sb66 Privacy Policy — Your Data, Your Rights
At sb66, we take the privacy of every player in Bangladesh seriously. This Privacy Policy explains precisely what personal data we collect, why we collect it, how we use and protect it, and what rights you hold over your information when using the sb66 platform.
Our Commitments
How sb66 Protects Your Privacy
These six principles underpin every data-handling decision we make at sb66. They are a summary only — the full details of each principle are set out in the policy sections below.
Minimal Data Collection
sb66 collects only the personal data that is strictly necessary to operate your account, process transactions, verify your identity, and comply with legal obligations. We do not collect data for its own sake.
Secure Storage and Transmission
All data transmitted between your device and sb66 is protected by SSL/TLS encryption. Personal data stored on our servers is held in encrypted form with access restricted to authorised personnel only.
No Sale of Personal Data
sb66 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. Your data belongs to you — we act as its custodian, not its owner.
Your Rights Are Respected
You have the right to access, correct, or request deletion of your personal data at any time. You may also object to certain processing activities. All such requests are handled promptly by our dedicated support team.
Clear Retention Periods
We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Data that is no longer needed is securely deleted or anonymised.
Transparent Updates
When we make material changes to this Privacy Policy, we notify registered players via their registered contact details before the changes take effect. You will always know what data we hold and how we use it.
Contents
Summary: sb66 collects personal data to operate your account, process payments, verify your identity, and keep the platform safe and fair. We do not sell your data. You have the right to access, correct, and delete your information at any time. This policy applies to all players using the sb66 platform from Bangladesh.
1 Introduction
This Privacy Policy (hereinafter referred to as "the Policy" or "this Policy") sets out how sb66 (hereinafter referred to as "sb66", "we", "us", or "our") collects, uses, stores, shares, and protects the personal data of individuals (hereinafter referred to as "you", "the Player", or "the User") who access or use the sb66 online casino and sports betting platform available at https://sb66.io and any associated subdomains, mobile applications, or digital services operated by sb66.
sb66 is committed to handling your personal data with the highest standards of care, transparency, and security. This Policy is intended to give you a clear and complete understanding of your privacy rights and our data-handling practices so that you can make informed decisions about your use of the sb66 platform.
This Privacy Policy should be read alongside the sb66 Terms & Conditions and Responsible Gaming Policy. By registering an account with sb66 or by continuing to use the platform, you acknowledge that you have read and understood this Policy and that you consent to the data processing activities described herein.
If you have any questions about this Policy or about how sb66 handles your personal data, please contact us using the details set out in Section 15 of this Policy.
2 Data Controller
For the purposes of this Privacy Policy, sb66 acts as the data controller in respect of the personal data collected from players and visitors to the sb66 platform. As data controller, sb66 determines the purposes and means by which your personal data is processed.
sb66 operates the platform at https://sb66.io and is responsible for ensuring that all personal data processing activities conducted through the platform comply with applicable data protection principles, including purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality.
You may contact the sb66 data protection point of contact at any time using the email address set out in Section 15 of this Policy. All data-related enquiries, access requests, correction requests, and deletion requests should be directed to that contact point.
3 Personal Data We Collect
sb66 collects the following categories of personal data from players and platform visitors. The specific data collected from any individual will depend on the nature and extent of their interaction with the platform:
| Category | Data Items | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, national ID or passport details, photograph | Registration & KYC verification |
| Contact Data | Mobile phone number (Bangladesh), email address, city or district of residence | Registration |
| Financial Data | bKash/Nagad/Rocket/Upay account numbers, bank account details, transaction amounts and references | Deposit & withdrawal processing |
| Gaming Data | Wager history, game sessions, bet amounts, win/loss records, sports betting selections, bonus usage | Ongoing platform use |
| Technical Data | IP address, device type, browser type and version, operating system, session timestamps, cookies | Automatic collection during platform use |
| Communications Data | Live chat transcripts, email correspondence, support ticket content | Customer support interactions |
| Verification Documents | Copies of national ID, passport, driving licence, utility bills, bank statements | KYC / AML compliance checks |
sb66 does not collect sensitive special-category data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric identification data, unless specifically required by applicable law and with your explicit consent.
4 How We Collect Your Data
sb66 collects personal data through the following channels and mechanisms:
- Direct submission: Data you provide directly when registering an account, completing identity verification, making deposits or withdrawal requests, contacting customer support, or participating in promotional activities.
