sdj66 Privacy Policy

This Privacy Policy ("Policy") describes how sdj66 ("sdj66", "we", "us", "our") collects, uses, stores, shares, and protects the personal data of individuals ("you", "your", "the Player") who register an account, visit, or otherwise interact with the sdj66 platform at sdj66.io.

sdj66 is committed to handling your personal data responsibly, transparently, and in accordance with internationally recognised data protection principles. We recognise that the players who trust sdj66 with their personal information deserve a clear, honest, and comprehensive explanation of how that information is handled — and that is precisely what this Policy provides.

By registering an account on sdj66.io, making a deposit, placing a wager, or otherwise using the platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

sdj66 collects personal data from you through several channels: directly when you register an account or contact support, automatically as you use the platform, and from third-party service providers involved in payment processing and identity verification. The categories of personal data we collect are set out in the table below.

sdj66 uses the personal data it collects for the following specific and legitimate purposes. We will not use your data in ways that are incompatible with the purposes described in this Policy without first obtaining your explicit consent.

• Account Management: To create, maintain, and administer your sdj66 account, including processing your registration, verifying your identity (KYC), and managing your account settings and preferences.
• Service Delivery: To make the full range of sdj66 games, betting markets, and platform features available to you, including processing deposits and withdrawals in BDT via your chosen payment method.
• Age & Identity Verification: To verify that you meet the 21+ age requirement and to confirm your identity before processing withdrawals or granting access to certain platform features, in accordance with our legal obligations.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, account misuse, multi-accounting, money laundering, and any other prohibited conduct as defined in our Terms & Conditions.
• Legal & Regulatory Compliance: To comply with applicable legal obligations, respond to lawful requests from competent authorities, and maintain records as required by law.
• Customer Support: To respond to your enquiries, complaints, and support requests submitted via live chat or email, and to maintain records of our communications with you for quality assurance purposes.
• Platform Improvement: To analyse aggregated usage data, identify technical issues, and improve the functionality, performance, and user experience of the sdj66 platform.
• Responsible Gaming: To monitor account activity for signs of problem gambling behaviour, enforce deposit limits and self-exclusion requests, and fulfil our responsible gaming obligations to the players in our Bangladesh community.
• Marketing Communications: Where you have provided explicit opt-in consent, to send you promotional offers, bonus notifications, and seasonal campaign communications by email or SMS. You may withdraw this consent at any time.

sdj66 processes your personal data on one or more of the following legal bases, depending on the specific purpose for which the data is being used:

• Contractual Necessity: Processing that is necessary to perform the contract between you and sdj66 — specifically, to register your account, deliver the gaming and betting services you have requested, and process your financial transactions in BDT.
• Legal Obligation: Processing that is necessary for sdj66 to comply with a legal obligation, including age verification requirements, anti-money laundering (AML) checks, Know Your Customer (KYC) procedures, and the retention of financial records.
• Legitimate Interests: Processing that is necessary for sdj66's legitimate business interests, provided those interests are not overridden by your rights and interests. This includes fraud prevention, platform security, internal analytics, and quality improvement — activities that benefit both sdj66 and its players.
• Consent: Processing that is based on your freely given, specific, informed, and unambiguous consent — primarily the sending of marketing and promotional communications. You may withdraw consent at any time without affecting the lawfulness of processing that took place before withdrawal.

sdj66 does not sell, rent, or trade your personal data to any third party for that party's own commercial or marketing purposes. Personal data is shared only in the limited circumstances described below, and always subject to appropriate data protection safeguards.

• Payment Processors: We share financial data (including your bKash, Nagad, Rocket, Upay, Visa, or Mastercard details) with the payment processing providers necessary to execute your deposit and withdrawal instructions. These providers are authorised to use your data solely for the purpose of completing the transaction you have initiated.
• KYC & Identity Verification Providers: We share identity documents and personal information with third-party identity verification and age-check service providers for the sole purpose of completing our mandatory KYC obligations. These providers are contractually bound to handle your data securely and confidentially.
• Game Providers: Technical session data (including your IP address and device information) may be passed to our licensed third-party game providers — such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — to the extent necessary to load and operate their games within the sdj66 platform. These providers do not receive your financial or full identity data.
• Legal & Regulatory Authorities: sdj66 may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required by law, in response to a valid legal order, or where disclosure is necessary to prevent fraud, money laundering, or other criminal activity.
• Business Transfers: In the event that sdj66 undergoes a merger, acquisition, or transfer of substantially all of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy terms applicable to your data under the new entity.
• Professional Advisors: We may share data with our legal counsel, auditors, or other professional advisors where necessary for the provision of their services to sdj66, subject to strict confidentiality obligations.

