bv666 Privacy Policy

1 Definitions

In this Privacy Policy, the following terms have the meanings assigned to them below unless the context requires otherwise:

• "bv666", "we", "us", or "our" refers to the operator of the bv666 platform at bv666.io, together with all affiliated entities responsible for the processing of personal data in connection with the services described herein.
• "Platform" means the bv666 website accessible at bv666.io, including all subdomains, mobile interfaces, and APIs operated by bv666.
• "Player", "you", or "your" means any individual who accesses, registers for, or interacts with the bv666 platform in any capacity.
• "Personal Data" means any information that identifies or can reasonably be used to identify a living natural person, directly or indirectly, including but not limited to name, email address, phone number, national ID number, payment account details, IP address, and device identifiers.
• "Processing" means any operation or set of operations performed on Personal Data, including collection, recording, organisation, storage, adaptation, retrieval, use, disclosure, restriction, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data. bv666 acts as Data Controller in respect of all player Personal Data collected through the Platform.
• "Data Processor" means a third party that processes Personal Data on behalf of bv666, under bv666's instructions, pursuant to a written data processing agreement.
• "KYC" means Know Your Customer — the identity, age, and source-of-funds verification process required before a player may make withdrawals or access certain features of the Platform.
• "Cookies" means small text files placed on a player's device by the bv666 Platform for the purposes set out in Section 7 of this Privacy Policy.
• "Services" means all casino games, live dealer tables, sports betting markets, slot titles, and ancillary features made available through the bv666 Platform.

2 Data Controller

2.1 Identity of Controller. bv666 is the Data Controller in respect of all Personal Data collected through the Platform. All decisions regarding the purposes and means of processing player Personal Data are made by bv666.

2.2 Contact. For all privacy-related enquiries, data subject access requests, and complaints, players may contact bv666's designated privacy point of contact at: [email protected]. Please mark the subject line of your message "Privacy Request" to ensure prompt routing to the appropriate team.

2.3 Platform Jurisdiction. bv666 operates as an internationally licensed offshore gaming platform. This Privacy Policy is designed to reflect internationally recognised principles of data protection. Players are responsible for determining whether use of the Platform is lawful in their jurisdiction.

3 Data We Collect

3.1 Registration Data. When you create a bv666 account, we collect: full name, date of birth, residential address, email address, mobile phone number, username, and password (stored in hashed form only). This information is necessary to create and manage your account and to verify that you meet the minimum age requirement of 21 years.

3.2 KYC & Verification Data. To comply with our anti-money laundering and responsible gaming obligations, we may collect copies of government-issued identity documents such as a National ID Card, passport, or driving licence, as well as proof of address documents (utility bills, bank statements) and, where required, evidence of source of funds. These documents are used solely for verification purposes.

3.3 Financial Data. We collect the payment method details necessary to process deposits and withdrawals, including mobile money account numbers (bKash, Nagad, Rocket, Upay), bank account details, and, where applicable, Visa or Mastercard transaction references. We do not store full card numbers. Payment processing is handled by regulated third-party providers under strict security standards.

3.4 Transaction Data. We maintain records of all financial transactions on your account, including deposits, withdrawals, bonus credits, wagering activity, and balance adjustments. These records are retained for regulatory compliance and dispute resolution purposes.

3.5 Technical & Usage Data. When you access the Platform, we automatically collect: IP address, device type and operating system, browser type and version, session timestamps, pages visited, game sessions played, betting patterns, and click-stream data. This data is used for security monitoring, fraud prevention, and platform optimisation.

3.6 Communications Data. If you contact bv666 support by email or live chat, we retain records of those communications, including the content of your messages and any attachments, for customer service quality, training, and dispute resolution purposes.

3.7 Responsible Gaming Data. Where you voluntarily interact with our responsible gaming tools — such as setting deposit limits, requesting cooling-off periods, or applying self-exclusion — we record and retain this data as part of our duty-of-care obligations. This data is treated with the highest level of sensitivity.

