bbk666 Privacy
Policy

1. Data We Collect

bbk666 collects personal data from players in Bangladesh through several channels: account registration, identity verification (KYC), payment processing, platform usage, and direct communication with our support team. The table below summarises the categories of data we collect and the primary source of each.

Data Category	Specific Data Points	Collection Source
Identity Data	Full legal name, date of birth, gender, National ID (NID) number, passport number	Registration form; KYC document submission
Contact Data	Mobile phone number, email address, residential address (division, district, upazila)	Registration form; account settings updates
Financial Data	bKash/Nagad/Rocket mobile wallet numbers, Visa/Mastercard last-4 digits, transaction amounts, deposit and withdrawal history	Payment gateway interactions
Verification Documents	NID card image, passport photo page, proof of address document, selfie for liveness check	KYC document upload portal
Technical Data	IP address, device type, browser type and version, operating system, screen resolution, session timestamps	Automatic collection via platform logs
Behavioural Data	Pages visited, games played, bet amounts, session durations, feature interactions, responsible gaming tool usage	Platform analytics system
Communication Data	Live chat transcripts, email correspondence, support ticket content	Customer support interactions

1.1 Data You Provide Voluntarily

Certain data is provided directly by you — for example, the information you enter during account registration, the documents you upload during KYC verification, and the messages you send to our support team. This data is required to operate your account. Failure to provide mandatory fields will prevent account creation or withdrawal processing.

1.2 Data Collected Automatically

When you access the bbk666 platform, our servers automatically record technical data including your IP address, device identifiers, and session timestamps. This data is used for fraud prevention, platform security, and aggregate performance monitoring. It is not used to build individual advertising profiles.

1.3 Data We Do Not Collect

bbk666 does not collect biometric data beyond liveness-check selfies required for KYC. We do not collect real-time location data, contacts from your device, camera or microphone access, or any data not described in this Privacy Policy. We do not knowingly collect personal data from individuals under 18 years of age.

2. How We Use Your Data

bbk666 uses the personal data described in Section 1 for clearly defined purposes. We do not use your data in ways that are incompatible with the purposes listed below. Where a new use arises that is materially different from those described here, we will notify you and, where required, obtain your consent before proceeding.

2.1 Account Management

Your identity and contact data are used to create and maintain your bbk666 account, authenticate your login sessions, enable account recovery, and communicate important account-related notifications — including security alerts, payment confirmations, and policy update notices.

2.2 Identity Verification and Fraud Prevention

KYC document data and technical data (IP address, device fingerprint) are processed to verify that you meet the minimum age requirement of 18 years, to confirm your identity before processing withdrawals, and to detect and prevent fraudulent activity, multi-accounting, and money laundering on the platform.

2.3 Payment Processing

Financial data is processed solely to execute deposits and withdrawals via your chosen payment method — bKash, Nagad, Rocket, Upay, Visa, Mastercard, or supported Bangladeshi bank transfer. bbk666 does not store full card numbers or complete mobile banking credentials; only the minimum reference data required to route transactions is retained.

2.4 Responsible Gaming Compliance

Behavioural data — including session durations, betting patterns, and deposit frequency — is analysed by our responsible gaming systems to identify players who may be exhibiting signs of problem gambling. Where such patterns are detected, our team may proactively contact you to offer responsible gaming tools or account restrictions. See our Responsible Gaming page for full details.

2.5 Platform Improvement and Analytics

Aggregated, anonymised behavioural and technical data is used to understand how players interact with the bbk666 platform, identify performance issues, and prioritise feature development. This analysis is conducted at a population level and does not involve decisions made about individual players based solely on automated profiling.

2.6 Legal and Regulatory Compliance

bbk666 may process and retain your data to the extent required by applicable anti-money laundering (AML) regulations, financial crime reporting obligations, or a lawful request from a competent authority. In such cases, data processing is a legal necessity and does not require your separate consent.

2.7 Marketing Communications

With your explicit consent (given at registration or updated in your account preferences), bbk666 may send you promotional communications about bonuses, seasonal offers (such as Eid specials or Pohela Boishakh promotions), and new game launches. You may withdraw consent at any time by updating your communication preferences in your account settings or by contacting support via Live Chat. Withdrawing marketing consent does not affect your ability to use the platform.

3. Legal Basis for Processing

bbk666 processes your personal data on one or more of the following legal bases, depending on the specific processing activity involved.

