ba666 Privacy Policy — How We Protect Your Personal Data
At ba666, protecting the personal information of every player across Bangladesh is a core responsibility. This Privacy Policy explains what data we collect, why we collect it, how it is stored and used, and the rights you hold over your own information. We are committed to transparency and to handling your data with the highest standards of care.
Our Privacy Commitments
Six core principles that govern how ba666 handles your personal information at every stage of your experience on the platform.
ba666 collects only the personal data that is strictly necessary for account registration, identity verification, payment processing, and regulatory compliance. We do not collect data speculatively or retain information beyond its required retention period. Every data point we gather has a clear, documented purpose.
All personal data held by ba666 is stored on secured servers with access controls, encryption at rest, and strict internal access policies. Data in transit between your device and ba666's servers is protected by industry-standard SSL/TLS encryption. We conduct regular security audits to maintain and strengthen these protections.
ba666 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. Data is shared with third-party processors — such as payment providers like bKash and Nagad, and KYC verification services — only to the extent necessary to deliver our services to you, under strict contractual data-protection obligations.
You have the right to access the personal data ba666 holds about you, request corrections to inaccurate data, and in certain circumstances request the deletion of your data. You may exercise these rights by contacting ba666 support. We will respond to verified data rights requests within 30 days of receipt.
ba666 will only send you promotional communications — including bonus offers, seasonal promotions, and platform news — where you have consented to receive them. You may withdraw your marketing consent at any time by updating your notification preferences in your account dashboard or by contacting support at [email protected].
ba666 will notify registered players of any material changes to this Privacy Policy by posting a notice on the platform and, where practicable, via a notification to your registered contact details. The effective date of the current version is always displayed at the top of this document. Continued use of ba666 after an update constitutes acceptance of the revised policy.
- 1. Introduction
- 2. Data Controller
- 3. Data We Collect
- 4. How We Collect Data
- 5. How We Use Your Data
- 6. Legal Basis for Processing
- 7. Data Sharing
- 8. Cookies and Tracking
- 9. Data Retention
- 10. Data Security
- 11. Your Rights
- 12. Children's Privacy
- 13. International Transfers
- 14. Changes to This Policy
- 15. Contact Us
Important Notice: This Privacy Policy applies to all players who register an account on the ba666 platform and all visitors who access ba666.ws. By using the ba666 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this policy, please discontinue use of the platform immediately.
01 Introduction
ba666 ("we", "us", "our", "the Platform") is committed to protecting the privacy of every individual who interacts with our services. This Privacy Policy sets out in clear, transparent terms what personal information ba666 collects from players and visitors to ba666.ws, the purposes for which that information is used, the parties with whom it may be shared, how long it is retained, and the rights you hold in respect of your own data.
ba666 is Bangladesh's most trusted online casino and sports betting platform, serving players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. The integrity and confidentiality of player data is foundational to the trust that our platform is built upon. We take our data protection responsibilities seriously and have implemented robust technical and organisational measures to meet that obligation.
This Privacy Policy should be read alongside the ba666 Terms & Conditions and the ba666 Responsible Gaming Policy, both of which are incorporated into the overall legal framework governing your use of the ba666 platform.
02 Data Controller
For the purposes of this Privacy Policy, ba666 acts as the data controller in respect of personal data collected from players and visitors through the ba666.ws platform. As data controller, ba666 determines the purposes and means of processing personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.
If you have any questions, concerns, or requests relating to the processing of your personal data, you may contact ba666's data protection team at the contact details provided in Section 15 of this policy. ba666 will acknowledge all data-related enquiries within 5 business days (Bangladesh Standard Time, UTC+6) and will provide a substantive response within 30 calendar days of receiving a verified request.
