bt666 Privacy Policy

This Privacy Policy sets out the practices of bt666 ("bt666", "we", "us", "our") with respect to the collection, use, storage, and disclosure of personal data relating to individuals ("you", "your", "player") who access or use the bt666 platform at bt666.io, including all associated betting, casino, and account management services available through the platform.

bt666 is committed to protecting the privacy and personal data of all players. We operate this platform primarily for the Bangladesh market, and we recognise the trust our players place in us when they share their personal information. This Privacy Policy is designed to give you a clear and honest account of how that information is handled from the moment you register an account through to the closure of your relationship with bt666.

This Privacy Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which are available on the bt666 platform. Capitalised terms not defined in this Policy carry the meanings given to them in the bt666 Terms & Conditions.

For the purposes of applicable data protection legislation, bt666 acts as the data controller in respect of all personal data collected through and processed in connection with the bt666 platform. As data controller, bt666 determines the purposes for which and the means by which personal data is processed.

If you have any questions about how bt666 handles your personal data, or if you wish to exercise any of the rights described in Section 9 of this Policy, you may contact bt666's data protection point of contact at the support email address provided in Section 15 of this Policy.

bt666 collects the following categories of personal data in connection with the operation of the platform and the provision of betting and casino services to players in Bangladesh:

bt666 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (other than as required by applicable KYC regulations), or data concerning health (other than self-reported responsible gaming information provided voluntarily by the player).

bt666 collects personal data through the following channels and mechanisms:

• Direct submission by you: when you complete the bt666 registration form, submit KYC documents, make a deposit or withdrawal request, contact our support team, or update your account profile.
• Automated technical collection: when you access the bt666 platform, our servers automatically record technical data including your IP address, device identifiers, browser characteristics, and session information. This data is collected via server logs and session management technologies.
• Cookies and similar technologies: bt666 uses first-party cookies and local storage to manage your login session, remember your preferences, and collect anonymised usage statistics. Full details are provided in Section 10 of this Policy.
• Third-party game providers: when you play games provided by studios such as Pragmatic Play, Evolution Gaming, or Spribe through the bt666 platform, those providers may share game session data (e.g., game outcomes, session duration) with bt666 for account management and fraud prevention purposes.
• Payment processors: when you initiate a deposit or withdrawal via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, the relevant payment processor shares transaction confirmation data with bt666 to enable balance crediting and withdrawal processing.
• Identity verification services: bt666 may use third-party KYC service providers to verify the authenticity of documents submitted during the identity verification process. These providers return a verification status to bt666; they do not retain your documents on bt666's behalf beyond their own stated retention periods.

bt666 processes personal data only where there is a lawful basis for doing so. The following table summarises the primary purposes for which bt666 processes personal data and the corresponding legal basis for each:

bt666 does not sell, rent, or trade your personal data to any third party for commercial purposes. bt666 may share your personal data only in the following limited and controlled circumstances:

• Service providers and processors: bt666 engages contracted third-party service providers to perform specific functions on its behalf, including payment processing (bKash, Nagad, Rocket, Upay, Visa, Mastercard networks), KYC verification, customer support technology, and hosting infrastructure. These providers are permitted to use your data only to perform the contracted service and are bound by strict confidentiality obligations.
• Game content providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, and Spribe receive limited session data necessary to deliver their game content through the bt666 platform. This data exchange is governed by data processing agreements between bt666 and each studio.
• Law enforcement and regulatory authorities: bt666 will disclose personal data to competent authorities where required to do so by a valid legal order, court order, or regulatory directive. bt666 will seek to notify you of any such disclosure where legally permitted to do so.
• Fraud prevention and security agencies: In cases of suspected fraud, money laundering, or platform abuse, bt666 may share relevant account data with specialist fraud prevention agencies or industry databases to protect the integrity of the platform and its player community.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of bt666's business, your personal data may be transferred to the acquiring entity as part of the transaction, subject to equivalent privacy protections being maintained.