Summary of Data Categories:

4 Lawful Basis for Processing

bv666 processes Personal Data only where a valid lawful basis exists. The primary lawful bases on which we rely are as follows:

• Contractual Necessity: Processing of registration data, transaction data, and payment data is necessary for the performance of the contract between bv666 and the player — namely, the provision of gaming and betting services. Without this processing, bv666 cannot deliver the Services.
• Legal Obligation: Processing of KYC documents, transaction records, and responsible gaming data is necessary to comply with anti-money laundering regulations, age verification requirements, and our obligations as a licensed gaming operator. We are legally required to maintain certain records for defined minimum periods.
• Legitimate Interests: Processing of technical and usage data for fraud detection, security monitoring, and platform analytics is based on bv666's legitimate interest in maintaining a safe, secure, and well-functioning Platform. We have assessed that this interest is not overridden by player rights in these contexts.
• Consent: Where we send optional marketing communications (such as promotional email newsletters), we do so only on the basis of explicit, freely given consent. Players may withdraw this consent at any time by contacting [email protected] or by using the unsubscribe mechanism included in each communication. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

5 How We Use Your Data

bv666 uses the Personal Data we collect for the following documented purposes:

• Account Management: Creating, maintaining, and securing your bv666 account; processing logins; enforcing account access controls; and enabling account recovery.
• Service Delivery: Providing access to casino games, live dealer tables, sports betting markets, and all other features of the Platform in accordance with the bv666 Terms & Conditions.
• Payment Processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and other supported payment partners. Verifying that payment instruments belong to the registered account holder.
• KYC & Compliance: Verifying player identity, age, and source of funds in accordance with our obligations as an offshore gaming operator. Maintaining records as required by applicable anti-money laundering and counter-terrorism financing regulations.
• Fraud Prevention & Security: Monitoring account and transaction activity to detect and prevent fraud, money laundering, bonus abuse, multi-accounting, and other prohibited conduct. Investigating suspicious activity and taking appropriate enforcement action where required.
• Responsible Gaming: Monitoring gaming behaviour to identify patterns that may indicate problem gambling; providing and enforcing player-requested responsible gaming tools; meeting our duty-of-care obligations to players in Bangladesh and other served markets.
• Customer Support: Responding to player queries, complaints, and dispute resolution requests; maintaining communication records for quality assurance and training.
• Platform Analytics & Improvement: Analysing aggregated and anonymised usage data to understand how players interact with the Platform, identify technical issues, and develop new features and improvements.
• Marketing Communications (Consent-Based): Sending promotional emails, bonus offers, and platform updates to players who have explicitly opted in to receive such communications. Every such communication includes a clear and functional unsubscribe option.
• Legal & Regulatory Purposes: Complying with court orders, regulatory requests, and legal obligations; protecting bv666's legal rights in disputes; enforcing the bv666 Terms & Conditions.

6 Data Sharing & Third Parties

6.1 No Sale of Data. bv666 does not sell, rent, lease, or otherwise commercially transfer player Personal Data to any third party for marketing, advertising, audience-building, or profiling purposes. This is an absolute commitment.

6.2 Service Providers (Data Processors). bv666 engages a limited number of third-party service providers who process Personal Data on our behalf, strictly under bv666's instructions and pursuant to written data processing agreements. These providers fall into the following categories:

• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — for the purpose of processing deposits and withdrawals. Each payment partner operates under its own regulated security framework.
• KYC & Identity Verification Providers: Specialist third-party verification services used to validate identity documents and perform age and AML checks. Such providers are contractually prohibited from using player data for any purpose other than the verification task at hand.
• Game Studio Partners: Providers including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Ezugi, Spribe, and others supply games and may receive limited technical session data necessary for game delivery, RNG integrity, and fair play certification. No personally identifiable player information is shared with game studios beyond what is technically required.
• IT Infrastructure & Security Providers: Cloud hosting, content delivery, and cybersecurity service providers who maintain the technical infrastructure of the Platform under strict confidentiality and security obligations.

6.3 Legal Disclosure. bv666 may disclose Personal Data to regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, court order, or in response to a lawful governmental request. Where permitted, bv666 will notify the affected player of any such disclosure.

6.4 Business Transfers. In the event of a merger, acquisition, restructuring, or sale of all or part of bv666's business, player Personal Data may be transferred to the acquiring entity as part of the transaction. In such circumstances, bv666 will provide reasonable advance notice to affected players and ensure that the acquiring entity assumes equivalent data protection obligations.

6.5 Aggregate & Anonymised Data. bv666 may share aggregated, fully anonymised statistical data (from which no individual can be identified) with business partners, researchers, or publicly, for purposes such as industry reporting or platform performance benchmarking. This does not constitute a disclosure of Personal Data.