03 Personal Data We Collect
ba666 collects personal data from players and platform visitors across several categories. The specific data collected depends on the nature of your interaction with the ba666 platform:
| Category | Data Collected | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, national identity card (NID) number or passport number | Account registration; KYC verification |
| Contact Data | Mobile phone number, email address, residential address (including district and division in Bangladesh) | Account registration; KYC verification |
| Financial Data | Mobile wallet identifiers (bKash, Nagad, Rocket, Upay account numbers), bank account details (where applicable), deposit and withdrawal transaction history | First deposit; withdrawal requests; payment verification |
| Technical Data | IP address, device type, browser type and version, operating system, session duration, pages visited, clickstream data | Automatically during each visit via cookies and server logs |
| Gaming Activity Data | Bet history, game history, win/loss records, bonus usage, session times, self-imposed limits | Automatically generated during gameplay and betting activity |
| Communication Data | Records of live chat conversations, support email exchanges, and any other correspondence with ba666 staff | When you contact ba666 support |
| Verification Documents | Scans or photographs of identity documents, utility bills, or bank statements submitted for KYC purposes | When requested during account verification or withdrawal processing |
ba666 does not collect or store payment card numbers in full. Payment card transactions processed via Visa or Mastercard are handled by PCI-DSS compliant payment processors. ba666 receives only a tokenised reference and the last four digits of the card for record-keeping purposes.
04 How We Collect Your Data
ba666 collects personal data through the following channels:
- Direct submission: Data you actively provide when registering an account, updating your profile, submitting KYC documents, making a deposit or withdrawal, contacting support, or participating in a promotion.
- Automated collection: Technical and behavioural data collected automatically when you browse the ba666 platform, via server logs, cookies, pixel tags, and similar tracking technologies. See Section 8 for details on our cookie practices.
- Third-party sources: Identity verification data returned by our KYC service providers following document checks; fraud and risk signals provided by anti-fraud data partners; and transaction status updates from payment processors including bKash, Nagad, Rocket, and Upay.
- Public sources: Publicly available information that may be used to supplement our identity verification processes, such as electoral roll data or public records, where permitted by applicable law.
05 How We Use Your Personal Data
ba666 uses the personal data it collects for the following specific and documented purposes:
- Account creation and management: To create and maintain your player account, authenticate your identity at login, and administer your account settings and preferences.
- Payment processing: To process deposits and withdrawals via your chosen payment method, verify the source of funds, and maintain accurate transaction records in ৳ BDT.
- Identity verification (KYC): To verify your identity and age (21+) in accordance with our Terms & Conditions and to fulfil our obligations to operate a safe and responsible gambling platform.
- Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, unauthorised account access, money laundering, and other prohibited conduct as defined in our Terms & Conditions.
- Responsible gaming: To monitor player activity for signs of problem gambling behaviour, apply player-requested limits and self-exclusion orders, and intervene in accordance with our Responsible Gaming policy where necessary.
- Customer support: To respond to your enquiries, complaints, and support requests in a timely and informed manner.
- Platform improvement: To analyse aggregated, anonymised usage data to improve the functionality, performance, and content offering of the ba666 platform.
- Marketing communications: To send you promotional offers, bonus notifications, and platform updates where you have consented to receive such communications. You may opt out at any time.
- Legal and regulatory compliance: To comply with applicable legal obligations, respond to lawful requests from regulatory or law enforcement authorities, and enforce our contractual rights.
06 Legal Basis for Processing
ba666 processes personal data only where a valid legal basis exists for doing so. The applicable legal bases for the processing activities described in this policy are as follows:
- Contractual necessity: Processing necessary for the performance of the contract between you and ba666 — including account registration, payment processing, KYC verification, and customer support.
- Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including anti-money laundering obligations, fraud reporting duties, and age verification requirements.
- Legitimate interests: Processing carried out for ba666's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and platform analytics — provided those interests are not overridden by your own rights and interests.
- Consent: Processing based on your freely given, specific, and informed consent — primarily for the purpose of sending marketing communications. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.
07 Data Sharing and Disclosure
ba666 does not sell, rent, or trade your personal data. We share personal data only in the following specific and controlled circumstances:
- Payment processors: Personal and financial data is shared with mobile wallet providers (bKash, Nagad, Rocket, Upay), banks (Dutch-Bangla Bank, BRAC Bank, City Bank), and international card processors (Visa, Mastercard) strictly to the extent necessary to process your deposit and withdrawal transactions.
