be66 Privacy
Policy

Who We Are

be66 operates an online sports betting and casino platform accessible at be66.io, serving players in Bangladesh. The Company acts as the data controller in respect of all personal data collected through the platform. As data controller, we determine the purposes and means by which your personal data is processed.

All data-related enquiries, access requests, and complaints should be directed to our designated data support contact at [email protected]. We are committed to responding to all privacy-related correspondence within five (5) business days.

This Policy should be read alongside be66's Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. In the event of any conflict between this Policy and the Terms & Conditions on a matter relating to personal data, this Policy shall prevail.

Data We Collect

be66 collects the following categories of personal data, depending on how you interact with the platform:

Identity Data

• Full legal name (first name and surname)
• Date of birth
• Government-issued identification number (National ID, passport, or driving licence number)
• Photograph (where a selfie with ID is submitted for KYC verification)

Contact Data

• Residential address (street, city, district, postal code)
• Mobile phone number
• Email address

Financial Data

• Mobile Financial Service (MFS) account numbers linked to bKash, Nagad, Rocket, or Upay
• Bank account details (where bank transfer is used)
• Deposit and withdrawal transaction history
• Account balance history

Technical Data

• IP address and approximate geographic location derived from IP
• Device type, model, and operating system
• Browser type and version
• Device fingerprint identifiers used for fraud detection
• Session timestamps and duration

Behavioural & Usage Data

• Betting history — sports markets, stake amounts, outcomes
• Casino game history — game titles, wager amounts, session duration
• Bonus and promotion participation history
• Pages visited and features interacted with on the platform
• Responsible gaming tool usage (deposit limits set, self-exclusion periods)

Communications Data

• Records of all correspondence with the be66 support team, including emails and live chat transcripts
• Marketing communication preferences (opt-in / opt-out records)

How We Collect Your Data

be66 collects personal data through the following means:

• Direct provision: Data you submit when registering an account, completing KYC verification, making a deposit or withdrawal request, or contacting the support team.
• Automated collection: Technical and behavioural data collected automatically as you navigate and interact with the platform, via server logs, cookies, and similar tracking technologies.
• Third-party sources: Identity verification data provided by KYC service providers; fraud-risk signals provided by payment processors; geolocation data cross-referenced with IP intelligence services.
• Public records: In limited circumstances where required for fraud or compliance purposes, we may cross-reference data against publicly available records.

Where we receive data about you from a third party, we will inform you of this at the point of first contact or as soon as practicable thereafter, unless doing so would prejudice an ongoing fraud investigation.

How We Use Your Data

The table below summarises the primary purposes for which be66 processes personal data, together with the categories of data used for each purpose:

be66 does not use automated decision-making processes that produce legal or similarly significant effects on players without human review. Where automated systems flag an account for review (for example, due to unusual betting patterns or suspected duplicate registration), a member of the compliance team will conduct a manual assessment before any consequential action is taken.

Legal Basis for Processing

be66 processes personal data only where a valid legal basis exists. The legal bases we rely on are as follows:

• Contractual necessity: Processing that is required to fulfil our obligations under the Terms & Conditions — for example, creating your account, processing bets, and handling withdrawals.
• Legal obligation: Processing required to comply with applicable laws — for example, KYC verification to prevent money laundering, and data retention required by financial regulations.
• Legitimate interests: Processing undertaken to pursue the legitimate business interests of be66, provided that those interests are not overridden by your rights — for example, fraud prevention, security monitoring, and platform improvement through aggregated analytics.
• Consent: Processing undertaken on the basis of your freely given, specific, and informed consent — specifically, sending marketing communications about promotions, new games, and special events. You may withdraw consent at any time by contacting [email protected] or using the unsubscribe option in any marketing email.

Where we rely on legitimate interests as a legal basis, we carry out a balancing assessment to ensure that our interests do not outweigh your fundamental rights and freedoms. Records of these assessments are maintained internally and are available on request.

Sharing Your Data

be66 does not sell, rent, or trade your personal data to third parties. We share your data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

• Payment processors and MFS providers: bKash, Nagad, Rocket, Upay, and banking partners receive transaction data necessary to process deposits and withdrawals. These providers are bound by their own privacy obligations and applicable financial services regulations.
• KYC and identity verification providers: Specialist third-party services that assist in verifying the identity of players and screening against sanctions and politically exposed persons (PEP) lists. These providers act as data processors under our instruction.
• Game content providers: Providers such as Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe receive session data necessary to deliver their game content. They do not receive unnecessary personally identifiable information.
• Fraud prevention and cybersecurity services: Third-party services that analyse technical and behavioural signals to detect and prevent fraud, cheating, and unauthorised access.
• Legal and regulatory authorities: Law enforcement agencies, financial intelligence units, and regulatory bodies where disclosure is required by law, court order, or where we have a legitimate reason to believe disclosure is necessary to prevent serious harm.
• Professional advisors: Lawyers, accountants, and auditors, where necessary for the conduct of our business operations, subject to professional confidentiality obligations.

