tc66 Privacy Policy

This Privacy Policy applies to all personal data collected, processed, and stored by tc66 ("we", "us", "our", or "the Platform") in connection with the operation of the tc66 online casino and sports betting platform available at tc66.io. It covers all players who register an account, visit the website, use any tc66 service, or otherwise interact with us in any capacity.

tc66 acts as the data controller in respect of the personal data you provide to us or that we collect about you through your use of the platform. As data controller, tc66 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently in accordance with applicable data protection law.

This Privacy Policy should be read in conjunction with our Terms and Conditions, which form part of the overarching agreement between you and tc66. By registering an account or using any tc66 service, you acknowledge that you have read and understood this Privacy Policy.

tc66 collects personal data from you in several ways: information you provide directly to us, information generated automatically as a result of your use of the platform, and information obtained from third-party service providers where necessary to verify your identity or process payments.

Information you provide directly:

• Registration Data: Full legal name, date of birth, gender, email address, mobile phone number, and residential address (including city, district, and postal code) provided at the time of account creation.
• Identity Verification Documents: Scanned copies or photographs of government-issued identification documents such as your National Identity Card (NID), passport, or driver's licence, and proof of address documents, submitted as part of the KYC process.
• Financial Information: Payment method details including bKash account numbers, Nagad account numbers, Rocket wallet identifiers, Upay account details, Visa/Mastercard card details (last four digits and expiry only — full card numbers are handled exclusively by our PCI-DSS compliant payment processors and are never stored by tc66 directly), and bank account details for bank transfer withdrawals.
• Communications: The content of messages you send to tc66 support via live chat, email, or WhatsApp, including any complaint, dispute, or feedback you submit.
• Promotional Preferences: Your stated preferences regarding receiving promotional emails, SMS messages, or WhatsApp notifications from tc66.

Information collected automatically:

• Technical Data: IP address, browser type and version, operating system, device type, screen resolution, and referring URL collected via standard web server logs and analytics tools each time you access the tc66 platform.
• Usage Data: Pages visited, games played, betting history, session duration, time of access, clickstream data, and feature interactions recorded to support platform operation, fraud detection, and service improvement.
• Transaction Data: A complete record of all deposits, withdrawals, wagers placed, game outcomes, bonus activations, and balance adjustments associated with your account.
• Cookie and Tracking Data: Data collected through cookies, local storage, and similar technologies as described in Section 6 of this policy.

Information from third parties:

• Identity Verification Providers: Results of automated identity and age verification checks performed by third-party KYC service providers against your submitted documentation.
• Payment Processors: Transaction status confirmations and fraud scoring signals returned by bKash, Nagad, Rocket, Upay, Visa, Mastercard, and our banking partners.
• Fraud and AML Databases: Risk scoring and sanction screening results obtained from third-party compliance data providers used to meet our anti-money-laundering obligations.

Summary of Data Categories Collected:

tc66 uses the personal data we collect about you for the following purposes:

• Account Management: To create, maintain, and administer your tc66 player account, including authenticating your identity at login, processing account changes, and communicating account-specific notifications.
• Service Delivery: To enable you to access and use all features of the tc66 platform, including placing bets, playing casino games, making deposits and withdrawals, and claiming bonuses and promotions.
• Identity Verification (KYC): To verify that you meet our age and eligibility requirements, confirm the accuracy of the information you have provided, and comply with our anti-money-laundering (AML) and know-your-customer (KYC) obligations.
• Payment Processing: To facilitate deposits and withdrawals via your chosen payment method, reconcile transactions, and investigate and resolve payment disputes.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, multi-accounting, collusion, and other prohibited conduct, using automated monitoring tools and manual review processes.
• Responsible Gambling: To monitor your gambling activity for signs of problem gambling and, where appropriate, to apply responsible gambling tools, cooling-off periods, or account restrictions in accordance with our Responsible Gaming policy and your own stated preferences.
• Customer Support: To respond to your enquiries, resolve complaints, investigate disputes, and provide assistance via live chat, email, and WhatsApp support channels.
• Legal Compliance: To comply with applicable laws, regulations, court orders, regulatory requests, and legal processes, including data retention obligations and reporting requirements.
• Platform Improvement: To analyse aggregated usage data, player behaviour patterns, and platform performance metrics to identify technical issues, improve existing features, and develop new ones.
• Marketing Communications: Where you have provided explicit consent, to send you promotional emails, SMS messages, or WhatsApp notifications about tc66 bonuses, new games, seasonal promotions (such as Eid or BPL season offers), and platform updates. You may opt out at any time.
• Personalisation: To tailor your in-platform experience, including recommending games, displaying relevant promotions, and adjusting content based on your activity history and stated preferences.

