ccc66 Privacy Policy — How We Collect, Use, and Protect Your Personal Data

This Privacy Policy describes how ccc66 ("we", "us", "the platform") collects, processes, stores, shares, and protects the personal data of individuals ("you", "the player", "the user") who register for or use the ccc66 betting and gaming platform at ccc66.io and any associated mobile-optimised interfaces.

By registering on the ccc66 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. This Privacy Policy is incorporated by reference into the ccc66 Terms & Conditions and should be read alongside them.

ccc66 may update this Privacy Policy from time to time in response to changes in our data practices, legal obligations, or platform features. The current version is always available at ccc66.io/privacy-policy. Material changes will be communicated to registered players via notification on the platform or by email.

ccc66 collects personal data in several ways: directly from you when you register or interact with the platform, automatically through your use of the platform, and from third-party sources such as payment processors and identity verification services. The categories of personal data we collect include the following:

ccc66 does not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where strictly required by applicable law or identity verification regulations.

ccc66 uses the personal data it collects for the following specific purposes. We process data only for purposes that are consistent with the reason it was collected and in accordance with the legal bases described in Section 4.

• Account creation and management: To register your ccc66 account, authenticate your identity on login, and maintain your account preferences and settings.
• Identity verification (KYC): To verify that you meet the age requirement of 21 years or above and to confirm your identity in compliance with anti-money laundering obligations.
• Payment processing: To process your deposits and withdrawal requests via bKash, Nagad, Rocket, Upay, and other supported payment channels, and to maintain accurate transaction records.
• Platform operation: To deliver the betting, gaming, and live casino services available on the ccc66 platform and to ensure that games, bets, and account activity function correctly.
• Customer support: To respond to your queries, resolve disputes, and handle complaints submitted to the ccc66 support team.
• Responsible gaming: To monitor your account activity for signs of problematic gambling behaviour and to administer responsible gaming tools such as deposit limits, session reminders, and self-exclusion where requested.
• Fraud prevention and security: To detect and prevent fraudulent transactions, unauthorised account access, match manipulation, bonus abuse, and other prohibited conduct described in the ccc66 Terms & Conditions.
• Legal compliance: To fulfil our obligations under applicable anti-money laundering, counter-terrorism financing, and data protection laws, and to respond to lawful requests from regulatory or law enforcement bodies.
• Marketing communications (with consent): To send you promotional offers, bonus announcements, game releases, and seasonal promotions — such as BPL betting offers, Eid bonuses, and Pohela Boishakh specials — where you have given your consent to receive such communications.
• Platform improvement: To analyse usage patterns, identify technical issues, and improve the features, performance, and user experience of the ccc66 platform.

ccc66 processes your personal data on the following legal bases, depending on the nature of the processing activity:

• Contractual necessity: Processing that is necessary to fulfil our obligations under the ccc66 Terms & Conditions — including account registration, payment processing, KYC verification, and the delivery of betting and gaming services — is carried out on the basis that it is necessary for the performance of the contract between you and ccc66.
• Legal obligation: Processing that is required to comply with our legal and regulatory obligations — including anti-money laundering recordkeeping, age verification, and responding to lawful authority requests — is carried out on the basis of legal obligation.
• Legitimate interests: Processing carried out for fraud prevention, platform security monitoring, and analytics-driven platform improvement is based on ccc66's legitimate interest in operating a safe, secure, and commercially viable platform, provided that this interest is not overridden by your fundamental rights and freedoms.
• Consent: Processing for the purpose of sending marketing communications — including promotional emails, bonus offers, and seasonal announcements — is carried out only where you have provided explicit, informed consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

ccc66 does not sell your personal data to third parties. We share your data only in the following limited circumstances and only to the extent strictly necessary for the stated purpose:

• Payment service providers: We share necessary transaction data — including your payment account identifier and transaction amounts — with bKash, Nagad, Rocket, Upay, and other payment processors solely for the purpose of processing your deposits and withdrawals.
• Identity verification services: Where we use third-party KYC service providers to assist with identity and age verification, we share the relevant identity documents and personal details with those providers under strict data processing agreements.
• Game studios and content providers: Technical session data (such as player session identifiers and game round IDs) may be shared with licensed game studios — including Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, and Ezugi — to facilitate game delivery and dispute resolution. No personally identifying financial data is transmitted to game studios.
• Legal and regulatory authorities: ccc66 will disclose personal data to law enforcement agencies, financial intelligence units, regulatory bodies, or courts where we are legally compelled to do so by a valid legal process, court order, or statutory obligation.
• Business successors: In the event of a merger, acquisition, or transfer of ownership of the ccc66 platform, your personal data may be transferred to the acquiring entity, which will be required to honour the terms of this Privacy Policy.

