🔒

Data Protection · fa666 Privacy Framework

fa666 Privacy Policy — How We Protect Your Data

At fa666, your privacy is a fundamental commitment, not an afterthought. This Privacy Policy explains in plain language exactly what personal data we collect when you use Bangladesh's trusted online casino platform, why we collect it, how it is stored and secured, and the rights you hold over your information at every stage of your relationship with fa666.

Effective: 1 January 2026

Language: English

SSL Encrypted Platform

Market: Bangladesh

Privacy at a Glance

Our Six Privacy Commitments

These six principles summarise how fa666 handles your personal information. The full legal detail for each commitment is set out in the policy sections below.

🔐

Secure Data Storage

All personal data held by fa666 is stored on encrypted servers protected by industry-standard SSL/TLS protocols. Access to your data is restricted to authorised personnel on a strict need-to-know basis.

🚫

No Third-Party Marketing Sales

fa666 does not sell, rent, or trade your personal data to any third party for their own marketing purposes — ever. Your contact details are used only to communicate with you about your fa666 account and related services.

✅

Consent-Based Collection

fa666 collects only the personal data that is strictly necessary for account operation, identity verification, payment processing, and regulatory compliance. We do not collect data speculatively or without a lawful basis for doing so.

👁️

Full Transparency

This Privacy Policy is written in plain, accessible English so that every fa666 player in Bangladesh can understand exactly what data is collected, why it is collected, and how long it is retained before being securely deleted or anonymised.

⚙️

Your Rights, Respected

You have the right to access, correct, or request deletion of your personal data at any time. fa666 will respond to all data rights requests submitted to [email protected] within 30 days of receipt, in accordance with applicable data protection standards.

🔄

Policy Updates Notified

Whenever fa666 makes a material change to this Privacy Policy, registered players are notified by email before the updated policy takes effect. Continued use of the platform after the effective date constitutes acceptance of the revised terms.

Data Overview

What Personal Data fa666 Collects

The table below summarises the categories of personal data fa666 collects, the reason for collection, and how long each category is retained on our systems.

Data Category	Examples	Purpose	Retention Period
Identity Data	Full name, date of birth, NID number, passport number	KYC age and identity verification; regulatory compliance	5 years after account closure
Contact Data	Email address, mobile number, residential address	Account communication, support, promotional updates (with consent)	5 years after account closure
Financial Data	bKash/Nagad/Rocket account reference, deposit and withdrawal history	Payment processing, fraud prevention, AML compliance	7 years after account closure
Technical Data	IP address, device type, browser, operating system, session timestamps	Security monitoring, fraud detection, platform optimisation	2 years from collection date
Gameplay Data	Game history, bet amounts, win/loss records, bonus participation	Responsible gaming monitoring, dispute resolution, regulatory reporting	5 years after account closure
Communications Data	Live chat transcripts, support emails, complaint records	Quality assurance, dispute resolution, regulatory audit trail	3 years from the date of communication
Marketing Preferences	Opt-in / opt-out status for promotional emails and SMS	Ensuring communications are sent only to consenting players	Until preference is updated or account is closed

Effective Date: 1 January 2026. This Privacy Policy applies to all personal data processed by fa666 in connection with your use of the fa666 Platform at https://fa666.io and any associated mobile-optimised versions thereof. Please read this document carefully before registering an account or depositing funds.

1 Introduction

fa666 ("we", "us", "our") is committed to protecting the privacy and personal data of every individual who accesses, registers with, or otherwise interacts with the fa666 online casino and sports betting platform. This Privacy Policy describes how fa666 collects, uses, stores, shares, and protects personal information about players and prospective players located in Bangladesh and elsewhere.

This document is intended to be read alongside the fa666 Terms & Conditions, which together form the full agreement governing your use of the Platform. Terms defined in the Terms & Conditions and not otherwise defined here carry the same meanings in this Privacy Policy.

By creating an account on fa666, completing the KYC verification process, making a deposit, or placing a wager, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree, you must not use the fa666 Platform.

2 Data Controller

For the purposes of applicable data protection legislation, fa666 acts as the data controller in respect of all personal data collected through the fa666 Platform. As data controller, fa666 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

fa666 has appointed a designated data protection contact responsible for overseeing compliance with this Privacy Policy and for handling data rights requests from players. All data-related enquiries should be directed to [email protected] with the subject line "Data Privacy Request". This email address is provided as plain text only and is not a clickable link.

