bdg66 Privacy Policy

This Privacy Policy ("Policy") describes how bdg66 ("bdg66", "we", "us", "our") collects, uses, stores, shares and protects personal information about users ("Player", "User", "you", "your") who access and use the website at bdg66.bet and all related services (collectively, the "Service"). By registering an account or using the Service, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

bdg66 is committed to handling your personal data responsibly, proportionately and in accordance with applicable data protection principles. We collect only the data we genuinely need to deliver the Service, we do not sell your data to third parties for advertising purposes, and we give you clear controls to access, correct or erase the data we hold about you. If you have any questions about this Policy or wish to exercise your data rights, please contact us at [email protected].

1Information We Collect

bdg66 collects personal data from you in three ways: information you provide directly when using the Service, information generated automatically by your use of the platform, and information received from third-party payment providers or identity verification services where applicable. The following table summarises the categories of data we collect and the primary purpose for collecting each category.

You are not required to provide all categories of data to access the basic Service, but certain data (particularly identity and contact data) is mandatory for account registration, age verification and payment processing. Without this mandatory data we cannot legally open or maintain an account for you.

2How We Use Your Information

bdg66 uses your personal data only for the purposes described in this Policy. We do not process your data for any purpose that is incompatible with the purpose for which it was originally collected. The primary purposes for which we use your data are as follows:

• Account creation and management: to register your account, verify your identity, authenticate your sessions, manage your account settings and process your requests to update or close your account.
• Payment processing: to process deposits made via bKash, Nagad, Rocket, Upay and other supported payment methods; to process withdrawal requests to your verified payment instrument; to maintain transaction records as required by applicable law.
• Service delivery: to provide access to casino games, sports betting markets, live dealer tables and promotional offers; to personalise your experience on the platform based on your game preferences and activity history.
• Legal and compliance: to comply with anti-money-laundering (AML) obligations, know-your-customer (KYC) requirements, and any other applicable legal or regulatory obligations including any requirement to report suspicious transactions to relevant authorities.
• Security and fraud prevention: to monitor account activity for signs of unauthorised access, identity fraud, payment fraud, bonus abuse or money laundering; to protect the integrity of the platform and the funds of all players.
• Customer support: to respond to your enquiries, investigate your complaints, process your account change requests and provide technical assistance. Support communications may be recorded for training and quality assurance purposes.
• Responsible gaming: to monitor for indicators of problem gambling behaviour (such as sudden increases in deposit frequency, rapid escalation of bet sizes or patterns consistent with chasing losses); to prompt players who display such indicators to use responsible gaming tools; and to action self-exclusion or deposit limit requests promptly.

Where bdg66 intends to use your data for a materially different purpose than originally stated — for example, to conduct research, to share data with a new category of third-party partner, or to use it for direct marketing for the first time — we will notify you and, where required, seek your consent before proceeding.

3Legal Basis for Processing

bdg66 processes your personal data on one or more of the following legal bases, depending on the category of data and the purpose of processing:

• Contractual necessity: processing is necessary to perform the contract between you and bdg66 — specifically, to open and maintain your account, process your deposits and withdrawals, provide access to games and betting markets, and settle your bets. Without this processing, bdg66 cannot deliver the Service to you.
• Legal obligation: processing is necessary for bdg66 to comply with applicable legal requirements, including anti-money-laundering regulations, know-your-customer requirements, tax reporting obligations and any lawful instruction from a regulatory authority or law enforcement agency.
• Legitimate interests: processing is carried out in the legitimate interests of bdg66 or a third party, where those interests are not overridden by your rights and interests. Examples include platform security monitoring, fraud detection, service improvement analytics, and responsible gaming monitoring. We balance our interests against yours and process data only to the extent necessary.
• Consent: for certain processing activities — such as sending you direct marketing communications or personalised promotional offers — bdg66 will ask for your explicit consent. You may withdraw consent at any time by contacting [email protected] or updating your account communication preferences. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

4Sharing Your Information

bdg66 does not sell your personal data. We share your data with third parties only in the limited circumstances described below, and only to the extent necessary for the stated purpose. All third parties with whom we share data are contractually required to handle it securely, use it only for the specified purpose, and comply with applicable data protection standards.

