266zz Privacy Policy

Your privacy matters to us. This Privacy Policy explains what personal information 266zz collects, how it is used, and how we protect it. Please read it carefully before using the platform.

Last updated: 1 January 2026

Our Commitment to Your Privacy

266zz ("we", "us", "our", "the Platform") is committed to protecting the personal information of all players and visitors who use the 266zz website and mobile web application ("the Platform"). This Privacy Policy describes our practices regarding the collection, storage, use, disclosure, and protection of your personal data when you access or use the Platform.

By registering an account, making a deposit, or otherwise using the Platform, you acknowledge that you have read this Privacy Policy and consent to our collection and use of your personal data as described herein. If you do not agree with the practices described in this Policy, please do not use the Platform.

This Policy applies to all users of the Platform, including registered players, visitors who browse without an account, and any person who contacts 266zz support. It covers personal data collected through the website, mobile web browser, and any communications between you and 266zz including email correspondence directed to [email protected].

🔒 SSL Encryption All data transmitted to and from 266zz is protected by industry-standard SSL encryption.
🛡️ No Third-Party Sales We never sell, rent, or trade your personal data to third parties for their own marketing purposes.
👤 Your Data Rights You have the right to access, correct, and request deletion of the personal data we hold about you.
🚫 No Spam Marketing Marketing communications are only sent to players who have opted in. Opt-out is available at any time.
📲 Local Payments Protected Payment data for bKash, Nagad, and Rocket transactions is handled under strict security protocols and never stored in plain text.
✉️ Contact Us Anytime Privacy questions or data requests can be directed to our support team at [email protected].

Information We Collect

266zz collects personal information that is necessary to provide the Platform's services, comply with legal obligations, and maintain a safe and fair gaming environment. We collect information in three main ways: directly from you, automatically through your use of the Platform, and from third-party partners where applicable.

Information You Provide Directly

  • Full name, date of birth, and gender (collected at registration and required for age verification and KYC compliance).
  • Email address and phone number (used for account authentication, transaction notifications, and support communications).
  • City or district of residence within Bangladesh (e.g. Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur) — collected voluntarily to improve regional service delivery.
  • Government-issued identification documents (NID, passport, or driving licence) submitted as part of the KYC verification process before your first withdrawal.
  • Any information you voluntarily provide when contacting 266zz support, submitting a complaint, or participating in a survey or promotion.

Information Collected Automatically

  • Device information including device type, operating system version, browser type and version, screen resolution, and unique device identifiers.
  • IP address and approximate geolocation data (city and country level) derived from your IP address at the time of login and transaction.
  • Session and usage data including pages visited, features used, time spent on each section, game sessions played, bet amounts, and navigation paths through the Platform.
  • Cookie data and similar tracking technologies as described in Section 6 of this Policy.

Information from Third-Party Partners

  • Transaction confirmation data received from payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard) to verify deposits and withdrawals. We do not receive or store your full payment credentials from these providers.
  • Identity verification results from KYC service providers (document validity status and match result — we do not receive raw biometric data unless directly submitted by you).
  • Fraud detection signals from anti-fraud and responsible gaming service providers, used to protect the Platform and its players from financial crime and problem gambling risks.

How We Use Your Information

266zz uses the personal information we collect solely for lawful purposes directly connected to operating the Platform and delivering our services to you. We do not use your data for purposes that are incompatible with those stated below.

  1. Account creation and management: to register your account, verify your identity, maintain your player profile, and enable login and session management securely.
  2. Payment processing: to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, to reconcile transactions, and to maintain financial records as required by applicable law.
  3. Legal compliance: to comply with anti-money laundering (AML) obligations, KYC requirements, age verification duties, and any other applicable legal or regulatory obligations. This includes sharing data with competent authorities where legally required.
  4. Responsible gaming: to monitor account activity for signs of problem gambling, to enforce deposit limits and self-exclusion requests, and to contact players who may be at risk in accordance with our responsible gaming obligations.
  5. Customer support: to respond to support enquiries, complaints, account queries, and technical issues submitted via email to [email protected] or through any other support channel we operate.
  6. Platform improvement and analytics: to analyse aggregated, anonymised usage data for the purpose of improving the Platform's features, performance, game selection, and overall user experience. Individual player data is not sold to data analytics companies.
  7. Marketing communications: to send you promotional offers, bonus announcements, and platform news by email or SMS, but only where you have given explicit consent to receive such communications. You may withdraw consent and opt out at any time by contacting [email protected].

