hb666 Privacy Policy — Your Data, Your Rights, Our Commitment

1 Introduction

hb666 ("we", "us", "our") operates the online betting and gaming platform available at hb666.io (the "Platform"). We are committed to protecting the privacy and personal data of every individual who visits, registers with, or transacts on the Platform. This Privacy Policy ("Policy") sets out in full how hb666 collects, processes, stores, shares, and protects your personal information when you use our services.

This Policy applies to all users of the hb666 Platform, including registered account holders, visitors who browse without registering, and individuals who contact our support team. It covers personal data collected through the website, any associated mobile interface, and all communications channels operated by hb666, including email and live chat.

By accessing the Platform or creating an account, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. If you do not agree with any part of this Policy, you should discontinue use of the Platform and contact us to request closure of your account and deletion of your data.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

2 Personal Data We Collect

hb666 collects personal data in three ways: information you provide to us directly, information generated automatically as you use the Platform, and information received from authorised third-party partners. The specific categories of data we collect are set out in the table below.

Category	Examples	How Collected
Identity Data	Full legal name, date of birth, nationality, national ID or passport number	Registration form; KYC document submission
Contact Data	Email address, residential address (Dhaka, Chittagong, Sylhet, etc.), mobile number	Registration form; account settings
Financial Data	bKash/Nagad/Rocket account reference, Visa/Mastercard last four digits, transaction history in ৳ BDT	Cashier/payment gateway interactions
Technical Data	IP address, device type, browser type and version, operating system, session duration	Automatically via server logs and analytics
Usage Data	Pages visited, games played, bet history, deposit/withdrawal records, bonus activity	Automatically via platform activity tracking
Communications Data	Support chat transcripts, email correspondence, feedback submissions	Direct communications with hb666 support
Verification Data	Copies of government-issued ID, utility bills, selfie verification images	KYC verification process

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is strictly required for identity verification purposes as mandated by our KYC obligations.

3 How We Use Your Personal Data

hb666 uses the personal data we collect for the following specific purposes:

• Account Management: To create and maintain your hb666 account, verify your identity, and manage your account settings and preferences.
• Service Delivery: To provide access to sports betting markets, live casino games, slots, crash games, and all other products available on the Platform.
• Financial Processing: To process deposits and withdrawals in ৳ BDT via bKash, Nagad, Rocket, Upay, and card payment gateways, and to maintain accurate transaction records.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeover attempts, and other security threats to the Platform and its users.
• Responsible Gaming: To monitor betting patterns, identify signs of problem gambling, enforce self-exclusion requests, and apply deposit limits or cooling-off periods where requested or required.
• Legal Compliance: To fulfil our obligations under applicable laws, respond to lawful requests from competent authorities, and maintain records as required by anti-money laundering regulations.
• Customer Support: To respond to your queries, resolve complaints, and maintain records of our communications with you for quality assurance purposes.
• Platform Improvement: To analyse usage patterns, improve our product offering, fix technical issues, and enhance the overall user experience on the hb666 platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and news about hb666 products where you have given your explicit consent to receive such communications. You may withdraw consent at any time by contacting support.

4 Legal Basis for Processing

hb666 processes your personal data under the following legal bases:

4.1 Contractual Necessity

Processing is necessary to perform the contract between you and hb666, as set out in our Terms & Conditions. This covers account registration, service delivery, payment processing, and all core platform functions. Without processing data on this basis, hb666 cannot provide you with its services.

4.2 Legal Obligation

Processing is necessary for hb666 to comply with applicable legal obligations, including KYC and identity verification requirements, anti-money laundering (AML) monitoring, and record-keeping mandates. hb666 cannot waive these obligations regardless of user preference.

4.3 Legitimate Interests

hb666 processes certain data — including technical and usage data — on the basis of legitimate interests, specifically to operate a secure and well-functioning platform, prevent fraud, analyse and improve our services, and protect the interests of our user base. We have assessed that these legitimate interests do not override your fundamental rights and freedoms.

