cx66 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") sets out how cx66 ("cx66", "we", "us", "our") collects, uses, stores, discloses, and protects the personal data of individuals ("you", "your", "Player", "User") who access or use the cx66 online casino and sports betting platform, accessible at cx66.io and any associated web or mobile interfaces operated by cx66.

cx66 is committed to protecting the privacy and personal data of all platform users. This Policy has been prepared in accordance with internationally recognised data protection principles, including the principles of lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and accountability.

This Privacy Policy applies to all personal data processed by cx66 in connection with your use of the platform, including data collected during account registration, identity verification (KYC), payment processing, gameplay, customer support interactions, and marketing communications. It should be read alongside our Terms & Conditions and our Responsible Gaming Policy.

2. Who We Are

cx66 is an internationally operated online gaming platform serving the Bangladesh market. The platform provides cricket betting, live casino, slot games, table games, and related entertainment services exclusively to adults aged 21 and above. The primary language of the cx66 platform and all communications is English.

For the purposes of this Privacy Policy, cx66 acts as the data controller — meaning we determine the purposes and means by which your personal data is processed. Where cx66 engages third-party service providers (such as payment processors, game studios, or identity verification services) to process data on our behalf, those parties act as data processors under binding contractual agreements with cx66.

All privacy-related inquiries, data rights requests, and complaints should be directed to the cx66 Data Protection contact at [email protected]. Response times are typically within 5 business days for general inquiries and within 30 calendar days for formal data rights requests.

3. Data We Collect

3.1 Registration Data

When you create a cx66 account, we collect the following information: full legal name, date of birth, residential address (including city and country), email address, mobile phone number, and a self-selected username and password. This data is required to establish your account identity and to verify that you meet the minimum age requirement of 21 years.

3.2 Identity Verification (KYC) Data

To comply with anti-money laundering (AML) obligations and to confirm player identity before processing withdrawals, cx66 may request copies of one or more of the following documents: National Identity Card (NID), passport, driving licence, proof of residential address (such as a utility bill or bank statement dated within the last three months), and proof of payment method ownership. These documents are stored securely and used solely for verification purposes.

3.3 Transaction Data

cx66 records all financial transactions associated with your account, including: deposit amounts and timestamps, payment methods used (bKash, Nagad, Rocket, Upay, Visa, Mastercard, etc.), withdrawal requests and processing statuses, bonus credits and wagering activity, and account balance history. This data is retained for financial record-keeping and AML compliance purposes.

3.4 Gaming and Betting Activity Data

We collect detailed records of your gaming and betting activity on the cx66 platform, including: games played and sports markets wagered on, bet amounts and outcomes, session start and end times, device type and browser used, and in-game or in-session behavioural patterns. This data is used for responsible gaming monitoring, fraud detection, and platform improvement.

3.5 Technical and Device Data

When you access the cx66 platform, our servers automatically collect certain technical data, including: IP address, browser type and version, operating system, device identifiers, referring URL, pages visited, time spent on pages, and error logs. This data is used for security monitoring, platform diagnostics, and aggregate analytics. It does not by itself identify you as an individual but may be combined with other data to do so.

3.6 Customer Support Data

When you contact cx66 customer support via email or live chat, we retain a record of your inquiry, the content of communications, and any attachments you provide. This record is used to resolve your query and to improve support quality. Support communications are stored for a minimum of 24 months following account closure.

3.7 Marketing Preference Data

Where you have opted in to receive promotional communications from cx66, we record your marketing consent alongside the date and method of consent. We also monitor engagement with marketing emails (open rates, click-through rates) for the purposes of optimising communication relevance and frequency.

4. How We Use Your Data

cx66 uses your personal data for the following purposes:

• Account Administration: Creating and managing your cx66 account, verifying your identity and age, and maintaining the accuracy of your account records throughout your relationship with us.
• Platform Delivery: Enabling you to access and use all features of the cx66 platform, including sports betting, live casino, slots, and table games, as well as processing deposits and withdrawals via your chosen payment method.
• KYC and AML Compliance: Verifying your identity documents, screening against applicable watchlists, and monitoring transactions for signs of money laundering, fraud, or other financial crime as required by applicable regulations.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling behaviour, applying player-requested limits and self-exclusions, and proactively intervening where cx66 identifies a player who may be at risk.
• Fraud and Security: Detecting, investigating, and preventing fraudulent activity, account takeover attempts, bonus abuse, and any other conduct that may threaten the security or integrity of the cx66 platform or its player community.
• Customer Support: Responding to your inquiries, resolving complaints, and maintaining records of support interactions to ensure consistent and high-quality service.
• Marketing Communications: Sending you promotional offers, bonus notifications, and news about cx66 features and events, where you have given consent to receive such communications. You may withdraw consent at any time.
• Platform Improvement: Analysing aggregated and anonymised usage data to understand how players interact with the cx66 platform and to improve its design, feature set, and overall user experience.
• Legal and Regulatory Obligations: Complying with any legal obligations applicable to cx66's operations, including responding to lawful requests from regulatory bodies, law enforcement agencies, or courts of competent jurisdiction.

