b6666 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") is issued by b6666 ("we", "us", "our", "the Platform") and governs the collection, use, storage, disclosure, and protection of personal data belonging to members, visitors, and prospective users ("you", "your") of the b6666 website at https://b6666.io and all associated services, applications, and features.

b6666 is committed to handling personal data responsibly and transparently. This Policy has been prepared in accordance with internationally recognised data protection principles and reflects the standards we apply across all operations. By creating an account, accessing the b6666 platform, or using any of its services, you acknowledge that you have read and understood this Privacy Policy.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which are incorporated herein by reference.

2. Data We Collect

The categories of personal data b6666 may collect and process include, but are not limited to, the following:

2.1 Identity Data

• Full legal name as it appears on official government-issued identification
• Date of birth
• National Identification (NID) number or passport number
• Scanned copies of government-issued photo identification and proof of address documents submitted during KYC verification
• Selfie or video verification image (where required for enhanced due diligence)

2.2 Contact Data

• Email address
• Mobile phone number (used for SMS verification and account security alerts)
• Residential address including division, district, and postal code (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh)

2.3 Financial Data

• Mobile wallet identifiers associated with bKash, Nagad, Rocket, and Upay accounts used for deposits and withdrawals
• Bank account details where bank transfers are used (Dutch-Bangla Bank, City Bank, BRAC Bank, and others)
• Transaction history including deposit amounts, withdrawal amounts, dates, and reference numbers
• Source of funds declarations for high-value accounts

2.4 Account & Gaming Data

• Username and encrypted password hash
• Account creation date and history of login sessions
• Game play history, bet records, wager amounts, win/loss records, and session durations
• Bonus claims, wagering progress, and promotional participation history
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion status)

2.5 Technical & Usage Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, browser type and version
• Pages visited, navigation paths, time spent on pages, and click events
• Cookie identifiers and session tokens (see Section 6)
• Referral source (how you arrived at the b6666 website)

2.6 Communications Data

• Records of correspondence between you and b6666 support, including email, live chat transcripts, and any written complaints
• Survey responses and feedback submitted voluntarily through the platform
• Marketing communication preferences and opt-in/opt-out records

3. How We Collect Data

b6666 collects personal data through the following channels:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in promotions.
• Automated technologies: Data collected automatically when you browse or use the platform, including cookies, server logs, and analytics tools (see Section 6).
• Third-party service providers: Identity verification data returned by KYC/AML partners following document checks. Payment confirmation data returned by mobile wallet and banking partners. Fraud risk scores returned by fraud prevention services.
• Publicly available sources: In limited circumstances, we may consult publicly available databases to verify information you have provided, particularly in connection with enhanced due diligence processes required under AML obligations.

4. Purposes & Legal Basis for Processing

b6666 processes personal data only where a valid legal basis exists. The table below sets out the primary purposes for which we process your data and the corresponding legal basis for each:

Purpose	Data Categories Used	Legal Basis
Account registration and management	Identity, Contact, Account	Contract performance
Identity verification (KYC/AML)	Identity, Financial	Legal obligation
Processing deposits and withdrawals	Financial, Account	Contract performance
Fraud detection and prevention	Technical, Financial, Identity	Legitimate interest / Legal obligation
Customer support	Identity, Contact, Communications	Contract performance
Responsible gaming monitoring	Account, Gaming	Legal obligation / Legitimate interest
Platform improvement and analytics	Technical, Usage	Legitimate interest
Marketing communications	Contact, Account	Consent (opt-in)
Legal and regulatory compliance	All categories as required	Legal obligation

5. Data Sharing

b6666 does not sell, rent, or trade personal data to any third party for their own marketing or commercial purposes. We share personal data only in the following circumstances and only to the extent strictly necessary:

5.1 Service Providers

We engage third-party companies to perform specific functions on our behalf, including payment processing (bKash, Nagad, Rocket, Upay, Visa, Mastercard network processors), identity verification and KYC/AML checks, fraud detection and risk management, cloud hosting and data centre infrastructure, and email and SMS delivery services. These providers act as data processors under binding data processing agreements and are not permitted to use your data for any purpose beyond the specific service they provide to b6666.

5.2 Game Technology Providers

Certain game data (such as bet amounts, game outcomes, and session identifiers) may be shared with our certified game technology partners — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — solely for the purpose of delivering and auditing game sessions. These providers are contractually bound to maintain the confidentiality and security of any data received.

5.3 Legal and Regulatory Authorities

b6666 may disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory bodies where required by applicable law, court order, or where we have a reasonable good-faith belief that disclosure is necessary to protect the rights, property, or safety of b6666, our members, or the general public.

5.4 Business Transfers

In the event that b6666 undergoes a merger, acquisition, restructuring, or sale of substantially all of its assets, personal data held by b6666 may be transferred to the successor entity as part of that transaction. We will provide notice of any such transfer through the platform prior to your data being subject to a different privacy policy.

6. Cookies & Tracking Technologies

b6666 uses cookies and similar tracking technologies on its website to ensure the platform functions correctly, to analyse usage patterns, and to deliver a personalised experience. Cookies are small text files stored on your device by your browser.

