cx666 Privacy
Policy

Introduction

cx666 operates the online betting and casino platform accessible at cx666.io, serving players located primarily in Bangladesh. As a platform that handles financial transactions and personally identifiable information, cx666 is committed to processing your personal data lawfully, fairly, and transparently.

This Privacy Policy sets out in clear terms the data we collect from you, the purposes for which that data is used, the legal basis on which we rely to process it, and the rights you are entitled to exercise in respect of your personal information. It covers all interactions with the cx666 platform, including account registration, deposits and withdrawals, betting activity, customer support communications, and use of the cx666 website and any associated mobile interfaces.

cx666 is the data controller for all personal data processed under this policy. All data protection queries and rights requests should be directed to [email protected] using the subject line "Data Privacy Request".

Data We Collect

cx666 collects a range of personal data categories in the course of providing its services. The specific data we hold about you depends on how you interact with the platform. The main categories are described below.

2.1 Identity & Contact Data

• Full legal name as it appears on government-issued identification;
• Date of birth (used for age verification — players must be 21 or older);
• Residential address, including city (e.g., Dhaka, Chittagong, Sylhet, Khulna);
• Mobile phone number registered with your payment method (bKash, Nagad, Rocket, Upay);
• Email address used at registration.

2.2 Account & Authentication Data

• Username and encrypted password hash;
• Account creation date and timestamp;
• Two-factor authentication settings and recovery data (where enabled);
• Login history including timestamps, IP addresses, and device identifiers.

2.3 Financial & Transaction Data

• Deposit and withdrawal transaction records including amounts in BDT, timestamps, and payment method references;
• Mobile wallet identifiers (bKash/Nagad account numbers linked to transactions);
• Bank account details where bank transfer is the selected payment method;
• Partial card numbers (last four digits) and card type (Visa, Mastercard) where applicable;
• Bonus and promotional credit history.

2.4 Betting & Gaming Activity Data

• Complete betting history including markets, stake amounts, odds, and outcomes;
• Casino and slot session data including game titles, session durations, and wager values;
• Win/loss records and account balance history;
• Responsible gaming settings including any deposit limits or self-exclusion periods you have activated.

2.5 Technical & Device Data

• IP address and approximate geolocation derived from IP;
• Device type, operating system, and browser or app version;
• Unique device identifiers;
• Cookie data and session identifiers (see Section 7 for full cookie details).

2.6 Communications Data

• Content of support tickets, live chat transcripts, and emails submitted to cx666;
• Feedback and survey responses submitted voluntarily;
• Records of marketing communication preferences.

2.7 Identity Verification (KYC) Documents

• Copies of government-issued photo ID (National ID card, passport, or driving licence);
• Proof of address documentation;
• Payment method ownership verification screenshots where requested.

How We Collect Data

cx666 collects personal data through several channels, all of which are directly related to your interaction with the platform:

3.1 Directly From You

The majority of your personal data is provided directly by you when you register an account, complete the KYC verification process, make a deposit or withdrawal, place a bet, contact customer support, or update your account settings. You are in control of this information and may update most of it via your account dashboard at any time.

3.2 Automatically During Platform Use

When you visit cx666.io or use the platform, certain technical data is collected automatically. This includes your IP address, device and browser information, session duration, pages visited, and interaction patterns within the platform. This data is collected using cookies, server logs, and similar tracking technologies described in Section 7.

3.3 From Payment Processors

When you initiate a deposit or withdrawal via bKash, Nagad, Rocket, Upay, or a bank transfer, cx666 receives confirmation data from the payment processor confirming the transaction reference, amount, and the sender's account identifier. cx666 does not receive or store full payment credentials — these remain with the payment provider.

3.4 From Identity Verification Services

cx666 may use third-party identity verification partners to assist with KYC checks. These partners may return a verification result (pass/fail) along with matched identity fields. The raw document images submitted during KYC are stored securely by cx666 and/or the verification partner for the period described in Section 8.

Purposes of Processing

cx666 uses your personal data only for the purposes described below. We do not sell personal data to third parties. We do not use your data for purposes incompatible with those listed here without first notifying you and, where required, obtaining your consent.

