bh666 Privacy Policy – How We Collect, Use, and Protect Your Data

1. Who We Are

bh666 ("we", "us", "our") is the operator of the online betting and gaming platform accessible at https://bh666.io. This Privacy Policy applies to all personal data collected and processed by bh666 in connection with the provision of its services to players in Bangladesh and other eligible territories.

By registering an account with bh666 or by continuing to use the bh666 Platform after the effective date of this Privacy Policy, you acknowledge that you have read, understood, and agreed to the collection and processing of your personal data as described herein. If you do not agree with the terms of this Privacy Policy, you should discontinue use of the Platform and contact our support team to request account closure.

For the purposes of data protection law, bh666 acts as the data controller in respect of all personal data collected directly from players through the Platform. Where bh666 engages third-party processors to handle data on its behalf, bh666 ensures that appropriate data processing agreements are in place to protect player data.

2. Data We Collect

bh666 collects personal data in the following categories, depending on how you interact with the Platform:

2.1 Registration Data

When you create a bh666 account, we collect the information you provide during the registration process, including your full name, date of birth, email address, mobile phone number, preferred username, and chosen password (stored in encrypted form only).

2.2 Identity Verification (KYC) Data

To comply with our Know Your Customer (KYC) obligations and to process withdrawals, bh666 may request copies of government-issued identity documents such as your National Identity Card (NID) or passport, a selfie or live photograph for facial verification, proof of address (e.g., a utility bill or bank statement dated within 90 days), and proof of payment method ownership.

2.3 Financial Transaction Data

bh666 records all deposit and withdrawal transactions associated with your account, including the payment method used (e.g., bKash, Nagad, Rocket), transaction amounts in Bangladeshi Taka (৳), transaction timestamps, and associated reference numbers. bh666 does not store full payment card numbers or mobile banking PINs — these are handled exclusively by our certified payment gateway partners.

2.4 Usage and Behavioural Data

When you use the Platform, we automatically collect technical and behavioural data, including your IP address, device type and operating system, browser type and version, pages visited and actions taken within the Platform, bet history and game session data, login timestamps and session durations, and referring URL if you arrived from an external source.

2.5 Communications Data

When you contact our support team via live chat, email, or WhatsApp, we retain records of those communications including the content of your messages, timestamps, and the resolution provided. This data is used for quality assurance, training, and to maintain a record of previous interactions.

The following table summarises the categories of data collected and their primary purposes:

3. How We Use Your Data

bh666 uses the personal data it collects for the following specific purposes:

• Account Management: To create, maintain, and administer your bh666 account, including processing deposits and withdrawals, updating account preferences, and communicating account-related notices.
• Identity Verification: To verify your identity, age, and payment method ownership in accordance with our KYC obligations, and to prevent fraudulent account creation or misuse.
• Platform Security: To monitor account activity for signs of unauthorised access, collusion, bonus abuse, money laundering, or other prohibited conduct as defined in our Terms & Conditions.
• Responsible Gaming: To monitor your betting and gaming patterns for indicators of problem gambling, and to facilitate the use of responsible gaming tools such as deposit limits, cooling-off periods, and self-exclusion requests.
• Legal Compliance: To comply with applicable anti-money laundering (AML) regulations, record-keeping obligations, and any lawful requests from competent authorities.
• Marketing Communications: With your consent, to send you promotional offers, bonus notifications, and updates about new games or features at bh666. You may withdraw consent at any time by contacting our support team or by using the unsubscribe mechanism included in every marketing email.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve the bh666 Platform, optimise the user experience, and develop new features that serve our Bangladesh player community better.
• Customer Support: To respond to your queries, resolve disputes, and maintain records of communications for quality assurance purposes.