5. Legal Basis for Processing

cx66 processes personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and cx66 — namely, operating your account, processing transactions, and delivering platform services — is carried out on the basis of contractual necessity.
• Legal Obligation: Certain processing activities, including KYC identity verification, AML transaction monitoring, and the retention of financial records, are required by applicable law and are carried out on the basis of legal obligation.
• Legitimate Interests: cx66 processes data for fraud prevention, security monitoring, responsible gaming oversight, platform analytics, and customer support improvement on the basis of its legitimate interests, balanced against your privacy rights. You have the right to object to processing carried out on this basis.
• Consent: Marketing communications and non-essential cookie deployments are conducted only where you have provided clear and informed consent. Consent can be withdrawn at any time without affecting the lawfulness of prior processing.

6. Sharing Your Data

6.1 Service Providers

cx66 engages trusted third-party service providers to assist in delivering platform services. These include payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard), identity verification and KYC service providers, game content studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi), customer support platform providers, cloud hosting and infrastructure providers, and email delivery services. All service providers are bound by contractual data processing agreements that restrict their use of your data to the specific services they provide to cx66.

6.2 Legal and Regulatory Disclosure

cx66 may disclose personal data to law enforcement agencies, regulatory authorities, financial intelligence units, or courts of competent jurisdiction where required to do so by applicable law, legal process, or court order. cx66 will not disclose more data than is required to satisfy the specific legal obligation.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of assets involving cx66, personal data held by cx66 may be transferred to the acquiring or successor entity as part of the transaction. You will be notified of any such transfer that materially affects the handling of your personal data, and the successor entity will be bound by the terms of this Privacy Policy or a policy that provides an equivalent level of protection.

6.4 No Sale of Personal Data

cx66 does not sell, rent, or commercially trade your personal data to any third party for their own marketing, research, or commercial purposes. Any data sharing is limited strictly to the operational and legal purposes described in this Policy.

7. International Data Transfers

cx66 operates internationally, and your personal data may be processed in countries outside of Bangladesh, including countries where our hosting infrastructure, service providers, or game studio partners are located. Where personal data is transferred internationally, cx66 takes steps to ensure that appropriate safeguards are in place to protect your data, including the use of data processing agreements that incorporate recognised data transfer mechanisms.

By using the cx66 platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside your country of residence. cx66 will at all times maintain the protections described in this Privacy Policy regardless of where your data is processed.

8. Cookies & Tracking Technologies

8.1 What Are Cookies

Cookies are small text files that are placed on your device when you visit a website. They are widely used to make websites function correctly, to remember user preferences, and to provide analytical data to website operators. cx66 uses both session cookies (which expire when you close your browser) and persistent cookies (which remain on your device for a defined period).

8.2 Types of Cookies Used by cx66

• Strictly Necessary Cookies: These cookies are essential for the cx66 platform to function. They enable core features such as account login session management, security token validation, and fraud prevention mechanisms. These cookies cannot be disabled without impairing platform functionality.
• Functional Cookies: These cookies remember your preferences, such as language settings, display preferences, and recently viewed games, to provide a more personalised and convenient experience on return visits.
• Analytical Cookies: cx66 uses aggregated analytical data to understand how players navigate the platform, which features are most used, and where usability improvements can be made. This data does not identify you individually.
• Marketing Cookies: Where you have consented, marketing cookies may be used to deliver promotional communications and offers that are relevant to your cx66 activity. You may withdraw consent for marketing cookies at any time via your account settings.

8.3 Managing Cookies

You can manage or disable cookies through your web browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in to and using the cx66 platform. Disabling functional or analytical cookies will not prevent you from using cx66 but may result in a less personalised experience.

9. Data Retention

cx66 retains personal data for as long as it is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be associated with an identifiable individual.

10. Your Rights

As a cx66 player, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request". We will respond within 30 calendar days.