3 Personal Data We Collect

fa666 collects the following categories of personal data about you when you register, verify your account, make transactions, or use any feature of the Platform:

Identity Data: Full legal name, date of birth, national identity card (NID) number, passport number or driving licence number as submitted during the KYC verification process.
Contact Data: Primary email address, mobile telephone number (including your bKash, Nagad, or Rocket registered number), and residential address including city (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar).
Financial Data: Mobile financial service account references (bKash wallet number, Nagad number, Rocket number, Upay number), transaction reference numbers, deposit and withdrawal amounts, account balance history, and source-of-funds documentation where required by AML obligations.
Technical Data: IP address, device identifiers, browser type and version, operating system, screen resolution, time zone set to Bangladesh Standard Time (BST, UTC+6), session start and end timestamps, and referring URL.
Gameplay and Betting Data: Complete betting and gaming history including game titles, wager amounts, outcomes, bonus activations, free spin usage, and any sports betting markets engaged with (including cricket BPL, T20, IPL, Bangladesh Tigers, football, kabaddi).
Responsible Gaming Data: Deposit limit settings, session time reminders, cooling-off period elections, and self-exclusion records.
Communications Data: Records of all live chat conversations, support emails, complaint submissions, and feedback forms submitted to fa666.
Marketing Preference Data: Your opt-in or opt-out status for each category of marketing communication (email, SMS, platform notifications).

fa666 does not knowingly collect special category data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) unless you voluntarily disclose such information in a support communication or it is contained incidentally within a document provided for KYC purposes.

4 How We Collect Your Data

fa666 collects personal data through the following mechanisms:

Direct submission: Data you voluntarily provide when completing the registration form, the KYC document upload process, deposit or withdrawal requests, support chat conversations, or contact form submissions.
Automated technical collection: Data collected automatically when you access the Platform, including IP address, device fingerprint, browser information, and session activity logs. This collection occurs regardless of whether you are logged into your account.
Payment provider data feeds: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, and banking partners when you initiate a deposit or withdrawal, including confirmation status, timestamps, and transaction reference numbers.
Third-party KYC verification providers: Identity and age verification data returned by our contracted KYC service providers when they check the documents you submit against authoritative identity databases.
Fraud and risk management systems: Data generated by fa666's internal fraud detection algorithms and third-party risk assessment tools, including behavioural scoring, velocity checks, and device reputation signals.
Cookies and tracking technologies: Data collected through cookies, web beacons, pixel tags, and similar technologies placed on your device when you visit the fa666 Platform. See Section 7 for full details on cookie usage.

5 Lawful Basis for Processing

fa666 processes personal data only where a lawful basis exists for doing so. The primary lawful bases on which fa666 relies are as follows:

Contractual necessity: Processing that is necessary to perform the contract between you and fa666 — including operating your account, processing deposits and withdrawals, and providing access to games and betting markets.
Legal obligation: Processing required to comply with fa666's legal and regulatory obligations, including anti-money laundering (AML) checks, know-your-customer (KYC) verification, and the retention of financial records for the mandatory statutory period.
Legitimate interests: Processing carried out for fa666's legitimate business interests where those interests are not overridden by your privacy rights — for example, fraud prevention, platform security monitoring, and internal analytics to improve the user experience.
Consent: Processing based on your freely given, specific, informed, and unambiguous consent — most relevantly, the sending of optional marketing communications such as promotional emails and SMS notifications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6 How We Use Your Personal Data

fa666 uses the personal data it collects for the following purposes:

Creating, managing, and securing your fa666 player account.
Verifying your identity and age (21+ only) in compliance with KYC requirements.
Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and banking channels.
Detecting, investigating, and preventing fraud, money laundering, collusion, and other prohibited activities on the Platform.
Administering bonuses, promotions, free spins, and VIP loyalty programme benefits.
Providing customer support via live chat and email, and maintaining records of support interactions for quality assurance and dispute resolution.
Monitoring gameplay for responsible gaming indicators and enforcing deposit limits, cooling-off periods, and self-exclusion elections made by the player.
Sending account-related transactional communications (deposit confirmations, withdrawal notifications, security alerts).
Sending marketing communications where you have opted in to receive them, including promotional offers, tournament announcements (e.g., BPL, T20 World Cup betting markets), and seasonal campaigns (e.g., Pohela Boishakh, Eid, Durga Puja promotions).
Complying with applicable laws, regulatory requirements, and responding to lawful requests from competent authorities.
Conducting internal analytics to improve the performance, design, and content of the fa666 Platform.

