ct666 Privacy Policy — How We Protect and Handle Your Personal Data

This Privacy Policy applies to all personal data collected and processed by ct666 in connection with the operation of the ct666.io website and all associated gaming, betting, and account management services offered to players in Bangladesh and other jurisdictions where ct666 operates.

By registering an account with ct666, by accessing or using ct666.io, or by providing us with any personal information in any other context, you confirm that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

This Privacy Policy should be read alongside the ct666 Terms & Conditions and the Responsible Gaming policy, both of which are incorporated by reference. Where there is a conflict between this Privacy Policy and those documents, this Privacy Policy shall govern with respect to the collection and handling of personal data.

ct666 is committed to handling all player data with the highest standards of care, transparency, and security. If you have any questions about how your personal data is used, please contact us using the details provided in Section 15 of this policy.

For the purposes of this Privacy Policy, ct666 acts as the data controller in respect of all personal data collected and processed through the ct666.io platform. As data controller, ct666 determines the purposes for which and the manner in which any personal data is, or will be, processed.

All data processing activities carried out by ct666 are conducted in accordance with applicable data protection legislation. ct666 maintains internal data protection policies, staff training programmes, and technical controls to ensure ongoing compliance with these obligations.

The data controller contact for privacy-related enquiries is the ct666 Data Protection Team, reachable at: [email protected]. Please mark all privacy-related correspondence with the subject line "Privacy Enquiry" to ensure prompt routing to the appropriate team member.

ct666 collects several categories of personal data in connection with the provision of its betting and gaming services. The categories of data we may collect include, but are not limited to, the following:

3.1 Identity and Registration Data

• Full legal name as it appears on official government-issued identity documents.
• Date of birth (used to verify that the player meets the 21-year minimum age requirement).
• National Identity Card (NID) number, passport number, or other government-issued document identifier where required for KYC verification.
• Username chosen at account creation.
• Gender (optional, where provided voluntarily).

3.2 Contact Data

• Email address used as the primary account contact and communication channel.
• Mobile phone number, used for two-factor authentication (2FA) and account security alerts.
• Residential address in Bangladesh, including district, division, and postcode where applicable.

3.3 Financial and Payment Data

• Mobile financial service account details (bKash, Nagad, Rocket, Upay) used to process deposits and withdrawals. We record account numbers but do not store full payment credentials on our servers.
• Bank account details (BRAC Bank, City Bank, Dutch-Bangla Bank, and others) where bank transfer payment methods are used.
• Transaction records including deposit amounts in BDT (৳), withdrawal requests, and bonus credit histories.
• Source of funds documentation where required by enhanced due diligence procedures.

3.4 Technical and Device Data

• IP address at the time of registration and during each session on ct666.io.
• Device type, operating system, and browser information collected automatically via standard web logging.
• Cookies and similar tracking technologies as described in Section 10 of this policy.
• Geolocation data at a country and city level, derived from IP address, used for fraud prevention and jurisdictional compliance.

3.5 Gaming and Behavioural Data

• Betting history, including markets wagered on, stake amounts, outcomes, and net win/loss records.
• Game session logs for casino and slot games, including games played, session duration, and stakes.
• Responsible gaming settings configured by the player, including deposit limits, session time-outs, and self-exclusion records.
• Bonus usage history, including bonuses claimed, wagering progress, and bonus expiry records.

3.6 Communications Data

• Records of all communications between the player and the ct666 customer support team, including live chat transcripts and email correspondence.
• Responses to surveys or feedback requests where the player chooses to participate.
• Marketing preference data, including whether the player has opted in or out of promotional communications.

ct666 collects personal data through several distinct channels depending on the nature of the interaction:

• Direct collection at registration: When you create a ct666 account, you provide your name, date of birth, email address, phone number, and residential address directly through the registration form on ct666.io.
• KYC document submission: When you submit identity documents and proof of payment method ownership as part of the mandatory KYC verification process, those documents and the personal data contained in them are collected and stored securely.
• Payment processing: Transaction data is collected each time you deposit funds to or request a withdrawal from your ct666 account via bKash, Nagad, Rocket, Upay, or direct bank transfer.
• Platform usage: Technical and behavioural data is collected automatically through standard web server logs, analytics tools, and cookies as you interact with ct666.io during your session.
• Customer support interactions: When you contact ct666's support team via live chat or email, those communications are recorded and stored as part of your account record.
• Third-party verification services: ct666 may receive supplementary identity or address verification data from trusted third-party KYC providers where additional verification steps are required.

