sl666 Privacy Policy — How We Handle Your Data

Registration and Identity Data

When you create an account with sl666, we collect the following information to verify your identity, comply with our age verification obligations, and operate your account:

• Full legal name, date of birth, and gender.
• Email address and mobile phone number used for account access and communications.
• Residential address, including city and division within Bangladesh.
• Identity verification documents where required (e.g. national ID, passport, or driver's licence) to comply with KYC obligations.

Transaction and Payment Data

To process deposits and withdrawals via bKash, Nagad, Rocket, and other supported payment methods, sl666 collects and processes the following transaction-related data:

• Payment method details (mobile wallet number or bank account reference) registered to your sl666 account.
• Deposit and withdrawal amounts, dates, and transaction reference numbers.
• Account balance history and betting activity records, retained for regulatory compliance and dispute resolution purposes.

Technical and Usage Data

When you access sl666, our servers and analytics systems automatically collect certain technical data about your session. This data does not on its own identify you personally but is used to maintain platform security and improve the user experience:

• IP address, device type, operating system, and browser or app version used to access sl666.
• Pages visited, session duration, click patterns, and game or betting market interactions.
• Cookies and similar tracking technologies — see Section 4 of this Policy for full details on cookie use.

Purposes of Processing

sl666 processes personal data for the following specific and legitimate purposes. We do not process your data for any purpose incompatible with those listed below:

• Account creation, maintenance, and management — including password resets, account verification, and support communications.
• Processing deposits and withdrawals via bKash, Nagad, Rocket, and other integrated payment methods.
• Fraud prevention, anti-money-laundering (AML) compliance, and KYC verification as required under applicable laws.
• Responsible gaming monitoring — including detecting patterns of play that may indicate problem gambling and applying account-level restrictions where appropriate.
• Personalisation of your experience on sl666 — such as surfacing relevant promotions (e.g. BPL cricket offers during cricket season) and recommending games based on your activity.

Legal Basis for Processing

sl666 processes your personal data on the basis of: (a) contractual necessity — processing required to provide the services you have signed up for; (b) legitimate interests — fraud prevention, platform security, and responsible gaming obligations; and (c) consent — where you have given specific consent to a particular processing activity, such as receiving promotional communications. You may withdraw consent at any time by contacting [email protected].

When We Share Your Data

sl666 does not sell your personal data. We share personal data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose:

• Payment processors and mobile financial service providers (bKash, Nagad, Rocket) — solely to process your transactions. These providers are bound by their own data protection obligations.
• Identity verification and KYC service providers — to comply with age verification and anti-money-laundering requirements. These providers process your data only under our instruction and are contractually bound to protect it.
• Game technology providers (e.g. Evolution Gaming, Pragmatic Play, Spribe) — limited session and account data may be shared to authenticate your game sessions. No payment or identity data is shared with game providers.
• Law enforcement or regulatory bodies — where we are required to disclose data by applicable law, court order, or lawful regulatory request. We will notify you of any such disclosure to the extent permitted by law.

International Transfers

Some of the third-party service providers used by sl666 may be based outside Bangladesh. Where personal data is transferred internationally, sl666 takes appropriate contractual and technical measures to ensure that your data receives an equivalent level of protection to that which it would receive within Bangladesh, consistent with applicable data protection standards.

How sl666 Uses Cookies

sl666 uses cookies and similar technologies (such as local storage and session tokens) to operate the platform, maintain your logged-in session, and analyse usage patterns. We use the following categories of cookies:

• Strictly necessary cookies — required for the platform to function. These include session authentication tokens and security cookies. They cannot be disabled without breaking core platform functionality.
• Performance and analytics cookies — used to understand how players navigate sl666, which pages are visited most frequently, and where technical errors occur. This data is aggregated and does not identify individual users.
• Functional cookies — used to remember your preferences (such as language selection and display settings) so you do not need to reconfigure them on each visit.

How Long We Keep Your Data

sl666 retains personal data only for as long as it is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Account data is retained for the duration of your active account and for a minimum period of five years following account closure, consistent with anti-money-laundering record-keeping obligations applicable in Bangladesh. Transaction records are retained for a minimum of five years. Where you exercise your right to erasure, we will delete your personal data within a reasonable timeframe subject to any overriding legal retention obligations — for example, we may be required to retain certain financial records for regulatory purposes even after account closure.

Data Subject Rights

You have the following rights in relation to your personal data held by sl666. To exercise any of these rights, contact [email protected] and we will respond within a reasonable timeframe:

• Right of access — you may request a copy of the personal data sl666 holds about you.
• Right to rectification — you may request correction of any inaccurate or incomplete personal data we hold about you.
• Right to erasure — you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations.
• Right to restriction — you may request that we restrict processing of your personal data in certain circumstances, for example while a rectification request is being assessed.
• Right to object — you may object to processing of your data for direct marketing purposes at any time. We will cease that processing immediately upon receipt of a valid objection.

How to Exercise Your Rights

To submit any data rights request, email [email protected] with the subject line "Data Rights Request" and include your registered username and a clear description of the right you wish to exercise. We may need to verify your identity before processing the request. We aim to respond to all data rights requests within 30 days.

Technical and Organisational Security Measures

sl666 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include SSL/TLS encryption for all data in transit, access controls limiting data access to authorised personnel only, and regular security reviews of our platform infrastructure.

Your Role in Keeping Your Account Secure

While sl666 takes all reasonable steps to protect your data on our side, you also play an important role in keeping your account secure. You are responsible for keeping your login credentials confidential, not sharing your password with any third party, and logging out of your account when using shared or public devices. If you suspect that your account has been accessed without your authorisation, contact [email protected] immediately.

How We Handle Payment Information

sl666 processes payment transactions via trusted third-party payment processors including bKash, Nagad, and Rocket. Full payment credentials (such as mobile wallet PINs or bank account passwords) are never transmitted to or stored by sl666 — they are entered directly into the secure interfaces of the respective payment provider. sl666 retains only the transaction reference data and payment method identifiers (such as a partially masked mobile number) necessary for account management, dispute resolution, and AML compliance.

21+ Only Policy

sl666 does not knowingly collect personal data from individuals under the age of 21. Our services are strictly intended for adults aged 21 and above. As part of our registration process, sl666 conducts age verification checks on all new accounts. If we discover or have reasonable grounds to believe that a user is under 21, we will immediately suspend the account, void any associated transactions, and delete the personal data collected. If you are a parent or guardian and believe a minor has registered an account with sl666, please contact us immediately at [email protected].

How We Notify You of Changes

sl666 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, where we introduce a new category of data processing or a new category of data recipient — we will notify registered players via the email address on their account or via a prominent notice on the platform before the change takes effect. Your continued use of sl666 following any update to this Policy constitutes your acceptance of the revised terms. We recommend checking this page periodically. The effective date at the top of this Policy will always reflect the date of the most recent revision.