• Contractual Necessity: Processing your identity data, contact data, and financial data is necessary to perform the contract between you and bbk666 — specifically, to operate your account, process your bets, and pay out your winnings.
• Legal Obligation: KYC verification, AML transaction monitoring, and retention of financial records are required by applicable law. bbk666 cannot waive these obligations regardless of your preferences.
• Legitimate Interests: Processing technical and behavioural data for platform security, fraud prevention, and aggregate analytics serves the legitimate interests of bbk666 and its player community, provided those interests are not outweighed by your privacy rights. You may object to processing based on legitimate interests — see Section 7 (Your Privacy Rights) for how to exercise this right.
• Consent: Marketing communications and the use of non-essential analytics cookies are conducted only on the basis of your freely given, specific, and informed consent. You may withdraw consent at any time without penalty.

4. Data Sharing and Disclosure

bbk666 does not sell, rent, or trade your personal data. We share personal data only in the limited circumstances described below, and only to the extent necessary for the specific purpose involved.

4.1 Payment Service Providers

To process deposits and withdrawals, bbk666 shares the minimum necessary financial reference data with your chosen payment provider — bKash, Nagad, Rocket, Upay, Visa, Mastercard, or your selected Bangladeshi bank. These providers operate under their own privacy policies and are independently responsible for the data they hold in connection with your transactions.

4.2 Game Content Providers

Game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — may receive a pseudonymous player session token when you launch one of their games. This token does not contain your name, email address, or payment details. It is used solely to manage the game session and calculate your wager outcomes. Game providers are contractually prohibited from using this data for any purpose other than game delivery.

4.3 Identity Verification Partners

Where bbk666 uses a third-party KYC technology partner to assist with document verification and liveness checks, your identity documents and selfie may be processed by that partner's system. All such partners operate under strict data processing agreements with bbk666 and are permitted to use your data only for identity verification purposes. Documents are not retained by KYC partners beyond the verification process.

4.4 Legal and Regulatory Authorities

bbk666 may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required to do so by law, court order, or in connection with the investigation of suspected financial crime. Such disclosures are made without notifying the affected player where notification is prohibited by law or would prejudice an active investigation.

4.5 Business Transfers

In the event that bbk666 undergoes a merger, acquisition, or sale of all or part of its assets, player data may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and any material change to how their data is processed that results from it, in advance where practicable.

4.6 No Advertising Data Sales

Under no circumstances does bbk666 sell, license, or otherwise transfer personal data to third-party advertisers, data brokers, social media platforms, or marketing networks. Your data is not used to serve you targeted advertising on third-party websites or applications.

5. Cookies and Tracking

bbk666 uses cookies and similar tracking technologies — including session storage and local storage — to operate the platform, remember your preferences, and understand aggregate platform usage. This section explains the types of cookies we use and your options for managing them.

5.1 Types of Cookies Used

Cookie Type	Purpose	Duration	Essential?
Session Cookies	Maintain your authenticated login state during a platform session	Session (deleted on browser close)	Yes
Preference Cookies	Remember your language, display preferences, and last-visited game category	30 days	No
Security Cookies	CSRF protection tokens; device trust flags for 2FA bypass periods	7–30 days	Yes
Analytics Cookies	Aggregate page-view counts and feature interaction heatmaps (no individual profiling)	90 days	No
Responsible Gaming Cookies	Track session duration locally to trigger reality-check notifications	Session	Yes

5.2 No Third-Party Advertising Cookies

bbk666 does not deploy cookies from third-party advertising networks, social media platforms, or retargeting services. You will not see bbk666 advertisements served to you on other websites as a result of your activity on our platform.

5.3 Managing Cookies

You can control non-essential cookies through your browser's cookie settings. Disabling essential cookies (session and security cookies) will prevent the platform from functioning correctly and may result in your inability to log in or complete transactions. Your browser documentation provides instructions for managing cookies on your specific browser and device.

6. Data Retention

bbk666 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The retention schedules below apply from the date of last activity or account closure, whichever is later.

Data Category	Retention Period	Reason
Account and Identity Data	Duration of account + 5 years post-closure	AML regulatory requirement; dispute resolution
Financial Transaction Records	Duration of account + 7 years post-closure	Financial record-keeping obligations
KYC Documents	Duration of account + 5 years post-closure	Identity verification audit trail
Betting and Gaming History	Duration of account + 3 years post-closure	Dispute resolution; responsible gaming analysis
Support Communications	3 years from date of communication	Quality assurance; dispute evidence
Marketing Consent Records	Duration of account + 2 years post-closure	Compliance with consent regulations
Technical / Log Data	90 days from collection	Security monitoring; rolling window only
Analytics Data (aggregated)	Indefinitely (anonymised — no personal identifiers)	Platform improvement; no privacy impact

6.1 Deletion Process

Upon expiry of the applicable retention period, personal data is securely deleted from active systems and any backup archives in which it appears, subject to a rolling backup purge cycle not exceeding 90 days. Where data cannot be fully deleted due to a legal hold or ongoing investigation, access to that data is restricted to authorised personnel only, and processing is suspended pending resolution.

