bf666 Privacy Policy — How We Handle Your Personal Data

bf666 is an online sports betting and casino platform operating at https://bf666.io and serving the Bangladesh market. References to "bf666", "we", "us", and "our" in this Privacy Policy refer to the bf666 platform and the entity responsible for operating it. For the purposes of this Privacy Policy, bf666 acts as the data controller in respect of personal data collected from Members and visitors through the platform.

If you have any questions about who controls your personal data or about how to exercise your data rights, please contact us at the address set out in Section 14 of this Policy.

bf666 collects personal data in several categories depending on the nature of your interaction with the platform. The categories of data we collect are described in the table below.

bf666 collects personal data through the following means:

3.1 Directly From You

The majority of personal data we hold is provided directly by you in the course of your interaction with the bf666 platform. This includes data entered during account registration, data submitted as part of identity or payment verification, data provided when contacting bf666 support, and communication preferences you set in your account dashboard.

3.2 Automatically From Your Device

When you access the bf666 platform, certain technical data is collected automatically by our systems. This includes your IP address, the type and version of browser and operating system you are using, your device identifier, the pages you visit on the platform, and session timing data. This data is collected through server logs, cookies, and similar tracking technologies as described further in Section 6.

3.3 From Payment Providers

When you make a deposit or withdrawal using a payment method such as bKash, Nagad, Rocket, Upay, or a card payment provider, bf666 receives transaction confirmation data from those payment providers. This data is used solely to verify that the payment has been processed correctly and to match it to your account. bf666 does not receive or store your full payment credentials from third-party payment processors.

3.4 From Identity Verification Services

Where bf666 uses third-party identity verification services to assist with age verification or KYC (Know Your Customer) checks, those services may return verification results — such as a confirmation that the identity document submitted matches the account holder's declared name and date of birth — to bf666. bf666 stores verification outcomes but does not store the full identity document data beyond the period necessary to complete the verification process.

bf666 processes personal data only where there is a lawful basis for doing so. The primary lawful bases on which bf666 relies are as follows:

• Contractual Necessity: Much of the personal data bf666 processes is necessary to perform the contract between bf666 and the Member — specifically, to register an account, to accept deposits, to settle bets and pay out winnings, and to provide customer support. Without this processing, bf666 cannot provide its services to the Member.
• Legal Obligation: bf666 is required to process certain personal data in order to comply with applicable legal obligations, including age verification requirements (21+ policy), anti-money laundering (AML) obligations, and fraud prevention obligations. This processing is mandatory and cannot be refused by the Member.
• Legitimate Interests: bf666 processes certain technical and behavioural data on the basis of its legitimate interests in operating a safe, secure, and commercially sustainable platform. This includes fraud detection, platform security monitoring, responsible gaming risk assessment, and service improvement analytics. bf666 has conducted a balancing assessment and is satisfied that its legitimate interests are not overridden by Members' privacy interests in these contexts.
• Consent: Where bf666 sends promotional communications by email or SMS, it does so on the basis of your consent, which you may provide or withdraw at any time through your account notification preferences or by contacting [email protected].

bf666 uses the personal data it collects for the following purposes:

• Creating and managing your bf666 account, including verifying your identity and age in accordance with the 21+ policy;
• Processing deposits from and withdrawals to your nominated bKash, Nagad, Rocket, Upay, or bank account;
• Settling bets and game stakes, including recording outcomes and applying any applicable bonus terms;
• Delivering customer support services and resolving disputes or complaints submitted to [email protected];
• Sending transactional communications, such as deposit confirmations, withdrawal notifications, account security alerts, and policy update notices;
• Sending promotional communications (with your consent) about bf666 offers, new games, sports betting markets, cricket events such as BPL and T20 World Cup, and VIP programme updates;
• Monitoring for fraud, money laundering, account sharing, and other forms of platform abuse as described in the Terms & Conditions;
• Conducting responsible gaming risk assessments and applying appropriate safeguards such as deposit limits, session time alerts, and self-exclusion where necessary;
• Improving the bf666 platform through anonymised analytics — understanding which features are used most, identifying technical errors, and optimising the user experience for Members in Dhaka, Chittagong, Sylhet, and across Bangladesh;
• Complying with applicable legal obligations, including responding to lawful requests from competent authorities.

bf666 uses cookies and similar technologies to operate and improve the platform. A cookie is a small text file placed on your device by the bf666 platform when you visit. Cookies help bf666 keep you logged in, remember your preferences, and measure how the platform is being used.

6.1 Types of Cookies Used

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They include session authentication tokens, security cookies, and cookies that enforce responsible gaming restrictions you have set. These cookies cannot be disabled without impairing your ability to use bf666.
• Functional Cookies: These cookies remember choices you have made, such as your preferred language or display settings, so that you do not need to re-enter them on each visit.
• Analytics Cookies: bf666 uses analytics cookies to understand aggregated usage patterns on the platform. This data is used in anonymised form to improve the platform. It is not used to identify individual Members.

6.2 Managing Cookies

You can control cookie settings through your browser preferences. Most modern browsers allow you to block, delete, or be notified about cookies. Please note that disabling strictly necessary cookies will impair your ability to log in and use the bf666 platform. Disabling analytics cookies will not affect your ability to use the platform but will prevent bf666 from receiving aggregated usage insights about your session.

bf666 does not sell, rent, or trade personal data. We disclose personal data to third parties only in the circumstances described below, and only to the minimum extent necessary for the stated purpose.

7.1 Payment Processors

In order to process deposits and withdrawals, bf666 shares transaction data with payment processors including bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and City Bank. These processors receive only the data necessary to execute and confirm the specific transaction. They are contractually prohibited from using Member data for any other purpose.

