bc66 Privacy Policy — Your Data, Our Responsibility

This Privacy Policy ("Policy") describes how bc66 ("bc66", "we", "us", "our") collects, uses, stores, shares, and protects the personal data of individuals ("you", "your", "Player", "User") who access or use the bc66 platform available at bc66.io and any associated mobile-optimised versions or subdomains of that website.

bc66 is committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection principles. We recognise that players using bc66 for cricket betting, live casino games, slots, volleyball markets, and other sports wagering entrust us with sensitive personal and financial information, and we take that responsibility seriously.

This Policy is incorporated by reference into the bc66 Terms & Conditions. Capitalised terms not defined in this Policy have the meanings given to them in the bc66 Terms & Conditions, available at bc66.io/terms-conditions.

This Privacy Policy is written in English and is interpreted exclusively in the English language. Any translation provided for informational purposes does not affect the interpretation of this Policy.

bc66 collects personal data in the following categories, depending on how you interact with the platform:

bc66 does not knowingly collect special categories of sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, except where identity document photographs are submitted for KYC purposes.

bc66 collects personal data through the following channels and mechanisms:

• Direct Submission: Data you voluntarily provide when registering a bc66 account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated Technical Collection: Data collected automatically when you access the bc66 platform, including IP addresses, device identifiers, browser fingerprint data, and session behaviour, collected via server logs, cookies, and similar tracking technologies (see Section 7).
• Payment Provider Data: Transaction confirmation data received from payment processors including bKash, Nagad, Rocket, Upay, SureCash, Visa, and Mastercard when you initiate a deposit or withdrawal on bc66.
• Identity Verification Partners: Results and risk scores from third-party KYC and identity verification services used to authenticate your identity and confirm your age eligibility (21+) as required by bc66's responsible gaming obligations.
• Fraud Prevention Services: Risk signals and device reputation data from anti-fraud and security partners used to detect suspicious account activity, multi-accounting, and bonus abuse.

bc66 uses the personal data we collect for the following specific purposes:

1. Account Management: To create, maintain, and administer your bc66 player account, process your bc66 Login credentials securely, and manage account security settings.
2. Transaction Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, SureCash, Visa, and Mastercard, and to maintain an accurate record of your account balance and transaction history.
3. Identity Verification (KYC): To verify your identity, confirm that you meet the 21+ age requirement, and comply with anti-money-laundering (AML) obligations applicable to online gaming platforms serving the Bangladesh market.
4. Responsible Gaming: To monitor your gaming activity and apply responsible gaming tools such as deposit limits, session reminders, and self-exclusion where requested or where problematic gambling patterns are detected.
5. Platform Improvement: To analyse usage data and player behaviour in aggregate to improve the bc66 platform's performance, game selection (including cricket betting, live casino, and slots), user interface, and feature set.
6. Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, match manipulation, and unauthorised access attempts on the bc66 platform.
7. Customer Support: To respond to your support enquiries, process complaints and dispute resolutions, and maintain records of all interactions between you and the bc66 support team.
8. Legal Compliance: To comply with applicable laws, regulatory requirements, and lawful requests from competent authorities, including the production of records for AML investigation purposes.
9. Marketing Communications: To send you information about bc66 bonuses, promotions, and seasonal offers (such as Eid or BPL season promotions), strictly where you have provided opt-in consent. See Section 13 for details.

bc66 processes your personal data only where a valid legal basis exists for doing so. The applicable legal bases under recognised data protection frameworks are as follows:

• Contractual Necessity: Processing required to fulfil our obligations to you under the bc66 Terms & Conditions — including account creation, transaction processing, and customer support — is carried out on the basis of contractual necessity.
• Legal Obligation: Processing required to comply with applicable law — including KYC verification, AML record-keeping, and responses to lawful authority requests — is carried out on the basis of legal obligation.
• Legitimate Interests: Processing for fraud prevention, platform security, abuse detection, and aggregate analytics is carried out on the basis of bc66's legitimate interests in operating a secure and fair platform, provided those interests do not override your fundamental rights and freedoms.
• Consent: Processing for optional marketing communications is carried out on the basis of your explicit opt-in consent, which you may withdraw at any time by contacting [email protected].

bc66 does not sell your personal data. We may share your personal data with the following categories of third parties, strictly as necessary and subject to appropriate confidentiality and security obligations:

