Privacy Policy

Version: 1.0  |  Last Updated: 12 November 2026

1. Introduction

Welcome to Sathi66, operated through sathi66nepal.com (hereinafter referred to as "the Platform", "we", "us", or "our"). We are committed to protecting the personal information of every individual who visits, registers with, or transacts on the Platform. This Privacy Policy explains what personal data we collect, why we collect it, how we use and share it, and what rights you hold regarding your information.

By accessing or using the Platform, you acknowledge that you have read, understood, and agree to the practices described in this document. If you do not agree with any part of this Policy, please discontinue use of the Platform immediately. This Privacy Policy forms an integral part of our broader legal framework alongside our Terms and Conditions and our Responsible Gaming Policy, both of which we encourage you to review. Where any conflict arises between this Policy and those documents, this Privacy Policy governs matters relating to personal data.

2. Data We Collect

We collect personal data only to the extent necessary for providing a secure, compliant, and enjoyable experience on the Platform. The categories of data we process are described below.

2.1. Data You Provide Directly

• Identity Data: Full name, date of birth, gender, and nationality, collected during account registration to verify eligibility.
• Contact Data: Email address, phone number, and postal address, used for account communications and verification.
• Authentication Data: Username, password (stored in hashed, encrypted form), and security question answers.
• Financial Data: Payment method details including digital wallet identifiers (e.g., eSewa, Khalti, IME Pay, Fonepay), bank account references for ConnectIPS transfers, and card metadata for Visa/Mastercard transactions. We do not store full card numbers on our servers.
• Identity Verification Documents: Copies of government-issued identification (e.g., national ID card, passport, or driving licence) and proof of address when requested for Know Your Customer (KYC) or anti-money laundering (AML) compliance.
• Responsible Gaming Data: Self-imposed deposit limits, cooling-off periods, self-exclusion requests, and any information voluntarily submitted through our Responsible Gaming tools.

2.2. Data Collected Automatically

• Technical Data: IP address, browser type and version, operating system, device identifiers, screen resolution, and time zone.
• Usage Data: Pages visited, games played, session duration, click-stream data, deposit and withdrawal activity, and bet history.
• Cookie and Tracking Data: Information collected via cookies, web beacons, and similar technologies as described in Section 6.
• Geolocation Data: Approximate location derived from your IP address for access-control and fraud-prevention purposes.

2.3. Data Received from Third Parties

• Payment Processors: Transaction status, reference numbers, and fraud-screening outcomes provided by payment gateways such as PrabhuPay, CellPay, QR-based Fonepay network, and international card schemes.
• Identity Verification Providers: Electronic KYC results confirming document authenticity and sanction-list screening outcomes.
• Analytics Partners: Aggregated behavioural insights from third-party analytics platforms.

3. How We Use Your Data

We process your personal data for specific, explicit, and legitimate purposes. We do not use your data for any purpose incompatible with those listed below.

3.1. Account Management and Service Delivery

We use identity, contact, and authentication data to create and maintain your account, process deposits and withdrawals via Nepal-popular payment channels, deliver customer support, and notify you of changes to the Platform or these policies.

3.2. Compliance and Fraud Prevention

Financial data, identity verification documents, and usage data are processed to meet obligations under applicable anti-money laundering rules, to verify that users meet the minimum age requirement of 18 years, to detect and prevent fraudulent or abusive activity, and to respond to lawful requests from public authorities.

3.3. Responsible Gaming

Responsible gaming data and behavioural usage patterns are analysed to identify indicators of problem gambling, enforce self-exclusion or limit settings, and present appropriate interventions in line with our Responsible Gaming Policy.

3.4. Personalisation and Marketing

With your consent, we may use contact and usage data to send promotional offers, bonuses, and platform updates tailored to your preferences. You may withdraw marketing consent at any time through your account settings or by contacting us at [email protected].

3.5. Analytics and Platform Improvement

Technical and usage data help us understand how the Platform is used, identify and resolve technical issues, optimise game performance, and improve user experience across all devices.

3.6. Legal Claims and Dispute Resolution

We may retain and process relevant personal data to establish, exercise, or defend legal claims arising from your use of the Platform, including disputed transactions or complaints.

4. Legal Bases for Processing

Every processing activity we carry out rests on at least one of the following lawful bases. Where multiple bases apply, we identify the primary basis below.

Where we rely on legitimate interests, we conduct a balancing test to confirm that our interests are not overridden by your fundamental rights and freedoms. You may request details of this assessment by contacting our Privacy team at [email protected].

5. Data Sharing & Third Parties

We do not sell, rent, or trade your personal data. We share your information only where strictly necessary and under appropriate data-protection safeguards.

