Privacy Policy — ov66 Casino

When you register an account, interact with the ov66 platform, or contact our support team, we collect personal information that falls into the following categories. The legal basis for collecting each category is noted alongside it.

1.1 Account Registration Data

When you create your ov66 account, we collect the following information which is required to establish your identity and enable core platform functionality:

• Full legal name as it appears on your government-issued identification document.
• Date of birth (to verify you meet the 18+ age requirement).
• Mobile phone number registered in Bangladesh.
• Email address (where provided for account recovery purposes).
• Username and encrypted password hash.
• Residential address in Bangladesh (required for full KYC verification prior to withdrawal).

1.2 Identity Verification (KYC) Documents

To comply with our anti-money-laundering obligations and to verify player age, we request the following documents prior to processing your first withdrawal or upon request at any time:

• A copy of a valid government-issued photo ID: National ID Card (NID), passport, or driving licence.
• Proof of ownership of the payment method used for deposits (e.g., a screenshot of your bKash or Nagad account showing your registered mobile number).
• Proof of address (utility bill, bank statement, or government correspondence dated within 90 days) where enhanced due diligence is required.

1.3 Financial Transaction Data

All deposit and withdrawal activity on ov66 generates transactional records. We retain:

• Transaction amounts, dates, times, and reference numbers.
• The payment method used (bKash, Nagad, Rocket, Upay, bank transfer, or card).
• The mobile number or account identifier associated with each payment method.
• Transaction status logs (pending, completed, reversed, flagged).

We do not store full card numbers. Card payments are processed via PCI-DSS-compliant payment gateways; ov66 receives only a tokenized reference for record-keeping purposes.

1.4 Platform Usage Data

To maintain security, prevent fraud, and improve the platform experience, we automatically collect the following technical data when you use ov66.app:

• IP address and approximate geographic location (city/region level).
• Device type, operating system, and browser version.
• Session timestamps, login and logout times.
• Pages visited, games launched, and betting history.
• Referral source (how you arrived at ov66.app, if trackable).

1.5 Support Communications

When you contact our support team via live chat or email, we retain a record of the conversation including the content of your messages, the agent who handled your query, timestamps, and any resolution notes. These records are used to resolve disputes, improve service quality, and maintain an audit trail of account-level decisions.

ov66 uses the personal data we collect for clearly defined and legitimate purposes. The table below summarizes how each data category is used and the legal basis that justifies each processing activity.

ov66 does not sell, rent, or trade your personal data. We share information with third parties only in the following strictly defined circumstances, and only to the minimum extent necessary for the stated purpose.

3.1 Service Providers

We engage third-party service providers to assist in operating the ov66 platform. These providers act as data processors on our behalf and are contractually prohibited from using your data for any purpose beyond the specific service they provide to ov66. Current categories of service provider include:

• Payment processors: bKash, Nagad, Rocket, Upay, and banking partners process financial transactions. They receive only the data required to complete each transaction.
• Identity verification providers: Third-party KYC platforms that assist in verifying player identity and age. All KYC partners operate under strict data confidentiality agreements.
• Game software providers: Studios such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming provide game engines hosted within the ov66 lobby. These providers receive anonymized session tokens for game integrity purposes but do not receive your full personal profile.
• Analytics providers: Aggregated, anonymized data may be shared with analytics tools to help us understand platform performance and improve the user experience.
• Hosting and infrastructure providers: Cloud infrastructure partners that host ov66 servers and databases. These providers are bound by data processing agreements that require them to maintain security standards consistent with this Policy.

3.2 Legal and Regulatory Disclosure

ov66 may be required by law, court order, or regulatory authority to disclose personal data relating to specific players or transactions. In such cases, we will comply with valid legal demands and will notify affected players of such disclosure to the extent permitted by applicable law.

