bn666 Privacy Policy

This Privacy Policy describes how bn666 ("bn666", "we", "us", or "our") collects, uses, stores, discloses, and protects the personal data of registered players and visitors ("you" or "your") who access the bn666 online betting and casino platform at https://bn666.io and all associated sub-pages and services.

bn666 is an online betting and gaming platform serving players in Bangladesh. We are committed to handling personal data responsibly and transparently. This policy has been drafted in alignment with internationally recognised data protection principles, including purpose limitation, data minimisation, storage limitation, integrity and confidentiality, and data subject rights.

This Privacy Policy should be read alongside our Terms & Conditions, which govern the overall relationship between you and bn666. In the event of conflict between this policy and the Terms & Conditions on a matter specifically relating to personal data, this Privacy Policy shall prevail.

By using the bn666 platform, accessing our games, or completing the registration process, you acknowledge that you have reviewed this Privacy Policy and consent to the data practices described herein. Where we rely on your consent as the legal basis for processing, you have the right to withdraw that consent at any time by contacting us at [email protected].

bn666 collects personal data through several channels: directly from you when you register or interact with the platform, automatically through your use of the site, and from third-party service providers where this is necessary to deliver our services. The categories of data we collect are described below.

2.1 Registration & Identity Data

When you create a bn666 account, we collect the following information:

• Full legal name (as it appears on your government-issued identification document)
• Date of birth (to verify that you are aged 21 or above)
• Residential address (street address, city, district, and postal code within Bangladesh)
• Mobile phone number (used for account verification and support communications)
• Email address (used for account communications, notifications, and support)
• Chosen username and encrypted password
• Preferred payment method details (mobile wallet number for bKash, Nagad, Rocket, or Upay; or card details for Visa/Mastercard — stored in tokenised form only)

2.2 Identity Verification (KYC) Data

To comply with anti-money-laundering (AML) obligations and to enforce our 21+ age restriction, bn666 may request the following documentary evidence before approving withdrawals or activating certain account features:

• A copy of a government-issued photo identification document (National Identity Card, Passport, or Birth Certificate)
• Proof of residential address (utility bill, bank statement, or similar document dated within the last three months)
• Proof of payment method ownership (screenshot of mobile banking profile or card statement)

2.3 Financial Transaction Data

bn666 records all financial transactions conducted through your account. This includes deposit amounts, dates and times, payment method used, withdrawal requests, processing status, and any transaction identifiers assigned by the payment provider. We do not store full mobile banking PINs, card CVV numbers, or online banking passwords.

2.4 Gaming & Betting Activity Data

We record all gameplay and betting activity associated with your account, including:

• Games played, sports markets wagered on, bet amounts, odds, and outcomes
• Session start and end times, session duration, and session frequency
• Bonus claims, wagering progress, and promotional participation history
• Responsible gaming tool settings (deposit limits, cooling-off periods, self-exclusion status)

2.5 Technical & Usage Data

When you visit the bn666 platform, we automatically collect certain technical information through server logs, cookies, and similar technologies:

• IP address and approximate geographic location (country and city level)
• Device type, operating system, and browser version
• Pages visited, links clicked, and time spent on each page
• Referring URL (the page from which you arrived at bn666.io)
• Error logs and performance metrics

2.6 Communications Data

If you contact our support team via email, we retain records of those communications, including the content of your messages and any attachments, for the purposes of resolving your query, training our support staff, and maintaining a dispute resolution audit trail.

The following table summarises the primary data categories and their collection source:

bn666 uses the personal data we collect for clearly defined purposes. We do not use your data for any purpose that is incompatible with the purposes described below without first obtaining your explicit consent or establishing a separate legal basis.

• Account creation and management: To register your account, verify your identity, manage your profile settings, and maintain your account in good standing throughout your relationship with bn666.
• Service delivery: To process your deposits and withdrawals, calculate winnings, credit bonuses, and deliver the betting and gaming services you request.
• Identity verification and AML compliance: To verify that you are who you claim to be, that you are at least 21 years of age, and to detect and prevent money laundering, fraud, and other financial crimes as required by applicable law.
• Responsible gaming: To monitor your gaming activity for signs of problem gambling behaviour, to enforce deposit limits and self-exclusion orders you have placed, and to contact you proactively if our responsible gaming tools identify patterns of concern.
• Customer support: To respond to your enquiries, resolve disputes, investigate complaints, and maintain a record of support interactions for quality assurance purposes.
• Security and fraud prevention: To detect suspicious login attempts, identify duplicate accounts, investigate bonus abuse, and protect the integrity of the bn666 platform and all registered players.
• Platform improvement: To analyse aggregated, anonymised usage data to understand how players interact with the platform, identify technical issues, and develop improvements to our games, interface, and customer experience.
• Marketing communications: Where you have opted in to receive marketing communications, to send you promotional offers, bonus alerts, and tournament announcements relevant to your interests. You may opt out at any time by contacting [email protected].
• Legal and regulatory compliance: To fulfil our obligations under applicable laws, to respond to lawful requests from regulatory or law enforcement authorities, and to maintain records required for audit purposes.