- Automated technical collection: Data collected automatically when you access the sb66 platform, including IP address, device identifiers, browser data, session duration, pages visited, and click-path information. This data is collected via server logs, cookies, and similar technologies as described in Section 8 of this Policy.
- Payment processors: Transaction confirmation data received from our payment processing partners (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank) when you make a deposit or withdrawal.
- Identity verification partners: Where sb66 uses a third-party identity verification service to assist with KYC checks, that partner may return verification status and document authentication results to sb66. The data processed by such partners is governed by their own privacy policies, and sb66 selects partners whose data protection standards are consistent with this Policy.
- Game providers: Technical session data from third-party game providers (e.g., Evolution Gaming, Pragmatic Play, Ezugi, Spribe) integrated into the sb66 platform. This data is used to maintain game integrity, resolve disputes, and calculate winnings.
- Fraud prevention tools: Device fingerprinting and behavioural analytics tools used to identify suspicious account activity, detect multi-accounting, and prevent bonus abuse.
5 How We Use Your Personal Data
sb66 uses the personal data it collects for the following specific purposes. Each purpose is linked to a legal basis for processing, which is set out in full in Section 6 of this Policy:
- Account registration and management: To create, maintain, and administer your sb66 player account, including processing account updates, password resets, and communication preference changes.
- Identity and age verification: To verify that you meet the minimum age requirement of 21 years and to confirm your identity as required by our Know Your Customer (KYC) and Anti-Money Laundering (AML) compliance obligations.
- Payment processing: To process your deposit and withdrawal transactions via your chosen payment method, to match incoming funds to your account, and to maintain an accurate financial transaction record.
- Customer support: To respond to your enquiries, resolve complaints, investigate disputes, and provide technical assistance via live chat or email.
- Platform security and fraud prevention: To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, money laundering, and other prohibited activities as defined in the sb66 Terms & Conditions.
- Responsible gaming compliance: To monitor gameplay patterns for indicators of problem gambling behaviour, to apply player-requested account restrictions (deposit limits, cooling-off periods, self-exclusion), and to fulfil our responsible gaming obligations.
- Legal and regulatory compliance: To meet our obligations under applicable laws, including responding to lawful requests from law enforcement or regulatory authorities in Bangladesh.
- Platform improvement: To analyse aggregated, anonymised usage data to improve the functionality, performance, and user experience of the sb66 platform.
- Marketing communications: To send you promotional offers, bonus notifications, and relevant product updates, where you have provided consent to receive such communications. You may withdraw consent at any time by contacting [email protected].
6 Legal Basis for Processing
sb66 processes your personal data on one or more of the following legal bases, depending on the specific processing activity involved:
- Contractual necessity: Processing is necessary to perform our contract with you — specifically, to create and manage your account, process deposits and withdrawals, and deliver the gaming services you have requested. Without this processing, we cannot provide the sb66 platform to you.
- Legal obligation: Processing is required to comply with legal obligations applicable to sb66, including KYC/AML requirements, data retention obligations, and obligations to cooperate with law enforcement authorities.
- Legitimate interests: Processing is necessary for the legitimate interests of sb66 in operating a secure, fair, and commercially viable gaming platform. This includes fraud prevention, platform security, responsible gaming monitoring, and aggregated analytics. We balance these interests against your privacy rights and will not process data under this basis where your interests override ours.
- Consent: Where we process your data for marketing communications or for non-essential cookies, we do so on the basis of your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without detriment by contacting [email protected].
7 Sharing Your Personal Data
sb66 does not sell, rent, or trade your personal data. We share your data only in the following limited circumstances and only to the extent necessary for each purpose:
- Payment processors: We share the financial data necessary to process your deposits and withdrawals with your chosen payment provider (bKash, Nagad, Rocket, Upay, and our banking partners). These providers act as independent data controllers in respect of their own transaction processing activities.
- Identity verification providers: Where a third-party KYC/AML verification partner is used, we share the identity documentation you submit for the sole purpose of completing verification checks.
- Game content providers: Technical session data is shared with integrated game providers (such as Evolution Gaming, Pragmatic Play, Ezugi, Spribe, Netent, and Microgaming) to the extent required to deliver game sessions, calculate results, and resolve disputes.