The bt666 platform is operated with infrastructure that may involve the processing of personal data in jurisdictions outside Bangladesh. Where personal data is transferred to a country that does not provide an equivalent level of data protection, bt666 implements appropriate safeguards to ensure that your data remains protected to the same standard as described in this Privacy Policy.

Safeguards used for international transfers include standard contractual clauses incorporated into data processing agreements with service providers, technical security measures including end-to-end encryption in transit, and access controls that restrict the handling of personal data to authorised personnel only.

If you would like further information about the specific safeguards applied to any international data transfer involving your personal data, please contact bt666 support using the details provided in Section 15 of this Policy.

bt666 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, including the satisfaction of any legal, regulatory, accounting, or reporting obligations. The following general retention periods apply:

• Account and identity data: retained for the duration of your active account relationship with bt666, plus a minimum of 5 years following account closure, to satisfy anti-money laundering record-keeping requirements.
• Financial and transaction data: retained for a minimum of 5 years from the date of the transaction to satisfy financial record-keeping obligations.
• KYC documents: retained for the period required by applicable identity verification regulations, typically 5 years from submission or account closure, whichever is later.
• Customer support communications: retained for 3 years from the date of the final communication in a support thread, to enable bt666 to refer to prior interactions in the event of a dispute.
• Responsible gaming records: retained for the lifetime of the account and for 5 years post-closure. Self-exclusion records are retained indefinitely to prevent re-registration during an active exclusion period.
• Technical and usage data (server logs): retained for up to 12 months in identifiable form, after which they are anonymised or deleted.
• Marketing consent records: retained for the duration of your consent plus 3 years as evidence of the consent having been given.

Where bt666 retains data beyond the immediate service relationship for legal compliance purposes, that data is held in restricted access storage and is not used for active marketing or operational purposes. At the end of the applicable retention period, data is securely deleted or anonymised using industry-standard data destruction methods.

As a player whose personal data is processed by bt666, you hold the following rights in respect of your personal data. bt666 is committed to responding to all valid rights requests within 30 days of receipt:

• Right of Access: you have the right to request a copy of the personal data bt666 holds about you and to receive confirmation of the purposes for which it is being processed.
• Right of Rectification: you have the right to request correction of any inaccurate or incomplete personal data held by bt666. Some corrections may require supporting documentation (e.g., an updated NID for a name change).
• Right to Erasure ("Right to be Forgotten"): you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where the processing was unlawful. This right is subject to bt666's legal retention obligations — data required for regulatory compliance cannot be deleted until the applicable retention period has elapsed.
• Right to Restriction of Processing: you may request that bt666 restricts processing of your data in certain circumstances, such as while the accuracy of the data is being contested, or where you have objected to processing based on legitimate interests.
• Right to Data Portability: where processing is based on consent or contract and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: you have the right to object at any time to processing of your personal data where bt666 relies on legitimate interests as the legal basis. bt666 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: where processing is based on consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

bt666 uses cookies and similar technologies on the bt666 platform. Cookies are small text files stored on your device by your browser when you visit a website. They serve various functions, from keeping you logged in to helping bt666 understand how players use the platform so we can improve it.

bt666 uses the following categories of cookies:

• Strictly Necessary Cookies: these cookies are essential for the bt666 platform to function and cannot be switched off. They include session authentication tokens that keep you logged in, CSRF protection tokens that prevent cross-site request forgery attacks, and load-balancing cookies that direct your requests to the appropriate server. No personal data from these cookies is used for any purpose other than platform operation.
• Analytical / Performance Cookies: bt666 uses first-party analytical cookies to understand aggregate usage patterns on the platform — for example, which game categories are most visited, which pages generate the most support requests, and where players tend to exit the registration flow. This data is anonymised and used solely for internal platform improvement. bt666 does not use third-party analytics services that transfer data to external advertising networks.
• Functionality Cookies: these cookies remember your preferences within the bt666 platform, such as your preferred language (English), display settings, and recently viewed game categories. Disabling these cookies may reduce the personalised experience of the platform but will not prevent core functionality from working.