bn666 processes personal data only where we have a valid legal basis to do so. The legal bases we rely on are as follows:

1. Contractual necessity: Processing that is necessary to perform our contract with you — i.e., to provide you with the betting and gaming services described in our Terms & Conditions. This covers account management, payment processing, and game delivery.
2. Legal obligation: Processing that is required to comply with a legal obligation, including AML regulations, KYC requirements, data retention obligations mandated by law, and responding to lawful requests from public authorities.
3. Legitimate interests: Processing that is necessary for the legitimate interests of bn666, provided those interests are not overridden by your privacy rights. This covers fraud prevention, platform security, responsible gaming monitoring, and aggregated analytics for service improvement.
4. Consent: Where we rely on your consent as the legal basis — specifically for optional marketing communications — you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out before withdrawal.

bn666 does not sell, rent, or trade your personal data to third parties. We may share your data with the following categories of recipient only where strictly necessary and subject to appropriate data protection safeguards:

• Payment service providers: bKash, Nagad, Rocket, Upay, Visa, and Mastercard receive the minimum data necessary to process your deposits and withdrawals. Each provider operates under its own privacy policy and is independently responsible for the data it holds.
• Game content providers: Third-party game studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) receive a session token and anonymised player identifier to facilitate game delivery and RNG auditing. They do not receive your full name, address, or payment details.
• Identity verification partners: Where automated KYC checks are used, a specialist identity verification provider may process your ID document and selfie solely for the purpose of verifying your identity. Such providers are contractually bound to use your data only for this purpose.
• IT infrastructure providers: Cloud hosting, database, and content delivery network (CDN) providers that support the technical operation of the bn666 platform. These providers act as data processors under contract with bn666 and may not use your data for their own purposes.
• Regulatory and law enforcement authorities: Where required by law or in response to a valid legal request (court order, regulatory direction, or similar), bn666 may disclose personal data to the relevant authority. We will notify you of such disclosure where we are legally permitted to do so.
• Professional advisors: Lawyers, auditors, and insurers who require access to certain data in the course of providing professional services to bn666, subject to binding confidentiality obligations.

All third-party data processors engaged by bn666 are required to process personal data only on our documented instructions, to maintain appropriate technical and organisational security measures, and to delete or return data at the end of the engagement.

The bn666 platform uses cookies and similar technologies to operate correctly, maintain your session, remember your preferences, and collect usage analytics. The categories of cookies used are described below:

• Strictly necessary cookies: These cookies are essential for the platform to function. They maintain your login session, store your language and currency preferences, and support security features such as CSRF protection. These cookies cannot be disabled without severely impairing platform functionality.
• Functional cookies: These cookies remember choices you have made (such as responsible gaming limit settings and notification preferences) to provide a more personalised experience. They do not track your activity across other websites.
• Analytics cookies: bn666 uses aggregated, anonymised analytics to understand how players navigate the platform, which features are used most frequently, and where technical errors occur. This data is used solely to improve our service and is not linked to your individual identity.
• Security cookies: Short-lived cookies used to detect unusual activity patterns, prevent automated abuse, and protect against account takeover attacks.

bn666 does not use third-party advertising or retargeting cookies. We do not allow any third-party advertiser to place cookies on your device via the bn666 platform. Your browsing activity on bn666.io is not shared with advertising networks.

Most browsers allow you to control cookies through their settings. You may block or delete cookies, but note that doing so may impair certain platform features, including your ability to remain logged in between sessions.

bn666 employs a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security practices include, but are not limited to:

• SSL/TLS encryption: All data transmitted between your device and the bn666 platform is encrypted using industry-standard Transport Layer Security (TLS) protocols. The padlock icon in your browser's address bar confirms that your connection is encrypted.
• Encryption at rest: Sensitive personal data stored in our databases — including KYC documents and payment method details — is encrypted at rest using AES-256 or equivalent encryption standards.
• Access controls: Access to personal data within bn666's internal systems is restricted to authorised personnel only, on a need-to-know basis. Staff with access to personal data are subject to confidentiality obligations and periodic security training.
• Password hashing: User passwords are never stored in plaintext. They are stored using a strong one-way hashing algorithm with a unique salt per user, ensuring that even in the event of a database breach, passwords cannot be recovered.
• Penetration testing: bn666 conducts regular security assessments to identify and remediate vulnerabilities before they can be exploited.
• Incident response: In the event of a data breach that poses a risk to your rights and freedoms, bn666 will notify affected players without undue delay once the breach has been identified and contained.

