Privacy Policy — sbg66

sbg66 operates the online gaming and sports betting platform accessible at https://sbg66.org (the "Platform"). We are committed to protecting the privacy and personal data of all individuals who interact with our Platform, including registered players, visitors, and prospective users. This Privacy Policy ("Policy") describes how sbg66 collects, processes, stores, shares, and protects personal information in connection with your use of the Platform.

By accessing or using the sbg66 Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with the terms of this Policy, please discontinue your use of the Platform and contact our support team to request account closure.

This Policy applies to all users of the Platform, regardless of the device, browser, or method used to access sbg66. It should be read together with our Terms and Conditions, which govern your use of the Platform as a whole. Any terms not defined in this Policy carry the meaning given to them in the Terms and Conditions.

sbg66 collects personal information through several channels. The primary categories of personal data we collect directly from you include:

• Registration information: full legal name, email address, date of birth, username, and password (stored in encrypted form).
• KYC verification documents: national identity card, passport, utility bill, bank statement, or other government-issued identification requested during the verification process.
• Contact details: email address, phone number, and the registered payment account details (bKash number, Nagad number, bank account details) associated with your sbg66 account.
• Financial transaction records: deposits, withdrawals, bonus claims, and wagering history associated with your account, maintained in accordance with applicable anti-money laundering (AML) requirements.
• Communications: any messages, support requests, feedback, or complaints you submit to sbg66 via email, live chat, or any other support channel.

In addition, sbg66 automatically collects certain technical and behavioural data when you use the Platform, including:

• Device and connection data: IP address, device type, browser version, operating system, time zone, and network operator, collected to maintain session security and perform geolocation-based eligibility checks.
• Behavioural and usage data: pages visited, games launched, session start and end times, betting patterns, navigation flow, and any features accessed within the Platform — used to improve Platform performance and detect suspicious activity.
• Cookie and tracking data: session cookies, persistent cookies, and analytics identifiers placed on your device when you visit sbg66. See Section 06 for full details on our cookie usage and how to manage your preferences.

sbg66 uses the personal data we collect for the following purposes. We process your data only where we have a lawful basis for doing so, as described in Section 04 of this Policy:

• Account management and service delivery: to register and maintain your account, process deposits and withdrawals via bKash, Nagad, Rocket, and Upay, verify your identity, and deliver the gaming and betting services you have requested.
• KYC and AML compliance: to fulfil our obligations under applicable anti-money laundering and know-your-customer regulations, which require us to collect, verify, and retain records of player identification and financial transaction data.
• Fraud prevention and security: to detect, investigate, and prevent fraudulent activity, account abuse, bonus abuse, money laundering, and other prohibited activities on the Platform, using automated monitoring systems and manual review.
• Customer support: to respond to your support queries, complaints, and dispute submissions in a timely and effective manner, and to maintain a record of all support interactions associated with your account.
• Responsible gaming: to monitor gaming activity for signs of problem gambling, apply responsible gaming tools you have activated (such as deposit limits and self-exclusion), and where appropriate, contact you to offer support.
• Platform improvement and analytics: to analyse aggregated usage patterns, diagnose technical issues, improve the performance and features of the Platform, and develop new products and services for Bangladesh players.

Where sbg66 wishes to use your personal data for marketing communications (such as promotional emails about new bonuses or seasonal offers), we will only do so where you have provided explicit consent or where we have a legitimate interest that is not overridden by your rights. You may withdraw consent for marketing communications at any time by contacting [email protected].

sbg66 processes your personal data under one or more of the following lawful bases, depending on the purpose for which the data is used:

• Contractual necessity: processing required to perform the contract between sbg66 and you, including account creation, delivering gaming and betting services, processing payments, and handling support requests.
• Legal obligation: processing necessary to comply with applicable laws and regulations, including KYC identity verification requirements, AML record-keeping obligations, and cooperation with regulatory or law enforcement requests where legally required.
• Legitimate interests: processing carried out for sbg66's legitimate business interests, including fraud prevention, Platform security, responsible gaming monitoring, and analytics — where those interests are not overridden by your privacy rights.
• Consent: where sbg66 relies on your consent as the lawful basis for processing — for example, for marketing communications or optional analytics — you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

sbg66 does not sell, rent, or trade your personal data to third parties for commercial purposes. We may share your personal data with the following categories of recipients only where necessary and proportionate to the purpose:

• Payment processors and financial service providers: including bKash, Nagad, Rocket, Upay, Visa, Mastercard, and Dutch-Bangla Bank, to the extent necessary to process your deposits, withdrawals, and associated transaction verification steps.
• KYC and identity verification partners: third-party identity verification providers engaged by sbg66 to carry out document checks, age verification, and sanctions screening as part of our KYC and AML compliance obligations.
• Regulatory and law enforcement authorities: where sbg66 is required by applicable law, court order, or lawful government request to disclose personal data, we will do so to the minimum extent necessary to comply with the obligation.
• Technology and infrastructure providers: cloud hosting, Platform infrastructure, and security service providers engaged under strict data processing agreements, who process data solely on sbg66's instructions and may not use it for their own purposes.

