aa666 Privacy Policy
At aa666, we treat your personal data with the same level of care we apply to your gaming experience. This Privacy Policy explains exactly what information we collect from players across Bangladesh, why we collect it, how we use and store it, and what rights you hold over your own data at all times.
Our Core Data Commitments
These six cards highlight the key principles that govern how aa666 handles your personal information.
Data Minimisation
aa666 collects only the personal data that is strictly necessary for account management, payment processing, age verification, and responsible gaming obligations. We do not collect data for its own sake, and we never sell your personal information to unrelated third parties.
Secure Storage
All personal data held by aa666 is stored on encrypted servers protected by industry-standard SSL/TLS protocols. Access to personally identifiable information is restricted to authorised personnel on a strict need-to-know basis, and all access events are logged and audited.
Your Rights Are Respected
Registered aa666 members hold clear rights over their personal data, including the right to access, correct, port, and request deletion of their information. Requests can be submitted at any time via the account settings panel or by contacting our English-language support team.
Transparent Cookie Use
aa666 uses cookies and similar tracking technologies solely to improve platform performance, maintain session continuity, and serve relevant promotions. We provide clear disclosure of all cookie categories used and outline how you can manage your preferences from your browser settings.
Limited Third-Party Sharing
Personal data is shared only with carefully vetted third-party partners who are essential to platform operation — such as payment processors (bKash, Nagad, Rocket, Upay), game studios, and fraud-prevention services. All partners are contractually bound to handle your data with equivalent standards of care.
Defined Retention Periods
aa666 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Retention periods are defined per data category and are reviewed periodically to ensure compliance with evolving data protection standards.
Information We Collect
When you register on aa666, use our services, or interact with the platform in any capacity, we collect certain categories of personal information. The precise data collected depends on the nature of your interaction with aa666 and the features you choose to use.
Registration & Account Data
When you open an aa666 account, we collect the information you provide in the registration form, including: your full legal name, date of birth, residential address (including district, division, and postcode), email address, mobile phone number, and chosen account credentials. This information is required to create and manage your account and to verify that you meet the 18+ age requirement.
Identity Verification Data
As part of our Know Your Customer (KYC) process, aa666 may collect copies of government-issued identity documents, including your National Identity Card (NID), passport, or birth certificate. We may also collect a selfie photograph for biometric comparison purposes where required by our fraud-prevention systems. This data is collected and processed solely for the purposes of identity verification and anti-money laundering compliance.
Financial & Transaction Data
aa666 collects records of all financial transactions conducted through your account, including deposit amounts, withdrawal requests, payment method identifiers (such as your bKash or Nagad mobile number), and transaction timestamps. We do not store full bank account numbers or card numbers — payment method details are tokenised by our payment processing partners.
Gaming Activity Data
We maintain a complete record of your gaming activity on aa666, including game sessions, wagers placed, game outcomes, bet history, bonus usage, and account balance changes. This data is used for account management, responsible gaming monitoring, dispute resolution, and analytical purposes.
Technical & Device Data
When you access aa666, our systems automatically collect certain technical data about your device and connection, including: IP address, device type and operating system, browser type and version, screen resolution, referring URL, and session timestamps. This data is used for security monitoring, fraud detection, and platform optimisation.
Communications Data
If you contact aa666 support via email, live chat, or any other channel, we retain records of your communications, including the content of messages and any attachments submitted. This data is used to manage your support requests, improve service quality, and maintain a record of agreed actions.
How We Use Your Data
aa666 uses the personal data it collects for specific, clearly defined purposes. We do not use your data in ways that are incompatible with the purposes stated at the time of collection. The primary purposes for which we process personal data are as follows:
- Account creation and management: to register your account, authenticate your identity on login, maintain your account preferences, and process account closure or suspension requests.
- Age and identity verification: to confirm that you are aged 18 or above and to verify the accuracy of personal information provided during registration, as required by our responsible gaming obligations.
- Payment processing: to process deposits and withdrawal requests via bKash, Nagad, Rocket, Upay, and Bangladeshi banking partners, and to maintain accurate records of all financial transactions.
- Fraud prevention and security: to detect and investigate suspicious account activity, prevent multi-accounting, identify unauthorised access, and protect the integrity of the aa666 platform.
- Responsible gaming: to monitor gaming patterns for signs of problem gambling behaviour, enforce deposit limits and self-exclusion requests, and provide proactive outreach to players who may be at risk.
- Customer support: to respond to your queries, resolve complaints, process disputes, and improve the quality of our support services.
- Marketing communications: to send you promotional offers, bonus notifications, and news about aa666 products — but only where you have provided your consent to receive such communications. You may withdraw consent at any time via account settings.
- Platform improvement: to analyse aggregate usage patterns, identify technical issues, optimise page performance, and develop new features and products.
- Legal compliance: to comply with applicable laws, respond to lawful requests from regulatory or law enforcement authorities, and maintain records required under anti-money laundering regulations.
