BN666 Privacy Policy

This Privacy Policy ("Policy") describes how BN666, operated via the domain bn666.cam ("BN666", "we", "us", "our"), collects, processes, stores and protects personal data relating to individuals who access or use the BN666 platform ("you", "Player", "User").

BN666 is committed to protecting the privacy of all players, including those accessing the platform from Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar and other locations across Pakistan. We process personal data only for legitimate, clearly defined purposes, and we handle all data with the security and confidentiality it deserves.

This Policy should be read in conjunction with the BN666 Terms & Conditions and Responsible Gambling Policy. By creating an Account or using any part of the BN666 platform, you confirm that you have read and understood this Policy and consent to the processing of your personal data as described herein.

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, contact details, financial data and online identifiers.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, deletion or any combination thereof.
• "Data Controller" — the entity that determines the purposes and means of processing Personal Data. For the purposes of this Policy, BN666 is the Data Controller for all Personal Data collected through the platform.
• "Data Processor" — a third party that processes Personal Data on behalf of the Data Controller, in accordance with the Controller's instructions and applicable data protection requirements.
• "KYC" — Know Your Customer; the identity verification procedures required to confirm a User's identity, age and source of funds.
• "Cookies" — small text files placed on a User's device by the platform to store session information, preferences and usage analytics.
• "Special Category Data" — data revealing racial or ethnic origin, health data, biometric data used for identification, and other categories afforded heightened protection under applicable data protection law.

BN666 collects the following categories of Personal Data:

BN666 does not knowingly collect Special Category Data beyond what is strictly required for identity verification purposes (e.g., liveness check images used only to verify the identity document holder). Such biometric data is processed only to the extent necessary for KYC compliance and is not retained beyond its legitimate purpose.

BN666 processes Personal Data on the following legal bases:

• Contractual necessity: Processing required to fulfil BN666's obligations under the Terms & Conditions — including account management, payment processing, withdrawal requests and customer support.
• Legal obligation: Processing required to comply with applicable AML (Anti-Money Laundering) regulations, KYC requirements under the operator's licensing framework, and any lawful requests from competent authorities.
• Legitimate interests: Processing undertaken for fraud detection, platform security, responsible gambling monitoring, and operational analytics — provided such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for marketing communications and optional analytics cookies, where consent has been explicitly obtained. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

BN666 uses collected Personal Data for the following purposes:

• Creating and managing your player Account, including login authentication and account security
• Conducting identity verification (KYC) and age confirmation to enforce the 18+ access restriction
• Processing deposits and withdrawal requests and maintaining accurate transaction records
• Providing and improving the betting and gaming platform experience, including personalisation of relevant content
• Delivering customer support and responding to account queries, complaints and self-exclusion requests
• Detecting, preventing and investigating fraud, multi-accounting, bonus abuse and other prohibited conduct
• Complying with AML obligations, including transaction monitoring and suspicious activity reporting where required
• Monitoring responsible gambling indicators and making welfare interventions where appropriate, such as displaying spending limit reminders
• Sending transactional communications relating to your Account (payment confirmations, security alerts, verification status updates)
• Sending promotional communications where you have consented to receive marketing from BN666
• Conducting statistical analysis and platform performance monitoring for legitimate operational purposes

BN666 does not sell, rent or trade your Personal Data to any third party for their commercial benefit. Personal Data is shared only in the following defined circumstances:

• Payment processors: Financial transaction data is shared with payment processors and payment gateway providers as necessary to process deposits and withdrawals. These providers are contractually bound to process data only on BN666's instructions. Payment services referenced as familiar options in Pakistan — including transfer references to HBL, UBL, Meezan Bank, Bank Alfalah, Easypaisa, JazzCash and Raast — are mentioned as local payment context only. Any data sharing with payment processors is governed by the processor's own data protection terms, not the identity of familiar local payment brands.
• KYC and identity verification providers: Identity document data and liveness images are processed by third-party KYC providers operating under contractual data processing agreements with BN666.
• Fraud prevention and AML services: Transaction and behavioural data may be processed by third-party fraud detection services to identify and prevent financial crime.
• Game technology providers: Gaming activity data is processed by third-party game providers to deliver and record game outcomes. Game providers operate under applicable gaming regulations and their own privacy frameworks.
• Regulatory and law enforcement bodies: BN666 will disclose Personal Data to regulators, licensing authorities or law enforcement agencies where required to do so by applicable law, court order or regulatory obligation. We will not disclose more data than is strictly required.
• Corporate transactions: In the event of a merger, acquisition or asset sale involving BN666, Personal Data may be transferred to the acquiring entity subject to equivalent privacy protections.

