beliefs, or health information unless specifically required for responsible gaming purposes (for example, where you disclose a gambling-related concern to our support team).

Data Collected Automatically

When you access 266bd via any device — desktop, smartphone, or tablet — our platform automatically collects certain technical and usage data. This includes your IP address, the type of device and browser you are using, your operating system, the pages of the 266bd platform you visit, the duration of each session, and the sequence of actions you take during your visit. This data is collected via first-party cookies, server-side logging, and analytics tools. It is used strictly for internal operational, security, and responsible gaming monitoring purposes and is never sold to advertisers.

2 How We Use Your Data

266bd uses the personal data it collects for specific, defined purposes. We do not repurpose data in ways that are incompatible with the original basis on which it was collected. The following are the primary purposes for which your data is used on the 266bd platform:

• Account creation and management: To register your 266bd account, verify your identity, maintain your account settings, and provide you with access to the Platform's full feature set including sports betting, live casino, and slots.
• Payment processing: To process deposits and withdrawals in BDT via bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and City Bank. Financial data is used solely for the purpose of executing the specific transaction you have initiated.
• KYC and AML compliance: To verify your age (18+ requirement), confirm your identity, and comply with anti-money laundering obligations. This is a legal obligation and cannot be waived.
• Responsible gaming monitoring: To track betting patterns and identify indicators of potentially problematic gambling behaviour. Where such indicators are detected, 266bd may reach out proactively to offer self-exclusion tools or deposit limit options.
• Customer support: To respond to your queries, complaints, and requests submitted via live chat or email at [email protected]. Support interactions are recorded and retained for quality assurance and dispute resolution.
• Platform security and fraud prevention: To detect and prevent unauthorised access, account takeover attempts, bonus abuse, money laundering, and other fraudulent or prohibited activity.
• Service improvements: To analyse aggregated usage data in order to improve the 266bd platform's performance, product offering, and user experience for the Bangladesh market.
• Marketing communications (consent-based only): To send you promotional offers, bonus notifications, and product updates via email or SMS, but only where you have explicitly opted in to receive such communications. You may withdraw this consent at any time.

266bd will never use your personal data to make fully automated decisions that produce legal or similarly significant effects without human oversight. Responsible gaming interventions may be triggered by automated monitoring systems, but any material action — such as account restriction — involves a human review step before being applied.

3 Data Sharing & Third Parties

266bd does not sell, rent, or trade your personal data to any third party for commercial purposes. However, in the course of operating the Platform and meeting our legal obligations, we do share specific categories of data with carefully vetted third parties in the following circumstances:

Payment Service Providers

To process your deposits and withdrawals, 266bd shares the minimum necessary financial data with the relevant payment service provider — for example, your mobile wallet number with bKash or Nagad, or your card details with Visa or Mastercard payment gateway partners. These providers process your data only for the specific transaction and are bound by their own privacy policies and applicable financial data protection regulations.

Identity Verification Partners

266bd uses third-party KYC verification services to validate identity documents and confirm that users meet the 18+ age requirement. Identity data shared with these providers is processed solely for verification purposes and is not retained by the verification provider beyond the period required to complete the check.

Game Content Providers

Some game titles on 266bd are powered by third-party providers including Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe. When you play a game powered by one of these providers, certain technical data (such as your session token and bet history for that session) may be transmitted to the provider's servers to enable gameplay. These providers act as data processors and are contractually prohibited from using this data for any purpose other than delivering the game to you.

Legal and Regulatory Disclosure

266bd may be required by applicable law, court order, or regulatory instruction to disclose certain personal data to government authorities, law enforcement agencies, or financial intelligence units. In such cases, we will disclose only the data specifically required and will notify the affected account holder where we are legally permitted to do so.

4 Cookies & Tracking Technologies

266bd uses cookies and similar tracking technologies to ensure the Platform functions correctly and to gather the technical data described in Section 1. The following categories of cookies are used on the 266bd website:

Strictly Necessary Cookies

These cookies are essential for the Platform to operate. They enable core functions such as maintaining your login session, storing your account preferences, and ensuring secure page-to-page navigation. Strictly necessary cookies cannot be disabled without breaking core Platform functionality.

Analytics Cookies

266bd uses first-party analytics to understand how users navigate the Platform — which pages are most visited, where users spend the most time, and which features generate the highest engagement. This data is used in aggregate and anonymised form to guide platform improvements. 266bd does not use third-party analytics providers that share data across unrelated websites.

Functional Cookies

Functional cookies remember your preferences — such as your preferred language (English), display settings, and regional settings for the Bangladesh market — so that you do not need to re-enter them on every visit. These cookies do not track you across other websites.

Managing Cookie Preferences

You may manage or delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will impair your ability to log in to your 266bd account and use core platform features. Disabling analytics or functional cookies will not prevent you from using the Platform but may affect your experience.

