ba66 Privacy Policy

Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "ba66", "we", "us", or "our" refers to the ba66 platform and its operating entity, accessible at https://ba66.io.
• "Player", "you", or "your" refers to any individual who accesses, registers on, or uses the ba66 platform.
• "Personal Data" means any information that identifies or could reasonably be used to identify a natural person, directly or indirectly.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, deletion, or any combination thereof.
• "Data Controller" means the entity that determines the purposes and means of Processing Personal Data — in this case, ba66.
• "Third Party" means any individual or organisation that is not ba66 or the Player, including payment processors, identity verification providers, and game studios.
• "Cookies" means small text files placed on your device by the ba66 platform to support functionality, analytics, and personalisation.
• "BST" means Bangladesh Standard Time (UTC+6), which is the operative time zone for all time-sensitive provisions of this Policy.

Data Controller

ba66 acts as the Data Controller in respect of all Personal Data collected from players accessing the ba66 platform. As Data Controller, ba66 is responsible for determining the purposes for which Personal Data is collected and the manner in which it is processed.

If you have any questions about the identity of the Data Controller or wish to exercise any data rights described in this Policy, please contact the ba66 Data Privacy team using the contact details provided in Section 15.

Information We Collect

3.1 Registration Data

When you create a ba66 account, we collect the information you provide directly, which may include your full legal name, date of birth, residential address, email address, mobile phone number, and preferred payment method. This information is required to verify your identity and set up your account.

3.2 Identity Verification Data

To comply with legal obligations and prevent fraud, ba66 may collect copies of government-issued identity documents (such as a National Identity Card or passport) and supporting documents such as proof of address or a selfie photograph for biometric comparison. This data is processed solely for verification purposes.

3.3 Financial Data

ba66 collects records of all deposits, withdrawals, and wagers made through your account, including transaction amounts expressed in BDT (৳), timestamps, and the payment channel used (e.g., bKash, Nagad, Rocket, Upay, or bank transfer). Full payment account numbers are never stored on ba66 servers — payment processing is handled by certified third-party payment providers.

3.4 Technical & Usage Data

When you access the ba66 platform, we automatically collect certain technical data, including your IP address, device type, operating system, browser type and version, session start and end times, pages visited, game sessions played, and betting activity. This data is used for security monitoring, fraud detection, and platform optimisation.

3.5 Communications Data

If you contact ba66 support via live chat, WhatsApp, or email, we retain records of those communications, including the content of messages, to assist in resolving your enquiry and to improve our support services. Support communications are stored for a minimum of 24 months.

3.6 Data You Provide Voluntarily

ba66 may from time to time invite players to participate in surveys, promotions, or feedback programmes. Any Personal Data you provide in those contexts is processed solely for the stated purpose of the programme and is not used for unrelated purposes without your explicit consent.

How We Use Your Data

ba66 uses the Personal Data it collects for the following purposes:

ba66 does not use automated decision-making processes that produce legal or similarly significant effects on players without human review. Any automated fraud detection flags are reviewed by a member of the ba66 compliance team before action is taken on an account.

Legal Basis for Processing

ba66 processes Personal Data on the following legal bases:

• Contractual necessity: Processing required to perform the agreement between ba66 and the Player, including account management, transaction processing, and service delivery.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) requirements, age verification obligations, and financial record-keeping requirements.
• Legitimate interests: Processing necessary for ba66's legitimate business interests, including fraud prevention, security monitoring, responsible gaming oversight, and platform analytics, where those interests are not overridden by the Player's fundamental rights.
• Consent: Processing based on the Player's freely given, specific, and informed consent — for example, for the receipt of promotional communications or participation in optional research programmes. Consent may be withdrawn at any time by contacting ba66 support.

Data Sharing & Disclosure

6.1 Payment Processors

ba66 shares the minimum necessary financial and identity data with its approved payment processing partners — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank — solely to process transactions initiated by the Player. Each payment partner operates under its own privacy and data security standards.

6.2 Identity Verification Providers

ba66 may share identity documents and biometric data with certified third-party identity verification providers to carry out Know Your Customer (KYC) checks as required by applicable regulations. These providers are contractually bound to use the data only for the verification purpose specified by ba66.

6.3 Game Providers

Certain game products available on ba66 — including live casino tables operated by Evolution Gaming, Pragmatic Play Live, Ezugi, NetEnt, Microgaming, and Spribe — may require the transmission of session and player identifier data to the relevant game studio to facilitate gameplay. This data does not include full payment information.

6.4 Legal Authorities

ba66 will disclose Personal Data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, court order, or regulatory directive. Where permissible, ba66 will notify the affected Player before complying with such a disclosure request.

6.5 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of ba66's assets, Personal Data held by ba66 may be transferred to the successor entity, subject to the successor providing equivalent or greater data protection commitments. Players will be notified of any such transfer in advance.

Cookies & Tracking Technologies

7.1 What Cookies We Use

The ba66 platform uses the following categories of cookies and similar tracking technologies:

• Strictly necessary cookies: Required for the platform to function correctly, including session management, login state persistence, and security tokens. These cannot be disabled.
• Functional cookies: Used to remember your preferences, such as language settings and display options, to provide a more personalised experience.
• Analytics cookies: Used to collect aggregated, anonymised data about how players interact with the ba66 platform, enabling us to identify areas for improvement.
• Marketing cookies: Used where you have provided consent to receive information about ba66 promotions relevant to your interests. These are not placed without explicit consent.