• Payment service providers: we share payment reference data (such as your masked bKash or Nagad account identifier and transaction amount) with our payment processing partners solely to execute your deposit and withdrawal instructions. These partners are PCI-compliant and are contractually prohibited from using your payment data for any other purpose.
• Identity verification services: where KYC verification is required, we may share identity documents (such as your NID or passport scan) with an approved identity verification service provider. These providers are used solely to confirm the authenticity of your identity documents and are contractually prohibited from retaining your data after the verification is complete.
• Game and software providers: game providers such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe and Ezugi may receive technical session data (such as a pseudonymous player token and bet amounts) strictly as needed to operate their games on our platform. No directly identifying personal data (name, NID, phone number) is passed to game providers.
• Legal and regulatory authorities: bdg66 will disclose your personal data to law enforcement agencies, Bangladesh Bank, or other regulatory or governmental authorities where we are legally required to do so, including in connection with the investigation of suspected financial crime, money laundering, or fraud. We will notify you of such disclosure where we are legally permitted to do so.

5Cookies & Tracking Technologies

bdg66 uses cookies and similar tracking technologies to operate the platform, maintain your login session, remember your preferences, detect fraud and measure platform performance. When you first access the bdg66 platform, a cookie notice will inform you of the categories of cookies in use. By continuing to use the platform after seeing this notice, you consent to the use of cookies as described in this section.

• Strictly necessary cookies: these cookies are essential to the operation of the platform and cannot be disabled. They include session authentication tokens, load balancing cookies and security tokens that prevent cross-site request forgery. No personal data from strictly necessary cookies is shared with third parties.
• Functional cookies: these cookies remember your preferences, such as your chosen display language, and enhance your user experience. They are not used to track your activity on other websites.
• Analytics cookies: bdg66 uses analytics tools to understand how players navigate the platform, which pages are most visited, how long sessions last and where errors occur. This data is aggregated and anonymised before analysis. Analytics data helps us improve the platform for all players.
• Fraud-prevention cookies: bdg66 uses device fingerprinting and session behaviour analysis cookies to detect and prevent account takeover fraud, payment fraud and multi-account abuse. These cookies collect technical device and session data only and do not collect personal data beyond what is needed for fraud prevention.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging into your bdg66 account. On most mobile browsers (Chrome for Android, Safari for iOS), you can clear cookies via the browser's Settings > Privacy menu. Clearing your session cookie will log you out of bdg66.

6Data Security Measures

bdg66 takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, disclosure, alteration or destruction. No transmission over the internet or electronic storage method is 100% secure, but we maintain the following protections as standard across the entire bdg66 platform:

• All data in transit between your device and the bdg66 servers is encrypted using TLS 1.2 or higher (256-bit SSL). This applies to the website, login screens, payment pages and any API communication between our platform and third-party services.
• Account passwords are stored using a one-way cryptographic hash function. bdg66 staff cannot retrieve your password in plaintext. If you forget your password, you must use the account recovery process, which sends a one-time PIN to your registered mobile number.
• Access to personal data within bdg66 is restricted on a need-to-know basis. Only staff members whose role requires access to a specific category of personal data are granted that access. Access rights are reviewed regularly and revoked when no longer required.
• bdg66 maintains an incident response plan for data security breaches. In the event of a breach that is likely to result in a risk to your rights and freedoms, bdg66 will notify affected players without undue delay and will take immediate steps to contain the breach and minimise its impact.

Despite these measures, no online platform can guarantee absolute security. You play an important role in keeping your account secure: use a strong, unique password, never share your login credentials with anyone, and contact bdg66 support immediately if you suspect your account has been accessed without your authorisation.

7Data Retention

bdg66 retains your personal data for as long as your account is active and for a period after your account is closed, as required by applicable law and our internal data retention policies. The primary retention periods are as follows: identity and KYC documents are retained for a minimum of 5 years after account closure to comply with anti-money-laundering regulations; financial transaction records (deposit and withdrawal history) are retained for a minimum of 5 years after the transaction date; game play records and betting history are retained for a minimum of 3 years after account closure; technical and session logs are retained for a maximum of 12 months from the date of generation, after which they are deleted or permanently anonymised.

When your data is no longer required for its original purpose and no legal obligation requires us to retain it, bdg66 will securely delete or permanently anonymise it. Anonymised data (data from which all identifiers have been irreversibly removed) may be retained indefinitely for statistical and platform improvement purposes.