• Payment Processors: bKash, Nagad, Rocket, Upay, SureCash, Visa, and Mastercard receive the transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are not permitted to use your data for any purpose beyond processing the relevant transaction.
• Identity Verification Providers: Third-party KYC and age verification services receive the identity documents and personal data necessary to verify your eligibility to use bc66, including confirmation of the 21+ age requirement.
• Fraud Prevention & Security Partners: Anti-fraud services receive technical data (such as IP address, device fingerprint, and session metadata) to assess risk and detect suspicious activity on the bc66 platform.
• IT Infrastructure & Hosting Providers: Cloud hosting and data centre providers that store and process bc66 platform data on our behalf, subject to strict data processing agreements.
• Analytics Providers: Aggregate, anonymised usage data may be shared with analytics platforms to support platform improvement. No personally identifiable data is shared for analytics purposes.
• Legal & Regulatory Authorities: bc66 will disclose personal data to law enforcement, regulatory bodies, or other competent authorities where required by law, where necessary to protect the rights, property, or safety of bc66 or its players, or where required as part of a legitimate legal process.

bc66 uses cookies and similar tracking technologies on its platform to enable core functionality, improve performance, and analyse player behaviour. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the bc66 platform to function. These include session authentication cookies (used to keep you logged in during a bc66 Login session), security tokens, and load-balancing cookies. These cookies cannot be disabled without impairing platform functionality.
• Functional Cookies: Used to remember your preferences such as language settings, preferred game categories (e.g., cricket betting, slots, live casino), and notification preferences. These enhance your experience on bc66 but are not essential to core function.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players navigate and use the bc66 platform. This data helps us identify performance issues, popular features, and areas for improvement. No personally identifiable data is stored in analytics cookies.
• Security Cookies: Used to detect fraud signals, identify suspicious login attempts, and protect bc66 accounts from unauthorised access.

bc66 does not use third-party advertising cookies or cross-site tracking cookies. You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from accessing your bc66 account and using the platform.

bc66 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Our security infrastructure includes:

• Encryption in Transit: All data transmitted between your device and bc66 servers is encrypted using TLS 1.2 or higher, with 256-bit AES encryption providing the highest level of protection for your login credentials and financial data.
• Encryption at Rest: Sensitive personal data stored on bc66 servers — including identity documents submitted for KYC verification and financial account details — is encrypted at rest using industry-standard symmetric encryption.
• Access Controls: Access to personal data within bc66's internal systems is restricted on a strict need-to-know basis. All staff with access to player data are subject to confidentiality obligations and undergo regular data protection training.
• Penetration Testing: bc66's platform and infrastructure undergoes regular independent security testing to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: bc66 maintains a documented data breach response procedure. In the event of a confirmed data breach that poses a risk to your rights and freedoms, bc66 will notify affected players promptly and take immediate steps to contain and remediate the breach.

bc66 retains personal data for no longer than is necessary for the purposes for which it was collected, or as required by applicable law. The following retention periods apply to the principal categories of personal data held by bc66:

• Account & Identity Data: Retained for the duration of your active bc66 account plus a minimum period of 5 years following account closure, to satisfy anti-money-laundering record-keeping obligations.
• Transaction Records: Deposit and withdrawal records, including payment wallet references (bKash, Nagad, Rocket), are retained for a minimum of 5 years from the date of each transaction.
• KYC Documents: Identity verification documents (NID copies, passport scans) are retained for a minimum of 5 years following account closure or the completion of the KYC verification process, whichever is later.
• Betting & Gaming History: Records of bets placed, games played, and casino session data are retained for the duration of your active account and for 3 years following account closure.
• Customer Support Records: Email and support correspondence is retained for 3 years from the date of the final communication in each support thread.
• Technical & Log Data: Server logs, IP address records, and session data are retained for 12 months from the date of collection, unless a longer retention period is required for fraud investigation or security purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be linked to an identifiable individual. Anonymised aggregate data may be retained indefinitely for statistical and platform improvement purposes.

As a registered bc66 player, you hold the following rights in respect of the personal data bc66 holds about you. To exercise any of these rights, please contact us in writing at [email protected] with the subject line "Data Rights Request". bc66 will respond to all verified data rights requests within 30 calendar days.

