How tj66 Collects, Uses, and Safeguards Your Personal Data

Throughout this Privacy Policy, the following terms carry the meanings set out below:

• "Platform" refers to the tj66 website at tj66.io, all associated subdomains, mobile-optimised versions, and any application or interface through which the tj66 service is delivered.
• "Player" / "User" / "You" refers to any natural person who accesses, registers on, or interacts with the Platform in any capacity.
• "Personal Data" refers to any information that, alone or in combination with other data, can identify a living natural person — including name, mobile number, date of birth, email address, device identifiers, and financial account details.
• "Processing" refers to any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, and deletion.
• "Data Controller" refers to tj66, the entity that determines the purposes and means of processing Personal Data collected through the Platform.
• "Third-Party Processor" refers to any external organisation that processes Personal Data on tj66's behalf under a contractual data processing agreement, such as payment gateway providers or identity verification services.
• "KYC" refers to the Know Your Customer identity and age verification process required for account access and withdrawal eligibility.
• "Cookies" refers to small data files stored on your device by your web browser when you visit the Platform.

tj66 collects Personal Data in the categories described below. We apply the principle of data minimisation — we collect only what is genuinely necessary for the purposes stated in Section 4 of this Policy.

We do not intentionally collect sensitive categories of Personal Data such as racial or ethnic origin, religious beliefs, political opinions, health data, or biometric data beyond the photograph submitted for KYC identity verification purposes.

tj66 collects your Personal Data through the following channels and mechanisms:

• Direct submission: Information you voluntarily provide when creating an account, completing KYC verification, making a deposit or withdrawal, or contacting support.
• Automated technical collection: Technical Data and Behavioural Data are collected automatically through server logs, session tracking systems, and Platform analytics tools whenever you access or interact with the Platform.
• Payment processors: When you initiate a transaction through bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, or BRAC Bank, our payment processing partners share transaction confirmation data with us necessary to credit or debit your account.
• Identity verification partners: Where third-party KYC verification services are used to validate identity documents, those services return a verification status and relevant identity fields to tj66 under strict data processing agreements.
• Cookies and similar technologies: As described in Section 10, cookies and tracking pixels may collect Technical Data and Behavioural Data to improve Platform performance and, where applicable, to display relevant promotional content.

tj66 processes your Personal Data only for the specific, legitimate purposes listed below. We do not use your data for purposes incompatible with those disclosed at the time of collection.

• Account creation and management: To register your account, authenticate your identity at login, and manage your Player profile throughout the lifetime of your account.
• Age and identity verification (KYC): To confirm that you meet the minimum age requirement of 21 years and that your identity matches the details provided at registration, as required before withdrawal eligibility is granted.
• Payment processing: To initiate, record, reconcile, and complete deposit and withdrawal transactions through your chosen payment method. Financial Data is used solely for transaction processing and fraud prevention — not for profiling or marketing.
• Responsible Gaming compliance: Behavioural Data is used by tj66's responsible gaming systems to identify patterns that may indicate problem gambling, to apply deposit limits or session restrictions you have set, and to enforce self-exclusion requests promptly.
• Fraud detection and security: Technical Data and Behavioural Data are analysed to detect unauthorised account access, multi-account abuse, bonus exploitation, money laundering indicators, and other prohibited conduct as defined in our Terms & Conditions.
• Customer support: Communications Data is used to respond to your enquiries, resolve disputes, and improve support quality. Support conversations may be retained for quality assurance and regulatory compliance purposes.
• Regulatory compliance: To fulfil record-keeping obligations under applicable anti-money-laundering principles and to respond to lawful requests from regulatory authorities or law enforcement bodies.
• Platform improvement: Aggregated and anonymised Behavioural Data and Technical Data may be used to analyse Platform performance, improve user experience, and optimise game catalogue decisions.
• Promotional communications: Where you have explicitly opted in to receive marketing communications, Contact Data may be used to send you information about promotions, bonus offers, or seasonal events relevant to your account. You may opt out at any time by contacting [email protected].

tj66 processes your Personal Data on the following legal grounds:

• Contractual necessity: Processing required to fulfil our obligations under the account agreement with you — including registration, KYC, payment processing, and game delivery.
• Legitimate interests: Processing necessary for fraud prevention, security monitoring, responsible gaming enforcement, and Platform analytics, where those interests do not override your fundamental privacy rights.
• Legal obligation: Processing required to comply with applicable anti-money-laundering requirements, record-keeping obligations, and lawful requests from competent authorities.
• Consent: Processing for optional purposes such as marketing communications, where your explicit opt-in has been obtained. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.

tj66 does not sell, rent, or commercially exploit your Personal Data to any third party. We share data only in the limited circumstances described below, and only to the minimum extent necessary:

• Payment processors: Financial Data is shared with the relevant payment gateway (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank) solely to facilitate your transaction. These providers process your data under their own privacy policies and applicable financial regulations.
• Identity verification providers: Identity Data submitted for KYC is shared with contracted verification service providers under data processing agreements that restrict secondary use of your data.
• Game providers: Technical Data (such as session tokens and game round identifiers) is exchanged with game providers including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi as required for game delivery and result certification. No Identity Data or Contact Data is passed to game providers.
• Fraud and security partners: Aggregated risk signals and Technical Data may be shared with specialised fraud-detection services to maintain Platform security. These services operate under contractual data protection obligations.
• Law enforcement and regulatory authorities: Personal Data may be disclosed to competent authorities when required by a lawful order, court order, or regulatory directive. tj66 will notify affected Players of such disclosures where legally permitted to do so.
• Corporate transactions: In the event of a merger, acquisition, or asset sale affecting the tj66 Platform, Personal Data may be transferred to the successor entity, subject to the same or equivalent privacy protections as set out in this Policy. Players will be notified of any material change in data controller.