tc66 processes your personal data only where a valid legal basis exists for doing so. The primary legal bases on which tc66 relies are as follows:

• Contractual Necessity: Processing that is necessary to perform the contract between you and tc66 — specifically, the Terms and Conditions you accepted at registration. This covers account creation, game and betting service delivery, payment processing, and customer support.
• Legal Obligation: Processing that is necessary for tc66 to comply with applicable legal obligations, including KYC identity verification, AML transaction monitoring, data retention obligations, and responses to lawful regulatory or law enforcement requests.
• Legitimate Interests: Processing carried out in pursuit of tc66's legitimate business interests, where those interests are not overridden by your rights and freedoms. This includes fraud prevention, platform security, responsible gambling monitoring, and aggregated analytics for platform improvement.
• Consent: Processing based on your freely given, specific, and informed consent. This applies primarily to optional marketing communications and certain non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

tc66 does not sell, rent, or commercially trade your personal data. We share personal data with third parties only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and licensed banking partners receive the transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and data processing agreements with tc66.
• Identity Verification Providers: Third-party KYC and age verification service providers receive your identity documentation and personal details solely to perform verification checks on behalf of tc66. These providers are contractually bound to process your data only for verification purposes and to maintain equivalent data security standards to tc66.
• Fraud and Compliance Tools: tc66 uses third-party fraud detection platforms and AML screening services that may process your IP address, device fingerprint, transaction patterns, and identity data to generate risk scores and sanction screening results.
• Game Software Providers: When you play games provided by third-party studios such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, or Microgaming, limited technical data (such as session tokens and game outcome records) is exchanged between tc66 and the relevant provider to operate the game correctly and record outcomes.
• Cloud and Infrastructure Providers: tc66 uses third-party cloud hosting, content delivery, and infrastructure services. These providers act as data processors under our instruction and are contractually prohibited from using your data for their own purposes.
• Legal and Regulatory Authorities: tc66 may disclose personal data to law enforcement agencies, regulatory bodies, courts, or other public authorities where required to do so by applicable law, court order, or lawful regulatory request. Where legally permitted, tc66 will notify you of such disclosures.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of tc66's business, your personal data may be transferred to the acquiring entity as part of the transaction, subject to equivalent privacy protections being maintained.

tc66 uses cookies and similar tracking technologies — including local storage, session storage, and pixel tags — to operate the platform, personalise your experience, and understand how the platform is used. Below is a description of the types of cookies we use:

You may manage your cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Please be aware that disabling certain cookies may impair the functionality of the tc66 platform. tc66 does not use cookies to track your activity on third-party websites outside of the tc66 domain.

tc66 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. Our security infrastructure includes:

• Transport Layer Security (TLS): All data transmitted between your device and tc66 servers is encrypted using TLS 1.2 or TLS 1.3 with 256-bit AES encryption.
• At-Rest Encryption: Sensitive personal data stored in tc66 databases — including identity documents, payment method details, and KYC records — is encrypted at rest using AES-256.
• Access Controls: Internal access to personal data is restricted on a strict need-to-know basis. All staff with access to personal data undergo background screening and regular data protection training.
• Multi-Factor Authentication: Administrative access to tc66 backend systems requires multi-factor authentication and is subject to audit logging.
• Penetration Testing: tc66 engages independent security professionals to conduct periodic penetration testing and vulnerability assessments of its platform infrastructure.
• Incident Response: tc66 maintains a documented data breach response procedure. In the event of a breach that poses a risk to your rights and freedoms, tc66 will notify affected individuals and relevant authorities within the timeframes required by applicable law.

tc66 retains your personal data for as long as is necessary to fulfil the purpose for which it was collected, subject to any longer retention periods required by applicable law or regulatory obligation. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with you as an individual. Anonymised data may be retained indefinitely for statistical and analytical purposes.

tc66 respects your rights as a data subject and provides the following mechanisms to exercise those rights. To submit a data subject request, please contact our support team at [email protected] with the subject line "Data Subject Request" and a description of the right you wish to exercise.