Legal Basis for Processing
aa666 processes your personal data only where a valid legal basis exists to do so. The following table sets out the main categories of processing activity and the corresponding legal basis applied in each case.
| Processing Activity | Legal Basis | Details |
|---|---|---|
| Account registration and management | Contractual necessity | Required to perform the contract between aa666 and the registered player. |
| Age and identity verification (KYC) | Legal obligation | Required under responsible gaming standards and anti-money laundering obligations. |
| Payment processing and transaction records | Contractual necessity | Necessary to process deposits, withdrawals, and maintain accurate financial records. |
| Fraud detection and platform security | Legitimate interests | aa666's legitimate interest in protecting the platform and its players from fraud and unauthorised access. |
| Responsible gaming monitoring | Legal obligation / Legitimate interests | Required to fulfil responsible gaming obligations and protect vulnerable players. |
| Marketing communications | Consent | Only where you have actively opted in to receive promotional messages. Consent may be withdrawn at any time. |
| Platform analytics and improvement | Legitimate interests | aa666's legitimate interest in improving the quality and reliability of its services using anonymised data. |
| Compliance with legal and regulatory requests | Legal obligation | Required where aa666 receives a lawful request from a competent authority or is subject to applicable legal requirements. |
Data Sharing & Third Parties
aa666 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share personal data only in the limited circumstances described below, and only to the extent necessary to fulfil the stated purpose.
Payment Service Providers
To process deposits and withdrawals, aa666 shares relevant transaction data — such as your registered mobile number or bank account identifier — with our payment processing partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank. These partners act as independent data controllers with respect to their own systems and are subject to their own privacy policies and applicable financial regulations.
Game Content Providers
aa666 integrates games from third-party software studios including Pragmatic Play, PG Soft, Evolution Gaming, Ezugi, NetEnt, Microgaming, Habanero, and Red Tiger. When you participate in games provided by these studios, certain technical data — such as your session token and device type — may be shared with the relevant provider's game server to enable gameplay. Game providers are contractually prohibited from using this data for purposes other than enabling and auditing game sessions.
Identity Verification Partners
aa666 may use third-party KYC and identity verification services to assist in validating the identity documents you submit. These partners process your identity data solely on our behalf and under our instruction, and are bound by strict data processing agreements that prohibit any secondary use of your personal information.
Fraud Prevention & Security Services
To protect the platform and its players, aa666 may share device fingerprint data, IP addresses, and risk scores with specialist fraud-prevention service providers. These services help identify patterns of suspicious behaviour, multi-account activity, and potential money laundering. Data shared for fraud prevention purposes is processed under aa666's legitimate interest in securing the platform.
Legal and Regulatory Disclosures
aa666 may disclose your personal data where required to do so by a court order, regulatory investigation, or other lawful authority. In such cases, aa666 will disclose only the minimum information required to comply with the legal obligation and will, where legally permitted, notify you of the disclosure request.
Business Transfers
In the event that aa666 undergoes a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified via your registered email address if such a transfer occurs, and the acquiring entity will be required to honour the commitments made in this Privacy Policy.
Cookies & Tracking Technologies
aa666 uses cookies and similar technologies — including local storage objects and pixel tags — to operate the platform, remember your preferences, maintain your session, and analyse how the platform is used. This section explains the categories of cookies we deploy and how you can manage them.
Strictly Necessary Cookies
These cookies are essential for the platform to function correctly. They enable core features such as secure login sessions, account authentication, shopping cart functionality within the cashier, and fraud detection mechanisms. Strictly necessary cookies cannot be disabled without preventing you from using the platform.
Performance & Analytics Cookies
aa666 uses analytics cookies to understand how players navigate the platform — which pages are visited most, where users encounter errors, and how quickly pages load. This data is collected in aggregate and anonymised form and is used solely to improve platform performance. aa666 may use a third-party analytics provider to process this data on our behalf.
Functional Cookies
Functional cookies allow aa666 to remember your preferences — such as your chosen game lobby view, preferred language setting (English), and any responsible gaming limits you have voluntarily applied. Disabling functional cookies may result in a reduced or less personalised experience.
Marketing & Targeting Cookies
With your consent, aa666 may deploy marketing cookies to serve you relevant promotional content, both on the aa666 platform and on third-party advertising networks. These cookies track whether you have previously visited aa666 and may be used to tailor promotional messages to your activity profile. Marketing cookies are only activated where you have provided explicit consent.
Managing Your Cookie Preferences
You can manage or disable non-essential cookies at any time through your browser settings. Most modern browsers allow you to block or delete cookies on a site-by-site basis. Please note that blocking strictly necessary cookies will prevent you from logging in to your aa666 account. For detailed guidance on managing cookies in your specific browser, please refer to your browser's help documentation.
- Strictly Necessary — Always active; required for login and security.
- Performance — Anonymised analytics to improve the platform.
- Functional — Remembers your preferences and settings.
- Marketing — Consent-based; for relevant promotions only.
