av666 Privacy Policy — How We Collect, Use, and Protect Your Personal Data

This Privacy Policy is issued by the operator of the av666 platform, accessible at https://av666.io and through all associated subdomains and mobile-optimised interfaces (collectively, the "Platform"). Throughout this policy, references to "av666", "we", "us", or "our" refer to the av666 platform operator.

av666 is the data controller in respect of personal data collected from players and visitors to the Platform. As data controller, av666 determines the purposes for which personal data is processed and the means by which that processing is carried out.

If you have any questions about how av666 processes your personal data, wish to exercise any of your rights described in Section 11, or wish to make a complaint, please contact us using the email address above. Do not include sensitive data such as passwords or full payment card numbers in any email correspondence with av666.

av666 collects personal data across several categories depending on the nature of your interaction with the Platform. The categories of personal data av666 may hold about you include:

av666 does not collect any special categories of sensitive personal data (such as health data, biometric data, racial or ethnic origin, political opinions, or religious beliefs) as part of the standard registration or gameplay process. In exceptional circumstances where responsible gaming support is requested by a player, limited relevant information may be recorded solely for the purpose of administering self-exclusion or deposit limit arrangements.

av666 collects personal data through the following channels and methods:

• Direct collection: Information you provide voluntarily when registering an account, completing the KYC verification process, making a deposit or withdrawal request, contacting av666 customer support, or updating your account profile.
• Automated technical collection: Technical and usage data collected automatically when you access the Platform through cookies, server logs, and similar tracking technologies. See Section 6 for full details on cookies.
• Payment processors: Confirmation data received from bKash, Nagad, Rocket, Upay, Visa, and Mastercard payment gateways when a deposit or withdrawal transaction is processed. av666 receives transaction reference numbers and status confirmations but does not store full payment card numbers or full mobile wallet PIN codes.
• Identity verification providers: Where av666 uses a third-party identity verification service to assist with KYC processing, that provider may return verification outcomes and document authenticity assessments to av666.
• Third-party game providers: Game session data (bet amounts, game outcomes, session start/end times) returned by third-party game providers such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi as part of normal game operation.
• Publicly available sources: In limited circumstances where av666 needs to investigate suspected fraud or money laundering, av666 may consult publicly available information sources to corroborate identity information provided during registration.

av666 processes personal data only when there is a valid legal basis for doing so. The legal bases on which av666 relies are as follows:

• Performance of a contract: Processing that is necessary to open and operate your av666 account, process your deposits and withdrawals, settle your bets, and provide customer support. Without this processing, av666 cannot provide the service to you.
• Compliance with a legal obligation: Processing required to comply with applicable anti-money laundering requirements, age verification obligations, financial record-keeping requirements, and responses to lawful requests from law enforcement or financial intelligence authorities.
• Legitimate interests: Processing carried out for av666's legitimate business interests, including fraud detection and prevention, platform security monitoring, responsible gaming compliance, improving the Platform through usage analytics, and communicating service updates. Where av666 relies on legitimate interests, we have assessed that those interests are not overridden by your rights and freedoms.
• Consent: Processing for marketing communications (promotional emails, SMS bonus alerts) where you have given explicit opt-in consent. You may withdraw this consent at any time by contacting support.

av666 uses the personal data we collect for the following specific purposes:

• Account creation and management: To register your account, authenticate your identity at login, maintain your account balance, and manage your account preferences and security settings.
• Age and identity verification: To confirm that you meet the 21+ age requirement before allowing you to deposit or play, and to verify that the name on your account matches the name on your payment methods.
• Payment processing: To process your deposits and withdrawal requests, match inbound payments to your account, and resolve any payment disputes or discrepancies.
• Fraud and security monitoring: To detect and investigate suspicious login activity, unusual betting patterns, multi-accounting, bonus abuse, and potential money laundering. This includes automated monitoring systems that flag accounts for human review where anomalies are detected.
• Responsible gaming: To administer deposit limits, self-exclusion requests, session time reminders, and reality checks. To monitor accounts for signs of problem gambling behaviour and take appropriate action in line with av666's responsible gaming commitments.
• Customer support: To respond to your enquiries, resolve account issues, investigate complaints, and maintain records of support interactions for quality and training purposes.
• Regulatory compliance: To maintain financial transaction records as required by applicable law, respond to lawful requests from law enforcement and financial intelligence authorities, and comply with anti-money laundering and age verification obligations.
• Platform improvement: To analyse aggregated, anonymised usage data to understand how players use the Platform, identify technical issues, and prioritise improvements to the user experience.
• Marketing communications: To send you promotional emails, SMS bonus alerts, and on-site notifications about new games, upcoming cricket and BPL events, seasonal promotions (Eid, Pohela Boishakh, Victory Day), and special offers — but only where you have consented to receive such communications.

