cd6666 Privacy Policy

1. Introduction

cd6666 is committed to protecting the privacy and personal data of every player who uses our platform. We recognise that when you share your personal information with us — whether during registration, when making a deposit, or simply by browsing the cd6666 website — you are placing trust in us to handle that information responsibly. This Policy sets out, in clear and straightforward terms, exactly what data we hold, why we hold it, and what we do with it.

This Policy should be read alongside the cd6666 Terms & Conditions, which govern your overall use of the platform, and the Responsible Gaming Policy, which addresses how we use certain behavioural data to support player welfare. Where this Policy refers to your "personal data", it means any information that identifies you or could reasonably be used to identify you, either on its own or in combination with other information we hold.

2. Data Controller

For the purposes of this Policy, cd6666 acts as the data controller in respect of personal data collected from players who access the platform from Bangladesh. As data controller, cd6666 is responsible for determining the purposes for which your personal data is processed and the means by which that processing takes place. If you have any questions about how cd6666 handles your personal data, you may contact our dedicated privacy team at any time using the contact details provided in Section 15 of this Policy.

3. Data We Collect

3.1 Registration Data

When you create an account on the cd6666 platform, we collect the personal information you provide during the registration process. This typically includes your full name, date of birth, email address, mobile phone number, and preferred currency. This data is required to create and maintain your account and to verify that you meet the minimum age requirement of 18 years.

3.2 Identity Verification Data

As part of our Know Your Customer (KYC) process, we may collect copies of government-issued identity documents such as your National Identity Card, passport, or driving licence. We may also collect proof of address documentation, such as a utility bill or bank statement, and where required by our anti-money laundering obligations, information about your source of funds.

3.3 Financial Data

To process deposits and withdrawals, we collect information about the payment methods you use, including your mobile financial service account identifiers (such as your bKash, Nagad, or Rocket registered mobile number), and transaction records including amounts, dates, and references. We do not store full payment card numbers on our own servers; card processing is handled exclusively by our certified payment partners.

3.4 Usage and Behavioural Data

We collect data about how you use the cd6666 platform, including the games you play, the bets you place, the amounts wagered, session durations, login timestamps, and in-platform navigation patterns. This data is used to personalise your experience, to detect unusual or potentially harmful gambling behaviour, and to improve the overall quality of the platform.

3.5 Technical Data

We automatically collect certain technical information when you access the cd6666 platform. This includes your IP address, device type and model, operating system, browser type and version, screen resolution, and referring URL. This information is used for platform security, fraud prevention, and to ensure the platform displays correctly across different devices.

3.6 Communications Data

When you contact the cd6666 support team — whether by live chat, email, or any other channel — we retain a record of that communication, including any attachments or screenshots you provide. This record is used to resolve your query, to train our support team, and to maintain a history of interactions with your account.

4. How We Collect Your Data

cd6666 collects personal data through the following channels:

• Directly from you — when you register, complete KYC verification, make a deposit or withdrawal, contact support, participate in a promotion, or update your account settings.
• Automatically — through cookies, server logs, and similar tracking technologies when you browse or interact with the cd6666 platform (see Section 10 for details on cookies).
• From third-party service providers — such as identity verification agencies, payment processors, and fraud detection services, where we engage them to assist with the operation of the platform.
• From publicly available sources — where permitted by applicable law and necessary for fraud prevention or compliance purposes, such as sanctions screening databases.

5. Purposes & Legal Basis for Processing

cd6666 processes your personal data for the following purposes. For each purpose, the applicable legal basis for processing is identified below.

6. Sharing Your Personal Data

cd6666 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We may share your personal data with the following categories of third-party service providers, but only to the extent necessary for the purpose stated:

• Payment processors and mobile financial service providers — including bKash, Nagad, Rocket, Upay, and banking partners — to facilitate deposits and withdrawals to and from your cd6666 account.
• Identity verification and KYC providers — to carry out automated or manual verification of the identity documents and information you submit during account registration or upon request.
• Game content providers — such as Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe — who may receive technical session data (such as player session tokens) as part of delivering game content. These providers are contractually bound to use such data only for game delivery purposes.
• Fraud prevention and security services — third-party platforms that help cd6666 detect, investigate, and prevent suspicious activity, account takeovers, and financial crime.
• Legal and regulatory authorities — where cd6666 is required by law, court order, or regulatory directive to disclose player data. cd6666 will only disclose the minimum necessary information in such circumstances.
• Professional advisors — such as lawyers, auditors, and accountants, where necessary for the operation of the business, subject to professional confidentiality obligations.

All third-party service providers engaged by cd6666 are required to handle personal data in accordance with applicable data protection standards and are contractually prohibited from using your data for any purpose beyond the specific service they provide to cd6666.

7. International Data Transfers

The cd6666 platform serves players in Bangladesh, and our primary data processing operations are conducted with reference to the Bangladesh market. Some of the third-party service providers we engage — particularly game content providers and technology infrastructure partners — may process personal data in countries outside Bangladesh. Where such transfers occur, cd6666 ensures that appropriate safeguards are in place to protect your personal data, including contractual data protection clauses agreed with the relevant service provider. cd6666 does not transfer your personal data to any jurisdiction that does not offer an adequate level of protection for personal data without first ensuring appropriate safeguards are implemented.

