Privacy Policy
662bit Data Protection

662bit collects personal information from you in the course of providing our online casino and sports betting services. We collect only the information that is necessary for the specific purpose for which it is gathered, and we do not collect data beyond what is reasonably required to operate the 662bit platform safely and in compliance with our legal obligations.

The categories of personal information we collect are described in the table below, along with the reason each category is collected:

Information Collected Automatically

When you visit the 662bit website or use our platform, certain technical data is collected automatically through cookies, log files, and similar technologies. This includes your IP address, the type of device you are using, your browser configuration, and your interaction patterns with the platform. This data is used for security purposes, to detect fraudulent activity, and to maintain the reliability and performance of the 662bit service.

Information from Third Parties

In some circumstances, 662bit may receive information about you from third parties. This includes identity verification data from KYC service providers, fraud screening data from risk management partners, and, where permitted, publicly available information used to confirm the accuracy of the details you have provided. 662bit does not purchase marketing lists or obtain personal data from social media platforms without your explicit consent.

662bit uses the personal information we collect strictly for legitimate, defined purposes. We do not use your data in ways that are incompatible with the purposes for which it was collected. The lawful basis for each processing activity is identified below.

Contractual Necessity

The following processing activities are necessary to provide the 662bit service under our agreement with you as a registered player:

• Creating and managing your 662bit account
• Processing deposits and withdrawal requests via bKash, Nagad, Rocket, Upay, and banking partners
• Verifying your identity and age in compliance with our eligibility requirements
• Providing access to casino games, sports betting markets, live dealer tables, and crash games
• Calculating and crediting bonuses, winnings, and cashback rewards
• Providing customer support and resolving disputes
• Sending transactional communications such as deposit confirmations, withdrawal notifications, and security alerts

Legal Obligation

Certain data processing activities are required by law or by the terms of our compliance obligations:

• Conducting Know Your Customer (KYC) identity verification
• Anti-Money Laundering (AML) and Counter-Terrorism Financing (CTF) transaction monitoring
• Maintaining records of gaming activity and financial transactions for audit purposes
• Responding to lawful requests from competent authorities
• Enforcing responsible gaming obligations, including self-exclusion records

Legitimate Interests

662bit also processes certain data on the basis of our legitimate business interests, provided those interests are not overridden by your rights:

• Fraud detection, account security monitoring, and abuse prevention
• Platform performance analysis and technical improvement
• Understanding aggregate player behaviour to improve game selection and promotional offerings
• Maintaining the integrity of sporting event betting markets

Consent-Based Processing

Where 662bit relies on your consent as the lawful basis for processing, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. Consent-based processing includes:

• Sending promotional emails, SMS notifications, or in-platform marketing messages about bonuses, new games, and seasonal promotions (e.g., Eid offers, BPL tournament specials)
• Placing non-essential cookies on your device for analytics purposes

To withdraw marketing consent, you may unsubscribe via the link in any marketing email, adjust your notification preferences within your account settings, or contact our support team directly.

662bit does not sell your personal data to any third party under any circumstances. We share personal data with third parties only where it is necessary to deliver our services, comply with legal requirements, or protect the integrity of our platform. All third-party partners with whom data is shared are contractually bound to handle your information with appropriate security measures and to use it only for the specified purpose.

Categories of Third-Party Recipients

• Game Technology Providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session and gameplay data to facilitate game delivery, RNG certification, and technical support. These providers do not receive your full identity or financial data.
• Payment Processing Partners: To process deposits and withdrawals, limited financial and identity data is shared with payment service providers including bKash, Nagad, Rocket, Upay, and our banking partners (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank). These partners are subject to their own strict privacy and security obligations.
• Identity Verification (KYC) Services: Third-party KYC providers receive the identity documents you submit in order to verify your name, age, and address. These providers are specialised data processors operating under strict data processing agreements.
• Fraud and Risk Management: Risk screening partners may receive technical data (IP address, device fingerprint, transaction patterns) to assist with fraud detection and account security.
• Legal and Regulatory Authorities: Where required by law, or in response to a valid legal order, 662bit may disclose personal data to competent regulatory or law enforcement authorities. Such disclosures are made only to the extent strictly required by the applicable legal obligation.
• Professional Advisers: Lawyers, auditors, and compliance consultants engaged by 662bit may access personal data on a strictly need-to-know basis, under obligations of professional confidentiality.

