bz66 Privacy Policy

This Privacy Policy ("Policy") describes how bz66 ("bz66", "we", "us", "our") collects, uses, stores, shares, and protects personal information provided by users ("Player", "User", "you") when you access or use the bz66 website at bz66.lat and all associated services, games, and features. By registering an account on bz66 or otherwise providing your personal information to us, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

This Policy should be read alongside the bz66 Terms and Conditions, which also form part of the agreement between you and bz66. If you do not agree with the terms of this Policy, you should not use the bz66 platform. We encourage you to review this Policy periodically as it may be updated from time to time. The most recent version is always available at /privacy-policy and was last reviewed in January 2026.

bz66 collects personal information in two primary ways: directly from you when you interact with the platform, and automatically through the use of standard web technologies when you browse the site. The categories of personal data we collect are described below.

Information You Provide Directly

When you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or otherwise interact with bz66, you may provide the following categories of personal information:

• Identity information: full name, date of birth, and government-issued identification document number (provided during KYC verification).
• Contact information: mobile phone number (used as the primary account identifier and for OTP verification), and optionally an email address.
• Financial information: mobile wallet identifiers (bKash, Nagad, Rocket, Upay) or bank account details used for deposit and withdrawal transactions. bz66 does not store full payment credentials — payment processing is handled by the respective payment providers.
• Communications: the content of any messages you send to our support team, including support tickets, chat transcripts, and email correspondence.

Information Collected Automatically

When you access the bz66 platform, we automatically collect certain technical and usage data through cookies and similar technologies. This data includes:

• Device and technical data: device type, operating system, browser type and version, screen resolution, and IP address (used for geolocation purposes at the country level only).
• Usage data: pages visited, time spent on each page, game sessions initiated, betting history, deposit and withdrawal transaction history, and feature interaction patterns.
• Session identifiers: encrypted session tokens used to keep you logged in during an active session and to enforce session time limits if you have configured them under responsible gaming settings.

Information from Third Parties

In limited circumstances, bz66 may receive information about you from third-party sources, including fraud prevention and identity verification agencies (used as part of the KYC process), payment processors (transaction confirmation data only), and, where applicable, responsible gaming databases that flag players who have self-excluded from other platforms. Any information received from third parties is handled in accordance with this Policy and used only for the purposes for which it was received.

bz66 uses the personal data it collects for the following purposes. We do not use personal data for any purpose not listed here without first obtaining your explicit consent or unless required to do so by applicable law:

• Account management: creating and maintaining your bz66 player account, verifying your identity, processing your registration, and managing account security including password resets and OTP verification.
• Service delivery: processing deposits and withdrawals, crediting winnings to your account, applying bonuses and promotions, and providing access to all games and platform features.
• Regulatory compliance: fulfilling Know Your Customer (KYC) obligations, anti-money laundering (AML) screening, age verification, and any other legal or regulatory requirements applicable to bz66's operations.
• Responsible gaming: monitoring account activity for patterns that may indicate problematic gambling behaviour, applying player-set deposit limits and session time limits, processing self-exclusion requests, and facilitating cooling-off periods.
• Fraud prevention and security: detecting, investigating, and preventing fraudulent transactions, money laundering, bonus abuse, multiple account registrations, and other prohibited activities as defined in the Terms and Conditions.
• Platform improvement: analysing aggregated, anonymised usage data to understand how players use the platform, identify areas for improvement, optimise game performance, and enhance the overall user experience for Bangladesh players.

Customer support: responding to your enquiries, resolving complaints, processing account-related requests, and communicating important account notifications such as deposit confirmations, withdrawal approvals, and security alerts.

bz66 processes your personal data on the following legal bases, depending on the purpose for which the data is being processed:

bz66 does not sell personal data to any third party. We may share your personal data with third parties only in the following limited and specific circumstances:

• Payment processors: transaction data (amount, currency, payment method identifier) is shared with bKash, Nagad, Rocket, Upay, and banking partners solely to process deposit and withdrawal requests. These providers receive only the data necessary to complete the transaction.
• Identity verification providers: identity document data shared with KYC verification service providers for the sole purpose of verifying your age and identity. These providers are contractually bound to use the data only for verification purposes.
• Law enforcement and regulatory authorities: personal data may be disclosed to law enforcement agencies, regulatory bodies, or courts where bz66 is legally required to do so, or where disclosure is necessary to investigate or prevent fraud, money laundering, or other serious criminal activity.
• Game providers: anonymised session and RTP data is shared with game providers (such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi) for the purpose of game performance auditing and fair play certification. No personally identifiable information is shared with game providers.

In all cases where personal data is shared with third parties, bz66 takes reasonable steps to ensure that the recipient processes the data securely and in accordance with applicable privacy standards. bz66 does not permit third-party recipients to use your personal data for their own marketing purposes.