All third parties with whom sbg66 shares personal data are required to maintain appropriate technical and organisational security measures to protect that data. Where data is transferred to service providers outside Bangladesh, sbg66 takes steps to ensure that appropriate safeguards are in place consistent with applicable data protection requirements.

sbg66 uses cookies and similar tracking technologies on the Platform to maintain session integrity, improve user experience, and support our security and analytics operations. The types of cookies we use include:

• Strictly necessary cookies: essential cookies required for the Platform to function, including session authentication tokens, login state cookies, and security cookies. These cannot be disabled without breaking core Platform functionality.
• Functional cookies: cookies that remember your preferences and settings, such as language preferences and responsible gaming tool configurations, to provide a consistent experience across sessions.
• Analytics cookies: cookies used to collect aggregated, anonymised data about how users interact with the Platform — pages visited, features used, session durations — to help sbg66 improve Platform performance and content.
• Security cookies: cookies used by our fraud detection and account security systems to identify unusual access patterns, flag potentially compromised sessions, and protect against automated attacks and credential stuffing.

You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from accessing sbg66, but may affect certain features and personalisation options. Strictly necessary cookies cannot be disabled via browser settings without disrupting core functionality.

sbg66 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements. The specific retention periods applicable to different categories of data are as follows: account registration and identity data is retained for the duration of your account and for a minimum of five years following account closure, in line with applicable AML record-keeping obligations; financial transaction records are retained for a minimum of five years from the date of each transaction; gaming activity and behavioural data is retained for up to three years from the date of generation; support and communications records are retained for up to two years from the date of the last interaction.

When personal data is no longer required for the purpose for which it was collected and no legal obligation requires its continued retention, sbg66 will securely delete or anonymise it in accordance with our internal data disposal procedures.

sbg66 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security framework includes 256-bit SSL/TLS encryption for all data transmissions between your device and the Platform; tokenisation of payment credentials so that full payment account details are never stored in plain text on our servers; role-based access controls limiting employee access to personal data to those with a demonstrable operational need; regular penetration testing and vulnerability assessments conducted by qualified security professionals; and incident response procedures to detect, contain, and notify affected users in the event of a confirmed data breach.

While sbg66 takes all reasonable steps to protect your personal data, no data transmission over the internet or electronic storage system can be guaranteed to be completely secure. Players are also responsible for maintaining the security of their own account credentials. If you suspect that your account has been compromised, please contact sbg66 support immediately at [email protected].

As a user of the sbg66 Platform, you have a number of rights with respect to the personal data we hold about you. To exercise any of these rights, please contact sbg66 at [email protected] with your full name, registered email address, and a clear description of the right you wish to exercise. We will respond to all valid requests within a reasonable timeframe and at no charge for standard requests.

Please note that certain rights are subject to limitations where sbg66 has overriding legal obligations — for example, we cannot delete financial transaction records that we are legally required to retain under AML regulations, even upon request. In such cases, sbg66 will explain the legal basis for declining the request and, where possible, restrict processing rather than delete the data.

The sbg66 Platform may reference or display content from third-party game providers such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi. While these providers supply games and content accessed through the Platform, they operate under their own privacy policies and data practices. sbg66 is not responsible for the privacy practices of third-party game providers or any external services. Players who interact directly with third-party provider interfaces (for example, via embedded game windows) should review those providers' privacy policies independently.

sbg66 is strictly an adults-only platform. Access to and use of the Platform is prohibited for any person under the age of 21. sbg66 does not knowingly collect personal data from individuals under the age of 21. If sbg66 discovers or is notified that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated account. Parents or guardians who believe that a person under 21 may have accessed or registered on sbg66 are encouraged to contact us immediately at [email protected].

sbg66 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made, we will update the effective date displayed at the top of this page and, where appropriate, notify registered players by email. We encourage you to review this Policy periodically to stay informed about how we protect your personal data.

Your continued use of the sbg66 Platform following publication of any updated Privacy Policy constitutes your acknowledgement of the changes and your acceptance of the revised Policy. If you do not agree to the revised Policy, you should discontinue use of the Platform and contact [email protected] to request account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way sbg66 handles your personal data, please contact our dedicated data support team. We are available 24 hours a day, 7 days a week to assist with all privacy-related enquiries.

Contact Email: [email protected] — Please include your registered username, the nature of your privacy request or query, and any relevant details. We aim to respond to all standard privacy requests within 5 business days and to all data subject access requests within 30 days in accordance with applicable requirements.