bd66 Privacy Policy

1. Introduction

bd66 is an online casino and sports betting platform serving adult players across Bangladesh and other permitted jurisdictions. We are committed to handling personal data responsibly, transparently, and in accordance with internationally recognised data protection standards. This Policy applies to all data collected through the bd66 website, mobile-optimised interface, customer support channels, and any other touchpoint through which you interact with bd66.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which are incorporated by reference. In the event of any conflict between this Policy and those documents on a data protection matter, this Policy prevails.

2. Data We Collect

bd66 collects the following categories of personal data:

2.1 Identity Data

• Full legal name as it appears on your government-issued identity document
• Date of birth
• Gender (where provided voluntarily)
• Nationality and country of residence
• Copies of identity documents submitted during KYC verification (e.g., National Identity Card, passport)

2.2 Contact Data

• Email address
• Mobile phone number
• Residential address (for verification purposes)

2.3 Financial Data

• Mobile financial service account identifiers (bKash, Nagad, Rocket, Upay numbers)
• Partial card details where Visa or Mastercard is used (we do not store full card numbers)
• Transaction history including deposit amounts, withdrawal amounts, and dates
• Source of funds documentation where requested

2.4 Technical Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser version
• Session timestamps and duration
• Pages visited, features used, and navigation paths within the platform

2.5 Gaming Activity Data

• Betting history including game type, stake, outcome, and timestamp
• Bonus and promotional activity
• Responsible gaming preferences (deposit limits, session limits, self-exclusion status)

2.6 Communications Data

• Content of support tickets, live chat transcripts, and email correspondence
• Records of promotional communications sent to you and your engagement with them

3. How We Collect Data

bd66 collects personal data through the following means:

• Direct collection: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting our support team, or participating in a promotion.
• Automated collection: Technical and behavioural data collected automatically as you use the platform, via server logs, cookies, and analytics tools.
• Third-party sources: Identity verification data from KYC partners; transaction confirmation data from payment processors; fraud and sanctions screening data from compliance data providers.

4. How We Use Your Data

bd66 uses the personal data it collects for the following purposes:

5. Legal Basis for Processing

bd66 processes personal data on the following legal grounds:

• Contract performance: Processing necessary to open and manage your account, process transactions, and deliver gaming services in accordance with our Terms & Conditions.
• Legal obligation: Processing required to comply with anti-money laundering regulations, identity verification requirements, and any lawful order from a competent authority.
• Legitimate interests: Processing necessary for fraud prevention, platform security, responsible gaming monitoring, and general service improvement, where those interests are not overridden by your privacy rights.
• Consent: Processing for the purpose of sending promotional communications, where you have expressly opted in to receive such communications. You may withdraw this consent at any time by contacting support or adjusting your account notification preferences.

6. Sharing Your Data

bd66 shares personal data only in the following circumstances and only to the extent strictly necessary:

6.1 Service Providers

bd66 engages trusted third-party service providers to support platform operations. These include payment processors (bKash, Nagad, Rocket, Upay, and card network partners), identity verification and KYC providers, game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and others), cloud infrastructure providers, and customer support tooling providers. All service providers are bound by contractual data processing agreements and are prohibited from using player data for their own purposes.

6.2 Legal and Regulatory Authorities

bd66 may disclose personal data to law enforcement agencies, regulatory bodies, financial intelligence units, or courts where required to do so by applicable law, a valid legal order, or where bd66 reasonably believes disclosure is necessary to prevent fraud, money laundering, or other serious criminal activity.

6.3 Business Transfers

In the event that bd66 undergoes a merger, acquisition, restructuring, or sale of assets, personal data held by bd66 may be transferred to the acquiring entity. Players will be notified of any such transfer via email or in-platform notification prior to their data being subject to a materially different privacy policy.

6.4 No Sale of Data

bd66 does not sell, rent, lease, or otherwise trade your personal data to third parties for their own marketing, profiling, or commercial purposes. This commitment is unconditional.

7. Cookies & Tracking Technologies

bd66 uses cookies and similar technologies (such as local storage and session tokens) to provide and improve the platform experience. The cookies we use fall into the following categories:

• Essential cookies: Required for the platform to function. These include session authentication cookies that keep you logged in, security tokens, and load-balancing cookies. These cannot be disabled without impairing your ability to use the platform.
• Preference cookies: Store your display preferences and settings so you do not need to reconfigure them on each visit.
• Analytics cookies: Collect anonymised data about how players use the platform (pages visited, session length, feature engagement) to help us identify areas for improvement. This data is aggregated and does not identify individual players.

bd66 does not use third-party advertising cookies, retargeting pixels, or cross-site tracking technologies. You can manage cookie preferences through your browser settings, though disabling essential cookies will affect platform functionality.

