Scope of This Policy
This Privacy Policy applies to all services operated under xz66 at xz66.ws, including account registration, deposits via bKash or Nagad, gameplay, the xz66 App, and any communication you have with our support team. By creating an account or using our platform, you agree to the practices described here.
xz66 is the data controller for all personal information collected through this website. If you have questions about any part of this policy, email us at [email protected] before you continue.
Data We Collect From You
xz66 collects personal data in three ways: information you give us directly, data generated when you use the platform, and limited information from third-party services you connect (such as bKash or Nagad).
Information you provide
- Registration details: full name, date of birth, email address, phone number, and preferred currency (BDT).
- Identity verification (KYC): a copy of your National ID Card (NID), Passport, or Driving Licence — required before your first withdrawal.
- Payment details: mobile wallet numbers (bKash, Nagad, Rocket, Upay) or bank account details used for deposits and withdrawals.
- Communications: messages sent via live chat, email, or any support ticket you raise.
Data generated automatically
- Device and browser data: IP address, device type, operating system, browser version.
- Usage logs: pages visited, games played, session timestamps, bet history, and transaction records.
- App data: if you install the xz66 App (v3.3.20, Android 7.0+), we collect crash logs and app performance metrics — never your contacts or media files.
Why We Need Your Data
xz66 only collects data that has a clear, lawful purpose. The table below maps each category to the reason we hold it.
| Data Category | Purpose | Legal Basis |
|---|---|---|
| Name, date of birth, contact details | Account creation and age verification (18+) | Contract performance |
| KYC documents (NID / Passport) | Identity check before first withdrawal; anti-fraud | Legal obligation |
| Payment details (bKash, Nagad, etc.) | Processing deposits (min ৳150) and withdrawals (min ৳1,400) | Contract performance |
| Bet and transaction history | Account records, bonus tracking, dispute resolution | Legitimate interest |
| IP address and device data | Security monitoring, fraud prevention, geolocation checks | Legitimate interest |
| Support communications | Resolving queries; quality assurance | Contract performance |
We do not use your data to send unsolicited marketing unless you explicitly opt in during registration or in your account settings. You can withdraw that consent at any time by emailing [email protected].
Who Else Sees Your Data
xz66 does not sell, rent, or trade your personal data. We share it only in the following limited circumstances:
- Game providers: Ezugi, KA Gaming, Red Tiger, JDB, Sexy Gaming, Evolution, and Spribe receive anonymised session tokens to run games. They do not receive your name or payment details.
- Payment processors: bKash, Nagad, Rocket, Upay, and bank transfer partners receive only the transaction data necessary to process your payment.
- KYC verification services: your identity documents may be passed to a licensed third-party verification provider to confirm authenticity. This provider is contractually bound to delete copies within 6 hours of completing the review.
- Legal authorities: if required by applicable law or a valid court order, xz66 will disclose data to the relevant authority. We will notify you when permitted by law.
All third-party partners who handle personal data on our behalf are bound by data processing agreements that require them to apply equivalent security standards.
Cookies and Tracking
xz66.ws uses cookies and similar technologies to keep your session active, remember your language preference, and measure which pages players find useful. We do not use cross-site advertising trackers.
Types of cookies we set
- Essential cookies: required for login sessions and secure transactions. Cannot be disabled without breaking the site.
- Analytics cookies: count page visits and track navigation paths so we can improve the platform. Data is aggregated and anonymised.
- Preference cookies: store your chosen language and display settings between sessions.
You can block or delete cookies through your browser settings. Blocking essential cookies will prevent you from logging into your xz66 account.
How Long We Keep Records
xz66 keeps account and transaction records for as long as your account remains active, and for a minimum of five years after account closure. This is to meet our obligations around financial record-keeping and to handle any late disputes.
KYC documents are retained for the same five-year period. Support chat logs are kept for two years. App crash logs are deleted after 90 days.
When the retention period ends, data is permanently deleted or anonymised so it can no longer be traced back to you.
Steps We Take to Keep Data Secure
xz66 applies technical and organisational measures that are proportionate to the sensitivity of the data we hold. These include:
- TLS 1.3 encryption on all data in transit between your device and our servers.
- AES-256 encryption for stored documents and payment details.
- Role-based access controls: staff can only see the data they need to do their job.
- Regular security audits and penetration testing of our platform and the xz66 App.
- Two-factor authentication (2FA) available for player accounts — we strongly recommend enabling it.
No system is entirely risk-free. If we ever become aware of a breach that affects your personal data, we will notify you promptly through the contact details on your account.
Your Rights Over Your Data
As an xz66 player, you have the following rights regarding your personal data. To exercise any of them, email [email protected] with the subject line "Data Request" and your registered email address.
- Access: request a copy of all personal data xz66 holds about you.
- Correction: ask us to fix inaccurate or outdated information on your account.
- Deletion: request that we delete your account and personal data, subject to our legal retention obligations.
- Restriction: ask us to pause processing your data while a dispute is under review.
- Portability: receive your data in a commonly used machine-readable format.
- Withdraw consent: opt out of marketing communications at any time.
We will respond to all data requests within 30 days. In complex cases we may extend this by a further 60 days, and we will inform you if that happens.
Players Under 18
xz66 is strictly an adult platform. You must be at least 18 years old to register and play. We verify age at registration and again through KYC before the first withdrawal. If we discover an account belongs to a person under 18, the account will be suspended immediately, all funds returned, and the records reported as required by applicable regulations.
If you believe a minor has accessed xz66 using your details, contact us immediately at [email protected] or through our 24/7 Live Chat.
Updates to This Policy
xz66 will update this Privacy Policy when our practices change or when relevant regulations are amended. The "Last Updated" date at the top of this page always reflects the most recent version.
For material changes — such as new types of data collection or new third-party partners — we will notify active players by email at least 14 days before the change takes effect. Continuing to use xz66 after that date means you accept the updated policy.
Get in Touch
If you have a question about this Privacy Policy, want to exercise a data right, or have a concern about how xz66 handles your information, please reach us through any of the channels below.
Email: [email protected]
Live Chat: Available 24/7 from the xz66 website or App
Website: xz66.ws
We aim to resolve all privacy-related queries within 5 working days. For formal data requests, please allow up to 30 days as noted under "Your Rights" above.