4. Legal Basis for Processing

bh666 processes your personal data on one or more of the following legal bases, depending on the purpose of processing:

• Contractual Necessity: Processing that is necessary to perform the contract between you and bh666 (i.e., to provide you with betting and gaming services as agreed in our Terms & Conditions). This covers account creation, payment processing, and core platform operations.
• Legal Obligation: Processing that is required for bh666 to comply with applicable legal and regulatory obligations, including KYC verification, AML monitoring, and record-keeping requirements.
• Legitimate Interests: Processing carried out in pursuit of bh666's legitimate business interests, including platform security, fraud prevention, responsible gaming monitoring, and general business analytics — provided those interests are not overridden by your data protection rights.
• Consent: Processing based on your freely given, specific, and informed consent — primarily in relation to direct marketing communications. You have the right to withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5. Cookies & Tracking Technologies

bh666 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files placed on your device when you visit a website. bh666 uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session cookies that keep you logged in during an active session, and security cookies that help prevent fraudulent login attempts. These cookies cannot be disabled without affecting core Platform functionality.
• Functional Cookies: Used to remember your preferences such as your preferred language display, game lobby filters, and responsible gaming settings, so that you do not need to reconfigure them on each visit.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players interact with the Platform — including which pages are visited most frequently, average session duration, and common navigation paths. This data helps bh666 improve the user experience over time.
• Marketing Cookies: Used only with your consent to present you with relevant promotional content. These cookies may track your visit to the bh666 Platform and are used in connection with bh666's own marketing activities only — not for cross-site advertising networks.

You can manage your cookie preferences through your browser settings. Disabling certain categories of cookies may affect the functionality of the Platform. Strictly necessary cookies are exempt from consent requirements as they are essential for service delivery.

6. Third-Party Service Providers

To deliver its services, bh666 engages certain carefully selected third-party service providers who process personal data on bh666's behalf as data processors. These include:

• Payment Gateway Providers: Partners such as bKash, Nagad, Rocket, Upay, and card processing networks who handle the technical execution of your deposit and withdrawal transactions. These providers are subject to their own security standards and regulatory obligations.
• Identity Verification Services: Third-party KYC and age-verification technology providers who assist bh666 in verifying the authenticity of identity documents submitted by players.
• Game Content Providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi who supply the games available on the bh666 Platform. Game session data may be transmitted to these providers for the purpose of game operation and fairness certification.
• Customer Support Technology: Providers of live chat and helpdesk platforms used to deliver bh666's 24/7 customer support service.
• Analytics Platforms: Providers of anonymised, aggregated analytics services used to measure Platform performance and improve the user experience.

bh666 does not sell, rent, or otherwise commercially transfer your personal data to any third party for that party's own marketing or commercial purposes. All third-party processors are bound by contractual data processing agreements that require them to handle your data securely, use it only for the specified purpose, and delete or return it upon termination of the service relationship.

7. International Data Transfers

The bh666 Platform operates with the Bangladesh market as its primary focus. However, some of our third-party service providers — including game content providers and technology infrastructure partners — may be located in countries outside Bangladesh. Where personal data is transferred internationally, bh666 takes steps to ensure that an adequate level of protection is applied to your data, including through the use of contractual safeguards and data processing agreements that impose obligations equivalent to those described in this Privacy Policy.

By using the bh666 Platform, you acknowledge that your data may be transferred to and processed in countries other than Bangladesh in connection with the delivery of the services described above. bh666 will always ensure that such transfers are conducted in accordance with applicable data protection principles and that your rights as a data subject are preserved.

8. Data Retention

bh666 retains personal data only for as long as is necessary for the purpose for which it was collected, or for as long as required by applicable law, whichever is longer. The following general retention guidelines apply:

• Account Data: Retained for the duration of your active account relationship with bh666, plus a minimum of five years following account closure to satisfy record-keeping obligations.
• KYC and Identity Documents: Retained for a minimum of five years from the date of collection, or longer where required by AML regulations applicable to bh666's operations.
• Financial Transaction Records: Retained for a minimum of five years from the date of each transaction, in accordance with standard financial record-keeping practice.
• Customer Support Communications: Retained for up to three years from the date of the most recent interaction, for quality assurance and dispute resolution purposes.
• Marketing Consent Records: Retained for as long as you remain an active bh666 player, plus one year following account closure or consent withdrawal, whichever is later.
• Usage and Analytics Data: Anonymised after 24 months and retained in anonymised form for statistical analysis.

Upon expiry of the applicable retention period, personal data is securely and permanently deleted from bh666's systems using industry-standard data destruction methods. Where full deletion is not immediately possible due to backup schedules, data is isolated and scheduled for deletion at the next available cycle.