Data Retention
aa666 retains personal data only for as long as is necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable law. The retention periods below apply to the main categories of personal data we hold.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | Anti-money laundering compliance and dispute resolution obligations. |
| Identity verification documents (KYC) | Duration of account + 5 years post-closure | Regulatory requirement to maintain KYC records for a minimum of five years. |
| Financial transaction records | 7 years from date of transaction | Financial record-keeping obligations and audit requirements. |
| Gaming activity records | Duration of account + 3 years post-closure | Responsible gaming monitoring, dispute resolution, and bonus integrity auditing. |
| Customer support communications | 3 years from date of last interaction | Quality assurance, complaint resolution, and evidence retention for disputes. |
| Marketing consent records | Until consent is withdrawn + 2 years | Evidence of consent for regulatory purposes; retention after withdrawal for audit trail. |
| Technical and device data (logs) | 12 months from collection | Security monitoring and fraud detection; logs are anonymised after 12 months. |
At the end of the applicable retention period, personal data is either securely deleted from aa666's systems or anonymised in such a way that it can no longer be linked to an individual player. Where anonymisation is technically not feasible within a particular dataset, the data will be deleted in full. Backups containing personal data are subject to the same retention schedules and are purged on a rolling basis consistent with the timelines above.
Your Data Rights
As a registered aa666 member, you hold the following rights with respect to your personal data. To exercise any of these rights, contact our support team at . We aim to respond to all data rights requests within 30 days of receipt.
-
Right of Access You may request a copy of all personal data aa666 holds about you, including account details, transaction history, and KYC records. We will provide this in a structured, readable format within 30 days.
-
Right to Rectification If you believe that any personal data aa666 holds about you is inaccurate or incomplete, you may request that it be corrected or updated. Some corrections may require supporting documentation.
-
Right to Erasure You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected. This right is subject to legal retention obligations — data we are required to hold by law cannot be deleted prior to the end of the applicable retention period.
-
Right to Restrict Processing You may request that aa666 restrict the processing of your personal data in certain circumstances — for example, while a correction request is being verified, or where you have objected to processing and we are assessing your objection.
-
Right to Data Portability Where processing is based on your consent or on contractual necessity, you may request that aa666 provide your personal data in a machine-readable format (such as CSV or JSON) so that you can transfer it to another service provider.
-
Right to Object You may object to processing that is based on aa666's legitimate interests — including direct marketing, profiling for personalisation, and certain analytical activities. Where you object to marketing, we will cease that processing immediately.
-
Right to Withdraw Consent Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to the withdrawal.
-
Right to Lodge a Complaint If you believe aa666 has not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction. aa666 encourages you to contact us first so that we can attempt to resolve your concern directly.
Data Security Measures
aa666 maintains a comprehensive information security programme designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. The following measures form the core of our security infrastructure:
- SSL/TLS encryption: All data transmitted between your device and aa666's servers is encrypted using TLS 1.2 or higher. The aa666.im domain is secured with an extended validation SSL certificate, which you can verify via the padlock icon in your browser's address bar.
- At-rest encryption: Sensitive personal data — including KYC documents, payment credentials, and account credentials — is encrypted at rest using AES-256 encryption. Encryption keys are managed via a dedicated key management service with strict access controls.
- Access control: Access to personal data held in aa666's systems is restricted on a role-based, need-to-know basis. All internal access events are logged, and access privileges are reviewed on a quarterly basis. Multi-factor authentication is required for all administrative access.
- Penetration testing: aa666 conducts regular penetration testing and vulnerability assessments on its platform infrastructure, carried out by independent security specialists. Identified vulnerabilities are remediated in accordance with a risk-prioritised patching schedule.
- Incident response: aa666 maintains a formal data breach incident response plan. In the event of a confirmed data breach that poses a risk to player privacy, affected members will be notified without undue delay and relevant authorities will be informed as required by applicable law.
- Two-factor authentication (2FA): All registered aa666 members are strongly encouraged to enable two-factor authentication via SMS OTP from within account settings. 2FA provides an additional layer of account security beyond the standard username and password combination.
While aa666 implements robust technical and organisational security measures, no online platform can guarantee absolute security. Players are reminded that they share responsibility for the security of their account by safeguarding their login credentials and reporting any suspected unauthorised access promptly to .
Updates to This Policy
aa666 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. When material changes are made — such as changes that affect how we use your personal data or the rights available to you — we will notify registered members via email to the address on file, with at least seven calendar days' advance notice before the changes take effect.
Minor clarifications, corrections to typographical errors, or non-material adjustments may be made without advance notice. In all cases, the effective date of the current version of this Privacy Policy is displayed at the top of this page and in the "Last updated" indicator below the hero section.
We encourage all aa666 members to review this Privacy Policy periodically to stay informed about how their data is protected. Your continued use of the aa666 platform following the effective date of any update constitutes your acceptance of the revised Privacy Policy. If you disagree with any change, you have the right to close your account by contacting support before the change takes effect.
For any questions, concerns, or data rights requests related to this Privacy Policy, please contact the aa666 data support team at . Our team operates in English, 24 hours a day, 7 days a week, and will acknowledge your request within 24 hours (Bangladesh Standard Time, UTC+6).
Ready to Explore aa666?
Now that you understand how aa666 protects your personal data, dive into Bangladesh's most trusted online gaming platform — cricket betting, live casino, slots, and more await you.