bl666 Privacy
Policy
At bl666, protecting your personal information is a core responsibility. This Privacy Policy explains what data we collect, why we collect it, how it is used, and the rights you hold over your own information when using the bl666 platform.
Section 1
Information We Collect
bl666 collects personal data in a number of ways — directly from you when you register or interact with the Platform, automatically as you use our services, and from trusted third-party sources where permitted. We collect only the information that is necessary for the purposes described in this policy and do not gather data beyond what is reasonably required.
1.1 Information You Provide Directly
When you register for a bl666 account, make a deposit or withdrawal, contact support, or participate in promotions, you may provide the following categories of personal data:
- Identity Data: Full legal name, date of birth, gender, and nationality as stated on your government-issued identification document.
- Contact Data: Email address, mobile phone number, and residential address including city (e.g., Dhaka, Chittagong, Sylhet, Khulna) and postcode.
- Account Credentials: Username and encrypted password. bl666 never stores your password in plain text.
- Financial Data: Payment method details including your bKash, Nagad, Rocket, or Upay account numbers, bank account references, and transaction records. bl666 does not store full card numbers or mobile banking PINs.
- Verification Documents: Copies of government-issued photo ID (National ID card, passport, or driving licence), proof of address documents, and payment method screenshots submitted as part of our KYC process.
- Communications Data: Records of your correspondence with bl666 support via live chat, email, or WhatsApp, including the content of those communications and timestamps.
- Preferences & Consent Records: Your marketing preferences, bonus opt-in selections, and responsible gaming limit settings.
1.2 Information Collected Automatically
When you access and use the bl666 Platform, certain technical and behavioural data is collected automatically through our servers, analytics tools, and cookies. This includes:
- Device & Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
- Usage Data: Pages visited, games played, bets placed, session duration, click-stream data, and features used within the Platform.
- Location Data: Approximate geographic location derived from your IP address. bl666 does not access your device's GPS location without explicit permission.
- Transaction Logs: Automated records of all deposits, withdrawals, bonus activations, and wager history associated with your account.
1.3 Information From Third Parties
bl666 may receive supplementary information about you from the following third-party sources, where legally permitted:
- Payment processors and mobile financial service providers (bKash, Nagad, Rocket, Upay) for transaction verification and fraud screening
- Identity verification service providers for KYC and age verification purposes
- Fraud detection and anti-money-laundering compliance databases
- Analytics and advertising technology partners (see the Cookies section for details)
Data Minimisation
bl666 adheres to the principle of data minimisation. We collect only what is genuinely necessary to operate the Platform safely, comply with our legal obligations, and deliver the services you have requested. We do not sell your data to advertisers.
KYC & Age Verification
Verification documents submitted for KYC purposes are handled with the highest level of confidentiality. They are used solely to confirm your identity, age, and payment method ownership — and are stored in an encrypted document vault.
Section 2
How We Use Your Data
bl666 processes your personal data only where we have a lawful basis to do so. The table below sets out the primary purposes for which we use your data, alongside the legal basis underpinning each processing activity.
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account registration & management | Identity, contact, credentials | Performance of contract |
| Processing deposits & withdrawals | Financial data, identity data | Performance of contract |
| KYC / age verification | Identity documents, date of birth | Legal obligation |
| Fraud prevention & AML compliance | Transaction logs, device data, IP address | Legal obligation / legitimate interest |
| Customer support | Communications data, account data | Performance of contract |
| Responsible gaming tools | Usage data, transaction logs, preferences | Legal obligation / legitimate interest |
| Sending promotional communications | Contact data, preferences | Consent (opt-in required) |
| Platform analytics & improvement | Usage data, device data | Legitimate interest |
| Legal & regulatory compliance | All categories as required | Legal obligation |
bl666 will not use your data for any purpose that is incompatible with those listed above without first seeking your explicit consent. Where we rely on legitimate interest as a legal basis, we conduct a balancing test to ensure that our interests do not override your fundamental rights and freedoms.
Section 3
Data Sharing & Third Parties
bl666 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share your data only in the limited circumstances described below, and always with appropriate contractual safeguards in place to protect your information.
3.1 Service Providers & Data Processors
bl666 engages trusted third-party service providers who process personal data on our behalf, strictly under our instructions and for the purposes described in this policy. These include:
- Payment Partners: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank — to facilitate deposits and withdrawals and to verify transaction authenticity.
- KYC & Identity Verification Providers: Third-party identity verification platforms that check the authenticity of documents submitted during account registration.
- Fraud & AML Screening Services: Automated compliance platforms that screen player accounts and transactions against watchlists and sanction databases.
- Game Studio Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive pseudonymised session data to facilitate game delivery and resolve game disputes.
- Cloud Hosting & Infrastructure: Secure, enterprise-grade cloud providers that host the bl666 Platform under strict data processing agreements.
- Analytics Providers: Web analytics tools that process aggregated, anonymised usage data to help us understand Platform performance and improve user experience.
3.2 Legal & Regulatory Disclosures
bl666 may disclose your personal data to governmental authorities, law enforcement agencies, or regulatory bodies where required by law, court order, or lawful regulatory instruction. Such disclosures are made only to the extent necessary to fulfil the relevant legal obligation. Where legally permissible, bl666 will notify you of such a disclosure request.
3.3 Business Transfers
In the event of a merger, acquisition, asset sale, or restructuring of bl666's business, your personal data may be transferred to the relevant successor entity. bl666 will notify affected players in advance and will ensure that any successor entity is bound by privacy obligations no less protective than those set out in this policy.
3.4 International Data Transfers
As an international online gaming platform, bl666 may transfer your personal data to servers and third-party processors located outside Bangladesh. Where such transfers occur, bl666 implements appropriate safeguards — including standard contractual clauses or equivalent mechanisms — to ensure that your data receives a level of protection consistent with international best practices.
