c7666 Privacy Policy

1 Introduction

c7666 ("we", "us", "our") operates the online casino and sports betting platform available at https://c7666.io (the "Platform"). The Platform is primarily designed for adult players (aged 21 and above) located in Bangladesh. We are committed to protecting the privacy and personal data of every user who interacts with the Platform.

This Privacy Policy describes the categories of personal data we collect, the purposes for which that data is processed, the circumstances under which it may be shared with third parties, the security measures we apply to protect it, the period for which we retain it, and the rights you hold as a data subject.

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which form part of the overall legal framework governing your relationship with c7666. Where there is a conflict between this Privacy Policy and the Terms & Conditions on a data-related matter, this Privacy Policy takes precedence.

2 Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that identifies or could reasonably identify a living individual, either directly (e.g., full name, email address) or indirectly (e.g., IP address, device identifier).
• "Processing" means any operation or set of operations performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, transmission, or deletion.
• "Data Subject" means the identified or identifiable natural person to whom Personal Data relates — in most cases, a registered player or website visitor.
• "Controller" means the entity that determines the purposes and means of processing Personal Data — in this context, c7666.
• "Processor" means a third party that processes Personal Data on behalf of the Controller, for example a payment service provider or KYC verification partner.
• "Consent" means a freely given, specific, informed, and unambiguous indication of agreement by the Data Subject to the processing of their Personal Data for one or more stated purposes.
• "KYC" means Know Your Customer — the identity, age, and address verification procedure applied to all registered accounts on the Platform.

3 Personal Data We Collect

Depending on the nature of your interaction with the Platform, c7666 may collect the following categories of Personal Data:

3.1 Registration & Identity Data

• Full legal name
• Date of birth (for age verification — players must be 21 or older)
• Residential address (including division, district, and city in Bangladesh)
• Email address
• Mobile telephone number
• Username and encrypted password

3.2 KYC & Verification Documents

• Scanned or photographed copy of a valid government-issued identity document (National Identity Card, passport, or driving licence)
• Proof of address document (utility bill, bank statement, or similar, dated within 90 days)
• Selfie or live photo where required for biometric identity matching

3.3 Financial & Transaction Data

• Mobile money account identifiers (bKash, Nagad, Rocket, Upay wallet numbers — stored only in masked form)
• Bank account details where bank transfer is used (Dutch-Bangla Bank, BRAC Bank, City Bank, Sonali Bank, Islami Bank, or similar)
• Deposit and withdrawal transaction amounts, dates, and reference numbers in Bangladeshi Taka (৳)
• Transaction history and running account balance records

3.4 Technical & Usage Data

• IP address and approximate geolocation data derived from IP
• Device type, operating system, and browser version
• Session start and end timestamps (Bangladesh Standard Time, UTC+6)
• Pages visited, game titles launched, and bet histories
• Referral source (how you arrived at the Platform)

3.5 Communications Data

• Records of live chat conversations with c7666 support agents
• Email correspondence submitted to [email protected]
• Complaint and dispute records

3.6 Responsible Gaming Data

• Deposit limit settings, loss limit configurations, and session time reminder preferences
• Self-exclusion status and cooling-off period records
• Responsible gaming assessment responses where voluntarily submitted

4 How We Collect Your Data

c7666 collects Personal Data through the following channels and mechanisms:

4.1 Directly From You

The majority of Personal Data we hold is provided directly by you during the account registration process, KYC verification submission, deposit or withdrawal requests, support interactions, and when you voluntarily update your account profile settings.

4.2 Automatically Through Platform Use

When you access the Platform via a web browser or mobile device, our servers and analytics infrastructure automatically record certain Technical & Usage Data (see Section 3.4). This data is collected using server logs, session tokens, and first-party cookies. See Section 8 for full details on our cookie practices.

4.3 From Third-Party Processors

Where you use a third-party payment method (such as bKash, Nagad, Rocket, or Upay), the relevant payment service provider may share a transaction reference, masked wallet identifier, and transaction status with c7666 to confirm the completion of a deposit or withdrawal. c7666 does not receive your full mobile banking credentials from these providers.

Where we engage a third-party KYC verification partner to assist with identity document authentication, that partner may return a verification outcome (pass, fail, or refer) along with the data fields submitted for verification. The underlying document images are retained by the verification partner in accordance with their own privacy policy.

4.4 From Publicly Available Sources

In limited circumstances related to fraud prevention or legal compliance, c7666 may verify certain information against publicly available records or commercially licensed fraud-prevention databases. This is done solely to protect the integrity of the Platform and the security of all players' accounts.

5 Purposes of Processing

c7666 processes your Personal Data for the following specific, defined purposes. We do not process Personal Data for any purpose beyond those listed below without first informing you and, where required, obtaining your consent.