BN666 operates internationally and your Personal Data may be transferred to and processed in countries other than your country of residence, including countries where data protection laws may differ from those applicable in Pakistan. Where such transfers occur, BN666 takes appropriate measures to ensure that your Personal Data is protected to a standard consistent with this Privacy Policy.

These measures may include the use of standard contractual clauses, data processing agreements with third-party service providers, and operational security standards applied across all locations where BN666 or its data processors operate.

BN666 retains Personal Data for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable legal, regulatory, accounting or licensing obligations.

In general terms, BN666 applies the following indicative retention principles — though actual retention periods may vary depending on applicable regulatory requirements:

• Account and registration data: Retained for the duration of the active Account relationship and for a defined period following Account closure, as required for regulatory compliance and dispute resolution.
• KYC and identity documents: Retained for a minimum period following Account closure as required by applicable AML regulations and licensing conditions. This period is typically five years or longer depending on jurisdiction.
• Transaction and financial records: Retained in accordance with applicable financial record-keeping obligations, typically a minimum of five years following the relevant transaction.
• Gaming activity records: Retained as required under the operator's license obligations and for responsible gambling monitoring purposes.
• Marketing consent records: Retained for as long as the consent is active and for a defined period thereafter to demonstrate compliance.

Following the expiry of applicable retention periods, Personal Data is securely deleted or anonymised in accordance with BN666's data lifecycle management procedures.

BN666 implements technical and organisational security measures designed to protect Personal Data against unauthorised access, accidental loss, alteration or destruction. Measures in place include, but are not limited to:

• TLS/HTTPS encryption for all data transmitted between your browser and the BN666 platform
• Encryption of sensitive stored data, including account credentials and financial transaction records
• Access controls restricting personal data access to authorised personnel with a documented business need
• Regular internal security reviews and vulnerability assessments
• Contractual security obligations imposed on all third-party data processors
• Incident response procedures to detect, contain and report data security incidents in accordance with applicable obligations

While BN666 takes reasonable steps to protect Personal Data, no internet transmission or storage system can be guaranteed to be 100% secure. If you have reason to believe that your account has been compromised, please contact support immediately.

BN666 uses cookies and similar tracking technologies to operate and improve the platform. The following categories of cookies are used:

• Essential cookies: Required for the platform to function correctly. These include session management cookies that keep you logged in and security tokens that protect against cross-site request forgery. Essential cookies cannot be disabled without preventing core platform functionality.
• Functional cookies: Used to remember your preferences, such as language settings and display options. These improve your experience but are not strictly necessary for platform operation.
• Analytical cookies: Used to collect anonymised or pseudonymised data about how users navigate the platform — for example, which pages are visited most often and where errors occur. This data helps BN666 improve platform performance. Analytical cookies are only placed with your consent where required.
• Security and fraud detection cookies: Used to identify and prevent fraudulent activity, including detection of unusual session behaviour and bot activity.

BN666 does not use third-party advertising or retargeting cookies without your separate and explicit consent. You may manage cookie preferences through your browser settings, although disabling essential cookies may affect your ability to use the platform.

BN666 is required to conduct Know Your Customer (KYC) identity verification and Anti-Money Laundering (AML) checks as a condition of operating under its applicable license. This is a regulatory requirement, not optional, and applies to all registered players.

KYC data — including copies of your CNIC or passport, proof of address and liveness images — is processed by BN666 and shared with authorised KYC verification partners solely for the purpose of confirming your identity and age. This data is stored securely and retained for the period required under applicable AML and licensing regulations.

