ce66 Privacy Policy

Introduction

This Privacy Policy ("Policy") describes how ce66 ("we", "us", "our") collects, uses, stores, and protects the personal information of individuals ("you", "Player", "User") who register for or access the ce66 platform at https://ce66.io and any associated mobile-optimised interface (collectively, the "Platform").

ce66 is committed to handling personal data responsibly and in accordance with applicable data protection principles. This Policy applies to all personal data we hold about current and former registered players, prospective players who have made an incomplete registration, and visitors to the Platform.

This Policy should be read alongside the ce66 Terms & Conditions and Responsible Gaming Policy, each of which forms part of the overall framework governing your relationship with ce66.

If you have any questions about this Policy or wish to exercise any of your data rights, please contact our support team at [email protected]. We are committed to responding to all data-related enquiries promptly and transparently.

Data We Collect

ce66 collects several categories of personal data in the course of operating the Platform and delivering our services to players in Bangladesh. The categories and specific data points collected are described below.

2.1 Registration and Identity Data

• Full legal name as it appears on your government-issued identity document.
• Date of birth (used to verify that you meet the 21+ age requirement).
• Residential address in Bangladesh (street, city, district, postcode).
• Contact email address and mobile phone number.
• Username and hashed account password.
• Gender (optional, where provided during registration).

2.2 Identity Verification (KYC) Data

• Copies of government-issued photo identity documents (National ID card, passport, or driver's licence).
• Proof of residential address documents (utility bills, bank statements, government correspondence).
• Selfie photographs taken for liveness verification purposes.
• Payment method ownership verification screenshots (e.g., bKash or Nagad account number confirmation).

2.3 Financial and Transaction Data

• Deposit transaction records including amounts in Bangladeshi Taka (৳), payment method used, and timestamps.
• Withdrawal request records including amounts, destination payment method, and processing status.
• Account balance history and bonus credit/debit records.
• Payment method identifiers (mobile number associated with bKash, Nagad, Rocket, or Upay accounts — full account credentials are never stored by ce66).

2.4 Betting and Gaming Activity Data

• Records of all bets placed, games played, stakes wagered, and outcomes received on the Platform.
• Game session duration, frequency of play, and preferred game categories.
• Bonus usage history, wagering requirement progress, and promotional participation records.
• Sports betting market selections, live bet placements, and in-play activity.

2.5 Technical and Device Data

• IP address at the time of login, registration, and each session.
• Device type, operating system version, and browser type.
• Approximate geolocation derived from IP address (country and city level only — no GPS-level tracking).
• Session timestamps, login history, and activity logs.
• Cookie identifiers and local storage data (see Section 7 for full cookie details).

2.6 Communications Data

• Content of support messages, chat logs, and emails exchanged with the ce66 support team.
• Records of promotional communications sent to you and your opt-in/opt-out preferences.
• Dispute and complaint records, including any supporting evidence submitted.

How We Collect Your Data

ce66 collects your personal data through the following channels and mechanisms:

3.1 Directly From You

• When you complete the account registration form on the Platform.
• When you submit KYC verification documents in response to a ce66 compliance request.
• When you initiate a deposit, withdrawal, or other financial transaction on the Platform.
• When you contact the ce66 support team via email or live chat.
• When you complete surveys, feedback forms, or promotional opt-in forms on the Platform.
• When you update your account profile or change your account preferences.

3.2 Automatically Through Platform Use

• Through server-side logging of IP addresses, session timestamps, and platform activity as you navigate and use the Platform.
• Through first-party cookies and local storage mechanisms that help the Platform function correctly and remember your preferences.
• Through analytics tools that monitor aggregate platform usage patterns to support technical performance improvements.
• Through anti-fraud and security monitoring systems that track login patterns and unusual account activity.

3.3 From Third-Party Sources

• From payment service providers (bKash, Nagad, Rocket, Upay) who confirm the status and outcome of payment transactions.
• From identity verification service providers who assist with automated document and liveness checks during KYC.
• From fraud prevention and anti-money-laundering screening databases that may be consulted during the compliance review process.

