Data Protection & Privacy
hb666 Privacy Policy
At hb666, protecting the personal data of every player across Bangladesh is a core responsibility. This Privacy Policy explains exactly what information we collect, how we use it, who we share it with, and the rights you hold over your own data. We are committed to transparency, security, and treating your information with the respect it deserves.
End-to-End Encryption
All data transmitted between your device and hb666 servers is protected by 256-bit SSL encryption — the same standard used by major Bangladeshi banks. Your personal and financial data is secured at every point of transmission.
No Unauthorised Sharing
hb666 does not sell, rent, or trade your personal data to third-party marketers. Your information is shared only with trusted service providers who are contractually bound to handle it in accordance with this Privacy Policy.
Your Rights, Your Control
As an hb666 player, you hold the right to access, correct, and request deletion of your personal data. You may also object to certain forms of data processing or request a portable copy of your data at any time by contacting our support team.
Transparent Cookie Use
hb666 uses cookies and similar tracking technologies to keep your session secure, remember your preferences, and improve platform performance. You can manage cookie preferences through your browser settings at any time.
Payment Data Protection
Financial transaction data — including bKash, Nagad, Rocket, and Upay account details — is processed through secure, encrypted channels. hb666 does not store full payment credentials on its servers; only tokenised references are retained for transaction matching.
Defined Retention Periods
hb666 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. Account data is retained for a minimum of five years after account closure to comply with anti-money-laundering obligations.
1. Information We Collect
hb666 collects personal data from players across Bangladesh through several channels — directly from you during registration and account management, automatically through your use of the platform, and in certain cases from trusted third-party sources such as payment processors and identity verification providers. The categories of personal data we collect are set out below.
1.1 Registration & Account Data
When you create an hb666 account, we collect the personal information you provide during the registration process. This includes your full name, date of birth, email address, mobile phone number, and the residential address you declare at sign-up. We also record the username and password you choose, though passwords are stored only as a cryptographic hash and are never held in plain text.
1.2 Identity Verification (KYC) Data
As part of our Know Your Customer (KYC) obligations, hb666 may request and retain copies of identity documents you submit for verification purposes. These may include your National Identity Card (NID), passport, driving licence, or utility bills and bank statements provided as proof of address. KYC documents are stored in an encrypted document management system with access restricted to authorised compliance personnel only.
1.3 Financial Transaction Data
When you make deposits or request withdrawals on hb666, we collect and process transaction data associated with those financial activities. This includes the payment method used (bKash, Nagad, Rocket, Upay, Visa, Mastercard, or bank transfer), transaction amounts in BDT, transaction reference numbers, timestamps, and the status of each transaction. This data is necessary for processing payments, preventing fraud, and meeting anti-money-laundering (AML) compliance requirements.
1.4 Usage & Technical Data
hb666 automatically collects certain technical data when you access the platform. This includes your IP address, browser type and version, operating system, device identifiers, screen resolution, referring URL, pages visited, time spent on each page, game sessions initiated, bets placed, and clickstream data. This information is used to maintain platform security, diagnose technical issues, and improve the overall user experience for players across Bangladesh.
1.5 Communications Data
When you contact hb666 through live chat, email at [email protected], or any other communication channel, we retain records of those interactions — including the content of messages, timestamps, and any attachments submitted. This data is used to resolve support queries, maintain an audit trail, and improve the quality of our customer service.
| Data Category | Examples | Primary Purpose |
|---|---|---|
| Registration Data | Name, email, date of birth, phone number, address | Account creation, identity verification |
| KYC Documents | NID, passport, utility bill, bank statement | Age & identity verification, AML compliance |
| Financial Data | bKash/Nagad reference, transaction amounts, timestamps | Payment processing, fraud prevention |
| Technical Data | IP address, device ID, browser type, session logs | Security monitoring, platform optimisation |
| Communications Data | Live chat logs, support emails, message timestamps | Customer support, audit trail |
| Behavioural Data | Pages visited, games played, bet history, session duration | Personalisation, responsible gaming monitoring |
2. How We Use Your Data
hb666 processes personal data only for legitimate, clearly defined purposes. We do not process data in ways that are incompatible with the purpose for which it was originally collected. The primary purposes for which hb666 uses your personal data are described in this section.
2.1 Providing and Operating the Platform
The most fundamental use of your data is to operate the hb666 platform and deliver the services you have requested — including managing your account, processing deposits and withdrawals via bKash, Nagad, and other supported methods, making games available to you, settling bets, crediting winnings, and communicating account-related information to you. Without processing this data, hb666 cannot provide its services to you.
2.2 Identity Verification & Regulatory Compliance
hb666 is required to verify the identity and age of all players. We use the personal and KYC data you provide to confirm that you are at least 18 years of age and that the information you have provided is accurate. We also process transaction data to detect and prevent money laundering, fraud, and other financial crimes, in accordance with our obligations under applicable anti-money-laundering frameworks.
