Privacy Policy — How cc6666 Protects Your Personal Data
At cc6666, your privacy is a core operational priority. This Privacy Policy explains exactly what personal data we collect from players in Bangladesh, why we collect it, how we use and store it, who we share it with, and how you can exercise your rights over it. We are committed to transparency in all data practices.
- All data encrypted in transit with 256-bit SSL
- Data accessed only by authorised personnel
- Player data never sold to third-party advertisers
- Cookie preferences can be managed at any time
- Players may request access to their personal data
- Right to erasure available — conditions apply
Six Pillars of the cc6666 Privacy Framework
cc6666 approaches data privacy as a technical and operational discipline, not merely a legal checkbox. The following six principles underpin every data handling decision we make.
Data Minimisation
cc6666 collects only the personal data that is strictly necessary for account operation, identity verification, fraud prevention, and regulatory compliance. We do not collect data speculatively or beyond defined operational purposes.
Purpose Limitation
Personal data collected for one purpose — for example, payment processing — is never repurposed for unrelated uses such as behavioural advertising. Each data category has a defined purpose and is processed only for that purpose.
Security by Design
Technical safeguards including 256-bit SSL encryption, server-side tokenisation of payment credentials, and role-based access controls are built into every layer of the cc6666 platform infrastructure.
Player Transparency
Players registered with cc6666 have the right to know exactly what data is held about them, why it is held, and how long it will be retained. This Privacy Policy is the primary instrument for fulfilling that transparency obligation.
Accuracy & Rectification
cc6666 maintains processes to ensure personal data is kept accurate and up to date. Players may correct inaccurate data via the account dashboard or by submitting a request to the support team at any time.
Consent Management
Where data processing relies on consent — for example, optional marketing communications — cc6666 records consent at the point of collection and provides clear, accessible mechanisms for players to withdraw consent at any time.
Data We Collect
When you create an account on cc6666, interact with our games and betting markets, or contact our support team, we collect personal data that falls into the following categories. In each case, we describe why the data is collected and the legal basis on which we process it.
Identity Data: Your full legal name, date of birth, gender, and a copy of your government-issued identity document (National Identity Card, passport, or birth certificate). This data is collected during the account registration and Know Your Customer (KYC) verification process. The legal basis for processing identity data is compliance with our obligations under applicable anti-money-laundering (AML) standards and age verification requirements.
Contact Data: Your email address, mobile phone number, and residential address in Bangladesh. This data is used to deliver account notifications, respond to support queries, and where you have consented, send promotional communications. Contact data is also used as a secondary verification factor when you request password resets or make withdrawal requests.
Financial Data: Payment method details sufficient to process deposits and withdrawals — for mobile financial services (bKash, Nagad, Rocket, Upay), this means the registered mobile number; for card payments (Visa, Mastercard), we store only a tokenised representation of the card — the full PAN is never retained on cc6666 servers. Bank account details for direct transfer are stored in encrypted form and used solely for processing the specified transaction.
Transaction Data: A full log of all deposits, withdrawals, bonus awards, wagers placed, game rounds played, and bet settlements associated with your account. This data is retained for audit and compliance purposes and is used to calculate your balance, produce your account statement, and investigate any disputes.
Technical Data: IP address, browser type and version, device type (desktop, mobile, tablet), operating system, session timestamps, and the URL path of pages visited within cc6666. This data is collected automatically via server logs and analytics tools and is used for security monitoring, fraud detection, and platform optimisation.
Behavioural Data: In-session game behaviour data, betting patterns, preferred game types, session duration, and responsible gaming interaction history (such as limit-setting activity). This data is used to operate responsible gaming controls and to improve the platform experience. It is not shared with third-party advertisers.
| Data Category | Legal Basis |
|---|---|
| Identity | Legal obligation |
| Contact | Contract |
| Financial | Contract |
| Transaction | Legal obligation |
| Technical | Legitimate interest |
| Behavioural | Legitimate interest |
| Marketing | Consent |
How We Use Your Data
cc6666 processes personal data only for purposes that were either disclosed at the point of collection or that are permitted under the applicable legal basis. The following describes the primary uses of personal data on the cc6666 platform:
- Account Administration: Creating, verifying, maintaining, and securing your cc6666 player account. This includes processing your registration, conducting identity checks, and managing your account settings and preferences.
- Service Delivery: Enabling you to deposit funds, play games, place bets on cricket and other sports markets, claim bonuses, and request withdrawals. Your financial and transaction data is essential to the core operation of the platform.
- Fraud Prevention and Security: Detecting and preventing fraudulent activity, money laundering, bonus abuse, and unauthorised account access. Technical data, transaction data, and behavioural patterns are analysed by automated systems and reviewed by the security team for this purpose.
