tc666 Privacy Policy — How We Protect Your Personal Data

tc666 ("we", "us", "our") operates the online gaming and sports betting platform accessible at tc666.io. For the purposes of this Privacy Policy, tc666 acts as the data controller in respect of all personal data collected from users ("you", "your") who access, register with, or use any service offered on the tc666 platform.

Our platform is designed for adult players in Bangladesh aged 21 and above. We offer cricket betting, live casino games, slot games, and a range of other online gaming products, all conducted in Bangladeshi Taka (BDT, ৳) with support for local payment methods including bKash, Nagad, Rocket, and Upay.

If you have any questions or concerns about the way tc666 handles your personal data, or if you wish to exercise any of your privacy rights, you may contact our Data Protection team directly at [email protected]. We aim to respond to all privacy-related enquiries within 5 working days.

tc666 collects personal data that is necessary for the lawful operation of our platform, the provision of gaming services, and the fulfilment of our legal and regulatory obligations. The categories of personal data we may collect include, but are not limited to, the following:

tc666 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (other than where required for identity document verification), or health data, except where strictly necessary for responsible gaming assessments and only with your explicit consent.

tc666 collects your personal data through the following primary channels:

• Direct Interactions: Data you provide voluntarily when you register an account, complete the identity verification process, make a deposit or withdrawal, contact our support team, or respond to surveys and promotions.
• Automated Technologies: Data collected automatically when you visit or interact with the tc666 platform, including through cookies, web beacons, server logs, and similar tracking technologies. This includes your IP address, browser fingerprint, device identifiers, and session activity data.
• Payment Processors: When you initiate a transaction via bKash, Nagad, Rocket, Upay, or a linked bank account, our payment processing partners may share relevant transaction confirmation data with tc666 to facilitate accurate crediting and reconciliation of your account balance.
• Third-Party Verification Services: Where we use third-party identity verification or Know Your Customer (KYC) service providers to validate your identity documents, those providers may share verification outcomes and risk scores with tc666.
• Game Providers: Game studios and software providers whose products are available on tc666 (such as Pragmatic Play, Evolution Gaming, Spribe, and others) may share anonymised or aggregated gameplay data with us for the purposes of game performance monitoring and responsible gaming detection.

tc666 uses your personal data only for purposes that are lawful, necessary, and proportionate. The primary purposes for which we process your data are as follows:

• Account Management: To create and maintain your tc666 player account, verify your identity and age, manage your login credentials, and facilitate account recovery.
• Service Delivery: To provide you with access to the full range of tc666 games, sports betting markets, live dealer tables, and associated features.
• Financial Transactions: To process deposits and withdrawals, maintain accurate account balances, generate transaction histories, and comply with anti-money laundering (AML) obligations.
• Customer Support: To respond to your enquiries, resolve disputes, investigate complaints, and maintain records of communications relevant to your account.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, bonus abuse, and unauthorised access attempts on the platform.
• Legal Compliance: To meet our obligations under applicable laws, including KYC and AML requirements, and to respond to lawful requests from regulatory or law enforcement authorities.
• Responsible Gaming: To monitor gameplay patterns for signs of problem gambling and, where appropriate, to reach out to players who may benefit from support tools such as deposit limits or self-exclusion.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates by email or SMS, where you have provided explicit consent. You may withdraw this consent at any time.
• Platform Improvement: To analyse aggregated usage data, identify technical issues, and improve the design, performance, and features of the tc666 platform.

tc666 does not use your personal data for automated decision-making that produces legal or similarly significant effects without a human review mechanism being available to you. Where profiling is used for responsible gaming purposes, you have the right to request a manual review of any decision that materially affects your account.

tc666 processes your personal data on one or more of the following legal bases, depending on the specific processing activity involved:

• Contractual Necessity: Processing that is required to perform the contract between you and tc666, including account registration, service delivery, and transaction processing.
• Legal Obligation: Processing required for tc666 to comply with applicable law, including KYC identity checks, AML transaction monitoring, and responses to lawful regulatory or law enforcement requests.
• Legitimate Interests: Processing carried out for tc666's legitimate business interests where those interests are not overridden by your fundamental rights. This includes fraud prevention, platform security, abuse detection, and internal analytics.
• Consent: Processing based on your freely given, specific, and informed consent. This applies primarily to marketing communications and the use of non-essential cookies. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Where tc666 relies on legitimate interests as a legal basis, we conduct and document a balancing test to ensure that our interests do not unduly prejudice your privacy rights. You may request details of any such balancing test by contacting our support team.

tc666 does not sell your personal data to third parties. We may, however, share your data with carefully selected third parties in the following limited circumstances:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, and partner banks receive the minimum data necessary to process your financial transactions securely.
• Identity Verification Partners: Third-party KYC and AML service providers receive identity document data solely for the purpose of verifying your account in accordance with our legal obligations.
• Game Software Providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session data required to deliver their games within the tc666 platform environment.
• Technology and Infrastructure Partners: Cloud hosting providers, cybersecurity services, and platform analytics tools used by tc666 may process your data as data processors acting strictly on tc666's instructions and under binding data processing agreements.
• Regulatory and Law Enforcement Authorities: tc666 will disclose personal data to competent authorities where required to do so by applicable law, court order, or regulatory direction. We will notify you of such disclosures where we are legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of tc666's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and your rights will be preserved.

tc666 uses cookies and similar tracking technologies to operate the platform effectively, remember your preferences, and deliver a personalised gaming experience. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: These are essential for the platform to function. They include session management cookies, authentication tokens, and security cookies. These cannot be disabled without preventing you from using the platform.
• Functional Cookies: These remember your preferences such as language settings, preferred payment method, and responsible gaming tool configurations. Disabling them may reduce the convenience of your experience.
• Analytics Cookies: These collect anonymised data about how players use the tc666 platform, including which pages are visited most frequently and where users encounter errors. This data helps us improve the platform. Analytics cookies are only set with your consent.
• Marketing Cookies: These track your activity across sessions and, where you have consented to marketing communications, enable tc666 to serve relevant promotional content. These cookies are only set with your explicit consent.

