b6668 Privacy Policy — Your Data, Protected

1 Data Controller Identity

1.1   The data controller responsible for your personal data collected through the b6668 platform is b6668, operating the website at https://b6668.io. For all data-related enquiries, including subject access requests, correction requests, and deletion requests, please contact:

Data Protection Contact: [email protected]
Subject Line: "Data Protection Request – [Your Full Name]"
Response Time: Within 14 business days of receipt of a verified request.

1.2   b6668 is committed to processing personal data in a lawful, fair, and transparent manner consistent with the principles set out in this Privacy Policy and applicable data protection law.

2 Data We Collect

2.1   b6668 collects the following categories of personal data from players and platform visitors:

2.1 Identity Data

Full name, date of birth, gender, national identity card (NID) number or passport number, and any other government-issued identification provided during the account registration or KYC verification process.

2.2 Contact Data

Email address, mobile phone number, residential address including city (e.g., Dhaka, Chittagong, Sylhet, Rajshahi), district, and postal code within Bangladesh.

2.3 Financial Data

Mobile wallet account numbers (bKash, Nagad, Rocket, Upay) used for deposits and withdrawals, bank account details (Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank) where applicable, transaction history including deposit amounts, withdrawal amounts, dates, and reference numbers. b6668 does not store full bank account PINs or mobile wallet PINs.

2.4 Account & Gameplay Data

Username, account registration date, login timestamps, session durations, game history, bet amounts, win/loss records, bonus usage history, and responsible gaming tool activations (deposit limits, self-exclusion requests, cooling-off periods).

2.5 Technical Data

IP address, browser type and version, operating system, device type (mobile, tablet, desktop), screen resolution, referring URL, and pages visited on the b6668 platform, collected automatically via server logs and cookie technology.

2.6 Communication Data

Records of all communications between you and the b6668 support team, including email correspondence, live chat transcripts, and any documents or images shared during a support interaction or verification process.

2.7 Verification Documents

Scanned or photographed copies of government-issued identity documents (NID, passport, driving licence), proof of address documents (utility bills, bank statements), and proof of payment method ownership, submitted in connection with KYC verification or withdrawal processing.

3 How We Collect Your Data

3.1   b6668 collects personal data through the following channels:

• Direct submission: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in a promotion.
• Automated collection: Technical data collected automatically when you visit the b6668 website, including IP address, device data, and browsing behaviour, via server logs, cookies, and similar technologies.
• Third-party payment providers: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, and bank partners when processing deposits or withdrawals. b6668 receives only the information necessary to confirm a transaction — your full PIN or bank password is never transmitted to b6668.
• Identity verification partners: Where b6668 uses a third-party KYC service to verify identity documents, that provider returns a verification result to b6668. The document images themselves may be processed by that provider under their own privacy terms, which b6668 will make available on request.
• Game providers: Aggregated gameplay outcome data received from third-party game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) to settle wagers and maintain accurate account balances.

4 Legal Basis for Processing

4.1   b6668 processes your personal data on the following legal bases:

Processing Purpose	Legal Basis
Account registration and management	Performance of contract (providing the b6668 service)
Processing deposits and withdrawals	Performance of contract; legal obligation (AML compliance)
Identity verification (KYC)	Legal obligation; legitimate interest (fraud prevention)
Fraud detection and security monitoring	Legitimate interest (protecting the platform and players)
Responsible gaming tools and underage prevention	Legal obligation; legitimate interest
Customer support communications	Performance of contract; legitimate interest
Promotional communications (email / SMS)	Consent (opt-in at registration or in account settings)
Platform analytics and improvement	Legitimate interest (improving service quality)
Legal compliance and regulatory reporting	Legal obligation

5 How We Use Your Data

5.1   b6668 uses the personal data described in Section 2 for the following specific purposes:

• Account creation and authentication: To register your b6668 Account, verify your identity at login, and protect your account from unauthorised access.
• Payment processing: To process deposit requests from bKash, Nagad, Rocket, Upay, and supported bank accounts, and to route withdrawal funds to your verified payment method.
• Age verification and KYC compliance: To confirm that all players are aged 21 years or older before permitting real-money wagering, and to fulfil any applicable anti-money laundering (AML) due diligence requirements.
• Game and betting settlement: To record wager outcomes, settle winning bets, apply bonus credit, and maintain a complete and accurate ledger of your b6668 Account balance.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent account activity, multi-accounting, bonus abuse, payment chargebacks, and any other conduct prohibited under the b6668 Terms & Conditions.
• Responsible gaming: To implement and enforce any deposit limits, session limits, cooling-off periods, or self-exclusion requests activated by you or flagged by b6668's responsible gaming monitoring systems.
• Customer support: To respond to your queries, resolve complaints, process account change requests, and maintain a record of your support history.
• Platform personalisation: To present game recommendations, promotional offers, and content relevant to your gameplay history and preferences, where you have not opted out of personalisation.
• Legal and regulatory compliance: To retain transaction records, respond to lawful requests from regulatory or law enforcement authorities, and fulfil any reporting obligations applicable to b6668's operations.
• Marketing communications: To send you promotional emails, SMS messages, or platform notifications about b6668 bonuses, new games, and seasonal offers — only where you have provided explicit consent at registration or subsequently in your account settings.

