fg666 Privacy Policy — How We Protect Your Data

This Privacy Policy ("Policy") describes how fg666 ("fg666", "we", "us", "our") collects, processes, stores, uses, and protects the personal information of individuals ("you", "Player", "User") who access or use the fg666 website at fg666.io and all associated services, features, and products offered therein.

fg666 is an online entertainment platform offering sports betting, live casino, slot games, and crash game products, operated for the benefit of eligible players primarily located in Bangladesh. We are committed to handling your personal data responsibly, transparently, and in accordance with fair information practices.

This Policy should be read in conjunction with our Terms & Conditions, available at /terms-conditions, and our Responsible Gaming Policy, available at /responsible-gaming. Together, these documents form the complete legal framework governing your use of the fg666 platform.

If you do not agree with any part of this Privacy Policy, you should not register an account with fg666 or continue to use our services. If you have questions about our data practices at any time, you are welcome to contact us at [email protected].

fg666 collects the following categories of personal information, depending on how you interact with our platform:

fg666 collects personal data through the following means:

• Direct provision by you: When you register an account, complete identity verification, make a deposit or withdrawal, contact our support team, or update your account settings, you provide personal data to us directly.
• Automated technical collection: When you access the fg666 platform, our servers automatically record technical data including your IP address, device identifiers, and browser information. This data is collected through standard server logs and, where applicable, first-party cookies and session storage.
• Payment provider data: When you initiate a deposit or withdrawal via bKash, Nagad, Rocket, Upay, or USDT, the relevant payment provider may share transaction confirmation data and account identifiers with fg666 to allow us to match and credit your account.
• Fraud detection systems: Our automated fraud detection and risk management tools analyse transaction patterns and behavioural signals to identify potentially fraudulent activity. This analysis generates derived data points that are associated with your account for compliance purposes.
• Third-party game providers: When you play games provided by third-party suppliers such as Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, or Spribe, those providers may share game session data (bet amounts, outcomes, session length) with fg666 for accounting, auditing, and responsible gaming purposes.

fg666 uses your personal data for the following specific purposes:

• Account registration and management: To create, maintain, and administer your fg666 account, verify your identity, and manage your profile settings and preferences.
• Age and identity verification: To confirm that you are at least 21 years of age and that your identity matches the details provided during registration, as required by our responsible gaming obligations.
• Payment processing: To process deposits and withdrawals, verify that payment accounts belong to the registered account holder, and maintain accurate financial records.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, unauthorised account access, and other forms of abuse on the platform.
• Regulatory compliance: To fulfil our obligations under applicable anti-money laundering (AML), counter-terrorism financing (CTF), and know-your-customer (KYC) requirements.
• Customer support: To respond to your enquiries, resolve disputes, and provide assistance through our live chat and email support channels.
• Platform improvement: To analyse usage patterns and player behaviour in aggregate to improve the performance, design, and content of the fg666 platform.
• Responsible gaming: To monitor player activity for signs of problematic gambling behaviour, administer self-exclusion and deposit limit requests, and provide targeted responsible gaming interventions where necessary.
• Marketing communications: Where you have opted in, to send you promotional offers, bonus notifications, and platform updates relevant to your interests. You may opt out at any time.
• Legal proceedings: To exercise or defend legal claims in the event of a dispute, and to respond to lawful requests from competent authorities.

fg666 processes personal data on the following legal bases, depending on the purpose of processing:

• Contractual necessity: Processing required to perform our contract with you — including account management, payment processing, and customer support — is carried out because it is necessary to fulfil our obligations under the Terms & Conditions you agreed to when registering.
• Legal obligation: Processing required to comply with applicable laws and regulations — including AML/KYC checks, age verification, and responding to lawful authority requests — is carried out because fg666 is legally required to do so.
• Legitimate interests: Processing for fraud prevention, platform security, and aggregate analytics is carried out on the basis of fg666's legitimate interests in operating a secure and commercially viable platform, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we rely on your consent as the legal basis for processing — principally for marketing communications and non-essential cookies — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

fg666 does not sell, rent, or trade your personal data. We may share your personal information with the following categories of third parties, strictly for the purposes outlined in this Policy:

• Payment processors: bKash, Nagad, Rocket, Upay, and USDT network operators receive the minimum data necessary to process your deposit or withdrawal transaction and confirm its status.
• Identity verification providers: Third-party KYC service providers assist fg666 in verifying player identity and age. These providers process identity documents under strict data protection agreements.
• Game software providers: Third-party game studios (including Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe) receive session identifiers and bet data to power game delivery and audit outcomes. They do not receive your full personal profile.
• Fraud detection and risk management services: Specialist providers analyse transaction and behavioural data to identify and flag potentially fraudulent activity. Data shared with these providers is subject to strict contractual data protection obligations.
• IT infrastructure and hosting providers: fg666's platform is hosted on secure third-party server infrastructure. These providers process data incidentally as part of hosting services and are prohibited from accessing or using your data for any other purpose.
• Legal and regulatory authorities: fg666 will disclose personal data to competent law enforcement, regulatory, or judicial authorities when required to do so by applicable law, court order, or in connection with the prevention or detection of crime.
• Professional advisers: Lawyers, auditors, and accountants engaged by fg666 may access personal data to the extent necessary to provide their professional services, subject to professional secrecy obligations.

fg666 takes particular care with financial data given the sensitive nature of payment information and the regulatory requirements applicable to online gambling platforms operating in the Bangladesh market.

When you make a deposit or withdrawal via bKash, Nagad, Rocket, or Upay, fg666 records the mobile number associated with the transaction, the transaction amount, the transaction reference number issued by the MFS provider, and the timestamp. This information is used exclusively for payment reconciliation, dispute resolution, and AML/KYC compliance. fg666 does not store your MFS PIN or any authentication credentials for these services.

For USDT transactions, fg666 records the blockchain wallet address used for the transaction, the transaction hash, the network (TRC20 or ERC20), the amount in USDT, and the timestamp. This data is retained for AML compliance and auditing purposes.

fg666 does not process, store, or transmit credit card or debit card numbers. If card-based payment options are introduced in the future, all card data will be handled exclusively by PCI-DSS Level 1 certified processors with no raw card data passing through fg666's own systems.

fg666 uses cookies and similar browser-based tracking technologies to operate the platform, maintain user sessions, detect fraud, and where consent is provided, to analyse platform usage and personalise the player experience.

The following types of cookies may be set when you visit fg666.io:

• Strictly necessary cookies: These cookies are essential for the platform to function. They enable core functions such as session management, login state persistence, and security token validation. These cookies cannot be disabled without impairing the functionality of the platform.
• Functional cookies: These cookies remember your account preferences, such as language settings and responsible gaming configurations, to provide a more personalised experience on return visits.
• Analytics cookies: Where you have consented, these cookies collect anonymised data about how players interact with the fg666 platform, including which pages are visited most frequently and how long sessions last. This data is used in aggregate to improve platform design and content.
• Security and fraud detection cookies: These cookies help fg666 identify unusual patterns of access that may indicate account takeover attempts, bot activity, or other fraudulent behaviour.

fg666 does not use third-party advertising cookies or permit external ad networks to set tracking cookies on fg666.io. We do not engage in cross-site tracking for advertising retargeting purposes.

fg666 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security programme includes the following measures:

• Encryption in transit: All data transmitted between your browser or app and the fg666 servers is encrypted using TLS 1.2 or higher. This prevents interception of data during transmission.
• Encryption at rest: Sensitive personal data stored in fg666's databases, including identity documents submitted during KYC verification, is encrypted at rest using industry-standard algorithms.
• Access controls: Access to production systems and databases containing player data is restricted to authorised personnel only, on a principle of least privilege. All access is logged and subject to regular audit.
• Two-factor authentication: Administrative access to fg666's internal systems requires multi-factor authentication. Players are also strongly encouraged to enable 2FA on their own accounts for additional protection.
• Vulnerability management: fg666 conducts regular security assessments and patch management reviews to identify and remediate vulnerabilities in platform software and infrastructure.
• Incident response: fg666 maintains a documented data breach response procedure. In the event of a data breach that poses a risk to player rights and freedoms, affected individuals will be notified without undue delay and in accordance with applicable legal requirements.

fg666 retains personal data for as long as is necessary to fulfil the purposes described in this Policy, subject to any longer retention obligations imposed by applicable law. Our general retention approach is as follows:

• Active account data: Personal and financial data associated with an active fg666 account is retained for the lifetime of the account plus a minimum of five years following account closure. This retention period is driven by AML recordkeeping requirements.
• Transaction records: All deposit and withdrawal transaction records are retained for a minimum of seven years from the date of the transaction, as required for financial audit and AML compliance purposes.
• KYC and identity documents: Copies of identity documents submitted during verification are retained for five years following account closure or the last transaction, whichever is later.
• Support communications: Live chat transcripts and email correspondence with support are retained for two years from the date of the communication, after which they are securely deleted unless required for an active dispute or legal proceeding.
• Marketing preferences: Records of your marketing consent and opt-out history are retained indefinitely to demonstrate compliance with consent requirements, even if you have unsubscribed from all communications.
• Technical logs: Server access logs and security logs are retained for 90 days under standard operations and for up to two years if flagged for fraud or security investigation.

