bc6666 Privacy Policy

1 Data Controller

bc6666 is the data controller responsible for the personal data collected through the bc6666.org Platform. As data controller, bc6666 determines the purposes for which personal data is processed and the means by which that processing takes place. All questions, requests, or concerns relating to this Policy or to the processing of your personal data should be directed to our support team at [email protected]. We aim to respond to all data-related inquiries within 14 business days of receipt.

2 Legal Bases for Processing

bc6666 processes your personal data only where a valid legal basis exists for doing so. The legal bases on which bc6666 relies are as follows:

• Contractual necessity: Processing is necessary to perform the contract between you and bc6666, including account registration, processing deposits and withdrawals via bKash, Nagad, and Rocket, settling bets, and providing customer support.
• Legal obligation: Processing is necessary to comply with applicable legal and regulatory requirements, including anti-money laundering (AML) obligations, age verification, identity verification (KYC), and fraud prevention.
• Legitimate interests: Processing is necessary for bc6666's legitimate business interests, including detecting and preventing fraud, maintaining Platform security, improving the user experience, and conducting internal analytics — provided those interests are not overridden by your privacy rights.
• Consent: Where bc6666 relies on your consent as the legal basis for processing (for example, for marketing communications), you have the right to withdraw that consent at any time by contacting [email protected] or by using the unsubscribe mechanism provided in any marketing message.

3 How bc6666 Uses Your Data

bc6666 uses the personal data it collects for the following specific purposes:

• Creating and managing your bc6666 account, including verifying your identity and age eligibility (21+).
• Processing financial transactions, including deposits via bKash, Nagad, Rocket, and Upay, and processing withdrawal requests back to your registered payment method.
• Providing customer support and responding to account inquiries, complaints, and disputes.
• Monitoring gameplay and account activity for signs of problem gambling, and applying responsible gaming interventions such as deposit limits, session time alerts, and self-exclusion where appropriate.
• Detecting, investigating, and preventing fraudulent transactions, bonus abuse, money laundering, and other prohibited activities.
• Sending transactional communications, including deposit confirmations, withdrawal notifications, and security alerts related to your account.
• Sending promotional communications about bc6666 offers, bonuses, and seasonal promotions (such as BPL cricket betting offers or Eid special bonuses) — only where you have provided consent or where bc6666 has a legitimate interest in doing so, and subject always to your right to opt out.
• Complying with applicable legal and regulatory requirements, including responding to lawful requests from competent authorities.
• Improving Platform performance, user experience, and game selection based on aggregated, anonymised analytics data.

bc6666 will not use your personal data for any purpose that is incompatible with the purposes listed above without first providing you with notice and, where required, obtaining your explicit consent.

4 Sharing of Personal Data

bc6666 does not sell, rent, or otherwise trade your personal data to third parties for their own marketing or commercial purposes. bc6666 may share your personal data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data protection obligations:

• Payment service providers: Mobile financial service providers including bKash, Nagad, Rocket, and Upay, and card payment processors, solely to facilitate the processing of your deposit and withdrawal transactions.
• Identity verification providers: Third-party KYC and age verification services used to confirm your identity and eligibility to use the Platform.
• Game content providers: Third-party game studios and live casino operators such as Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, and Ezugi, who may receive limited technical session data necessary to deliver their game content to your device.
• Fraud prevention and security services: Specialist providers engaged to detect and prevent fraudulent activity, unauthorised access, and abuse of the Platform.
• Legal and regulatory authorities: Competent governmental, regulatory, or law enforcement bodies where bc6666 is required by law or court order to disclose personal data.
• Professional advisers: Lawyers, auditors, and accountants engaged by bc6666, subject to professional secrecy obligations, where necessary for the operation of the business.

All third parties with whom bc6666 shares personal data are required to process that data only for the stated purpose, to maintain appropriate security measures, and to comply with applicable data protection requirements.

5 Data Retention

bc6666 retains your personal data for as long as your account remains open and for a period thereafter as required by applicable legal, regulatory, or contractual obligations. Specifically:

• Account and identity data is retained for the duration of your active account and for a minimum of five (5) years following account closure, in order to satisfy anti-money laundering record-keeping requirements.
• Financial transaction records are retained for a minimum of five (5) years from the date of each transaction.
• Gaming activity logs are retained for a minimum of three (3) years from the date of each session.
• Customer support correspondence is retained for a minimum of two (2) years from the date of resolution of the relevant inquiry or complaint.
• Marketing consent records are retained for as long as you remain subscribed to marketing communications and for a reasonable period thereafter as evidence of consent.

After the applicable retention period has expired, bc6666 will securely delete or anonymise your personal data so that it can no longer be associated with you as an individual.

6 Data Security

bc6666 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and bc6666 servers.
• Encryption of sensitive data fields at rest within bc6666's database infrastructure.
• Strict access controls ensuring that only authorised bc6666 personnel with a legitimate need can access personal data, subject to role-based permission systems.
• Regular security assessments, vulnerability scanning, and penetration testing of the Platform infrastructure.
• Monitoring of login activity and automated detection of suspicious access patterns, with alerting mechanisms for unusual account behaviour.
• Secure disposal procedures for data that has reached the end of its retention period.

While bc6666 takes all reasonable steps to protect your personal data, no system is entirely immune to security threats. In the event of a data breach that is likely to result in a risk to your rights, bc6666 will notify affected players without undue delay and will take immediate steps to mitigate the impact of the breach.

7 Cookies and Tracking Technologies

The bc6666 Platform uses cookies and similar tracking technologies to enhance your experience, maintain session continuity, and gather aggregated analytics data. The categories of cookies used are as follows:

• Strictly necessary cookies: Required for the Platform to function correctly. These include session authentication cookies that keep you logged in, security tokens, and load-balancing cookies. These cannot be disabled without disrupting core Platform functionality.
• Functional cookies: Used to remember your preferences, such as language settings and display options, to provide a more personalised experience.
• Analytics cookies: Used to collect aggregated, anonymised data about how players navigate and interact with the Platform, helping bc6666 identify areas for improvement. No personally identifiable information is included in analytics reports.

You can manage or delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will prevent you from logging in or using core Platform features. bc6666 does not use third-party advertising cookies or retargeting pixels on the Platform.

8 Children and Underage Players

The bc6666 Platform is intended solely for adults aged 21 years and above. bc6666 does not knowingly collect, process, or retain personal data belonging to individuals under the age of 21. If bc6666 becomes aware that a registered account belongs to a person under the age of 21, that account will be closed immediately, all deposits will be returned, any winnings will be forfeited, and all personal data associated with the account will be deleted or anonymised as promptly as practicable, subject to any overriding legal retention obligations.

If you are a parent or guardian and you believe that a person under 21 in your care has registered an account with bc6666, please contact us immediately at [email protected] and we will investigate and take appropriate action without delay.

9 International Data Transfers

bc6666 primarily serves players located in Bangladesh and processes most personal data within its secure server infrastructure. Where bc6666 engages third-party service providers (such as game content providers or identity verification services) who may process data in other jurisdictions, bc6666 ensures that appropriate contractual safeguards are in place to protect your personal data to a standard equivalent to the protections described in this Policy. bc6666 does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without first implementing suitable protective measures.

10 Changes to This Policy

bc6666 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or business operations. Where changes are material, bc6666 will notify registered players by email to the address on file, or by displaying a prominent notice on the Platform, at least seven (7) days before the updated Policy takes effect. Your continued use of the Platform after the effective date of any amendment constitutes acceptance of the revised Policy. The most current version of this Policy will always be accessible at bc6666.org/privacy-policy.