- Regulatory Compliance: Fulfilling cc6666's obligations under applicable AML standards, age verification requirements, and responsible gaming obligations. This includes retaining transaction records for the required statutory periods and producing reports in response to lawful requests from authorities.
- Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling, enforcing player-set deposit limits and loss limits, managing cooling-off periods and self-exclusion requests, and following up with players who have activated responsible gaming tools.
- Customer Support: Managing and responding to support tickets, live chat conversations, and email enquiries. Support interaction records are retained to provide continuity of service and to resolve disputes.
- Platform Improvement: Aggregated and anonymised technical and behavioural data is used to improve game performance, page load speeds, mobile responsiveness, and the overall player experience on cc6666.
- Marketing Communications (consent-only): Where you have given explicit consent, cc6666 may use your contact data to send promotional emails or platform notifications about new games, seasonal bonuses tied to events such as Eid, BPL, or Pohela Boishakh, and other offers relevant to your interests. You may withdraw this consent at any time through your account settings or by contacting support.
Data Sharing & Disclosure
cc6666 does not sell your personal data to third parties under any circumstances. We share personal data only in the limited circumstances described below, and only to the extent necessary for the specific purpose stated.
Payment Service Providers: To process your deposits and withdrawals, cc6666 shares necessary financial data with the relevant payment provider — bKash, Nagad, Rocket, Upay, Visa, Mastercard, BRAC Bank, City Bank, Dutch-Bangla Bank, or Islami Bank. Each payment provider operates under its own privacy policy and processes your data as an independent data controller. cc6666 shares only the minimum data required to complete the specific transaction.
Game and Platform Technology Suppliers: cc6666's casino games are supplied by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. To facilitate gameplay and record outcomes, these providers may receive a player session token and transaction identifiers. They do not receive your full identity data. All game suppliers engaged by cc6666 are required to maintain appropriate data protection standards contractually.
Identity Verification Partners: To fulfil KYC and age verification requirements, cc6666 works with identity verification service providers. Document images and identity data submitted during the verification process are shared with these partners for the sole purpose of verifying authenticity. Documents are not retained by verification partners beyond the completion of the check.
Legal and Regulatory Authorities: cc6666 will disclose personal data to law enforcement agencies, financial intelligence units, or other governmental bodies where required to do so by a lawful order, court direction, or applicable regulation. In such cases, cc6666 will disclose only the data specifically requested and will notify the affected player where legally permitted to do so.
Business Transfers: In the event of a merger, acquisition, or sale of all or part of cc6666's business, personal data held by the platform may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer that affects how their data is processed, and their rights under this Privacy Policy will be preserved.
Cookies & Tracking Technologies
cc6666 uses cookies and similar tracking technologies to operate the platform, maintain your session, and improve the overall experience. A cookie is a small text file stored on your device when you visit a website. The cookies used on cc6666 fall into the following categories:
- Strictly Necessary Cookies: These are essential to the operation of the cc6666 platform. They maintain your login session, preserve your balance display, and support security features such as CSRF token validation. Strictly necessary cookies cannot be disabled without materially impairing your ability to use the platform.
- Functional Cookies: These cookies remember your preferences — such as language setting, preferred game view, and responsible gaming limits display — so that you do not need to reconfigure them each time you visit. They are activated based on your use of the platform features they support.
- Analytics Cookies: cc6666 uses server-side and first-party analytics tools to understand aggregated page traffic, session duration, and navigation patterns. This data is anonymised and used to improve platform performance. We do not use third-party advertising analytics tools that build cross-site tracking profiles.
- Security Cookies: Short-lived tokens used to detect unusual login patterns, verify that login attempts are coming from a recognised device, and flag sessions exhibiting indicators of account takeover activity.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Session | Login state | Session |
| CSRF Token | Security | Session |
| Preferences | UI settings | 30 days |
| Analytics | Traffic data | 90 days |
| Device Trust | Login security | 14 days |
Data Retention & Storage
cc6666 retains personal data for as long as is necessary to fulfil the purpose for which it was collected and to comply with applicable legal and regulatory obligations. The retention periods applied to each data category are as follows:
- Identity and KYC Documents: Retained for the duration of the account's active life plus a minimum of 5 years following account closure, in accordance with standard AML record-keeping requirements.
- Transaction Records: All deposit, withdrawal, wager, and settlement records are retained for a minimum of 5 years from the date of the transaction. These records may be required to investigate disputes, produce audit trails, or respond to regulatory enquiries.
- Account and Contact Data: Retained for the duration of the active account plus 2 years after voluntary closure or 5 years after a compliance-enforced closure, whichever is longer.
