bf66 Privacy Policy — How We Protect Your Data

Introduction

This Privacy Policy ("Policy") describes how bf66 ("bf66", "we", "us", "our") collects, uses, stores, shares, and protects the personal data of individuals ("you", "your", "Player", "User") who visit the bf66 website at https://bf66.io, register an account, or use any of the services offered by bf66, including casino games, live dealer games, sports betting, slots, and promotional features (collectively, the "Services").

bf66 is committed to handling your personal data responsibly and in accordance with recognised data protection principles. This Policy is intended to give you a clear and complete picture of our data practices so that you can make informed decisions about your use of the bf66 platform.

By registering an account with bf66 or using the Services, you confirm that you have read and understood this Privacy Policy and agree to the collection and use of your personal data as described herein. If you do not agree with this Policy, you should not use the bf66 platform.

Data Controller

bf66 acts as the data controller in respect of the personal data you provide when registering and using the bf66 platform. As data controller, bf66 determines the purposes for which your personal data is collected and the manner in which it is processed.

If you have any questions about how bf66 processes your personal data, or if you wish to exercise any of your privacy rights as described in Section 11 of this Policy, you may contact the bf66 data protection contact point at the email address set out in Section 14 of this Policy.

Personal Data We Collect

bf66 collects the following categories of personal data from players. The specific data collected at any given time depends on the stage of your relationship with bf66 (registration, verification, active play, withdrawal, or support interaction).

3.1 Identity & Contact Data

• Full legal name (first name and surname)
• Date of birth
• Residential address (street, city, district, postcode)
• Email address
• Mobile telephone number
• Gender (where provided voluntarily during registration)

3.2 Identity Verification (KYC) Data

• Scanned or photographed copies of government-issued photographic identification (National Identity Card, passport, or driving licence)
• Proof of address documents (utility bill, bank statement, or mobile financial service statement)
• Proof of payment method ownership (screenshots or statements from bKash, Nagad, Rocket, Upay, or other registered payment accounts)
• Selfie or liveness-check image where required for enhanced verification

3.3 Financial & Transaction Data

• Deposit amounts, dates, and payment method identifiers
• Withdrawal requests, amounts, and processing status
• Account balance history
• Bonus credits applied and wagering progress
• Mobile financial service account numbers (bKash, Nagad, Rocket, Upay) — stored as masked identifiers, not full credentials

3.4 Gaming Activity Data

• Game session history (games played, stakes, results, session duration)
• Sports betting history (markets selected, bet amounts, outcomes)
• Responsible gaming settings (deposit limits, session time limits, self-exclusion status)

3.5 Technical & Device Data

• IP address at the time of registration and each login
• Device type, operating system, and browser information
• Geographic location derived from IP address (country and city level)
• Session timestamps and login history
• Cookie identifiers and similar tracking technologies (see Section 8)

3.6 Communications Data

• Content of communications sent to bf66 customer support (email, live chat transcripts)
• Records of marketing communications sent to you and your interaction with them (open rates, click-through) where you have opted in to marketing

How We Collect Your Data

bf66 collects personal data through the following means:

4.1 Directly from You

The majority of the personal data bf66 holds about you is provided directly by you during the account registration process, the KYC verification process, when you make a deposit or withdrawal, when you contact bf66 customer support, or when you respond to a promotional offer or survey.

4.2 Automatically through Platform Use

When you visit the bf66 website or use the Services, certain technical and device data is collected automatically by bf66's systems. This includes your IP address, device identifiers, browser type, operating system, and session activity data. This automated collection is necessary for the secure operation of the platform and for fraud prevention purposes.

4.3 Through Cookies and Similar Technologies

bf66 uses cookies and similar tracking technologies on its website to distinguish you from other users, remember your preferences, maintain your session, and analyse how the platform is being used. For full details, please see Section 8 of this Policy.