How We Use Your Data

ce66 processes your personal data for the following specific and documented purposes:

ce66 does not use automated decision-making or profiling processes that produce legal or similarly significant effects on players, except where required for fraud prevention or responsible gaming intervention, in which case you retain the right to request human review of any automated decision.

Legal Basis for Processing

ce66 processes your personal data on the following legal bases depending on the nature of the processing activity:

• Contract performance: Processing is necessary to create and manage your account, process transactions, and deliver the betting and gaming services you have requested.
• Legal obligation: Processing is required to comply with identity verification, anti-money-laundering, responsible gaming, and record-keeping obligations.
• Legitimate interests: Processing is carried out to prevent fraud, protect the integrity of the Platform, conduct security monitoring, and improve platform performance — provided these interests are not overridden by your privacy rights.
• Consent: Where ce66 processes data for optional purposes such as marketing communications, this is done only with your explicit, revocable consent. You may withdraw consent at any time by updating your communication preferences in your account dashboard or by contacting [email protected].

Data Sharing and Disclosure

ce66 treats your personal data with strict confidentiality. We do not sell, rent, or commercially share your personal data with third parties. However, we may share your data with the following categories of recipient where necessary and proportionate:

6.1 Payment Service Providers

Transaction data is shared with bKash, Nagad, Rocket, Upay, and other payment partners as necessary to process your deposits and withdrawals. These providers act as independent data controllers for their own payment systems and are bound by their own privacy policies.

6.2 Identity Verification Partners

KYC documents and identity data may be shared with third-party identity verification service providers engaged by ce66 to assist with automated document authentication and liveness checks. These providers process data solely on ce66's instructions.

6.3 Fraud Prevention and Compliance Databases

Where required by our fraud prevention and anti-money-laundering obligations, ce66 may check your details against industry-standard fraud and sanctions screening databases. Information may be recorded and retained by such databases as part of the shared fraud prevention effort across the gaming industry.

6.4 Game Content Providers

Game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, and Spribe may receive limited session and account data necessary to launch and authenticate your game sessions. This data is limited to the minimum required for game functionality and does not include full identity data.

6.5 Legal and Regulatory Authorities

ce66 will disclose personal data to law enforcement agencies, regulatory authorities, courts, or other public bodies when required to do so by applicable law, court order, or regulatory direction. We will endeavour to notify you of such disclosures where legally permitted to do so.

Cookies and Tracking Technologies

ce66 uses cookies and similar local storage technologies to make the Platform function correctly, to remember your preferences, and to help us understand how the Platform is used in aggregate. We do not use third-party advertising cookies or behavioural tracking cookies.

Types of cookies used by ce66:

• Strictly Necessary Cookies: Essential for core Platform functionality including maintaining your login session, preventing cross-site request forgery, and processing transactions. These cannot be disabled without breaking Platform functionality.
• Preference Cookies: Used to remember your account settings and preferences such as preferred language, display settings, and notification preferences. These improve your experience but are not essential.
• Analytics Cookies: Used to collect anonymised, aggregated data about how players navigate and use the Platform, helping ce66 identify areas for improvement. These do not identify you personally.
• Security Cookies: Used to detect and prevent fraudulent activity and suspicious login attempts by comparing session identifiers across requests.

You may configure your browser to refuse or delete cookies. Note that disabling strictly necessary cookies may prevent you from logging in or using certain Platform features. ce66 does not respond to browser "Do Not Track" signals at present, as there is no industry-standard interpretation of this signal.

Session cookies are deleted when you close your browser. Persistent cookies are stored for no longer than 12 months from the date of your last visit to the Platform, after which they expire automatically.

Data Retention

ce66 retains personal data only for as long as necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

After the applicable retention period has elapsed, personal data is securely deleted or anonymised so that it can no longer be associated with you as an individual. Anonymised data may be retained indefinitely for aggregate statistical analysis.

