tg66 Privacy Policy — Your Data, Your Rights

This Privacy Policy ("Policy") describes how tg66 ("the Platform", "we", "us", "our") collects, processes, stores, and protects the personal data of individuals ("you", "the Player", "the User") who register an account with or otherwise interact with the tg66 platform at tg66.my. This Policy applies to all tg66 services, including online casino games, sports betting markets, payment processing, and customer support functions.

By registering a tg66 account, accessing the platform, or submitting any form of personal data to us, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. This Policy is to be read in conjunction with our Terms & Conditions and our Responsible Gaming Policy.

1. Information We Collect

1.1 Registration Data. When you create a tg66 account, we collect the following information: your full legal name, date of birth, residential address in Bangladesh, email address, and a mobile phone number registered with a Bangladeshi network operator (such as Grameenphone, Robi, Banglalink, Teletalk, or Airtel Bangladesh).

1.2 Identity Verification (KYC) Data. To comply with our anti-money-laundering obligations and to verify your age (you must be 18 or older to use tg66), we collect copies of government-issued identity documents. Acceptable documents include your Bangladesh National Identity Card (NID) or a valid passport. In some cases, we may also request proof of address (such as a recent utility bill) or proof of payment method ownership.

1.3 Financial & Transaction Data. We collect records of all deposits and withdrawals made through your tg66 account, including the payment method used (e.g., bKash, Nagad, Rocket, Upay, Visa, Mastercard), transaction timestamps, amounts in BDT, and transaction reference numbers. We do not store full payment card numbers on our servers — card data is tokenised and processed by PCI-DSS compliant payment processors.

1.4 Gameplay & Betting Data. We maintain records of all wagers placed on tg66, including game titles, bet amounts, outcomes, bonus usage, and session durations. This data is used for account management, responsible gaming monitoring, dispute resolution, and platform improvement purposes.

1.5 Technical & Device Data. When you access tg66, we automatically collect certain technical data including your IP address, device type, operating system, browser type and version, screen resolution, and referring URL. This data helps us detect fraud, enforce geo-restrictions, and optimise platform performance.

1.6 Communications Data. If you contact tg66 customer support via email or live chat, we retain records of those communications, including the content of messages, timestamps, and any attachments you provide. This data is used to resolve your query and to maintain a support history for your account.

Data Category	Examples	Collection Method
Registration Data	Name, DOB, email, phone, address	Provided by you at sign-up
KYC / Identity Data	NID, passport, proof of address	Uploaded by you during verification
Financial Data	Deposits, withdrawals, payment methods	Generated via platform transactions
Gameplay Data	Bets, game sessions, bonus usage	Automatically recorded on platform
Technical Data	IP address, device info, browser	Collected automatically on access
Communications Data	Support emails, chat transcripts	Provided by you when contacting us

2. How We Use Your Data

2.1 Account Management. We use your registration and KYC data to create, maintain, and administer your tg66 account, including processing deposits and withdrawals, applying bonuses, and communicating important account notifications to you.

2.2 Identity & Age Verification. We are legally required to verify that all tg66 players are at least 18 years of age. Your identity documents are used solely for this purpose and for confirming that your payment methods are registered in your own name.

2.3 Fraud Prevention & Security. Your technical data, transaction history, and gameplay records are analysed to detect and prevent fraudulent activity, including bonus abuse, account takeover attempts, money laundering, and the use of automated betting tools.

2.4 Legal & Regulatory Compliance. tg66 is required by applicable AML, CTF, and data protection regulations to collect, process, and retain certain categories of personal data. We process your data for these purposes on the basis of a legal obligation, regardless of your consent preferences.

2.5 Responsible Gaming. We monitor gameplay patterns — including session lengths, deposit frequencies, and wagering volumes — to identify players who may be experiencing gambling-related harm. Where such patterns are identified, we may contact you with responsible gaming resources or apply protective account measures in accordance with our Responsible Gaming Policy.

2.6 Platform Improvement & Analytics. Aggregated and anonymised technical and gameplay data is used to improve platform performance, fix bugs, optimise game loading times, and develop new features. This processing does not involve any data that could be used to identify you personally.

2.7 Marketing Communications. With your explicit consent, we may send you promotional communications about new games, seasonal offers (such as BPL cricket promotions, Eid bonuses, or Pohela Boishakh specials), and platform updates. You may withdraw your consent and unsubscribe from marketing emails at any time by contacting support@tg66.my.

3. Data Sharing & Disclosure

3.1 tg66 does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial purposes. Data sharing is limited strictly to the categories and recipients described in this section.

3.2 Payment Processors. To process BDT deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard, we share the minimum necessary transaction data with our certified payment processing partners. All such partners are contractually bound to process your data only for the purpose of completing the requested transaction.

3.3 Game Providers. When you play games hosted by third-party studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi, your player session data (such as a pseudonymous player ID and bet amounts) is transmitted to that provider to facilitate the game session. Game providers do not receive your full name, NID, or payment details.

3.4 KYC & Identity Verification Partners. tg66 may use accredited third-party identity verification services to assist with the KYC process. These partners verify the authenticity of the documents you submit and return a verification result to tg66. They do not retain copies of your documents beyond the period necessary to complete the verification.

3.5 Legal & Regulatory Authorities. tg66 will disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory bodies where we are required to do so by law, court order, or lawful government authority. We will only disclose the minimum data required to fulfil the legal obligation and will notify you of any such disclosure where we are legally permitted to do so.