ccc66 gives particular attention to the handling of financial and payment data, given the sensitivity of this information. The following specific rules apply to payment data processed on the ccc66 platform:

• All deposit and withdrawal transactions are processed in Bangladeshi Taka (BDT / ৳). Transaction amounts, timestamps, and payment method identifiers are recorded in our secure transaction ledger for a minimum of five years in compliance with financial recordkeeping obligations.
• ccc66 does not store full payment account credentials on its own servers. Where payment details are retained, they are stored in tokenised form using industry-standard encryption. Complete bKash, Nagad, Rocket, or Upay account numbers are not retained in plaintext by ccc66 following the completion of a transaction.
• All transactions are monitored in real time by our fraud prevention systems. Unusual transaction patterns — including large rapid withdrawals, frequent payment method changes, or structuring behaviour — may trigger additional verification steps or a temporary account review.
• Withdrawals will only be processed to a payment method registered in the account holder's own legal name, consistent with our anti-money laundering policy. Third-party payment arrangements are strictly prohibited.

If you believe an unauthorised transaction has been processed on your ccc66 account, please contact [email protected] immediately so that our team can investigate and, where appropriate, take protective action on your account.

ccc66 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device by your browser when you visit the ccc66 website. Cookies allow us to recognise returning visitors, maintain session continuity, and gather analytics data about how the platform is used.

The following categories of cookies are used on the ccc66 platform:

• Strictly necessary cookies: These cookies are essential for the platform to function. They maintain your login session, preserve your account settings, and enable core platform features such as the games lobby and the deposit interface. These cookies cannot be disabled without breaking platform functionality.
• Analytics cookies: These cookies collect aggregated, anonymised data about how players navigate the ccc66 platform — which pages are visited most frequently, how long sessions last, and which features are most used. This data is used exclusively to improve the platform experience.
• Functional cookies: These cookies remember your preferences — such as your preferred interface language, display settings, and notification preferences — so that you do not need to reconfigure them on each visit.
• Security cookies: These cookies support our fraud detection and account security systems by helping us identify unusual login patterns or suspicious session activity.

ccc66 does not use third-party advertising cookies or tracking pixels for the purpose of serving targeted advertisements on external websites.

ccc66 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, or for as long as required by applicable law. The following retention periods apply to the main categories of data we hold:

• Account and identity data: Retained for a minimum of five (5) years following the date of account closure. This period is required to comply with anti-money laundering recordkeeping obligations and to facilitate the resolution of any post-closure disputes.
• Transaction and financial records: Retained for a minimum of five (5) years following the date of each transaction, consistent with financial compliance requirements.
• KYC documents: Retained for the duration of the account and for five (5) years following account closure, or longer where required by applicable law.
• Communications and support records: Retained for two (2) years following the closure of the relevant support ticket or the end of the correspondence, or longer where the communication relates to an unresolved dispute.
• Technical and behavioural data: Retained in aggregated or anonymised form for up to two (2) years for platform analytics purposes. Raw session logs are retained for up to ninety (90) days for security investigation purposes.
• Marketing consent records: Retained for as long as your account is active and for two (2) years following withdrawal of consent or account closure, as evidence of your consent status.

Following the expiry of the applicable retention period, ccc66 will securely delete or irreversibly anonymise your personal data so that it can no longer be associated with you as an individual.

ccc66 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security framework includes the following measures:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the ccc66 platform.
• Encrypted data storage for all sensitive personal data, including identity documents and payment details, stored on ccc66 servers.
• Hashed password storage — your ccc66 account password is never stored in plaintext. It is processed using a modern cryptographic hashing algorithm before storage.
• Access controls — access to personal data held by ccc66 is restricted on a strict need-to-know basis. Staff members are only permitted to access the data categories necessary to perform their specific role.
• Intrusion detection and monitoring — the ccc66 platform and its underlying infrastructure are monitored continuously for signs of unauthorised access, anomalous activity, or potential security incidents.
• Regular security reviews — ccc66 conducts periodic security assessments of its platform, data handling processes, and third-party integrations to identify and remediate potential vulnerabilities.

In the event of a personal data breach that poses a significant risk to your rights and interests, ccc66 will notify affected players as promptly as practicable and take immediate remedial action to contain the breach and mitigate its impact.

As a player on the ccc66 platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please submit a written request to [email protected]. ccc66 will acknowledge your request within five (5) business days and provide a substantive response within thirty (30) calendar days.