International Data Transfers

Some of the third-party service providers used by 662bit operate servers in jurisdictions outside Bangladesh. Where personal data is transferred internationally, 662bit ensures that appropriate safeguards are in place, such as contractual data transfer clauses, to maintain a level of data protection equivalent to the standard applied within Bangladesh.

662bit uses cookies and similar technologies (such as local storage and session tokens) to enable essential platform functionality, maintain your login session, and gather anonymised usage data to improve the platform experience. This section explains what cookies we use and how you can manage them.

Types of Cookies Used

What We Do Not Use Cookies For

662bit does not use third-party advertising cookies, behavioural tracking cookies, or any technology designed to build an advertising profile of you across external websites. We do not embed third-party social media tracking pixels. Our analytics data is aggregated and anonymised — it cannot be used to identify you as an individual.

Managing Your Cookie Preferences

Strictly necessary cookies cannot be disabled, as they are essential to the operation of the 662bit platform (including maintaining your 662bit Login session). All other cookie categories can be managed through your browser settings. Most modern browsers allow you to block, delete, or receive alerts before cookies are placed. Please note that disabling functional cookies may affect the performance or personalisation features of the platform.

For guidance on managing cookies in your specific browser, refer to the browser's own help documentation. This may include browsers commonly used by players in Bangladesh such as Chrome for Android, Samsung Internet, Firefox, and Opera Mini.

662bit retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or for as long as required by applicable legal, regulatory, or audit obligations. Once the retention period has expired, data is securely deleted or anonymised in a manner that prevents reconstruction.

Standard Retention Periods

• Active Account Data: Retained for the full duration of your account relationship with 662bit, plus a minimum post-closure retention period required for legal compliance.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of each transaction, in accordance with AML record-keeping requirements.
• KYC Verification Documents: Retained for a minimum of 5 years from the date of account closure or the last verified transaction, whichever is later.
• Customer Support Communications: Live chat transcripts and support email correspondence are retained for up to 3 years from the date of the interaction.
• Technical and Log Data: IP logs, access logs, and security event logs are retained for up to 12 months.
• Marketing Consent Records: Records of your marketing opt-in or opt-out decisions are retained for the duration of your account plus 3 years, for compliance evidence purposes.
• Responsible Gaming Records: Self-exclusion records and deposit limit histories are retained for the duration legally required to enforce those restrictions, even if you request general account data deletion.

Account Deletion Requests

If you request deletion of your 662bit account and associated personal data, 662bit will action that request within 30 days, subject to the mandatory legal retention periods described above. Data that is legally required to be retained (such as financial transaction records and KYC documents) will be held for the minimum statutory period and then securely deleted. Data not subject to a legal retention obligation will be deleted or anonymised promptly upon your request.

662bit implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security framework is reviewed and updated regularly to address evolving threats.

Technical Safeguards

• 256-bit SSL/TLS Encryption: All data in transit between your device and the 662bit platform is encrypted using industry-standard SSL/TLS protocols. This applies to the 662bit Login process, all payment pages, and game interfaces.
• Data Encryption at Rest: Sensitive data fields stored in our databases, including identity verification documents and financial records, are encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within 662bit's systems is strictly limited to authorised personnel on a need-to-know basis. Role-based access controls and multi-factor authentication are enforced for all internal system access.
• Intrusion Detection: 662bit operates real-time intrusion detection and anomaly monitoring systems across our platform infrastructure. Suspicious activity triggers automated alerts and manual review.
• Penetration Testing: Our platform undergoes periodic security penetration testing by independent security professionals to identify and remediate vulnerabilities before they can be exploited.

