pj66 Privacy Policy — How We Protect Your Data

1 Introduction

pj66 ("we", "us", "our", "the Platform") operates the online casino and sports betting platform available at pj66.im and any associated subdomains or mobile interfaces. We are committed to protecting the privacy and security of all personal information provided to us by players, visitors, and prospective users ("you", "the Player", "User") in connection with your use of the pj66 platform.

This Privacy Policy describes in detail what personal data we collect about you, the purposes for which that data is used, the legal basis on which we process it, how long we retain it, with whom we share it, and what rights you have in relation to your personal data. We are dedicated to collecting only the minimum amount of personal data necessary to deliver, operate, and improve the pj66 platform and to comply with our legal obligations.

pj66 serves players primarily located in Bangladesh. While Bangladesh does not yet have a comprehensive data protection statute equivalent to the EU's General Data Protection Regulation, pj66 voluntarily adopts data protection principles consistent with internationally recognised best practice, including purpose limitation, data minimisation, storage limitation, integrity, and confidentiality. We do this because we believe our players deserve the highest standard of privacy protection regardless of the technical requirements of local law.

This Privacy Policy applies to all personal data processed by pj66 in connection with the platform, including data collected via the website, through our customer support channels, via email correspondence, and through payment processing interactions. It does not apply to third-party websites or services that may be linked to or from the pj66 platform — those services have their own privacy policies which you should review independently.

2 Personal Data We Collect

pj66 collects personal data through several channels: directly from you when you register an account or contact our support team; automatically through your use of the platform; and from third parties such as payment processors and identity verification providers. The categories of personal data we collect include the following:

2.1 Registration and Identity Data

• Full legal name as it appears on your government-issued identification document
• Date of birth (used to verify that you are aged 21 or above)
• Residential address, including city (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar) and postal code
• Email address
• Mobile phone number
• Username and encrypted password
• National ID card number, passport number, or driving licence number (for KYC verification)

2.2 Financial and Payment Data

• Registered mobile number for bKash, Nagad, Rocket, or Upay accounts
• Partial card details (first six and last four digits) for Visa or Mastercard transactions — full card numbers are never stored by pj66
• Bank account details where bank transfer is used (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank)
• Transaction history including deposit amounts, withdrawal requests, and associated timestamps

2.3 Gaming and Betting Activity Data

• Game session records including games played, bet amounts, win/loss outcomes, and session duration
• Sports betting records including markets wagered on, odds accepted, stake amounts, and settlement outcomes
• Bonus and promotional offer usage history
• Responsible gaming tool settings (deposit limits, session time-outs, self-exclusion status)

2.4 Technical and Device Data

• IP address at the time of login and at the time of significant account actions
• Device type, operating system, and browser type/version
• Geolocation data (country and city level) derived from IP address
• Cookie identifiers and session tokens (see Section 6 for full cookie details)
• Log data including pages visited, features used, and error reports

2.5 Communications Data

• Content of emails or messages sent to pj66 support at [email protected]
• Records of live chat conversations with the support team
• Records of complaints, dispute submissions, and their outcomes

3 How We Use Your Personal Data

pj66 uses the personal data we collect for the following specific purposes. We do not use your data for any purpose incompatible with those listed here without first obtaining your consent or otherwise identifying a valid legal basis.

4 Legal Basis for Processing

pj66 processes your personal data on one or more of the following legal bases, depending on the specific purpose of the processing activity:

• Contractual necessity: Processing required to fulfil our contractual obligations to you as a registered pj66 player — including account management, game delivery, payment processing, and withdrawal handling. Without this processing, we cannot provide the services you have signed up for.
• Legal obligation: Processing required for pj66 to comply with applicable legal requirements, including anti-money-laundering (AML) obligations, Know Your Customer (KYC) regulations, counter-terrorism financing (CTF) requirements, and reporting obligations to relevant authorities.
• Legitimate interests: Processing carried out for pj66's legitimate business interests — including fraud prevention, platform security, responsible gaming monitoring, and aggregated analytics — provided that those interests are not overridden by your rights and interests.
• Consent: Processing of your personal data for optional purposes — such as sending you marketing emails about promotions and bonuses — where we rely on your freely given, specific, and informed consent. You may withdraw this consent at any time by contacting [email protected] or updating your account notification preferences.

