be666 Privacy Policy — How We Collect, Use, and Protect Your Personal Data

This Privacy Policy ("Policy") describes how be666 ("be666", "we", "us", "our") collects, uses, stores, shares, and protects the personal data of users ("User", "you", "your") who access or use the be666 online betting and casino platform available at https://be666.io and all associated sub-domains, mobile interfaces, and related services (collectively, the "Platform").

This Policy forms an integral part of the be666 Terms and Conditions. By registering an account, making a deposit, or otherwise using the Platform, you acknowledge that you have read this Policy in its entirety and that you consent to the collection and processing of your personal data as described herein. If you do not consent to the practices described in this Policy, you must not use the Platform.

be666 is committed to handling your personal data with transparency, integrity, and respect. We recognise that players entrust us with sensitive information — including financial data and identity documents — and we take that responsibility seriously. This Policy is written in plain English wherever possible, without sacrificing the precision required of a legal document.

For the purposes of this Policy, be666 acts as the data controller in respect of all personal data collected through the Platform. As data controller, be666 determines the purposes for which personal data is processed and the means by which that processing is carried out.

All enquiries relating to this Policy or to the exercise of your data rights should be directed to the be666 Data Protection contact point. Contact details are provided in Section 16 of this Policy. be666 will acknowledge all written data-related enquiries within five (5) business days.

be666 collects the following categories of personal data, depending on how you interact with the Platform:

be666 does not intentionally collect special category data (such as health information, racial or ethnic origin, religious beliefs, or political opinions). If you voluntarily disclose such information in a support communication, we will treat it with the highest level of confidentiality and will not use it for any purpose other than resolving your enquiry.

be666 collects personal data through the following channels:

• Direct interactions. Data you provide when creating an account, completing identity verification, making a deposit or withdrawal, contacting customer support, or participating in promotions.
• Automated technologies. Technical and usage data collected automatically as you navigate the Platform, via server logs, cookies, pixel tags, and similar technologies. See Section 11 for details on our cookie use.
• Third-party payment providers. Transaction confirmation data received from bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and other payment processors when you initiate a deposit or withdrawal.
• Identity verification services. Where we use third-party KYC or fraud-screening services to verify the identity documents you submit, those services may return a verification result together with certain extracted data fields.
• Publicly available sources. In connection with anti-money-laundering (AML) obligations, be666 may cross-reference your details against publicly available sanctions lists, politically exposed persons (PEP) databases, and adverse media sources.

be666 uses your personal data for the following purposes:

• Account management. To create, maintain, and administer your be666 account, including processing registration, verifying your identity, and managing account settings.
• Payment processing. To process deposits, withdrawals, and refunds through your chosen payment method, and to detect and prevent fraudulent transactions.
• Service delivery. To provide access to sports betting markets, casino games, live dealer tables, and all other features of the Platform.
• Regulatory compliance. To comply with anti-money-laundering (AML) obligations, know-your-customer (KYC) requirements, age verification obligations, and any other applicable legal or regulatory duty.
• Customer support. To respond to your enquiries, resolve disputes, investigate complaints, and improve the quality of our support service.
• Security and fraud prevention. To detect, investigate, and prevent fraudulent activity, abuse of the Platform, match-fixing, money laundering, and other prohibited conduct.
• Responsible gaming. To monitor betting patterns and usage behaviour for signs of problem gambling, and to apply account restrictions or self-exclusion measures where appropriate.
• Platform improvement. To analyse aggregated usage data in order to improve the functionality, performance, and content of the Platform.
• Marketing communications. To send you promotional emails and bonus offers where you have opted in to receive such communications. You may withdraw your marketing consent at any time by contacting support or using the unsubscribe mechanism in any marketing email.

be666 processes your personal data on one or more of the following legal bases:

• Contractual necessity. Processing is necessary to perform the contract between you and be666 — i.e., to operate your account and deliver the Platform services you have requested.
• Legal obligation. Processing is necessary for be666 to comply with its legal and regulatory obligations, including AML, KYC, and age verification requirements.
• Legitimate interests. Processing is necessary for be666's legitimate interests, including fraud prevention, security monitoring, Platform improvement, and responsible gaming monitoring, provided those interests are not overridden by your rights and interests.
• Consent. Where be666 relies on your consent as the legal basis for processing — in particular for marketing communications — you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

be666 does not sell, rent, or trade your personal data to any third party. We share your data only in the following limited circumstances, and only to the extent strictly necessary for the stated purpose:

• Payment processors. bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and other payment partners receive the transaction data necessary to process your deposits and withdrawals.
• Identity verification providers. Third-party KYC and document verification services receive copies of the identity documents you submit, solely for the purpose of verifying their authenticity.
• Game software providers. Providers such as Evolution Gaming, Pragmatic Play, Ezugi, Spribe, NetEnt, and Microgaming receive session tokens and minimal technical identifiers necessary to load and run their games within the Platform. They do not receive your full name, payment details, or identity documents.
• Fraud and security services. Specialist fraud-detection and AML-screening services may receive technical and transactional data for the purpose of flagging suspicious activity.
• Legal and regulatory authorities. be666 will disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory bodies where required to do so by applicable law or a valid legal order.
• Business transfers. In the event of a merger, acquisition, or sale of all or part of be666's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer in advance.

All third parties with whom be666 shares personal data are required to process that data lawfully, to implement appropriate technical and organisational security measures, and to use the data only for the specific purpose for which it was shared. be666 does not permit third parties to use your data for their own marketing purposes.

The be666 Platform primarily serves players based in Bangladesh. Some of the third parties described in Section 7 — in particular game software providers and fraud-screening services — may be located in or operate from countries outside Bangladesh. Where personal data is transferred internationally, be666 takes reasonable steps to ensure that an appropriate level of data protection is applied to that data, commensurate with the standards described in this Policy.