5 Data Retention & Storage

266bd retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable legal, regulatory, or compliance obligations. The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of your active 266bd account, plus a minimum of 5 years following account closure to satisfy AML record-keeping obligations.
• Financial transaction records: Retained for a minimum of 5 years from the date of each transaction in accordance with financial compliance requirements.
• KYC verification documents: Retained for the duration of the account plus 5 years post-closure. Copies of government-issued ID are stored in encrypted form and access is restricted to authorised compliance personnel only.
• Support communications: Email and live chat records are retained for 3 years from the date of the interaction for dispute resolution and quality assurance purposes.
• Technical and usage logs: Session logs and IP address records are retained for up to 13 months from collection. Aggregated, anonymised analytics data may be retained indefinitely.
• Marketing consent records: Records of your opt-in or opt-out status for marketing communications are retained for the life of your account and for 2 years post-closure as evidence of compliance.

All personal data held by 266bd is stored on secure servers. Data associated with Bangladesh-based accounts is processed in data centres that implement industry-standard physical and logical security controls including access logging, encryption at rest, and regular independent security audits.

6 Your Privacy Rights

As a 266bd account holder, you hold a number of rights in relation to the personal data we hold about you. 266bd is committed to honouring these rights promptly and without unnecessary friction. The following rights apply:

• Right of access: You may request a copy of all personal data that 266bd holds about you at any time. We will provide this within 30 days of a verified request submitted to [email protected].
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Contact our support team with the relevant details and we will update your records within 14 days.
• Right to erasure: You may request that 266bd delete your personal data. This right is subject to our legal and regulatory retention obligations — data we are required to keep for AML or compliance purposes cannot be erased on request, but all non-essential data will be removed.
• Right to restrict processing: You may request that 266bd restrict how we use your data in specific circumstances, for example while a dispute about data accuracy is being resolved.
• Right to data portability: You may request a structured, machine-readable export of the personal data you have provided to 266bd, which you can then transfer to another service provider.
• Right to withdraw consent: Where data processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time by contacting [email protected] or using the unsubscribe link in any 266bd marketing email.
• Right to object: You have the right to object to processing based on legitimate interest, including profiling for responsible gaming monitoring purposes, though exercising this right may affect our ability to provide certain Platform features.

7 Data Security Measures

266bd takes the security of your personal and financial data seriously. The following technical and organisational measures are in place to protect your information against unauthorised access, loss, alteration, or disclosure:

• 256-bit SSL/TLS encryption: All data transmitted between your browser or app and the 266bd platform is encrypted using 256-bit SSL/TLS protocols. You can verify this by the padlock icon displayed in your browser's address bar when visiting 266bd.app.
• Encryption at rest: Sensitive personal data, including KYC documents and financial records, is stored in encrypted form on our servers. Encryption keys are managed in a separate, access-controlled key management system.
• Access controls: Access to personal data is strictly limited to 266bd employees and authorised contractors who need it to perform their specific job functions. All access is logged and reviewed regularly.
• Two-factor authentication (2FA): 266bd strongly recommends enabling 2FA on your account to provide an additional layer of protection against unauthorised login attempts. 2FA is available to all registered users via the account security settings.
• Regular security audits: The 266bd platform undergoes regular independent security assessments, including penetration testing and vulnerability scanning, to identify and remediate potential weaknesses before they can be exploited.
• Incident response: In the event of a data security incident that affects your personal data, 266bd has a documented incident response procedure. Affected account holders will be notified via their registered email address within 72 hours of 266bd becoming aware of the incident, where notification is required under applicable law.

8 Policy Updates & Contact

266bd reserves the right to update or amend this Privacy Policy at any time. When material changes are made — for example, changes to the categories of data we collect, the third parties we share data with, or your rights as a data subject — we will notify registered account holders via the email address associated with their 266bd account at least 14 days before the changes take effect. For minor, non-material updates (such as clarifications of existing language), the updated policy will be published on this page with a revised effective date.

Continued use of the 266bd platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the updated Privacy Policy, you should close your account by contacting our support team before the effective date.

How to Contact Us About Privacy

For any questions, concerns, or requests relating to this Privacy Policy or the personal data 266bd holds about you, please contact our dedicated data privacy team using the following details:

• Email: [email protected] (subject line: "Privacy Enquiry")
• Response time: We aim to respond to all privacy-related enquiries within 5 business days (Bangladesh Standard Time, UTC+6)
• Data rights requests: Processed within 30 days of identity verification

266bd is committed to resolving privacy concerns fairly and transparently. If you are not satisfied with our response to a privacy enquiry, you may escalate the matter to the relevant data protection authority in your jurisdiction.