Your Privacy at aa66

aa66 collects personal data from players and platform visitors through several channels, including account registration forms, payment processing, gameplay activity, customer support interactions, and automatic technical data collection when you browse aa66.io. We only collect data that is necessary for the purposes described in this Privacy Policy.

Data You Provide Directly

When you register an account with aa66, you provide us with information that includes your full legal name, date of birth, email address, phone number, and your preferred payment method details. During the identity verification (KYC) process, you may additionally provide copies of government-issued identification documents such as a national identity card (NID), passport, or driver's licence, as well as proof-of-address documents such as a recent utility bill or bank statement.

When you contact our customer support team — whether via live chat, email at [email protected], or any other supported channel — we retain a record of the communication, including the contents of your messages, the date and time of contact, and any attachments or screenshots you share. This information is used to resolve your query and to improve our support services.

Data Collected Automatically

When you visit aa66.io, our systems automatically collect certain technical information about your device and browsing session. This includes your IP address, browser type and version, operating system, device type (desktop, mobile, tablet), referring URL, pages visited on aa66.io, session duration, and clickstream data. This information is collected using cookies, web beacons, and similar tracking technologies as described further in Section 3 of this policy.

Transaction and Gameplay Data

aa66 records all financial transactions associated with your account, including deposit amounts, withdrawal requests, payment method used, transaction timestamps, and any bonuses or promotional credits applied. We also maintain a record of your gameplay activity, including games played, wagers placed, game outcomes, and session lengths. This data is used to manage your account, detect fraud, fulfil regulatory obligations, and personalise your experience on the platform.

aa66 uses the personal data we collect to operate the platform, comply with legal and regulatory obligations, prevent fraud and money laundering, improve the player experience, and communicate relevant information to registered players. We process your data only where we have a lawful basis to do so, as described in this section.

Account Management and Service Delivery

The primary purpose for which we process your personal data is to create and manage your aa66 player account, process your deposits and withdrawal requests, verify your identity in accordance with our KYC obligations, provide access to our game library including live casino, slots, bingo, and sports betting markets, and deliver customer support. These processing activities are necessary for the performance of our contract with you as a registered player.

Legal and Regulatory Compliance

aa66 is required by its operating licence and applicable anti-money laundering (AML) regulations to collect, verify, and retain certain player data. We process identity, financial, and gameplay data to meet these obligations, which may include filing reports with competent regulatory or law enforcement authorities where required. This processing is carried out on the basis of legal obligation and cannot be opted out of by players.

Fraud Prevention and Security

aa66 uses technical and gameplay data — including IP addresses, device fingerprints, login patterns, and transaction histories — to detect and prevent fraudulent activity, account takeovers, bonus abuse, and money laundering. Our risk and compliance team may conduct manual reviews of flagged accounts. Data processed for fraud prevention purposes is retained for as long as necessary to complete investigations and meet any associated legal obligations.

Marketing and Promotions

With your consent, aa66 may send you promotional emails, SMS messages, or in-platform notifications about bonuses, free spin offers, sports betting promotions, and seasonal campaigns — for example, Eid promotions, Pohela Boishakh offers, BPL cricket specials, and T20 World Cup betting markets. You may withdraw your marketing consent at any time by updating your communication preferences in your account settings or by emailing [email protected].

Platform Improvement and Analytics

Aggregated and anonymised data about how players interact with aa66.io — including pages visited, features used, game preferences, and session patterns — is used to improve platform performance, inform product development decisions, and optimise the user experience. This analytics processing uses data in a form that does not identify individual players.

aa66.io uses cookies and similar tracking technologies to enable core platform functionality, remember your preferences, maintain your login session, and collect analytical data about how visitors use the site. This section explains the types of cookies we use and how you can manage them.

What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They are widely used to make websites function efficiently, to remember user preferences between sessions, and to provide analytical information to website operators. Cookies set by aa66.io are either first-party (set directly by our platform) or third-party (set by service providers we use, such as analytics or payment processing partners).

Managing Your Cookie Preferences

You can manage or delete cookies at any time through your browser settings. Most modern browsers allow you to block all cookies, accept only first-party cookies, or delete stored cookies after each session. Please be aware that disabling strictly necessary cookies will prevent you from logging in or using core features of aa66.io. Instructions for managing cookies in the most common browsers are available in each browser's help documentation. To withdraw consent for marketing or analytics cookies specifically, update your preferences in your aa66 account settings or contact [email protected].

aa66 does not sell your personal data to third parties. We may share your data with carefully selected partners and service providers where it is necessary to deliver our services, meet legal obligations, or protect the security of the platform. All third parties with whom we share data are contractually required to process that data only for the specified purpose and in compliance with applicable data protection standards.