Given the nature of the bz66 platform, payment data and identity verification data are treated with the highest level of care. bz66 does not store full payment card numbers, full mobile wallet PINs, or full bank account credentials. Payment transactions are initiated through the respective payment provider's secure interface, and only a transaction reference and confirmation status are stored by bz66.

KYC documents (such as copies of national identity cards or passports) are stored in encrypted form on secure servers for the duration required by applicable anti-money laundering regulations. Once the retention period has expired and no legal hold is in place, KYC documents are securely destroyed. KYC data is never shared with third parties except as required for verification or by law.

bz66 uses cookies and similar tracking technologies to provide a functional, personalised, and secure platform experience. The types of cookies we use are:

• Essential cookies: strictly necessary for the operation of the platform. These include session authentication cookies that keep you logged in, security tokens, and cookies that remember your language preference. These cannot be disabled without breaking core platform functionality.
• Performance and analytics cookies: used to collect anonymised data about how players interact with the platform (page visits, session duration, game load times). This data is aggregated and cannot identify you individually. It is used solely to improve platform performance.
• Functionality cookies: used to remember your platform preferences such as chosen deposit method, notification settings, and responsible gaming configuration. These improve your experience but are not essential to core functionality.

bz66 does not use advertising cookies or permit third-party advertising networks to place cookies on your device via the bz66 platform. You may manage, restrict, or delete cookies through your browser settings at any time. Please note that disabling essential cookies will impair the functionality of the platform and may prevent you from accessing certain features including account login.

bz66 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, regulatory, accounting, or reporting requirements. The following general retention periods apply:

Account data and gaming history are retained for the duration of your active account plus a minimum of 5 years following account closure, in accordance with standard AML record-keeping obligations. KYC documents are retained for the same period. Anonymised analytics data may be retained indefinitely as it cannot be linked back to any individual. Communications with our support team are retained for 3 years from the date of the last communication. Following the expiry of the applicable retention period, personal data is securely deleted or anonymised.

As a bz66 player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected] with a clear description of your request and sufficient information to verify your identity:

• Right of access: you may request a copy of all personal data bz66 holds about you. We will provide this in a commonly used electronic format within 30 days of a verified request.
• Right to rectification: if you believe that any personal data bz66 holds about you is inaccurate or incomplete, you may request that it be corrected or updated. We will action verified correction requests within 14 days.
• Right to erasure: you may request deletion of your personal data. This right is subject to any overriding legal retention obligations (for example, AML record-keeping requirements mean that transaction and KYC data cannot be deleted until the applicable statutory period has expired).
• Right to restrict processing: in certain circumstances you may request that bz66 restricts its processing of your personal data — for example, while the accuracy of data is being contested or while a complaint is under investigation.
• Right to object: where bz66 processes your personal data based on legitimate interests, you have the right to object to that processing. bz66 will cease processing unless we can demonstrate compelling legitimate grounds that override your interests and rights.

bz66 will respond to all verified privacy rights requests within 30 calendar days. Where a request is complex or where bz66 receives a high volume of requests, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it. There is no charge for making a privacy rights request. We may need to verify your identity before we can action a request — this is to protect you from unauthorised access to your personal data.

bz66 implements a range of technical and organisational security measures designed to protect your personal data against accidental loss, unauthorised access, disclosure, alteration, or destruction. These measures include industry-standard SSL/TLS encryption for all data in transit; encrypted storage of sensitive data at rest using AES-256 or equivalent encryption; access controls that restrict access to personal data to authorised bz66 personnel on a need-to-know basis; regular security testing and vulnerability assessments of the platform infrastructure; and OTP-based two-step verification for sensitive account actions.

Despite these measures, no system can guarantee absolute security. In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, bz66 will notify affected players without undue delay and will take all reasonable steps to contain the breach, assess its scope, and implement remediation measures. If you suspect that your bz66 account has been accessed without your authorisation, please contact our support team immediately.

The bz66 platform is strictly intended for adults aged 21 and above. bz66 does not knowingly collect personal data from individuals under the age of 21. If bz66 becomes aware that personal data has been collected from a person under 21, that data will be deleted immediately and the associated account will be closed. If you believe that a minor has registered an account on bz66, please contact our support team at [email protected] immediately so that we can investigate and take appropriate action.

bz66 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the features and services available on the platform. When we make material changes to this Policy, we will update the "Last updated" date at the top of this page and, where the changes are significant, notify registered players via their registered mobile number or via a prominent notice on the platform prior to the changes taking effect.

Your continued use of the bz66 platform after any update to this Policy constitutes your acceptance of the revised Policy. We encourage you to review this page periodically to stay informed of how bz66 protects your personal information. If you do not agree with any revision, you should stop using the platform and may request account closure by contacting our support team.

If you have any questions about this Privacy Policy, wish to exercise your privacy rights, or want to report a potential data protection concern, please contact our support team. We are available 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6).

Support email: [email protected]