- KYC and identity verification providers: Identity documents and personal details may be shared with third-party KYC verification services for the purpose of confirming your identity and age. These providers process data solely on ba666's instructions and under contractual data protection obligations.
- Fraud detection services: Technical and behavioural data, including IP addresses and device fingerprints, may be shared with anti-fraud and risk management service providers to protect the platform and its players from fraudulent activity.
- Legal and regulatory authorities: ba666 may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities when required to do so by applicable law, court order, or lawful request. ba666 will, where legally permitted, notify affected players of such disclosures.
- Business transfers: In the event of a merger, acquisition, or sale of all or part of ba666's business assets, player data may be transferred to the acquiring entity as part of that transaction. Affected players will be notified of any such transfer and of any changes to the data controller's identity.
- Group companies: ba666 may share data with affiliated entities within the same corporate group for operational and administrative purposes, subject to the same data protection standards set out in this policy.
All third-party processors engaged by ba666 are contractually required to process personal data only as instructed, to maintain appropriate security standards, and to refrain from using ba666 player data for any purpose other than the service they provide to ba666.
08 Cookies and Tracking Technologies
ba666 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit a website. The following categories of cookies are used on ba666.ws:
- Strictly necessary cookies: Required for the platform to function correctly. These include session authentication tokens, security cookies, and load-balancing cookies. These cannot be disabled without rendering the platform unusable.
- Functional cookies: Used to remember your preferences such as language settings, display preferences, and game lobby filters, so that your experience is personalised on return visits.
- Analytics cookies: Used to collect aggregated, anonymised data about how players navigate and interact with the ba666 platform. This data is used exclusively to improve platform performance and user experience.
- Session integrity cookies: Used to detect and prevent fraudulent activity by identifying anomalous session patterns, multiple account creation from a single device, and other suspicious behaviours.
ba666 does not use third-party advertising or retargeting cookies. You may manage cookie preferences via your browser settings. Note that disabling strictly necessary cookies will affect your ability to log in and use the ba666 platform.
09 Data Retention
ba666 retains personal data only for as long as it is necessary for the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:
- Active account data: Retained for the duration of the account relationship and for a period of 5 years following account closure, to meet potential legal, regulatory, or dispute resolution obligations.
- KYC and identity documents: Retained for a minimum of 5 years following account closure or the last transaction on the account, in accordance with applicable anti-money laundering record-keeping requirements.
- Financial transaction records: Retained for a minimum of 5 years following the date of the transaction.
- Support and communication records: Retained for 2 years from the date of the last communication, unless a longer retention period is required by an ongoing legal matter.
- Technical and analytics data: Aggregated, anonymised analytics data may be retained indefinitely. Personally identifiable technical data (e.g., IP logs) is retained for a maximum of 12 months.
- Marketing consent records: Retained for as long as the consent is active, plus 1 year following withdrawal of consent as evidence of the original consent and its withdrawal.
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with ba666's data destruction procedures.
10 Data Security
ba666 has implemented a comprehensive set of technical and organisational security measures to protect player personal data against unauthorised access, loss, alteration, disclosure, or destruction. These measures include:
- SSL/TLS encryption: All data transmitted between your device and ba666's servers is encrypted using current-generation SSL/TLS protocols, preventing interception by third parties.
- Encryption at rest: Sensitive personal data, including identity documents and financial data, is stored in encrypted form on ba666's servers.
- Access controls: Access to personal data is restricted to ba666 staff and authorised third-party processors who require it to perform their specific functions. Role-based access controls and the principle of least privilege are enforced throughout.
- Multi-factor authentication: Administrative access to ba666's data systems requires multi-factor authentication.
- Regular security audits: ba666 conducts regular internal security reviews and periodic third-party penetration testing to identify and remediate vulnerabilities.
- Incident response: ba666 maintains a data breach response plan. In the event of a personal data breach that poses a risk to player rights and freedoms, ba666 will notify affected players without undue delay.
