cu666 Privacy Policy

1 Introduction

cu666 ("we", "us", "our") is committed to safeguarding the privacy and personal data of every player who uses the cu666 platform ("the Platform") available at cu666.io. This Privacy Policy ("Policy") sets out in plain English how we collect, use, store, share, and protect your personal information in connection with your use of our online casino, sports betting, and related gaming services.

This Policy is designed to help you make informed decisions about your data. We believe transparency is the foundation of a trustworthy gaming relationship, and we hold ourselves to the highest standards of data handling — particularly for our valued player community in Bangladesh.

This Policy should be read in conjunction with cu666's Terms & Conditions and Responsible Gaming Policy, both of which are available on the cu666 Platform and are incorporated by reference into this Policy. By registering an account, logging in, or otherwise using the Platform, you confirm that you have read and understood this Privacy Policy and consent to the data practices described herein.

If you do not agree with any part of this Policy, you should discontinue use of the Platform and may request account closure by contacting our support team at [email protected].

2 Data We Collect

cu666 collects personal data in two primary ways: information you provide directly to us, and information we collect automatically when you use the Platform. The categories of personal data we collect are described below.

2.1 Data You Provide Directly

• Registration data: Full legal name, date of birth, gender, residential address (including city — e.g., Dhaka, Chittagong, Sylhet, Khulna), email address, and mobile phone number.
• Identity verification (KYC) documents: Government-issued photo ID (National ID Card, passport, or driver's licence), proof of residential address (utility bill, bank statement), and in some cases a selfie photograph for facial verification purposes.
• Financial data: bKash or Nagad mobile wallet numbers, Rocket or Upay account references, Visa or Mastercard details (card number is not stored in full — only the last four digits and expiry date are retained after tokenisation), transaction history, deposit amounts, and withdrawal requests.
• Communication data: The content of any messages you send to our support team via live chat, email at [email protected], or any other support channel, including complaint records.
• Responsible gaming data: Deposit limits, session time limits, cool-off periods, and self-exclusion requests submitted through your account settings or via support.

2.2 Data Collected Automatically

• Device and browser data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage and behavioural data: Pages visited on the Platform, game sessions played, bet histories, wager amounts, session duration, navigation paths, click patterns, and feature interactions.
• Geolocation data: Approximate location derived from your IP address. We do not collect precise GPS coordinates unless you explicitly grant that permission.
• Cookie and tracking data: First-party cookies, session tokens, and analytics identifiers. See Section 6 for full cookie details.

2.3 Data Collected from Third Parties

• Identity verification partners may share the results of document authentication checks with cu666.
• Payment processors (including bKash, Nagad, and card networks) may share transaction confirmation data and fraud signals.
• Anti-fraud and anti-money laundering (AML) service providers may share risk signals and watchlist screening results.

The following table summarises the main categories of personal data we hold and the primary reason we collect each category:

3 How We Use Your Data

cu666 uses the personal data we collect for the following purposes:

• Account management: Creating, maintaining, and securing your cu666 account; authenticating your identity each time you log in; enabling password resets and account recovery.
• Service delivery: Processing deposits and withdrawals in Bangladeshi Taka (BDT) via bKash, Nagad, Rocket, Upay, Visa, and Mastercard; crediting winnings to your account; resolving bet disputes and game-related queries.
• Legal and regulatory compliance: Fulfilling Know Your Customer (KYC) obligations; conducting anti-money laundering (AML) screening; complying with applicable data retention requirements; reporting to authorities where legally mandated.
• Fraud prevention and security: Detecting and preventing unauthorised account access, multi-accounting, bonus abuse, payment fraud, and other prohibited conduct as defined in cu666's Terms & Conditions.
• Responsible gaming: Monitoring gaming behaviour for signs of problem gambling; enforcing deposit limits, cool-off periods, and self-exclusion requests; fulfilling our duty of care to players under our Responsible Gaming Policy.
• Customer support: Responding to your questions, complaints, and account-related requests via live chat and email at [email protected]; maintaining a record of interactions for quality assurance purposes.
• Platform improvement: Analysing aggregated, anonymised usage data to improve game performance, page load speeds, navigation design, and overall Platform reliability for Bangladesh-based players.
• Personalisation: Customising the Platform experience based on your gaming preferences, preferred payment methods, and language settings — always in English.
• Marketing communications: Sending promotional offers, bonus announcements, and seasonal promotions (e.g., Eid, Pohela Boishakh, BPL season specials) by email or in-Platform notification, where you have opted in to receive such communications. You may opt out at any time by contacting [email protected].

cu666 does not use your personal data to make fully automated decisions that produce legal or similarly significant effects on you without human review.