Section 5
Data Security Measures
bl666 takes the security of your personal data seriously. We implement a range of technical, organisational, and procedural safeguards designed to protect your information against unauthorised access, disclosure, alteration, loss, or destruction.
While no system can guarantee absolute security, bl666 maintains a robust security posture that includes the following measures:
SSL / TLS Encryption
All data transmitted between your device and bl666 servers is encrypted using industry-standard SSL/TLS protocols. Look for the padlock icon in your browser's address bar as confirmation of an encrypted connection.
Encrypted Data Storage
Sensitive personal data — including identity documents, financial details, and account credentials — is stored in encrypted form using advanced encryption standards. Passwords are hashed and salted; they are never stored in readable format.
Access Controls
Access to personal data within bl666's systems is restricted on a strict need-to-know basis. Staff members are granted the minimum level of data access required to perform their role, and all access events are logged and audited.
Two-Factor Authentication
bl666 supports two-factor authentication (2FA) for all player accounts. Enabling 2FA adds a second verification step at login, significantly reducing the risk of unauthorised account access even if your password is compromised.
Fraud Monitoring
bl666 operates continuous automated fraud monitoring systems that detect unusual account behaviour, login attempts from unfamiliar locations, and suspicious transaction patterns — triggering real-time alerts and protective account restrictions.
Regular Security Audits
bl666's infrastructure undergoes periodic security assessments and vulnerability testing carried out by independent specialists. Identified vulnerabilities are remediated within defined response windows based on severity classification.
If you discover or suspect a security vulnerability affecting the bl666 Platform, please report it responsibly to our security team at [email protected]. We take all such reports seriously and will investigate promptly.
Section 6
Data Retention Policy
bl666 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve any disputes that may arise. The table below provides indicative retention periods for the main categories of personal data processed by bl666.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | Legal / AML compliance |
| KYC / identity documents | Duration of account + 5 years post-closure | Regulatory obligation |
| Financial transaction records | Duration of account + 7 years post-closure | AML / financial record-keeping |
| Customer support communications | 3 years from last interaction | Dispute resolution / quality assurance |
| Marketing consent records | Duration of consent + 3 years | Legal proof of consent |
| Session / usage logs | 13 months rolling | Analytics / fraud detection |
| Responsible gaming records | Duration of account + 5 years post-closure | Player protection / regulatory obligation |
Upon expiry of the applicable retention period, bl666 will securely delete or anonymise your personal data so that it can no longer be associated with you as an identifiable individual. Where data is anonymised rather than deleted, it may be retained indefinitely for statistical and research purposes in a form that does not identify you.
Section 7
Your Privacy Rights
As a player on the bl666 Platform, you hold a number of rights in relation to your personal data. bl666 is committed to facilitating the exercise of these rights promptly and transparently. To submit a data rights request, please contact our privacy team at [email protected] with the subject line "Data Rights Request" along with your registered account email address and a description of your request.
bl666 will respond to verified data rights requests within 30 calendar days. In cases of complexity or high volume, this period may be extended by a further 30 days, in which case you will be notified. There is no charge for submitting a data rights request, unless the request is manifestly unfounded, excessive, or repetitive — in which case a reasonable administrative fee may apply.
Right of Access
You have the right to request a copy of the personal data bl666 holds about you, along with information on how it is being used. This is sometimes called a Subject Access Request (SAR).
Right to Rectification
If any personal data bl666 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
Right to Erasure
Also known as the "right to be forgotten", this allows you to request deletion of your personal data in certain circumstances, subject to bl666's legal retention obligations.
Right to Restrict Processing
You may request that bl666 temporarily suspend the processing of your data in certain situations, for example while a rectification request is being investigated.
Right to Data Portability
Where processing is based on your consent or contractual necessity, you have the right to receive your personal data in a structured, machine-readable format for transfer to another provider.
Right to Object
You have the right to object to bl666 processing your personal data for direct marketing purposes. You may also object to processing based on legitimate interest in certain circumstances.
Rights Re: Automated Decisions
Where bl666 makes significant automated decisions about you (such as account restrictions based on automated fraud scoring), you have the right to request human review of such decisions.
Right to Withdraw Consent
Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time via your account settings without affecting any prior lawful processing.
Section 8
Contact Our Privacy Team
If you have any questions, concerns, or complaints about how bl666 handles your personal data, or if you wish to exercise any of the rights described in Section 7, please contact our dedicated privacy team. We aim to acknowledge all privacy-related enquiries within two business days and to resolve them within 30 calendar days.
Privacy Contact Details
Email: [email protected] (subject line: "Privacy Enquiry")
Live Chat: Available 24/7 via the bl666 Platform
WhatsApp: 09:00–22:00 BST daily
Please note that bl666 will need to verify your identity before processing any data rights request. You may be asked to confirm your registered email address, account username, and in some cases provide a copy of your identity document to confirm that the request is being made by the account holder.
Changes to This Privacy Policy
bl666 reserves the right to update this Privacy Policy at any time. Material changes — those that significantly affect how your data is used or your rights as a data subject — will be communicated via email to your registered address at least seven days before taking effect. The "Effective Date" at the top of this page will be updated whenever revisions are published. We recommend bookmarking this page and reviewing it periodically to stay informed of how your data is protected.
Get In Touch
- [email protected]
- Live Chat: 24/7
- WhatsApp: 09:00–22:00 BST
Response Times
- General enquiries: 2 business days
- Data rights requests: 30 calendar days
- Urgent security reports: 24 hours
Ready to Play Responsibly at bl666?
Now that you understand how bl666 protects your data, explore our full range of games and sports betting — all secured with SSL encryption and fair play certification for Bangladesh players.