b6677 Privacy Policy

1. Data We Collect

b6677 collects personal data from players in Bangladesh across several categories, depending on how you interact with the platform. Below is a structured overview of the categories of data we collect and the circumstances under which each category arises.

1.1 Registration and Identity Data

When you create a b6677 account, we collect the information you provide during the registration process. This includes your full legal name, date of birth, email address, mobile phone number (Bangladesh-registered), and your chosen username. This data is required to create and administer your account and to verify that you meet the minimum age requirement of 18 years.

1.2 Identity Verification (KYC) Data

To comply with our Know Your Customer (KYC) obligations and to process withdrawals, b6677 may request documentary evidence of your identity and address. Accepted documents include your Bangladesh National Identity Card (NID), passport, or birth certificate, and a recent utility bill or bank statement as proof of address. Where a payment method requires verification, we may also request proof of ownership of that payment account.

1.3 Financial Transaction Data

b6677 records details of all deposits and withdrawals made through your account, including the payment method used (bKash, Nagad, Rocket, Upay, or bank transfer), transaction amounts in BDT, transaction timestamps, and reference numbers. This data is retained for financial reconciliation, fraud prevention, and anti-money laundering compliance purposes.

1.4 Gameplay and Betting Data

We collect records of your activity on the b6677 platform, including the games you play, wagers placed, results, session durations, and bet history. This data is used to operate your account, calculate balances, resolve disputes, identify problem gambling indicators, and improve the quality of our services.

1.5 Technical and Device Data

When you access b6677, our systems automatically collect certain technical data about your device and connection, including your IP address, browser type and version, operating system, device type (mobile or desktop), time zone (Bangladesh Standard Time, UTC+6), and pages visited within the platform. This data is used for security monitoring, fraud detection, and platform optimisation.

1.6 Communications Data

If you contact b6677's customer support team — whether by email or live chat — we retain records of those communications, including the content of your messages and our responses. This data is used to resolve your queries, train support staff, and maintain an audit trail of player interactions.

2. How We Use Your Data

b6677 processes your personal data only for the purposes described in this Privacy Policy and only where a valid lawful basis for processing exists. The primary lawful bases on which b6677 relies are: performance of a contract (operating your player account), compliance with legal obligations (KYC, AML), legitimate interests (fraud prevention, platform security), and, where required, your explicit consent (marketing communications).

2.1 Account Management

Your registration data is used to create, maintain, and administer your b6677 account. This includes processing deposits and withdrawals, crediting bonuses, maintaining your account balance, and providing you with access to games and betting markets. Without this processing, b6677 cannot operate your account.

2.2 Identity Verification and Compliance

b6677 uses KYC data to verify your identity and age before approving withdrawals and as part of our ongoing compliance with internationally recognised anti-money laundering and counter-terrorist financing standards. This processing is a legal obligation and cannot be waived by individual players.

2.3 Fraud Prevention and Security

Technical data, financial data, and gameplay data are analysed to detect and prevent fraudulent activity, including the use of stolen payment accounts, multiple account registrations by the same individual, and collusion between players. b6677's security systems may flag accounts for manual review where anomalous patterns are detected.

2.4 Responsible Gaming

Gameplay and session data are monitored to identify indicators of problem gambling behaviour — such as rapidly escalating wager sizes, extended unbroken play sessions, or repeated attempts to circumvent self-imposed deposit limits. Where such indicators are identified, b6677 may reach out to the player with responsible gaming resources or temporarily restrict account activity pending a welfare check.

2.5 Customer Support

Communications data is used to respond to your queries, investigate complaints, and maintain records of interactions for quality assurance and training purposes. Support records are also used to resolve disputes relating to wagers, bonuses, and account balances.

2.6 Marketing Communications

With your consent, b6677 may send you promotional communications about new games, bonus offers, seasonal promotions (such as those tied to BPL season, IPL, or Eid), and platform updates. You may withdraw your consent to marketing communications at any time by contacting support at [email protected]. Withdrawal of consent does not affect the lawfulness of any processing that occurred before the withdrawal.

3. Data Sharing and Disclosure

b6677 does not sell, rent, or trade your personal data. We share your data only in the limited circumstances described below, and always subject to appropriate contractual protections or legal requirements.

3.1 Payment Service Providers

To process your deposits and withdrawals, b6677 shares the minimum necessary financial data with the relevant payment service providers operating in Bangladesh, including bKash, Nagad, Rocket, Upay, and partner banks such as Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank. These providers receive only the transaction data required to execute the specific payment instruction and are independently subject to their own privacy and data protection obligations.

3.2 Game Software Providers

b6677 partners with third-party game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — to deliver casino games and live dealer experiences. These providers may receive your account identifier and gameplay data to the extent necessary to operate the game session, calculate results, and facilitate dispute resolution. Game providers do not receive your full identity or financial data.

3.3 Identity Verification Services

Where b6677 uses third-party KYC service providers to verify player identity documents, those providers will process the specific identity documents you submit for the sole purpose of verification. They are contractually prohibited from using this data for any other purpose.

3.4 Legal and Regulatory Disclosure

b6677 may disclose your personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required to do so by applicable law, court order, or regulatory direction. In such cases, b6677 will disclose only the data specifically required by the relevant legal instrument and will, where legally permitted, notify you of such a disclosure.

3.5 Business Transfers

In the event of a merger, acquisition, or sale of all or part of b6677's business, your personal data may be transferred to the acquiring entity as part of that transaction. In such circumstances, b6677 will notify registered players of the transfer and the identity of the new data controller through the contact details held on their account, and the acquiring entity will be bound to handle your data consistently with this Privacy Policy.