4.4 Consent

Where we rely on your consent — for example, to send you marketing communications or to process optional profile information — you are entitled to withdraw that consent at any time by contacting our support team at [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

5 Sharing Your Personal Data

hb666 does not sell, rent, or trade your personal data to any third party for commercial gain. We may share your personal information only in the following limited and specific circumstances:

5.1 Service Providers and Data Processors

We engage authorised third-party service providers who process personal data on our behalf and under our documented instructions. These include: identity verification and KYC partners; payment processing providers (including bKash, Nagad, Rocket, Upay, Visa, and Mastercard network operators); fraud detection and security monitoring vendors; cloud hosting and infrastructure providers; customer support platform operators; and game technology providers including Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, and Microgaming. All such providers are contractually bound to process your data securely, only for the purposes specified by hb666, and in a manner consistent with this Privacy Policy.

5.2 Legal and Regulatory Disclosure

hb666 may be required to disclose personal data to law enforcement agencies, regulatory authorities, courts, or other public bodies where such disclosure is required or permitted by applicable law, including in connection with anti-money laundering investigations, fraud inquiries, or judicial proceedings. In such cases, hb666 will disclose only the minimum data necessary to satisfy the legal obligation.

5.3 Business Transfers

In the event that hb666 undergoes a merger, acquisition, or sale of all or a material portion of its business assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify affected users of any such transfer and of any material changes to data practices that result from it.

6 Payment Data and Financial Transactions

All financial transactions on the hb666 platform are denominated in Bangladeshi Taka (৳ BDT). When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, or a card network, the relevant transaction data is processed by the applicable payment gateway provider. hb666 does not store complete card numbers or mobile banking PINs on its own servers.

Transaction records — including deposit amounts, withdrawal requests, and associated timestamps — are retained by hb666 for a minimum period as required by applicable financial record-keeping obligations. These records may be reviewed by authorised hb666 staff for the purposes of dispute resolution, fraud investigation, and regulatory compliance.

If you contact hb666 support regarding a transaction dispute, you consent to hb666 sharing the minimum necessary transaction data with the relevant payment provider to investigate and resolve the dispute on your behalf.

7 Cookies and Tracking Technologies

7.1 What Are Cookies?

Cookies are small text files placed on your device when you access a website. hb666 uses cookies and similar tracking technologies — including web beacons, local storage, and session identifiers — to enable core platform functionality, remember your preferences, analyse usage patterns, and maintain session security.

7.2 Types of Cookies We Use

• Strictly Necessary Cookies: Required for the Platform to function correctly. These cannot be disabled without disrupting core features such as login sessions, account security, and payment flows.
• Functional Cookies: Remember your language, display, and game preferences to provide a personalised experience across sessions.
• Analytics Cookies: Collect anonymised data about how visitors use the Platform — including pages visited, session duration, and error events — to help us improve performance and usability.
• Security Cookies: Used to detect and prevent fraudulent or abusive activity, including bot traffic and account takeover attempts.

7.3 Managing Cookies

You may control cookie settings through your browser's privacy or settings menu. Please note that disabling strictly necessary cookies will impair your ability to use core Platform features including account login and payment processing. hb666 does not use third-party advertising cookies or sell cookie-derived data to ad networks.

8 Data Security Measures

hb666 implements robust technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, disclosure, or destruction. Our security infrastructure includes:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser or device and hb666 servers is encrypted in transit using industry-standard 256-bit SSL/TLS protocols.
• Hashed Password Storage: User passwords are stored in irreversibly hashed form using a strong cryptographic hashing algorithm. hb666 staff cannot retrieve your password in plain text under any circumstances.
• Access Controls: Access to systems containing personal data is restricted to authorised personnel on a need-to-know basis. All staff access is logged and regularly reviewed.
• Intrusion Detection: Our infrastructure is monitored continuously by automated intrusion detection systems that flag and respond to suspicious activity in real time.
• Regular Security Reviews: hb666 conducts periodic internal security reviews and engages qualified external parties to assess and improve our data security posture.

