bf66 Privacy Policy
Your privacy matters to us. This Policy explains how bf66 collects, uses, stores, and protects your personal data when you use our platform — and what rights you hold over that data.
Introduction & Scope
This Privacy Policy ("Policy") applies to bf66, the online casino and sports betting platform accessible at bf66.one (the "Platform"). It governs how bf66 collects, processes, stores, and discloses personal data about registered players, visitors, and any person who interacts with the Platform in any capacity. By using the Platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.
This Policy should be read alongside our Terms and Conditions, which govern your use of the Platform as a whole. Where this Policy and the Terms and Conditions address the same subject, they are intended to be complementary. In the event of a direct conflict between the two documents on a privacy matter, this Policy will prevail.
bf66 is committed to protecting the privacy of all users. We do not sell your personal data to third-party marketing companies. We do not share your data with any party except as described in this Policy or as required by law.
Information We Collect
bf66 collects personal data only to the extent necessary to operate the Platform safely, comply with applicable legal obligations, prevent fraud, and deliver a personalised and high-quality service to players in Bangladesh. The categories of data we collect are as follows:
Registration & Identity Data
- Full name, date of birth, and gender as provided at account registration.
- Mobile phone number and, where provided, email address.
- Residential city or district within Bangladesh, as provided at registration.
- Government-issued identity document details (National ID / Passport) collected during KYC verification where applicable.
Financial & Transaction Data
- Mobile wallet numbers (bKash, Nagad, Rocket, Upay) or bank account details used for deposits and withdrawals.
- Deposit amounts, withdrawal amounts, transaction timestamps, and payment method references.
- Wagering history including bet amounts, game selections, outcomes, and bonus usage records.
- Account balance history and responsible gaming tool settings (deposit limits, self-exclusion status).
Technical & Usage Data
- IP address, device type, operating system, browser type, and screen resolution collected at each login and gameplay session.
- Session duration, pages viewed, features accessed, and navigation patterns within the Platform.
- Cookie identifiers and similar tracking data as described in the Cookies section of this Policy.
How We Use Your Information
bf66 uses the personal data we collect strictly for the purposes set out below. We do not use your data for any purpose other than those listed, unless we first obtain your explicit consent or are required to do so by applicable law.
| Purpose | Data Used |
|---|---|
| Account creation and management | Registration data, contact details, login credentials |
| Identity verification (KYC) | Government ID, NID/Passport, wallet ownership proof |
| Processing deposits and withdrawals | Financial data, mobile wallet details, transaction records |
| Fraud prevention and platform security | IP address, device data, session logs, transaction patterns |
| Customer support and dispute resolution | Account history, communication records, bet and transaction logs |
Legal Basis for Processing
bf66 processes personal data on one or more of the following legal bases, depending on the purpose of processing:
- Contractual necessity — processing is required to perform our contract with you (i.e., to operate your account, process bets, handle deposits and withdrawals).
- Legal obligation — processing is required for bf66 to comply with applicable anti-money laundering (AML) requirements, age verification obligations, and fraud prevention duties.
- Legitimate interests — processing is necessary for bf66's legitimate business interests, including Platform security, service improvement, and responsible gaming monitoring, provided these interests are not overridden by your rights.
- Consent — where we send you optional promotional communications or use non-essential cookies, we rely on your consent, which you may withdraw at any time by contacting bf66 support.
Sharing Your Information
bf66 does not sell, rent, or trade your personal data. We may share your data with trusted third parties only in the following limited circumstances, and only to the minimum extent necessary:
Service Providers & Technology Partners
- Payment processors and mobile wallet operators (bKash, Nagad, Rocket, Upay, and partner banks) who handle transactions on behalf of bf66. These processors receive only the data strictly required to complete the transaction.
- Certified game studios and content providers (e.g., Pragmatic Play, Evolution Gaming, Spribe) whose games are offered on the Platform. These studios may receive anonymised session data for game performance monitoring. They do not receive your identity or financial data.
- KYC verification service providers who assist bf66 in confirming player identity. These providers are contractually bound to use your data solely for the purpose of identity verification and are prohibited from using it for any other purpose.
Legal & Regulatory Disclosures
bf66 may disclose your personal data to law enforcement agencies, financial intelligence units, or other government authorities where required by applicable law, court order, or where we believe in good faith that such disclosure is necessary to prevent fraud, money laundering, or other criminal activity. In such cases, bf66 will disclose only the minimum data necessary to fulfil the legal requirement.
bf66 will not proactively share your data with any government authority in the absence of a formal legal obligation or specific request issued under applicable law. We do not participate in voluntary data-sharing programmes with commercial third parties.
Cookies & Tracking Technologies
bf66 uses cookies and similar tracking technologies to ensure the Platform functions correctly, to maintain your session when you are logged in, and to analyse aggregated usage patterns that help us improve the service. The following types of cookies may be active on the Platform:
Types of Cookies Used
- Essential Cookies — strictly necessary for the Platform to operate, including session management, login state, and security tokens. These cookies cannot be disabled without breaking core Platform functionality.