266zz processes your personal data on one or more of the following legal bases, depending on the nature of the processing activity.

Contractual Necessity
Processing your account registration data, payment details, and identity verification information is necessary to perform our contract with you — without this data we cannot provide the Platform's services.
Legal Obligation
We are required by applicable law to process certain data for KYC, AML, age verification, and financial reporting purposes. This processing is mandatory and cannot be opted out of while you hold an active account.
Legitimate Interests
We process usage data, session logs, and fraud detection signals on the basis of our legitimate interests in maintaining a safe, fair, and well-functioning platform. We always balance these interests against your right to privacy before processing.
Consent
Where we process your data for marketing communications, we do so solely on the basis of your explicit opt-in consent. You may withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

Sharing Your Information

266zz does not sell, rent, or trade your personal data. We share your data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

Service Providers

We share data with carefully selected third-party service providers who assist us in operating the Platform. These include payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard), identity verification and KYC providers, game technology suppliers, cloud hosting and data storage providers, and customer support software providers. All service providers are contractually required to process your data only on our documented instructions, to maintain appropriate security measures, and not to use your data for their own independent purposes.

Legal and Regulatory Authorities

We may disclose your personal data to law enforcement agencies, financial intelligence units, courts, or other competent regulatory authorities where we are legally required to do so, or where we believe in good faith that disclosure is necessary to prevent financial crime, protect the safety of any person, or enforce our Terms and Conditions.

Business Transfers

In the event of a merger, acquisition, sale of assets, or other business reorganisation involving 266zz, your personal data may be transferred to the successor entity as part of that transaction. We will notify registered players via email to their registered address if such a transfer materially affects how their data is processed, and will ensure that the receiving entity is bound by data protection obligations no less protective than this Policy.

We Never Sell Your Data: 266zz does not and will never sell, license, or rent your personal information to data brokers, advertisers, or any other third party for commercial gain. Your data is used exclusively to provide and improve our services to you.

Payment Data and Financial Information

266zz takes the security of financial data with particular seriousness given that our platform serves players who deposit and withdraw funds in Bangladeshi Taka (BDT) via local mobile financial services. The following specific protections apply to payment-related data.

266zz does not store full bKash or Nagad account PINs, Visa or Mastercard card numbers, CVV codes, or online banking passwords. When you initiate a payment, you are interacting directly with the payment provider's secure interface. 266zz receives only a transaction reference, amount, status, and the last four digits of the relevant account or card number where applicable.

  • All payment transaction records are retained for a minimum of 5 years from the date of the transaction in accordance with financial record-keeping obligations.
  • Withdrawal requests are matched against the registered phone number or account used for deposit to prevent third-party access to player funds.
  • Any unusual or high-value transaction may trigger an enhanced due diligence review. During such a review, 266zz may request additional documentation from the account holder to confirm the source of funds.
  • Where a transaction is flagged as suspicious or potentially fraudulent, 266zz may freeze the relevant account and report the transaction to relevant authorities without prior notice to the account holder, as required by applicable law.

266zz uses cookies and similar tracking technologies (local storage, session storage, pixel tags) to ensure the Platform functions correctly, to remember your session and preferences, and to collect analytics data that helps us improve the user experience. No advertising network cookies or cross-site tracking pixels are placed by 266zz.

Types of Cookies We Use

  • Essential cookies: strictly necessary for the Platform to function. These enable login sessions, keep you authenticated during a game session, and process your deposit and withdrawal requests. These cookies cannot be disabled without disrupting core Platform functionality.
  • Functional cookies: remember your language preference, display settings, and previously used payment method to improve your experience on repeat visits. These are non-essential and may be disabled through your browser settings.
  • Analytics cookies: collect anonymised data about how players use the Platform — which pages are visited most, how long sessions last, and which features are used. This data is processed in aggregate and is not linked back to individual player profiles.
  • Security cookies: used to detect and prevent fraudulent login attempts, bot activity, and other security threats. These include session integrity tokens and device fingerprinting data used for fraud prevention.