You can manage or withdraw your consent to non-essential cookies at any time by adjusting your browser settings. Please note that disabling certain cookies may affect the functionality of the tc666 platform. For detailed instructions on managing cookies in your specific browser, please refer to your browser's help documentation.

tc666 retains your personal data for only as long as is necessary for the purposes for which it was collected, or as required by applicable law. Our general data retention approach is as follows:

• Active Account Data: Retained for the full duration of your registered account relationship with tc666, plus a post-closure retention period of 5 years to meet AML, KYC, and financial record-keeping obligations.
• Transaction Records: Financial transaction records are retained for a minimum of 5 years from the date of the transaction in accordance with applicable anti-money laundering regulations.
• Communications Data: Customer support communications and live chat transcripts are retained for up to 3 years from the date of the interaction for dispute resolution and quality assurance purposes.
• Marketing Data: Marketing consent records and campaign interaction data are retained for up to 2 years from the date of your last interaction with a tc666 marketing communication, or until you withdraw consent, whichever is earlier.
• Technical and Log Data: Server logs, IP access records, and security event logs are retained for up to 12 months for cybersecurity monitoring and fraud investigation purposes.

When personal data is no longer required and there is no legal basis for its continued retention, tc666 will securely delete or anonymise that data in accordance with our internal data destruction procedures.

As a user of the tc666 platform, you hold meaningful rights over your personal data. These rights are detailed below. To exercise any of these rights, please contact our support team via live chat or email at [email protected]. We will respond to verified requests within 10 working days.

• Right of Access: You have the right to request a copy of all personal data tc666 holds about you, along with information about how it is being used and on what legal basis.
• Right to Rectification: You have the right to request that tc666 correct any inaccurate or incomplete personal data held about you. You may update certain account details directly within your player account settings.
• Right to Erasure: In certain circumstances, you have the right to request that tc666 delete your personal data. This right is subject to limitations where retention is required by law (for example, to comply with AML obligations) or where tc666 has a legitimate interest in retaining the data.
• Right to Restriction of Processing: You have the right to request that tc666 restrict the processing of your personal data in certain circumstances, for example while an accuracy dispute is being resolved.
• Right to Data Portability: Where processing is based on your consent or on a contract, you have the right to receive a structured, commonly used, and machine-readable copy of the personal data you have provided to tc666.
• Right to Object: You have the right to object to the processing of your personal data where tc666 relies on legitimate interests as the legal basis. You may also object to the use of your data for direct marketing purposes at any time, with immediate effect.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

tc666 employs a multi-layered approach to data security, combining technical, organisational, and procedural safeguards to protect your personal data against unauthorised access, loss, alteration, or disclosure. Our security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and tc666.io is encrypted using industry-standard 256-bit SSL/TLS protocols. This protects your login credentials, payment information, and personal data in transit.
• Data Encryption at Rest: Sensitive personal and financial data stored on tc666's servers is encrypted at rest using AES-256 encryption.
• Two-Factor Authentication (2FA): All player accounts are protected by OTP-based two-factor authentication delivered to your registered Bangladeshi mobile number. We strongly recommend enabling 2FA to maximise your account security.
• Access Controls: Access to personal data within tc666's internal systems is restricted on a strict need-to-know basis. Staff with access to personal data undergo regular data protection training and are bound by confidentiality obligations.
• Intrusion Detection: tc666 operates continuous network monitoring and intrusion detection systems to identify and respond to potential security threats in real time.
• Regular Security Audits: Our platform infrastructure undergoes regular third-party security audits and penetration testing to identify and remediate vulnerabilities proactively.

While tc666 takes all reasonable and proportionate steps to protect your personal data, no digital system can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights, tc666 will notify you as promptly as possible and take all necessary steps to contain and remediate the incident.

The tc666 platform is strictly intended for adults aged 21 years and above. tc666 does not knowingly collect, process, or retain personal data from any individual under the age of 21. Our registration process includes mandatory age declaration and age verification procedures specifically designed to prevent underage access.

If tc666 discovers or is notified that personal data from a person under the age of 21 has been collected, we will take immediate steps to permanently delete that data and close the associated account. Any winnings or balances associated with an underage account will be handled in accordance with our Terms and Conditions and applicable law.

If you are a parent or guardian and believe that your child has registered on the tc666 platform, please contact us immediately at [email protected]. We will investigate and act without delay.

tc666 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform features. When material changes are made to this Policy, tc666 will notify registered players by email and by posting a prominent notice on the platform at least 7 days before the changes take effect.

The revised Privacy Policy will be published on this page with an updated effective date. We encourage you to review this page periodically to stay informed about how tc666 protects your personal data. Your continued use of the tc666 platform after the effective date of any revision constitutes your acceptance of the updated Privacy Policy.

The current version of this Privacy Policy is version 2.0, effective 1 January 2026. If you have any questions about this Policy or about the way tc666 processes your personal data, please do not hesitate to contact us at [email protected] or via the live chat function available 24 hours a day, 7 days a week on the platform.