Data Security

ce66 takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, alteration, disclosure, or destruction. Our security measures include:

• Encryption in transit: All data transmitted between your device and the ce66 Platform is encrypted using TLS 1.2 or higher with 256-bit SSL certificates.
• Encryption at rest: Sensitive personal data stored in ce66 databases, including KYC documents and financial records, is encrypted at rest using AES-256 encryption.
• Password security: Account passwords are never stored in plaintext. ce66 uses industry-standard cryptographic hashing with salt to store password credentials.
• Access controls: Access to personal data within ce66's systems is restricted to employees and contractors who require it for their specific role and is governed by role-based access control policies.
• Security monitoring: ce66 operates continuous monitoring of Platform infrastructure for anomalous activity, intrusion attempts, and data breach indicators.
• Regular security assessments: The Platform undergoes regular security reviews and vulnerability assessments to identify and remediate security risks proactively.
• Incident response: ce66 maintains a documented data breach response procedure. In the event of a breach that is likely to result in high risk to your rights, we will notify affected players without undue delay.

Your Data Rights

As a ce66 player, you have the following rights with respect to your personal data. To exercise any of these rights, please submit a written request to [email protected] with sufficient information to verify your identity. ce66 will respond within 30 days of receiving a valid request.

• Right of Access: You have the right to request a copy of the personal data ce66 holds about you, along with information about how it is being used.
• Right to Rectification: You have the right to request correction of any personal data that is inaccurate or incomplete. You may also update many of your account details directly in the account settings area of the Platform.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis applies. This right is subject to our legal data retention obligations — we cannot delete data we are required to retain by law.
• Right to Restriction: You have the right to request that ce66 restrict the processing of your personal data in certain circumstances, such as while a dispute about its accuracy is being resolved.
• Right to Data Portability: Where processing is based on your consent or on contract performance, you have the right to receive the personal data you have provided to ce66 in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing of your personal data carried out on the basis of ce66's legitimate interests, and to processing for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time by contacting [email protected] or updating your communication preferences in the account dashboard. Withdrawal does not affect processing that has already taken place.

Children and Minors

If you believe that a person under the age of 21 has registered an account with ce66 or that ce66 may have inadvertently collected personal data from a minor, please contact us immediately at [email protected]. We will promptly investigate and take appropriate action, including deleting all data associated with the account.

Parents and guardians are encouraged to make use of internet filtering and parental control software to prevent minors from accessing online gambling platforms. ce66 supports industry-wide efforts to prevent underage gambling and takes this obligation extremely seriously.

Third-Party Links

The ce66 Platform may on occasion contain references or links to the websites of our game content partners and payment providers. Once you navigate away from the ce66 Platform to any third-party website, this Privacy Policy no longer applies. ce66 has no control over, and accepts no responsibility for, the privacy practices or content of third-party websites.

We recommend that you review the privacy policy of any third-party website you visit before providing any personal information. ce66 does not endorse the data practices of any third party.

Changes to This Privacy Policy

ce66 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform functionality. When we make material changes to this Policy, we will publish the updated version on this page with a revised effective date and, where practicable, notify registered players by email.

Your continued use of the ce66 Platform after the publication of an updated Privacy Policy constitutes your acknowledgement of the changes and your agreement to the updated terms. We recommend reviewing this page periodically. The most current version of this Policy is always accessible at https://ce66.io/privacy-policy.

If you do not agree with any changes to this Privacy Policy, you must discontinue use of the Platform and may request account closure by contacting [email protected].

Contact and Data Requests

For all privacy-related enquiries, data subject access requests, consent withdrawals, or complaints regarding ce66's data practices, please contact our support team using the details below. All communications regarding data protection should be clearly marked "Privacy / Data Request" in the subject line.

ce66 takes all privacy complaints seriously. If you submit a complaint and are not satisfied with our response, you retain the right to escalate the matter to the relevant data protection authority in your jurisdiction.

Players in Bangladesh may also contact us in writing. Postal correspondence should be directed to the ce66 support email address noted above for routing to the appropriate team. ce66 does not accept walk-in data requests and all formal data rights submissions must be made in writing via email to ensure a proper audit trail.