9. Your Rights

As a bh666 player whose personal data we process, you have the following rights in relation to your data. To exercise any of these rights, please contact our support team at support@bh666.io with the subject line "Data Rights Request – [Your Full Name] – [Account ID]". bh666 will acknowledge all valid data rights requests within five business days (BST) and will complete the request within 30 calendar days.

• Right of Access: You have the right to request a copy of all personal data bh666 holds about you, along with information about how it is used and who it has been shared with.
• Right to Rectification: You have the right to request that inaccurate or incomplete personal data be corrected or updated. You may also update certain account details directly through your account dashboard.
• Right to Erasure ("Right to be Forgotten"): You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where consent has been withdrawn, or where the processing has no other lawful basis. Note that certain data must be retained for legal compliance purposes and cannot be erased on request alone.
• Right to Restriction of Processing: You have the right to request that bh666 restrict the processing of your personal data in certain circumstances — for example, while a data accuracy dispute is being resolved.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format and to have it transmitted to another data controller where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data where bh666 relies on legitimate interests as the legal basis for processing. You also have an unconditional right to object to the processing of your data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where bh666 processes your data on the basis of consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to the withdrawal.

10. Security Measures

bh666 applies a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key measures include:

• 256-bit SSL/TLS Encryption: All data in transit between your browser or device and the bh666 Platform is encrypted using industry-standard TLS 1.2 or higher protocols.
• Data Encryption at Rest: Sensitive personal data stored on bh666 servers — including KYC documents and financial records — is encrypted using AES-256 encryption at the storage layer.
• Access Controls: Access to personal data within bh666's internal systems is strictly limited to authorised personnel who require that access to perform their job functions. Role-based access controls and audit logging are applied to all data access activities.
• Firewalls and Intrusion Detection: bh666's infrastructure is protected by enterprise-grade firewalls, web application firewalls (WAF), and real-time intrusion detection and prevention systems (IDS/IPS).
• Regular Security Audits: bh666 conducts periodic internal and third-party security assessments of its Platform and data handling practices to identify and remediate vulnerabilities proactively.
• Staff Training: All bh666 personnel who handle personal data receive regular training on data protection obligations and security best practices.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, bh666 will notify affected players without undue delay using the contact details held on their account, and will take all reasonable steps to contain and remediate the breach.

11. Children & Minors

The bh666 Platform is strictly intended for adults aged 21 years or older. bh666 does not knowingly collect, process, or retain personal data belonging to individuals under the age of 21. If bh666 becomes aware that personal data has been collected from an underage individual, that data will be deleted immediately and the associated account will be permanently closed.

If you are a parent or guardian and you believe that your child has provided personal data to bh666 without your knowledge or consent, please contact our support team immediately at support@bh666.io. bh666 will investigate the matter and take appropriate action, including deletion of any relevant data, within five business days of receiving your report.

12. Changes to This Policy

bh666 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable laws, or the services we provide. Where changes are material — meaning they significantly affect how we process your personal data or your rights in relation to that data — bh666 will provide notice to registered players via email to the address held on their account, and/or via a prominent notice displayed within the Platform at the time of their next login.

The updated Privacy Policy will take effect from the date specified in the notice. The effective date at the top of this document always reflects the date of the most recently published version. Your continued use of the bh666 Platform following notification of material changes constitutes your acceptance of the updated Privacy Policy. If you do not accept the updated terms, you should discontinue use of the Platform and contact our support team to arrange account closure.

Non-material changes — such as corrections of typographical errors, clarifications that do not affect the substance of the policy, or updates to contact details — may be made without prior notice. bh666 encourages players to review this Privacy Policy periodically to stay informed of how their data is being protected.

13. Contact Us

If you have any questions, concerns, or requests in connection with this Privacy Policy or bh666's data practices, please contact our dedicated data protection team using the details below. All enquiries will be handled confidentially and in accordance with our internal data handling procedures.

• Email: support@bh666.io (plain text — not a clickable link)
• WhatsApp: +880 1700 000 000
• Live Chat: Available 24/7 via the bh666 Platform
• Response Time: Email responses within 2–6 hours; data rights requests within 5 business days (BST)
• Support Hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)

For formal data rights requests, please email support@bh666.io with the subject line "Data Rights Request – [Your Full Name] – [Account ID]" and include a brief description of your request. bh666 may ask you to verify your identity before processing the request to ensure the security of your personal data.