bf66 Privacy Policy
At bf66, the privacy and security of our players across Bangladesh is a core responsibility, not an afterthought. This Privacy Policy explains precisely what personal data we collect, why we collect it, how it is used and stored, and what rights you hold over your own information. We encourage you to read it carefully.
How bf66 Protects Your Privacy
These cards summarise our core data protection principles. They complement — but do not replace — the full Privacy Policy text below.
SSL Encryption at All Times
Every page on bf66.ws is served over HTTPS with 256-bit SSL encryption. All data in transit between your device and our servers is encrypted, preventing interception by third parties — including on mobile networks commonly used in Dhaka, Chittagong, and across Bangladesh.
No Sale of Personal Data
bf66 does not sell, rent, or trade your personal information to any third party for their own marketing purposes. Your data is used solely to operate your account, process payments, and improve your experience on the platform.
Purpose-Limited Data Use
We collect only the data we genuinely need. Each category of data we hold is tied to a specific, documented purpose — such as identity verification, payment processing, or responsible gaming monitoring. We do not collect data speculatively or without a clear operational reason.
Transparent Data Practices
This Privacy Policy is written in plain English so that every bf66 player in Bangladesh can understand exactly what data we hold and why. We do not obscure our practices behind legal jargon. If you have questions, our support team is available 24/7 to clarify anything in this document.
Secure Data Retention
Personal data is retained only for as long as it is needed to fulfil the purpose for which it was collected, or as required by applicable law. Account data for closed accounts is securely archived for the minimum legally required period, then permanently deleted from bf66 systems.
Your Rights, Respected
You have the right to access, correct, or request deletion of the personal data bf66 holds about you. You may also object to certain types of processing or request a copy of your data in a portable format. Contact our support team to exercise any of these rights at any time.
Data We Collect
When you use the bf66 platform — whether browsing, registering, depositing, placing a bet, or contacting support — we may collect and process various categories of personal data. The data we collect depends on how you interact with our platform and what services you use. Below is a comprehensive overview of the categories we collect and the circumstances in which they arise.
Registration & Identity Data
When you create a bf66 account, we collect information necessary to establish your identity and set up your account securely. This includes:
- Full legal name (as it appears on your national ID or passport)
- Date of birth (to verify you meet the 18+ age requirement)
- Residential address (including city — e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi)
- Bangladeshi mobile number (used for SMS OTP and account security alerts)
- Email address (for account notifications and support correspondence)
- Username and encrypted password (we store only a one-way hash of your password — we never store or transmit it in plain text)
Identity Verification (KYC) Data
As part of our Know Your Customer programme, we may request copies of identity documents when you register or before processing a withdrawal above certain thresholds. KYC documents may include:
- National ID card (NID) — front and back
- Passport (bio-data page)
- Driving licence
- Proof of address — a utility bill, bank statement, or government-issued document dated within 90 days
- Proof of payment method ownership — for example, a screenshot of your bKash or Nagad account showing your registered name matching your bf66 account
Financial & Transaction Data
Every deposit, withdrawal, bonus claim, and wagering transaction generates financial records. We collect and store:
- Deposit and withdrawal amounts in BDT (৳)
- Payment method used (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank)
- Transaction timestamps and reference numbers
- Account balance history and bonus credit/debit records
bf66 does not store full payment card numbers or bKash/Nagad PINs. Payment gateway interactions are handled by PCI-DSS compliant third-party processors.
Technical & Usage Data
When you visit bf66.ws, our servers automatically record certain technical information. This data is used primarily for security monitoring, fraud prevention, and platform performance optimisation:
| Data Type | Purpose | Retention |
|---|---|---|
| IP address | Fraud detection, geo-restriction compliance | 90 days |
| Browser type & version | Platform compatibility, security logging | 90 days |
| Device type & OS | UI optimisation, session management | 90 days |
| Pages visited & click paths | UX improvement, analytics | 12 months |
| Session duration & frequency | Responsible gaming monitoring | 12 months |
| Login timestamps | Security audit trail | 24 months |
Communications Data
If you contact bf66 via live chat, email ([email protected]), or any in-platform messaging feature, we retain records of those communications. This includes the content of your messages, timestamps, and the resolution status of any complaint or query. These records are kept for quality assurance, staff training, and dispute resolution purposes.