• Right of Access: You have the right to request a copy of all personal data tc66 holds about you, along with information about how it is used and shared. We will respond within 30 days of receiving a valid request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Many basic details can be updated directly from your account settings panel.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is otherwise unlawful. This right is subject to legal retention obligations — we cannot delete data we are required by law to retain.
• Right to Restriction of Processing: You have the right to request that we restrict the processing of your personal data in certain circumstances — for example, while a dispute about its accuracy is resolved.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON).
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling for direct marketing purposes. tc66 will cease such processing upon receipt of a valid objection unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time by contacting support or adjusting your account preferences. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

tc66 will not charge a fee for handling data subject requests unless a request is manifestly unfounded, repetitive, or excessive, in which case a reasonable administrative fee may apply. We reserve the right to refuse requests that fall into these categories, and will notify you accordingly with reasons.

The tc66 platform is strictly intended for adults aged 21 years and over. tc66 does not knowingly collect, process, or store personal data from any person under the age of 21. Age verification is a mandatory step in the account registration and KYC process, and tc66 employs automated and manual controls to prevent underage individuals from accessing the platform.

If tc66 discovers or is notified that personal data has been collected from an individual under the age of 21 — whether through a fraudulent registration or any other means — we will immediately suspend the relevant account, delete all associated personal data to the extent permitted by law, and void any transactions made during the period of unauthorised access.

tc66 operates as an international platform. Your personal data may be transferred to and processed in countries outside Bangladesh, including countries where tc66's servers, infrastructure providers, and third-party service partners are located. These countries may have data protection laws that differ from those applicable in Bangladesh.

Where tc66 transfers personal data internationally, we take appropriate steps to ensure that such transfers are subject to adequate safeguards. These safeguards may include:

• Standard contractual clauses or equivalent data transfer mechanisms incorporated into data processing agreements with our service providers.
• Transfers to countries or organisations that have been recognised as providing an adequate level of data protection by relevant regulatory bodies.
• Implementation of supplementary technical and organisational security measures where necessary to protect data transferred to jurisdictions with lower baseline protections.

By registering an account with tc66 and accepting these terms, you acknowledge and consent to the international transfer of your personal data in the manner described in this section.

The tc66 platform integrates third-party game software providers, payment processors, and analytics tools that operate under their own independent privacy policies. tc66 is not responsible for the data practices of these third-party providers. We recommend that you review the privacy policies of any third-party service you interact with through or in connection with the tc66 platform.

tc66 does not incorporate third-party advertising networks, social media tracking pixels, or affiliate tracking technologies that would enable third parties to collect your personal data for their own independent advertising purposes through the tc66 platform.

tc66 reserves the right to update, amend, or replace this Privacy Policy at any time. Changes may be made to reflect updates in applicable law, changes in our data processing practices, the introduction of new platform features, or feedback from players and regulatory guidance.

When we make material changes to this Privacy Policy, we will notify you by posting a prominent notice on the tc66 platform and, where we hold a valid email address for you, by sending a notification to that address. The updated Privacy Policy will take effect from the date stated at the top of the document as the "Last Updated" date.

Your continued use of the tc66 platform following the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with a revised Privacy Policy, you should cease using the platform and contact us to request account closure.

tc66 maintains an archive of prior versions of this Privacy Policy. If you wish to review a previous version, please contact our support team with your request.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the manner in which tc66 processes your personal data, please do not hesitate to contact our data protection team using the following details:

• Email: [email protected] — subject line: "Privacy Enquiry" or "Data Subject Request"
• WhatsApp: +880 1700-000000 — available 08:00–24:00 BST (UTC+6)
• Live Chat: Available 24/7 via the tc66 platform — request to speak with the Compliance team

tc66 is committed to resolving all privacy-related enquiries promptly and transparently. We aim to acknowledge all privacy complaints within 5 business days and to provide a substantive response within 30 calendar days. Where a complaint cannot be resolved to your satisfaction, you may have the right to escalate the matter to a relevant supervisory authority or data protection regulator in your jurisdiction.