cd66a Privacy Policy — How We Handle Your Data

1. Introduction and Scope

cd66a (accessible at cd66a.pro) is an online gaming platform serving players in Bangladesh. In the course of providing gaming, betting, and payment services, cd66a collects and processes certain categories of personal data. This Privacy Policy describes how cd66a acts as data controller in relation to your personal information, the lawful bases on which we process that data, and the measures we take to keep it secure.

This policy should be read in conjunction with the cd66a Terms and Conditions. Defined terms used in the Terms and Conditions carry the same meaning in this Privacy Policy. Where there is any inconsistency between this Privacy Policy and the Terms and Conditions, the Terms and Conditions shall prevail in so far as they relate to the legal relationship between you and cd66a.

2. Information We Collect and How We Collect It

cd66a collects personal data through two primary channels: information you provide directly when you register and use the platform, and information collected automatically by the platform's technical systems as you interact with it. The categories below describe each data type in detail.

2.1 Information You Provide Directly

When you register for a cd66a account or interact with the platform's features, you may provide the following categories of personal data:

• Registration details: full name, date of birth, email address, mobile number, and preferred username and password.
• KYC identity verification documents: copies of your National Identity Card, passport, or driving licence, and proof of address such as a utility bill or bank statement.
• Payment information: mobile wallet account numbers (bKash, Nagad, Rocket, Upay) or card details (Visa, Mastercard) used to make deposits or receive withdrawals.
• Communication records: any messages, emails, or support queries you send to cd66a, including the content of those communications and any attachments.
• Responsible gaming preferences: deposit limit settings, self-exclusion requests, session time reminders, and any other responsible gaming tool configurations you activate on your account.

2.2 Information Collected Automatically

Each time you access cd66a, our platform infrastructure automatically collects certain technical and behavioural data. This data is used to ensure the platform functions correctly, to maintain security, and to improve the user experience. Automatically collected data includes:

• IP address and approximate geolocation data derived from it, used to verify that you are accessing cd66a from a permitted jurisdiction.
• Device and browser data: operating system version, browser type and version, screen resolution, and device type (smartphone, tablet).
• Session data: login and logout timestamps, session duration, pages visited, game titles accessed, bets placed, and features used during each session.
• Cookie and tracking data: session cookies and persistent cookies used to keep you logged in, remember your preferences, and deliver relevant content. You may manage cookie preferences through your browser settings; however, disabling essential cookies may prevent some platform features from functioning correctly.

3. How cd66a Uses Your Personal Data

cd66a uses the personal data it collects solely for the purposes set out below. We do not sell, rent, or trade your personal data to third parties for marketing purposes. All data use is limited to what is necessary to operate the platform, fulfil our legal obligations, and protect both cd66a and our players.

• Account registration and management: to create, verify, maintain, and administer your cd66a account, including processing deposits, withdrawals, and transaction history.
• Identity verification and KYC compliance: to verify your identity as required for anti-money laundering, fraud prevention, and age verification purposes, in accordance with applicable laws.
• Platform security and fraud prevention: to monitor accounts for suspicious activity, investigate potential fraud, detect and prevent unauthorised access, and protect the integrity of cd66a's systems and games.
• Customer support: to respond to your queries, resolve disputes, process complaints, and communicate with you about your account, transactions, and any responsible gaming tools you have requested.
• Regulatory compliance: to comply with applicable legal obligations including anti-money laundering regulations, record-keeping requirements, and cooperation with lawful requests from competent authorities.

4. Sharing Your Personal Data

cd66a does not sell or rent your personal data. We share data only in the limited circumstances described below, and only to the extent necessary for the stated purpose. All third parties with whom cd66a shares data are required to handle that data in accordance with applicable data protection standards and are prohibited from using it for any purpose beyond the specific task for which it was shared.

4.1 Payment Processors

To process your deposits and withdrawals, cd66a shares the minimum necessary payment data with mobile wallet providers (bKash, Nagad, Rocket, Upay) and card payment processors (Visa, Mastercard network operators). These providers process your payment data in accordance with their own privacy policies and applicable financial regulations. cd66a does not store complete card numbers; payment tokens are used where applicable.

4.2 Game Content Providers

cd66a licenses game content from third-party providers including Evolution Gaming, Pragmatic Play, Ezugi, PG Soft, Spribe, and NetEnt. These providers may receive anonymised or pseudonymised session and gameplay data (such as bet amounts and game outcomes) for the purpose of technical game delivery, RTP audit, and regulatory compliance. They do not receive your full identity data unless required for a specific regulatory obligation disclosed to you at the time.