6 Legal Bases for Processing

c7666 processes your Personal Data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing that is required to perform the contract between you and c7666, including account management, payment processing, and the delivery of games and betting markets. Without this processing, c7666 cannot provide the Platform services you have requested.
• Legal Obligation: Processing that is required to comply with applicable legal or regulatory obligations, including anti-money laundering requirements, age verification obligations, fraud reporting duties, and record-keeping requirements.
• Legitimate Interests: Processing carried out in c7666's legitimate business interests, including platform security monitoring, fraud prevention, and anonymised analytics, where such interests are not overridden by your privacy rights.
• Consent: Processing carried out on the basis of your freely given, informed consent — primarily in the context of promotional communications. You may withdraw consent for this category of processing at any time by contacting support or updating your account notification preferences.

7 Sharing Your Personal Data

c7666 does not sell, rent, or trade your Personal Data to any third party for their own commercial purposes. However, we may share your data with the following categories of third parties in the specific circumstances described below:

7.1 Payment Service Providers

To process deposits and withdrawals in Bangladeshi Taka (৳), c7666 shares the minimum necessary transaction data with payment service providers including bKash, Nagad, Rocket, Upay, and partnered banking institutions (Dutch-Bangla Bank, BRAC Bank, City Bank, Sonali Bank, Islami Bank). These providers process your data solely for payment settlement purposes and are bound by their own privacy and data security obligations.

7.2 KYC & Identity Verification Partners

To fulfil our age verification and anti-fraud obligations, c7666 may share identity document data and personal details with third-party KYC verification service providers. These partners are contractually required to process your data only for verification purposes and to apply appropriate security standards.

7.3 Game Content Providers

Games on the c7666 Platform are supplied by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe. These providers operate game servers that receive game-round data (bet amounts, game outcomes) associated with your player session. Personal identifying data (such as your name or email) is not directly shared with game studios; only a pseudonymous player session identifier is transmitted for the purpose of game integrity and round result recording.

7.4 Legal & Regulatory Authorities

c7666 may disclose Personal Data to law enforcement agencies, financial intelligence units, or other competent authorities where we are legally required to do so, including in connection with anti-money laundering investigations, fraud inquiries, or court orders. Such disclosures will be made only to the extent required and as permitted by applicable law.

7.5 Professional Advisers

c7666 may share Personal Data with legal advisers, auditors, and compliance consultants on a strictly confidential basis where necessary to obtain professional advice, conduct audits, or manage legal proceedings. These advisers are bound by professional confidentiality obligations.

7.6 Business Transfers

In the event that c7666 or a material part of its business is acquired by, merged with, or transferred to another entity, your Personal Data may be transferred as part of that transaction. In such circumstances, c7666 will take reasonable steps to ensure that your data continues to be processed in a manner consistent with this Privacy Policy, and will notify registered players of any material change via email or platform notification.

8 Cookies & Tracking Technologies

8.1 What Are Cookies

Cookies are small text files placed on your device by a website server. They allow the website to recognise your browser across page loads, maintain session state, and collect certain usage information. c7666 uses first-party cookies only — we do not deploy third-party advertising cookies or cross-site tracking pixels.

8.2 Types of Cookies We Use

• Strictly Necessary Cookies: Required for the Platform to function correctly. These include session authentication cookies that keep you logged in while you navigate the Platform, CSRF protection tokens, and language preference cookies. These cannot be disabled without impairing Platform functionality.
• Performance & Analytics Cookies: Used to collect anonymised data about how players use the Platform — which pages are visited most frequently, where errors occur, and how navigation flows. This data helps us improve the Platform experience. No personally identifying data is transmitted via these cookies.
• Functional Cookies: Used to remember your preferences such as default game category view, responsible gaming reminder settings, and display preferences. These cookies improve your experience but are not essential.

8.3 Managing Cookies

You may control cookie settings through your web browser's built-in preferences panel. Most modern browsers allow you to block, delete, or restrict cookies on a per-site basis. Please note that disabling strictly necessary cookies will prevent you from logging in or using core Platform features. Blocking performance cookies will not affect your ability to play games or place bets, but it will reduce our ability to identify and fix Platform issues that may affect your experience.

9 Data Security

c7666 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include, but are not limited to:

• SSL/TLS encryption applied to all data in transit between your device and our servers.
• Encryption at rest for sensitive data fields including identity document references, KYC outcomes, and financial identifiers.
• Role-based access controls ensuring that c7666 personnel can only access Personal Data to the extent required for their specific job function.
• Regular security assessments and penetration testing of Platform infrastructure.
• Audit logging of all access to sensitive Personal Data records by internal staff.
• Secure password hashing using industry-standard algorithms — c7666 does not store plaintext passwords.
• Multi-factor authentication requirements for staff accounts with access to player data systems.

10 Data Retention

c7666 retains Personal Data for the period necessary to fulfil the purpose for which it was collected, subject to any longer retention period required or permitted by applicable law. The following general retention guidelines apply:

Upon expiry of the applicable retention period, Personal Data will be securely deleted or irreversibly anonymised. Where anonymisation is not feasible due to technical constraints, the data will be isolated from active systems and restricted from further processing pending secure deletion.