While ba666 takes every reasonable precaution to protect your data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for ensuring that your own device and network are adequately secured.
11 Your Data Rights
As a player on the ba666 platform, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact ba666 at [email protected] with your full name, registered account details, and a clear description of the right you wish to exercise:
- Right of access: You have the right to request a copy of the personal data ba666 holds about you, along with information about how it is processed. ba666 will provide this information within 30 days of receiving a verified request.
- Right to rectification: You have the right to request the correction of inaccurate or incomplete personal data held about you. Minor details such as address and contact number can be updated directly in your account settings.
- Right to erasure: In certain circumstances, you may request the deletion of your personal data. Note that ba666 may be required to retain certain data for legal, regulatory, or contractual reasons even following a valid erasure request.
- Right to restriction of processing: You may request that ba666 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have disputed is being verified.
- Right to data portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request that your personal data be provided to you in a structured, commonly used, machine-readable format.
- Right to object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on ba666's legitimate interests, though ba666 may be entitled to continue processing where it can demonstrate compelling legitimate grounds.
- Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
12 Children's Privacy and the 21+ Policy
The ba666 platform is strictly for adults aged 21 and above. ba666 does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the ba666 account registration and KYC process. Any account found to belong to an individual under 21 years of age will be immediately suspended and all associated data will be dealt with in accordance with our responsible gaming and data retention obligations.
If you are a parent or guardian and believe that your child has registered an account on ba666 or provided personal data to ba666 without your consent, please contact us immediately at [email protected]. ba666 will investigate the matter promptly and take all necessary steps to remove any data collected from an underage individual.
21+ Only. ba666 is committed to preventing underage gambling. We use age verification technology at the point of registration and during the KYC process to confirm that all players meet the 21+ age requirement before they can deposit funds or place wagers on the platform.
13 International Data Transfers
ba666 primarily processes player data within the context of serving the Bangladesh market. However, some of ba666's third-party service providers — including KYC verification platforms, fraud detection services, and cloud infrastructure providers — may process data in jurisdictions outside Bangladesh.
Where personal data is transferred internationally, ba666 takes steps to ensure that appropriate safeguards are in place to protect your data to a standard equivalent to the protections described in this Privacy Policy. These safeguards include contractual data processing agreements with all third-party processors that impose data protection standards consistent with this policy.
By using the ba666 platform and consenting to this Privacy Policy, you acknowledge and agree that your personal data may be transferred to, stored, and processed in jurisdictions outside your own country of residence where ba666's service providers operate, subject to the safeguards described above.
14 Changes to This Privacy Policy
ba666 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. When material changes are made to this policy, ba666 will notify registered players by posting a prominent notice on the platform and, where reasonably practicable, by sending a notification to the mobile number or email address associated with the player's account.
The updated Privacy Policy will take effect on the date stated in the notice. Your continued use of the ba666 platform following the effective date of any revision constitutes your acceptance of the updated terms. If you do not agree to the revised Privacy Policy, you should cease using the platform and contact ba666 support to request account closure.
The effective date and version of the current Privacy Policy are always displayed at the top of this document. ba666 recommends reviewing this policy periodically to stay informed of how your data is being protected and used.
15 Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data ba666 holds about you, please contact our data protection team using the details below:
- Email: [email protected] (plain text — not a clickable link)
- Live Chat: Available 24 hours a day, 7 days a week via the ba666 platform interface.
- Response Time: ba666 will acknowledge all privacy-related enquiries within 5 business days (BST, UTC+6) and provide a full response within 30 calendar days of receiving a verified request.
- Language: ba666 handles all privacy enquiries in English. Our support team serves players across all regions of Bangladesh including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, and Mymensingh.
This Privacy Policy was last reviewed and updated on January 1, 2026. ba666 is committed to maintaining the highest standards of data privacy and to keeping this policy current, accurate, and reflective of our actual data processing practices.
Ready to Experience ba666 Safely and Securely?
Your privacy is protected every step of the way on ba666. Explore our full range of casino games, cricket betting, and slots — all backed by SSL encryption and a firm commitment to responsible gaming.