While hb666 takes all reasonable precautions to secure your data, no system connected to the internet can guarantee absolute security. In the event of a data breach that poses a material risk to your rights or interests, hb666 will notify affected users and relevant authorities as required by applicable law.

9 Data Retention

hb666 retains personal data for as long as is necessary to fulfil the purposes described in this Policy, or as required or permitted by applicable law. The following general retention periods apply:

• Active Account Data: Retained for the duration of your account being active on the Platform.
• Closed Account Data: Following account closure, identity and transaction data is retained for a minimum of five (5) years to comply with anti-money laundering and financial record-keeping requirements.
• KYC Documentation: Retained for a minimum of five (5) years from the date of submission, or longer if required by applicable regulation.
• Customer Support Records: Communication logs and support tickets are retained for up to three (3) years following resolution.
• Technical and Usage Logs: Anonymised analytics data may be retained indefinitely. Identifiable technical logs are retained for up to twelve (12) months.

When data reaches the end of its applicable retention period, hb666 will securely delete or irreversibly anonymise it. Requests for early deletion are subject to our ability to comply while meeting our outstanding legal obligations.

10 Your Data Rights

As a user of the hb666 Platform, you hold the following rights with respect to your personal data. To exercise any of these rights, contact our support team at [email protected] with a clear description of your request. We will acknowledge your request promptly and respond in full within a reasonable timeframe.

• Right of Access: You may request a copy of the personal data hb666 holds about you, along with information about how it is being used.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Restriction: You may request that we restrict processing of your personal data in certain circumstances — for example, while a rectification request is being assessed.
• Right to Data Portability: Where processing is based on your consent or on contract performance, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing of your data where that processing is based on hb666's legitimate interests, including direct marketing.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

11 Children's Privacy and Age Restrictions

hb666 is strictly an adult platform. We do not knowingly collect personal data from any individual under the age of 21. Our registration process includes an age declaration requirement, and we may request proof of age as part of our KYC verification at any time.

If hb666 becomes aware that personal data has been collected from a user who is under 21 years of age, we will take immediate steps to close the account, return any deposits where possible, and permanently delete all associated personal data. If you have reason to believe that a minor has registered on the hb666 platform, please contact us at [email protected] immediately.

12 Third-Party Links and External Services

The hb666 Platform does not contain links to external third-party websites other than those operated by our authorised payment and game provider partners within the Platform interface. Should any links to external sites appear in informational content, hb666 is not responsible for the privacy practices or content of those sites. We encourage users to review the privacy policies of any third-party service they interact with independently.

Game titles provided by third-party studios — including Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, Spribe, and others — are delivered through iFrame integrations within the hb666 Platform. While these providers operate under contractual data processing agreements with hb666, their own privacy practices within their game engines are governed by their respective policies.

13 Updates to This Privacy Policy

hb666 reserves the right to update or amend this Privacy Policy at any time. When changes are material — meaning they significantly alter how we collect, use, or share your data — we will provide advance notice to registered users via email or a prominent on-platform notification at least seven (7) calendar days before the changes take effect.

For minor, non-material updates (such as correcting typographical errors or updating contact details), changes may be made without prior notice. The version of this Policy published at hb666.io/privacy-policy at any given time constitutes the current and binding version. We recommend that you review this Policy periodically to stay informed of how we protect your information.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data hb666 holds about you, please contact our Data Support team using the details below:

• Email: [email protected]
• Response Time: Within 24 hours, available 24/7
• Language: All privacy requests are handled in English
• Platform: hb666.io

Please note that email addresses on this Platform are displayed as plain text for reference only. Copy the address manually into your email client — do not use any mailto link.