Privacy Policy — How bz66 Collects, Uses, and Protects Your Personal Data

bz66 ("we", "us", "our", "the Platform") is committed to protecting the personal data of all individuals who interact with the bz66 website and services. This Privacy Policy is addressed to registered account holders, prospective players, and all visitors to https://bz66.ws ("you", "your", "the User").

This policy governs all personal data processing activities carried out by bz66 in connection with the delivery of its online casino, sportsbook, live dealer, crash games, and associated support services to players in Bangladesh. It applies regardless of the device or method used to access the platform — desktop browser, mobile browser, or any future application distributed by bz66.

bz66 operates this platform for adults aged 21 and above only. If you are under 21, you must not register an account or provide any personal data to bz66. If we become aware that personal data has been submitted by a person under the age of 21, we will delete that data promptly and close any associated account.

This Privacy Policy is published in English and the English version shall prevail in the event of any ambiguity or inconsistency. It should be read alongside the bz66 Terms & Conditions, available at https://bz66.ws/terms-conditions.

bz66 collects two broad categories of personal data: data that you provide directly, and data that is collected automatically through your use of the platform. The specific data types within each category are described below.

You are not obligated to provide personal data to bz66; however, failure to provide data that is required for registration, KYC verification, or payment processing will prevent us from delivering the relevant service to you.

bz66 collects personal data through several distinct channels, each of which is necessary for the operation of specific platform functions:

• Direct submission: Data you enter into forms on the platform — including the account registration form, KYC document upload interface, deposit and withdrawal request forms, and customer support contact fields.
• Automated technical collection: Data gathered automatically when you access the platform, including IP address logging, session tracking, device fingerprinting for security purposes, and browser-based cookie data.
• Payment provider data: When you initiate a deposit or withdrawal via bKash, Nagad, Rocket, or Upay, the payment provider transmits a transaction confirmation reference and account identifier to bz66. bz66 does not receive your full mobile banking PIN or password at any point.
• Third-party identity verification: Where bz66 engages a third-party KYC or anti-fraud service to assist in verifying your identity, that provider may supply us with a verification result, risk score, or additional identity data points sourced from publicly available records.
• Support communications: Data submitted by you during live chat sessions, email exchanges, or support ticket submissions is captured and stored as part of our customer service records.

bz66 processes your personal data only for defined, legitimate purposes. We do not sell your personal data to third parties for commercial marketing purposes. The purposes for which we use your data are as follows:

• Account creation and management: To register your account, verify your identity, maintain your account profile, and manage account security settings including password resets and two-factor authentication.
• Service delivery: To process your bets and wagers, credit your account with winnings, apply bonuses, and provide access to all games and betting markets available on the bz66 platform.
• Payment processing: To facilitate deposits from and withdrawals to your registered bKash, Nagad, Rocket, or Upay account, and to maintain accurate financial records of all transactions.
• Identity verification and KYC compliance: To verify that you meet the minimum age requirement of 21 years, confirm the accuracy of your registration information, and satisfy our anti-money-laundering obligations.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, account takeover attempts, money laundering, and other prohibited conduct on the platform.
• Responsible gaming: To monitor gameplay patterns for signs of problem gambling, enforce deposit limits and self-exclusion requests, and contact players where we have concerns about their gambling behaviour.
• Customer support: To respond to your queries, resolve disputes, process complaints, and maintain a record of support interactions for quality assurance purposes.
• Platform improvement: To analyse aggregated usage data in order to improve the performance, stability, and user experience of the bz66 platform.
• Marketing communications: To send you information about promotions, bonuses, and new features that may be of interest — but only where you have consented to receive such communications. You may withdraw this consent at any time.

bz66 processes your personal data on one or more of the following legal bases, depending on the specific processing activity involved:

• Contractual necessity: Processing required to fulfil the bz66 Terms & Conditions you agreed to at registration, including account management, payment processing, and service delivery.
• Legal obligation: Processing necessary to comply with applicable legal requirements, including anti-money-laundering laws, identity verification obligations, and fraud prevention duties.
• Legitimate interests: Processing carried out for bz66's legitimate business interests, including platform security, fraud detection, and service improvement, where those interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, informed, and specific consent — principally for the sending of direct marketing communications. You may withdraw consent at any time by contacting [email protected].

bz66 does not sell, rent, or trade your personal data with any third party for their independent marketing or commercial use. We may, however, share your data with the following categories of recipients in the circumstances described:

• Payment service providers: bKash, Nagad, Rocket, and Upay receive the transaction data necessary to process your deposits and withdrawals. Each provider operates under its own privacy policy and data protection obligations.
• Identity verification and KYC partners: Third-party verification services engaged by bz66 to assist in confirming your identity and conducting anti-money-laundering checks. These providers process only the minimum data necessary for verification purposes.
• Game content providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session data to facilitate game delivery and resolve technical disputes.
• Technology and infrastructure providers: Cloud hosting, content delivery, and cybersecurity vendors who process data on our behalf under strict data processing agreements that prohibit independent use of your data.
• Law enforcement and regulatory authorities: Where required by applicable law, court order, or a lawful request from a competent authority, bz66 will disclose personal data to the extent legally required. We will notify you of such disclosures where permitted by law.
• Business transfers: In the event of a merger, acquisition, or sale of assets involving bz66, your personal data may be transferred to the successor entity, subject to the same level of data protection provided under this Privacy Policy.