4 Legal Basis for Processing

cu666 processes your personal data on one or more of the following legal bases, depending on the purpose of the processing activity:

• Contractual necessity: Processing required to perform our contract with you — i.e., to operate your cu666 account, process transactions, and deliver the gaming services you have requested. Without this processing, we cannot provide the Platform to you.
• Legal obligation: Processing required to comply with applicable legal obligations, including KYC/AML regulations, data retention requirements, and any lawful requests from competent authorities.
• Legitimate interests: Processing carried out to pursue cu666's legitimate business interests, where those interests are not overridden by your data protection rights. This includes fraud prevention, Platform security, internal analytics, and responsible gaming monitoring. We carry out a balancing test before relying on legitimate interests as a processing basis.
• Consent: Where cu666 relies on your freely given, informed, and specific consent — primarily for optional marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing that took place before withdrawal.

5 Data Sharing & Disclosure

cu666 does not sell your personal data to third parties for their own marketing purposes. We share your data only in the circumstances described below, and only to the extent necessary for the stated purpose:

• Payment processors: We share necessary transaction data with bKash, Nagad, Rocket, Upay, Visa, and Mastercard to process your deposits and withdrawals securely. Each payment partner operates under its own privacy policy and is bound by applicable financial data protection regulations.
• Identity verification providers: We share KYC document data with accredited identity verification partners to authenticate your identity and conduct age verification. These partners are contractually prohibited from using your data for any purpose other than the verification service they provide to cu666.
• AML and fraud prevention services: We may share limited personal data (name, date of birth, transaction patterns) with anti-money laundering and fraud screening providers to comply with legal obligations and protect the Platform's integrity.
• Game software providers: Certain game providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may receive session-level data (player ID, wager amounts, game outcomes) for the purpose of delivering games and resolving technical disputes. These providers operate under contractual data processing agreements with cu666.
• Legal and regulatory authorities: cu666 will disclose personal data to law enforcement, regulatory bodies, or courts if required to do so by applicable law, court order, or regulatory demand.
• Business transfers: In the event of a merger, acquisition, or sale of cu666's business or assets, your personal data may be transferred to the successor entity. We will notify registered players via email before any such transfer takes place and will ensure the receiving entity honours the commitments made in this Policy.
• Professional advisors: We may share data with lawyers, auditors, and insurers acting in a professional capacity, subject to confidentiality obligations.

6 Cookies & Tracking Technologies

cu666 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain session security, and gather analytics data that helps us improve the gaming experience for Bangladesh-based players. The following cookie categories are in use on the cu666 Platform:

• Strictly necessary cookies: These cookies are essential for the Platform to function. They manage your login session, maintain your account authentication state, and enable secure financial transactions. These cookies cannot be disabled without breaking core Platform functionality.
• Functional cookies: These cookies remember your preferences — such as your preferred game categories, language setting (English), and notification preferences — so you do not need to re-enter them each session.
• Analytics cookies: We use first-party analytics cookies to collect aggregated, anonymised data about how players navigate the Platform — which games are most popular, which pages see the most traffic, and where players encounter friction. This data is used solely to improve the Platform and is never used to identify individual players.
• Marketing and personalisation cookies: Where you have provided consent, these cookies allow cu666 to personalise promotional content displayed within the Platform, such as showing cricket betting promotions during the BPL or T20 season to players who frequently use the cricket betting section.

You can manage your cookie preferences at any time through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in to your cu666 account. Disabling analytics or marketing cookies will not affect your ability to use the Platform's core features.

cu666 does not use third-party advertising cookies or permit external ad networks to track your behaviour across other websites via the cu666 Platform.

7 Data Retention

cu666 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Our retention practices are summarised in the table in Section 2.3 above.

Key retention principles applied by cu666 include:

• Financial transaction records, including bKash, Nagad, Rocket, and card payment histories, are retained for a minimum of 7 years to satisfy AML compliance and audit requirements.
• Account registration and KYC identity documents are retained for the duration of the account relationship plus a minimum of 5 years after account closure, to allow for retrospective compliance review if required.
• Gaming and betting records are retained for 5 years from the date of the relevant event, primarily to support dispute resolution and fair play auditing.
• Customer support communications are retained for 3 years from the date of the last interaction in a support thread.
• When the applicable retention period expires, cu666 securely deletes or irreversibly anonymises the personal data in question. Anonymised data may be retained indefinitely for statistical and research purposes.

If you request account closure, cu666 will cease active processing of your data for marketing and personalisation purposes immediately. However, data subject to legal retention obligations will continue to be held in a restricted-access archive until the applicable retention period expires.

8 Your Data Rights

As a cu666 player, you have the following rights in relation to the personal data we hold about you. cu666 is committed to honouring these rights promptly and without undue burden on you:

• Right of access: You may request a copy of the personal data cu666 holds about you. We will provide this within 30 days of a verified request at no charge for the first request in any 12-month period.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You can update basic account details (email address, residential address) directly in your account settings at any time.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data. We will honour this request where the data is no longer necessary for the purposes it was collected, and where no overriding legal retention obligation applies. Note that financial and KYC data is subject to mandatory retention periods (see Section 7) and cannot be deleted on request during those periods.
• Right to restriction of processing: You may request that cu666 restrict processing of your data in certain circumstances — for example, while you contest the accuracy of data we hold, or while an objection is being considered.
• Right to data portability: You may request that we provide your personal data in a structured, machine-readable format so that it can be transferred to another service provider. This right applies to data you provided directly to us and that we process by automated means on the basis of your consent or contract.
• Right to object: You have the right to object to processing of your personal data where cu666 relies on legitimate interests as the legal basis. We will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to withdraw consent: Where cu666 relies on your consent for processing (e.g., marketing emails), you may withdraw consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of any processing that took place before withdrawal.