11 Your Data Rights

As a Data Subject, you hold the following rights in respect of Personal Data processed by c7666. To exercise any of these rights, please contact our support team in writing at [email protected]. We will acknowledge your request within 48 hours and aim to provide a substantive response within 30 calendar days.

• Right of Access: You have the right to request confirmation of whether c7666 holds Personal Data about you and, if so, to receive a copy of that data along with information about how and why it is processed.
• Right to Rectification: You have the right to request correction of any inaccurate Personal Data held by c7666. You may also update certain information directly through your account settings page without contacting support.
• Right to Erasure: In certain circumstances, you have the right to request deletion of your Personal Data. This right is subject to exceptions where retention is required for legal compliance, fraud prevention, or the resolution of outstanding disputes.
• Right to Restriction of Processing: You have the right to request that c7666 restrict the processing of your Personal Data in specific circumstances — for example, where you contest the accuracy of data or where processing is unlawful but you prefer restriction to deletion.
• Right to Data Portability: Where processing is based on consent or contractual necessity and carried out by automated means, you have the right to receive your Personal Data in a structured, commonly used, machine-readable format and to request its transmission to another controller where technically feasible.
• Right to Object: You have the right to object to the processing of your Personal Data where that processing is based on c7666's legitimate interests. You also have an unconditional right to object to processing for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.

12 Children & Minors

The c7666 Platform is strictly for use by individuals aged 21 years and above. c7666 does not knowingly collect, store, or process Personal Data belonging to any person under the age of 21. Age verification is applied as a mandatory step during the account registration and KYC process.

If c7666 becomes aware that Personal Data has been submitted by, or on behalf of, an individual under 21 years of age, that data will be deleted promptly and the associated account will be permanently closed. Any funds held in such an account will be handled in accordance with applicable law.

If you are a parent or guardian and you believe that a person under 21 for whom you are responsible has registered an account on c7666, please contact us immediately at [email protected] so that we can investigate and take the appropriate action without delay.

13 International Data Transfers

The c7666 Platform primarily serves players located in Bangladesh and processes most data within infrastructure serving the Bangladesh and South Asia region. However, certain service providers engaged by c7666 — including game content providers, KYC verification partners, and cloud infrastructure vendors — may operate servers or process data in jurisdictions outside Bangladesh.

Where Personal Data is transferred to processors operating outside Bangladesh, c7666 takes appropriate steps to ensure that the transfer is subject to adequate safeguards, including: contractual data processing agreements that impose equivalent data protection obligations on the recipient; use of service providers operating in jurisdictions with adequate data protection frameworks; and, where required, supplementary technical safeguards such as encryption and pseudonymisation.

By using the c7666 Platform, you acknowledge that your Personal Data may be transferred to and processed in countries other than Bangladesh. In all cases, c7666 remains responsible for ensuring that such transfers are conducted in a manner consistent with the protections described in this Privacy Policy.

14 Third-Party Links

The c7666 Platform does not contain links to external third-party websites for general browsing or advertising purposes. However, game content delivered through embedded game clients (supplied by providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe) is operated on infrastructure owned by those respective providers. Your interactions within game environments are subject to the data practices of the relevant game provider as well as those of c7666.

c7666 is not responsible for the privacy practices of third-party game studios or any other external entity. We encourage you to review the privacy policies of any third-party service provider whose services you access in connection with the Platform. Our responsibility extends only to the data that c7666 itself collects, controls, and processes as described in this Privacy Policy.

15 Updates to This Privacy Policy

c7666 reserves the right to amend, update, or replace this Privacy Policy at any time. The current version of the Privacy Policy is always available at https://c7666.io/privacy-policy. The "Effective Date" displayed at the top of this page reflects the date on which the most recent version came into force.

Where a proposed change is material — meaning it significantly alters the way in which c7666 collects, uses, or shares your Personal Data — we will provide advance notice to registered players via email to the address on file or via a prominent in-platform notification, no less than 14 calendar days before the change takes effect. Your continued use of the Platform following the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms.

If you do not agree with the revised Privacy Policy, you should discontinue use of the Platform and may request account closure by contacting support. Outstanding balances will be returned to you in accordance with the withdrawal procedures set out in the Terms & Conditions.

16 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way in which c7666 processes your Personal Data, please contact our support team using the details below. All privacy-related enquiries are handled by our dedicated compliance team and will receive a response within 48 hours during normal business hours (Bangladesh Standard Time, UTC+6).

• Email: [email protected]
• Live Chat: Available 24/7 via the Platform
• Subject Line (recommended): "Privacy Policy Enquiry – [Your Username]"

Please include your registered username and the email address associated with your c7666 account in any privacy-related communication so that we can locate your records and respond accurately. Do not include your full password or payment credentials in any support communication.