5.1. Categories of Recipients

• Payment Service Providers: Processors such as eSewa, Khalti, IME Pay, Fonepay, ConnectIPS, PrabhuPay, CellPay, Visa, Mastercard, and bank-transfer intermediaries receive the financial data required to complete your transactions.
• Identity Verification & KYC Partners: Third-party providers that perform electronic document verification, age confirmation, and sanctions-list screening.
• IT Infrastructure & Hosting Providers: Cloud hosting and security vendors who store Platform data under strict contractual confidentiality obligations.
• Analytics & Marketing Technology Providers: Platforms that process aggregated or pseudonymised data to help us understand user behaviour and deliver relevant communications, subject to your consent.
• Regulatory & Law Enforcement Authorities: We disclose data when required by a court order, lawful government request, or applicable legal obligation.
• Professional Advisors: Lawyers, auditors, and compliance consultants bound by professional confidentiality duties.

5.2. Business Transfers

In the event of a merger, acquisition, or asset sale affecting the Platform, your personal data may be transferred to the successor entity. We will provide notice via the Platform or by email prior to such a transfer and will ensure that the receiving entity maintains standards consistent with this Policy.

6. Cookies & Tracking Technologies

The Platform uses cookies and similar tracking technologies to deliver core functionality, analyse usage, and support marketing activities.

6.1. Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function, including session authentication and security tokens. These cannot be disabled.
• Performance & Analytics Cookies: Collect anonymous statistics on how visitors interact with the Platform, helping us identify improvements. Enabled by default; you may opt out.
• Functional Cookies: Remember your language preferences, display settings, and responsible gaming choices to improve your experience.
• Marketing & Targeting Cookies: Used, with your consent, to deliver relevant promotional content and to measure the effectiveness of marketing campaigns.

6.2. Managing Your Cookie Preferences

When you first visit the Platform, a cookie-consent banner will appear. You may accept all cookies, reject non-essential cookies, or customise your preferences by category. You can update your choices at any time through the Privacy Settings option in your account dashboard. Additionally, most browsers allow you to delete or block cookies through their settings; however, disabling strictly necessary cookies may impair the Platform's functionality.

7. Data Security

We implement a layered set of technical and organisational measures designed to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction.

7.1. Technical Measures

• Transport Layer Security (TLS): All data transmitted between your device and the Platform is encrypted using industry-standard TLS protocols.
• Data Encryption at Rest: Sensitive data, including KYC documents and financial references, is stored in encrypted form using AES-256 or equivalent encryption standards.
• Access Controls: Role-based access ensures that only authorised personnel can view or process personal data relevant to their function.
• Intrusion Detection & Monitoring: Automated systems monitor network traffic and user activity logs for suspicious patterns in real time.
• Penetration Testing: Regular security assessments are conducted by qualified third parties to identify and remediate vulnerabilities.

7.2. Organisational Measures

Staff with access to personal data receive regular training on data-protection obligations. All personnel and third-party processors handling your data are bound by confidentiality agreements. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority and, where required, affected users without undue delay.

8. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law, whichever is longer.

• Active Account Data: Retained for the full duration of your account relationship with the Platform.
• Transaction and Financial Records: Retained for a minimum of five (5) years following the transaction date to meet AML and financial record-keeping requirements.
• KYC and Identity Verification Documents: Retained for a minimum of five (5) years after account closure or the end of the business relationship.
• Responsible Gaming Records: Self-exclusion and limit records are retained for the full period of any restriction plus an additional period to prevent re-registration during cooling-off intervals.
• Marketing Consent Records: Retained until you withdraw consent, plus a reasonable period thereafter to demonstrate compliance.
• Technical and Log Data: Generally retained for up to twelve (12) months, unless a specific security investigation or legal proceeding requires a longer retention period.

When personal data is no longer required, we securely delete or anonymise it in accordance with our internal data-destruction procedures.

9. Your Rights

Depending on applicable data-protection law, you may have the following rights concerning your personal data. We will respond to all verified requests within 30 days of receipt, with possible extensions of up to a further 60 days for complex or multiple requests, in which case we will notify you.

9.1. Right of Access

You have the right to request a copy of the personal data we hold about you, together with information about how and why we process it. This is sometimes called a Subject Access Request (SAR). Submit your request to [email protected] with sufficient detail to allow us to identify your account.

9.2. Right to Rectification

If any personal data we hold is inaccurate or incomplete, you have the right to request that we correct or supplement it without undue delay. For account-level data such as your name or contact details, you may also update this information directly through your account profile settings.

9.3. Right to Erasure ("Right to Be Forgotten")

You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent on which processing is based, or where processing is unlawful. This right is subject to overriding legal obligations—for example, we cannot erase transaction records that we are legally required to retain for AML compliance.

9.4. Right to Restriction of Processing

You may request that we restrict the processing of your data in certain circumstances, including where you contest the accuracy of the data, where processing is unlawful but you oppose deletion, or where we no longer need the data but you require it for a legal claim.

9.5. Right to Data Portability

Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to request that we transmit it directly to another controller where technically feasible.