6.1 Types of Cookies We Use

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies that keep you logged in and security tokens that protect your account. These cookies cannot be disabled without significantly impairing the platform's functionality.
• Performance and analytics cookies: Used to collect anonymous, aggregated data on how members interact with the b6666 platform. This data helps us identify popular features, diagnose technical issues, and improve overall site performance.
• Functional cookies: Store your preferences such as language settings, preferred deposit method, and notification preferences so that you do not need to re-enter them on each visit.
• Marketing and targeting cookies: Used only where you have provided explicit consent, to deliver relevant promotional content based on your activity on the b6666 platform. These cookies do not track your activity on third-party websites.

6.2 Managing Cookies

You may adjust your cookie preferences through your browser settings at any time. Disabling strictly necessary cookies will affect your ability to access core platform features including account login. For all other cookie categories, disabling them will not prevent you from using the platform but may reduce the personalisation of your experience.

7. Data Retention

b6666 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention guidelines apply:

• Account data and gaming records: Retained for the duration of your active account plus a minimum of 5 years following account closure, in line with standard financial record-keeping requirements.
• KYC and identity verification documents: Retained for a minimum of 5 years from the date of last transaction or account closure, whichever is later, to satisfy AML obligations.
• Financial transaction records: Retained for a minimum of 5 years from the date of each transaction.
• Support correspondence: Retained for 3 years from the date of resolution of the relevant enquiry or complaint.
• Marketing consent records: Retained for the duration of your membership and for 3 years thereafter as evidence of consent status.
• Technical and usage logs: Typically retained for 12 months in rolling log archives unless required for longer periods in connection with a security investigation or legal matter.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that makes re-identification permanently impossible.

8. Data Security

b6666 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the b6666 platform
• Encryption of sensitive data fields (including financial identifiers and identity document references) at rest within our database infrastructure
• Multi-factor authentication (MFA) available to all members and mandatory for all internal administrative accounts
• Role-based access controls ensuring that b6666 staff can only access personal data to the extent required for their specific job function
• Regular internal security audits and vulnerability assessments of platform infrastructure
• Automated monitoring systems that detect and alert on unusual access patterns and potential data breach indicators in real time
• Staff training on data protection obligations and information security best practices, conducted on a regular basis

In the event of a data breach that is likely to result in a risk to your rights and freedoms, b6666 will notify affected members without undue delay and will take all reasonable steps to contain and remediate the breach. We will also fulfil any mandatory breach reporting obligations applicable to our operations.

9. Your Rights

As a b6666 member, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact our data team at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 5 business days and respond substantively within 30 days.

• Right of access: You may request a copy of all personal data we hold about you, along with information about how it is being used.
• Right to rectification: If any of the personal data we hold about you is inaccurate or incomplete, you may request that we correct it without delay.
• Right to erasure: You may request that we delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing has been unlawful. This right is subject to overriding legal retention obligations.
• Right to restrict processing: You may request that we temporarily limit the processing of your personal data while a dispute about its accuracy or the lawfulness of its processing is resolved.
• Right to data portability: Where processing is based on your consent or a contract with you, you may request that we provide your personal data in a structured, machine-readable format.
• Right to withdraw consent: Where processing is based solely on your consent (such as for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing that occurred before withdrawal.
• Right to object: You may object to processing that is based on legitimate interests, including profiling for direct marketing purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.

10. Minors

b6666 is strictly an adults-only platform. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been submitted by a person under 21, we will take immediate steps to delete that data and close the associated account. Any winnings generated by an underage player prior to discovery will be forfeited.

If you believe that a minor has registered an account on b6666, please notify us immediately at [email protected].

11. International Data Transfers

b6666's primary data infrastructure is hosted in secure data centres. In the course of delivering platform services, personal data may be processed by third-party service providers whose systems are located in different countries. Wherever personal data is transferred outside the originating jurisdiction, b6666 ensures that appropriate safeguards are in place — including contractual data protection clauses, technical security standards, and due diligence assessments of recipient organisations — before any transfer takes place.

b6666 does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without first implementing appropriate supplementary safeguards.

12. Changes to This Policy

b6666 reserves the right to update or amend this Privacy Policy at any time. Material changes — those that significantly affect your rights or how we process your data — will be communicated to registered members by email at least 14 days before the revised Policy takes effect. A notice will also be displayed on the b6666 platform during the notice period.

Minor updates, such as clarifications or corrections that do not materially affect your rights, may be made without advance notice. The "Last Updated" date at the top of this Policy will always reflect the date of the most recent revision. We encourage you to review this Policy periodically to stay informed of how b6666 protects your data.

Continued use of the b6666 platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms.

13. Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or the way b6666 handles your personal data, please reach out to our dedicated data protection team using the contact details below. We take all privacy enquiries seriously and will respond promptly.

• Email: [email protected] — please use the subject line "Privacy Enquiry" or "Data Rights Request" for fastest routing
• Response time: We aim to acknowledge all privacy-related enquiries within 5 business days (Bangladesh Standard Time, UTC+6) and to provide a substantive response within 30 calendar days
• Support hours: Available 24 hours a day, 7 days a week