Legal Basis for Processing

cx666 relies on the following legal bases to process your personal data, depending on the purpose of the processing activity:

5.1 Contractual Necessity

Processing your identity, contact, financial, and gaming activity data is necessary to perform the contract between you and cx666 — specifically, to provide you with a registered account, process your transactions, settle your bets, and deliver the services you have signed up for. Without this data, cx666 cannot provide its services to you.

5.2 Legal Obligation

cx666 is subject to legal obligations relating to anti-money laundering (AML), counter-terrorism financing (CTF), and age verification. Processing KYC documents and financial transaction records for compliance purposes is required by applicable law and is not optional. Records processed under this basis are retained for the periods mandated by law regardless of account status.

5.3 Legitimate Interests

cx666 processes technical and device data, session logs, and aggregated gaming analytics on the basis of its legitimate interests in operating a secure platform, preventing fraud, detecting prohibited conduct, and improving the quality of its services. Before relying on this basis, cx666 has assessed that these interests are not outweighed by the data protection rights of its players.

5.4 Consent

Where cx666 sends you marketing communications by email or SMS, this processing is based on your freely given consent, recorded at the time of opt-in. You may withdraw your marketing consent at any time by updating your notification preferences within your account dashboard or by emailing [email protected]. Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to withdrawal.

Data Sharing & Disclosure

cx666 does not sell, rent, or trade personal data to third parties for their own marketing or commercial purposes. Your data may be disclosed to the following categories of recipients only to the extent necessary for the purposes described in Section 4:

6.1 Payment Processors

Transaction data is shared with payment service providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and card networks (Visa, Mastercard) to process your deposits and withdrawals. These providers act under their own privacy policies and data protection obligations.

6.2 Identity Verification Partners

KYC documents and identity data may be shared with accredited third-party identity verification service providers for the sole purpose of completing age and identity checks. These partners are contractually prohibited from using your data for any other purpose.

6.3 Game Providers

When you play games provided by third-party studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, or Spribe, a session token and anonymised player identifier are passed to the game provider's servers to enable game delivery. Your full identity data is not transmitted to game providers.

6.4 Fraud Prevention & Security

cx666 may share data with fraud detection and cybersecurity service providers to identify and block suspicious activity. These providers receive only the data necessary to perform their security function and may not retain or reuse it independently.

6.5 Law Enforcement & Regulatory Bodies

cx666 may disclose personal data to law enforcement agencies, financial intelligence units, or regulatory bodies where required to do so by applicable law, court order, or in response to a lawful request. cx666 will notify affected players of such disclosures where legally permitted to do so.

Cookies & Tracking Technologies

cx666 uses cookies and similar tracking technologies to operate the platform correctly, maintain your session, prevent fraud, and — with your consent — measure platform usage and deliver relevant content. A summary of the cookie categories used is provided below.

Strictly necessary cookies cannot be disabled as they are essential for the platform to function. You may manage your preferences for functional and analytics cookies within your account settings. Disabling non-essential cookies may affect certain platform features but will not prevent you from placing bets or accessing core services.

Data Retention

cx666 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal obligations. The retention periods below apply as standard:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual. Anonymised or aggregated data may be retained indefinitely for statistical and analytical purposes.

Your Privacy Rights

As a cx666 player, you hold the following rights in respect of your personal data. To exercise any of these rights, contact [email protected] with the subject line "Data Privacy Request" and specify the right you wish to exercise. cx666 will respond within 30 days of receiving a valid request.

9.1 Right of Access

You have the right to request a copy of all personal data cx666 holds about you, along with information about how it is being processed, the legal basis for processing, and who it has been shared with.

9.2 Right to Rectification

If any personal data cx666 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Most account data (name, email, address) can be updated directly from your account dashboard without needing to submit a formal request.

9.3 Right to Erasure

You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you have withdrawn consent and no other legal basis applies, or where the data has been processed unlawfully. This right is subject to cx666's legal obligation to retain certain records (see Section 8), which may override an erasure request in part.