You may control cookie behaviour through your browser settings. Most modern browsers allow you to block, delete, or receive warnings before cookies are stored. Note that blocking strictly necessary cookies will prevent you from logging in to your bt666 account. For guidance on managing cookies in your specific browser, refer to your browser's help documentation.

bt666 operates a strict 21+ age policy. The bt666 platform is not intended for, directed at, or designed to attract individuals under the age of 21. bt666 does not knowingly collect personal data from anyone under 21 years of age.

If bt666 discovers or has reasonable grounds to believe that personal data has been collected from an individual who is under 21 years of age, bt666 will immediately suspend the relevant account, forfeit any winnings accumulated by the underage player, and permanently delete all personal data associated with that account from its active systems as soon as it is no longer required for legal compliance purposes.

bt666 may send you promotional communications about offers, bonuses, new game releases, and seasonal promotions (such as those tied to Eid, Pohela Boishakh, or major cricket tournaments like the BPL and T20 World Cup) where you have provided explicit consent to receive such communications at the time of registration or subsequently through your account settings.

Marketing communications from bt666 are sent via email to your registered email address and, where you have consented, via SMS to your registered mobile number. bt666 does not engage in unsolicited telephone marketing.

• You may withdraw consent for marketing communications at any time by updating your communication preferences in your bt666 account settings.
• Alternatively, you may contact bt666 support to request removal from all marketing lists. Removal is processed within 5 business days.
• Withdrawing marketing consent does not affect your ability to use the bt666 platform or receive transactional communications (such as deposit confirmations, withdrawal notifications, and account security alerts), which are sent on the basis of contractual necessity.

bt666 does not share your contact details with third-party marketers for the purpose of sending you promotions on their behalf. Any promotional email that appears to come from bt666 but originates from a third-party sender should be treated with suspicion and reported to bt666 support, as it may represent a phishing attempt.

bt666 takes the security of your personal data seriously and has implemented a layered set of technical and organisational measures to protect it against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption on all data in transit between your device and bt666 servers, ensuring that your login credentials, payment details, and personal information cannot be intercepted in transit.
• Encrypted storage for all sensitive personal data fields at rest within bt666's database infrastructure, including identity documents, financial identifiers, and authentication credentials (passwords are stored as one-way cryptographic hashes and are never stored in recoverable plain text).
• Access controls that restrict access to personal data to bt666 personnel and contractors who have a legitimate operational need to handle it, governed by role-based permission systems and documented access logs.
• Two-factor authentication (2FA) availability for player accounts, enabling an additional layer of security beyond password-based login.
• Regular security assessments of bt666 infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Incident response procedures that ensure prompt detection of, and response to, any data security incident. In the event of a breach that is likely to result in risk to players, bt666 will notify affected individuals without undue delay.

bt666 reserves the right to amend, update, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or operational circumstances. The effective date shown at the top of this Policy will be updated whenever a material revision is made.

Where a change is material — for example, where bt666 intends to use your personal data in a new way that was not contemplated by the version of this Policy you accepted at registration — bt666 will provide you with advance notice of the change via email or a prominent platform notification before the change takes effect. Your continued use of the bt666 platform after the effective date of a revised Privacy Policy constitutes acceptance of the updated terms.

bt666 encourages you to review this Privacy Policy periodically to stay informed of how your personal data is being handled. Archived versions of previous Privacy Policy editions are available on request by contacting bt666 support.

If you have any questions, concerns, or requests relating to this Privacy Policy or to bt666's handling of your personal data, please contact the bt666 support team. All privacy-related enquiries are treated with priority and handled in strict confidence.

bt666 support email: support at bt666.io

When contacting bt666 about a data privacy matter, please include your registered username or registered email address so that our team can locate your account and respond accurately to your request. bt666 aims to acknowledge all privacy enquiries within 2 business days (Bangladesh Standard Time, UTC+6) and to provide a substantive response within 30 calendar days.