cd666 Privacy Policy —
How We Protect Your Data

Throughout this Privacy Policy, the following terms carry the meanings set out below:

• "cd666" / "We" / "Us" / "Our" refers to the operator of the cd666 platform accessible at cd666.bio and all associated services.
• "Platform" means the cd666 website, mobile-optimised interface, and all features and services delivered through cd666.bio.
• "Player" / "You" / "Your" means any individual who accesses, browses, registers on, or otherwise uses the cd666 Platform.
• "Personal Data" means any information that identifies or could reasonably be used to identify you as an individual, including your name, mobile number, date of birth, and payment details.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, and deletion.
• "Third-Party Service Provider" means any external organisation engaged by cd666 to deliver platform services, including payment processors, game content providers, and analytics partners.
• "Cookies" means small text files placed on your device by the cd666 Platform to support session management, preference storage, and analytical functions.

cd666 collects Personal Data across several categories depending on how you interact with the Platform. The categories of data we may hold about you are set out in the table below:

cd666 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information. If you voluntarily disclose such information in a support communication, it will be used solely for the purpose of resolving your query and will not be stored in your player profile.

cd666 collects Personal Data through the following channels:

• Direct interactions: Data you provide when creating your cd666 account, completing KYC verification, making deposits or withdrawals, participating in promotions, or contacting our support team.
• Automated technologies: Technical and Usage Data collected automatically when you access the Platform, including through cookies, server logs, and session tracking tools embedded in the cd666 interface.
• Payment processors: Transaction reference data received from bKash, Nagad, Rocket, Upay, and partner banking institutions when a deposit or withdrawal is initiated from your cd666 account.
• Game providers: Game session data — including stake amounts, game outcomes, and RTP statistics — received from certified third-party game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi as part of normal platform operation.
• Identity verification partners: Confirmation data received from identity document verification services engaged by cd666 during the KYC process, where applicable.

cd666 processes your Personal Data for the following purposes:

• Account management: To create, maintain, and secure your cd666 player account, including verifying your identity and age as required under our platform policies.
• Payment processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, and partner banks in BDT, and to maintain accurate transaction records.
• Platform delivery: To operate the sportsbook, live casino, and slots sections of the cd666 Platform and to deliver personalised game recommendations based on your usage patterns.
• Customer support: To respond to enquiries, investigate complaints, and resolve technical or account-related issues raised through live chat or email.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, duplicate account creation, and other prohibited conduct as defined in the cd666 Terms and Conditions.
• Responsible gaming: To monitor betting patterns and account behaviour for signs of problem gambling, and to administer player-requested tools such as deposit limits, cool-off periods, and self-exclusion.
• Legal compliance: To fulfil obligations under applicable anti-money laundering, know-your-customer, and data protection regulations and to respond to lawful requests from competent authorities.
• Platform improvement: To analyse aggregate usage data in order to improve the performance, reliability, and user experience of the cd666 Platform.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates via your registered contact details, where you have not opted out of such communications.

cd666 processes your Personal Data on one or more of the following legal grounds:

• Contractual necessity: Processing is required to perform the contract between you and cd666 — specifically, to operate your account, process payments, and deliver the services you have requested.
• Legitimate interests: Processing is necessary for the legitimate interests of cd666, including fraud prevention, platform security, responsible gaming monitoring, and product improvement, provided those interests are not overridden by your privacy rights in any given context.
• Legal obligation: Processing is required to comply with applicable legal obligations, including KYC and anti-money laundering requirements.
• Consent: Where cd666 relies on your consent to process data — for example, for optional marketing communications — you may withdraw that consent at any time by contacting cd666 support or by updating your notification preferences in your account settings. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

cd666 does not sell, rent, or trade your Personal Data to third parties for commercial marketing purposes. We may share your Personal Data with the following categories of recipients only where necessary for the purposes described in Section 4:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard receive the transaction data necessary to process deposits and withdrawals on your behalf.
• Game content providers: Certified providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive session data necessary to operate the games you play on the cd666 Platform.
• Identity verification services: Where cd666 engages a third-party KYC verification partner, your submitted identity documents may be shared with that partner for verification purposes only.
• Analytics providers: Aggregate, anonymised usage data may be shared with analytics partners to support platform performance monitoring. No personally identifiable information is shared in this context.
• Legal and regulatory authorities: cd666 will disclose Personal Data to competent governmental or law enforcement authorities where required to do so by a valid legal obligation, court order, or regulatory directive.
• Business successors: In the event of a merger, acquisition, or transfer of business assets, your Personal Data may be transferred to the successor entity, subject to equivalent privacy protections continuing to apply.