4.4 From Third-Party Service Providers

bf66 may receive personal data about you from trusted third-party providers in limited circumstances, including:

• Identity verification and KYC service providers who perform document checks on bf66's behalf;
• Payment processors and mobile financial service partners (bKash, Nagad, Rocket, Upay) who confirm transaction status;
• Fraud detection and anti-money laundering screening services;
• Game studios (Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, Spribe) who may provide session-level data to bf66 for game integrity and dispute resolution purposes.

Legal Basis for Processing Your Data

bf66 processes your personal data on the following legal bases, depending on the nature and purpose of the processing activity:

How We Use Your Personal Data

bf66 uses your personal data for the following purposes:

• Account Administration: Creating and managing your bf66 player account, processing login requests, and maintaining accurate account records.
• Identity & Age Verification: Confirming that you meet the minimum age requirement of 21 years and that the identity information you have provided is accurate.
• Payment Processing: Facilitating deposits and withdrawals via your registered payment methods, including bKash, Nagad, Rocket, Upay, and bank transfer.
• Fraud Prevention & Security: Monitoring account activity for signs of fraudulent behaviour, account takeover attempts, money laundering, or other prohibited conduct as defined in the bf66 Terms & Conditions.
• Responsible Gaming: Monitoring player activity to identify signs of problem gambling behaviour, applying self-imposed limits or exclusions requested by players, and complying with responsible gaming obligations.
• Customer Support: Responding to your enquiries, resolving disputes, and providing technical assistance.
• Promotional Communications: Sending you information about bf66 bonuses, promotions, and special offers where you have opted in to receive marketing communications. You may withdraw your consent at any time by contacting [email protected].
• Platform Analytics: Analysing aggregated and anonymised usage data to understand how the bf66 platform is used and to improve the Services.
• Legal Compliance: Meeting bf66's obligations under applicable law, including obligations relating to anti-money laundering, counter-terrorism financing, and data protection.

Data Sharing & Third-Party Processors

bf66 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. bf66 shares your personal data only in the following limited circumstances:

7.1 Service Providers

bf66 engages carefully selected third-party service providers to assist in operating the platform. These providers process personal data on behalf of bf66 and are permitted to use it only for the specific services they provide to bf66. All service providers are required to implement appropriate technical and organisational security measures. Categories of service provider include:

• Identity verification and KYC providers;
• Payment processing partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard);
• Fraud detection and anti-money laundering screening services;
• Cloud hosting and server infrastructure providers;
• Customer support platform providers;
• Email and communications delivery services;
• Game studio technology providers (Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, Spribe).

7.2 Legal & Regulatory Disclosures

bf66 may disclose your personal data to law enforcement agencies, regulatory bodies, or other public authorities where required to do so by applicable law, court order, or where bf66 believes in good faith that disclosure is necessary to prevent fraud, protect the rights of other players, or ensure the security of the platform.

7.3 Business Transfers

In the event that bf66 undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the acquiring entity as part of that transaction. bf66 will notify registered players of any such transfer and the privacy policy that will govern your data following the transfer before it takes effect.

Cookies & Tracking Technologies

bf66 uses cookies and similar tracking technologies on the bf66 website. Cookies are small text files placed on your device when you visit a website. They allow the website to remember your actions and preferences over a period of time.

8.1 Types of Cookies Used by bf66

8.2 Managing Cookies

Strictly necessary cookies cannot be disabled as they are essential to the operation of the bf66 platform. You may disable functional, analytics, and marketing cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the bf66 website and your overall platform experience. Instructions for managing cookies in common browsers are available in each browser's help documentation.

Data Retention

bf66 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting obligations. The following general retention periods apply:

• Account data and KYC documents: Retained for a minimum of 5 years from the date of account closure, in accordance with anti-money laundering record-keeping obligations.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction.
• Gaming activity logs: Retained for a minimum of 3 years from the date of each session.
• Customer support communications: Retained for 2 years from the date of the last communication in each support case.
• Marketing preference records: Retained for 2 years from the date of your last opt-in or opt-out interaction.
• Technical and device data (IP logs, session logs): Retained for 12 months from the date of collection.

Where bf66 no longer has a legitimate reason to retain your personal data, it will be securely deleted or anonymised so that it can no longer be associated with your identity. Anonymised or aggregated data that cannot identify any individual may be retained indefinitely for analytical and statistical purposes.

