Privacy Policy — How 666bc Protects Your Data

This Privacy Policy ("Policy") describes how 666bc ("we", "us", "our", or "the Platform") collects, processes, stores, and protects personal data belonging to individuals ("Players", "Users", "you") who access or register on the 666bc platform at https://666bc.app. This Policy applies to all users of the 666bc website and any associated mobile-optimised interfaces, regardless of the device used to access the platform.

By registering an account, depositing funds, or continuing to use 666bc after this Policy has been published or updated, you acknowledge that you have read and understood its contents and consent to the data processing practices described herein. If you do not agree with any part of this Policy, please discontinue use of the platform and contact our support team to request account closure.

This Policy should be read alongside the Terms & Conditions and the Responsible Gaming page, which together form the complete framework governing your relationship with 666bc.

666bc collects personal data through several channels: directly from you when you register or interact with the platform, automatically through your use of the site , and from third-party service providers involved in payment processing and identity verification. The categories of personal data we collect are set out below.

Registration & Account Data

When you create a 666bc account, we collect the following information:

• Full legal name as it appears on your government-issued identification document.
• Date of birth (used to verify that you meet the 18+ age requirement).
• Residential address, including city (Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, or other).
• Email address (used for account communications and verification).
• Mobile phone number (used for account security and transaction notifications).
• Username and hashed password (we do not store your password in plain text under any circumstances).

Identity Verification (KYC) Data

As part of our Know Your Customer obligations, we may request and store copies of:

• Government-issued photo identification (National ID card, passport, or driving licence).
• Proof of residential address (utility bill, bank statement, or official correspondence).
• Proof of payment method ownership (bKash account screenshot, Nagad account screenshot, or bank statement).

Transactional & Financial Data

We record all deposits, withdrawals, bet placements, game results, and bonus transactions associated with your account. This includes the payment method used (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, Mastercard), transaction amounts in BDT (৳), timestamps, and transaction reference numbers.

Technical & Behavioural Data

When you access 666bc, our servers automatically collect technical information including your IP address, device type, operating system, browser type and version, screen resolution, referring URL, pages visited, session duration, and clickstream data. This information is used to ensure platform security, detect fraud, improve site performance, and personalise your experience.

Communications Data

If you contact 666bc via live chat, email ([email protected]), or any other support channel, we retain records of those communications for quality assurance, dispute resolution, and regulatory compliance purposes.

666bc processes your personal data only for specific, legitimate purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which we use your personal data are described below.

Account Management and Service Delivery

Your registration data is used to create and maintain your 666bc account, verify your identity, process deposits and withdrawals, and deliver the betting and casino services you have signed up to use. Without this data, it would not be possible to provide you with a personalised, secure player account.

Age Verification and Legal Compliance

We use your date of birth and KYC documents to confirm that you are at least 18 years of age before granting access to real-money gambling features. This is a legal and ethical obligation that 666bc takes seriously. Players who cannot be age-verified will not have access to deposit or betting functionality.

Fraud Prevention and Platform Security

Technical and behavioural data — including IP addresses, device fingerprints, and session patterns — is analysed by 666bc's automated fraud detection systems. This analysis helps us identify and prevent account takeover attempts, multi-accounting, bonus abuse, money laundering, and other forms of fraudulent activity that could harm genuine players and the integrity of the platform.

Responsible Gaming Monitoring

666bc uses data about your betting behaviour, session frequency, deposit patterns, and self-declared limits to monitor for indicators of problem gambling. Where our systems identify potential signs of harmful behaviour, our responsible gaming team may reach out to you directly. This processing is carried out in the interests of player welfare.

Marketing Communications

With your explicit consent, we may use your email address and mobile number to send you promotional offers, bonus notifications, and news about 666bc's cricket betting markets (BPL, IPL, T20 World Cup) and casino games. You may opt out of marketing communications at any time by updating your preferences in your account dashboard or by replying "STOP" to any SMS communication. Opting out of marketing does not affect transactional communications such as deposit confirmations or withdrawal notifications.

Analytics and Platform Improvement

Aggregated and anonymised data is used to analyse platform performance, identify popular features, diagnose technical issues, and guide product development decisions. In its anonymised form, this data cannot be used to identify any individual player.

666bc does not sell your personal data. We do not share your personal information with third parties for their own marketing purposes. There are, however, limited and specific circumstances in which we share data with trusted partners and service providers in order to deliver the 666bc service.

Payment Processors

To process deposits and withdrawals, we share relevant financial information with our payment partners including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and the card networks (Visa and Mastercard). These partners receive only the minimum information necessary to execute the specific transaction and are contractually prohibited from using that information for any other purpose.

Game Content Providers

666bc sources its casino games from certified third-party studios including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive a session token and anonymised game-play data for the purpose of delivering their game content. They do not receive your full name, contact details, or financial records.

Identity Verification Services

We may engage specialist third-party identity verification providers to assist with KYC document checks. These providers process your identification documents under strict confidentiality obligations and are not permitted to retain your documents after verification is complete.