How We Use Your Data
bf66 processes your personal data only where there is a legitimate and documented lawful basis for doing so. We rely on the following legal bases: performance of a contract (operating your account), compliance with legal obligations (KYC, anti-money-laundering), legitimate interests (fraud prevention, platform security), and, where required, your explicit consent (marketing communications).
Account Operation
2.1 Your registration and identity data is used to create and maintain your bf66 account, authenticate your login sessions, and ensure that only you can access your account. Without this data, we cannot provide you with any service.
Payment Processing
2.2 Your financial data is used to process deposits via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank, and to execute withdrawal requests to your verified payment method. Transaction records are retained to resolve payment disputes and satisfy accounting obligations.
Identity Verification & Compliance
2.3 KYC document data is used to verify your identity and age, to comply with anti-money-laundering obligations, and to confirm that you are not subject to any active self-exclusion order. This processing is a legal obligation and cannot be opted out of — accounts that decline KYC will be restricted from making withdrawals until verification is completed.
Responsible Gaming Monitoring
2.4 Session duration, betting frequency, deposit patterns, and account balance data are used to monitor for signs of problematic gambling behaviour. Where our responsible gaming algorithms detect potential risk, bf66 may proactively contact the player, apply a cooling-off period, or prompt them to review the tools available at bf66.ws/responsible-gaming.
Fraud Prevention & Security
2.5 IP address data, device fingerprint information, login history, and transaction patterns are analysed by our automated fraud detection systems to identify suspicious activity including duplicate account registration, bonus abuse, payment fraud, and unauthorised access attempts.
Platform Improvement & Analytics
2.6 Aggregated and anonymised usage data is analysed to understand how players navigate bf66.ws, which games are most popular among players in cities like Dhaka and Chittagong, which features cause friction, and where platform improvements should be prioritised. This analysis does not involve making decisions about individual players.
Marketing & Promotional Communications
2.7 Where you have opted in to receive promotional communications, we may send you information about new games, deposit bonuses, seasonal offers (Eid, Pohela Boishakh, BPL season promotions), and other bf66 news via SMS, email, or in-platform notification. You may withdraw this consent at any time by updating your notification preferences in your account settings or by contacting support at [email protected].
Data Sharing & Third Parties
bf66 does not sell your personal data. We share personal data with third parties only in the limited circumstances described below, and always under contractual data protection obligations that require those parties to handle your data securely and only for the specified purpose.
Payment Service Providers
3.1 To process deposits and withdrawals, bf66 shares necessary transaction data with Bangladeshi payment gateways and mobile financial service providers including bKash, Nagad, Rocket, and Upay. The data shared is limited to what is strictly necessary to execute the transaction (e.g., account number, amount, transaction reference). These providers operate under their own privacy policies and are not authorised to use your data for any purpose beyond processing your payment.
Game Technology Providers
3.2 Games on the bf66 platform are powered by third-party studios including Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, Spribe, and Ezugi. Your account identifier and session token may be shared with these providers to authenticate your game session and record game outcomes for fairness and dispute purposes. These providers do not receive your full name, payment details, or address.
Identity Verification Partners
3.3 Where automated KYC verification is used, bf66 may engage a third-party identity verification service to validate the documents you submit. This service receives the document images and data you provide for the sole purpose of verification and is contractually prohibited from retaining or using it for any other purpose.
Legal & Regulatory Disclosure
3.4 bf66 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, or where we reasonably believe disclosure is necessary to prevent fraud, money laundering, or harm to the safety of individuals. In such cases, we will disclose only the minimum information required by the legal demand.
Business Transfers
3.5 In the event that bf66 undergoes a merger, acquisition, or sale of all or part of its assets, your personal data may be transferred as part of that transaction. We will notify you via the email address on your account prior to any such transfer, and the acquiring entity will be required to honour this Privacy Policy.