- Support Communications: Live chat transcripts, email correspondence, and support ticket records are retained for 2 years from the date of the interaction, after which they are permanently deleted.
- Technical Logs: Server logs and security event records are retained for 12 months on active systems and may be archived for up to 3 years in the event that an investigation is pending.
- Marketing Consent Records: Records of consent given for marketing communications are retained for the duration of the consent period plus 2 years, to support our ability to demonstrate compliance with consent obligations.
All data stored by cc6666 resides on servers protected by physical and logical access controls. Data at rest is encrypted using AES-256. Data in transit between your device and the cc6666 platform is encrypted using TLS 1.2 or TLS 1.3. Access to stored personal data is restricted to authorised cc6666 personnel on a strict need-to-know basis, enforced through role-based access control policies.
When retention periods expire, personal data is securely and permanently deleted from all active and backup systems in accordance with cc6666's data deletion procedures. Where complete deletion is not immediately possible due to backup rotation schedules, data is flagged for deletion and isolated from active processing until the scheduled deletion is completed.
Your Rights as a Player
As a player registered with cc6666, you hold the following rights with respect to your personal data. These rights may be exercised at any time by contacting support via live chat or by emailing the data team at [email protected]. cc6666 will respond to all verified data rights requests within 30 days of receipt.
Data Security Measures
cc6666 applies a multi-layered technical and organisational security framework to protect personal data against unauthorised access, loss, alteration, and disclosure. The following measures are in place across all systems that process player data:
- Transport Encryption: All data exchanged between your device and cc6666 servers is encrypted using TLS 1.3. Older protocol versions (TLS 1.0, TLS 1.1, SSL 3.0) are disabled. The platform's HTTPS configuration is regularly tested to maintain an A-grade rating against standard SSL auditing benchmarks.
- Data Encryption at Rest: All databases containing personal data are encrypted at rest using AES-256. Backup copies are subject to the same encryption standard. Encryption keys are stored in a separately secured key management system and rotated on a scheduled basis.
- Access Control: Internal access to systems holding personal data is governed by a role-based access control (RBAC) framework. Employees are granted the minimum access level required to perform their job function. Access rights are reviewed on a regular basis and revoked immediately upon a staff member's departure from cc6666.
- Payment Data Tokenisation: cc6666 does not store full card numbers (PANs). Card payment processing uses tokenisation, meaning that a random token representing the card is stored on cc6666 systems rather than the actual card data. This limits the exposure of card data in any security event.
- Intrusion Detection: Real-time intrusion detection and prevention systems (IDS/IPS) monitor cc6666 network traffic for anomalous patterns. Alerts are triaged by the security operations team around the clock (00:00–23:59 BST, UTC+6).
- Penetration Testing: cc6666 conducts scheduled penetration testing on its public-facing infrastructure and internal systems. Identified vulnerabilities are prioritised and remediated according to a documented patch management process.
While cc6666 employs robust technical safeguards, no internet-based platform can guarantee absolute security against all possible threats. Players are encouraged to use strong, unique passwords for their cc6666 account, enable two-factor authentication (2FA), and never share login credentials with any third party.
Contact & Data Requests
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how cc6666 handles your personal data, you can reach our data and privacy team through the following channels. All communications must be in English and should include your registered account username and the email address associated with your account to assist with identity verification.
Email: [email protected] — Please include "Privacy Request" or "Data Rights" in the subject line so that your message is routed to the appropriate team without delay.
Live Chat: The cc6666 live chat service is available 24 hours a day, 7 days a week (00:00–23:59 BST, UTC+6). For complex data rights requests, the live chat team will create a support ticket and escalate to the data handling team within one business day.
cc6666 commits to acknowledging all privacy-related requests within 48 hours and to providing a full response within 30 calendar days of verified receipt. Where a request is particularly complex or where you have submitted multiple requests, cc6666 may extend the response period by a further 30 days. In such cases, you will be notified of the extension and the reason for it within the initial 30-day window.
cc6666 takes all privacy concerns seriously. If you are dissatisfied with the way a data request or concern has been handled, you are entitled to escalate the matter through the appropriate channels. We encourage players to contact us directly first, as most concerns can be resolved promptly through our support team.
| Request Type | Response SLA |
|---|---|
| Acknowledgement | 48 hours |
| Access Request | 30 days |
| Rectification | 30 days |
| Erasure | 30 days |
| Marketing Opt-out | 7 days |
| Complex Request | 60 days |
Ready to Start Playing on cc6666?
Now that you understand how cc6666 protects your personal data, explore our full range of games and sports betting markets. From live cricket and BPL betting to 500+ casino slots, cc6666 delivers a secure and fair experience for every player in Bangladesh.