Privacy Policy — 666cb Data Protection Commitment

1 Who We Are

666cb is an online casino and sports betting platform operated for users in Bangladesh and other permitted jurisdictions. We provide casino games, live dealer tables, cricket betting markets, and related services through our website at https://666cb.io. Throughout this Privacy Policy, references to "666cb", "we", "us", or "our" refer to the operator of the 666cb platform.

For the purposes of this Privacy Policy, 666cb acts as the data controller in respect of the personal information it collects from users directly. Where third-party service providers process data on our behalf, they act as data processors under appropriate contractual arrangements.

2 Information We Collect

666cb collects personal data that is necessary to provide our services, verify your identity, process payments, and comply with our legal obligations. We do not collect personal data beyond what is reasonably required for these purposes. The categories of information we may collect include:

Information You Provide Directly:

• Registration data: Full legal name, date of birth, residential address, email address, and contact phone number provided when you create a 666cb account.
• Identity verification documents: Government-issued photo ID (National ID Card, Passport, or Driving Licence) and proof of address documents submitted during account verification.
• Payment information: Mobile wallet numbers (bKash, Nagad, Rocket, Upay) and card details (Visa, Mastercard) used to make deposits and process withdrawals. Full card numbers are never stored by 666cb — card data is handled exclusively by our PCI-DSS-compliant payment processors.
• Support communications: Records of your conversations with 666cb customer support, including chat transcripts and email exchanges.
• Responsible gaming requests: Details of any deposit limits, cooling-off periods, or self-exclusion requests you submit.

Information Collected Automatically:

• Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage data: Pages visited, time spent on the platform, game sessions started and completed, bets placed, navigation patterns, and click activity.
• Location data: Approximate geographic location derived from your IP address, used to verify access eligibility and comply with jurisdictional restrictions.
• Cookie data: Session and preference data stored via cookies and similar technologies. See Section 6 for full details on our cookie practices .

3 How We Use Your Information

666cb uses the personal information we collect for the following purposes. We process data only where we have a valid legal basis for doing so (see Section 4):

• Account creation and management: To register your account, verify your identity, and maintain your player profile on the 666cb platform.
• Service delivery: To provide you with access to casino games, live dealer tables, cricket betting markets, and all other features of the 666cb platform.
• Payment processing: To facilitate deposits via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to process your withdrawal requests to verified payment methods.
• Identity and age verification: To confirm that you meet the minimum age requirement of 21 years and to verify your identity in compliance with our know-your-customer (KYC) obligations.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, unauthorised account access, money laundering, and other prohibited activities on the platform.
• Customer support: To respond to your enquiries, resolve disputes, process responsible gaming requests, and communicate important account information to you.
• Platform improvement: To analyse usage patterns, identify technical issues, test new features, and improve the overall quality of the 666cb platform experience.
• Legal compliance: To fulfil our obligations under applicable anti-money laundering (AML), counter-terrorism financing (CTF), and data protection laws, and to respond to lawful requests from competent authorities.
• Marketing communications: To send you promotional offers, bonus notifications, and relevant platform updates where you have provided consent or where we have a legitimate interest. You may opt out of marketing communications at any time by contacting support.

4 Legal Basis for Processing

666cb relies on the following legal bases when processing your personal data:

• Contractual necessity: Processing your registration data, verifying your identity, facilitating payments, and delivering platform services are necessary to perform the contract between you and 666cb (our Terms and Conditions).
• Legal obligation: KYC verification, AML monitoring, transaction record-keeping, and cooperation with lawful authority requests are required by applicable law and are processed on that basis.
• Legitimate interests: Fraud prevention, platform security, usage analytics, and improving our services represent legitimate interests of 666cb that do not override your fundamental privacy rights.
• Consent: Where we send marketing communications or deploy non-essential cookies, we do so on the basis of your freely given, informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5 Data Sharing and Disclosure

666cb does not sell your personal data to third parties for their own marketing purposes. We share your data only in the following circumstances and only to the extent necessary:

• Payment processors: Your payment method details are shared with our PCI-DSS-compliant payment partners (including mobile wallet providers such as bKash, Nagad, Rocket, and Upay, and card scheme processors for Visa and Mastercard) solely to process your transactions.
• Identity verification providers: We may use third-party KYC service providers to assist with document verification and age confirmation. These providers process your identity documents under strict confidentiality obligations.
• Game technology providers: Game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe may receive limited session and game data to facilitate gameplay and calculate outcomes. These providers do not receive your full identity profile.
• Platform analytics providers: Anonymised or pseudonymised usage data may be processed by analytics tools to help us understand platform performance. No directly identifiable personal data is shared with analytics providers.
• Legal and regulatory authorities: Where required by applicable law, court order, or lawful regulatory request, 666cb will disclose personal data to the relevant competent authority. We will notify you of such requests where we are legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all of 666cb's assets, your personal data may be transferred to the successor entity. You will be notified of any such transfer and any material changes to this Privacy Policy that result from it.

6 Cookies and Tracking Technologies

666cb uses cookies and similar tracking technologies to operate the platform, remember your preferences, analyse site usage, and support security functions. A cookie is a small text file placed on your device by your web browser when you visit the platform.

We use the following categories of cookies:

• Strictly necessary cookies: These are required for the platform to function correctly. They manage your login session, maintain your account security state, and ensure that your in-progress bets and game sessions are preserved. These cookies cannot be disabled without breaking core platform functionality.
• Functional cookies: These remember your preferences such as language settings, display options, and responsible gaming tool configurations. Disabling these cookies may result in a reduced platform experience.
• Analytics cookies: These collect anonymised data about how users navigate the platform — pages visited, session duration, and technical errors encountered. This information helps 666cb improve the quality and reliability of the platform. Analytics cookies are deployed only with your consent.
• Security cookies: These help us detect and prevent fraudulent activity, bot access, and account takeover attempts. They are classified as strictly necessary for platform integrity.

