ccc66 Privacy Policy
— How We Handle Your Personal Data

Section 1

Information We Collect

When you register for a ccc66 account or interact with the platform, we collect personal information in several ways. The categories of data we collect and the circumstances under which each category is gathered are described below. ccc66 collects only the minimum data required to deliver our services safely and efficiently.

ccc66 does not knowingly collect personal data from individuals under the age of 18. If we become aware that a minor has provided personal information, that account will be closed immediately and all associated data will be deleted. If you believe a minor may have registered an account, please notify us at [email protected] immediately.

Section 2

How We Use Your Data

The personal data ccc66 collects is used for specific, legitimate purposes directly related to the operation of the platform. We do not use your data for any purpose beyond those described below without first obtaining your explicit consent. Every use of your data is governed by either a contractual necessity, a legal obligation, or a legitimate business interest that does not override your fundamental rights.

• Account Management: We use your identity and contact data to create and maintain your ccc66 account, verify your eligibility, authenticate your login sessions, and communicate important account-related updates to you.
• Payment Processing: Your financial data is used to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and partner Bangladeshi banks, and to maintain accurate transaction records for your account history.
• Identity Verification: Verification documents are used solely to confirm your identity, age, and right to use the platform in compliance with our KYC procedures and anti-money-laundering obligations.
• Fraud Prevention & Security: Technical data, including your IP address, device fingerprint, and session logs, is used to detect and prevent fraudulent activity, account takeovers, and the use of automated tools on the platform.
• Responsible Gaming: Gameplay data is analysed to identify patterns that may indicate problem gambling behaviour. ccc66 uses this analysis to provide appropriate responsible gaming interventions, including deposit limit suggestions and self-exclusion prompts.
• Customer Support: Communications data is used to handle your support queries, investigate complaints, and improve the quality of our customer service team's responses.
• Platform Improvement: Anonymised, aggregated gameplay and technical data is used internally to improve platform performance, game selection, and the overall user experience for all ccc66 players.
• Promotional Communications: With your consent, we may use your contact details to notify you of bonuses, promotions, and seasonal offers such as those tied to Eid, Pohela Boishakh, the BPL cricket season, and IPL. You may opt out of marketing communications at any time by contacting support.

Section 3

Cookies & Tracking Technologies

ccc66 uses cookies and similar technologies — including local storage, session tokens, and pixel tags — to deliver a functional, personalised, and secure experience on the platform. Cookies are small text files placed on your device when you visit the ccc66 website. They allow the platform to remember your preferences, maintain your login session, and collect analytics data about how players use the site.

Most modern browsers allow you to manage cookie preferences through your browser settings. You can choose to block or delete cookies at any time; however, please be aware that disabling essential cookies will prevent you from logging into your ccc66 account and using core platform features. ccc66 does not use third-party advertising cookies or share cookie data with external marketing platforms.

Section 4

Data Sharing & Disclosure

ccc66 does not sell, rent, or trade your personal information to third parties. However, there are limited and specific circumstances under which your data may be shared with trusted third parties or disclosed to authorities. Every data-sharing arrangement is governed by strict confidentiality obligations.

1. Payment Processors: Your financial data (mobile wallet numbers, bank details) is shared with payment service providers such as bKash, Nagad, Rocket, and Upay solely for the purpose of processing your deposit or withdrawal transaction. These providers are contractually bound to handle your data in accordance with applicable data protection standards.
2. Game Studio Providers: When you play games supplied by third-party studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi, your session data (player ID, bet amounts, game results) is transmitted to those studios' servers to render the game. No directly identifiable personal data (name, address, phone number) is passed to game studios.
3. KYC and Identity Verification Partners: Your identity documents and verification data may be processed by third-party KYC service providers that assist ccc66 in confirming player identity and age. These partners operate under strict data processing agreements and are prohibited from retaining your documents beyond the verification process.
4. Legal and Regulatory Disclosure: ccc66 may be required to disclose your personal data to law enforcement agencies, financial regulators, or courts of competent jurisdiction in response to a lawful request. In such cases, ccc66 will disclose only the minimum data required to satisfy the legal obligation.
5. Anti-Fraud Networks: To protect the platform from fraud and money laundering, ccc66 may share flagged account data with industry anti-fraud databases and partner platforms. This sharing is strictly limited to fraud prevention purposes.
6. Business Transfers: In the event of a corporate restructure, merger, or acquisition involving ccc66, your personal data may be transferred to the successor entity as part of that transaction. In such a case, ccc66 will notify affected players and ensure that the recipient entity commits to the same privacy standards described in this policy.