6 Data Sharing & Third Parties

6.1   b6668 does not sell, rent, or trade your personal data. Data is shared with third parties only in the following limited circumstances:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank receive the transaction data necessary to process your deposit or withdrawal instruction. These providers operate under their own privacy policies and regulatory obligations.
• Game content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other licensed game studios receive a pseudonymous player identifier and bet/outcome data to settle game rounds. They do not receive your full name, NID, or contact details.
• Identity verification services: Third-party KYC providers used by b6668 to verify identity documents receive the document images and personal data you submit during verification. These providers are contractually bound to process your data only for KYC purposes and to maintain equivalent security standards.
• Analytics and platform infrastructure providers: Hosting, cloud infrastructure, and analytics service providers who process technical data on b6668's behalf under data processing agreements that prohibit independent use of your data.
• Legal and regulatory authorities: b6668 may disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory bodies where required to do so by applicable law, court order, or regulatory directive. b6668 will, where legally permitted, notify affected players of such disclosures.

6.2   All third-party service providers with whom b6668 shares personal data are contractually obligated to process that data solely for the purposes specified, to maintain appropriate technical and organisational security measures, and not to disclose it to further parties without b6668's written consent.

7 Cookies & Tracking Technologies

7.1   b6668 uses cookies and similar tracking technologies on the b6668 website. A cookie is a small text file placed on your device by a web server. The following categories of cookies are used:

• Strictly necessary cookies: Required for the b6668 platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. You cannot opt out of these cookies without ceasing to use the platform.
• Functional cookies: Store your platform preferences such as language settings, display preferences, and last-visited game category, to provide a consistent experience across sessions.
• Analytical cookies: Used by b6668's internal analytics to measure page visits, session durations, feature usage, and game popularity, in order to improve the platform. This data is processed in aggregated or pseudonymous form.
• Marketing cookies: Placed only where you have given consent, these cookies record your browsing activity to allow b6668 to present more relevant promotional content on the platform. They do not track your activity on external websites.

7.2   You may manage or delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will impair your ability to use the b6668 platform. Instructions for managing cookies in common browsers are available in your browser's help documentation.

8 Data Retention

8.1   b6668 retains personal data for the following periods:

Data Category	Retention Period	Basis
Account identity & KYC documents	5 years after account closure	AML legal obligation
Transaction records (deposits & withdrawals)	5 years after transaction date	AML legal obligation
Game and betting history	3 years after last account activity	Dispute resolution; legal obligation
Customer support correspondence	3 years after case closure	Legitimate interest (complaint handling)
Marketing consent records	Until consent is withdrawn + 1 year	Legal obligation (proof of consent)
Technical / server log data	90 days rolling	Security monitoring; fraud detection
Self-exclusion records	Duration of exclusion + 5 years	Responsible gaming legal obligation

8.2   At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where anonymisation is applied, the resulting data set may be retained indefinitely for statistical and analytical purposes as it can no longer be linked to any individual.

9 Data Security

9.1   b6668 implements the following technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction:

• 256-bit SSL/TLS encryption on all web pages and data transmissions, including account login, deposit flows, withdrawal requests, and KYC document uploads.
• Encrypted storage of sensitive data fields (including NID numbers and payment method identifiers) at rest using industry-standard encryption.
• Role-based access controls ensuring that b6668 staff can access personal data only to the extent required for their specific job function.
• Multi-factor authentication requirements for all b6668 internal systems that hold personal data.
• Regular penetration testing and vulnerability assessments of the b6668 platform infrastructure.
• Automated fraud detection and anomaly monitoring systems that flag unusual account activity for human review.
• Formal data breach response procedures, including player notification within 72 hours where a breach is likely to result in a high risk to your rights and freedoms.