Cookies & Tracking Technologies

The be66 platform uses cookies and similar tracking technologies to enable core platform functionality, remember your preferences, and analyse how the platform is used. The categories of cookies we use are as follows:

• Strictly necessary cookies: Essential for the platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. They cannot be disabled without impairing your ability to use the platform.
• Functional cookies: Used to remember your preferences, such as your selected language, display settings, and responsible gaming tool configurations. Disabling these may affect your experience but will not prevent access to core features.
• Analytical cookies: Used to collect anonymised information about how players navigate and use the platform. This data is aggregated and used to improve platform performance and user experience. No individual player is identified through analytical data.
• Fraud prevention cookies: Used to generate a device fingerprint that helps the Company detect duplicate accounts, bot activity, and other fraudulent behaviour. These cookies are classified as strictly necessary for security purposes.

be66 does not use third-party advertising or retargeting cookies. You will not see be66 advertisements following you around the internet based on your platform activity.

Most browsers allow you to manage cookie settings through their privacy or settings menus. Blocking strictly necessary cookies will prevent you from logging into and using the platform. For guidance on managing cookies in your specific browser, consult your browser's help documentation.

Data Security

be66 employs a layered approach to data security, combining technical, organisational, and procedural controls to protect personal data against unauthorised access, disclosure, alteration, or destruction. Key measures include:

• TLS/SSL encryption: All data transmitted between your device and the be66 platform is encrypted using Transport Layer Security (TLS). You can verify this by the padlock icon displayed in your browser's address bar.
• Encryption at rest: Sensitive personal data stored on be66 servers — including financial data and identity documents — is encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data is restricted to authorised personnel on a strict need-to-know basis. All internal access is authenticated, logged, and subject to regular audit.
• Two-factor authentication: Administrative access to systems holding personal data requires multi-factor authentication.
• Regular security assessments: be66 conducts periodic internal security reviews and vulnerability assessments to identify and remediate potential weaknesses.
• Incident response: In the event of a data breach that is likely to result in a risk to your rights or interests, be66 will notify affected players without undue delay and take immediate remedial action.

While be66 takes all reasonable steps to protect your data, no internet transmission or electronic storage system is 100% secure. You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately if you suspect any unauthorised access to your account.

Data Retention

be66 retains personal data for the periods set out below, after which data is securely deleted or irreversibly anonymised:

Where data is retained beyond the standard period due to an ongoing legal dispute, regulatory investigation, or fraud inquiry, we will retain only the data directly relevant to that matter, and only for as long as that matter remains unresolved.

Your Rights

As a data subject, you have the following rights in relation to the personal data held about you by be66. These rights can be exercised by submitting a written request to [email protected]. We will respond to all valid requests within 30 days of receipt, and will notify you if additional time is needed for complex requests.

• Right of access: You have the right to receive a copy of all personal data be66 holds about you, together with information about how it is used and with whom it is shared.
• Right to rectification: If any personal data held about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
• Right to erasure: You have the right to request that we delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where you object to processing and there are no overriding legitimate grounds. Note that this right is subject to our legal retention obligations — we cannot delete data that we are required by law to retain.
• Right to restriction of processing: You have the right to request that we restrict the processing of your data in certain circumstances — for example, while the accuracy of data is contested, or where processing is unlawful but you prefer restriction to erasure.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format for transfer to another controller.
• Right to object: You have the right to object to processing based on legitimate interests, including profiling. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.

Children & Minors

The be66 platform is strictly intended for adults aged 21 years and above. be66 does not knowingly collect, process, or retain personal data belonging to persons under the age of 21. Any account found to belong to a person under 21 will be immediately closed and all associated funds will be reviewed in accordance with our Terms & Conditions.

If you are a parent or guardian and believe that a minor has registered an account on the be66 platform using false information, please contact us immediately at [email protected]. We will investigate and, where a minor's account is confirmed, will delete all associated personal data without undue delay.

International Data Transfers

In the course of delivering its services, be66 may transfer personal data to third-party service providers whose infrastructure or personnel are located outside Bangladesh. Such transfers include, for example, data processed by cloud hosting providers, KYC verification platforms, and game content delivery networks operating from jurisdictions outside Bangladesh.

Where personal data is transferred internationally, be66 takes steps to ensure that an adequate level of protection is maintained. This includes entering into data processing agreements with all international recipients that impose equivalent data protection obligations to those that apply within Bangladesh, and verifying that receiving jurisdictions or organisations provide a comparable standard of data protection.

If you would like further information about the safeguards applied to international data transfers involving your personal data, please contact [email protected].

Third-Party Links

The be66 platform may contain references to third-party services such as payment providers (bKash, Nagad, Rocket, Upay) and game providers (Evolution Gaming, Pragmatic Play, etc.). While be66 takes care in selecting its partners, we have no control over the privacy practices of third-party websites or services, and this Privacy Policy does not extend to any third-party platform you may access via links or integrations on be66.io.

We encourage you to read the privacy policies of any third-party service you interact with as part of your use of the be66 platform. be66 accepts no responsibility or liability for the data practices of third-party providers.

Changes to This Privacy Policy

be66 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. All changes will be published at be66.io/privacy-policy. The effective date at the top of this document reflects when the most recent version came into force.

For material changes — those that significantly affect how we use your personal data or your rights as a data subject — be66 will notify registered players by email and display a prominent notice on the platform at least seven (7) days before the updated Policy takes effect.

Your continued use of the be66 platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of the revised terms. If you do not accept the updated Policy, you should stop using the platform and submit an account closure request.

Contact Us

All privacy-related queries, data subject requests, consent withdrawal requests, and complaints should be directed to the be66 data support team using the contact details below. We are committed to handling all privacy matters with care, confidentiality, and urgency.

If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to the appropriate data protection authority in your jurisdiction. be66 takes all privacy complaints seriously and will cooperate fully with any regulatory enquiry.