Data Security

bf66 takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption applied to all data transmitted between your device and the bf66 platform;
• Encrypted storage of personal data and financial records in secure server environments;
• Access controls that restrict access to personal data within the bf66 organisation to personnel who require it for their specific role;
• Two-factor authentication available to all players and required for all internal bf66 system access;
• Regular security audits and penetration testing of the bf66 platform infrastructure;
• Intrusion detection systems that monitor for unauthorised access attempts in real time;
• Staff training on data protection responsibilities and security best practices.

While bf66 applies industry-standard security measures, no system can guarantee absolute security. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, bf66 will notify affected players as soon as practicable after becoming aware of the breach.

Your Privacy Rights

As a player on the bf66 platform, you have the following rights in respect of your personal data. To exercise any of these rights, please submit a written request to [email protected]. bf66 will respond to all valid requests within 30 days of receipt.

• Right of Access: You have the right to request a copy of the personal data bf66 holds about you, together with information about how it is being used and with whom it has been shared.
• Right to Rectification: You have the right to request that bf66 corrects any inaccurate or incomplete personal data held about you. You may also update certain account information directly through your bf66 account settings.
• Right to Erasure: In certain circumstances, you have the right to request that bf66 deletes your personal data. This right is subject to bf66's legal obligations — for example, bf66 is required to retain certain transaction and KYC records for a minimum period under anti-money laundering law, and this obligation takes precedence over an erasure request in respect of those specific records.
• Right to Restrict Processing: You have the right to request that bf66 restricts the processing of your personal data in certain circumstances, for example while the accuracy of your data is being contested or while a complaint is being investigated.
• Right to Data Portability: Where bf66 processes your personal data on the basis of your consent or for the performance of a contract, and where the processing is carried out by automated means, you have the right to request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to bf66's processing of your personal data where that processing is based on legitimate interests. You also have an absolute right to object to the processing of your personal data for direct marketing purposes at any time.
• Rights Related to Automated Decision-Making: bf66 does not make decisions about players that produce significant legal or similarly significant effects based solely on automated processing without human review.

Children & Minors

The bf66 platform is strictly for adults aged 21 years and above. bf66 does not knowingly collect personal data from individuals under the age of 21. If bf66 discovers or is notified that personal data has been collected from a person under the age of 21, bf66 will immediately close the associated account, delete the data collected, and void any transactions associated with that account.

If you are a parent or guardian and believe that a minor in your care has registered an account with bf66 or has provided personal data to bf66 without your consent, please contact bf66 immediately at [email protected] with the subject line "Minor Account Report". bf66 will investigate and act on all such reports as a matter of priority.

Changes to This Privacy Policy

bf66 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, changes in the Services, or changes in applicable law. When bf66 makes a material change to this Policy, we will notify registered players by sending an email to the address registered on your account and by posting a notice on the bf66 website.

The updated Privacy Policy will take effect on the date stated in the "Last Updated" notice at the top of the document. Your continued use of the bf66 platform after that date constitutes your acceptance of the updated Policy. If you do not accept the updated Policy, you must stop using the Services and contact bf66 to arrange closure of your account.

The most current version of this Privacy Policy is always accessible on the bf66 website at https://bf66.io/privacy-policy.

Contact & Complaints

If you have any questions, concerns, or complaints about this Privacy Policy or the way in which bf66 handles your personal data, please contact the bf66 data protection contact point using the details below:

• Email: [email protected] — Subject line: "Privacy Enquiry" or "Data Rights Request"
• Live Chat: Available via the bf66 website, 7 days a week, 9:00 AM – 11:00 PM BST (UTC+6)
• Response Time: bf66 aims to respond to all privacy-related enquiries within 5 business days and to formal data rights requests within 30 calendar days.

If you are not satisfied with bf66's response to your privacy complaint after giving bf66 a reasonable opportunity to investigate and respond, you may have the right to lodge a complaint with a relevant data protection supervisory authority or seek a remedy through applicable legal channels available to you.