7 Cookies & Tracking Technologies

7.1 What Are Cookies. Cookies are small text files placed on your device by the bv666 Platform when you visit bv666.io. They allow the Platform to recognise your device on return visits, remember your preferences, and collect usage data. bv666 also uses similar technologies such as web beacons, pixel tags, and local storage objects for the purposes described below.

7.2 Types of Cookies We Use:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They enable core features such as session management, login authentication, and security token validation. The Platform cannot operate without these cookies, and they cannot be disabled.
• Functional Cookies: These cookies remember your preferences — such as language settings, display preferences, and game lobby configurations — to personalise your experience on the Platform.
• Analytical Cookies: These cookies collect aggregated, anonymised data about how players use the Platform, including pages visited, session duration, and navigation paths. This data is used exclusively to improve the Platform's performance and user experience.
• Security Cookies: These cookies assist in fraud detection and account security monitoring by tracking unusual login patterns, device changes, and geographic anomalies associated with account access.

7.3 Cookie Management. You may control the use of non-essential cookies through your browser settings. Most browsers allow you to block or delete cookies via their settings menus. Please note that disabling functional or analytical cookies may affect the performance and personalisation features of the Platform. Strictly Necessary and Security cookies cannot be disabled without preventing basic Platform functionality.

7.4 Third-Party Cookies. bv666 does not permit third-party advertising networks to set cookies on the Platform for behavioural advertising or cross-site tracking purposes.

8 Data Retention

8.1 Retention Principle. bv666 retains Personal Data for no longer than is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Retention periods are reviewed periodically and data no longer required is securely deleted or irreversibly anonymised.

8.2 Retention Periods:

8.3 Early Deletion. Players may request early deletion of certain categories of Personal Data under the rights described in Section 10. Where deletion is not possible due to legal retention obligations, bv666 will restrict processing of the relevant data to the minimum necessary to satisfy those obligations.

9 Data Security

9.1 Technical Measures. bv666 implements a comprehensive set of technical security measures to protect player Personal Data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between player devices and bv666 servers.
• AES-256 encryption for sensitive Personal Data stored at rest, including KYC documents and financial data.
• Industry-standard bcrypt or Argon2 password hashing. Plain-text passwords are never stored or transmitted.
• Firewalls, intrusion detection systems, and real-time threat monitoring across all Platform infrastructure.
• Regular independent security audits and penetration testing of the Platform and its supporting infrastructure.
• Role-based access controls limiting bv666 staff access to Personal Data on a strict need-to-know basis.

9.2 Organisational Measures. All bv666 personnel with access to player Personal Data are subject to confidentiality obligations. Data protection awareness training is provided to all relevant staff. Access to production systems containing Personal Data is logged and audited.

9.3 Data Breach Response. In the event of a confirmed Personal Data breach that is likely to result in risk to player rights and freedoms, bv666 will notify affected players without undue delay and will take immediate remedial action. bv666 maintains a documented incident response plan for this purpose.

9.4 Player Responsibility. While bv666 takes extensive measures to protect Personal Data, players are also responsible for maintaining the security of their account credentials. Players should use strong, unique passwords, enable two-factor authentication where available, and notify bv666 support immediately if they suspect unauthorised access to their account.

10 Your Rights

10.1 Overview. bv666 recognises and respects player rights in relation to their Personal Data. The following rights are available to all bv666 players. To exercise any of these rights, contact [email protected] with the subject line "Data Rights Request".

• Right of Access: You have the right to request a copy of all Personal Data that bv666 holds about you, together with information about how it is being processed. bv666 will provide this information within 30 calendar days of a verified request.
• Right to Rectification: If any Personal Data bv666 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Players may update certain data directly via their account settings; other corrections require a support request.
• Right to Erasure (Right to be Forgotten): You may request that bv666 delete your Personal Data. This right is subject to exceptions where retention is required by law (see Section 8). Where full deletion is not possible, bv666 will restrict processing to the minimum legally required extent.
• Right to Restriction of Processing: In certain circumstances — such as where you contest the accuracy of your data or have objected to processing — you may request that bv666 restrict processing of your Personal Data while the matter is being resolved.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request a copy of your Personal Data in a structured, machine-readable format.
• Right to Object: You may object to processing of your Personal Data where that processing is based on bv666's legitimate interests. bv666 will cease such processing unless it can demonstrate compelling legitimate grounds that override your rights.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time without penalty. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

10.2 Response Timeframe. bv666 will respond to all verified data rights requests within 30 calendar days. In cases of particular complexity, this period may be extended by a further 30 days, in which case bv666 will notify you of the extension and the reason for it within the initial 30-day period.