7 Cookies & Tracking Technologies

fa666 uses cookies and similar tracking technologies to operate the Platform, maintain your session while you are logged in, and improve your overall experience. A cookie is a small text file placed on your device by the fa666 server when you visit the Platform. Cookies do not contain executable code and cannot access other data stored on your device.

fa666 uses the following categories of cookies:

Strictly necessary cookies: Essential for the basic operation of the fa666 Platform, including maintaining your login session, remembering your account currency preference (BDT), and enabling the secure processing of transactions. These cookies cannot be disabled without disrupting core Platform functionality.
Functional cookies: Used to remember your preferences, such as your preferred game lobby view, language setting (English), and recently played games list. These cookies improve your experience but are not essential to Platform operation.
Analytics cookies: Used by fa666's internal analytics system to understand how players navigate the Platform — for example, which game categories receive the most traffic, which pages have the highest exit rates, and how long sessions typically last. This data is processed in aggregate and is not linked to individual identities.
Security cookies: Used to detect and prevent fraudulent activity, account takeover attempts, and bot traffic. These cookies assign a risk score to your session based on behavioural signals and device characteristics.

You may adjust your browser settings to refuse or delete cookies at any time. Please note that disabling strictly necessary cookies will prevent you from logging into your fa666 account and accessing core Platform features. Disabling analytics or functional cookies will not affect your ability to deposit, play, or withdraw.

8 Sharing Your Personal Data

fa666 does not sell, rent, or share your personal data with third parties for their own commercial or marketing purposes. Personal data may be disclosed to the following categories of third parties solely to the extent necessary to operate the Platform and comply with legal obligations:

KYC and identity verification providers: Contracted service providers who verify the identity documents you submit during the registration and verification process. These providers receive only the data necessary to complete the verification check.
Payment processing partners: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, and other payment service providers involved in processing your deposits and withdrawals. Data shared is limited to what is required to execute and confirm the transaction.
Game content providers: Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi, and other licensed game studios whose games are hosted on the fa666 Platform. These providers may receive your Player ID and session token for the purpose of game delivery; they do not receive your full personal profile.
Fraud prevention and risk management vendors: Third-party providers of fraud detection, device fingerprinting, and risk-scoring tools that assist fa666 in protecting the integrity of the Platform and safeguarding player accounts.
IT infrastructure and cloud hosting providers: Providers of the server infrastructure, content delivery networks, and data backup services used to operate and maintain the fa666 Platform. These providers act as data processors under binding contractual agreements that restrict them from using your data for any purpose other than providing the contracted service.
Legal and regulatory authorities: Competent authorities, law enforcement agencies, or regulatory bodies where fa666 is required by law to disclose personal data — for example, in response to a court order, anti-money laundering investigation, or formal regulatory enquiry.

All third-party service providers engaged by fa666 are subject to contractual data processing agreements that require them to handle your personal data securely, use it only for the specified purpose, and comply with applicable data protection standards. fa666 does not transfer personal data to countries or organisations that do not provide an adequate level of data protection without first implementing appropriate safeguards.

9 Data Security

fa666 implements technical and organisational security measures proportionate to the sensitivity of the personal data processed. All data in transit between your device and the fa666 Platform is encrypted using TLS (Transport Layer Security). All stored personal data is encrypted at rest using AES-256 encryption.

Specific security measures implemented by fa666 include, but are not limited to:

Industry-standard SSL/TLS encryption for all data transmitted between players and the Platform.
AES-256 encryption for all sensitive personal and financial data stored in fa666 databases.
Role-based access controls (RBAC) ensuring that fa666 staff can only access player data relevant to their specific job function.
Multi-factor authentication (MFA) required for all fa666 administrative staff accessing back-end systems containing personal data.
Regular independent security audits and penetration testing conducted by certified third-party security specialists.
Real-time intrusion detection and monitoring systems that alert the fa666 security team to anomalous activity.
Automated data backup procedures with encrypted offsite storage to ensure business continuity and data recovery capability.

Notwithstanding the above, no security measure is entirely infallible. In the event of a personal data breach that poses a risk to the rights and freedoms of affected players, fa666 will notify the relevant supervisory authority and, where required, the affected players themselves, in accordance with applicable data breach notification obligations and within the prescribed regulatory timeframes.

10 Data Retention

fa666 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, to comply with legal and regulatory retention obligations, or to defend against potential legal claims. The specific retention periods applicable to each category of personal data are set out in the data table in the overview section of this Privacy Policy above.

Upon the expiry of the applicable retention period, personal data is either securely and permanently deleted from fa666's systems or, where deletion is not technically feasible, anonymised such that it can no longer be associated with any identified or identifiable individual.

Financial transaction records are subject to a mandatory minimum retention period of seven years under applicable anti-money laundering regulations, regardless of account status. This obligation takes precedence over any deletion request submitted by a player during this period.