• Right of access: You have the right to request a copy of the personal data that ccc66 holds about you, along with information about how it is being used and with whom it has been shared.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it without undue delay.
• Right to erasure ("right to be forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw your consent (and no other legal basis applies), or where the data has been unlawfully processed. Note that this right is subject to our legal retention obligations — we cannot delete data that we are required to retain by law.
• Right to restriction of processing: You may request that ccc66 restricts the processing of your personal data in certain circumstances, such as while the accuracy of the data is being verified or while a complaint is being investigated.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you have the right to receive the personal data you have provided to ccc66 in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to the processing of your personal data where that processing is based on ccc66's legitimate interests. You also have the unconditional right to object to processing for direct marketing purposes at any time.
• Right to withdraw consent: Where ccc66 processes your data on the basis of your consent, you may withdraw that consent at any time. Withdrawal will take effect promptly and will not affect the lawfulness of processing carried out before the withdrawal.

ccc66 will not charge a fee for the exercise of any data rights request unless the request is manifestly unfounded or excessive, in which case we may charge a reasonable administrative fee or decline to act on the request, providing written reasons for our decision.

The ccc66 platform is strictly prohibited to individuals under the age of 21. ccc66 does not knowingly collect personal data from any person under the age of 21. If you are under 21 years of age, you must not attempt to register on or use the ccc66 platform in any capacity.

If ccc66 discovers or has reasonable grounds to believe that personal data has been collected from an individual under the age of 21, it will immediately close the relevant account, delete the collected data to the fullest extent permitted by law, and — where applicable — return any deposited funds to the originating payment method.

ccc66 does not direct any marketing communications, promotional content, or game recommendations at individuals who are known or believed to be under the age of 21. Age-gating measures are applied at the point of registration and are reinforced through mandatory KYC verification.

With your consent, ccc66 may send you promotional communications relating to our services, including welcome bonus offers, reload promotions, cricket betting specials tied to BPL, IPL, and T20 tournaments, seasonal promotions for Eid and Pohela Boishakh, new game release announcements, and other platform news that may be of interest to you as a registered ccc66 player.

These communications will be delivered via the email address registered on your ccc66 account. ccc66 does not send marketing communications via unsolicited telephone calls, text messages (SMS), or third-party social media platforms in connection with your ccc66 account.

You may opt out of marketing communications at any time by:

• Clicking the unsubscribe link included in any marketing email sent by ccc66.
• Contacting our support team at [email protected] with a written request to opt out of all marketing communications.
• Updating your notification preferences in your ccc66 account settings where this feature is available.

Please note that opting out of marketing communications does not affect the delivery of transactional or account-related communications — such as deposit confirmations, withdrawal notifications, KYC requests, and security alerts — which are sent regardless of marketing preferences as they are necessary for the operation of your account.

ccc66 reviews this Privacy Policy periodically and may update it to reflect changes in our data processing practices, legal obligations, or platform features. Material changes — those that meaningfully affect your rights or the way we use your data — will be communicated to registered players via a notification on the ccc66 platform or by email to your registered address, where practicable, with a minimum of seven (7) days' notice before the changes take effect.

Non-material changes — such as clarifications of existing wording, correction of typographical errors, or updates to contact details — may be made without prior notice, though the effective date of the document will always be updated to reflect the most recent revision.

The current version and effective date of this Privacy Policy are displayed at the top of this document. It is your responsibility to review this Policy periodically. Your continued use of the ccc66 platform following the effective date of any revised Privacy Policy constitutes your acknowledgement of and agreement to the updated terms.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights as described in Section 10, or have a concern about the way ccc66 handles your personal data, please contact our support team using the details below. All data-related enquiries are handled by our dedicated support staff, who are available around the clock.

ccc66 aims to respond to all data rights requests and privacy enquiries within thirty (30) calendar days of receipt. For complex requests, we may extend this period by a further thirty (30) days where necessary, in which case we will notify you of the extension and the reasons for it within the initial thirty-day window.

When submitting a data rights request, please include your registered email address, your ccc66 username, a clear description of the request you are making, and — where relevant — a copy of a government-issued photo ID so that we can verify your identity before processing the request. ccc66 will not act on data rights requests from unverified third parties claiming to act on a player's behalf without written authorisation from the account holder.

If you are not satisfied with our response to your privacy enquiry or data rights request, you have the right to escalate your complaint through appropriate consumer protection or data protection channels available in Bangladesh. ccc66 takes all privacy complaints seriously and is committed to resolving them promptly and fairly.

21+ Only   ccc66 is a platform for adults aged 21 and above. Please gamble responsibly.