8Your Data Rights

As a player on the bdg66 platform, you have the following rights in respect of your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request" and your registered mobile number. We will respond within 30 days.

• Right of access: you have the right to request a copy of the personal data we hold about you. We will provide this in a commonly used electronic format within 30 days of receiving a verified request. We may ask you to verify your identity before releasing data.
• Right of rectification: you have the right to request that we correct any inaccurate personal data we hold about you, or complete any incomplete data. Minor corrections (such as correcting a spelling error in your name) can also be requested directly through your account settings.
• Right to erasure (right to be forgotten): in certain circumstances, you have the right to request that we delete the personal data we hold about you. This right applies where the data is no longer necessary for the purpose it was collected, where you withdraw consent and no other legal basis exists, or where the data has been unlawfully processed. Note that this right is subject to our legal obligation to retain certain categories of data (e.g. AML records) for specified minimum periods.
• Right to restrict processing: you have the right to request that we restrict the processing of your personal data in certain circumstances — for example, while we investigate a complaint you have raised about the accuracy of the data we hold, or where you have objected to processing and we are considering whether our legitimate interests override your objection.
• Right to data portability: you have the right to receive a copy of the personal data you have provided to us in a structured, commonly used and machine-readable format, and to request that we transmit that data to another service provider where technically feasible.
• Right to object: you have the right to object to the processing of your personal data where we rely on legitimate interests as the legal basis. You also have the absolute right to object to the processing of your data for direct marketing purposes at any time, without needing to give a reason. To opt out of marketing communications, contact [email protected].

bdg66 will respond to all data rights requests within 30 days of receiving a verified request. If your request is complex or you have submitted multiple requests, we may extend this period by a further 30 days and will notify you accordingly. We will not charge a fee for processing data rights requests unless a request is manifestly unfounded or excessive, in which case we may charge a reasonable fee.

9Payment Data & Financial Information

bdg66 takes particular care with financial and payment data given its sensitivity. When you make a deposit or request a withdrawal using bKash, Nagad, Rocket, Upay or any other supported payment method, the transaction is processed by our payment service provider partners. bdg66 does not store your full bKash or Nagad account number, full bank account number, or full card number. We store only a masked reference (for example, the last four digits of your mobile wallet number) that allows us to identify which payment method you used for a transaction, but which cannot be used to initiate a payment.

10Responsible Gaming & Data

bdg66 uses certain categories of your personal data specifically to support responsible gaming. This includes monitoring your deposit frequency, bet sizes and session patterns to identify indicators of problem gambling behaviour. Where such indicators are detected, bdg66 may contact you proactively via your registered mobile number to offer responsible gaming resources and tools.

If you request self-exclusion or a cooling-off period, bdg66 will flag your account to prevent access to the platform for the specified period. Your self-exclusion data is treated with the highest level of sensitivity and is not shared with any third party except where required by law. Self-exclusion records are retained for a minimum of 5 years after the exclusion ends to enable bdg66 to detect and prevent any attempt to circumvent a previous self-exclusion by registering a new account.

11Children's Privacy — 21+ Policy

The bdg66 Service is strictly for adults aged 21 and above. bdg66 does not knowingly collect personal data from anyone under the age of 21. If we discover that personal data has been submitted to us by or on behalf of a person under the age of 21, we will delete that data immediately and close the associated account without notice. If you are a parent or guardian and believe that your child has registered an account on bdg66, please contact us immediately at [email protected] so that we can take prompt action.

12Changes to This Privacy Policy

bdg66 reserves the right to update or modify this Privacy Policy at any time. When we make material changes, we will post the updated Policy on this page with a revised Effective Date, and we will notify registered players via their registered mobile number or email address. We encourage you to review this Policy periodically. Your continued use of the Service after any updated Policy is posted constitutes your acknowledgement of the changes. If you do not agree with the updated Policy, you may close your account by contacting [email protected].

13Contact & Data Requests

For all privacy-related enquiries, data rights requests (access, correction, erasure, portability, restriction or objection), complaints about how your personal data has been handled, or any question about this Privacy Policy, please contact the bdg66 Data team at the email address below. Our support team is available 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6). We aim to respond to all privacy requests within 30 days.

When submitting a data rights request, please include your registered mobile number, the nature of your request (e.g. "access request", "erasure request"), and a brief description of the data concerned. To protect your privacy, we will verify your identity before processing any data rights request.