Privacy Policy — cp66

cp66 collects personal data through several channels: directly from you when you register or interact with the platform, automatically as you browse and play, and occasionally from third-party partners such as payment processors and identity-verification providers. We collect only the data that is necessary to deliver a secure, compliant, and high-quality gaming experience.

The categories of personal data we may collect include:

cp66 does not knowingly collect personal data from individuals under the age of 18. If we discover that data has been collected from a person below the legal age threshold, that data will be deleted immediately and the associated account closed.

Where we need to verify your identity in compliance with anti-money-laundering requirements, we may request copies of identity documents such as a National ID Card (NID), passport, or driving licence, as well as proof of address such as a utility bill or bank statement issued within the past three months.

cp66 processes personal data only for specified, legitimate purposes. We will never sell your data to third parties for their own marketing purposes. The primary uses of your personal data are described below:

• Account Management: To create, maintain, and manage your player account, including identity verification, age verification, and authentication of login sessions;
• Transaction Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank — all in BDT — and to maintain accurate financial records;
• Platform Delivery: To provide access to casino games, cricket betting markets, crash titles, and all other features of the cp66 platform;
• Legal Compliance: To meet our obligations under applicable anti-money-laundering (AML) laws, Know Your Customer (KYC) regulations, and any lawful requests from competent authorities;
• Fraud Prevention: To detect, investigate, and prevent fraudulent activity, account abuse, bonus misuse, money laundering, and other prohibited conduct as defined in our Terms & Conditions;
• Customer Support: To respond to enquiries, resolve disputes, process responsible gaming requests (including deposit limits and self-exclusion), and communicate account-related notices;
• Responsible Gaming: To monitor gaming patterns and identify signs of problem gambling in order to fulfil our duty-of-care obligations to players;
• Marketing Communications: To send promotional offers, bonus notifications, and relevant updates by email or in-platform notification, subject to your communication preferences. You may opt out at any time by contacting [email protected];
• Platform Improvement: To analyse aggregated usage data, improve game selection, optimise page performance, and personalise the platform experience for users in Bangladesh;
• Legal Claims: To establish, exercise, or defend legal claims where necessary.

All processing activities are carried out on at least one of the following lawful bases: performance of a contract with you; compliance with a legal obligation; our legitimate business interests (where these do not override your fundamental rights); or, where required, your explicit consent.

cp66 uses cookies and similar tracking technologies (including web beacons, pixel tags, and local storage objects) to operate the platform effectively, remember your session, and understand how players use the site. Cookies are small text files stored on your device by your browser.

We use the following categories of cookies:

You can control cookie preferences through your browser settings. Most modern browsers allow you to refuse non-essential cookies, delete existing cookies, or receive alerts when cookies are set. Please note that disabling strictly necessary cookies will impair your ability to log in and use core platform features.

We do not use cookies to collect sensitive personal data such as financial credentials or government ID numbers. Session authentication tokens are encrypted and stored securely.

cp66 may share your personal data with the following categories of third parties under strict data-processing agreements:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank — to process BDT deposits and withdrawals on your behalf;
• Identity & Age Verification Providers: Third-party KYC services used to verify government-issued identification documents and confirm that players meet the 18+ age requirement;
• Game Technology Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other licensed game studios, who may receive pseudonymised player identifiers and session data necessary to deliver and audit game outcomes;
• Fraud Detection & AML Services: Specialist providers who assist cp66 in identifying suspicious activity, preventing account takeover, and fulfilling anti-money-laundering obligations;
• Customer Support Platforms: Third-party helpdesk tools used to manage support tickets and live chat — subject to strict data-confidentiality agreements;
• Legal & Regulatory Authorities: Where we are required to do so by law, court order, or regulatory direction, we may disclose personal data to law enforcement, financial intelligence units, or other competent authorities. In all such cases, we will disclose only the minimum amount of data required;
• Business Successors: In the event of a merger, acquisition, or sale of all or substantially all of the business assets of cp66, personal data held at the time of transfer may be transferred to the acquiring entity, subject to equivalent privacy protections.

All third-party data processors engaged by cp66 are contractually bound to process personal data only on our documented instructions, to implement appropriate technical and organisational security measures, and to delete or return data upon termination of the processing relationship.

cp66 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, to comply with legal and regulatory obligations, or to resolve disputes and enforce our agreements. The following indicative retention periods apply:

Once the applicable retention period expires, personal data is either permanently deleted from our systems or irreversibly anonymised so that it can no longer be attributed to an identifiable individual. Anonymised and aggregated data (e.g., statistical reports on platform usage) may be retained indefinitely for business intelligence purposes.

If you request account closure, cp66 will suspend active use of your data immediately. However, certain categories of data (particularly financial records and KYC documents) will be retained for the legally mandated periods set out in the table above, even after account closure.

The security measures deployed by cp66 to safeguard player data include:

• Transport Security: All data transmitted between your device and cp66 servers is encrypted using TLS 1.3 with forward secrecy. Unencrypted HTTP connections are automatically redirected to HTTPS;
• Data at Rest Encryption: Sensitive data stored in our databases — including identity documents, financial records, and authentication credentials — is encrypted using AES-256;
• Access Controls: Access to personal data is restricted to authorised personnel on a strict need-to-know basis. All staff with access to personal data undergo regular security training and are bound by confidentiality obligations;
• Password Hashing: Account passwords are never stored in plain text. They are hashed using a modern, salted one-way algorithm before storage;
• Infrastructure Security: Our platform is hosted on hardened servers with firewall protection, intrusion detection systems, and regular third-party penetration testing;
• Incident Response: In the event of a data breach that is likely to result in a risk to the rights and freedoms of individuals, cp66 will assess the breach, take remedial action, and notify affected users promptly.

While cp66 takes all reasonable and practicable steps to protect your data, no digital platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your login credentials and for using secure, private network connections when accessing your cp66 account.

If you suspect that your account has been compromised or that your personal data has been accessed without authorisation, you must notify us immediately at [email protected].

cp66 respects your rights in relation to your personal data. Subject to applicable law and certain legitimate exceptions (such as our legal obligation to retain financial records), you may exercise the following rights by contacting us at [email protected]:

To exercise any of the above rights, please submit your request in writing to [email protected] from the email address registered to your cp66 account. We will respond to all verified requests within 30 days. In cases of complexity, the response period may be extended by up to a further 60 days, with notice provided to you within the initial 30-day window.

We reserve the right to request additional proof of identity before processing any data rights request, in order to prevent unauthorised third-party access to your personal information.

cp66 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to our platform. When material changes are made, we will notify active players by email and/or via a prominent in-platform notice prior to the changes taking effect.

The updated Privacy Policy will always be accessible at cp66.club/privacy-policy and will carry a revised effective date at the top of the document. The English-language version of this policy is authoritative; in the event of any inconsistency between this version and any translated summary, the English text governs.

Your continued use of the cp66 platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of the changes. If you object to any changes, you should stop using the platform and request account closure by contacting [email protected].

For any questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data by cp66, please contact our support team at [email protected]. Our team operates 24 hours a day, 7 days a week, on Bangladesh Standard Time (BST, UTC+6), and will respond to privacy enquiries within 2 business days.