8. Data Security

bd66 implements a multi-layered security framework to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Key measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers
• Encryption of sensitive data at rest, including financial data and identity document copies
• Role-based access controls ensuring that only authorised personnel can access player data, and only to the extent required for their job function
• Regular security audits and penetration testing by independent third parties
• Automated intrusion detection and monitoring systems operating around the clock
• Two-factor authentication options for player accounts

While bd66 takes all reasonable steps to protect your data, no digital system is entirely immune to risk. In the event of a data breach that is likely to result in a risk to your rights, bd66 will notify affected players without undue delay in accordance with applicable breach notification standards.

9. Data Retention

bd66 retains personal data for the periods set out below, after which data is securely deleted or irreversibly anonymised:

• Account and identity data: Retained for a minimum of five (5) years following account closure to satisfy anti-money laundering, KYC, and audit obligations.
• Financial transaction records: Retained for a minimum of seven (7) years to satisfy financial record-keeping requirements.
• Gaming activity data: Retained for five (5) years for responsible gaming monitoring and dispute resolution purposes.
• Support and communications data: Retained for three (3) years following the last interaction, unless a longer period is required by an ongoing legal matter.
• Technical and analytics data: Retained in anonymised or aggregated form indefinitely for platform improvement purposes. No personally identifiable information is retained in analytics data beyond 12 months.

10. Your Rights

Subject to applicable law, you have the following rights in relation to the personal data bd66 holds about you:

• Right of access: You may request a copy of the personal data bd66 holds about you.
• Right to rectification: You may request that inaccurate or incomplete personal data be corrected.
• Right to erasure: In certain circumstances, you may request that bd66 delete your personal data. This right is subject to bd66's legal obligations to retain certain data (see Section 9).
• Right to restrict processing: You may request that bd66 restrict the processing of your data in certain circumstances, for example while an accuracy dispute is being resolved.
• Right to data portability: Where processing is based on your consent or on a contract, you may request a copy of your data in a structured, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that took place before withdrawal.
• Right to object: You may object to processing based on bd66's legitimate interests. bd66 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.

To exercise any of these rights, please contact our support team at the email address listed in Section 15. We will respond within 30 days of receiving a valid request. We may need to verify your identity before processing a rights request.

11. Children and Minors

bd66 services are strictly for adults aged 21 years and older. bd66 does not knowingly collect personal data from individuals under the age of 21. If bd66 becomes aware that it has inadvertently collected data from a person under 21, that account will be immediately closed and all associated data will be deleted. If you believe that a minor has registered an account on bd66, please contact our support team immediately so that the matter can be investigated and resolved without delay.

12. Third-Party Links and Services

The bd66 platform may contain references to or integrations with third-party game providers whose software is delivered directly to your browser. While bd66 selects game providers carefully and requires them to operate under data processing agreements, bd66 is not responsible for the privacy practices of third-party game providers in relation to any data those providers collect independently through their own software. We encourage you to review the privacy policies of any third-party provider whose games you use.

13. International Data Transfers

bd66 operates internationally and your personal data may be stored and processed in data centres located outside Bangladesh. Where data is transferred internationally, bd66 takes steps to ensure that adequate protections are in place, including the use of standard contractual clauses, data processing agreements, and selecting processors operating in jurisdictions with recognised data protection frameworks. By using bd66, you consent to the transfer of your data to our international infrastructure for the purposes described in this Policy.

14. Amendments to This Policy

bd66 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered players by email or via an in-platform notification at least seven (7) days before the revised Policy takes effect. The updated Policy will be published on this page with a revised effective date. Continued use of the platform after the effective date constitutes acceptance of the updated Policy. If you do not accept the changes, you should stop using the platform and contact support to close your account.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bd66 handles your personal data, please contact our support team. Our English-language team is available 24 hours a day, 7 days a week.

Email: [email protected]

We aim to acknowledge all privacy-related enquiries within 48 hours and to provide a full response within 30 days. For questions about responsible gaming, visit our Responsible Gaming page. For general platform queries, our FAQ page covers the most common topics.