You can control cookie behaviour through your device's browser settings. Please note that disabling essential cookies will impair your ability to log in, deposit funds, or play games on the Platform. For specific instructions on managing cookies in your browser, refer to your browser's help documentation.

Data Retention

266zz retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply to the main categories of data we hold.

  1. Account and identity data (including KYC documents): retained for the lifetime of the account, and for a minimum of 5 years following account closure, in compliance with anti-money laundering record-keeping requirements.
  2. Transaction and payment records: retained for a minimum of 5 years from the date of the transaction, as required by applicable financial record-keeping law.
  3. Support correspondence and complaint records: retained for 3 years from the date of the last communication, to allow us to reference prior support interactions and to defend against any potential legal claims.

Your Data Protection Rights

You have a number of rights with respect to the personal data that 266zz holds about you. To exercise any of these rights, please contact us at [email protected] with your request. We will respond within 10 business days. We may need to verify your identity before processing your request.

  1. Right of access: you may request a copy of all personal data we hold about you, including the categories of data, the purposes for which it is processed, and the third parties with whom it has been shared.
  2. Right to rectification: if any personal data we hold about you is inaccurate or incomplete, you may request that we correct or complete it. Where data is held in connection with a legal obligation (e.g. KYC records), corrections must be supported by appropriate documentation.
  3. Right to erasure: you may request that we delete personal data we hold about you where the data is no longer necessary for its original purpose, where you have withdrawn consent (and no other legal basis for processing applies), or where the data has been unlawfully processed.
  4. Right to restriction of processing: you may request that we restrict processing of your data where you contest the accuracy of the data, where processing is unlawful, or where you have objected to processing based on legitimate interests pending determination of whether our interests override yours.
  5. Right to data portability: where processing is based on consent or contractual necessity and is carried out by automated means, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
  6. Right to object to marketing: you have the absolute right to object to processing of your personal data for direct marketing purposes at any time. Upon receipt of an objection, we will cease all marketing communications to you immediately.
How to Submit a Data Request: Email your request to [email protected] with the subject line "Data Request" and include your registered name, registered email address, and a description of the right you wish to exercise. We will acknowledge receipt within 2 business days and complete the request within 10 business days, or notify you if more time is required.

Security Measures

266zz implements technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include SSL/TLS encryption for all data transmitted between your device and the Platform, secure data storage with access controls limited to authorised personnel only, regular security audits and vulnerability assessments of the Platform infrastructure, multi-factor authentication options for account access, and continuous monitoring for suspicious login activity and account access anomalies.

While 266zz takes all reasonable steps to protect your personal data, no method of internet transmission or electronic storage is completely secure. We cannot guarantee absolute security of data transmitted over the internet. You are responsible for maintaining the security of your account credentials and for notifying us immediately at [email protected] if you suspect that your account has been accessed without authorisation.

Children's Privacy

The 266zz Platform is strictly intended for persons aged 21 and above. We do not knowingly collect personal data from persons under the age of 21. If we become aware that an account has been registered by or used by a person under 21, we will immediately suspend the account, delete or anonymise any personal data associated with it to the extent permitted by law, and retain only the minimum data necessary to comply with our legal obligations regarding the incident.

21+ Policy: If you believe that a person under 21 has registered an account on the 266zz Platform, please report this immediately to [email protected]. We take underage gambling extremely seriously and will act swiftly to investigate and address any such report.

Changes to This Privacy Policy

266zz reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform functionality. When we make material changes to this Policy, we will notify registered players by email to their registered email address and by posting a prominent notice on the Platform, at least 7 days before the changes take effect.

Your continued use of the Platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. The date of the most recent revision is displayed at the top of this page. We encourage you to review this Policy periodically to stay informed about how we protect your information.

Contact Us About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy, the personal data we hold about you, or any data protection matter, please contact the 266zz support team. All privacy-related enquiries are handled with strict confidentiality.

Contact email: [email protected]. Support is available 24 hours a day, 7 days a week. Please include "Privacy Enquiry" in the subject line of your email and provide your registered name and email address so we can locate your account and respond promptly.

Your Data Is Safe With 266zz

We take privacy seriously at 266zz. Explore our platform with confidence, knowing your data is protected. Have questions? Our FAQ has quick answers, or log in to review your account privacy settings.

Explore 266zz Casino Read Our FAQ

21+ only. Please gamble responsibly. All transactions in BDT.