Cookies & Tracking Technologies
bf66.ws uses cookies and similar technologies to keep you logged in, remember your preferences, and understand how the platform is used. This section explains what cookies we set, why, and how you can manage them.
What Is a Cookie?
A cookie is a small text file placed on your device (computer, smartphone, or tablet) by a website you visit. Cookies allow the website to recognise your device on subsequent visits and to store information about your session or preferences. Cookies cannot execute code or carry viruses — they are purely data files.
Categories of Cookies We Use
| Category | Description | Can Be Disabled? |
|---|---|---|
| Strictly Necessary | Required for the platform to function. Includes session authentication tokens, security identifiers, and CSRF protection cookies. Without these, you cannot log in or place bets. | No — essential for platform operation |
| Functional | Remember your preferences such as chosen language, preferred game category, and notification settings across sessions. | Yes — disabling may reduce platform convenience |
| Analytics | Collect anonymised data about pages visited, session duration, and click behaviour to help us improve bf66.ws. No personally identifiable information is sent to analytics providers. | Yes — opt out via cookie settings |
| Security & Fraud Detection | Device fingerprinting and risk-scoring cookies used by our fraud prevention system to detect suspicious login attempts and protect your account. | No — required for account security |
Managing Cookies
You can control and delete cookies through your browser settings. Most modern browsers (Chrome, Firefox, Safari, Samsung Internet — commonly used on Android devices popular in Bangladesh) allow you to block third-party cookies, clear existing cookies, or receive a prompt before any cookie is set. Note that disabling strictly necessary or security cookies will impair your ability to use the bf66 platform.
Mobile users accessing bf66 on a smartphone — the primary device for many players across Dhaka, Chittagong, and Sylhet — can manage cookies through their mobile browser settings (Chrome for Android: Settings → Site Settings → Cookies; Safari on iOS: Settings → Safari → Privacy & Security).
Data Security & Retention
Protecting the personal data you entrust to bf66 is one of our highest operational priorities. We maintain a multi-layered security framework designed to prevent unauthorised access, accidental loss, or unlawful processing of player data.
Technical Security Measures
- 5.1 TLS/SSL Encryption: All data transmitted between your browser and bf66.ws is encrypted using TLS 1.2 or higher. Our SSL certificate is maintained current and valid at all times.
- 5.2 Password Hashing: Passwords are never stored in plain text. We use a bcrypt-based one-way hashing algorithm with per-account salts so that even in the event of a database breach, your password cannot be recovered.
- 5.3 Two-Factor Authentication (2FA): Players are strongly encouraged to enable SMS-based 2FA on their accounts. This requires a one-time code sent to your registered Bangladeshi mobile number in addition to your password at login.
- 5.4 Database Access Controls: Access to production databases containing player data is restricted to authorised personnel on a need-to-know basis and is logged for audit purposes.
- 5.5 Regular Security Audits: bf66 conducts periodic internal security reviews and vulnerability assessments of the platform infrastructure to identify and remediate potential weaknesses before they can be exploited.
Data Retention Periods
bf66 retains personal data for as long as your account is active and for a period thereafter as required by applicable legal, regulatory, accounting, and anti-money-laundering obligations. The following retention periods apply as a general guide:
- Active account data (registration details, transaction history, KYC documents): Retained for the lifetime of the account plus a minimum of 5 years after closure.
- Technical logs (IP addresses, session data): Retained for 90 days to 24 months depending on data type (see table in Section 1).
- Support communications: Retained for 3 years from the date of last contact.
- Marketing consent records: Retained for the duration of consent plus 3 years as evidence of compliance.
Data Breach Response
In the event of a personal data breach that poses a risk to your rights and freedoms, bf66 will notify affected players without undue delay — and in any case within 72 hours of becoming aware of the breach — via the email address registered on your account. We will provide clear information about the nature of the breach, the data affected, and the steps you should take to protect yourself (such as changing your password).