3.3 Business Transfers

In the event that ov66 undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the successor entity. In such circumstances, ov66 will notify registered players at least 30 days before their data is transferred, and the successor entity will be required to honor the commitments made in this Privacy Policy.

ov66 uses cookies and similar tracking technologies to provide core platform functionality, maintain the security of active sessions, and analyze how the platform is used in aggregate. The following table describes the categories of cookies we deploy and their specific purposes.

ov66 does not use advertising cookies, retargeting pixels, or cross-site tracking technologies. You can manage cookie preferences through your browser settings. Please note that disabling essential or security cookies will prevent you from logging in to your ov66 account.

ov66 retains personal data for as long as is necessary to fulfill the purposes for which it was collected, to comply with our legal obligations, and to resolve any outstanding disputes or enforce our agreements. The following retention periods apply:

• Account registration data: Retained for the duration of the account plus a minimum of 5 years following account closure, in compliance with anti-money-laundering record-keeping requirements.
• KYC verification documents: Retained for a minimum of 5 years from the date of submission, consistent with financial regulatory requirements applicable to gaming operators.
• Financial transaction records: Retained for a minimum of 7 years following each transaction, in line with standard accounting and AML obligations.
• Betting and gaming history: Retained for 5 years from the date of each wager for dispute resolution and responsible gaming monitoring purposes.
• Support communications: Retained for 3 years from the date of the final communication in each support thread.
• Platform usage and analytics data: Retained in aggregated, anonymized form for up to 24 months. Raw session logs are purged after 90 days.
• Marketing preferences and consent records: Retained for the duration of the account plus 2 years after account closure to evidence compliance with consent requirements.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized so that it can no longer be attributed to any individual. Where deletion is not technically feasible within a specific system (for example, backup archives), the data is isolated from active processing and deleted at the next scheduled backup cycle.

ov66 servers and primary data storage infrastructure are located in jurisdictions that maintain data protection standards consistent with international best practices. Where data is processed by third-party service providers located in other countries, we ensure appropriate safeguards are in place through contractual data processing agreements.

As a registered player on ov66, you hold the following rights in respect of your personal data. To exercise any of these rights, contact our support team via live chat or at support at ov66.app. We will respond to all valid requests within 30 days of receipt.

ov66 will not charge a fee for exercising any of the above rights in the normal course. However, where requests are manifestly unfounded, repetitive, or excessive, we reserve the right to charge a reasonable administrative fee or to decline the request, with written explanation provided within 30 days.

ov66 implements a layered security architecture to protect player data against unauthorized access, accidental loss, disclosure, or destruction. Our security program encompasses the following controls:

• Transport security: All data in transit between your device and ov66 servers is encrypted using TLS 1.3. Connections using deprecated protocols (TLS 1.0, TLS 1.1, SSL) are rejected.
• Data-at-rest encryption: Sensitive personal data including identity documents, payment tokens, and account credentials are encrypted at rest using AES-256. Database access is restricted to authenticated application processes only.
• Access controls: Employee access to player data follows the principle of least privilege — staff members can only access the data categories required to perform their specific role. All internal access is logged and periodically audited.
• Password handling: Player passwords are never stored in plain text. We use industry-standard one-way hashing algorithms with salting. ov66 staff cannot read your password and will never ask you to share it.
• Fraud and intrusion monitoring: Automated systems monitor for unusual login patterns, impossible travel scenarios, mass data access attempts, and other indicators of compromise. Suspicious activity triggers account security holds pending investigation.
• Penetration testing: ov66 conducts periodic security assessments including penetration tests of the web application layer, API endpoints, and infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Incident response: In the event of a data breach that is likely to result in risk to affected players, ov66 will notify impacted players within 72 hours of becoming aware of the breach, describing the nature of the incident, the categories of data affected, and the steps being taken to mitigate harm.

ov66 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable legal requirements, or the services we offer. When material changes are made, we will:

• Update the "Last Updated" date at the top of this page.
• Notify registered players via in-platform notification or email (where provided) at least 7 days before the updated Policy takes effect.
• Where required by applicable law, obtain fresh consent from players before processing their data under the new terms.

Your continued use of ov66.app after the stated effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not accept any update to this Policy, you may close your account by contacting our support team and requesting account closure in accordance with the voluntary closure process described in our Terms and Conditions.

If you have any questions about this Privacy Policy, how your data is handled, or wish to exercise any of your data rights, please contact us via live chat on ov66.app or write to us at: support at ov66.app. Support is available 24 hours a day, 7 days a week, in both English and Bengali. We aim to acknowledge all privacy-related inquiries within 2 business days and to resolve them fully within 30 days.

This Privacy Policy was last reviewed and approved on 1 January 2026 and supersedes all prior versions. The authoritative version of this Policy is the English-language version published at ov66.app/privacy-policy.