ct666 processes personal data only for specified, explicit, and legitimate purposes. The table below summarises the primary processing purposes and the data categories used for each:

ct666 does not use personal data for automated decision-making that produces significant legal effects on players without human review. Where automated systems flag an account for review (for example, due to suspected fraud or AML triggers), a qualified member of the ct666 compliance team will review the flag before any action is taken that materially affects the player's account.

ct666 processes your personal data under one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing is necessary to fulfil the contract between ct666 and the player — specifically, to administer the player's account, process transactions, and deliver the gaming services that the player has registered to use.
• Legal obligation: Processing is necessary for ct666 to comply with applicable legal requirements, including KYC and AML obligations, data retention requirements, and cooperation with lawful law enforcement requests.
• Legitimate interests: Processing is necessary for ct666's legitimate interests in operating a secure, fair, and commercially viable gaming platform, including fraud prevention, responsible gaming monitoring, and platform security improvements, where those interests are not overridden by the player's privacy rights.
• Consent: For certain optional processing activities, such as sending personalised promotional communications and setting non-essential marketing cookies, ct666 relies on the player's freely given, specific, and informed consent. Players may withdraw this consent at any time by updating their account communication preferences or by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

ct666 may share your personal data with the following categories of third parties in the circumstances described:

7.1 Payment Processors

ct666 shares the minimum necessary account and transaction data with payment service providers — including bKash, Nagad, Rocket (Dutch-Bangla Bank), Upay (UCB), BRAC Bank, and City Bank — solely to process your deposits and withdrawals. These providers operate under their own privacy and data security policies and are bound by applicable financial services data protection requirements.

7.2 KYC and Identity Verification Providers

ct666 may engage third-party identity verification services to assist with the KYC process. These providers receive only the personal data required to complete verification and are contractually bound to use that data exclusively for the verification purpose and to maintain appropriate security standards.

7.3 Game Content Providers

ct666's platform hosts games developed and operated by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you launch a game from one of these providers, limited technical session data may be shared with the provider's systems to enable gameplay. These providers operate their own privacy and data security standards as part of their licensing obligations.

7.4 Fraud Prevention and AML Services

ct666 may share relevant account, transaction, and device data with specialist fraud prevention and AML screening services. The processing of data by these services is governed by their own data protection policies, and data is shared only to the extent required to complete the relevant compliance screening.

7.5 Legal and Regulatory Authorities

ct666 will disclose personal data to law enforcement agencies, courts, regulators, or other competent authorities when required to do so by applicable law, court order, or lawful regulatory demand. ct666 will, where legally permissible and practically feasible, notify affected players of such disclosures.

7.6 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of all or part of ct666's business, personal data held by ct666 may be transferred to the acquiring or successor entity as part of that transaction, subject to appropriate confidentiality obligations and data protection safeguards.

ct666 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention principles apply:

• Active accounts: Personal data associated with an active ct666 account is retained for the full duration of the account relationship.
• Closed accounts: Following account closure for any reason, ct666 retains core identity, KYC, and transaction records for a minimum period of five years to comply with AML and record-keeping obligations. This period may be extended where an account is under investigation or subject to a legal hold.
• Marketing data: Where a player has opted in to marketing communications, marketing preference data is retained until the player withdraws consent or requests deletion, subject to any mandatory retention periods.
• Self-exclusion records: Records of player self-exclusion and responsible gaming interventions are retained for a minimum of five years after the exclusion period ends to prevent re-registration of excluded players.
• Support communications: Customer support records are retained for three years following the closure of the relevant support interaction, unless linked to a longer-running compliance matter.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with ct666's internal data destruction procedures, unless ongoing legal proceedings, regulatory investigations, or other exceptional circumstances require continued retention.

ct666 implements a comprehensive range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• End-to-end 256-bit SSL/TLS encryption for all data in transit between player devices and ct666's servers.
• AES-256 encryption for sensitive personal data and financial records stored in ct666's databases at rest.
• Multi-factor authentication requirements for all ct666 administrative systems and internal data access.
• Role-based access controls ensuring that ct666 staff can only access personal data that is strictly necessary for their specific job function.
• Regular automated vulnerability scanning and periodic third-party penetration testing of ct666.io and its supporting infrastructure.
• Comprehensive audit logging of all access to and modifications of player personal data, retained for security review purposes.
• Documented incident response procedures for detecting, investigating, and reporting personal data breaches in accordance with applicable legal obligations.
• Staff data protection training conducted on a regular basis to maintain awareness of privacy obligations and security best practices.

