uk66 Privacy Policy

1 Introduction

uk66 ("we", "us", "our", "the Platform") operates the online sports betting and casino platform accessible at uk66.io. As part of delivering a safe, secure, and personalised experience to players across Bangladesh — including those in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar — uk66 necessarily collects and processes certain categories of personal data.

This Privacy Policy ("Policy") sets out, in plain language, the categories of personal data that uk66 collects, the purposes for which that data is used, the legal basis on which it is processed, how long it is retained, the circumstances in which it may be shared with third parties, and the rights that players have over their own information.

This Policy should be read alongside the uk66 Terms & Conditions and Responsible Gaming Policy, both of which are available on the Platform. Where there is any conflict between this Policy and those documents, this Policy shall prevail with respect to data protection matters.

uk66 is committed to maintaining the confidentiality, integrity, and availability of all personal data entrusted to it. We review and update our data-handling practices on a regular basis to ensure they remain aligned with best practice and any applicable legal requirements.

2 Personal Data We Collect

The following table summarises the categories of personal data that uk66 may collect, along with examples of the specific data points within each category.

uk66 does not intentionally collect sensitive special-category data such as health information, religious beliefs, or political opinions. If any such data is incidentally disclosed during support communications, it will not be processed beyond what is strictly necessary to resolve the relevant query.

3 How We Collect Your Data

uk66 collects personal data through the following means:

Direct Interactions

When you register an account, complete identity verification, make a deposit or withdrawal, place a bet, claim a promotion, or contact our support team, you provide data directly to uk66. This includes the identity, contact, financial, and communications data categories listed in Section 2.

Automated Technologies

When you access the uk66 platform, certain technical and usage data is collected automatically through server logs, session cookies, and analytics tools. This includes your IP address, browser type, device identifiers, and interaction patterns. This data helps us maintain platform security, detect fraud, and improve the user experience. See Section 6 for full details of our cookie practices.

Third-Party Sources

uk66 may receive data about you from third-party identity verification services used to confirm the information you provide at registration, and from payment processors (including bKash, Nagad, Rocket, Upay, Visa, and Mastercard) to confirm the outcome of payment transactions. We do not receive marketing lists or data purchased from data brokers.

4 Purpose & Legal Basis for Processing

uk66 processes personal data only where a lawful basis exists for doing so. The following table maps each processing purpose to the applicable legal basis.

Where processing is based on your consent (for example, receiving promotional communications), you may withdraw that consent at any time by contacting [email protected] or updating your account notification preferences. Withdrawal of consent does not affect the lawfulness of any processing carried out before the consent was withdrawn.

5 Sharing Your Data with Third Parties

uk66 does not sell, rent, or trade your personal data to any third party. We share personal data only in the following limited and controlled circumstances:

• Payment processors: When you make a deposit or request a withdrawal, the relevant financial data is shared with the applicable payment provider (bKash, Nagad, Rocket, Upay, Visa, Mastercard) solely for the purpose of processing the transaction.
• Identity verification providers: Third-party KYC and age verification services may receive identity data (name, date of birth, ID document details) to verify that you meet the 21+ requirement and that your account information is accurate.
• Game content providers: When you play casino games or live dealer titles provided by studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, or Ezugi, limited technical session data (player ID, bet amounts, game outcomes) may be shared with the relevant studio for game operation and fairness auditing purposes. No identity data is shared with game studios.
• Legal and regulatory authorities: uk66 may disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory bodies where required to do so by law, court order, or applicable regulation.
• Service providers: uk66 engages third-party service providers for functions such as data hosting, customer support tooling, and fraud detection analytics. These providers act as data processors and are contractually bound to process data only on uk66's instructions and to maintain appropriate security standards.

Any third party receiving personal data from uk66 is required to handle it in a manner consistent with applicable data protection principles. uk66 does not permit third-party service providers to use your data for their own marketing purposes.

6 Cookies & Tracking Technologies

uk66 uses cookies and similar tracking technologies to operate the Platform, maintain session security, and improve the user experience. The following categories of cookies are used:

• Strictly necessary cookies: These are essential for the Platform to function. They include session authentication cookies, load-balancing cookies, and security tokens. These cookies cannot be disabled without impairing Platform functionality.
• Functional cookies: These remember your preferences — such as your preferred language or the last page you visited — to provide a more personalised experience. Disabling these cookies may affect the convenience of your session but will not prevent you from accessing the Platform.
• Analytics cookies: These collect aggregated, anonymised data about how players interact with the Platform — for example, which pages are most frequently visited and how long sessions last. This data is used solely to improve Platform performance and content.
• Security cookies: These help uk66 detect unusual account activity, fraud attempts, and bot behaviour. They are an integral part of the Platform's fraud prevention infrastructure.

uk66 does not use third-party advertising or behavioural tracking cookies. You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging into your uk66 account.