7.2 Managing Cookies

You may manage your cookie preferences through your browser settings. Disabling functional or analytics cookies may affect certain features of the ba66 platform but will not prevent you from accessing core betting and gaming services. Strictly necessary cookies cannot be disabled, as they are essential for platform security and session management.

Payment Data

ba66 takes the security of financial data with the utmost seriousness. The following practices apply to all payment-related data processed through the ba66 platform:

• Full mobile wallet account numbers (bKash, Nagad, Rocket, Upay) and bank account numbers are never stored in plain text on ba66 servers.
• Payment transactions are tokenised by the respective payment provider; ba66 retains only a transaction reference and the associated amount in BDT (৳).
• All payment pages and APIs use 256-bit TLS encryption. Payment data is never transmitted over unencrypted connections.
• Access to payment records is restricted to ba66 staff with a verified operational need and is subject to access logging and regular audit review.

For any suspected unauthorised transaction on your ba66 account, contact ba66 support immediately via live chat or WhatsApp so that the account can be placed under a security hold while the matter is investigated.

Data Retention

ba66 retains Personal Data for the following periods, after which data is securely deleted or irreversibly anonymised:

Where a legal dispute is ongoing at the time a retention period expires, ba66 will retain the relevant data until the dispute is fully resolved, after which standard deletion procedures will apply.

Your Rights

As a Player on the ba66 platform, you hold the following rights in respect of your Personal Data. To exercise any of these rights, please contact ba66 support using the details in Section 15. ba66 will respond to all verified data rights requests within 30 days.

• Right of access: You may request a copy of the Personal Data ba66 holds about you, along with information about how it is being used.
• Right to rectification: You may request that inaccurate or incomplete Personal Data be corrected. You may also update certain account details directly through your ba66 account dashboard.
• Right to erasure: You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent. This right is subject to ba66's legal retention obligations — certain data must be retained for regulatory compliance even after account closure.
• Right to restriction: You may request that ba66 restrict the processing of your Personal Data in certain circumstances, for example while a dispute about the accuracy of the data is being resolved.
• Right to data portability: You may request a structured, machine-readable copy of the Personal Data you provided to ba66, to transfer to another service provider.
• Right to object: You may object to the processing of your Personal Data on the basis of ba66's legitimate interests. ba66 will cease that processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time by contacting ba66 support. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Children & Minors

The ba66 platform is strictly for individuals aged 21 and above. ba66 does not knowingly collect Personal Data from individuals under the age of 21. If ba66 discovers that Personal Data has been collected from a person under 21, that data will be immediately deleted, the account closed, and any associated funds handled in accordance with the ba66 Terms & Conditions.

If you are a parent or guardian and believe that a minor in your care has created a ba66 account, please contact ba66 support immediately so that the matter can be investigated and resolved without delay.

Data Security

ba66 implements a comprehensive set of technical and organisational security measures to protect Personal Data against unauthorised access, accidental loss, destruction, or disclosure. Key security controls include:

• 256-bit SSL/TLS encryption for all data in transit between player devices and ba66 servers.
• Encryption at rest for sensitive data stored on ba66 infrastructure, including identity documents and financial records.
• Role-based access controls limiting staff access to Personal Data strictly to those with an operational need.
• Multi-factor authentication requirements for ba66 staff accessing internal data systems.
• Regular penetration testing and vulnerability assessments conducted by independent security professionals.
• Automated intrusion detection and anomalous activity monitoring across all ba66 systems.
• A documented data breach response plan with defined notification timelines for affected players and authorities.

While ba66 takes all reasonable steps to protect your Personal Data, no online platform can guarantee absolute security. Players are encouraged to use a strong, unique password for their ba66 account and to enable any additional security features offered, such as two-step login verification.

International Data Transfers

In some cases, the Personal Data ba66 collects may be processed or stored on servers located outside Bangladesh — for example, where ba66 uses cloud infrastructure or third-party service providers whose operations span multiple countries. In every such case, ba66 takes steps to ensure that the recipient of the data provides an equivalent level of data protection to that described in this Privacy Policy.

Where Personal Data is transferred to third-party game providers such as Evolution Gaming or Pragmatic Play for the purpose of live game delivery, that transfer is governed by the contractual terms between ba66 and the respective provider. Player data transferred for this purpose is limited to session identifiers and game activity records necessary for the delivery of the game service.

Policy Amendments

ba66 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, ba66 will notify registered players via the email address associated with their account and will post the revised Policy on this page with an updated effective date. The revised Policy takes effect on the date stated unless a later effective date is specified.

Continued use of the ba66 platform after the effective date of a revised Privacy Policy constitutes acceptance of the revised terms. If you do not accept the revised Policy, you should cease using the platform and may request account closure as described in the ba66 Terms & Conditions.

Contact & Complaints

If you have questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a privacy-related complaint, please contact the ba66 Data Privacy team using the details below. All contact details are provided as plain text — they are not clickable links.

• Email: [email protected]
• WhatsApp: +880 1700 000000
• Live Chat: Available 24/7 via the ba66 platform
• Response Time: ba66 will acknowledge privacy requests within 48 hours (BST) and provide a full response within 30 days.

If you are not satisfied with ba66's response to a privacy complaint, you may have the right to escalate the matter to an appropriate regulatory or supervisory authority in your jurisdiction. ba66 will cooperate fully with any such authority in the investigation of privacy complaints.