9.6. Right to Object

You have the right to object at any time to processing based on our legitimate interests, including profiling carried out for direct marketing purposes. Where you object to direct marketing, we will cease processing your data for that purpose immediately. For other legitimate-interests processing, we will assess whether our compelling grounds override your rights.

9.7. Rights Related to Automated Decision-Making

Where we make decisions about you solely through automated means that produce significant effects—such as automated fraud-risk scoring that results in account restriction—you have the right to request human review of that decision, to express your point of view, and to contest the outcome by contacting our support team at [email protected].

9.8. Right to Withdraw Consent

Where we rely on your consent as the legal basis for processing, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal. To withdraw consent for marketing communications, use the unsubscribe link in any email we send you or update your preferences in your account dashboard.

9.9. Right to Lodge a Complaint

If you believe we have not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with the relevant data-protection supervisory authority in your jurisdiction. We encourage you to contact us first at [email protected] so that we have the opportunity to address your concern directly.

10. International Data Transfers

The Platform is primarily operated for users located in Nepal. However, some of the third-party service providers we engage—including cloud hosting providers, analytics platforms, and certain payment processors—may process personal data in countries outside Nepal. Where personal data is transferred internationally, we take steps to ensure that an adequate level of protection is maintained.

10.1. Transfer Safeguards

Transfers to service providers in countries that do not provide a level of data protection equivalent to applicable Nepali standards are governed by one or more of the following safeguards:

• Standard Contractual Clauses (SCCs): Contractual terms that require the recipient to protect data to the same standard we apply.
• Data Processing Agreements: Binding agreements that restrict the recipient's use of personal data to specified, agreed purposes.
• Adequacy Determinations: Where the recipient country has been recognised as providing an adequate level of data protection by the relevant authority.

You may request further information about the safeguards governing any specific international transfer by contacting [email protected].

11. Minors

The Platform is strictly intended for individuals who are at least 18 years of age. We do not knowingly collect, process, or store personal data from anyone under this age. During registration, all users must confirm that they meet the minimum age requirement and may be asked to submit identity documents to verify their age as part of our KYC process.

If we become aware that personal data has been collected from an individual who is under 18 years of age, we will promptly close the relevant account, delete the associated data, and refund any deposits in accordance with our Terms and Conditions. If you believe that a minor has registered on the Platform, please contact us immediately at [email protected] so that we can take swift corrective action. For further guidance on protecting young people, please refer to our Responsible Gaming Policy.

12. Changes to This Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our data-processing activities, applicable law, or best practices in data protection. When we make material changes, we will:

• Update the Last Updated date at the top of this document;
• Post a prominent notice on the Platform's homepage or account dashboard for a reasonable period after the change takes effect; and
• Where required by law or where the change materially affects your rights, send a notification to the email address associated with your account.

Your continued use of the Platform after the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you should discontinue use of the Platform and may request account closure by contacting [email protected]. We encourage you to review this page periodically to remain informed about how we protect your personal data.

13. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or the way we process your personal data, please reach out to us through the channels below. We are committed to addressing all inquiries promptly and transparently.

13.1. General Support

• Email: [email protected]
• Website: sathi66nepal.com

13.2. Privacy & Data Protection Enquiries

• Privacy / DPO Email: [email protected]

When submitting a data-rights request, please include your registered email address and a brief description of your request so that we can verify your identity and respond efficiently. We will not charge a fee for exercising your rights unless a request is manifestly unfounded or excessive, in which case we may charge a reasonable administrative fee or decline the request, notifying you of our reasons.

13.3. Responsible Gaming Support Resources (Nepal)

If you or someone you know is experiencing difficulties with gambling, the following organisations offer confidential support and counselling services relevant to users in Nepal:

• TPO Nepal (Transcultural Psychosocial Organization Nepal) – Psychosocial support and counselling; Baluwatar, Kathmandu. Tel: +977-01-4537124 | [email protected]
• Nawa Upakar Nepal Sudhar Kendra – Specialised addiction treatment programmes including gambling addiction recovery; Tokha Road, Kathmandu 44600. Website: nawaupakar.com
• CMC Nepal (Community Mental Care Nepal) – Mental health and psychosocial support across 70+ districts; Thapathali, Kathmandu. Tel: +977-01-4102037 | [email protected]
• Chaitanya Institute for Mental Health Nepal – De-addiction and psychosocial rehabilitation centre; Pasikot, Budhanilkantha, Kathmandu. Tel: +977-1-4370324
• Koshish Nepal – Rights-based mental health and psychosocial inclusion support; Balkhu, Kathmandu. Tel: +977-01-5122130 | [email protected]
• GamCare (International Online Support) – Free information, advice, and live chat support for anyone affected by gambling harms; www.gamcare.org.uk

You can also access self-exclusion tools, deposit limits, and additional safeguards at any time through the Responsible Gaming section of the Platform. We encourage all users to gamble responsibly and seek professional help without hesitation if gambling is causing harm.