To exercise any of the above rights, please contact cu666's data protection team at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 5 business days and complete it within 30 calendar days (or notify you if an extension is required).

9 Data Security

cu666 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security programme includes the following measures:

• 256-bit SSL/TLS encryption: All data transmitted between your device and the cu666 Platform is encrypted using industry-standard 256-bit TLS encryption. This protects your login credentials, payment details, and personal information in transit.
• Encryption at rest: Sensitive personal data stored in cu666's databases — including KYC documents, payment references, and account credentials — is encrypted at rest using strong symmetric encryption.
• Access controls: Access to personal data is restricted on a strict need-to-know basis. cu666 staff members are granted the minimum level of data access required to perform their role, and all access is logged and regularly audited.
• Two-factor authentication (2FA): cu666 offers optional 2FA for player accounts. We strongly encourage all Bangladesh players to enable 2FA to provide an additional layer of protection against unauthorised account access.
• Intrusion detection and monitoring: cu666 operates 24/7 automated network monitoring and intrusion detection systems to identify and respond to potential security incidents in real time.
• Regular security assessments: cu666 conducts periodic vulnerability assessments and penetration testing of its Platform infrastructure to identify and remediate security weaknesses before they can be exploited.
• Incident response: In the event of a data security incident that affects your personal data, cu666 will notify you by email within 72 hours of becoming aware of the breach, consistent with our legal obligations, and will outline the nature of the incident and the steps we are taking to address it.

While cu666 maintains robust security practices, no online platform can guarantee absolute security. You play an important role in keeping your account secure by maintaining a strong, unique password, enabling 2FA, and notifying us immediately at [email protected] if you suspect any unauthorised access to your cu666 account.

10 Children's Privacy

If cu666 discovers or is notified that personal data has been submitted by a person under the age of 21, we will take the following steps immediately:

• Suspend the associated account pending investigation.
• Delete all personal data associated with the underage user from our active systems.
• Permanently close the account and refund any deposit balance to the original payment source where it is technically possible to do so.
• Document the incident in our compliance records.

Parents and guardians who believe a minor may have accessed or registered on the cu666 Platform are encouraged to contact us immediately at [email protected]. We take underage access seriously and will prioritise such reports. cu666 also recommends that parents and guardians use parental control software to restrict access to online gaming platforms on devices used by minors.

11 Third-Party Links

The cu666 Platform may contain references to third-party game providers, payment processors, or informational resources. While cu666 takes care to reference only reputable partners, we do not control the privacy practices of third-party platforms and this Privacy Policy does not apply to any external websites or services.

If you navigate away from the cu666 Platform to a third-party website — for example, to your bKash or Nagad mobile app to complete a payment — you are subject to that third party's own privacy policy. cu666 accepts no responsibility or liability for the privacy practices of any third-party platforms.

We recommend reviewing the privacy policies of any third-party services you use in connection with your cu666 account, particularly your chosen mobile financial service provider (bKash, Nagad, Rocket, or Upay).

12 Updates to This Policy

cu666 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, applicable regulations, or Platform functionality. When we make material changes to this Policy, we will notify registered players by email at the address associated with their cu666 account at least 7 days before the updated Policy takes effect.

Non-material changes — such as typographical corrections, clarifications that do not alter the substance of our data practices, or updated contact details — may take effect immediately without prior notice. The effective date displayed at the top of this page will always reflect the date of the most recent revision.

Your continued use of the cu666 Platform after an updated Privacy Policy takes effect constitutes your acceptance of the revised Policy. If you do not agree with any change, you must stop using the Platform and request account closure by emailing [email protected].

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data cu666 holds about you, please reach out to our dedicated data protection team using the details below. Our support team operates 24/7 in English, Bangladesh Standard Time (UTC+6).

• Email: [email protected]
• Subject line for data requests: "Data Rights Request" or "Privacy Policy Query"
• Support hours: 24/7 — Bangladesh Standard Time (UTC+6)
• Live chat: Available on every page of the cu666 Platform — average response time 2–5 minutes
• Postal correspondence: For formal written requests, please email us first and our support team will provide mailing instructions.

We are committed to resolving all privacy-related queries promptly, professionally, and transparently. If you submit a data rights request, we will acknowledge it within 5 business days and provide a full response within 30 calendar days. Where a request is complex or involves multiple data categories, we may extend this period by a further 30 days and will notify you of the extension and the reason for it.