cg66 Privacy Policy — Your Data, Your Rights

1. Introduction

cg66 ("we", "us", "our") operates the online betting and casino platform available at cg66.bio. This Privacy Policy describes how cg66 collects, processes, stores, shares, and protects personal data provided by or collected about users ("you", "your") of the platform. This Policy forms part of the cg66 Terms and Conditions and should be read alongside them.

By registering an account on cg66 or by continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy and you consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the cg66 platform.

2. What Personal Data We Collect

cg66 collects the following categories of personal data in the course of providing its services. We collect only what is necessary for the purposes described in this Policy.

3. How We Collect Your Data

cg66 collects personal data through the following means. We do not purchase data lists from third-party data brokers.

• 3.1Directly from you during account registration, when you complete KYC verification, when you make a deposit or withdrawal request, and when you contact the support team.
• 3.2Automatically through the use of cookies, server logs, and similar tracking technologies when you access the cg66 platform. This includes data about your device, browser, and browsing behaviour within the platform.
• 3.3From payment service providers (including bKash, Nagad, Rocket, Upay, Visa and Mastercard) in the course of processing your deposit and withdrawal transactions. This is limited to transaction confirmation data required to verify and reconcile payments.
• 3.4From fraud prevention and identity verification partners used in the KYC process. These partners are contractually obligated to handle data in accordance with applicable data protection requirements and this Policy.

4. How We Use Your Personal Data

cg66 uses the personal data it collects for the following purposes. We do not use your data for any purpose not described in this Policy without first notifying you and obtaining any required consent.

• 4.1Account management: to create and administer your cg66 account, verify your identity, process your deposits and withdrawals, and communicate account-related information to you.
• 4.2Compliance and legal obligations: to perform KYC checks, conduct anti-money laundering screening, verify age eligibility (21+), maintain transaction records as required by applicable law, and respond to lawful requests from regulatory or law enforcement authorities.
• 4.3Service improvement: to analyse platform usage patterns, identify technical issues, test new features, and improve the overall user experience for players in Bangladesh.
• 4.4Responsible gaming: to monitor gaming activity for signs of problem gambling, to facilitate self-exclusion requests and deposit limit settings, and to provide appropriate interventions where required.
• 4.5Fraud prevention and security: to detect, investigate and prevent fraudulent transactions, account misuse, collusion, money laundering, and other prohibited activities as described in the Terms and Conditions.
• 4.6Marketing communications: to send you promotional offers, bonus notifications, and platform updates where you have consented to receive such communications. You may withdraw this consent at any time by contacting support or updating your account preferences.

5. Legal Basis for Processing

cg66 processes personal data on one or more of the following legal bases, depending on the specific processing activity involved.

• 5.1Contractual necessity: processing required to fulfil our contractual obligations to you as a registered user of the platform — including account creation, payment processing, and customer support.
• 5.2Legal obligation: processing required to comply with applicable laws and regulations, including KYC identity verification, anti-money laundering obligations, age verification requirements, and responses to lawful authority requests.
• 5.3Legitimate interests: processing carried out in cg66's legitimate interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement — provided those interests are not overridden by your data protection rights.
• 5.4Consent: processing based on your explicit consent, including the sending of marketing communications. Where consent is the basis for processing, you have the right to withdraw it at any time, and withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

6. Sharing Your Personal Data

cg66 does not sell your personal data. We share personal data with third parties only in the limited circumstances described below.

• 6.1Payment processors and financial service providers (including bKash, Nagad, Rocket, Upay, Visa, and Mastercard) for the purpose of processing your deposits and withdrawals. These providers are governed by their own privacy policies and by contractual obligations to protect your data.
• 6.2Identity verification and KYC service providers engaged to verify the identity and age of users as required by the platform's compliance obligations. These providers are contractually bound to process data only for the specific purpose of verification.
• 6.3Regulatory and law enforcement authorities where cg66 is legally required to disclose personal data — for example, in response to a court order, subpoena, or applicable regulatory requirement. cg66 will only disclose what is legally required and will, where permissible, notify you of such disclosure.
• 6.4Technology and infrastructure service providers (including hosting, analytics, and customer support software providers) who process data on cg66's behalf under data processing agreements that impose strict confidentiality and security obligations.