• Right of Access: You have the right to request a copy of the personal data that cx66 holds about you, along with information about how it is being used and with whom it has been shared.
• Right to Rectification: If any personal data cx66 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You can also update certain data directly within your cx66 account settings.
• Right to Erasure: In certain circumstances — for example, where data is no longer necessary for the purpose it was collected, or where you withdraw consent and there is no other lawful basis for processing — you may request that cx66 delete your personal data. This right is subject to exceptions where retention is required by law (e.g., AML record-keeping obligations).
• Right to Restriction: You may request that cx66 restricts the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where you have objected to processing based on legitimate interests.
• Right to Data Portability: Where processing is carried out by automated means on the basis of consent or contractual necessity, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on cx66's legitimate interests. cx66 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, or where processing is necessary for the establishment, exercise, or defence of legal claims.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to the withdrawal.

11. Security Measures

cx66 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the cx66 servers is protected by industry-standard SSL/TLS encryption, ensuring that your credentials and financial information cannot be intercepted in transit.
• Encrypted Data Storage: Sensitive personal and financial data stored on cx66 servers is encrypted at rest using industry-standard encryption algorithms. Storage infrastructure is hosted in access-controlled, physically secured data centres.
• Access Controls: Access to personal data within cx66's internal systems is restricted on a need-to-know basis. Staff who handle personal data undergo data protection training and are bound by confidentiality obligations.
• Two-Factor Authentication: cx66 supports and strongly recommends the use of two-factor authentication (2FA) on all player accounts to provide an additional layer of protection against unauthorised access.
• Fraud Monitoring: Automated and manual systems continuously monitor account activity for unusual patterns that may indicate account compromise, fraud, or unauthorised access. Suspicious activity triggers an immediate security review and, where necessary, account suspension pending investigation.
• Regular Security Reviews: cx66 conducts regular internal security audits and engages independent security professionals to perform penetration testing and vulnerability assessments on a scheduled basis.

Whilst cx66 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for keeping your cx66 account credentials confidential and for notifying us immediately at [email protected] if you believe your account has been compromised.

12. Minors & Age Verification

The cx66 platform is strictly intended for adults aged 21 and above. cx66 does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory component of the cx66 registration and KYC process. Any account found to be held by a person under 21 years of age will be immediately suspended, the account balance will be frozen, and all data associated with the account will be handled in accordance with our data minimisation obligations.

If you are a parent or guardian and believe that a minor has created a cx66 account, please contact us immediately at [email protected] so that we can take prompt action to close the account and delete any personal data that may have been collected.

cx66 employs age-gating technology and document-based age verification as part of its KYC procedures. These measures are designed to prevent access to the platform by persons under the minimum age requirement. cx66 continually reviews and improves its age verification processes to maintain their effectiveness.

13. Marketing Communications

cx66 may send you promotional emails, SMS notifications, or in-platform messages relating to bonuses, new game releases, cricket betting promotions, seasonal offers (such as Eid or Pohela Boishakh promotions), and other cx66 platform news. These communications are sent only where you have provided explicit opt-in consent at the time of registration or subsequently through your account settings.

You can opt out of marketing communications at any time by:

• Clicking the "Unsubscribe" link included at the bottom of any cx66 marketing email;
• Updating your marketing preferences within your cx66 account settings under the "Notifications" section;
• Contacting cx66 support at [email protected] and requesting removal from all marketing communications.

Opting out of marketing communications does not affect the delivery of transactional and account-related messages, such as deposit confirmations, withdrawal notifications, security alerts, and KYC requests, which are sent on the basis of contractual necessity and cannot be disabled while your account remains active.

Players who have requested a self-exclusion for responsible gaming purposes are automatically removed from all cx66 marketing lists for the duration of their exclusion period. This removal is applied immediately upon the activation of a self-exclusion request.

14. Changes to This Privacy Policy

cx66 reserves the right to update or amend this Privacy Policy at any time. Material changes — meaning changes that significantly affect the way your personal data is collected, used, or shared — will be communicated to registered players via email at least 14 days before the revised Policy takes effect. Non-material changes (such as corrections of typographical errors or clarifications that do not alter the substance of the Policy) may be made without prior notice.

The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. We encourage you to review this Policy periodically to stay informed of how cx66 handles your personal data. Your continued use of the platform following the effective date of any revision constitutes your acceptance of the updated Policy. If you do not accept the revised Policy, please cease using the platform and contact us to request account closure.

15. Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a privacy-related concern, please contact the cx66 Data Protection team:

cx66 takes all privacy complaints seriously and will acknowledge receipt of your complaint within 48 hours. We aim to resolve all privacy-related complaints within 30 calendar days. If you are not satisfied with the outcome of your complaint, you may have the right to escalate the matter to an applicable data protection authority or regulatory body in your jurisdiction.

For responsible gaming concerns or to request a self-exclusion, please visit our dedicated Responsible Gaming page. For general platform questions and account queries, visit our FAQ page.