7. Your Privacy Rights

As a bbk666 player, you hold the following rights over your personal data. These rights may be exercised at any time by contacting our support team via Live Chat or by emailing [email protected] with the subject line "Data Rights Request". We will respond within 30 calendar days of receiving your request.

7.1 Identity Verification for Rights Requests

To protect your privacy, bbk666 will verify your identity before processing any data rights request. You will be asked to confirm your registered email address, mobile number, and provide a one-time verification code sent to your registered contact. This verification step ensures that data is not disclosed to, corrected by, or deleted at the request of an unauthorised third party.

7.2 Response Timeframes

bbk666 will acknowledge receipt of your data rights request within 5 business days and provide a full response within 30 calendar days. Where a request is particularly complex or involves a large volume of data, we may extend the response period by a further 30 days, in which case we will notify you of the extension and the reason for it within the initial 30-day period.

8. Data Security Measures

bbk666 implements a layered security architecture to protect your personal data against unauthorised access, loss, alteration, or disclosure. The following technical and organisational measures are in place at all times.

8.1 Technical Measures

• TLS 1.3 Encryption in Transit: All data transmitted between your device and the bbk666 platform is encrypted using TLS 1.3. Connections using older, insecure protocols are rejected.
• AES-256 Encryption at Rest: Sensitive data fields — including identity documents, financial reference data, and KYC records — are encrypted at the storage layer using AES-256.
• Hashed Password Storage: Account passwords are never stored in plain text. They are hashed using a bcrypt algorithm with an adaptive cost factor, making brute-force attacks computationally infeasible.
• Two-Factor Authentication: SMS-based 2FA is available to all players and is strongly recommended. Accounts with 2FA enabled receive an additional layer of login protection beyond password credentials.
• Rate Limiting and Bot Detection: Login endpoints, registration flows, and payment requests are protected by rate-limiting controls and bot detection systems to prevent credential stuffing and automated fraud attacks.
• Access Controls: Internal access to player data is restricted on a least-privilege basis. Only authorised personnel with a specific operational need can access personal data, and all such access is logged and auditable.

8.2 Organisational Measures

• Regular security training for all personnel with access to player data.
• Vendor due diligence and contractual data processing obligations for all third-party service providers handling player data.
• Periodic internal security reviews and vulnerability assessments of the platform infrastructure.
• A documented incident response procedure for data breaches, including player notification protocols.

8.3 Data Breach Response

In the event of a data breach that is likely to result in a risk to your rights and freedoms, bbk666 will notify affected players without undue delay — and no later than 72 hours after becoming aware of the breach — via the email address registered on their account. The notification will describe the nature of the breach, the categories and approximate number of individuals affected, the likely consequences, and the measures taken or proposed to address the breach.

9. Third-Party Services

The bbk666 platform integrates a number of third-party services to deliver its full range of casino and sports betting features. Each integration is governed by a data processing agreement that restricts the third party's use of player data to the specific purpose of the integration.

9.1 Game Providers

Live casino, slot, fishing game, and sports betting content is delivered by licensed game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you launch a game, a pseudonymous session token is passed to the provider. Your real identity, email address, and payment details are never shared with game providers.

9.2 Payment Gateways

Deposit and withdrawal transactions are routed through payment gateway infrastructure that connects to bKash, Nagad, Rocket, Upay, and international card networks. These gateways receive the transaction reference data necessary to process the payment. They are independently regulated financial service providers and operate under their own applicable data protection frameworks.

9.3 Platform Analytics

bbk666 uses a self-hosted or privacy-first analytics solution to monitor aggregate platform usage. No individually identifiable player data is shared with external analytics vendors. IP addresses captured during analytics are truncated to remove the final octet before storage, preventing re-identification.

9.4 Links to Third-Party Sites

The bbk666 platform does not contain links to third-party websites beyond those required for payment processing within the platform. If you navigate away from bbk666 independently, the privacy practices of any third-party site you visit are outside our control and responsibility.

10. Policy Updates

bbk666 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. All updates will be communicated to registered players via the email address on their account and/or a prominent notice on the platform.

10.1 Notification of Material Changes

Where a change to this Privacy Policy is material — meaning it meaningfully affects your rights, the data we collect, or the purposes for which we use it — bbk666 will provide at least 14 days' advance notice before the change takes effect. For changes required by law on shorter notice, we will notify players as soon as practicable.

10.2 Version History

The version number and effective date of this Privacy Policy are displayed in the revision bar at the top of this page. Previous versions of this Privacy Policy are available on request by contacting our support team via Live Chat or by emailing [email protected].

10.3 Continued Use as Acceptance

Your continued use of the bbk666 platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the revised terms. If you do not agree with any material change, you may close your account and request deletion of your personal data in accordance with Section 7 of this Policy before the change takes effect.