5 Data Sharing and Disclosure

pj66 does not sell your personal data. We share personal data only where necessary to operate the platform, comply with legal obligations, or protect the security and integrity of the pj66 ecosystem. The categories of recipients with whom your data may be shared are described below.

5.1 Payment Processing Partners

pj66 shares necessary transaction data with payment service providers — including bKash, Nagad, Rocket, Upay, and card processing networks (Visa, Mastercard) — to facilitate deposits and withdrawals. These providers receive only the data required to process your specific transaction and are contractually bound to use it solely for that purpose.

5.2 Identity Verification Providers

For KYC compliance, pj66 may use third-party identity verification services to validate government-issued documents and confirm your identity. These providers process your identity data under strict contractual data protection obligations and do not retain your documents beyond the period required for the verification process.

5.3 Fraud Prevention and Security Partners

pj66 may share technical data (such as IP addresses and device fingerprints) with fraud detection and platform security partners to identify and prevent fraudulent account activity, bonus abuse, and multi-accounting. Data shared for this purpose is processed solely for security purposes and is not used for marketing or profiling.

5.4 Game Content Providers

Casino games on pj66 are delivered by third-party studio providers including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe. These providers may receive your account identifier (a non-personally-identifiable token) to enable game session tracking within their systems. Personal data such as your name, address, or payment details is not transmitted to game providers.

5.5 Legal and Regulatory Disclosure

pj66 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, court order, or legal process. In such cases, pj66 will disclose only the minimum amount of data required to comply with the legal obligation and will notify you of the disclosure where permitted by law to do so.

5.6 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of pj66's assets, your personal data may be transferred to the successor entity. In such circumstances, pj66 will endeavour to ensure that the successor entity maintains data protection standards consistent with this Privacy Policy and will notify affected players of any material changes to how their data is handled.

6 Cookies and Tracking Technologies

pj66 uses cookies and similar tracking technologies (including web beacons, pixel tags, and local storage) to operate the platform, improve user experience, and analyse usage patterns. By continuing to use the pj66 platform, you consent to the use of cookies as described in this section.

6.1 Types of Cookies Used

6.2 Managing Cookies

You can control the use of non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies, and instructions for doing so are available in your browser's help documentation. Please note that blocking essential cookies will prevent certain core platform functions from operating correctly, and may prevent you from logging into your pj66 account.

Disabling analytics or marketing cookies will not affect your ability to use any part of the pj66 platform. You may also opt out of marketing communications at any time by contacting pj66 support at [email protected].

7 Data Retention

pj66 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by applicable law. The following retention periods apply to the main categories of personal data we hold:

• Account and identity data: Retained for the duration of your active account relationship with pj66, plus a minimum of five (5) years following account closure. This extended retention period reflects anti-money-laundering record-keeping requirements.
• KYC verification documents: Retained for a minimum of five (5) years from the date the document was submitted, in accordance with standard financial services compliance requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, for AML, fraud investigation, and dispute resolution purposes.
• Gaming and betting activity records: Retained for a minimum of three (3) years from the date of the activity, for responsible gaming monitoring, dispute resolution, and audit purposes.
• Customer support communications: Retained for a minimum of two (2) years from the date of the last communication in the relevant support thread.
• Marketing consent records: Retained for the duration of your consent plus three (3) years following withdrawal of consent, as evidence of the consent having been lawfully obtained.
• Analytics and technical log data: Retained in aggregated or anonymised form indefinitely for platform improvement purposes; identifiable log data is deleted after twelve (12) months.

Where personal data is no longer required for any of the purposes described in this policy and no legal obligation requires its continued retention, pj66 will securely delete or anonymise the data in a manner that prevents reconstruction of the original personal data.

8 Data Security

pj66 employs a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include but are not limited to the following:

• 256-bit SSL/TLS encryption: All data transmitted between your browser or device and the pj66 platform is encrypted using industry-standard TLS 1.2 or higher protocols.
• Encrypted data storage: Sensitive data fields including passwords (stored as salted hashes), payment method identifiers, and KYC document content are encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data within pj66's internal systems is restricted on a strict need-to-know basis. Employees with access to personal data are subject to confidentiality obligations and regular security training.
• Two-factor authentication: pj66 offers two-factor authentication (2FA) for player accounts as an additional layer of login security. Players are strongly encouraged to enable 2FA via their account security settings.
• Fraud detection systems: Automated monitoring systems flag unusual account activity and suspicious transaction patterns in real time for review by pj66's security team.
• Penetration testing and vulnerability assessments: pj66 conducts regular security assessments of its platform infrastructure to identify and remediate vulnerabilities proactively.