2.3 Security & Fraud Prevention
hb666 uses technical and behavioural data — including IP addresses, device fingerprints, login patterns, and transaction histories — to detect and prevent unauthorised account access, fraudulent payment activity, and other security threats. Where our systems flag unusual activity on an account, we may temporarily restrict access pending investigation. This processing is carried out in the legitimate interests of both hb666 and our player community.
2.4 Responsible Gaming Monitoring
hb666 takes its responsible gaming obligations seriously. We use player behavioural data — including session duration, frequency of play, deposit patterns, and changes in betting behaviour — to identify players who may be showing signs of problem gambling. Where such signs are detected, hb666 may proactively contact the player, display responsible gaming prompts, or in certain cases apply protective account restrictions. This processing is carried out in the vital interests of player welfare.
2.5 Marketing Communications
Where you have given your explicit consent to receive marketing communications, hb666 may use your contact details to send you information about promotions, bonuses, new game launches, and other offers relevant to your interests as an hb666 player. You may withdraw your consent to receive marketing communications at any time by contacting [email protected] or by using the unsubscribe mechanism included in any marketing message.
- Processing your registration, login, and account management activities.
- Verifying your identity and age in accordance with responsible gaming requirements.
- Processing BDT deposits and withdrawals through supported payment channels.
- Detecting and preventing fraud, money laundering, and unauthorised account access.
- Monitoring gameplay for responsible gaming and player protection purposes.
- Responding to your support queries and maintaining customer service records.
- Sending account notifications (e.g., deposit confirmations, withdrawal updates, security alerts).
- Sending marketing communications where you have given consent to receive them.
- Improving the platform through analysis of aggregated, anonymised usage data.
3. Data Sharing & Disclosure
hb666 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. However, in order to operate the platform and fulfil our legal obligations, we do share certain categories of personal data with the trusted third parties described in this section. All third parties with whom hb666 shares data are required to handle that data in accordance with applicable data protection standards and are permitted to use it only for the specific purposes for which it was shared.
3.1 Payment Service Providers
To process your financial transactions, hb666 shares relevant transaction data with payment service providers including bKash, Nagad, Rocket, Upay, and international card processors supporting Visa and Mastercard. The information shared is limited to what is strictly necessary to execute and confirm your transaction — for example, your registered mobile number and the transaction amount. These providers operate under their own privacy policies and data protection obligations.
3.2 Identity Verification Partners
hb666 works with third-party identity verification and KYC service providers to confirm the authenticity of identity documents submitted by players. These providers receive copies of your submitted documents and personal details for the sole purpose of performing the verification check. Verification partners are contractually prohibited from retaining or using your data for any other purpose.
3.3 Game Technology Providers
The games available on hb666 are powered by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game, certain session data — such as a pseudonymous player identifier, your currency, and your game session activity — is shared with the relevant game provider to enable the game to function. Game providers do not receive your full name, contact details, or payment information.
3.4 Legal & Regulatory Disclosure
hb666 may disclose personal data to law enforcement agencies, regulatory authorities, or other government bodies where required to do so by law or in response to a valid legal process. We will, wherever legally permissible, notify affected players of any such disclosure request before complying with it.
4. Cookies & Tracking Technologies
hb666 uses cookies and similar tracking technologies — including pixel tags, web beacons, and local storage objects — to operate certain essential platform functions, remember your preferences, and gather analytics data that helps us improve the hb666 experience for all players in Bangladesh. This section explains the types of cookies we use and how you can manage them.
4.1 Essential Cookies
Essential cookies are strictly necessary for the hb666 platform to function. They enable core features such as user authentication, session management, security token validation, and load balancing. Without essential cookies, basic functions like logging into your hb666 account would not work. Essential cookies cannot be disabled without disrupting your ability to use the platform.
4.2 Performance & Analytics Cookies
Performance cookies collect anonymised data about how players use the hb666 platform — which pages are visited most frequently, how long sessions last, where users navigate after visiting particular pages, and what types of errors are encountered. This information is used in aggregate form to identify areas where the platform can be improved. No personally identifiable information is contained in performance cookies.
4.3 Functional Cookies
Functional cookies allow hb666 to remember choices you have made — such as your preferred language, display settings, and whether you have dismissed certain notifications — so that these preferences are preserved across sessions. Disabling functional cookies will not prevent you from using the platform but may result in a less personalised experience.
4.4 Managing Your Cookie Preferences
You can control and delete cookies through your web browser settings. Most modern browsers allow you to block third-party cookies, clear all cookies on exit, and view a list of currently stored cookies. Please note that disabling essential cookies will impair your ability to use key hb666 features. For detailed guidance on managing cookies in your specific browser, refer to your browser's official help documentation.
