Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how c667 ("we", "us", "the Platform") collects, uses, stores, shares and protects personal data about individuals ("you", "User", "Player") who access or use the c667 online casino and sports betting platform at c667.pro. This Policy forms part of our Terms and Conditions and should be read alongside them.

c667 is committed to protecting the privacy and security of all users. We process personal data only for the specific, legitimate purposes described in this Policy, and we apply technical and organisational safeguards proportionate to the sensitivity of the data we hold. We operate for players across Bangladesh — from Dhaka, Chittagong and Sylhet to Khulna, Rajshahi, Barisal and beyond.

2. Information We Collect

c667 collects personal data through three main channels: information you provide directly when registering or using the Platform, information collected automatically during your use of the Platform, and information received from third-party payment providers and identity verification services.

Information You Provide Directly

• Registration data: your full name, date of birth, Bangladesh mobile number, and a secure account password.
• Identity verification (KYC) documents: copies of your national ID card, passport or driving licence, required to verify your age and identity before approving withdrawals or investigating unusual account activity.
• Transaction data: deposit amounts, withdrawal amounts, payment method identifiers such as your bKash or Nagad wallet number, and transaction timestamps.
• Support correspondence: messages, emails and other communications you send to the c667 support team, including the content of your queries and our responses.

Information Collected Automatically

• Device and technical data: IP address, browser type and version, operating system, device model, screen resolution and language settings.
• Session and gameplay data: login timestamps, session durations, pages visited, games played, bet amounts, game outcomes and wagering history.
• Cookie and tracking data: session identifiers, preference cookies and first-party analytics data. Full details are in Section 7.

Information Received from Third Parties

• Payment provider data: transaction confirmation references and status codes from bKash, Nagad, Rocket, Upay and card payment gateways, used to reconcile deposits and process withdrawals.
• Identity verification results: name and date-of-birth match confirmations from third-party identity verification services used during the KYC process.
• Fraud and risk signals: transaction risk scores and fraud flag data from payment processors, used to identify and prevent fraudulent activity on the Platform.

3. How We Use Your Information

c667 processes your personal data only for the purposes described below. We do not use your data for purposes incompatible with those listed here without first obtaining your explicit consent.

4. Legal Basis for Processing

c667 processes your personal data on the following legal bases, each matched to the most appropriate processing activity:

• Contract performance: processing necessary to register your account, handle your transactions and deliver the gaming and betting services you have requested. Without this processing, c667 cannot provide the Platform.
• Legal obligation: processing required to comply with applicable laws including anti-money laundering obligations, age verification requirements and mandatory record-keeping duties.
• Legitimate interests: processing for fraud prevention, platform security, abuse detection and service improvement, where these interests are not overridden by your privacy rights.
• Consent: where c667 sends optional marketing communications or uses non-essential cookies, we rely on your explicit consent, which you may withdraw at any time by contacting [email protected] or updating your account preferences.

5. Payment Data and KYC Processing

Given the financial nature of the c667 Platform, payment data and identity documents are among the most sensitive categories of data we process. We apply enhanced safeguards to this data above and beyond our baseline security measures. Card payment data is handled exclusively by our PCI-DSS compliant gateway partner; c667 receives only a tokenised reference and never stores your full card number, CVV or expiry date.

Your bKash, Nagad or Rocket wallet number is stored in encrypted form and used solely to process deposits credited to your c667 account and to route withdrawals back to your registered payment method. KYC documents are stored with AES-256 encryption at rest, accessible only to authorised staff following a strict documented process, and retained for the minimum period required by applicable regulations.

6. Sharing of Personal Data

c667 does not sell, rent or trade your personal data to third parties. We share your data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.

Service Providers

c667 engages carefully selected third-party service providers who process data strictly on our behalf and under our instructions. These include payment processing partners (bKash, Nagad, Rocket, Upay and card gateway operators), our identity verification service, game technology providers such as Pragmatic Play and Evolution Gaming, and hosting and infrastructure providers. All service providers are contractually bound to process your data only for the purposes we specify and to maintain security standards equivalent to our own.

Legal and Regulatory Disclosures

c667 may disclose your personal data to law enforcement agencies, regulatory authorities or courts where required by applicable law, valid legal process or a binding court order. In such cases c667 will disclose only the minimum data required to comply with the legal obligation and will, where legally permitted, notify you of the disclosure.