sdj66 uses cookies and similar technologies (including local storage and session storage) on sdj66.io to ensure the platform functions correctly, to remember your preferences, and to improve your overall experience. The types of cookies we use are described below.

sdj66 does not use third-party advertising cookies, cross-site behavioural tracking cookies, or social media tracking pixels. You may configure your browser to block or delete cookies at any time; however, disabling strictly necessary cookies may impair your ability to use key platform features such as logging into your account.

sdj66 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following general retention periods apply:

• Account & Identity Data: Retained for the duration of your active account plus a minimum of 5 years following account closure, in accordance with standard AML record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of 7 years from the date of the transaction to comply with financial record-keeping obligations applicable to BDT-denominated transactions.
• KYC Documentation: Retained for the duration of your account relationship plus 5 years following closure, or such longer period as may be required by applicable law or regulatory guidance.
• Customer Support Communications: Retained for up to 3 years from the date of the communication, or longer where the communication relates to an ongoing dispute, legal proceeding, or regulatory investigation.
• Technical & Log Data: Server logs and technical session data are retained for up to 12 months, after which they are anonymised or deleted.
• Marketing Data: Opt-in records and marketing preference data are retained for the duration of your active marketing consent, or until you withdraw that consent, plus 3 years for record-keeping purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with you. Where data cannot be immediately deleted due to technical constraints, it is isolated from further processing until deletion is possible.

sdj66 implements a comprehensive, layered security architecture to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Our security measures include, but are not limited to, the following:

• Encryption in Transit: All data transmitted between your browser or device and sdj66's servers is encrypted using 256-bit SSL/TLS encryption, ensuring that your personal and financial information cannot be intercepted during transmission.
• Encryption at Rest: Sensitive data stored in sdj66's databases — including passwords, payment method details, and identity documents — is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Internal access to personal data is restricted on a strict need-to-know basis. All sdj66 staff and contractors who handle personal data are subject to formal confidentiality agreements and receive data protection training appropriate to their role.
• Intrusion Detection: sdj66's infrastructure is monitored around the clock by automated intrusion detection and anomaly alerting systems that flag suspicious activity for immediate human review.
• Regular Security Audits: sdj66 conducts regular internal and external security assessments of its platform infrastructure, including penetration testing and vulnerability scanning, to identify and remediate potential weaknesses before they can be exploited.
• Incident Response: In the event of a confirmed personal data breach that is likely to result in a risk to your rights or freedoms, sdj66 will notify affected players via their registered email address within a reasonable timeframe and take all necessary remediation steps.

As a player on sdj66, you hold a number of rights with respect to the personal data we hold about you. sdj66 is committed to honouring these rights promptly and without undue obstacle. Your rights are summarised below.

To exercise any of the rights listed above, please submit a written request to [email protected] (displayed as plain text — not a clickable link). Please include your registered username and the email address associated with your sdj66 account so that we can verify your identity before processing the request. sdj66 will respond to all verified data subject access requests within 30 days of receipt. In complex cases, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reason for it.

sdj66 is a real-money online casino and betting platform strictly intended for adults aged 21 and above. sdj66 does not knowingly collect, process, or retain personal data from any individual under the age of 21. The sdj66 registration process includes mandatory age verification steps designed to prevent underage individuals from creating accounts or accessing real-money gaming features.

If sdj66 becomes aware, or has reasonable grounds to suspect, that personal data has been collected from a person under the age of 21, we will immediately suspend the associated account, delete the personal data in question, and refund any deposits made by that individual in accordance with our Terms & Conditions.