While pj66 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, pj66 will notify affected players as promptly as practicable and take immediate steps to contain the breach and mitigate its impact.

9 Your Privacy Rights

As a pj66 player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact pj66 support at [email protected] with your registered account email and a clear description of your request. pj66 aims to respond to all privacy rights requests within 30 days of receipt.

• Right of access: You have the right to request a copy of the personal data pj66 holds about you, together with information about how that data is used and with whom it is shared.
• Right to rectification: You have the right to request correction of any personal data that is inaccurate, outdated, or incomplete. You can update basic account details (such as your email address or contact number) directly from your account settings.
• Right to erasure ("right to be forgotten"): You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purposes for which it was collected, or where you withdraw consent and there is no other lawful basis for processing. Note that this right may be limited where retention is required by law (for example, AML record-keeping obligations).
• Right to restriction of processing: You have the right to request that pj66 restricts its processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested, or while a legitimate interest assessment is being reviewed.
• Right to data portability: Where pj66 processes your personal data on the basis of consent or contractual necessity using automated means, you have the right to receive a copy of that data in a structured, commonly used, and machine-readable format.
• Right to object: You have the right to object to pj66's processing of your personal data where that processing is based on legitimate interests. pj66 will cease the processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to withdraw consent: Where pj66 processes your data on the basis of your consent (for example, marketing emails), you have the right to withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.

10 Children's Privacy and Underage Access

pj66 is strictly an adults-only platform. Access to all services — including casino games, sports betting, live dealer games, and crash games — is restricted to persons aged 21 years and above. pj66 does not knowingly collect personal data from any person under the age of 21.

During registration, all applicants are required to provide their date of birth and to confirm that they are aged 21 or older. Where pj66 has reasonable grounds to suspect that a registered player may be under 21 years of age, the account will be suspended pending age verification. If age verification confirms that the player is under 21, the account will be permanently closed, all gameplay will be voided, and any deposited funds will be returned to the payment source where practicable.

If you are a parent or guardian and believe that a person under your care has registered a pj66 account without your knowledge, please contact us immediately at [email protected]. We will investigate the matter promptly and take appropriate action to protect the interests of the minor.

11 Third-Party Links and Platforms

The pj66 platform may contain references to third-party game studios (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe) whose game interfaces are embedded within the pj66 environment. While pj66 takes care to partner with reputable providers, please be aware that these game providers operate their own data collection practices within their game environments. pj66 is not responsible for the privacy practices of third-party game studios.

The pj66 platform does not contain external outbound links to third-party websites for marketing or advertising purposes. If you navigate away from the pj66 domain to any external website, the privacy practices of that external site are governed by that site's own privacy policy, which is independent of this document. pj66 recommends that you review the privacy policy of any third-party site before providing personal information to it.

12 Updates to This Privacy Policy

pj66 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data practices, changes in applicable law, or changes in the services we offer. When we make material changes to this policy, we will update the "Last Updated" date at the top of this page and, where practicable, notify registered players by email to the address on their pj66 account.

Your continued use of the pj66 platform following any update to this Privacy Policy constitutes your acceptance of the revised policy. We encourage you to review this Privacy Policy periodically to stay informed about how pj66 collects, uses, and protects your personal data. If you do not agree with any amendment to this policy, you should cease using the platform and may request account closure by contacting pj66 support.

The version of this Privacy Policy in effect at the time of any specific data collection or processing event is the version that governs that event. Retrospective application of an updated policy to previously collected data is not permitted except where required by law.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to pj66's handling of your personal data, please contact our support team using the details below. Our team is available 24 hours a day, 7 days a week, including Bangladesh public holidays such as Eid, Pohela Boishakh, Victory Day (16 December), and Independence Day (26 March).

When contacting us about a privacy matter, please include your registered account email address and a clear description of your request or concern so that we can locate your records and respond as efficiently as possible. For data deletion or data portability requests, we may need to verify your identity before processing the request to ensure that we do not disclose or delete data in response to a fraudulent request.