While bn666 takes every reasonable precaution to protect your data, no method of electronic transmission or storage is completely secure. You are responsible for keeping your account credentials confidential and for notifying us immediately if you suspect unauthorised access to your account.

bn666 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any legal obligations that require longer retention. The following retention periods apply:

When data reaches the end of its retention period and is no longer required for any active legal purpose, it is securely deleted or anonymised in a manner that prevents re-identification. Anonymised data may be retained indefinitely for aggregate statistical analysis.

Where you request account closure, we will deactivate your account promptly. However, we are required to retain certain records for the periods specified above even after account closure to comply with AML and audit obligations. This retained data is held in a restricted archive and is not used for any active processing purposes.

As a data subject, you have the following rights with respect to the personal data bn666 holds about you. To exercise any of these rights, please submit a written request to [email protected] with sufficient information to verify your identity and specify the right you wish to exercise.

• Right of access: You have the right to request a copy of the personal data we hold about you, together with information about how it is being processed. We will respond to verified access requests within thirty (30) days.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Please note that changes to your registered name or date of birth will require documentary evidence confirming the correct details.
• Right to erasure: You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been processed unlawfully. This right is subject to our legal retention obligations — we cannot delete data we are legally required to retain.
• Right to restrict processing: You may request that we restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have disputed is being verified.
• Right to data portability: Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing based on our legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, or the processing is necessary for the establishment, exercise, or defence of legal claims.
• Right to withdraw consent: Where we process your data on the basis of consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

bn666 will respond to all verified data rights requests within thirty (30) days of receipt. Where a request is particularly complex or where we have received a large number of requests, we may extend this period by a further two months. We will inform you of any such extension within the initial thirty-day period.

The bn666 platform is strictly intended for adults aged 21 years and above. bn666 does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step during the account registration and KYC processes.

If bn666 discovers that personal data has been collected from a person under 21 years of age — whether through registration fraud, misrepresentation, or any other means — the account will be immediately suspended, all balances will be frozen pending investigation, and the personal data of the minor will be deleted from our active systems as quickly as practicable, subject to any mandatory legal retention obligations.

If you are a parent or guardian and believe that your child has registered an account on the bn666 platform, please contact us immediately at [email protected]. We will investigate the matter promptly and take appropriate action in accordance with this policy.

The bn666 platform integrates with several third-party services to deliver its functionality. When you interact with these third-party services — for example, by completing a payment through bKash or playing a game delivered by Pragmatic Play — those third parties may collect and process your data according to their own privacy policies.

bn666 is not responsible for the data practices of third-party service providers operating under their own independent data controller arrangements. We encourage you to review the privacy policies of the following categories of third-party provider whose services you may interact with through the bn666 platform:

• Mobile payment providers: bKash, Nagad, Rocket, Upay
• Card payment networks: Visa, Mastercard
• Game studios: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi

The bn666 website does not contain links to external third-party websites beyond the service integrations described above. We are not responsible for the privacy or security practices of any external site that you may navigate to independently.

bn666 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. When we make material changes to this policy, we will notify registered players by email and/or by posting a prominent notice on the bn666 platform prior to the changes taking effect.

The "Last Updated" date at the top of this page indicates when the current version of the policy became effective. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your data. Your continued use of the bn666 platform after any changes to this policy constitutes your acceptance of the revised terms.

Where a proposed change materially reduces your privacy rights or introduces a new category of data processing that requires your consent, we will obtain your explicit agreement before the change applies to your account. In cases where you do not agree to a material change, you may close your account by contacting [email protected] prior to the effective date of the change.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way bn666 processes your personal data, please contact our Data Protection team using the details below. We are committed to resolving all privacy-related enquiries promptly and transparently.

• Email: [email protected] (plain text — not a clickable link)
• Support hours: Available 24/7 — Bangladesh Standard Time (UTC+6)
• Response time: We aim to acknowledge all privacy enquiries within 48 hours and to provide a substantive response within 30 days.

When contacting us about a data rights request, please include your registered username and the email address associated with your account, along with a clear description of the right you wish to exercise. We may request additional verification before processing your request to ensure the security of your account data.

bn666 takes all privacy concerns seriously. If you are not satisfied with our response to your enquiry, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.