fa666 Privacy Policy
At fa666, we treat your personal data with the same care we bring to every aspect of our platform. This Privacy Policy explains exactly what information we collect, why we collect it, how it is stored and protected, and the rights you hold as a registered player in Bangladesh.
How fa666 Protects Your Privacy
These cards summarise our key data protection commitments. For full details on each topic, use the Table of Contents above to navigate to the relevant section.
End-to-End Encryption
All data transmitted between your browser and the fa666 platform is encrypted via industry-standard SSL/TLS protocols. This applies to login sessions, payment transactions, and account data updates without exception.
Data Minimisation
fa666 collects only the personal information that is genuinely necessary to provide our services, comply with legal obligations, and protect our players. We do not collect excessive or irrelevant data, and we do not sell player profiles to third-party advertisers.
No Data Sales
fa666 does not sell, rent, or lease your personal data to any third party for marketing or commercial purposes. Your information is shared only where strictly required for service delivery or legal compliance, as described in the Data Sharing section of this policy.
Your Control
Registered players on fa666 have the right to access, correct, and request deletion of their personal data. You can also opt out of non-essential marketing communications at any time through your account settings or by contacting our support team.
Defined Retention Periods
fa666 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. Once data is no longer needed, it is securely deleted or anonymised in accordance with our data retention schedule.
Clear Communication
If we make material changes to how we handle your personal data, we will notify you via your registered email address and display a prominent notice on the fa666 platform ahead of those changes taking effect.
Information We Collect
When you register and use the fa666 platform, we collect several categories of personal information. The specific data collected at each stage depends on how you interact with our services. Below is a comprehensive overview of the types of data we collect and the circumstances under which each category is gathered.
Registration and Account Data
When you create a fa666 account, we collect the following information, which is required to establish and maintain your account:
- Full legal name as it appears on your government-issued identification
- Date of birth (required for age verification — players must be 18 or older)
- Residential address including city, district, and postcode
- Email address and mobile phone number
- Username and encrypted account password
- Preferred currency (Bangladeshi Taka / BDT by default for Bangladesh players)
Identity Verification (KYC) Data
As part of our Know Your Customer process — required for withdrawal processing and account security — we may collect copies of the following documents:
- Bangladesh National Identity Card (NID) or valid passport
- Proof of residential address (such as a recent utility bill or bank statement)
- Payment method documentation (for example, a screenshot confirming your bKash or Nagad wallet number)
- Source of funds documentation where required by our compliance team
Transaction and Financial Data
We record all financial transactions associated with your fa666 account, including:
- Deposit amounts, timestamps, payment methods, and reference numbers
- Withdrawal requests, amounts, status, and processing timelines
- Bet history, game round outcomes, and wagering records
- Bonus credits, wagering progress, and promotional redemptions
fa666 does not store full card numbers. Where card payments are processed, only the last four digits and card type are retained for reference purposes. Full card data is handled exclusively by our PCI-compliant payment processing partners.
Technical and Usage Data
When you access the fa666 platform, our systems automatically collect certain technical information to ensure platform security, prevent fraud, and improve the user experience:
- IP address and approximate geolocation at the time of login
- Browser type, version, and operating system
- Device identifiers and screen resolution
- Session duration, pages visited, and navigation patterns within the platform
- Referring URL (the website or link that directed you to fa666)
Communications Data
When you contact our customer support team via live chat or email, we retain records of those communications, including the content of your messages, the date and time of correspondence, and any resolution steps taken. These records are used to improve our service quality and to maintain an accurate history of any issues or disputes raised by you.
Sensitive Data: fa666 does not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, or health information. If you voluntarily disclose sensitive information in the course of a support interaction — for example, when requesting self-exclusion on health grounds — that information will be handled with additional care and used only for the purpose for which it was shared.