7 Data Retention

uk66 retains personal data only for as long as it is necessary for the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

• Account data (identity, contact, financial): Retained for the duration of your account plus a minimum of 5 years following account closure, to comply with anti-money laundering and financial record-keeping obligations.
• KYC / identity documents: Retained for a minimum of 5 years following account closure or the date the document was submitted, whichever is later.
• Transaction records: Retained for a minimum of 5 years from the date of the transaction.
• Support communications: Retained for 3 years from the date of the last communication in a given support thread.
• Technical and usage data (logs): Retained for a maximum of 12 months from collection, unless a specific fraud or security investigation requires retention for a longer period.
• Marketing consent records: Retained for as long as the consent is active, plus 1 year after withdrawal to demonstrate compliance.

At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to any individual. Where anonymisation is not technically feasible, the data is securely destroyed.

8 Data Security

uk66 implements a layered security architecture to protect all personal data held on the Platform. Our security measures include, but are not limited to, the following:

• SSL/TLS encryption: All data transmitted between your device and the uk66 platform is encrypted using industry-standard TLS protocols. This protects your login credentials, payment details, and personal information from interception in transit.
• Encrypted data storage: Sensitive data fields — including passwords, financial account numbers, and identity document details — are stored in encrypted form. Passwords are hashed using a one-way cryptographic function and are never stored in recoverable plain text.
• Access controls: Access to personal data within uk66's internal systems is restricted on a strict need-to-know basis. Staff members with access to sensitive data are subject to background checks and ongoing security training.
• Intrusion detection: uk66 operates automated monitoring systems that detect and alert on unusual access patterns, potential data exfiltration, and unauthorised login attempts in real time.
• Secure payment processing: uk66 does not store full payment card numbers on its own servers. Card transactions are tokenised by our payment processor partners. bKash, Nagad, and Rocket transactions are handled entirely within those providers' own secure infrastructure.

Despite these measures, no system can guarantee absolute security. In the event of a data breach that is likely to result in a risk to players' rights and freedoms, uk66 will notify affected players without undue delay, providing details of the nature of the breach, the data affected, and the steps being taken to mitigate the impact.

9 Children & Minors

The uk66 platform is strictly intended for adults aged 21 years and above. uk66 does not knowingly collect or process personal data belonging to individuals under the age of 21. Age verification checks are conducted at the point of account registration and again at the point of first withdrawal.

If uk66 discovers or is notified that a registered account belongs to a person under the age of 21, the account will be immediately suspended, all associated balances will be subject to review and forfeiture, and any personal data belonging to the minor will be deleted as promptly as technically feasible, except where retention is required for legal compliance purposes.

Parents and guardians who believe that a minor has registered an account with uk66 should contact us immediately at [email protected]. uk66 will investigate all such reports on a priority basis and take appropriate action without delay.

10 Third-Party Links & Services

The uk66 platform may contain references to third-party payment services (bKash, Nagad, Rocket, Upay, Visa, Mastercard) and game content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi). When you interact with these third-party services, your data may be processed by those providers in accordance with their own privacy policies.

uk66 is not responsible for the privacy practices of third-party providers. We recommend reviewing the privacy policies of any third-party service with which you interact directly — for example, the bKash or Nagad apps through which you process deposits and withdrawals. uk66's privacy obligations extend only to the data we directly collect and process on our own Platform.

11 Exercising Your Data Rights

To exercise any of the rights described in the "Your Rights" section above — including access, rectification, erasure, restriction, portability, or objection — please submit a written request to [email protected] with the subject line "Data Rights Request". Please include your registered account username and a clear description of the right you wish to exercise.

uk66 will acknowledge your request within 5 business days and aim to fulfil it within 30 calendar days. In complex cases, or where a high volume of requests is being processed simultaneously, this period may be extended by a further 30 days, in which case you will be notified of the extension and the reason for it.

uk66 will not charge a fee for processing data rights requests unless a request is manifestly unfounded or excessive, in which case a reasonable administrative fee may be applied. If uk66 declines to act on a request, we will provide a clear explanation of the reason and inform you of any right of recourse available to you.

12 Amendments to This Policy

uk66 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data-handling practices, changes in applicable law, or changes to the services we offer. The effective date at the top of this document will be updated whenever a revision is made.

Where a material change is made to this Policy — for example, a new category of data is collected, a new purpose for processing is introduced, or data is shared with a new category of third party — uk66 will provide advance notice to registered players via their registered email address or via an in-platform notification. In some cases, where required by applicable law, uk66 will seek fresh consent from players before implementing the change.

The current version of this Privacy Policy will always be available at uk66.io/privacy-policy. Players are encouraged to review this page periodically. Continued use of the Platform following notification of an amendment constitutes acceptance of the revised Policy.

13 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which uk66 handles your personal data, please contact the uk66 Data Support team through any of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, via the uk66 Platform. Live chat is the fastest way to reach our team for general account and privacy queries.
• Email: [email protected] — please use the subject line "Privacy Query" or "Data Rights Request" to ensure your message is routed to the correct team. Email responses are provided within 24 hours during normal operating hours (Bangladesh Standard Time, UTC+6).

uk66 treats all privacy-related communications with the highest level of confidentiality. If you are dissatisfied with our response to a privacy complaint, you have the right to escalate the matter through the appropriate legal channels available in your jurisdiction.