10.3 Identity Verification. To protect player privacy, bv666 will verify the identity of the individual making a data rights request before disclosing or acting upon any Personal Data. This may require the requestor to provide identification documents consistent with the KYC process.

11 Protection of Minors

11.1 Age Restriction. The bv666 Platform is strictly for individuals aged 21 years and above. bv666 does not knowingly collect Personal Data from individuals under the age of 21. All registration flows include an age declaration requirement and are subject to KYC age verification.

11.2 Discovery of Underage Registration. If bv666 discovers that Personal Data has been collected from an individual under the age of 21 — whether through KYC review, third-party notification, or any other means — the account will be immediately suspended, all balances will be held pending investigation, and the Personal Data of the minor will be deleted as promptly as legally permissible.

11.3 Parental Controls. bv666 encourages parents and guardians to make use of internet filtering tools and parental control software to prevent minors from accessing online gambling platforms. If a parent or guardian believes their child has registered a bv666 account, they should contact [email protected] immediately.

12 International Data Transfers

12.1 Cross-Border Processing. As an internationally operated offshore gaming platform serving players in Bangladesh and other jurisdictions, bv666 may process and store Personal Data on servers located outside Bangladesh. Where Personal Data is transferred across international borders, bv666 ensures that adequate protections are in place consistent with recognised international data protection standards.

12.2 Transfer Safeguards. International transfers of Personal Data by bv666 are protected by one or more of the following safeguards:

• Contractual obligations requiring receiving entities to protect Personal Data to standards equivalent to those described in this Privacy Policy.
• Transfer to countries or entities that maintain equivalent data protection frameworks recognised by bv666's licensing authority.
• Explicit player consent obtained at the point of registration, where technically necessary for service delivery.

12.3 Payment Partner Transfers. Payment transactions via bKash, Nagad, Rocket, and Upay are processed within Bangladesh's domestic mobile financial services infrastructure. Visa and Mastercard transactions may involve cross-border processing subject to the respective card scheme's global data protection standards.

13 Changes to This Privacy Policy

13.1 Right to Update. bv666 reserves the right to update or modify this Privacy Policy at any time. Changes may be required to reflect amendments to applicable law, changes in our data processing practices, or improvements to the Platform. The effective date of the current version is displayed at the top of this document.

13.2 Notification of Material Changes. Where a change is material — meaning it significantly affects the nature of processing, the rights of players, or the categories of data we collect — bv666 will notify registered players via their registered email address at least 14 days before the change takes effect.

13.3 Continued Use. Continued use of the bv666 Platform after the effective date of an updated Privacy Policy constitutes acceptance of the revised terms. If you do not accept the updated Privacy Policy, you must cease using the Platform and may request voluntary account closure under the bv666 Terms & Conditions.

13.4 Version Archive. Players may request copies of previous versions of this Privacy Policy by contacting [email protected]. bv666 maintains an internal archive of all published versions.

14 Contact & Complaints

14.1 Privacy Enquiries. For all questions, requests, and concerns relating to this Privacy Policy or the processing of your Personal Data, please contact bv666 at:

• Email: [email protected] (subject line: "Privacy Request")
• Response Time: bv666 aims to acknowledge all privacy enquiries within 3 business days and to provide a substantive response within 30 calendar days.
• Operating Hours: Support is available 24/7. All privacy communications are handled in English. Bangladesh Standard Time (BST, UTC+6) is our primary operational timezone.

14.2 Complaints. If you are dissatisfied with bv666's response to a privacy request, or if you believe that bv666 has processed your Personal Data in a manner inconsistent with this Privacy Policy, you have the right to submit a formal complaint. bv666 operates an internal complaints process with a target resolution time of 30 calendar days for all escalated privacy complaints.

14.3 Escalation. Where a complaint cannot be resolved through bv666's internal process, players may seek further recourse through applicable dispute resolution mechanisms available in their jurisdiction. bv666 will cooperate fully with any lawful investigation by a competent authority.

14.4 Acknowledgement. By registering for and using the bv666 Platform, you acknowledge that you have read, understood, and agreed to the terms of this Privacy Policy. This Privacy Policy forms part of your agreement with bv666 and should be read in conjunction with the bv666 Terms & Conditions.