bz66 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with bz66's internal data destruction procedures. Anonymised or aggregated data that cannot reasonably be used to identify you may be retained indefinitely for analytical purposes.

bz66 implements a layered security architecture to protect your personal data against unauthorised access, loss, alteration, or disclosure. Our security measures include, but are not limited to, the following:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the bz66 platform, ensuring that your login credentials, financial data, and personal information are protected in transit.
• Encrypted storage of all sensitive personal data and financial records at rest, using industry-standard encryption protocols applied to our server infrastructure.
• Role-based access controls that restrict access to personal data to bz66 personnel who have a legitimate operational need to access that specific data category.
• Multi-factor authentication requirements for all administrative access to systems that store or process personal data.
• Regular security audits and penetration testing conducted by independent cybersecurity professionals to identify and remediate vulnerabilities before they can be exploited.
• Secure password hashing using industry-standard algorithms. bz66 does not store your account password in plaintext at any point.
• Automated fraud detection systems that monitor account activity in real time for patterns consistent with account takeover, credential stuffing, or other malicious activity.

The bz66 platform uses cookies and similar tracking technologies to enable core platform functionality, maintain your logged-in session, remember your preferences, and analyse aggregate usage patterns to improve the platform. The main categories of cookies used are as follows:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during your visit. These cannot be disabled without preventing you from using the platform.
• Functional cookies: Used to remember your preferences such as language settings and display options, so that you do not need to re-enter them on each visit.
• Analytical cookies: Used to collect anonymised data about how users navigate the platform, which pages are most visited, and where users encounter difficulties. This data is used solely to improve the platform experience and is not linked to individual user identities.
• Security cookies: Used to detect and prevent fraudulent activity and account takeover attempts, including device fingerprinting and session integrity checks.

You may configure your browser to refuse or delete cookies; however, disabling strictly necessary cookies will prevent you from logging in to your bz66 account. bz66 does not use cookies to serve third-party advertising or to track your activity on external websites.

As an individual whose personal data is processed by bz66, you hold a set of rights in relation to that data. bz66 is committed to honouring these rights promptly and without undue barrier. Your rights are as follows:

To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Data Subject Request" and your registered account username. bz66 will respond to all valid requests within 30 calendar days. In complex cases, this period may be extended by a further 30 days, in which case you will be notified of the extension and the reasons for it.

Identity verification will be required before any data subject request is processed, to ensure that we do not disclose or alter data in response to fraudulent requests.

The bz66 platform is strictly intended for adults aged 21 and above. bz66 does not knowingly collect, process, or store personal data belonging to individuals under the age of 21. If you are under 21, you must not access the platform, create an account, or submit any personal data to bz66 under any circumstances.

If a parent or guardian believes that their child under the age of 21 has submitted personal data to bz66, they should contact us immediately at [email protected]. Upon verification of the complaint, bz66 will delete all personal data associated with the underage individual and close any account that was created, with all associated funds forfeited in accordance with the bz66 Terms & Conditions.

bz66 employs age verification controls during the registration process and applies KYC identity checks to confirm the age of all account holders. Parental controls are strongly recommended for households where minors have access to internet-connected devices.

The bz66 platform integrates third-party services for the delivery of specific platform functions, including game content, payment processing, and customer support infrastructure. Each of these third parties operates under its own privacy policy and data protection obligations. bz66 is not responsible for the privacy practices of third-party services outside of the data processing agreements in place between bz66 and those providers.

• Game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may collect anonymised technical data through the game interfaces embedded on the bz66 platform in order to deliver and support their game content.
• Payment providers including bKash, Nagad, Rocket, and Upay process your payment transactions under their own terms of service and privacy policies. bz66 recommends that you review those policies directly with the relevant provider.
• bz66 does not embed third-party advertising networks, social media tracking pixels, or any external analytics service that would allow third parties to track your activity across external websites.

bz66 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. When material changes are made, the "Last Revised" date at the top of this document will be updated accordingly.

For significant changes that affect your rights or the way we handle your personal data, bz66 may notify registered account holders via the email address on record. It remains your responsibility to review this Privacy Policy periodically. The most current version is always available at https://bz66.ws/privacy-policy. Continued use of the platform following the publication of any revised Privacy Policy constitutes your acceptance of the updated terms.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bz66 handles your personal data, please contact us using the details below. All privacy-related communications should be in English and should include your registered account username and a clear description of your query or request.

• Email: [email protected] — for data subject access requests, erasure requests, correction requests, and general privacy enquiries (plain text address — not a clickable link).
• Subject line: Use "Privacy Policy Query" for general questions or "Data Subject Request" for formal rights requests.
• Live Chat: Available 24 hours a day, 7 days a week from within your logged-in bz66 account dashboard. Live chat is suitable for general privacy questions but formal data subject requests must be submitted in writing via email.
• Response time: bz66 aims to acknowledge all privacy-related communications within 48 hours and to provide a substantive response within 30 calendar days.
• Support hours: Around the clock, Bangladesh Standard Time (UTC+6), 365 days per year.