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Essential | Authentication, session management, security | No — core functionality depends on these |
| Performance | Anonymised analytics, error tracking, page speed | Yes — via browser settings |
| Functional | Language preference, display settings, notifications | Yes — may reduce personalisation |
5. Data Security & Retention
hb666 employs a multi-layered approach to data security, combining technical, organisational, and procedural measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. While no system can guarantee absolute security, hb666 continuously reviews and updates its security practices to reflect the current threat landscape.
5.1 Technical Security Measures
- All data in transit is encrypted using TLS 1.2 or higher with 256-bit SSL certificates.
- Sensitive data at rest — including KYC documents and payment references — is encrypted using AES-256 encryption.
- Player passwords are stored as salted cryptographic hashes; plain-text passwords are never stored or transmitted.
- Access to production systems and databases is restricted to authorised personnel via role-based access controls and multi-factor authentication.
- hb666 employs intrusion detection systems, web application firewalls, and 24/7 security monitoring to detect and respond to threats in real time.
5.2 Data Retention Periods
hb666 retains personal data for no longer than is necessary to fulfil the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by applicable law. The following general retention periods apply:
- Active account data is retained for the duration of your account relationship with hb666.
- Following account closure, personal data is retained for a minimum of five years to comply with anti-money-laundering and record-keeping obligations.
- KYC documents are retained for five years from the date of submission or account closure, whichever is later.
- Transaction records are retained for a minimum of five years from the date of the transaction.
- Customer support correspondence is retained for two years from the date of the most recent interaction in the relevant support thread.
- Marketing consent records are retained for the duration of the marketing relationship, plus two years from the date of consent withdrawal.
6. Your Privacy Rights
As an hb666 player, you hold a number of rights with respect to the personal data we hold about you. hb666 is committed to facilitating the exercise of these rights promptly and without undue barrier. To submit a data rights request, please contact the hb666 support team via live chat or by emailing [email protected] with the subject line "Data Rights Request".
6.1 Right of Access
You have the right to request a copy of the personal data that hb666 holds about you. Upon receipt of a verified access request, hb666 will provide you with a summary of the personal data categories held, the purposes for which they are processed, and the retention periods that apply. Access requests will be fulfilled within 30 days of receipt.
6.2 Right to Rectification
If you believe that any personal data hb666 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain account details — such as your email address and phone number — directly through your hb666 account settings. For changes to identity-related information such as your name or date of birth, you will be required to submit supporting documentation to the compliance team for verification.
6.3 Right to Erasure
You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn your consent (and no other legal basis exists for the processing), or where the processing is unlawful. Please note that hb666 may be required to retain certain data — particularly KYC documents and transaction records — for a mandatory minimum period under applicable AML and financial regulations, even following an erasure request.
6.4 Right to Restriction & Objection
You have the right to request that hb666 restrict the processing of your personal data in certain circumstances — for example, while a rectification request is being assessed. You also have the right to object to processing that is carried out on the basis of hb666's legitimate interests, including profiling for responsible gaming monitoring purposes, where your particular situation warrants an exemption.
6.5 Right to Data Portability
Where hb666 processes your personal data on the basis of your consent or for the performance of a contract, you have the right to receive a structured, commonly used, machine-readable copy of the personal data you have provided to hb666. This right covers data such as your account profile, transaction history, and gaming activity logs.
7. Third-Party Services & Links
The hb666 platform integrates third-party services that are essential to its operation — including game engines from studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, as well as payment gateways and analytics platforms. Each of these third parties operates under its own privacy policy and data protection framework.
While hb666 carefully vets all third-party service providers and requires them to maintain appropriate data protection standards through contractual obligations, hb666 cannot accept responsibility for the data practices of third parties once data has been transferred to them in accordance with this Privacy Policy. Players who interact with third-party game interfaces or payment gateways are encouraged to review the privacy policies of those providers directly.
hb666 does not include links to external websites for general browsing purposes. All navigation on the platform is contained within the hb666 domain. If you navigate to any external site, whether accidentally or by typing an address manually, please be aware that hb666's Privacy Policy does not apply to data collected by that external site.
8. Updates to This Policy
hb666 reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, updates to applicable law, or developments in the technology we use. When we make material changes to this Privacy Policy, we will update the effective date displayed at the top of this page and, where the changes are significant, notify registered players by email or via a notice on the hb666 platform prior to the changes taking effect.
We encourage all hb666 players to review this Privacy Policy periodically. Your continued use of the hb666 platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you must discontinue use of the platform and may request account closure by contacting [email protected].
Questions, concerns, or requests relating to this Privacy Policy or hb666's data processing practices should be directed to the support team at [email protected]. All data rights requests and privacy-related enquiries will be acknowledged within two business days and fully resolved within 30 calendar days.
Continue on hb666
Ready to Explore the Platform?
Now that you understand how hb666 handles your data, feel free to explore everything the platform has to offer — from live cricket betting and premium slots to live casino tables. If you have questions, our FAQ page has quick answers, or reach out to our 24/7 support team directly. 18+ only. Please gamble responsibly.
18+ Only | Gambling involves risk | Play within your means