9.4 Right to Restrict Processing

You may request that cx666 temporarily suspend active processing of your data — for example, while a rectification request is being verified or while you contest the legal basis for processing. During a restriction period, cx666 may continue to store your data but will not process it for other purposes.

9.5 Right to Data Portability

Where processing is based on contract or consent and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to request that it be transmitted to another service provider where technically feasible.

9.6 Right to Object

You have the right to object to processing carried out on the basis of cx666's legitimate interests. cx666 will cease that processing unless it can demonstrate compelling legitimate grounds that override your interests. You have an unconditional right to object to processing for direct marketing purposes at any time.

9.7 Right to Withdraw Consent

Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing that took place before withdrawal. Consent withdrawal can be completed via your account notification settings or by emailing [email protected].

Data Security

cx666 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key measures include:

• 256-bit SSL/TLS encryption applied to all data transmitted between your device and the cx666 platform;
• Encrypted password storage — passwords are never stored in plain text; bcrypt hashing is applied at account creation;
• Access control — internal access to player data is restricted on a need-to-know basis; all staff with data access are subject to confidentiality obligations;
• Regular security assessments — cx666 conducts periodic vulnerability assessments and penetration tests on its platform infrastructure;
• Intrusion detection systems monitoring for suspicious activity patterns in real time;
• Secure data centres — all data is hosted in facilities with physical access controls, redundant power, and environmental monitoring.

Despite these measures, no internet-connected platform can guarantee absolute security. Players are strongly encouraged to use a strong, unique password for their cx666 account, enable two-factor authentication where available, and report any suspected unauthorised access to [email protected] immediately.

Children's Privacy

cx666 is strictly an adults-only platform. No person under the age of 21 is permitted to register an account, make a deposit, or use any service on cx666. cx666 does not knowingly collect personal data from individuals under the age of 21.

If cx666 discovers or is notified that personal data has been collected from a person under 21, the account will be immediately suspended, the data will be deleted as far as legal retention obligations permit, and any funds deposited will be handled in accordance with applicable law. Parents or guardians who believe a minor may have accessed the platform should contact [email protected] immediately.

cx666 uses date-of-birth verification at registration and may request documentary proof of age at any time. Providing a false date of birth to circumvent the age restriction constitutes a material breach of the platform's Terms & Conditions.

Third-Party Links

The cx666 platform may contain references to or integrations with third-party services such as game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) and payment processors (bKash, Nagad, Rocket, Upay). When you interact with these third-party services — for example, when a game loads in an embedded iframe powered by a studio's servers, or when you are redirected to a payment provider's interface to confirm a transaction — you are subject to that third party's own privacy policy.

cx666 has no control over the data practices of third-party services and accepts no responsibility for the privacy policies or data handling practices of any external service. Players are encouraged to review the privacy policies of any third-party provider whose services they access via the cx666 platform.

Updates to This Privacy Policy

cx666 reserves the right to update or amend this Privacy Policy at any time. When material changes are made — for example, changes to the categories of data collected, new sharing arrangements, or changes to retention periods — cx666 will notify registered players via the email address on their account or via a prominent notice displayed on the platform prior to the changes taking effect.

The "Last Updated" date displayed at the top of this policy and in the table of contents sidebar reflects the date on which the most recent version became effective. Continued use of the cx666 platform after the effective date of any update constitutes your acknowledgement of the revised policy. If you object to any change, you may request account closure as described in the Terms & Conditions.

cx666 recommends that all players review this Privacy Policy periodically — particularly before making a deposit or providing new categories of personal information — to remain informed of how their data is being processed.

Contact Us

If you have questions, concerns, or complaints about this Privacy Policy or cx666's data processing practices, or if you wish to exercise any of the rights described in Section 9, please contact the cx666 data protection team using the details below. All correspondence must be in English to ensure accurate and timely handling.

• Email: [email protected] (plain text — not a clickable link)
• Subject line for data requests: "Data Privacy Request"
• Subject line for responsible gaming: "Responsible Gaming Request"
• Support availability: 24 hours a day, 7 days a week
• Response target: Within 30 calendar days for data rights requests; within 24 hours for standard support queries