At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.

As a fg666 player, you hold the following rights with respect to your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request" and your registered account details:

• Right of access: You may request a copy of the personal data fg666 holds about you, along with information about how and why it is processed. We will provide this within 30 days of a verified request.
• Right to rectification: You may request that inaccurate or incomplete personal data held about you is corrected or updated. For routine account detail updates, contact our support team directly via live chat or email.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where consent has been withdrawn, or where processing was unlawful. Note that we may be legally required to retain certain data (particularly financial records) even following an erasure request.
• Right to restriction: You may request that fg666 restricts the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data or where processing is unlawful but you prefer restriction over erasure.
• Right to data portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you may request that fg666 provides your personal data in a structured, commonly used, and machine-readable format so that you can transfer it to another service provider.
• Right to object: You may object to processing carried out on the basis of fg666's legitimate interests at any time. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or where processing is necessary for the establishment, exercise, or defence of legal claims.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

The fg666 platform is strictly intended for adults aged 21 years and above. fg666 does not knowingly collect, process, or retain personal data belonging to individuals under the age of 21. Age verification is conducted as part of the registration process, and additional KYC checks are performed where there is any doubt about a player's age.

If fg666 discovers or is notified that an account has been registered by or on behalf of a person under 21 years of age, we will immediately suspend the account, void any associated transactions, and permanently delete all personal data associated with that account from our records without undue delay.

fg666 strongly supports the use of parental control tools and internet filtering software to prevent minors from accessing online gambling platforms. We recommend that parents and guardians in Bangladesh use available filtering tools to block access to gambling websites on devices used by children.

fg666 may send you promotional communications — including bonus offers, free bet notifications, tournament announcements, and platform news — where you have provided your consent to receive such communications during registration or subsequently through your account settings.

Marketing communications from fg666 may be delivered via email and, where applicable, SMS to the mobile number registered on your account. We will not send unsolicited marketing to players who have not opted in.

You may withdraw your consent to marketing communications at any time by:

• Updating your notification preferences in your fg666 account settings dashboard;
• Clicking the "unsubscribe" link in any marketing email sent by fg666; or
• Contacting our support team at [email protected] with the subject line "Unsubscribe from Marketing".

Withdrawal of marketing consent will be processed within 5 business days. Note that even after opting out of marketing, fg666 may still send you transactional communications that are necessary for the operation of your account — such as deposit confirmations, withdrawal notifications, account security alerts, and responses to your support enquiries. These operational messages are not subject to marketing opt-out preferences.

The fg666 platform may from time to time contain references to or links to third-party websites, platforms, or services — for example, links to payment provider platforms such as bKash or Nagad, or to the websites of game providers for informational purposes. This Privacy Policy applies solely to the fg666 platform at fg666.io and does not extend to any third-party website, regardless of how you arrived there.

fg666 does not control the content, privacy practices, or data collection activities of any third-party website. We strongly recommend that you review the privacy policy of any third-party site you visit before providing personal information to that site. fg666 accepts no responsibility or liability for the privacy practices or content of third-party websites.

fg666 reserves the right to update or modify this Privacy Policy at any time. Changes may be made in response to evolving legal requirements, changes in our business practices, or improvements to our platform's data handling procedures.

When we make material changes to this Policy, we will notify registered players by posting a prominent notice on the fg666 website and, where the change significantly affects how we process your data, by sending a direct notification to the email address registered on your account. The updated Policy will indicate the revised effective date at the top of the document.

Your continued use of the fg666 platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the changes and your acceptance of the updated terms. If you do not agree with the revised Policy, you should cease using the platform and may request account closure by contacting our support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way fg666 processes your personal data, please contact our Data Support team using the details below. We aim to respond to all privacy-related enquiries within 5 business days.

• Email: [email protected] — please use the subject line "Privacy Enquiry" for data-related matters
• Live chat: Available 24/7 directly on the fg666 platform
• Support hours: Around the clock, every day of the year, aligned to Bangladesh Standard Time (BST, UTC+6)

For formal data rights requests — including access, rectification, erasure, and portability requests — please use the subject line "Data Rights Request" and include your registered account username and the email address associated with your fg666 account so that we can verify your identity before processing the request.