11 Your Data Rights

Subject to applicable law and certain legitimate limitations (such as mandatory AML record-keeping obligations), you have the following rights in respect of your personal data held by fa666:

Right of access: You have the right to request a copy of all personal data fa666 holds about you, along with information about how it is processed, the purposes of processing, and the third parties with whom it is shared.
Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data fa666 holds about you. For certain account data fields (such as name and date of birth), corrections must be supported by documentary evidence.
Right to erasure ("right to be forgotten"): You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent on which processing is based. This right is subject to fa666's legal retention obligations.
Right to restriction of processing: You have the right to request that fa666 restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data or object to processing on the basis of legitimate interests, pending fa666's assessment of your objection.
Right to data portability: You have the right to receive a copy of the personal data you have provided to fa666 in a structured, commonly used, machine-readable format, and to request that fa666 transmit that data directly to another controller where technically feasible.
Right to object: You have the right to object at any time to the processing of your personal data on the basis of fa666's legitimate interests, including profiling conducted on that basis. You also have the unconditional right to object to processing for direct marketing purposes at any time.
Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to the withdrawal.

To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Data Rights Request", including your full name, registered email address, and a clear description of the right you wish to exercise. fa666 will respond within 30 days of receiving a valid, complete request. We may request additional information to verify your identity before processing a data rights request.

12 Marketing Communications

fa666 may send you promotional communications — including bonus offers, tournament announcements, seasonal campaigns, and VIP programme updates — by email or SMS, but only where you have given your explicit opt-in consent to receive such communications during the registration process or at any subsequent point via your account settings.

You may withdraw your marketing consent and opt out of all promotional communications at any time by:

Updating your notification preferences in your fa666 account settings dashboard.
Clicking the unsubscribe link included in the footer of every marketing email sent by fa666.
Sending a written opt-out request to [email protected] with the subject line "Marketing Opt-Out".

Please note that opting out of marketing communications does not affect the delivery of essential transactional communications relating to your account, such as deposit confirmations, withdrawal notifications, security alerts, and KYC verification requests. These communications are necessary for the operation of your account and cannot be disabled.

13 Children & Minors

fa666 is strictly for adults aged 21 years and above. The Platform is not intended for or directed at persons under the age of 21. fa666 does not knowingly collect, store, or process personal data from anyone under 21 years of age. If we become aware that personal data has been collected from a minor, we will delete it promptly and close the associated account.

If you are a parent or guardian and believe that a person under the age of 21 in your care has registered an account on fa666 or otherwise provided personal data to us, please contact our support team immediately at [email protected]. fa666 takes all such reports seriously and will investigate and act promptly. For responsible gaming guidance, please visit our Responsible Gaming page.

14 Third-Party Links

The fa666 Platform may contain links to third-party websites or services — for example, links to payment partner information pages for bKash, Nagad, or Rocket. These links are provided for informational convenience only. fa666 has no control over the content, privacy practices, or data handling procedures of any third-party website and accepts no responsibility or liability for them.

This Privacy Policy applies solely to personal data collected and processed by fa666 through the fa666 Platform at https://fa666.io. When you follow a link to any external website, you leave the fa666 Platform and your interactions with that external site are governed exclusively by that site's own privacy policy. fa666 strongly recommends that you review the privacy policy of any third-party website you visit before submitting any personal data to it.

15 Changes to This Privacy Policy

fa666 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, industry best practice, or the way in which fa666 operates its Platform. All updates will be published on this page with a revised effective date clearly stated at the top of the document.

Where a proposed change is material — meaning it significantly affects your rights or the way your personal data is processed — fa666 will notify registered players by email to the address on file at least 14 days before the revised Privacy Policy takes effect. Minor editorial or clarificatory updates may be made without advance notice.

Your continued use of the fa666 Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Privacy Policy, you must cease using the Platform and may request account closure by contacting [email protected].

16 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which fa666 handles your personal data, please contact our data protection team using the details below. All correspondence must be in English.

Email: [email protected] — Subject line: "Privacy Policy Enquiry"
Response time: within 30 days of receipt of a complete, valid request. Support is available 24/7 in English (BST, UTC+6).

fa666 is committed to resolving all privacy-related concerns promptly and fairly. If you are not satisfied with the outcome of your complaint after engaging with fa666's data protection contact, you may have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.

Ready to Play at fa666?

Your data is protected. Your experience is premium. Join thousands of Bangladesh players enjoying live casino, cricket betting, slots, and more — all secured by fa666's industry-grade privacy framework.