- IT and infrastructure partners: Hosting providers, cloud infrastructure partners, and cybersecurity vendors who process data on sb66's behalf under strict data processing agreements that prohibit independent use of your data.
- Legal and regulatory authorities: We will disclose personal data to law enforcement agencies, regulatory bodies, or courts in Bangladesh where we are legally required to do so, or where disclosure is necessary to prevent serious harm or criminal activity.
- Business transfers: In the event of a merger, acquisition, or sale of all or part of the sb66 business, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and your rights under this Policy will be maintained.
Our Commitment: sb66 will never share your personal data with unaffiliated third parties for their own advertising, profiling, or direct marketing purposes. Every third party that receives your data is contractually bound to protect it in accordance with standards consistent with this Policy.
8 Cookies & Tracking Technologies
sb66 uses cookies and similar tracking technologies on its platform. A cookie is a small text file placed on your device when you visit the sb66 website. Cookies allow the platform to recognise your device across sessions, remember your preferences, and collect analytical data about how the platform is used.
sb66 uses the following categories of cookies:
- Strictly necessary cookies: These cookies are essential for the platform to function. They enable core functionality such as user authentication, account session management, and security features. These cookies cannot be disabled without rendering core platform features inoperable.
- Functional cookies: These cookies allow the platform to remember your preferences and settings (such as language selection and display preferences) to provide an enhanced, personalised experience.
- Analytical cookies: These cookies collect anonymised information about how visitors use the sb66 platform — including which pages are visited most frequently and how users navigate between sections. This data is used in aggregate form to improve platform performance and user experience.
- Security and fraud-prevention cookies: These cookies assist in identifying suspicious activity, detecting unauthorised access attempts, and enforcing responsible gaming restrictions such as self-exclusion.
You may control non-essential cookie categories through your browser settings or device privacy controls. Note that disabling certain cookies may affect the functionality of the sb66 platform. Strictly necessary cookies cannot be disabled as they are required for the platform to operate securely.
9 Data Retention
sb66 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following indicative retention periods apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account and identity data | Duration of account + 5 years after closure | Legal and AML compliance obligations |
| Financial transaction records | 7 years from transaction date | Financial record-keeping requirements |
| Gaming activity records | 5 years from account closure | Dispute resolution and regulatory compliance |
| Customer support communications | 3 years from last interaction | Complaint resolution and quality assurance |
| Technical / log data | 12 months from collection | Security monitoring and fraud detection |
| Marketing consent records | Until consent is withdrawn + 12 months | Proof of consent for marketing communications |
| Self-exclusion records | Indefinite (until formal reactivation request) | Responsible gaming obligations |
Upon expiry of the applicable retention period, personal data is either securely deleted or irreversibly anonymised so that it can no longer be associated with any identifiable individual.
10 Data Security
sb66 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:
- SSL/TLS encryption: All data transmitted between your device and the sb66 platform is encrypted using industry-standard SSL/TLS protocols. Look for the padlock symbol in your browser address bar when accessing sb66.
- Encryption at rest: Personal data stored on sb66's servers — including identity documents, financial records, and account credentials — is encrypted at rest using strong encryption standards.
- Access controls: Access to systems and databases containing personal data is restricted to authorised sb66 personnel on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations.
- Two-factor authentication: sb66 supports two-factor authentication (2FA) for player accounts to provide an additional layer of protection beyond username and password.
- Regular security assessments: sb66 conducts regular internal and external security assessments, penetration tests, and vulnerability scans to identify and address potential security weaknesses.
- Incident response procedures: sb66 maintains documented data breach response procedures. In the event of a confirmed data breach that poses a risk to your rights and freedoms, we will notify affected players via their registered contact details as promptly as practicable.
While sb66 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security against all possible threats. You also have a role to play in protecting your account — use a strong, unique password, enable 2FA, and never share your account credentials with anyone.
11 Your Rights Over Your Personal Data
As a player on the sb66 platform, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact us using the details in Section 15. sb66 will respond to all valid rights requests within a reasonable timeframe and, in any case, within 30 days of receipt:
- Right of access: You have the right to request a copy of the personal data sb66 holds about you, along with information about how it is being processed. This is sometimes called a Subject Access Request (SAR).
- Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or supplemented. You may also update many of your account details directly via the sb66 account settings section.
