bi66 Privacy Policy — How We Protect Your Data

This Privacy Policy applies to all personal data collected and processed by bi66 through its website at bi66.vin, its mobile web interface, and any associated services including customer support communications. By registering an account or continuing to use the bi66 platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and use of your personal data as described herein.

bi66 takes data protection seriously. We collect only the personal information that is necessary to provide our services, meet our legal obligations, and deliver a secure and personalised experience to each of our members across Bangladesh. We do not sell your personal data to third parties, and we do not use it for purposes other than those described in this policy.

Information We Collect

bi66 collects personal information in two ways: information you provide directly when you register and use the platform, and information collected automatically through your use of bi66.vin. We collect only what is necessary and proportionate to the purposes described in this policy.

Information You Provide Directly

1. Registration data: your full legal name, date of birth, email address, mobile phone number, and a chosen username and password. This information is required to create and maintain your bi66 account and is used for identity verification and KYC compliance.
2. KYC verification documents: government-issued photo identification (such as a National ID card or passport) and, where required, proof of address (such as a recent utility bill or bank statement) submitted during the identity verification process.
3. Payment information: the name of your payment method (bKash, Nagad, Rocket, Upay, Visa, or Mastercard) and the account identifier (such as a mobile wallet number or masked card number) used for deposits and withdrawals. bi66 does not store full card numbers or mobile banking PINs.
4. Support communications: any messages, complaints, feedback, or enquiries you send to bi66 through the support email or any on-platform contact mechanism. These records are retained to help resolve disputes and improve our service quality.

Information Collected Automatically

1. Technical data: your IP address, device type and model, operating system and version, mobile network provider (such as Grameenphone, Robi, Banglalink, or Teletalk), browser type and version, and screen resolution. This information helps bi66 optimise the platform experience for the range of Android and iOS devices used by players in Bangladesh.
2. Usage data: pages visited, games played, betting history, session duration, deposit and withdrawal history, and in-platform navigation patterns. This information is used to improve game recommendations, detect fraud, and monitor responsible gaming indicators.
3. Cookie and tracking data: session cookies, preference cookies, and analytics identifiers. Full details of the cookies bi66 uses are set out in Section 6 of this policy.

Legal Basis for Processing Your Data

bi66 processes personal data only where a valid legal basis exists. The following legal bases apply to the processing activities described in this policy.

1. Contractual necessity: processing your registration data, KYC documents, and payment information is necessary to perform the contract between you and bi66 — that is, to provide you with the gaming and betting services you have signed up for.
2. Legal obligation: processing for KYC verification, AML monitoring, and responding to lawful authority requests is necessary to comply with applicable legal obligations, including financial crime prevention regulations.
3. Legitimate interests: processing technical and usage data for fraud detection, platform security, responsible gaming monitoring, and service improvement is based on bi66's legitimate interests in operating a safe, secure, and high-quality gaming platform.
4. Consent: processing your contact details for marketing communications is based on your freely given, specific, and informed consent. You may withdraw this consent at any time without affecting any other aspect of your account or our services.

Payment Data and Third-Party Processors

When you make a deposit or request a withdrawal on bi66, you interact directly with payment gateways operated by bKash, Nagad, Rocket, Upay, Visa, or Mastercard. bi66 does not see or store your mobile wallet PIN, your full bank card number, your bKash or Nagad account password, or any other credential used to authenticate your payment. The only payment information that bi66 retains is the payment method type and a masked account reference (such as the last four digits of a card or the last three digits of a mobile number) for transaction record-keeping and withdrawal verification purposes.

bi66 strongly recommends that you review the privacy policies of your chosen payment provider before initiating any transaction. bi66 is not responsible for the data practices of third-party payment processors, which operate independently under their own terms and privacy frameworks. If you have concerns about how bKash, Nagad, Rocket, or any other payment provider handles your data, please contact those providers directly.

Data Retention

bi66 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply: account registration data and KYC documents are retained for the duration of your account and for a period of 5 years following account closure, in accordance with our anti-money laundering and financial record-keeping obligations. Transaction records (deposit and withdrawal history) are retained for a minimum of 5 years following the date of each transaction. Support communications are retained for 3 years from the date of last communication.

When your data is no longer required for any lawful purpose, bi66 will securely delete or anonymise it in accordance with industry-standard data destruction procedures. You may request early deletion of your personal data at any time by contacting [email protected] — requests are processed within 30 days, subject to any overriding legal retention obligations that prevent earlier deletion.

Security Measures

bi66 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include: 256-bit SSL/TLS encryption for all data in transit between your device and our servers; encrypted storage for sensitive data including KYC documents and account credentials; role-based access controls that restrict internal access to personal data to only those staff members who genuinely require it to perform their duties; regular security assessments and penetration testing of the bi66 platform; and multi-factor authentication for all administrative system access.

While bi66 takes all reasonable steps to protect your data, no internet-based platform can guarantee absolute security against all possible threats. In the event of a data breach that is likely to result in a high risk to your rights or interests, bi66 will notify affected members promptly and take all necessary remediation steps. We encourage you to choose a strong, unique password for your bi66 account and to avoid using the same password across multiple online services.