av666 uses cookies and similar tracking technologies to operate the Platform, remember your session, and improve your experience. A cookie is a small text file placed on your device by a website server. Cookies cannot execute programmes or deliver viruses to your device.

av666 uses the following categories of cookies:

• Strictly necessary cookies: Essential for the Platform to function correctly. These include session authentication cookies that keep you logged in during a gaming session and security tokens that protect against cross-site request forgery. These cookies cannot be disabled without breaking the Platform's core functionality.
• Functional cookies: Used to remember your preferences, such as your preferred language, notification settings, and responsible gaming tool configurations. These are not strictly necessary but improve the quality of your experience.
• Analytics cookies: Used to collect aggregated, anonymised data about how players navigate the Platform — which pages are visited most, how long sessions last, and where users encounter errors. This data helps av666 identify and fix problems and improve the Platform.
• Marketing cookies: Only set where you have consented to receive marketing communications. These help av666 understand which promotional content is most relevant to you and prevent the same offer being shown to you repeatedly.

You may manage or delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will prevent the Platform from functioning correctly and you will not be able to log in or play games. av666 does not use third-party advertising networks or ad-targeting cookies.

av666 does not sell, rent, or share your personal data with third parties for their own commercial purposes. av666 may share your personal data with the following categories of third party strictly for the purposes described:

• Payment service providers: bKash, Nagad, Rocket, Upay, Visa, and Mastercard payment gateways receive the minimum data necessary to process your deposit or withdrawal transaction (typically your account identifier and the transaction amount). These providers have their own privacy policies governing how they handle data shared with them.
• Identity verification providers: Third-party KYC service providers receive copies of identity and address documents submitted by you during the verification process, solely for the purpose of authenticating those documents and returning a verification outcome to av666.
• Game providers: Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi, Hacksaw, and other game providers receive a player session token and account identifier to enable game sessions to be opened and game outcomes to be recorded against your av666 account. Game providers do not receive your full name, address, or payment details.
• IT and infrastructure service providers: Cloud hosting providers and IT infrastructure partners who provide the servers and technical infrastructure on which the av666 Platform operates may have access to personal data stored on those systems in the course of providing their services to av666. Such providers are contractually required to process data only on av666's instructions and to maintain appropriate security standards.
• Law enforcement and regulatory authorities: av666 will disclose personal data to law enforcement agencies, financial intelligence units, or regulatory bodies where required to do so by applicable law, valid legal process, or court order. av666 will, where legally permitted, notify the affected player of such disclosure.
• Professional advisers: Legal counsel, auditors, and compliance advisers who require access to account or transaction data in the course of providing professional services to av666, and who are bound by professional confidentiality obligations.

The av666 Platform is operated primarily for players in Bangladesh. Some of the third-party service providers with whom av666 shares data (as described in Section 7) may be located in countries outside Bangladesh. Where personal data is transferred internationally, av666 takes steps to ensure that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable privacy law.

Safeguards used by av666 for international transfers include:

• Contractual data processing agreements with third-party providers that include binding obligations regarding data protection standards.
• Selecting service providers that operate under internationally recognised privacy frameworks or that are subject to privacy laws considered to provide an adequate level of protection.
• Limiting the scope of data transferred internationally to the minimum necessary for the specific purpose of the transfer.

If you would like further information about the safeguards in place for any specific international transfer of your personal data, please contact av666 support using the contact details in Section 14.

av666 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, to comply with applicable legal and regulatory obligations, or to resolve disputes and enforce agreements. The following retention periods apply as a general guide:

Where a longer retention period is required by a specific legal obligation applicable to av666 in a particular jurisdiction, that longer period will apply. Once a retention period expires, personal data is either securely and permanently deleted from av666's systems or anonymised such that it can no longer be associated with any individual player.