Legal and Regulatory Disclosure

666bc may be required to disclose your personal data in response to a valid legal obligation, court order, or request from a competent authority. We will always endeavour to notify you of such a disclosure request unless we are legally prohibited from doing so. We will challenge any disclosure request that we believe to be disproportionate or legally deficient.

Business Transfers

In the event of a merger, acquisition, or sale of all or part of 666bc's assets, player data may be transferred to the successor entity as part of that transaction. Affected players will be notified via their registered email address prior to any such transfer taking effect, and the successor entity will be bound by the terms of this Privacy Policy.

666bc uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, and to analyse how players use the site. A cookie is a small text file placed on your device when you visit the platform. Cookies do not contain executable code and cannot access other data stored on your device.

Types of Cookies We Use

Managing Your Cookie Preferences

You may configure your browser to refuse all cookies, to alert you when a cookie is being set, or to delete cookies after each session. Please note that disabling essential cookies will prevent certain core platform features — including account login and deposit processing — from functioning correctly. Instructions for managing cookies in popular browsers (Chrome, Firefox, Safari, Samsung Internet) are available from each browser provider's support documentation.

666bc does not respond to browser "Do Not Track" signals, as there is currently no universally accepted standard for how such signals should be interpreted. However, you retain full control over analytical and functional cookies through your browser settings.

666bc retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention schedule applies to the main categories of personal data we hold.

• Account registration data: Retained for the lifetime of your account and for a minimum of 5 years following account closure, to satisfy anti-money-laundering record-keeping requirements.
• KYC documents: Retained for a minimum of 5 years from the date of verification or account closure, whichever is later.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction, in accordance with financial record-keeping best practice.
• Technical and log data: Retained for up to 12 months for security and fraud analysis purposes, then deleted or anonymised.
• Support communications: Retained for up to 3 years from the date of the last communication, to support dispute resolution and quality assurance.
• Marketing consent records: Retained for the duration of your account and for 2 years following withdrawal of consent, as evidence of the consent previously given.

When personal data reaches the end of its retention period, it is securely deleted from our systems or anonymised in a manner that makes re-identification impossible. Anonymised data may be retained indefinitely for statistical and analytical purposes.

Player data is stored on servers located in secure data centres. Access to stored data is protected by multi-factor authentication, role-based access controls, and comprehensive audit logging. Physical security at our data centres includes 24/7 monitoring, biometric access controls, and environmental protections.

666bc takes the security of your personal data seriously. We implement a layered security approach combining technical, organisational, and procedural controls to protect player data from unauthorised access, alteration, disclosure, or destruction.

Technical Controls

All data in transit between your device and 666bc's servers is encrypted using TLS 1.2 or higher. Sensitive data at rest — including KYC documents and financial records — is encrypted using AES-256 encryption. Our platform is protected by a web application firewall (WAF) and DDoS mitigation systems that monitor incoming traffic around the clock.

Access Controls

Access to systems holding personal data is restricted to authorised 666bc personnel based on their specific job responsibilities. All staff with access to player data undergo background screening prior to employment and receive regular data protection training. Privileged access to production systems requires multi-factor authentication and is subject to session recording and review.

Vulnerability Management

666bc conducts regular internal security assessments and periodic third-party penetration tests to identify and remediate vulnerabilities in our platform. Critical security patches are applied on an expedited schedule. Our security team monitors threat intelligence feeds relevant to the online gambling and fintech sectors.

Incident Response

In the event of a confirmed data security incident, 666bc's incident response plan is activated immediately. Affected players will be notified via their registered email address as promptly as possible, with information about the nature of the incident, the data potentially affected, and the steps being taken to address it. 666bc will cooperate fully with any regulatory investigation arising from a security incident.

As a 666bc player, you have a number of rights in relation to the personal data we hold about you. These rights are set out below. To exercise any of these rights, please contact our support team via live chat or at [email protected] (plain text — not a clickable link). We will respond to all valid requests within 30 days.

Please note that some of these rights are subject to limitations. For example, we cannot delete data that we are legally required to retain for anti-money-laundering or financial record-keeping purposes. Where a request cannot be fulfilled in full, we will explain the specific reason in our response.

666bc will not charge a fee for processing a data rights request unless the request is manifestly unfounded or excessive. In such cases, we may charge a reasonable administrative fee or decline to act on the request, and we will notify you of this decision with an explanation.

666bc reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or platform features. The revised Policy will be published on this page with an updated "Last updated" date at the top of the document.

Where a material change is made to this Policy — for example, a change to how we share data with third parties or a new purpose for which we use your data — we will notify registered players via their registered email address at least 14 days before the change takes effect. Continued use of the 666bc platform after the effective date of any amendment constitutes acceptance of the revised Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how 666bc protects your personal data. If you have any questions about this Policy or our data practices, please contact our support team at [email protected] (displayed as plain text — not a clickable link). We are committed to addressing any privacy concern you raise promptly and transparently.