While ct666 takes all reasonable steps to protect your personal data, no internet-based service can guarantee absolute security. Players are encouraged to use a strong, unique password for their ct666 account, to enable two-factor authentication (2FA) from their account dashboard, and to contact ct666 support immediately if they suspect that their account credentials have been compromised.

ct666 uses cookies and similar technologies on ct666.io to enable core platform functionality, analyse platform performance, and, where you have consented, to deliver personalised content and promotions. The categories of cookies used on ct666.io are described below:

You can manage your cookie preferences at any time through your browser settings or through the ct666 platform preferences panel. Please note that disabling strictly necessary cookies will prevent core platform functionality from operating correctly. Disabling performance or functional cookies will not affect your ability to use the platform but may result in a less personalised experience.

As a data subject whose personal information is processed by ct666, you hold a number of rights in relation to your personal data. ct666 is committed to facilitating the exercise of these rights promptly and without undue burden. Your rights are summarised below:

To exercise any of the above rights, please submit a written request to ct666's data protection team at [email protected] with the subject line "Data Rights Request". ct666 will acknowledge your request within 5 business days and aim to fulfil it within 30 days. In complex cases, this period may be extended by a further 30 days, in which case ct666 will notify you of the extension and the reason for it.

ct666 will not charge a fee for the reasonable exercise of data rights. Where requests are manifestly unfounded or excessive, particularly where they are repetitive in nature, ct666 reserves the right to charge a reasonable administrative fee or decline to act on the request.

ct666 implements mandatory age verification checks as part of the KYC process for all registered accounts. Where ct666 has reasonable grounds to believe that a registered player may be under the age of 21, ct666 will immediately suspend the account pending verification of the player's date of birth through documentary evidence. If the player is confirmed to be under 21, the account will be permanently closed, all balances will be forfeited, and all personal data collected in relation to that account will be securely deleted unless retention is required by law.

If you are aware of a minor accessing or attempting to access ct666.io, please notify the ct666 support team immediately at [email protected]. ct666 will investigate all such reports promptly and take appropriate action.

ct666 also strongly recommends that all adults sharing devices or internet connections with minors make use of parental control software and internet filtering tools to restrict access to age-restricted gambling platforms. ct666 accepts no liability for minors accessing the platform through the use of another person's registered account credentials.

ct666 operates globally and may process or store personal data on servers located outside of Bangladesh. In particular, ct666 may transfer personal data to third-party service providers — including KYC verification services, fraud screening tools, and game content infrastructure providers — whose systems are hosted in other countries.

Where personal data is transferred outside Bangladesh to a jurisdiction that does not provide an equivalent level of data protection, ct666 ensures that appropriate safeguards are in place to protect the transferred data. These safeguards include contractual data protection clauses agreed with each recipient organisation, which impose equivalent data protection obligations to those that apply within Bangladesh.

By using ct666.io and providing personal data to ct666, you acknowledge that your data may be transferred to and processed in countries outside Bangladesh as described in this section. ct666 will always take steps to ensure that any such transfers are carried out lawfully and securely.

ct666 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, ct666's data processing practices, or the services offered on the ct666.io platform. All updates will be published on this page with a revised "Last Updated" date at the top of the policy.

Where changes are material — meaning they significantly affect the way in which ct666 processes your personal data or the rights available to you — ct666 will notify registered players via the email address on their account in advance of the changes taking effect, where practicable.

Your continued use of ct666.io following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the revised Privacy Policy, you must cease using ct666.io and may request account closure by contacting ct666 support. ct666 encourages all players to review this Privacy Policy periodically to stay informed of how their personal data is being handled.

If you have any questions, concerns, or complaints about this Privacy Policy, about the way ct666 handles your personal data, or if you wish to exercise any of your data rights as described in Section 11, please contact the ct666 Data Protection Team using the details below:

ct666 takes all privacy-related enquiries seriously and will respond to all legitimate requests in a timely and thorough manner. Where a complaint relates to the processing of personal data and you are not satisfied with ct666's response, you may have the right to escalate the matter to the relevant data protection authority in your jurisdiction.

All privacy correspondence should be directed to the email address above. Please do not send sensitive personal documents (such as copies of identity cards or bank statements) unless specifically requested by a ct666 team member in the context of a verified support or compliance interaction.