av666 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• SSL/TLS encryption in transit: All data transmitted between your device and the av666 Platform is encrypted using industry-standard SSL/TLS protocols. A valid security certificate is maintained on the av666 domain at all times.
• AES-256 encryption at rest: Sensitive stored data including account passwords (stored as salted hashes), payment references, and KYC documents is encrypted at rest using AES-256 encryption.
• Access controls: Access to systems containing personal data is restricted to authorised av666 staff and service providers on a strict need-to-know basis. All staff with access to personal data undergo data protection awareness training.
• Two-factor authentication: av666's internal administrative systems require multi-factor authentication for all staff access. Players are strongly encouraged to enable two-factor authentication on their own accounts via account security settings.
• Intrusion detection and monitoring: av666 operates continuous security monitoring systems that alert the security team to suspicious access patterns, unusual login activity, and potential data breach indicators.
• Penetration testing: av666's Platform undergoes periodic independent security assessments to identify and remediate vulnerabilities before they can be exploited.
• Data breach response: av666 maintains a documented data breach response procedure. In the event of a confirmed data breach that poses a risk to players, av666 will notify affected players promptly and take immediate steps to contain and investigate the breach.

While av666 takes all reasonable steps to protect your personal data, no system is completely immune to security threats. You are also responsible for keeping your av666 account credentials confidential and for contacting av666 support immediately if you suspect your account has been compromised.

As a player on the av666 Platform, you have the following rights in relation to your personal data. To exercise any of these rights, contact av666 support at the email address listed in Section 14. av666 will respond to all valid rights requests within 30 days.

• Right of access: You have the right to request confirmation of whether av666 holds personal data about you and, if so, to receive a copy of that data in a readable format along with information about how it is being used.
• Right to rectification: If personal data held by av666 is inaccurate or incomplete, you have the right to request that it be corrected. You may update most account details directly through your account dashboard; for corrections to identity or KYC data, contact support.
• Right to erasure: You have the right to request deletion of personal data held by av666, subject to av666's legal retention obligations. Where a legal obligation requires av666 to retain specific data (such as financial transaction records), av666 will inform you of the applicable retention period before deletion can occur.
• Right to restrict processing: In certain circumstances, such as where you contest the accuracy of data held or where you have objected to processing and av666 is assessing that objection, you may request that av666 restrict the processing of your data to storage only while the matter is resolved.
• Right to data portability: Where processing is based on your consent or on the performance of a contract, you have the right to receive a copy of your personal data in a commonly used, machine-readable format (such as CSV or JSON) so that it can be transferred to another service provider.
• Right to object: You have the right to object at any time to the processing of your personal data where av666 relies on legitimate interests as the legal basis for that processing. av666 will cease that processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (for example, for marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

The av666 Platform is strictly intended for use by adults aged 21 years and above. av666 does not knowingly collect personal data from any person under the age of 21. The registration process includes a mandatory date of birth field and av666 verifies age during the KYC process before permitting real-money deposits or gameplay.

If av666 becomes aware that personal data has been collected from a person under the age of 21 — whether through a misrepresentation of age at registration or by any other means — av666 will:

• Immediately suspend the relevant account and halt any financial transactions pending investigation.
• Permanently close the account and void any bets placed or winnings accrued.
• Securely delete the personal data of the underage individual as soon as practicable, subject to any legal obligations to retain evidence of the age violation for compliance purposes.
• Refund any deposits made to the account to the originating payment method where this is technically possible.

If you are a parent or guardian and believe that your child has created an account on av666 or accessed the Platform, please contact av666 support immediately at the email address in Section 14. av666 will investigate and take appropriate action promptly.

av666 reserves the right to update or revise this Privacy Policy at any time. When material changes are made — for example, changes to the categories of data collected, the purposes for which data is used, or the third parties with whom data is shared — av666 will notify registered players via the email address on their account and will update the "Effective Date" at the top of the hero section on this page.

For minor, non-material changes (such as formatting corrections, clarifications of existing language, or updates to contact details), av666 may update the policy without advance notice. The updated policy will be effective immediately upon publication on the Platform.

You are encouraged to review this Privacy Policy periodically. Your continued use of the av666 Platform after any revised policy has taken effect constitutes your acknowledgement that you have had the opportunity to review the changes.

For any privacy-related enquiry, to exercise your data rights under Section 11, or to submit a complaint about how av666 has handled your personal data, please contact av666 using the following details:

av666 is committed to resolving all privacy complaints fairly and promptly. If you submit a privacy complaint and are not satisfied with av666's response, you retain the right to escalate the matter to the relevant data protection authority or consumer protection body in your jurisdiction. av666 will cooperate fully with any such authority in the investigation of a complaint.

When submitting a privacy request or complaint, please include your registered username, the email address associated with your av666 account, a clear description of your request or complaint, and any relevant supporting information. This will allow av666 to locate your records and respond as efficiently as possible.