xx67 Privacy Policy

xx67 is committed to protecting the personal information of every player who uses our platform. This Privacy Policy sets out in clear, plain terms what data we collect, how we use it, who we may share it with, and the rights you hold as an individual user. By registering an account or continuing to use the xx67 platform, you acknowledge that you have read, understood, and agreed to the practices described in this Privacy Policy.

This Privacy Policy applies to all xx67 products and services, including our website at https://xx67.ws, our account management tools, our sports betting markets, our live casino, our slots section, and all communications between xx67 and its users. It applies to players in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, and all regions of Bangladesh.

1. Information We Collect

xx67 collects personal data only to the extent necessary to provide our services, verify user identity, process financial transactions, and comply with applicable legal and regulatory obligations. The categories of information we collect include the following:

• Registration data: your full name, date of birth, Bangladesh mobile number, and account password created at the time of registration.
• Identity verification (KYC) data: government-issued photo identification such as a National Identity Card, passport, or driving licence, and where required, proof of payment method ownership.
• Financial transaction data: records of all deposits, withdrawals, and bonus redemptions through your xx67 account, including the payment method used (bKash, Nagad, Rocket, Upay, Visa, Mastercard) and transaction amounts in BDT.
• Gameplay and betting data: a complete record of your betting and gaming activity on the xx67 platform, including bet amounts, game titles, outcomes, and session timestamps.
• Technical and device data: IP address, device type, browser type and version, operating system, referring URLs, session duration, and pages visited. This data is collected automatically when you use our platform.

xx67 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric identifiers, except where a regulatory requirement specifically mandates collection of certain identity-related data as part of the KYC process.

2. How We Use Your Information

xx67 uses your personal data only for legitimate purposes directly related to operating the platform and delivering our services. The primary purposes for which we process your data are as follows:

3. Legal Basis for Processing

xx67 processes personal data only where a valid legal basis exists. The legal bases upon which we rely are:

• Contractual necessity: processing required to perform the contract between you and xx67 — including account creation, transaction processing, and bet settlement.
• Legal obligation: processing required to comply with applicable law, including KYC verification and anti-money laundering record-keeping.
• Legitimate interests: processing to protect the platform from fraud, improve our services, and ensure safety and integrity of all users — balanced against your right to privacy.
• Consent: processing for marketing communications and non-essential cookies where you have provided explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

4. Cookies and Tracking Technologies

xx67 uses cookies and similar tracking technologies to make the platform function correctly, remember your preferences, and analyze how users interact with the site. The types of cookies we use include:

• Strictly necessary cookies: essential for the platform to function. They enable login sessions and security features and cannot be disabled without breaking the platform.
• Functional cookies: remember your preferences such as language settings and display preferences to improve your experience on return visits.
• Analytics cookies: collect anonymized data about how visitors navigate the platform — which pages are viewed most frequently and where users exit. This helps xx67 improve its product.
• Session security cookies: short-lived cookies that protect your login session from hijacking and CSRF attacks. These expire when you close your browser.

You may control non-essential cookies through your browser settings. Disabling certain cookies may affect platform functionality. xx67 does not use advertising cookies or retargeting pixels on this platform.

5. Sharing Your Information

xx67 does not sell, rent, or trade your personal data. We share your personal information with third parties only in the following limited circumstances, and only to the minimum extent necessary:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard receive transaction data necessary to process your deposits and withdrawals. Each provider operates under its own privacy and data security terms.
• KYC verification partners: identity verification providers receive the KYC documents you submit for the purpose of verifying your identity. These providers are contractually bound to handle your documents confidentially and not use them for any other purpose.
• Game content providers: where technically required for game delivery, game studios such as Pragmatic Play and Evolution Gaming may receive a minimal set of session data, used solely to render the game and record outcomes.
• Legal and regulatory authorities: xx67 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where legally required by a valid order, warrant, or statutory obligation. We will notify affected users where legally permitted to do so.

All third-party service providers engaged by xx67 are subject to data processing agreements requiring them to maintain equivalent data security standards, process data only for the specific purpose for which it was shared, and delete it once that purpose has been fulfilled.

6. Data Retention

xx67 retains your personal data only for as long as necessary for the purpose for which it was collected, or as required by applicable law. For active account holders, we retain account data, transaction records, and gameplay history for the duration of the account relationship and for a minimum of five years following account closure, in order to comply with anti-money laundering record-keeping obligations and to resolve any disputes that may arise.

KYC documents are retained for the minimum period required by applicable law. Marketing consent records are retained until consent is withdrawn and for a reasonable period thereafter. Device and technical log data is retained for a rolling 90-day period for security monitoring purposes and then automatically deleted.

7. Data Security

xx67 implements a range of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction. While no system can guarantee absolute security, we apply industry best practices appropriate to the nature and volume of data we handle.

8. Your Data Rights

As a user of the xx67 platform, you hold the following rights with respect to your personal data. To exercise any of these rights, contact our support team at [email protected] with your registered mobile number and the nature of your request. We will respond within 30 days.

• Right of access: you may request a copy of all personal data xx67 holds about you, including account details, transaction history, and KYC records.
• Right of rectification: you may request correction of any inaccurate or incomplete personal data held about you. Identity-critical fields such as name and date of birth require supporting documentation for amendment.
• Right of erasure: you may request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to legal retention obligations that may override it.
• Right to restrict processing: you may request that xx67 limit processing of your data to storage only, pending resolution of a dispute about its accuracy or the lawfulness of its processing.
• Right to data portability: you may request a structured, machine-readable copy of personal data you provided to xx67 under a consent or contractual basis, for the purpose of transferring it to another service provider.
• Right to object: you may object to xx67 processing your personal data where we rely on legitimate interests as the legal basis. You may also object at any time to processing of your data for direct marketing purposes, with immediate effect.

xx67 will not charge a fee for handling standard data rights requests. We may ask you to verify your identity before processing a request to protect against unauthorized access to another person's data. If we are unable to fulfill a request due to a conflicting legal obligation, we will explain the reason in our response.

9. Children's Privacy

The xx67 platform is strictly for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that a user under 21 has registered an account or provided personal data, we will immediately close the account, delete all associated personal data, and reverse any related transactions. If you believe a minor has registered on xx67, please contact us immediately at [email protected].

10. Third-Party Links

The xx67 platform does not contain links to third-party websites. All navigation within the platform leads to pages and resources that are part of the xx67 service. If third-party links are introduced at any future point, this Privacy Policy will be updated accordingly and a notice will be provided to users. xx67 is not responsible for the privacy practices of any third-party services accessed independently by users outside of the xx67 platform.

11. Changes to This Privacy Policy

xx67 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or the services we offer. When we make a material change to this policy, we will notify registered users via their registered mobile number or via a prominent notice on the platform at least 7 days before the change takes effect. The updated policy will always be published on this page with a revised Last Updated date.

Your continued use of the xx67 platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the updated policy, you should close your account and discontinue use of the platform.

12. Contact Us About Privacy

If you have questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how xx67 handles your personal information, please contact our support team. Support is available 24/7. Our contact email is [email protected] — displayed as plain text only, not a clickable link. Please include your registered mobile number and a brief description of your query so we can assist you efficiently.