7. Cookies and Tracking Technologies

c667 uses cookies and similar technologies to operate the Platform, remember your preferences and analyse how the Platform is used. Cookies are small text files stored on your device by your browser. The categories below describe the cookies used on the c667 Platform.

Cookie Categories Used on c667

• Strictly necessary cookies: essential for the Platform to function. They keep your login session active, display your wallet balance correctly and operate security features. These cannot be disabled while you use the Platform.
• Preference cookies: remember your language choice (English or Bengali), display settings and other personalisation preferences to improve your experience on return visits.
• Analytics cookies: first-party tools that collect aggregated, anonymised data about how players navigate the Platform — page views, session durations and feature usage. No individual player is identified from analytics data.
• Security cookies: short-lived tokens that protect against cross-site request forgery (CSRF) and other web security threats. These are essential and operate silently in the background.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent the Platform from functioning correctly and you will not be able to log in or access your account.

8. Data Retention

c667 retains personal data only for as long as necessary for the purposes for which it was collected, or as required by applicable law. The retention schedule embedded above applies to the main categories of data we hold.

When the applicable retention period expires, c667 securely deletes or anonymises the relevant personal data so it can no longer be attributed to an identifiable individual. Anonymised aggregated data may be retained indefinitely for statistical purposes without constituting personal data.

9. Your Data Rights

c667 respects your rights in relation to the personal data we hold about you. You may exercise any of the following rights at any time by contacting [email protected] with your full name and registered mobile number so we can verify your identity before processing your request.

• Right of access: request a copy of all personal data c667 holds about you. We will respond within 30 days of receiving your verified request.
• Right to rectification: request correction of any inaccurate or incomplete personal data we hold about you. Basic account details may also be updated directly through our support team.
• Right to erasure: request deletion of your personal data where it is no longer necessary for the purposes it was collected, or where you withdraw consent and no other legal basis applies. Note that certain data (such as transaction records) may be required by law to be retained even after account closure.
• Right to restrict processing: request that c667 limits its processing of your data in certain circumstances — for example while the accuracy of data is contested or while an objection to processing is being assessed.
• Right to data portability: request a machine-readable copy of personal data you have provided to c667 for contract performance or consent purposes, in a structured, commonly used format.
• Right to object: object to processing based on legitimate interests. c667 will cease that processing unless it can demonstrate compelling legitimate grounds that override your interests, rights and freedoms.

c667 will respond to all data rights requests within 30 days. Where a request is complex or high in volume, we may extend this by a further 30 days and will notify you of the extension and the reason for it.

10. Security Measures

c667 implements a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration and destruction. Our measures include 256-bit SSL/TLS encryption for all data in transit; AES-256 encryption at rest for stored personal data and KYC documents; strict role-based access controls limiting which staff can view personal data, with all access logged and audited; multi-factor authentication for administrative system access; and regular security reviews of the Platform infrastructure.

Despite these measures, no internet-based platform can guarantee absolute security. If c667 becomes aware of a data security incident likely to result in a high risk to your rights and freedoms, we will notify you without undue delay and take all reasonable steps to contain and remediate the incident. If you suspect unauthorised access to your c667 account, contact [email protected] immediately and change your password.

11. Protection of Minors

The c667 Platform is strictly for adults aged 21 and above. c667 does not knowingly collect personal data from individuals under 21. Age verification is a mandatory step in the account registration process. If c667 discovers that personal data has been collected from someone under 21, the account will be immediately closed, all associated data deleted from active systems, and any funds held will be withheld pending investigation.

12. Changes to This Privacy Policy

c667 may update this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable law or improvements to our Platform. When we make material changes, we will notify registered Players by displaying a prominent notice on the Platform or by sending a notification to your registered mobile number. The effective date at the top of this document will be updated each time the Policy is revised.

Your continued use of the c667 Platform following publication of a revised Privacy Policy constitutes your acceptance of the revised Policy. We encourage you to review this page periodically to stay informed. The version of the Policy that applies to your use of the Platform is always the version currently published at c667.pro/privacy-policy.

13. Contact Us About Privacy

If you have any questions about this Privacy Policy, wish to exercise your data rights or want to report a privacy concern, please contact our support team. All privacy-related requests are handled confidentially and responded to within 30 days.