ov66 Privacy Policy

1. Introduction

ov66 ("the Company", "we", "us", "our") is committed to protecting the privacy and security of all personal data collected from individuals ("you", "your", "the Player") who access or use the ov66 online betting and casino platform at ov66.io and any associated sub-domains or mobile applications (collectively, "the Platform").

This Privacy Policy describes in detail the types of personal information we collect, the purposes for which we process that information, the parties with whom we may share it, the measures we take to protect it, and the rights available to you in connection with your personal data. This Policy should be read together with our Terms & Conditions, which govern your overall use of the Platform.

By registering an account, making a deposit, placing a bet, or otherwise using any feature of the Platform, you confirm that you have read and understood this Privacy Policy and that you consent to the processing of your personal data as described herein. If you do not agree to this Policy, you must not use the Platform.

2. Data Controller

For the purposes of applicable data protection law, ov66 acts as the data controller in respect of the personal data collected through the Platform. As data controller, ov66 determines the purposes and means by which your personal data is processed.

All queries, requests, and complaints relating to the processing of your personal data should be directed to our Data Protection team using the contact details set out in Section 15 of this Policy. We aim to acknowledge all data-related enquiries within 5 business days and to resolve them within 30 days of receipt.

3. Data We Collect

3.1 Information You Provide Directly

When you register an account with ov66 or interact with the Platform, you may provide us with the following categories of personal data:

• Identity Data: Full legal name, date of birth, gender, nationality, and a copy of your government-issued photo identification document (National Identity Card, passport, or driving licence).
• Contact Data: Residential address (including city, division, and postcode within Bangladesh), email address, and mobile phone number.
• Financial Data: Mobile wallet numbers (bKash, Nagad, Rocket, Upay), bank account details, and transaction history associated with deposits and withdrawals made through the Platform.
• Verification Data: Documents submitted as part of our Know Your Customer (KYC) and age verification process, including utility bills, bank statements, and proof of payment method ownership.
• Communications Data: Records of any correspondence you send to ov66, including support tickets, live chat transcripts, and email exchanges.
• Preference Data: Your marketing communication preferences, responsible gaming settings, and account configuration choices.

3.2 Information Collected Automatically

When you access and use the Platform, certain technical data is collected automatically by our systems, including:

• Device & Technical Data: IP address, device type and model, operating system and version, browser type and version, screen resolution, and unique device identifiers.
• Usage Data: Pages visited, features accessed, games played, bets placed, session duration, clickstream data, search queries made within the Platform, and error logs.
• Location Data: Approximate geographic location derived from your IP address, used to detect access from restricted jurisdictions and to comply with our responsible gaming obligations.
• Cookie Data: Information collected via cookies and similar tracking technologies as described in Section 7 of this Policy.

3.3 Information from Third Parties

We may receive personal data about you from third-party sources in certain circumstances, including from identity verification service providers (for KYC purposes), payment processors (to confirm transaction status), fraud detection agencies, and publicly available sources such as sanctions screening databases.

4. Legal Basis for Processing

ov66 processes your personal data on the following legal bases:

Processing Purpose	Legal Basis
Account registration and management	Performance of a contract
Processing deposits and withdrawals	Performance of a contract
KYC / age verification	Legal obligation
Anti-money laundering compliance	Legal obligation
Fraud detection and prevention	Legitimate interests
Responsible gaming monitoring	Legal obligation / Legitimate interests
Platform improvement and analytics	Legitimate interests
Marketing communications	Consent (withdrawable at any time)
Customer support	Performance of a contract

5. How We Use Your Data

ov66 uses the personal data we collect for the following purposes:

• To create, verify, manage, and administer your ov66 account.
• To process and settle your deposits, withdrawals, and winnings in Bangladeshi Taka (৳) via your chosen payment method.
• To verify your identity and age in compliance with our KYC obligations, ensuring all players are aged 21 or over.
• To detect, investigate, and prevent fraudulent transactions, bonus abuse, money laundering, and other prohibited activities.
• To monitor your betting and gaming activity for signs of problem gambling and to apply responsible gaming tools where appropriate.
• To communicate with you about your account, including transaction confirmations, security alerts, and service updates.
• To send you marketing communications about ov66 promotions, bonuses, and new features — but only where you have given explicit consent.
• To personalise your experience on the Platform based on your preferences, betting history, and gameplay patterns.
• To analyse usage trends and Platform performance in order to improve our services, fix technical issues, and develop new features.
• To comply with applicable legal obligations, including responding to lawful requests from regulatory or law enforcement authorities.

6. Sharing Your Data

ov66 does not sell, rent, or trade your personal data to third parties for their own commercial marketing purposes. We share your personal data only in the following limited circumstances:

6.1 Service Providers

We engage trusted third-party service providers who process personal data on our behalf and strictly under our instructions. These include payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard), cloud hosting and infrastructure providers, game software suppliers (Evolution Gaming, Ezugi, Pragmatic Play, Microgaming, NetEnt, Spribe), identity verification and KYC providers, customer support platform vendors, and fraud detection and analytics partners. All such providers are bound by contractual data processing agreements that restrict their use of your data to the purposes for which it was shared.

6.2 Legal and Regulatory Disclosure

We may disclose your personal data to regulatory authorities, law enforcement agencies, courts, or other government bodies where we are required to do so by law, or where we believe such disclosure is necessary to protect the rights, property, or safety of ov66, its players, or the public.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of ov66's business, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify you via the email address associated with your account before your data is transferred and becomes subject to a different privacy policy.