7.2 Identity Verification Providers

Where bf666 uses third-party identity or age verification services to meet its KYC obligations, the identity documents and personal data necessary to complete verification are shared with those providers. These providers act as data processors on behalf of bf666 and are bound by contractual data processing obligations consistent with this Privacy Policy.

7.3 Legal and Regulatory Disclosure

bf666 may disclose personal data to competent authorities, law enforcement agencies, or other regulatory bodies where required to do so by applicable law, by a court order, or in response to a lawful investigation. In such cases, bf666 will disclose only the data specifically requested and will notify the affected Member where permitted by law to do so.

7.4 Fraud and Security Partners

bf666 may share limited technical data — such as IP addresses, device fingerprints, and transaction patterns — with fraud detection and platform security partners. This sharing is limited to data necessary to identify and prevent fraudulent activity and is conducted under contractual confidentiality obligations.

7.5 Business Transfers

In the event that the bf666 business or platform is transferred to a new operator, Member personal data may be transferred as part of that transaction. In such an event, bf666 will notify affected Members in advance and the new operator will be required to honour the commitments set out in this Privacy Policy or provide Members with the opportunity to close their accounts.

bf666 retains personal data for the periods set out below, after which data is securely deleted or anonymised unless a longer retention period is required by applicable law.

Where a Member exercises their right to erasure (see Section 10), bf666 will delete personal data earlier than the periods above where there is no overriding legal obligation to retain it. Data subject to an ongoing legal hold, regulatory investigation, or unresolved dispute will be retained until that matter is concluded.

bf666 applies a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include, but are not limited to:

• Encryption in Transit: All data transmitted between your device and the bf666 platform is encrypted using TLS (Transport Layer Security). The platform enforces HTTPS on all connections and does not permit unencrypted HTTP access to authenticated areas.
• Encryption at Rest: Personal data stored in bf666's databases and data stores is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to Member personal data within bf666's internal systems is granted on a strict need-to-know basis. Administrative access privileges are subject to multi-factor authentication and regular access reviews.
• Penetration Testing: bf666's platform undergoes regular security assessments, including penetration testing, to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: bf666 maintains a documented data breach response procedure. In the event of a data breach that is likely to result in significant risk to affected Members, bf666 will notify impacted Members promptly and take all necessary steps to contain the breach.
• Staff Training: All bf666 staff with access to Member data receive mandatory data security and privacy training on a regular basis.

As a bf666 Member, you hold the following rights in respect of the personal data we hold about you. To exercise any of these rights, please submit a written request to [email protected] from the email address registered to your bf666 account. bf666 will acknowledge your request within 5 business days and will endeavour to fulfil it within 30 days.

• Right of Access: You have the right to request a copy of the personal data that bf666 holds about you, along with information about how it is being processed. This is sometimes referred to as a Subject Access Request (SAR).
• Right to Rectification: If you believe that any personal data bf666 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Please note that bf666 may require verification documents before making corrections to identity data to prevent fraudulent amendment of account details.
• Right to Erasure: You have the right to request the deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you withdraw consent and there is no other lawful basis for processing. This right is subject to bf666's legal retention obligations described in Section 8.
• Right to Restrict Processing: In certain circumstances, you have the right to request that bf666 restricts its processing of your personal data — for example, while the accuracy of the data is being contested, or while an objection to processing is being considered.
• Right to Object: You have the right to object to the processing of your personal data where bf666 relies on legitimate interests as its lawful basis. You also have an unconditional right to opt out of direct marketing communications at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.
• Right to Data Portability: Where bf666 processes your data on the basis of consent or contractual necessity, and the processing is carried out by automated means, you have the right to receive a copy of your data in a structured, commonly used, machine-readable format.

The bf666 platform is strictly for adults aged 21 and above. bf666 does not knowingly collect personal data from persons under the age of 21. If you are under 21, you must not register an account or use the bf666 platform under any circumstances.

If bf666 becomes aware that personal data has been collected from a person under the age of 21, it will take immediate steps to delete that data and close the associated account in accordance with the eligibility provisions in the Terms & Conditions. If you believe that a person under 21 in your household has registered a bf666 account, please contact us immediately at [email protected] so that the account can be reviewed and closed promptly.

The bf666 platform may from time to time contain references to game providers, sports data providers, or payment partners. Where links or integrations to third-party services are present, please note that those third parties operate under their own privacy policies, which are entirely independent of this Privacy Policy. bf666 is not responsible for the privacy practices of third-party providers. We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of the bf666 platform.

bf666 reserves the right to amend this Privacy Policy at any time. When material changes are made, bf666 will notify registered Members by email or by a prominent notice displayed on the platform at least 7 days before the revised Policy takes effect. Non-material changes — such as typographical corrections or clarifications that do not alter the substance of the Policy — may be published without advance notice.

The effective date at the top of this page will always reflect the date of the most recent revision. Your continued use of the bf666 platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree with the revised Policy, you must stop using the platform and request account closure by contacting [email protected].

If you have any questions about this Privacy Policy, wish to exercise a data right, or wish to submit a complaint about the way bf666 has handled your personal data, please contact the bf666 support team using the details below:

• Email: [email protected]
• Subject line for data requests: Privacy Request — [Your Username]
• Response time: Acknowledgement within 5 business days; substantive response within 30 days
• Support hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)
• Language: English

bf666 takes all privacy complaints seriously. If you submit a formal complaint and are not satisfied with the outcome of bf666's internal review, you may pursue the matter through any applicable dispute resolution channel available to you under applicable law.