Your Privacy Rights
As a bf66 player, you have meaningful rights over the personal data we hold about you. We are committed to honouring these rights in a timely and transparent manner. To exercise any of the rights listed below, please contact our support team via live chat or by emailing [email protected] from the email address registered on your bf66 account. We will respond within 30 days.
Right of Access
6.1 You have the right to request a copy of all personal data that bf66 holds about you, along with information about how it is being processed, who it has been shared with, and how long it will be retained. This is known as a Subject Access Request (SAR). We will provide this information free of charge in a structured, readable format.
Right to Rectification
6.2 If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For certain fields (such as your registered mobile number or address), you can update information directly in your account settings. For identity data that is tied to verified KYC documents, an update request will require submission of updated documentation.
Right to Erasure
6.3 You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and there is no other lawful basis for processing), or where the data has been unlawfully processed. Please note that where bf66 has a legal obligation to retain your data (e.g., transaction records for anti-money-laundering compliance), the right to erasure will not override that obligation.
Right to Restrict Processing
6.4 You have the right to request that we restrict the processing of your personal data in certain circumstances — for example, while you contest its accuracy, or where you have objected to processing and we are assessing whether our legitimate interests override your objection. During a restriction period, we will store your data but will not actively process it.
Right to Data Portability
6.5 Where processing is based on your consent or on the performance of a contract and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON) and to transmit it to another service provider of your choice.
Right to Object
6.6 You have the right to object at any time to the processing of your personal data for direct marketing purposes. Upon receipt of a valid objection to marketing, we will cease processing your data for that purpose immediately. You may also object to processing based on legitimate interests — we will then balance your objection against our interests and cease processing unless we can demonstrate compelling legitimate grounds.
Children & Minors
bf66 is strictly an 18+ platform. We do not knowingly collect personal data from individuals under the age of 18. The platform is not directed at, designed for, or marketed to minors in any way.
7.1 If bf66 discovers or is informed that personal data has been collected from a user who is under 18 years of age, we will immediately suspend the account pending investigation, void any transactions associated with the account, and permanently delete the minor's personal data from our systems — except where retention is required by law to document the incident.
7.2 Parents and guardians who believe a minor may have registered on or used the bf66 platform are encouraged to contact our support team immediately via live chat or at [email protected]. We treat such reports with the highest priority and will act within 24 hours of receiving a verified report.
7.3 bf66 supports the use of parental control tools available through internet service providers in Bangladesh and through device-level content filtering available on Android and iOS devices. These tools can restrict access to gambling-related websites and are recommended for households with minors.
Policy Updates & Contact
Updates to This Policy
8.1 bf66 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, changes in applicable law, or developments in the bf66 platform. When a material change is made, we will notify registered players via the email address on their account and by placing a prominent notice on this page. The "Last Updated" date at the top of this policy will always reflect the date of the most recent revision.
8.2 We encourage you to review this page periodically — particularly before providing new categories of personal data or before making a significant deposit. Continued use of the bf66 platform following notification of a policy update constitutes your acceptance of the revised terms.
How to Contact Us About Privacy
8.3 If you have any question, concern, or complaint about how bf66 handles your personal data — or if you wish to exercise any of the data rights described in Section 6 — please contact our Data Protection team through one of the following channels:
- Email: [email protected] (include "Privacy Request" in the subject line for fastest routing)
- Live Chat: Available 24/7 directly on bf66.ws — response time under 4 hours for privacy-related queries during Bangladesh Standard Time (BST, UTC+6) business hours
8.4 bf66 aims to acknowledge all privacy-related contacts within 24 hours and to resolve them within 30 calendar days. For complex Subject Access Requests or erasure requests that require coordination across multiple systems, we may extend this to 60 days — in which case we will notify you of the extension and the reason within the initial 30-day window.
Your Privacy Is Protected. Now Enjoy the Platform.
With your data handled securely and transparently, you can focus on what matters — live cricket betting, slots, fishing games, and live casino, all accessible via bKash or Nagad from anywhere in Bangladesh.