tj66 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal obligations. The following general retention periods apply:

Upon expiry of the applicable retention period, Personal Data is securely deleted or permanently anonymised so that it can no longer be associated with any individual. Anonymised, aggregated data may be retained indefinitely for statistical and platform improvement purposes.

tj66 implements a layered security architecture designed to protect your Personal Data against unauthorised access, disclosure, alteration, and destruction. Our security measures include but are not limited to:

• 256-bit SSL/TLS encryption: All data in transit between your device and the tj66 Platform is encrypted using industry-standard TLS protocols, ensuring that your credentials, financial data, and personal information cannot be intercepted during transmission.
• Password hashing: Account passwords are stored using a one-way cryptographic hashing algorithm. tj66 staff cannot retrieve your plain-text password under any circumstances. If a password is lost, it must be reset via the verified mobile number associated with your account.
• Access controls: Internal access to Personal Data is restricted on a strict need-to-know basis. Employees and contractors with access to sensitive data are subject to confidentiality obligations and periodic access reviews.
• Intrusion detection: The Platform operates continuous automated monitoring for anomalous access patterns, brute-force login attempts, and suspicious transaction behaviour.
• Secure data centres: Personal Data is stored on servers equipped with physical security controls, redundant backup systems, and access logging.

In the event of a data breach that is likely to result in a significant risk to your rights, tj66 will notify affected Players without undue delay and will take immediate remedial action to contain and mitigate the breach.

As a Player on the tj66 platform, you have the following rights in respect of your Personal Data. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request". tj66 will acknowledge your request within 5 business days and aim to fulfil it within 30 calendar days.

• Right of Access: You may request a copy of the Personal Data tj66 holds about you, along with information about how it is being used and with whom it has been shared.
• Right to Rectification: You may request correction of inaccurate or incomplete Personal Data. Note that Identity Data that has been verified through KYC cannot be amended without supporting documentary evidence of a legitimate change.
• Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected. This right is subject to overriding legal retention obligations — for example, KYC and financial records must be retained for regulatory compliance periods as described in Section 7.
• Right to Restriction of Processing: You may request that tj66 limit the processing of your Personal Data in certain circumstances, such as while the accuracy of data is being contested or while an objection to processing is being assessed.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you may request that tj66 provide your Personal Data in a structured, machine-readable format.
• Right to Object: You may object at any time to processing of your Personal Data for direct marketing purposes. You may also object to processing based on legitimate interests, although tj66 may continue processing where there are compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Please note that the exercise of certain rights may affect your ability to continue using the tj66 platform — for example, deletion of KYC data may render your account ineligible for withdrawals. tj66 will communicate any such implications to you before processing your request.

The tj66 platform uses cookies and similar tracking technologies to deliver a functional, personalised, and secure user experience. The categories of cookies we use are as follows:

You may manage or disable non-essential cookies through your browser's cookie settings at any time. Disabling essential cookies will impair your ability to log in and use core Platform features. tj66 does not use third-party advertising networks or programmatic ad-targeting cookies that share your data with external advertising platforms.

The tj66 platform is strictly intended for individuals who are 21 years of age or older. We do not knowingly collect, process, or retain Personal Data from individuals under the age of 21. Age verification is a mandatory step in the KYC process, and accounts where the Player's date of birth indicates they are under 21 will be suspended immediately and permanently.

If tj66 becomes aware that Personal Data has been collected from a minor — whether through incorrect information submitted at registration or through a subsequent age verification failure — all associated data will be deleted as promptly as technically possible, and any account balance will be returned to the originating payment method after deducting any bonus funds received.

Parents and guardians who believe a minor may have registered on the tj66 platform should contact our support team immediately at [email protected] with the subject line "Minor Account Report" and we will investigate and act without delay.

tj66 reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform features. When material changes are made, we will notify registered Players via a prominent notice displayed upon next login, at a minimum of 7 days before the revised Policy takes effect.

The "Last Updated" date displayed at the top of this Policy reflects the most recent revision. We encourage you to review this page periodically. Your continued use of the tj66 platform after the effective date of any revised Privacy Policy constitutes your acknowledgement of the updated terms.

All prior versions of this Privacy Policy are retained in our internal records and are available upon written request to [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way tj66 handles your Personal Data, please contact us using the details below. All privacy-related communications must be in English to ensure accurate and timely processing.

• Email: [email protected] (plain text — not a clickable link)
• Subject Line for Data Rights Requests: "Data Rights Request"
• Subject Line for Minor Account Reports: "Minor Account Report"
• Subject Line for Data Breach Notifications: "Security Concern"
• Response Time: tj66 aims to acknowledge all privacy-related enquiries within 5 business days and to resolve them within 30 calendar days of receipt, in accordance with Bangladesh Standard Time (BST, UTC+6).

For general platform support enquiries not related to data privacy, please also use [email protected] — our team handles all inbound communications from a single support address.