tj66 Privacy Policy — How We Protect Your Personal Data

1 Data We Collect

tj66 collects personal data only when it is necessary to provide our services, comply with legal obligations, or improve the platform experience. The categories of data we collect are described in the table below, along with the source from which each category is obtained.

1.1 Data We Do Not Collect

tj66 does not collect or store your full payment card numbers (Visa or Mastercard). Card transactions are processed directly by our PCI-DSS compliant payment gateway partners, and only tokenised references are retained by tj66. tj66 also does not collect biometric data, racial or ethnic origin data, religious beliefs, or political opinions.

2 How We Use Your Data

tj66 processes your personal data only where a lawful basis exists for doing so. The primary lawful bases we rely upon are: performance of the contract between you and tj66 (i.e., operating your account and providing the services you requested); compliance with legal obligations (including anti-money laundering, age verification, and responsible gaming requirements); and our legitimate interests in operating a secure, fair, and commercially sustainable gaming platform.

The specific purposes for which tj66 processes your personal data are as follows:

• Account management: Creating, maintaining, verifying, and if necessary closing your tj66 account; authenticating your identity at login; enabling password reset and account recovery.
• Transaction processing: Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, bank transfer, Visa, and Mastercard; reconciling financial records; managing refunds and chargebacks.
• Regulatory compliance: Conducting Know Your Customer (KYC) verification; performing anti-money laundering (AML) screening; meeting reporting obligations to competent authorities where legally required.
• Responsible gaming: Monitoring account activity for indicators of problem gambling behaviour; enforcing self-exclusion and deposit limit settings applied by the player; preventing access by self-excluded players.
• Fraud prevention and platform security: Detecting and investigating suspicious account activity; identifying duplicate accounts; preventing bot usage, collusion, and match-fixing related activity; maintaining the integrity of the tj66 platform.
• Customer support: Responding to your support queries submitted via email or live chat; following up on unresolved complaints; training and quality assurance reviews of support interactions.
• Platform improvement: Analysing aggregated, anonymised usage data to identify technical issues, improve game performance, and enhance the overall player experience on tj66.
• Marketing communications: Sending you promotional emails, SMS messages, or in-platform notifications about bonuses, new games, cricket betting markets, and seasonal promotions — only where you have opted in to receive such communications. You may opt out at any time.

3 Cookies and Tracking

The tj66 website uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, and to gather aggregated analytics data that helps us improve the user experience. A cookie is a small text file stored on your device by your browser at the instruction of the tj66 website.

3.1 Types of Cookies Used by tj66

• Essential cookies: Required for the tj66 platform to operate. These include session cookies that keep you logged in during a visit, security tokens that protect against cross-site request forgery, and cookies that remember your game settings. These cookies cannot be disabled without impairing platform functionality.
• Analytics cookies: Used by tj66 to understand how players navigate the platform — which pages are visited most frequently, where players drop off during the registration process, and how long sessions last. This data is collected in aggregated, anonymised form and does not identify you individually.
• Functional cookies: Store your preferences such as language settings (English), preferred payment method display, and responsible gaming limit reminders. These improve your experience but are not strictly essential to core functionality.
• Marketing cookies (opt-in only): Used to deliver promotional content relevant to your interests within the tj66 platform. These are only active where you have provided explicit consent. tj66 does not use third-party advertising networks or cross-site tracking cookies.

3.2 Managing Your Cookie Preferences

You may control cookie behaviour through your browser settings. Most modern browsers allow you to view, block, or delete cookies on a per-site or global basis. Please note that blocking essential cookies will prevent certain features of the tj66 platform from working correctly, including the ability to log in and maintain a session. Instructions for managing cookies in common browsers are available through the browser's built-in help documentation.

4 Data Sharing and Disclosure

tj66 does not sell, rent, or trade your personal data to third parties for commercial or marketing purposes under any circumstances. However, in order to operate the platform and comply with our legal obligations, we do share certain data with the following categories of third parties, each of which is bound by contractual data protection obligations:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Visa, and Mastercard gateway partners receive transaction data necessary to process your deposits and withdrawals. These entities process financial data under their own regulatory frameworks and privacy policies.
• Identity verification providers: Third-party KYC and AML screening services receive the identity and document data you submit during verification. These providers are contractually prohibited from using your data for any purpose other than the verification services they provide to tj66.
• Game technology providers: Studios and platform providers including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe receive technical session data necessary to deliver their game content to your device. These providers do not receive your identity or financial data.
• Platform infrastructure providers: Cloud hosting and content delivery providers who store and transmit platform data on behalf of tj66. These providers operate under strict data processing agreements and may not access or use your data independently.
• Legal and regulatory authorities: tj66 will disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where we are legally required to do so, or where we have a good-faith belief that disclosure is necessary to prevent fraud, money laundering, or harm to persons.