Organisational Safeguards

• All 662bit staff and contractors with access to personal data receive mandatory data protection training and are bound by confidentiality obligations.
• Third-party service providers are subject to rigorous data security due diligence before engagement and are bound by contractual data processing agreements.
• 662bit maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to affected individuals, impacted players will be notified promptly with clear information about the nature of the breach and the steps taken in response.

Your Responsibilities

While 662bit takes extensive measures to protect your data, account security also depends on actions you take. You are responsible for keeping your 662bit Login credentials confidential, using a strong and unique password, logging out of your session when using a shared device, and notifying us immediately if you suspect unauthorised access to your account. Our support team is available 24/7 to assist with any account security concerns.

As a player on the 662bit platform, you hold a number of rights in relation to your personal data. 662bit is committed to facilitating the exercise of these rights promptly and without unnecessary barriers. Your rights are described below.

Right of Access

You have the right to request a copy of the personal data that 662bit holds about you. Upon a valid access request, we will provide you with a summary of the categories of data held, the purposes for which it is processed, and how long it will be retained. We aim to respond to access requests within 30 days.

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update certain information directly through your account settings. For identity data or document corrections, please contact our support team.

Right to Erasure

You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (for consent-based processing), or where you object to processing and there are no overriding legitimate grounds. This right is subject to mandatory legal retention obligations — 662bit cannot delete data that is required to be kept by law, such as AML transaction records.

Right to Restrict Processing

In certain circumstances, you have the right to request that 662bit restrict the processing of your personal data — for example, while the accuracy of the data is being contested, or while an objection to processing is being assessed.

Right to Data Portability

Where personal data is processed on the basis of your consent or on a contractual basis, and the processing is carried out by automated means, you have the right to receive a copy of your data in a structured, commonly used, machine-readable format. You may also request that this data be transmitted directly to another service provider where technically feasible.

Right to Object

You have the right to object to the processing of your personal data where that processing is based on legitimate interests or is carried out for direct marketing purposes. If you object to direct marketing, 662bit will cease processing your data for that purpose immediately. If you object to processing based on legitimate interests, 662bit will review the objection and cease processing unless compelling overriding grounds exist.

Exercising Your Rights

To exercise any of the rights described above, please contact the 662bit support team via 24/7 live chat or by sending a written request to [email protected]. We will verify your identity before processing any request to protect against unauthorised data access. We aim to acknowledge all rights requests within 5 business days and to fulfil them within 30 days. In complex cases, this period may be extended by a further 30 days, with notification provided.

If you have any questions about this Privacy Policy, how 662bit handles your personal data, or if you wish to exercise any of your privacy rights, please contact our support team through any of the following channels:

• Live Chat: Available 24/7 directly within the 662bit platform. This is the fastest channel for general privacy queries.
• Email: Send a written request to [email protected]. For formal data subject rights requests, email is the recommended channel as it creates a written record.

Formal Complaints

If you believe that 662bit has failed to handle your personal data in accordance with this Privacy Policy or with applicable data protection principles, you have the right to lodge a formal complaint. Formal complaints should be submitted in writing via email to [email protected], clearly marked as a "Formal Privacy Complaint". 662bit will acknowledge your complaint within 5 business days and provide a substantive response within 28 days.

Policy Updates

662bit may update this Privacy Policy from time to time to reflect changes in our data processing practices, platform features, or applicable legal requirements. When material changes are made, we will notify registered players by email and update the "Last Updated" date at the top of this page. Your continued use of the 662bit platform following notification of a material policy update constitutes your acknowledgement of the revised policy.

We encourage you to review this Privacy Policy periodically. The most current version is always available at 662bit.app/privacy-policy.