Section 5

Data Retention

ccc66 retains your personal data for as long as your account remains active, and for a defined period after account closure. Retention periods are determined by the type of data and the legal or operational purpose it serves. We do not retain data beyond the period necessary for those purposes.

Once the applicable retention period has expired, ccc66 will securely delete or anonymise your personal data so that it can no longer be linked to you as an individual. If you request deletion of your account and data prior to the expiry of a mandatory retention period, we will restrict access to that data and delete it as soon as the retention obligation has been fulfilled.

Section 6

Data Security

ccc66 takes the security of your personal data seriously. We implement a layered set of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, disclosure, alteration, or destruction. While no digital platform can guarantee absolute security, ccc66's security posture is designed to meet industry best practices for online gaming platforms operating in the Bangladesh market.

• SSL/TLS Encryption: All data transmitted between your browser or mobile device and ccc66 servers is encrypted using SSL/TLS protocols. This ensures that your login credentials, payment details, and personal information cannot be intercepted in transit.
• Password Hashing: Your account password is never stored in plain text. ccc66 applies strong cryptographic hashing (with salting) to all passwords so that even in the event of an internal data breach, your password cannot be recovered in its original form.
• Two-Step Verification: ccc66 strongly recommends enabling SMS OTP (One-Time Password) two-step verification on your account. This adds a second layer of authentication, ensuring that even if your password is compromised, your account cannot be accessed without your registered mobile device.
• Access Controls: Access to your personal data within ccc66's internal systems is restricted on a strict need-to-know basis. Staff members can only access the data necessary to perform their specific job functions, and all access is logged for audit purposes.
• Intrusion Detection: ccc66 employs automated monitoring systems that detect unusual access patterns, brute-force login attempts, and other indicators of malicious activity. Suspected intrusions trigger immediate security alerts and account protection procedures.
• Secure Data Storage: Personal data is stored on servers protected by physical and network-level security controls. Sensitive financial and identity data is stored in encrypted form at rest, separate from gameplay and technical data.

Section 7

Your Privacy Rights

As a ccc66 player, you hold a number of rights with respect to your personal data. ccc66 respects these rights and will respond to all valid requests in a timely and transparent manner. To exercise any of the rights listed below, please contact our support team at [email protected] with the subject line "Data Rights Request" and include your registered mobile number or email address so we can verify your identity before processing the request.

1. Right of Access: You may request a copy of the personal data that ccc66 holds about you at any time. We will provide this information in a clear, structured format within a reasonable timeframe, subject to identity verification.
2. Right to Rectification: If any personal data held by ccc66 is inaccurate or out of date, you have the right to request that it be corrected. Some data (such as your registered name or date of birth) may require supporting documentation before a correction is processed.
3. Right to Erasure: You may request that ccc66 delete your personal data. We will comply with such requests where there is no overriding legal obligation to retain the data (for example, financial transaction records must be kept for regulatory purposes even after account closure).
4. Right to Restrict Processing: You may request that ccc66 restrict the processing of your data in certain circumstances — for example, while a data accuracy dispute is being resolved, or while an erasure request is being assessed.
5. Right to Data Portability: Where technically feasible, you may request that a copy of your personal data be provided in a machine-readable format so that it can be transferred to another service provider.
6. Right to Object to Marketing: You may withdraw your consent to receive promotional communications from ccc66 at any time by contacting support. Withdrawal of marketing consent does not affect the processing of data necessary for account management or legal compliance.
7. Right to Lodge a Complaint: If you believe that ccc66 has not handled your personal data in accordance with this Privacy Policy, you have the right to raise a formal complaint with ccc66's data protection contact at [email protected]. We take all complaints seriously and will investigate and respond promptly.

Section 8

Updates to This Policy

ccc66 may update this Privacy Policy from time to time to reflect changes in our data practices, new platform features, changes in applicable law, or improvements to our security procedures. The date of the most recent revision is always displayed prominently at the top of this page.

When a material change is made to this Privacy Policy — meaning a change that significantly affects how we collect, use, or share your personal data — ccc66 will notify registered players via the mobile number or email address associated with their account, where reasonably practicable, prior to the change taking effect. For minor clarificatory amendments, no prior notification will be issued; the updated policy will simply be published on this page with an updated revision date.

Your continued use of the ccc66 platform after an updated Privacy Policy has been published constitutes your acceptance of the revised terms. If you do not agree with any change to this policy, you should stop using the platform and contact our support team to request account closure and data deletion (subject to mandatory retention periods as described in Section 5 above).