1. Right of Access: You have the right to request confirmation of whether bc66 holds personal data about you, and to receive a copy of that data in a commonly used format.
2. Right of Rectification: You have the right to request correction of any inaccurate or incomplete personal data held about you. You may update certain account information (such as your email address or contact number) directly through your bc66 account settings.
3. Right of Erasure ("Right to Be Forgotten"): You may request that bc66 delete your personal data. This right is subject to limitations where bc66 is required to retain your data by law (for example, for AML compliance). Where a full erasure is not possible, bc66 will explain the specific reason.
4. Right to Restriction of Processing: You may request that bc66 restrict the processing of your personal data in certain circumstances, for example while a dispute about the accuracy of your data is being resolved.
5. Right to Data Portability: You may request a copy of the personal data you have provided to bc66 in a structured, machine-readable format (such as CSV) for the purpose of transferring it to another service.
6. Right to Object: You have the right to object to bc66's processing of your personal data where that processing is based on legitimate interests. bc66 will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
7. Right to Withdraw Consent: Where bc66 processes your data on the basis of consent (such as marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

The bc66 platform is strictly intended for adults aged 21 years and above. bc66 does not knowingly collect, process, or retain personal data from any individual under the age of 21. If you are under 21, you must not use the bc66 platform, register an account, or submit any personal information to bc66.

If bc66 becomes aware that personal data has been collected from a player who is under the age of 21, we will immediately suspend the relevant account, delete the associated personal data, and void any transactions or balances associated with that account. Any winnings generated by an underage player will be forfeited in full.

bc66 operates a platform that primarily serves players in Bangladesh and may store and process personal data on servers located outside of Bangladesh. Where personal data is transferred to a jurisdiction that does not provide an equivalent level of data protection to that applicable in Bangladesh, bc66 will implement appropriate safeguards to ensure that your data remains protected to the standards described in this Privacy Policy.

Safeguards used by bc66 for international data transfers may include:

• Data processing agreements with third-party processors that incorporate recognised contractual data protection clauses;
• Transfers only to countries or organisations assessed to provide an adequate level of data protection;
• Technical security measures (including encryption) applied to all data regardless of where it is stored or processed.

All third-party payment providers — including bKash, Nagad, Rocket, Upay, and SureCash — process payment data within their own infrastructure subject to their respective privacy policies. bc66 is not responsible for the data practices of payment processors beyond the transaction data shared at the point of payment initiation.

bc66 may send you promotional communications about bonuses, reload offers, free spins, seasonal promotions (such as Eid offers, Pohela Boishakh promotions, BPL season specials, and IPL cricket betting promotions), and other bc66 features — but only if you have explicitly opted in to receive such communications at the time of registration or through your account preferences.

You may opt out of marketing communications at any time by:

• Clicking the " Unsubscribe" link included in any marketing email sent by bc66; or
• Contacting the bc66 support team directly at [email protected] with the subject line "Unsubscribe from Marketing".

Opting out of marketing communications will not affect transactional communications that bc66 is required to send as part of its contractual obligations to you — such as deposit confirmations, withdrawal notifications, account security alerts, KYC verification requests, and support responses. These operational communications cannot be opted out of while your bc66 account remains active.

bc66 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. When we make material changes to this Policy, we will notify registered players by posting a prominent notice on the bc66 platform and, where appropriate, by sending a notification to your registered email address.

The "Last Updated" date at the top of this Privacy Policy will be revised each time changes are made. We encourage you to review this Policy periodically to stay informed about how bc66 collects and uses your personal data. Your continued use of the bc66 platform following notification of a revised Privacy Policy constitutes your acknowledgement of and agreement to the updated terms.

If any proposed change to this Privacy Policy would require your renewed consent under applicable law (for example, a change to the purposes for which your data is processed on the basis of consent), bc66 will seek that renewed consent before the change takes effect.

If you have any questions, concerns, or requests relating to this Privacy Policy, or if you wish to exercise any of your privacy rights as described in Section 10, please contact the bc66 data privacy team using the details below. Our support team is available 24 hours a day, 7 days a week, including during all Bangladeshi public holidays.

Please include your registered bc66 username and a clear description of your enquiry or request in all correspondence. For data rights requests, bc66 may require you to verify your identity before processing the request, as described in Section 10.

bc66 does not provide a telephone support line. All privacy-related communications must be submitted in writing via email to ensure a clear, documented record of all interactions. bc66 is committed to handling all privacy enquiries with the seriousness, care, and confidentiality they deserve.