Under AML obligations, BN666 may be required to monitor transaction activity for suspicious patterns, maintain records of transactions above defined thresholds, and report certain activity to relevant regulatory or law enforcement bodies without being able to notify the individual concerned. These obligations take precedence over individual data access requests where applicable law requires it.

Financial transaction data, including deposit records, withdrawal requests and payment method references, is processed as necessary to operate the BN666 platform and maintain accurate financial records.

BN666 does not store full payment card numbers or sensitive authentication data beyond what is required by applicable payment card industry standards. Where payment processing is handled by third-party payment gateway providers, those providers' own data protection and security standards apply to the card or wallet data they process.

Payment method names familiar to Pakistani users — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are referenced as local payment service context only. Reference to these names in any BN666 communication does not imply that those providers endorse gambling, share data with BN666, or support this operator in any official capacity. Transaction data handled via any payment processor is governed by that processor's own privacy and data policies.

BN666 is strictly an adults-only platform. The minimum age for Account registration and platform use is 18 years of age, or the higher minimum required by the applicable license jurisdiction or local law. BN666 does not knowingly collect Personal Data from individuals under the minimum permitted age.

Age verification is conducted as part of the KYC process. Where age cannot be verified or where a User is found to be below the minimum permitted age, the Account will be closed and any deposits returned less any applicable processing costs, in accordance with applicable regulatory requirements.

Please note that the minimum age restriction does not, in isolation, confer lawfulness of gambling participation under Pakistani law. Players are responsible for understanding and complying with all applicable laws in their jurisdiction. Refer to our Responsible Gambling page for further guidance.

Subject to applicable law and regulatory retention obligations, you have the following rights in relation to your Personal Data held by BN666:

• Right of Access: You may request a copy of the Personal Data BN666 holds about you, along with information about how it is used.
• Right to Rectification: You may request correction of inaccurate or incomplete Personal Data.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal or regulatory obligations (including AML data retention requirements).
• Right to Data Portability: Where processing is based on consent or contractual necessity and carried out by automated means, you may request a copy of your data in a structured, commonly used format.
• Right to Restrict Processing: You may request that BN666 restrict processing of your Personal Data in certain circumstances, such as where the accuracy of the data is contested.
• Right to Object: You may object to processing based on legitimate interests, including processing for direct marketing purposes. Objecting to marketing communications will result in immediate opt-out from future marketing.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact BN666 at [email protected] with a clear description of your request and sufficient information to verify your identity. BN666 will respond to valid requests within a reasonable period in accordance with applicable data protection obligations. There is no charge for submitting a data rights request unless requests are manifestly unfounded or excessive.

BN666 may send promotional communications — including information about welcome offers, cricket betting events, PSL promotions, reload bonuses and platform updates — to players who have consented to receive such communications.

You may opt out of marketing communications at any time by using the unsubscribe link included in any marketing email, by adjusting your communication preferences in your Account settings, or by contacting support at [email protected]. Opting out of marketing will not affect the delivery of essential account communications, such as payment confirmations, security alerts and KYC status notifications.

During a self-exclusion period, marketing communications from BN666 will be suspended. If you have self-excluded and continue to receive marketing materials, please contact support immediately so that the error can be rectified.

BN666 may update or amend this Privacy Policy from time to time to reflect changes in data protection law, regulatory requirements, platform functionality or operational practices. Material changes will be communicated to registered players via email or through a prominent notice on the platform before the changes take effect.

The current version of this Privacy Policy, including the date of last review, is always accessible from this page. Continued use of the BN666 platform following notification of material changes to this Policy constitutes acceptance of the revised terms.

Where changes affect the basis on which we process data for which consent was previously obtained, we will seek fresh consent where required.

If you have any questions, concerns or requests relating to this Privacy Policy or the processing of your Personal Data by BN666, please contact us using the details below. We are committed to responding to all privacy-related enquiries promptly and transparently.

For responsible gambling concerns — including self-exclusion, limit requests or withdrawal of consent to marketing — please also visit our Responsible Gambling page or contact support directly at the address above.

For questions about platform terms, please refer to the Terms & Conditions or contact support as above.