Any international transfer of personal data — for example to service providers whose infrastructure is located outside Bangladesh — is conducted under appropriate contractual safeguards designed to ensure that your data receives a standard of protection equivalent to that described in this Policy.

5 Data Retention

tj66 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law and our licensing obligations. The general retention periods we apply are as follows:

• Active account data: Retained for the full duration of your account with tj66, plus a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements.
• Transaction records: Financial transaction data including deposit and withdrawal records is retained for a minimum of seven (7) years from the date of the transaction to satisfy financial record-keeping obligations.
• KYC and identity documents: Copies of identity documents submitted for verification are retained for five (5) years following account closure, or longer if required by a regulatory authority or ongoing legal proceeding.
• Support communications: Customer support correspondence is retained for three (3) years from the date of the interaction to enable quality assurance review and to assist in resolving recurring issues.
• Analytics data: Anonymised and aggregated analytics data, from which individual players cannot be identified, may be retained indefinitely for platform improvement purposes.
• Marketing opt-in records: Records of your marketing consent preferences are retained for as long as your account is active and for three (3) years following account closure to demonstrate compliance with consent obligations.

When the applicable retention period expires, personal data is securely deleted or anonymised in accordance with tj66's internal data destruction procedures. Where deletion is not immediately possible due to backup infrastructure constraints, data is isolated from active processing and scheduled for deletion at the next available backup cycle.

6 Data Security Measures

tj66 applies a layered security architecture to protect personal data against unauthorised access, loss, alteration, or disclosure. Our key technical and organisational security measures include:

• Transport layer security: All communications between player devices and tj66 servers are encrypted using TLS 1.2 or higher. Certificates are maintained and renewed through an automated certificate management process.
• Password protection: Player passwords are never stored in plain text. tj66 applies industry-standard hashing algorithms with per-record salting so that even in the unlikely event of a data breach, raw passwords remain unrecoverable.
• Access controls: Access to player data within tj66's internal systems is restricted on a need-to-know basis. Role-based access controls ensure that operational staff can only access the minimum data necessary to perform their assigned function.
• Two-factor authentication: tj66 supports SMS-based two-factor authentication for player accounts and requires multi-factor authentication for all administrative access to backend systems containing player data.
• Intrusion detection and monitoring: tj66 operates continuous network monitoring and intrusion detection systems. Anomalous access patterns trigger automated alerts and manual review by the security operations team.
• Penetration testing: tj66 engages independent third-party security firms to conduct periodic penetration testing of the platform. Critical vulnerabilities identified through testing are remediated on a priority basis before being disclosed in any public security reporting.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in material risk to affected players, tj66 will notify impacted account holders promptly and will take all reasonable steps to contain, investigate, and remediate the incident.

7 Your Privacy Rights

As a tj66 account holder, you have the following rights in relation to your personal data. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Privacy Rights Request" and include sufficient information to verify your identity. tj66 will acknowledge your request within three (3) business days and respond in full within thirty (30) calendar days.

Please note that certain rights are subject to limitations and exceptions. For example, tj66 cannot erase financial transaction records that must be retained for anti-money laundering compliance, even where a deletion request is submitted. In all cases where a request cannot be fulfilled in full, tj66 will explain the reason clearly and advise on any available alternatives.

8 Contact and Complaints

8.1 How to Contact tj66 About Privacy

For any question, concern, or request relating to this Privacy Policy or the way tj66 handles your personal data, please contact our Data Protection team using the details below. All privacy-related communications must be in writing to ensure we have a clear record of your request and can respond accurately.

Email: [email protected]
Subject line: Privacy Policy Enquiry
Response time: Within 3 business days (Bangladesh Standard Time, UTC+6)

8.2 Policy Updates

tj66 reserves the right to amend this Privacy Policy at any time to reflect changes in our data practices, changes in applicable law, or improvements to the platform. When material changes are made, tj66 will notify registered players via email to their registered address and will update the "Last updated" date at the top of this page. Your continued use of the tj66 platform following notification of a material change constitutes your acceptance of the revised Privacy Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how tj66 protects your data. The current version will always be accessible at https://tj66.club/privacy-policy.