Parents and guardians who believe that a minor in their care may have registered an account on sdj66 are encouraged to contact our support team immediately at [email protected] (plain text — not a clickable link). We treat all such reports as urgent and will respond within 24 hours. We also recommend the use of parental control software to restrict access to online gambling platforms for minors.

sdj66 operates as an online platform serving players primarily in Bangladesh. Some of our trusted third-party service providers — including certain game providers and payment technology partners — may process personal data on servers located outside of Bangladesh. In such cases, sdj66 takes steps to ensure that your personal data receives an equivalent level of protection regardless of where it is processed.

Where personal data is transferred to a third-party service provider located in a jurisdiction without equivalent data protection standards, sdj66 implements appropriate contractual safeguards — such as standard data protection clauses within our service provider agreements — to ensure that your data is adequately protected throughout its lifecycle, regardless of the jurisdiction in which it is processed.

sdj66 will not transfer personal data to any jurisdiction or service provider that cannot provide adequate assurances regarding the security and confidentiality of that data. If you have questions about the specific countries to which your data may be transferred, please contact our support team at [email protected] (plain text — not a clickable link).

sdj66 may send you promotional emails, SMS messages, or in-platform notifications about bonuses, new games, seasonal promotions (such as Eid, Pohela Boishakh, or BPL season offers), and other offers relevant to your account — but only where you have provided your explicit prior consent to receive such communications at the time of registration or through your account settings.

Marketing consent is entirely optional and is never a condition of registering an account or using any core sdj66 service. If you choose not to opt in to marketing communications, your access to games, deposits, withdrawals, and all other platform features will be completely unaffected.

You may withdraw your marketing consent and unsubscribe from all promotional communications at any time by:

• Updating your notification preferences in your sdj66 account settings;
• Clicking the "Unsubscribe" link included in any promotional email sent by sdj66; or
• Contacting our support team directly at [email protected] (plain text — not a clickable link) and requesting that your marketing preferences be updated.

Withdrawal of marketing consent does not affect sdj66's right to send you essential transactional communications related to your account, such as deposit confirmations, withdrawal notifications, KYC verification requests, security alerts, and updates to these Terms or this Privacy Policy.

The sdj66 platform at sdj66.io may contain references to, or content provided by, third-party game studios and software providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi). While these providers deliver game content within the sdj66 platform environment, they operate under their own separate privacy policies and data protection frameworks.

sdj66 is not responsible for the privacy practices of third-party game providers or any external websites or services that may be accessible from content within the sdj66 platform. We encourage you to review the privacy policies of any third-party providers whose services you use. The inclusion of third-party game content on sdj66 does not constitute an endorsement of the privacy practices of those providers.

If you have concerns about how a specific game provider handles the technical data it receives during a gaming session, please contact our support team and we will do our best to clarify the data flows involved and direct you to the relevant provider's data protection contact.

sdj66 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory guidance, or the services we provide. The date of the most recent revision is always displayed at the top of this page and within the hero section above.

When material changes are made to this Privacy Policy — meaning changes that meaningfully affect how your personal data is collected, used, or shared — sdj66 will notify registered players by sending a notification to the email address registered to their account, and by displaying a prominent notice on sdj66.io for a minimum of 30 days following the update.

Your continued use of the sdj66 platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated Policy. If you do not agree to the revised Privacy Policy, you should stop using sdj66 and may request account closure by contacting our support team. All personal data associated with a closed account will be handled in accordance with the retention periods described in Section 7 of this Policy.

If you have any questions, concerns, or complaints regarding this Privacy Policy, or if you wish to exercise any of your data subject rights as described in Section 9, please contact sdj66's support team using the details provided below. All privacy-related communications should be submitted in English to ensure the fastest possible response.

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 directly on sdj66.io — the fastest channel for urgent privacy queries
• Response Time: Under 5 minutes via live chat; within 12 hours via email for general queries; within 30 days for formal data subject access requests
• Support Hours: 24 hours a day, 7 days a week, 365 days a year
• Time Zone: Bangladesh Standard Time (BST, UTC+6)
• Language: English

When contacting sdj66 about a privacy matter, please include your registered username and the email address on your account so that our team can verify your identity and locate your data records efficiently. For formal data subject access requests, please state clearly which right you are exercising and provide as much relevant detail as possible to help us respond accurately and promptly.