How We Use Your Data
fa666 processes your personal data on the basis of one or more of the following lawful grounds: performance of the contract between you and fa666; compliance with legal obligations applicable to fa666; our legitimate interests in operating a secure and commercially viable gaming platform; or your explicit consent where required. The table below summarises our key data processing activities and the lawful basis for each.
| Processing Activity | Data Used | Lawful Basis |
|---|---|---|
| Account creation and management | Registration data, contact details | Contractual necessity |
| Age and identity verification (KYC) | KYC documents, date of birth | Legal obligation |
| Processing deposits and withdrawals | Transaction data, payment method details | Contractual necessity |
| Fraud prevention and AML monitoring | Transaction data, IP address, device ID | Legal obligation / Legitimate interest |
| Responsible gaming monitoring | Betting history, session data | Legal obligation / Legitimate interest |
| Customer support communications | Communications data, account data | Contractual necessity |
| Platform security and access control | Technical data, login history | Legitimate interest |
| Promotional and bonus communications | Contact details, betting preferences | Consent / Legitimate interest |
| Platform analytics and improvement | Usage data, navigation patterns | Legitimate interest |
Marketing Communications
Where you have provided consent or where we have a legitimate interest in doing so, fa666 may send you promotional communications by email or in-platform notification. These may include information about new games, seasonal promotions (such as BPL and IPL cricket betting offers, Eid bonuses, and Pohela Boishakh promotions), deposit match offers, and platform updates. You may withdraw your consent to receive marketing communications at any time by adjusting your notification preferences in your account settings or by contacting our support team directly.
Data Sharing and Disclosure
fa666 does not sell your personal data to third parties. We share your information only in the specific circumstances described below, and only to the extent necessary for each stated purpose. All third parties with whom we share data are required to handle it in accordance with applicable data protection standards.
Service Providers and Technology Partners
We work with a range of trusted third-party service providers who assist in the operation of the fa666 platform. These include:
- Payment processors: Partners facilitating bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard transactions receive the minimum transaction data necessary to process each payment.
- Game providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe may receive your session token and game preferences to deliver their games within the fa666 platform. These providers do not receive your full personal profile.
- Identity verification services: Third-party KYC and AML screening providers may process your identity documents and transaction data as part of our compliance obligations.
- Hosting and infrastructure providers: Our platform is hosted on secure cloud infrastructure. Hosting partners may process technical data as part of routine system operations.
Legal and Regulatory Disclosure
fa666 may be required by law, court order, or regulatory authority to disclose certain player data. In such circumstances, we will comply with the applicable legal requirement and, where permitted, will notify the affected player of the disclosure. Circumstances in which legal disclosure may occur include:
- Investigation of suspected money laundering, fraud, or other criminal activity
- Response to a court order or subpoena issued by a competent judicial authority
- Compliance with anti-money laundering (AML) reporting obligations
- Co-operation with responsible gaming regulatory investigations
Business Transfers
In the event that fa666 undergoes a merger, acquisition, restructuring, or sale of substantially all its assets, player data may be transferred to the successor entity as part of that transaction. In such circumstances, fa666 will notify registered players via their registered email address before their data is transferred and will ensure that the successor entity is bound by privacy commitments at least as protective as those set out in this policy.
International Data Transfers: Some of our service providers and game partners operate from locations outside Bangladesh. Where your data is transferred internationally, fa666 ensures that appropriate contractual safeguards are in place to protect your information at a standard consistent with this Privacy Policy.
Data Retention
fa666 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply to the main categories of data we hold:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | Legal obligation / dispute resolution |
| KYC verification documents | Duration of account + 5 years after closure | AML / legal compliance |
| Transaction and betting records | Duration of account + 5 years after closure | Financial regulation / audit trail |
| Customer support communications | 3 years from date of communication | Dispute resolution / quality assurance |
| Technical / session logs | Up to 90 days | Security monitoring / fraud detection |
| Analytics data (aggregated) | Up to 24 months | Platform improvement |
| Marketing communication records | Until consent withdrawn + 1 year | Consent management / compliance |
Upon expiry of the applicable retention period, personal data is securely deleted from fa666 systems or, where full deletion is not technically feasible, anonymised such that it can no longer be associated with any individual player. Backup copies of data are overwritten on a rolling schedule consistent with these retention timelines.
Dormant Accounts
If your fa666 account has been inactive for a continuous period of 12 months, it will be classified as dormant. fa666 will notify you by email before applying dormant account status. Dormant account data is retained in accordance with the retention periods above and is subject to the same security standards as active account data. You may reactivate a dormant account at any time by logging in and completing any reactivation steps presented to you.
Data Security Measures
fa666 employs a layered, defence-in-depth approach to data security. We invest continuously in our technical and organisational security measures to protect player data against unauthorised access, accidental loss, destruction, or disclosure. Our key security measures include:
Our Security Framework
- SSL/TLS Encryption: All data in transit between your device and the fa666 platform is encrypted using current-generation TLS protocols. Our SSL certificate is maintained and renewed to prevent lapses in encryption coverage.