7. Cookies & Tracking Technologies

ov66 uses cookies and similar technologies (such as web beacons, pixel tags, and local storage) to operate and improve the Platform. Cookies are small text files placed on your device when you visit the Platform. The types of cookies we use are as follows:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session management cookies that keep you logged in and security cookies that prevent cross-site request forgery. These cannot be disabled.
• Performance & Analytics Cookies: Used to collect anonymised information about how visitors use the Platform, such as which pages are visited most frequently and where errors occur. This helps us improve the overall user experience.
• Functionality Cookies: Allow the Platform to remember your preferences, such as your language settings, preferred payment method, and responsible gaming limits.
• Targeting Cookies: Used to deliver relevant promotional content based on your browsing activity on the Platform. These are only set with your consent and can be disabled at any time via your browser settings.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. For detailed guidance on managing cookies in your specific browser, refer to your browser's help documentation.

8. Data Security

ov66 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Our security infrastructure includes:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• AES-256 encryption for sensitive data stored at rest in our databases.
• Password hashing using industry-standard bcrypt algorithms — your password is never stored in plain text.
• SMS-based one-time password (OTP) as an additional layer of authentication for account logins and withdrawal requests.
• Role-based access controls ensuring that ov66 staff can access personal data only to the extent necessary to perform their job functions.
• 24/7 automated monitoring of our infrastructure for unusual access patterns, intrusion attempts, and anomalous transaction activity.
• Regular third-party penetration testing and security audits of our Platform and internal systems.

While we take every reasonable precaution to protect your data, no method of electronic transmission or storage is completely immune to security risks. In the event of a data breach that is likely to result in a risk to your rights and freedoms, ov66 will notify affected players as required by applicable law.

9. Data Retention

ov66 retains your personal data for the periods described in the table below. Retention periods are determined by the nature of the data and the legal obligations applicable to each category.

Data Category	Retention Period	Basis
Account & identity data	Duration of account + 5 years post-closure	AML / legal obligation
Transaction & financial records	7 years from transaction date	AML / financial record-keeping
KYC verification documents	5 years post account closure	Legal obligation
Support & communications records	3 years from last interaction	Legitimate interests
Technical & log data	12 months	Security / fraud detection
Marketing consent records	Until consent is withdrawn + 1 year	Legal obligation (consent record)

Upon expiry of the applicable retention period, personal data is securely deleted from our active systems or, where deletion is not technically feasible, permanently anonymised so that it can no longer be linked to an individual.

10. Your Rights

Subject to applicable law, you have the following rights in relation to your personal data held by ov66:

• Right of Access: You may request a copy of the personal data we hold about you. We will provide this in a structured, commonly used, and machine-readable format where technically feasible.
• Right to Rectification: You may request that we correct any inaccurate or incomplete personal data we hold about you. For basic account details (name, address, mobile number), you may update these directly in your account settings.
• Right to Erasure: You may request the deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis for processing applies. Note that we may be required to retain certain data for legal and regulatory compliance purposes even following an erasure request.
• Right to Restrict Processing: You may request that we temporarily restrict the processing of your personal data in certain circumstances, for example while a rectification request is being resolved.
• Right to Data Portability: Where processing is based on consent or the performance of a contract, and is carried out by automated means, you may request that we transfer your personal data to another service provider in a structured electronic format.
• Right to Object: You may object to the processing of your personal data where that processing is based on our legitimate interests. You also have an unconditional right to object to processing for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact our Data Protection team at [email protected] with the subject line "Data Rights Request". We will respond within 30 days of receiving your request. We may need to verify your identity before processing your request to prevent unauthorised access to your data.

11. International Data Transfers

ov66 operates as an internationally licensed platform and may transfer your personal data to countries outside Bangladesh in order to provide the Platform's services. Such transfers may be made to our cloud infrastructure providers, game software suppliers, and identity verification partners located in other jurisdictions.

Where personal data is transferred internationally, ov66 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that provided under this Privacy Policy. Safeguards may include standard contractual clauses approved by relevant data protection authorities, binding corporate rules, or transfers to jurisdictions that provide an adequate level of data protection as determined by applicable international standards.

12. Children's Privacy

The ov66 Platform is strictly intended for adults aged 21 years and over. We do not knowingly collect, use, or retain personal data from individuals under the age of 21. If we become aware that an account has been created by or on behalf of a person under 21, we will immediately suspend that account, void any associated transactions, and delete the personal data associated with the account from our systems.

If you believe that a person under the age of 21 has accessed the ov66 Platform or provided us with personal data, please contact us immediately at [email protected] so that we can take appropriate action without delay.

13. Third-Party Links

The ov66 Platform may contain references to third-party game providers and payment services that operate under their own independent privacy policies. ov66 is not responsible for the privacy practices of third parties and encourages you to review the privacy policies of any third-party services you interact with in connection with your use of ov66. This Privacy Policy applies solely to personal data collected and processed by ov66 through the ov66.io Platform.

14. Updates to This Privacy Policy

ov66 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will notify registered players by sending a notification to the email address associated with their account and by displaying a prominent notice on the Platform for a period of at least 30 days following the update. The revised Policy will display the updated effective date at the top of this page.

We encourage you to review this Privacy Policy periodically to stay informed about how ov66 protects your personal data. Your continued use of the Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms.

15. Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or the way in which ov66 handles your personal data, please contact our Data Protection team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: Please include "Privacy Policy Enquiry" or "Data Rights Request" as appropriate
• Response Time: We aim to acknowledge all privacy-related queries within 5 business days
• Support Hours: 24 hours a day, 7 days a week, including Bangladesh public holidays

All privacy-related correspondence is handled with strict confidentiality. We may ask you to verify your identity before we are able to process certain types of requests, to ensure that personal data is only disclosed to the individual to whom it belongs.