8. Data Retention

cd6666 retains your personal data for as long as your account remains active and for a defined period following account closure. Specific retention periods are determined by the following factors:

• Active account data — retained for the full duration of your account with cd6666.
• Financial transaction records — retained for a minimum of five years from the date of the transaction, in accordance with anti-money laundering record-keeping requirements.
• KYC and identity verification documents — retained for a minimum of five years following account closure, or longer where required by applicable law.
• Customer support communications — retained for three years from the date of the interaction, unless a longer period is required to resolve an ongoing dispute.
• Technical and usage data (anonymised) — anonymised analytics data may be retained indefinitely for platform improvement purposes, as it no longer constitutes personal data once anonymised.

Upon the expiry of the applicable retention period, cd6666 will securely delete or anonymise your personal data unless retention for a longer period is required or permitted by law.

9. Security Measures

cd6666 implements a layered approach to data security, combining technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures include, but are not limited to:

• SSL/TLS encryption for all data transmitted between your device and the cd6666 platform.
• Encryption of sensitive data at rest within our database infrastructure.
• Role-based access controls that limit staff access to personal data to those with a legitimate operational need.
• Regular security assessments and penetration testing of the cd6666 platform infrastructure.
• Multi-factor authentication requirements for administrative access to systems holding personal data.
• Monitoring and alerting systems that flag unusual access patterns or potential data security incidents in real time.

While cd6666 takes every reasonable precaution to protect your personal data, no digital platform can guarantee absolute security. You also play a role in protecting your own data by maintaining the confidentiality of your cd6666 login credentials and notifying us immediately if you suspect your account has been compromised.

10. Cookies & Tracking Technologies

10.1 What Are Cookies

Cookies are small text files that are stored on your device when you visit a website. They allow the website to recognise your device on subsequent visits and to remember certain information about your preferences or session. cd6666 uses cookies and similar tracking technologies to operate the platform, improve performance, and deliver a personalised experience to Bangladesh players.

10.2 Types of Cookies We Use

• Essential cookies — required for the platform to function correctly. These include session authentication cookies and security tokens. These cookies cannot be disabled without impairing the functionality of the platform.
• Performance cookies — used to collect anonymised data about how players interact with the cd6666 platform, such as which pages are visited most frequently and where errors occur. This data helps us improve the platform experience.
• Preference cookies — used to remember your settings and preferences, such as your preferred language or display settings, so that you do not need to reconfigure them on each visit.
• Analytics cookies — used by our internal analytics systems to understand aggregate usage trends across the cd6666 platform. Data collected via analytics cookies is processed in anonymised or pseudonymised form.

10.3 Managing Cookies

You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the cd6666 platform. Essential cookies required for platform operation cannot be disabled via browser settings without disrupting your ability to log in or use the platform.

11. Your Privacy Rights

As a cd6666 player, you have the following rights in respect of your personal data. To exercise any of these rights, please contact the cd6666 support team using the details in Section 15.

• Right of access — you may request a copy of the personal data cd6666 holds about you, along with information about how it is used.
• Right to rectification — if any of the personal data we hold about you is inaccurate or incomplete, you may request that it be corrected or updated.
• Right to erasure — in certain circumstances, you may request that cd6666 delete your personal data. This right is subject to cd6666's legal obligations to retain certain records (for example, under anti-money laundering law).
• Right to restrict processing — you may ask cd6666 to temporarily pause the processing of your personal data while a dispute about its accuracy or lawfulness is resolved.
• Right to data portability — where processing is based on your consent or the performance of a contract, you may request that your personal data be provided to you in a structured, commonly used, and machine-readable format.
• Right to withdraw consent — where processing is based on your consent (for example, for marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place before the withdrawal.
• Right to object — you may object to processing that is based on cd6666's legitimate interests, including profiling for marketing purposes. cd6666 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.

cd6666 will respond to all privacy rights requests within a reasonable timeframe. We may need to verify your identity before processing a request to ensure that personal data is not disclosed to an unauthorised party.

12. Minors

The cd6666 platform is strictly intended for adults aged 18 years and above. cd6666 does not knowingly collect personal data from individuals under the age of 18. If we become aware that a minor has registered an account or provided personal data to the platform, we will promptly close the account, delete all associated personal data, and reverse any financial transactions to the extent possible. If you believe that a minor has accessed the cd6666 platform using your payment details or device, please contact our support team immediately so that appropriate action can be taken. Parents and guardians are encouraged to use parental control software to prevent minors from accessing online gambling platforms.

13. Marketing Communications

cd6666 may send you promotional communications about bonuses, new games, seasonal offers, and platform updates if you have opted in to receive marketing messages during registration or at any point thereafter. You may opt out of marketing communications at any time by updating your notification preferences in your account settings or by contacting the cd6666 support team. Opting out of marketing communications will not affect transactional communications related to your account, such as deposit confirmations, withdrawal notifications, or security alerts — these will continue to be sent regardless of your marketing preferences as they are essential for platform operation.

14. Changes to This Privacy Policy

cd6666 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made, we will notify registered players by posting a notice on the cd6666 platform and, where practicable, by sending a notification to the email address associated with your account. The updated Policy will take effect from the date of publication. Your continued use of the cd6666 platform following the publication of a revised Policy constitutes your acceptance of the changes. We encourage you to review this Policy periodically to stay informed of how we are protecting your data.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way cd6666 handles your personal data, please get in touch with our support team through one of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly from the cd6666 platform.
• Email: [email protected] — responses are provided within one Bangladesh Standard Time (UTC+6) business day.

If you are not satisfied with cd6666's response to your privacy query or request, you may escalate the matter by requesting a formal review from our privacy team. Details of the escalation process will be provided by the support team upon request.