3.6 Business Transfers. In the event that tg66 undergoes a merger, acquisition, or transfer of its business or assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any changes to how your data is processed as a result.

4. Cookies & Tracking

4.1 tg66 uses cookies — small text files stored on your device — to enable essential platform functionality, maintain your login session, and collect anonymised performance analytics. Cookies do not contain your full personal details or financial information.

4.2 The following categories of cookies are used on tg66.my:

• Essential Cookies: Required for the platform to function. These include session authentication cookies, security tokens, and load-balancing identifiers. These cookies cannot be disabled without disrupting your ability to use the platform.
• Analytics Cookies: Used to collect anonymised data about how players navigate the platform, which pages are visited most frequently, and where errors occur. This data is used solely to improve platform performance. No personally identifiable information is included in analytics data.
• Preference Cookies: Store your platform preferences such as language settings, display options, and notification preferences between sessions.

4.3 tg66 does not use third-party advertising cookies, retargeting pixels, social media tracking cookies, or any other tracking technology that shares your data with external advertisers.

4.4 You may control and manage cookies through your web browser's settings. Note that disabling essential cookies may impair your ability to log in or use core platform features. Instructions for managing cookies are available in the help documentation of all major browsers including Chrome, Firefox, Safari, and Edge.

5. Data Security

5.1 tg66 employs a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• Encryption of sensitive data at rest, including KYC documents and financial records.
• Role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent required for their specific function.
• Regular security audits and vulnerability assessments conducted by qualified security professionals.
• Multi-factor authentication requirements for all internal staff accessing systems that process personal data.
• Continuous monitoring of platform infrastructure for intrusion attempts and anomalous activity.

5.2 While tg66 takes all reasonable steps to secure your personal data, no online platform can provide an absolute guarantee of security against all possible threats. In the event of a data security incident that poses a risk to your rights and interests, tg66 will notify you and the relevant authorities within the timeframe required by applicable law.

5.3 You are responsible for maintaining the security of your own tg66 account credentials, including your password and any two-factor authentication codes. Do not share these with any person. tg66 will never ask for your password via email, live chat, or telephone.

6. Data Retention

6.1 tg66 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations.

6.2 The following general retention periods apply:

• Account & Registration Data: Retained for the duration of your active account relationship with tg66, and for a minimum of 5 years following account closure, in accordance with AML record-keeping requirements.
• KYC Identity Documents: Retained for a minimum of 5 years from the date of verification, as required by applicable financial regulations. Documents are stored in encrypted form throughout this period.
• Transaction Records: All deposit, withdrawal, and betting records are retained for a minimum of 5 years from the date of the transaction.
• Customer Support Communications: Retained for 3 years from the date of the most recent communication in a given support thread, or longer if the communication relates to a dispute or legal proceeding.
• Technical & Device Data: Retained for 12 months on a rolling basis for security and fraud analysis purposes.

6.3 Where personal data is no longer required and the applicable retention period has expired, tg66 will securely delete or anonymise that data so that it can no longer be linked to you as an individual.

7. Your Privacy Rights

7.1 As a tg66 player, you have the following rights in respect of the personal data we hold about you:

• Right of Access: You may request a copy of all personal data tg66 holds about you. We will provide this in a commonly used electronic format within 30 days of receiving your verified request.
• Right to Rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request that we correct it. You may update basic account information directly through your account settings panel.
• Right to Erasure ("Right to be Forgotten"): You may request that tg66 delete your personal data. Note that this right is subject to our legal retention obligations — data we are required by law to retain cannot be deleted upon request, but will be erased as soon as the applicable retention period expires.
• Right to Restrict Processing: In certain circumstances, you may request that tg66 temporarily restrict the processing of your personal data while a complaint or dispute is being resolved.
• Right to Data Portability: You may request that your personal data be provided to you in a structured, machine-readable format (e.g., CSV or JSON) so that you can transfer it to another service provider.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to other forms of processing where we rely on legitimate interests as our legal basis, subject to applicable overriding legal grounds.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of any processing carried out prior to withdrawal.

7.2 To exercise any of the rights listed above, submit a written request to our Data Protection Officer at support@tg66.my with the subject line "Privacy Rights Request". We will acknowledge receipt within 24 hours and provide a substantive response within 30 calendar days. In complex cases, this period may be extended by up to a further 30 days, with prior notification.

7.3 tg66 will verify your identity before processing any privacy rights request to ensure that we do not disclose or delete another person's data in error. You may be asked to confirm account details or provide a copy of your NID for this purpose.

8. Contact & Data Protection Officer

8.1 If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which tg66 processes your personal data, please contact our Data Protection Officer (DPO) using the details below.

8.2 Data Protection Officer — tg66
Email: support@tg66.my (subject line: "Privacy Enquiry")
Platform: tg66.my
Support Hours: 24/7 in English — typical response time under 2 hours.

8.3 We take all privacy complaints seriously. Upon receipt of a formal privacy complaint, our DPO will acknowledge it within 24 hours and provide a full written response within 14 business days. Where a complaint involves a potential breach of your data rights, we will conduct a thorough internal investigation and keep you informed of progress throughout.

8.4 Policy Updates. tg66 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. Material updates will be communicated to registered players via email at least 7 days before taking effect. The "Last Updated" date at the top of this document will always reflect the most recent revision. We encourage you to review this Policy periodically.