7. Cookies & Tracking Technologies

cg66 uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files stored on your device that help the platform remember your preferences and activity.

• 7.1Essential cookies are required for the platform to function correctly. They enable core features including user authentication (keeping you logged in), session management, and security functions. Essential cookies cannot be disabled without affecting core platform functionality.
• 7.2Analytics cookies collect anonymised data about how users navigate and use the platform. This data is used to understand usage patterns and to improve the cg66 experience. Analytics cookies do not identify you personally.
• 7.3You may control non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality or performance of the cg66 platform. Blocking essential cookies will prevent the platform from functioning correctly.

8. Data Retention

cg66 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements. The criteria used to determine retention periods include the nature of the data, the purpose for which it is held, and applicable legal retention obligations.

As a general guide: account data and transaction records are retained for a minimum of five years following account closure, in line with standard financial record-keeping obligations. KYC documents are retained for the period required by applicable law. Gaming activity logs are retained for a minimum of three years. Where data is no longer required, cg66 will securely delete or anonymise it.

9. Data Security

cg66 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include SSL/TLS encryption for all data in transit, secure server infrastructure, access controls limiting data access to authorised personnel only, and regular security reviews.

While cg66 takes all reasonable steps to protect your personal data, no method of transmission over the internet or method of electronic storage is entirely secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, cg66 will notify affected users as required by applicable law and will take prompt remedial action.

10. Your Data Protection Rights

Subject to applicable law, you hold the following rights in relation to your personal data held by cg66. To exercise any of these rights, please contact us using the details provided in Section 12 of this Policy. cg66 will respond to all legitimate requests within a reasonable timeframe.

• ◆Right of Access — You have the right to request a copy of the personal data cg66 holds about you, along with information about how it is being processed.
• ◆Right to Rectification — You have the right to request that cg66 correct any inaccurate or incomplete personal data it holds about you. Certain corrections may require identity verification.
• ◆Right to Erasure — You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to cg66's legal retention obligations. Erasure requests cannot override legal data retention requirements.
• ◆Right to Restriction — You have the right to request that cg66 restricts the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested.
• ◆Right to Object — You have the right to object to processing of your personal data carried out on the basis of legitimate interests, including direct marketing. Where you object to marketing, cg66 will cease such processing immediately.
• ◆Right to Data Portability — Where processing is based on your consent or on a contract, you may request that cg66 provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.

11. Children's Privacy

cg66 is strictly an adult platform. Access to the platform and all of its services is restricted to persons aged 21 years and above. cg66 does not knowingly collect or process personal data relating to individuals under the age of 21.

If cg66 becomes aware that it has collected personal data from an individual who is under the age of 21, it will take immediate steps to delete that data and close the associated account. If you believe that cg66 has inadvertently collected data from a person under 21, please notify us immediately at [email protected].

12. International Data Transfers

cg66 operates internationally and your personal data may be transferred to and processed in countries outside of Bangladesh. Where such transfers occur, cg66 ensures that appropriate safeguards are in place to protect your personal data, including contractual data protection clauses with all recipients. By using the cg66 platform, you acknowledge and consent to such international transfers of your personal data where they are necessary to provide the service.

13. Changes to This Privacy Policy

cg66 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, cg66 will notify registered users via email or by posting a prominent notice on the platform prior to the changes taking effect. The date of the most recent revision is displayed at the top of this page.

Your continued use of cg66 following any update to this Privacy Policy constitutes your acceptance of the revised Policy. If you do not agree with any changes, you must cease using the platform and request account closure before the revised Policy takes effect.

14. Contact & Data Queries

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how cg66 handles your personal data, please contact our support team. All data-related queries are handled by our dedicated support staff and will be responded to within a reasonable timeframe.

cg66 support email: [email protected]. When contacting us about a data matter, please include your registered mobile number, a clear description of your request, and any relevant account details to help us respond efficiently.