By using the Platform and accepting this Policy, you consent to the transfer of your personal data to third parties in other countries for the purposes described herein, subject to the safeguards described above.

be666 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or for as long as is required by applicable law or regulation. The following general retention periods apply:

When personal data is no longer required for the purpose for which it was collected and no legal obligation requires its continued retention, be666 will securely delete or anonymise it. Anonymised data (from which all identifying information has been irreversibly removed) may be retained indefinitely for statistical and analytical purposes.

be666 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption on all connections between user devices and the Platform, ensuring that data in transit cannot be intercepted in readable form.
• Encryption of sensitive data at rest, including stored copies of identity documents and financial account details.
• Role-based access controls that limit access to personal data to only those members of the be666 team who require it to perform their job functions.
• Regular security assessments and vulnerability scanning of Platform infrastructure.
• Two-factor authentication options for user accounts, to reduce the risk of unauthorised account access.
• Firewall protection and intrusion detection systems on all production servers.
• Staff training on data protection responsibilities and secure data handling practices.

Notwithstanding these measures, no internet-based platform can guarantee absolute security. Users are encouraged to use strong, unique passwords for their be666 accounts, to enable any available two-factor authentication, and to notify be666 immediately at [email protected] if they suspect any unauthorised access to their account.

The be666 Platform uses cookies and similar tracking technologies to deliver a functional, secure, and personalised experience. A cookie is a small text file placed on your device by a web server. Cookies cannot run programs or deliver viruses to your device.

be666 uses the following categories of cookies:

• Strictly necessary cookies. These are essential for the Platform to function. They maintain your login session, remember items in your account, and ensure that security features operate correctly. The Platform cannot function without these cookies, and they cannot be disabled.
• Functional cookies. These remember your preferences — such as your preferred language, display settings, and previously visited sections of the Platform — to provide a more personalised experience.
• Analytics cookies. be666 uses anonymised analytics cookies to understand how visitors use the Platform — for example, which pages are visited most frequently, where users drop off, and how long typical sessions last. This data is used in aggregate form only and cannot identify individual users.

be666 does not use third-party advertising cookies, behavioural tracking cookies, or social media tracking pixels. You will not be tracked across other websites as a result of visiting be666.io. You may control cookie preferences through your browser settings; however, disabling strictly necessary cookies will prevent you from accessing most features of the Platform.

Subject to applicable law and certain conditions, you have the following rights in respect of your personal data held by be666:

• Right of access. You have the right to request a copy of all personal data that be666 holds about you, together with information about how it is being used.
• Right to rectification. You have the right to request the correction of any inaccurate personal data that be666 holds about you. You may also update certain account details directly through the account settings panel.
• Right to erasure. You have the right to request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where there is no other lawful basis for its retention. This right is subject to legal retention obligations — in particular, AML regulations may require us to retain certain records for up to five years after account closure regardless of a deletion request.
• Right to restriction of processing. You have the right to request that be666 temporarily suspend the processing of your personal data in certain circumstances, such as while the accuracy of data is being contested or a legitimate-interest objection is being assessed.
• Right to data portability. You have the right to receive a copy of the personal data you have provided to be666 in a structured, commonly used, machine-readable format, and to request that this data be transferred directly to another controller where technically feasible.
• Right to object. You have the right to object to the processing of your personal data where that processing is based on legitimate interests. You also have an unconditional right to object to the processing of your personal data for direct marketing purposes.
• Right to withdraw consent. Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that took place before withdrawal.

To exercise any of these rights, please contact the be666 support team at [email protected] with the subject line "Data Rights Request". Please include your registered account email address and a clear description of the right you wish to exercise. be666 will respond within thirty (30) calendar days of receiving a valid request. In complex cases, this period may be extended by a further thirty (30) days, of which you will be informed in advance.

The be666 Platform is strictly for adults aged 21 years and above. be666 does not knowingly collect personal data from persons under the age of 21. If be666 discovers that personal data has been collected from a person under the age of 21, that account will be closed immediately, any funds deposited will be returned to the originating payment method, all winnings generated will be forfeited, and all personal data associated with that account will be deleted as promptly as is consistent with our legal obligations.

If you are a parent or guardian and believe that a person under your care has registered an account with be666, please contact us immediately at [email protected] so that we can take appropriate action without delay.

In the event that be666 suffers a personal data breach that is likely to result in a risk to the rights and freedoms of affected users, be666 will notify affected users by email to their registered email address as soon as reasonably practicable. The notification will describe the nature of the breach, the categories and approximate number of individuals affected, the likely consequences of the breach, and the measures be666 has taken or proposes to take to address the breach and mitigate its effects.

be666 maintains an internal data breach register and will take all reasonable technical and organisational steps to contain, investigate, and remediate any breach promptly. If you become aware of any security vulnerability or suspect that your account has been compromised, please contact [email protected] immediately.

be666 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, Platform features, or our internal data handling practices. Where changes are material, be666 will notify registered users by email or by displaying a prominent notice on the Platform prior to the changes taking effect.

The updated Policy will be published at https://be666.io/privacy-policy. The date at the top of this page will be updated to reflect the effective date of the most recent revision. Your continued use of the Platform after the effective date of any revision constitutes your acceptance of the updated Policy. If you do not accept the revised Policy, you must cease using the Platform and contact us to close your account.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way be666 handles your personal data, please contact us using the details below. All data-related communications should be submitted in English.

Email: [email protected]

Subject Line: Privacy Policy Enquiry / Data Rights Request

Response Time: Within 5 business days for general enquiries; within 30 calendar days for formal data rights requests.

Support Hours: 24 hours a day, 7 days a week — Bangladesh Standard Time (BST, UTC+6).