- Right to erasure: In certain circumstances, you have the right to request that sb66 delete your personal data. This right is not absolute — we may be required to retain certain data to comply with legal obligations (for example, financial transaction records required for AML compliance).
- Right to restrict processing: You have the right to request that sb66 restrict the processing of your personal data in certain circumstances, for example while a complaint is being investigated.
- Right to object: You have the right to object to the processing of your personal data where that processing is based on sb66's legitimate interests. Where you object, sb66 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
- Right to withdraw consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
- Right to data portability: In certain circumstances, you have the right to receive the personal data you have provided to sb66 in a structured, commonly used, and machine-readable format.
To exercise any of the above rights, please contact sb66 at [email protected] with the subject line "Data Rights Request", clearly stating the right you wish to exercise and providing sufficient information to verify your identity. We will not be able to process rights requests without adequate identity verification to protect against unauthorised data disclosure.
12 Minors and Age Restriction
The sb66 platform is strictly intended for use by adults aged 21 years and above. sb66 does not knowingly collect personal data from any individual under the age of 21. Age verification is a mandatory step in the sb66 account registration and KYC process, and sb66 will not process any gaming transactions on behalf of a person who cannot demonstrate that they have reached the minimum age of 21.
If sb66 becomes aware that personal data has been collected from a person under the age of 21, that account will be suspended immediately, all associated data will be reviewed, and any funds held in that account will be handled in accordance with applicable legal requirements. Where the underage player has deposited funds, those funds will be returned to the original payment source after any required investigation is completed.
If you believe that a minor has created an account on the sb66 platform, please report this immediately to [email protected]. We take underage gambling extremely seriously and will act on all credible reports without delay.
13 International Data Transfers
The sb66 platform serves players based in Bangladesh. In the course of operating the platform and engaging third-party service providers (such as game content providers, cloud infrastructure partners, and identity verification services), your personal data may in some cases be transferred to, stored in, or processed in countries outside Bangladesh.
Where such transfers occur, sb66 takes all reasonable steps to ensure that your personal data continues to be protected to a standard at least equivalent to the protections described in this Privacy Policy. This includes:
- Entering into contractual data processing agreements with all third-party recipients that impose obligations consistent with this Policy.
- Selecting technology and infrastructure partners who maintain recognised international security certifications and data protection standards.
- Limiting the scope of data transferred internationally to the minimum necessary for the purpose of the transfer.
By using the sb66 platform and providing your personal data, you acknowledge that your data may be processed outside Bangladesh in the limited circumstances described above, always subject to the protections described in this Policy.
14 Changes to This Privacy Policy
sb66 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform services. When we make material changes to this Policy, we will notify registered players via their registered email address or mobile number prior to the changes taking effect, with a clear summary of what has changed and why.
The current version of this Privacy Policy is always available at https://sb66.io/privacy-policy, and the effective date at the top of this Policy reflects when the current version came into force. We recommend that you review this Policy periodically — particularly after receiving a change notification — to remain informed about how sb66 handles your personal data.
Your continued use of the sb66 platform after the publication of an updated Privacy Policy constitutes your acknowledgement of, and agreement to, the revised Policy. If you do not agree with any change to this Policy, you should cease using the platform and may request account closure by contacting [email protected].
15 Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or to how sb66 processes your personal data, please contact the sb66 data protection point of contact using the following details:
- Email: [email protected] — please include "Privacy Policy" or "Data Rights Request" in the subject line
- Live Chat: Available 24 hours a day, 7 days a week, via the sb66 platform at https://sb66.io
- Response time: All data-related requests are acknowledged within 48 hours Bangladesh Standard Time (BST, UTC+6) and resolved within 30 days
- Postal correspondence: For formal written requests, please contact us via email first to obtain current postal correspondence details
sb66 is committed to resolving all privacy-related concerns promptly and transparently. If you are not satisfied with our response to a data rights request or privacy complaint, you may escalate the matter by marking your follow-up correspondence to [email protected] as a "Formal Privacy Complaint".
All times and deadlines referenced in this Privacy Policy are expressed in Bangladesh Standard Time (BST, UTC+6) unless otherwise stated.
Explore sb66
Ready to Play at sb66?
Now that you understand how sb66 protects your data, explore our full range of games and sports betting markets — all in a secure, fair-play environment built for Bangladesh players.