- Data Encryption at Rest: Sensitive data stored on fa666 servers — including personal identification details and KYC documents — is encrypted at rest using AES-256 encryption.
- Access Controls: Access to personal player data within fa666 is strictly limited to authorised personnel who require it for their specific job function. Role-based access controls and multi-factor authentication are enforced for all internal systems.
- Penetration Testing: fa666 conducts periodic security assessments and vulnerability scans of our platform infrastructure. Critical vulnerabilities identified during these assessments are remediated on a priority basis.
- Incident Response: fa666 maintains a formal data breach incident response procedure. In the event of a confirmed breach affecting player personal data, affected players will be notified promptly in accordance with our obligations.
- Secure Password Storage: Account passwords are stored using one-way cryptographic hashing with salting. fa666 staff cannot view your password in plain text under any circumstances.
- Payment Security: Financial transactions are processed by PCI DSS-compliant payment partners. fa666 does not store full payment card numbers on its own servers.
Your Role in Account Security
While fa666 takes extensive measures to protect your data, account security is a shared responsibility. You can significantly reduce the risk of unauthorised access to your account by using a strong and unique password, enabling two-factor authentication where available, keeping your contact details up to date so that security alerts reach you promptly, and reporting any suspected unauthorised account activity to our support team without delay.
Your Privacy Rights
As a fa666 player, you hold meaningful rights over your personal data. We are committed to honouring these rights and making the exercise of them as straightforward as possible. The following rights apply to personal data that fa666 holds about you:
Right of Access
You have the right to request a copy of the personal data that fa666 holds about you. Access requests will be fulfilled within a reasonable timeframe and at no charge for standard requests. Where requests are manifestly unfounded, repetitive, or excessive, fa666 reserves the right to charge a reasonable administrative fee or decline to act on the request.
Right to Rectification
If any of the personal data fa666 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections to contact details can be made directly within your account settings. For corrections to identity documents or other sensitive data, please contact our support team to initiate the rectification process.
Right to Erasure
Subject to our legal retention obligations — in particular those arising from AML, financial regulation, and responsible gaming compliance requirements — you have the right to request that fa666 delete personal data we hold about you. Where deletion is not possible due to a legal retention requirement, fa666 will inform you of the specific obligation that prevents deletion and the earliest date on which deletion can be carried out.
Right to Restrict Processing
In certain circumstances — for example, where you contest the accuracy of data we hold or where you have objected to processing — you have the right to request that fa666 restrict its processing of your personal data while the matter is under review.
Right to Object to Marketing
You have an unconditional right to object to the processing of your personal data for direct marketing purposes. Once you exercise this right, fa666 will cease processing your data for marketing and will update your communication preferences accordingly.
How to Exercise Your Rights
To exercise any of the rights described above, please contact the fa666 data privacy team via our 24/7 live chat support or by email at [email protected]. Please note that this email address is for correspondence only and is displayed as plain text — it is not a clickable link. Requests will be acknowledged within 2 business days and actioned within 30 days of receipt, subject to identity verification.
Updates to This Policy
fa666 reviews this Privacy Policy on a regular basis to ensure it accurately reflects our data practices and remains consistent with any changes in applicable law or regulation. We reserve the right to update this policy at any time.
Where updates are material — meaning they significantly affect your rights or change how we use your personal data — fa666 will provide advance notice via the email address registered to your account and display a prominent notice on the fa666 platform for a reasonable period before the changes take effect. Non-material updates, such as clarifications of existing language or corrections of typographical errors, may be made without formal advance notice.
The effective date at the top of this document reflects the date on which the current version of the Privacy Policy came into force. We recommend that you review this page periodically to stay informed of how fa666 handles your personal data. Continued use of the fa666 platform following the effective date of any update constitutes your acknowledgement of the revised policy.
Policy Version: This Privacy Policy was last reviewed and updated on 1 January 2026. The current version supersedes all prior versions of the fa666 Privacy Policy. The canonical version of this document is always accessible at fa666.club/privacy-policy.
Questions About Your Data?
Our support team is available 24/7 to help with any privacy-related queries. You can also explore our FAQ for quick answers, review our Terms and Conditions, or head to the fa666 Casino to start playing.
18+ only · Play responsibly · fa666 is an international online gaming service · Terms & Conditions apply