- Analytics Cookies — used to collect anonymised data about how users navigate and use the Platform, helping bf66 identify technical issues and improve user experience. Analytics data is aggregated and does not identify individual users.
- Preference Cookies — used to remember your Platform settings and preferences, such as language selection and display preferences, so you do not need to re-enter them on each visit.
You may manage cookie preferences through your browser settings. Please note that disabling essential cookies will impair your ability to log in and use core Platform features. bf66 does not use third-party advertising cookies or behavioural retargeting technologies.
Data Retention
bf66 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:
Account and registration data is retained for the full duration of the active account relationship and for a period of five (5) years following account closure, to comply with record-keeping requirements applicable to gaming operators. Transaction records and financial data are retained for a minimum of five (5) years from the date of the transaction. Technical logs and session data are retained for a shorter period of up to twelve (12) months for security and fraud monitoring purposes, after which they are deleted or anonymised.
If you submit a data deletion request, bf66 will delete or anonymise your personal data to the extent permitted by law. Where a legal retention obligation prevents full deletion, bf66 will restrict processing of the relevant data to the minimum necessary until the retention period expires.
Data Security
bf66 implements a layered approach to data security, combining technical safeguards, access controls, and operational procedures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security measures include:
- SSL (Secure Sockets Layer) encryption on all data transmitted between your device and the bf66 Platform, ensuring that your login credentials, financial details, and personal information are protected in transit.
- Encryption of sensitive data fields (including financial account references and identity document details) at rest within bf66's database infrastructure.
- Role-based access controls ensuring that bf66 staff can only access personal data to the extent necessary for their specific job function. Access to sensitive data is logged and audited regularly.
- Regular security assessments and penetration testing of Platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
Despite the security measures described above, no data transmission over the internet or electronic storage system can be guaranteed as 100% secure. In the unlikely event of a data breach affecting your personal data, bf66 will notify affected users promptly and take all reasonable steps to contain and remediate the breach.
Your Rights Over Your Data
As a registered bf66 user, you hold the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact the bf66 support team at [email protected]. bf66 will respond to all rights requests within a reasonable timeframe, and in any case within 30 days of receipt:
- Right of Access — you may request a copy of the personal data bf66 holds about you, including the categories of data held, the purposes for which it is processed, and any third parties with whom it has been shared.
- Right to Rectification — if any personal data bf66 holds about you is inaccurate or incomplete, you may request that it be corrected or updated. Please note that corrections to identity data may require re-verification.
- Right to Erasure — you may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw your consent and no other legal basis applies. This right is subject to our legal retention obligations described in the Data Retention section.
- Right to Restriction — you may request that bf66 restrict the processing of your personal data in certain circumstances, for example where you contest the accuracy of the data while a correction is being investigated.
- Right to Portability — you may request that bf66 provide you with a copy of the personal data you provided to us in a structured, commonly used, machine-readable format, where technically feasible.
- Right to Object — you may object to bf66 processing your personal data where that processing is based on legitimate interests. bf66 will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
To submit a rights request, please email [email protected] with the subject line "Data Rights Request" and include your registered mobile number and a brief description of the right you wish to exercise. bf66 may ask you to verify your identity before processing the request.
Children's Privacy
The bf66 Platform is strictly intended for adults aged 21 years and above. bf66 does not knowingly collect personal data from individuals under the age of 21. If we become aware that a person under 21 has registered an account or provided personal data to us, we will immediately suspend that account, delete the associated personal data, and take appropriate steps to prevent future access.
If you are a parent or guardian and believe that your child under the age of 21 has registered on bf66 or provided personal data to the Platform, please contact us immediately at [email protected]. We will investigate and take prompt action to remove the account and associated data.
Third-Party Links & Embedded Content
The bf66 Platform may contain references to third-party game studios, payment partners, and service providers. While bf66 takes care to work only with reputable partners, we do not control the data practices of third-party websites or services, and this Policy does not apply to any third-party platform, application, or service. If you follow a link to any third-party resource or interact with an embedded third-party service, we encourage you to review the privacy policy of that third party before providing any personal data.
Changes to This Privacy Policy
bf66 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will update the "Last Updated" date at the top of this page. Where changes are significant and affect how we process your personal data, we will notify active users via in-platform notification or email prior to the changes taking effect.
Your continued use of the Platform following any update to this Policy constitutes your acceptance of the revised Policy. If you do not accept the changes, you must stop using the Platform and may request account closure by contacting bf66 support.
Contact & Data Controller
If you have any questions, concerns, or complaints regarding this Privacy Policy, or if you wish to exercise any of your data rights, please contact the bf66 privacy team. Our support team is available 24 hours a day, 7 days a week via live chat on the Platform, and can also be reached by email:
Email: [email protected]
When contacting us about a data rights matter, please include your registered mobile number and a clear description of your request. Do not include your password, full payment account numbers, or OTP codes in any email to bf66.