4. Cookies and Tracking Technologies

b6677 uses cookies and similar technologies (such as web beacons and local storage) on its platform. A cookie is a small text file placed on your device by a website you visit. Cookies serve various functions, from keeping you logged in to your account to helping b6677 understand how players navigate the platform.

4.1 Essential Cookies

These cookies are strictly necessary for the b6677 platform to function. They enable core features such as maintaining your login session, storing your language preference, and securing your account from cross-site request forgery (CSRF) attacks. Essential cookies cannot be disabled without rendering the platform non-functional.

4.2 Analytics Cookies

b6677 uses analytics cookies to understand aggregate patterns of how players use the platform — for example, which game categories are most visited, where players encounter errors, and which promotional pages generate the highest engagement. This data is collected in aggregated, anonymised form and is used to improve the platform experience. Analytics cookies do not identify you personally.

4.3 Functional Cookies

Functional cookies allow b6677 to remember your preferences and personalise your experience — for instance, remembering your preferred currency display (BDT / ৳), your recently played games, or your chosen interface settings. Disabling functional cookies may result in a less personalised experience but will not prevent you from accessing core platform features.

4.4 Managing Cookies

You can control non-essential cookies through your browser settings. Most modern browsers allow you to block, delete, or receive alerts about cookies. Please note that blocking all cookies may impair the functionality of the b6677 platform, including the ability to maintain your login session. Refer to your browser's help documentation for specific instructions on managing cookie settings.

5. Data Retention

b6677 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal or regulatory obligations. The following retention principles apply:

• Active account data: Retained for the full duration of your account's active life and for a minimum of five years following account closure, in compliance with standard anti-money laundering record-keeping requirements.
• Financial transaction records: Retained for a minimum of five years from the date of each transaction, in line with international AML standards applicable to offshore gaming operators.
• KYC documents: Retained for the duration of the account and for five years following account closure or the completion of the business relationship.
• Gameplay and betting records: Retained for five years following account closure to allow for dispute resolution and responsible gaming audits.
• Customer support communications: Retained for three years from the date of the final communication in any given support thread, or longer if the communication relates to an ongoing dispute.
• Marketing consent records: Retained for as long as your marketing preference is active and for three years following any withdrawal of consent, to provide evidence of compliance.

Upon expiry of the applicable retention period, b6677 will securely delete or anonymise your personal data so that it can no longer be associated with your identity. Where anonymisation is used rather than deletion, the resulting data may be retained indefinitely for aggregate analytical purposes.

6. Data Security

b6677 takes the security of your personal data seriously and implements a range of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures in place at b6677 include:

• TLS/SSL encryption: All data in transit between your device and b6677's servers is encrypted using current TLS standards.
• Encryption at rest: Sensitive personal data, including identity documents and financial records, is encrypted in b6677's databases using AES-256 encryption.
• Access controls: Access to personal data within b6677's systems is restricted on a need-to-know basis. Staff access is governed by role-based permissions and is subject to audit logging.
• Two-factor authentication: b6677 supports 2FA for player accounts and requires it for all staff access to internal systems containing personal data.
• Regular security assessments: b6677 conducts periodic security reviews of its platform infrastructure to identify and remediate potential vulnerabilities.
• Incident response: b6677 maintains an internal data breach response procedure. In the event of a breach that poses a material risk to affected players, b6677 will notify those players via their registered contact details as promptly as circumstances permit.

7. Your Privacy Rights

As a b6677 player, you have the following rights with respect to the personal data we hold about you. To exercise any of these rights, please contact b6677's support team at [email protected] with the subject line "Privacy Rights Request". b6677 will acknowledge your request within 48 hours and endeavour to fulfil it within 30 calendar days.

7.1 Right of Access

You have the right to request a copy of all personal data b6677 holds about you, together with information about how it is being processed. This is provided free of charge for the first request in any 12-month period. b6677 may charge a reasonable administrative fee for subsequent requests within the same period.

7.2 Right to Rectification

If any personal data b6677 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For certain data (such as your registered name or date of birth), b6677 may require documentary evidence before making a correction, to ensure that the amended record remains accurate.

7.3 Right to Erasure

You may request deletion of your personal data where: you believe the data is no longer necessary for the purpose for which it was collected; you withdraw consent and there is no other lawful basis for processing; or you believe the data has been unlawfully processed. b6677 will comply with erasure requests subject to any overriding legal obligation to retain the data — for instance, AML record-keeping requirements that mandate retention for a minimum of five years.

7.4 Right to Restrict Processing

In certain circumstances — for example, while you contest the accuracy of data b6677 holds about you, or while a complaint is under investigation — you may request that b6677 restrict the processing of your personal data to storage only, without further use, until the matter is resolved.

7.5 Right to Data Portability

Where b6677 processes your personal data on the basis of your consent or a contractual obligation, and that processing is carried out by automated means, you have the right to receive a copy of your data in a structured, commonly used, machine-readable format (such as CSV or JSON). You may also request that b6677 transmit this data directly to another service provider where technically feasible.

7.6 Right to Object to Marketing

You have an unconditional right to object to the processing of your personal data for direct marketing purposes. Upon receipt of an objection to marketing, b6677 will cease processing your data for that purpose immediately and update your communication preferences accordingly.

8. Changes to This Policy

b6677 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or the structure of the b6677 platform. When we make changes, we will update the "Last Updated" date at the top of this page and, where the changes are material, notify registered players via their registered email address or through an in-platform notification.

We encourage you to review this Privacy Policy periodically to remain informed about how b6677 is protecting your information. Your continued use of the b6677 platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms, to the extent permitted by applicable law.

If you have any questions about this Privacy Policy, or if you wish to raise a concern about how b6677 has handled your personal data, please contact us at [email protected]. We take all privacy concerns seriously and will respond to your inquiry within 48 hours.