5. Data Retention

cd66a retains personal data only for as long as it is necessary to fulfil the purpose for which it was collected, or as required by applicable laws and regulations. The standard retention periods applied by cd66a are as follows: account registration data and transaction records are retained for a minimum of five years from the date of the last transaction or account closure, whichever is later, in order to satisfy anti-money laundering record-keeping requirements. KYC identity documents are retained for five years from the date of verification.

Communication records (support emails and chat logs) are retained for two years from the date of the last communication. Device and session logs used for fraud prevention are retained for up to twelve months. Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to any identifiable individual.

6. Data Security Measures

cd66a implements a combination of technical, organisational, and procedural safeguards designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. The security measures employed include, but are not limited to:

• SSL (Secure Sockets Layer) encryption for all data transmitted between your device and cd66a's servers, ensuring that data in transit cannot be intercepted in readable form.
• Restricted internal access controls that limit access to personal data to only those cd66a staff members who require it to perform their specific job function.
• Regular security assessments and vulnerability testing of the platform's infrastructure to identify and remediate potential weaknesses before they can be exploited.

Despite these safeguards, no internet-based system can guarantee absolute security. cd66a cannot guarantee that unauthorised third parties will never be able to defeat our security measures. You are responsible for keeping your account credentials (username, password, and linked mobile wallet numbers) confidential and for notifying cd66a immediately at [email protected] if you suspect any unauthorised access to your account.

7. Cookies and Tracking Technologies

cd66a uses cookies and similar tracking technologies to operate the platform, maintain your login session, remember your preferences, and analyse platform usage patterns. Cookies are small text files placed on your device by your browser when you visit cd66a. The types of cookies used by cd66a and their purposes are described below.

7.1 Essential Cookies

Essential cookies are strictly necessary for the platform to function. They enable core features such as user authentication, session management, and security token validation. Without essential cookies, cd66a cannot function properly and you would be unable to log in, navigate the site, or access your account. Essential cookies cannot be disabled without breaking core platform functionality.

7.2 Analytics and Performance Cookies

cd66a uses analytics tools to understand how players interact with the platform, identify the most popular game categories, and detect technical issues affecting performance. Analytics data is aggregated and anonymised where possible. You may opt out of non-essential analytics cookies by adjusting your browser's cookie settings, though this will not affect your ability to use cd66a's core features.

8. Links to Third-Party Services

cd66a does not include links to external third-party websites in its platform content. However, the payment methods available on cd66a (bKash, Nagad, Rocket, Upay, Visa, Mastercard) operate through their own independent platforms and services, which are governed by those providers' own privacy policies. cd66a is not responsible for the privacy practices of these external payment services. You are encouraged to review the privacy policies of those providers before sharing your data with them.

9. Children and Underage Users

cd66a is strictly an adults-only platform. The minimum age to register and use cd66a is 21 years. cd66a does not knowingly collect personal data from any person under the age of 21. If you are a parent or guardian and believe that a person under 21 has registered on cd66a using false information, please contact [email protected] immediately. cd66a will investigate and, where confirmed, will delete the underage account and all associated personal data without undue delay.

Age verification is carried out as part of the KYC process for all new registrations. Where cd66a has reasonable grounds to suspect that a registered account is held by a person under the age of 21, the account will be suspended pending age verification. All activity on the account during the suspension period will be reviewed, and any deposits or winnings associated with an underage account will be handled in accordance with our Terms and Conditions.

10. Changes to This Privacy Policy

cd66a reserves the right to update this Privacy Policy at any time. The date of the most recent revision is displayed at the top of this page. Where changes to this policy are material — meaning they significantly affect the way cd66a processes your personal data or reduce your rights — cd66a will endeavour to provide advance notice to registered account holders via email or an in-platform notification before the changes take effect.

Your continued use of cd66a following any update to this Privacy Policy constitutes your acceptance of the revised policy. If you do not agree to the updated policy, you must stop using cd66a and may request account closure by contacting [email protected]. cd66a will process your request in accordance with the data retention obligations described in Section 5 of this policy.

11. Governing Law

This Privacy Policy is governed by and construed in accordance with applicable law. Any dispute arising under or in connection with this Privacy Policy that cannot be resolved through direct communication with cd66a's support team shall be handled in accordance with the dispute resolution provisions set out in the cd66a Terms and Conditions. If you have a concern about the way cd66a handles your personal data, you are encouraged to contact cd66a's support team in the first instance at [email protected].

12. Contact Us About Your Data

If you have any questions about this Privacy Policy, wish to exercise any of your data rights described in Section 8, or want to raise a concern about the way cd66a processes your personal data, please contact our support team. All data-related requests will be acknowledged and responded to within a reasonable timeframe. cd66a's support team is available 24 hours a day, 7 days a week.