Categories of Third Parties

• Payment Processors: To facilitate deposits and withdrawals, we share relevant transaction data with payment service providers including bKash, Nagad, Rocket, Upay, Visa, and Mastercard. These providers receive only the data necessary to process the specific transaction.
• Identity Verification Providers: aa66 uses trusted third-party KYC and identity verification services to validate the documents you submit during account verification. These providers operate under strict data processing agreements.
• Game Software Providers: Game providers such as Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, and Microgaming may receive a pseudonymous player identifier and session token to operate their games within the aa66 platform. They do not receive your full personal profile.
• IT Infrastructure and Cloud Services: aa66's platform is hosted on secure cloud infrastructure. Our infrastructure providers have access to server-level data but are contractually prohibited from accessing or using player data for any independent purpose.
• Regulatory and Law Enforcement Authorities: aa66 may disclose player data to competent regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, court order, or our licensing obligations. Such disclosures are made only to the extent required and are documented by our compliance team.
• Fraud Prevention Networks: Aggregated or pseudonymised fraud signals may be shared with industry fraud prevention networks to protect all operators and players from known bad actors.

aa66 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, to maintain your player account, and to comply with applicable legal, regulatory, and contractual obligations. We do not retain data for longer than is necessary, and we apply retention periods that are proportionate to the sensitivity of the data and the risk associated with continued storage.

Retention Periods by Data Category

Following the expiry of the applicable retention period, aa66 will securely delete or anonymise your personal data so that it can no longer be linked to your identity. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes without restriction. Where a legal hold is placed on an account — for example, as part of an ongoing investigation — data may be retained beyond the standard retention period until the hold is lifted.

As a player on the aa66 platform, you hold a number of rights in relation to your personal data. aa66 is committed to honouring these rights in a timely and transparent manner. To exercise any of the rights described below, please submit a written request to [email protected] from your registered email address. aa66 will acknowledge your request within 5 Bangladesh Standard Time business days and aim to fulfil it within 30 calendar days.

• Right of Access: You may request a copy of all personal data that aa66 holds about you. We will provide this in a structured, commonly used, machine-readable format upon request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. Minor corrections such as email address or phone number changes can be made directly in your account settings.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where the processing was unlawful. This right is subject to our legal retention obligations — for example, financial transaction records must be retained for regulatory purposes regardless of an erasure request.
• Right to Restrict Processing: You may request that aa66 restrict the processing of your data in certain circumstances — for example, while the accuracy of data is being contested or while an objection to processing is being considered.
• Right to Data Portability: Where processing is based on your consent or on the performance of a contract, you may request that your data be provided to you in a portable format that allows transfer to another service provider.
• Right to Object: You have the right to object to the processing of your data for direct marketing purposes at any time. You may also object to processing carried out on the basis of legitimate interests, though aa66 may be able to demonstrate overriding grounds that permit continued processing.
• Right to Withdraw Consent: Where processing is based on your consent — for example, marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

aa66 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security programme is reviewed and updated regularly to address evolving threats and to maintain alignment with industry best practices for online gaming platforms.

Technical Safeguards

• All data transmitted between your browser and aa66.io is encrypted using 256-bit TLS/SSL protocols. The padlock icon visible in your browser confirms this encryption is active during your session.
• Player passwords are stored using strong one-way cryptographic hashing algorithms. aa66 staff cannot view or retrieve your password in plain text.
• Our platform infrastructure is hosted in secure data centres with physical access controls, redundant power supplies, and continuous environmental monitoring.
• Access to player data within aa66's internal systems is restricted on a role-based, need-to-know basis. Staff access is logged, audited, and reviewed periodically.
• aa66's systems are subject to regular penetration testing and vulnerability assessments by independent security specialists.

Organisational Safeguards

• All aa66 staff and contractors who handle personal data receive regular data protection and security training.
• aa66 maintains documented data breach response procedures. In the event of a security incident that affects your personal data, we will notify you and any relevant regulatory authority in accordance with applicable reporting obligations.
• Third-party service providers who process data on aa66's behalf are assessed for security compliance before engagement and are bound by contractual data security obligations.

If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or have a concern about the way aa66 handles your personal data, please contact our Data Protection team in writing. All privacy-related enquiries are handled confidentially and prioritised within our support queue.

You may reach us at: [email protected]

Please include your registered email address, a clear description of your request or concern, and any relevant reference numbers (for example, a transaction ID if your query relates to a specific payment). Our team will acknowledge your message within 5 BST business days and will aim to resolve your request within 30 calendar days. Complex or legally sensitive requests may require additional time, in which case we will inform you of the expected resolution timeline.

Complaints

If you are not satisfied with aa66's response to a privacy concern, you have the right to escalate your complaint to the relevant supervisory authority under the jurisdiction of aa66's operating licence. Details of the applicable supervisory authority are available from aa66's compliance team upon request. aa66 encourages players to raise concerns with us directly in the first instance, as we are committed to resolving all privacy matters fairly and promptly.

Updates to This Policy

aa66 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, legal obligations, or platform features. When we make material changes to this policy, we will notify registered players via email to their registered address and via an in-platform notification. The effective date at the top of this document indicates when the current version was last revised. We encourage you to review this policy periodically to stay informed about how we protect your data.