You may manage your cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that blocking strictly necessary cookies will prevent you from using certain features of the 666cb platform. Your cookie consent preferences are stored for a period of 12 months, after which you may be asked to confirm them again.

7 Data Retention

666cb retains your personal data for as long as is necessary to fulfil the purposes for which it was collected and to comply with our legal obligations. The following retention periods apply as a general guide:

• Active account data: Retained for the full duration of your account relationship with 666cb, plus a minimum of 5 years following account closure to satisfy anti-money laundering and financial record-keeping obligations.
• Transaction records: Deposit and withdrawal records, betting history, and payment method data are retained for a minimum of 5 years from the date of each transaction.
• Identity verification documents: KYC documents are retained for a minimum of 5 years following account closure or the date of the last relevant transaction, whichever is later.
• Customer support records: Support chat transcripts and email correspondence are retained for a period of 3 years from the date of the relevant interaction.
• Marketing consent records: Records of your consent or opt-out from marketing communications are retained for the lifetime of your account and for 2 years following account closure.
• Technical and usage logs: Server logs and anonymised analytics data are retained for a period of 12 months, after which they are deleted or fully anonymised.

When your personal data is no longer required, 666cb will securely delete or anonymise it in accordance with our internal data disposal procedures. Anonymised data that cannot be used to identify you may be retained indefinitely for statistical and analytical purposes.

8 Data Security

666cb takes the security of your personal data seriously. We implement a layered set of technical and organisational measures designed to protect your information from unauthorised access, disclosure, alteration, and destruction. Key security measures include:

• 256-bit SSL/TLS encryption: All data transmitted between your device and the 666cb platform is encrypted in transit using industry-standard Transport Layer Security (TLS) protocols. The padlock icon in your browser confirms an encrypted connection is active.
• Password hashing: Your account password is stored as a cryptographic hash using a modern, computationally intensive hashing algorithm. 666cb staff cannot read your password in plain text — it is never stored in a recoverable form.
• Access controls: Access to personal data held by 666cb is restricted to authorised personnel who require it to perform specific job functions. All internal access is logged and subject to periodic audit.
• Payment data isolation: Full card numbers and sensitive authentication data are never stored on 666cb servers. Card transactions are routed directly through PCI-DSS Level 1 certified payment processors.
• Fraud and intrusion monitoring: 666cb operates continuous monitoring of platform activity to detect suspicious patterns, intrusion attempts, and data anomalies. Automated alerts trigger immediate review by our security team.
• Incident response: In the event of a confirmed personal data breach that is likely to result in a risk to your rights and freedoms, 666cb will notify affected users without undue delay and will take immediate remedial action.

9 Your Rights and Choices

Subject to applicable law, you have the following rights in relation to your personal data held by 666cb. To exercise any of these rights, please contact us at [email protected]. We will respond to your request within a reasonable timeframe and in any event within 30 days.

• Right of access: You may request a copy of the personal data that 666cb holds about you, along with information about how it is being used.
• Right to rectification: You may request that inaccurate or incomplete personal data held by 666cb be corrected or updated. You may also update certain account details directly through your account settings.
• Right to erasure: In certain circumstances, you may request that 666cb delete your personal data. This right is subject to limitations where retention is required by law (for example, AML record-keeping obligations) or where the data is necessary to resolve an outstanding dispute.
• Right to restriction: You may request that 666cb restrict the processing of your personal data in specified circumstances, such as while a rectification request is being resolved.
• Right to object: You may object to 666cb's processing of your data on the basis of legitimate interests, including direct marketing. Where you object to marketing, we will cease that use of your data immediately.
• Right to data portability: Where processing is based on your consent or a contractual relationship, you may request a structured, machine-readable copy of the personal data you have provided to 666cb.
• Right to withdraw consent: Where processing is based on your consent (such as marketing communications or non-essential cookies), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

Please note that 666cb may need to verify your identity before responding to a data rights request to ensure we do not disclose personal data to an unauthorised party.

10 Children and Minors

The 666cb platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect personal data from persons under the age of 21. If you are under 21, you must not register an account, place a bet, or use any service provided by 666cb.

If 666cb becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. Any funds deposited by an underage player will be returned to the originating payment method after the account closure process is complete.

11 Changes to This Policy

666cb reserves the right to update or amend this Privacy Policy at any time. When we make material changes to the way we collect, use, or share your personal data, we will notify you by email to your registered address and by publishing a prominent notice on the platform. The "Last Updated" date at the top of this page reflects the most recent revision.

We encourage you to review this Privacy Policy periodically to stay informed about how 666cb protects your data. Your continued use of the 666cb platform following the publication of any revised Privacy Policy constitutes your acknowledgement of the changes. If you do not agree to the revised policy, you should close your account before the effective date of the changes.

12 Contact and Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have concerns about how 666cb handles your personal information, please contact our support team using the details below. We treat all privacy enquiries with strict confidentiality.

• Email: [email protected]
• Live chat: Available 24 hours a day, 7 days a week via the 666cb platform
• Response time: We aim to respond to all privacy-related enquiries within 2 business days

If you are not satisfied with our response to your privacy concern, you have the right to escalate your complaint to the relevant data protection authority or supervisory body in your jurisdiction. 666cb will cooperate fully with any investigation conducted by a competent supervisory authority.