9.2   While b6668 takes all reasonable steps to protect your personal data, no internet transmission or electronic storage system is completely secure. Players are responsible for keeping their account login credentials confidential and for notifying b6668 immediately at [email protected] if they suspect their account has been compromised.

10 Your Rights

10.1   As a b6668 player, you hold the following rights in relation to your personal data. To exercise any of these rights, contact [email protected] with the subject line "Data Protection Request – [Your Full Name]". b6668 will respond within 14 business days of receiving a verified request.

• Right of Access: You may request a copy of all personal data b6668 holds about you, along with information about how it is processed and on what legal basis.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held in your b6668 Account.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where b6668 no longer has a lawful basis for retaining it. Note that erasure requests may be subject to legal retention obligations (see Section 8) that override your right to erasure in certain circumstances.
• Right to Restriction of Processing: You may request that b6668 restrict the processing of your personal data while a dispute about its accuracy or lawfulness is resolved.
• Right to Data Portability: You may request a structured, machine-readable copy of personal data you have provided to b6668, where processing is based on consent or contract.
• Right to Object: You may object to processing based on legitimate interests (including profiling for personalisation and fraud detection) or to processing for direct marketing purposes. b6668 will cease marketing communications immediately upon receipt of a valid objection.
• Right to Withdraw Consent: Where b6668 processes data based on your consent (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. To withdraw marketing consent, use the unsubscribe link in any marketing email or contact [email protected].

10.2   b6668 will verify your identity before processing any data subject request to ensure that personal data is not disclosed to or modified by an unauthorised third party. Verification typically requires confirmation of your registered email address and one additional piece of identity information.

11 Children's Privacy

11.1   The b6668 platform is strictly for players aged 21 years and above. b6668 does not knowingly collect personal data from anyone under the age of 21. If you believe that a minor has registered an account or provided personal data to b6668, please contact [email protected] immediately. Upon confirmation, b6668 will close the account and securely delete all associated personal data without undue delay.

11.2   b6668 takes underage gambling prevention seriously and employs age verification controls at registration and prior to first withdrawal. Where b6668 suspects a registered player may be under the age of 21, the account will be suspended pending identity and age verification.

12 Marketing Communications

12.1   b6668 will send you promotional emails, SMS messages, and platform notifications about bonuses, new games, seasonal offers (including Eid, Pohela Boishakh, and Victory Day promotions), and cricket betting specials only if you have given explicit consent to receive such communications.

12.2   You may opt out of marketing communications at any time by:

• Clicking the "Unsubscribe" link at the bottom of any b6668 marketing email.
• Replying "STOP" to any b6668 marketing SMS.
• Updating your communication preferences in your b6668 Account settings.
• Contacting [email protected] with the subject line "Unsubscribe – [Your Full Name]".

12.3   Please allow up to five (5) business days for opt-out requests to take effect across all communication channels. After this period, you will no longer receive promotional communications. Note that transactional communications — such as deposit confirmations, withdrawal notifications, account security alerts, and KYC verification requests — are not marketing communications and cannot be opted out of while your account remains active.

13 Changes to This Policy

13.1   b6668 may update this Privacy Policy from time to time to reflect changes in applicable law, our data processing practices, or the services we offer. Where changes are material — for example, a change to the categories of data collected, the purposes for which it is used, or the third parties with whom it is shared — b6668 will provide at least seven (7) days' advance notice via email to your registered address and/or a prominent notice on the b6668 platform.

13.2   The date of the most recent update is shown at the top of this page and in the hero section above. Where the change does not materially affect your rights (for example, minor clarifications of language), b6668 may update the policy without advance notice, though the updated date will always be revised.

13.3   Your continued use of the b6668 platform after a revised Privacy Policy takes effect constitutes your acceptance of that revised policy. If you do not agree with any material change, you should cease using the platform and may request account closure and return of your real-money balance by contacting [email protected] before the change takes effect.

14 Contact & Data Requests

14.1   For all privacy-related enquiries, data subject access requests, corrections, deletion requests, or objections to processing, please contact the b6668 data protection team:

Email: [email protected]
Subject Line: "Data Protection Request – [Your Full Name]"
Response Time: Within 14 business days of receipt of a verified request.
Support Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (UTC+6).

14.2   To help us process your request promptly, please include in your email: your full registered name, your registered email address, the nature of your request (access / correction / deletion / objection), and any relevant details or context. b6668 may request additional verification information before processing your request to ensure the security of your personal data.

14.3   b6668 is committed to resolving all data protection enquiries fairly and efficiently. If you are not satisfied with b6668's response to your data request, you may seek further recourse through the applicable data protection authority in your jurisdiction.