All Third-Party Service Providers engaged by cd666 are contractually required to process your Personal Data only for the purposes for which it was shared and to maintain appropriate technical and organisational security measures.

cd666 retains your Personal Data for as long as your account remains active and for a defined period following account closure, in order to meet our legal, regulatory, and contractual obligations. The general retention periods applied by cd666 are as follows:

Where data is no longer required for any active purpose and its retention period has elapsed, cd666 will securely delete or anonymise it in accordance with our internal data lifecycle procedures.

cd666 implements a range of technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption on all data transmissions between your device and the cd666 Platform.
• Bcrypt hashing of account passwords — cd666 does not store passwords in plain text or reversibly encrypted form.
• OTP-based authentication for login and withdrawal confirmation, delivered to your registered mobile number.
• Continuous server-side monitoring for anomalous access patterns, brute-force attempts, and other attack vectors.
• Role-based internal access controls limiting cd666 staff access to Personal Data on a strict need-to-know basis.
• Regular security assessments of the cd666 Platform infrastructure and third-party integrations.
• Secure data centres with physical access controls protecting the servers on which your data is stored.

Whilst cd666 takes data security seriously and applies industry-standard protective measures, no online platform can guarantee absolute security against all possible threats. You are encouraged to use a strong, unique password for your cd666 account and to keep your login credentials confidential. If you suspect that your account security has been compromised, please contact cd666 support immediately via live chat.

The cd666 Platform uses cookies and similar tracking technologies to support core platform functionality, maintain your session state, remember your preferences, and collect anonymised usage statistics that help us improve the Platform experience.

The categories of cookies used on the cd666 Platform are as follows:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies and security tokens. They cannot be disabled without breaking core Platform functionality.
• Functional cookies: Store your language preference, display settings, and other personalisation choices so that they persist across sessions.
• Analytical cookies: Collect anonymised data on how players navigate the cd666 Platform — such as pages visited, time on page, and exit points — to help us identify areas for improvement.
• Performance cookies: Monitor Platform load times, error rates, and server response performance to support infrastructure optimisation.

You may configure your browser settings to refuse non-essential cookies. Note that disabling functional cookies may affect the performance and personalisation features of the cd666 Platform. Strictly necessary cookies cannot be disabled via browser settings as they are essential to Platform operation.

As a player on the cd666 Platform, you hold the following rights in relation to your Personal Data. You may exercise any of these rights by contacting the cd666 support team via live chat or email:

• Right of access: You may request a copy of the Personal Data cd666 holds about you. We will respond to such requests within a reasonable timeframe and deliver the data via your registered contact details.
• Right to rectification: You may request that any inaccurate or incomplete Personal Data held in your cd666 account be corrected. Basic account information such as mobile number and email address may also be updated directly through your account settings.
• Right to erasure: In certain circumstances, you may request the deletion of your Personal Data. This right is subject to overriding legal retention obligations — for example, transaction records that cd666 is required to retain for regulatory compliance purposes cannot be erased on request.
• Right to restriction: You may request that cd666 restrict the processing of your Personal Data in specific circumstances, such as where you contest the accuracy of the data or have objected to processing pending verification of legitimate grounds.
• Right to object: You may object to processing carried out on the basis of legitimate interests, including profiling for personalised game recommendations. You may also opt out of marketing communications at any time.
• Right to data portability: Where processing is carried out by automated means on the basis of contract or consent, you may request that your Personal Data be provided to you in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where cd666 relies on your consent to process data, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

cd666 will not discriminate against you for exercising any of the privacy rights listed above. If you are not satisfied with the way cd666 has handled a privacy-related request or complaint, you may escalate the matter by writing to the cd666 data protection contact at [email protected].

The cd666 Platform is strictly intended for adults aged 21 years and above. cd666 does not knowingly collect, process, or store Personal Data belonging to individuals under the age of 21. If you are under 21 years of age, you must not use the cd666 Platform or submit any personal information through it.

If cd666 becomes aware that Personal Data has been collected from an individual under the age of 21, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe that your child may have submitted Personal Data to cd666, please contact our support team immediately via live chat or at [email protected] so that we can investigate and take appropriate action.

The cd666 Platform may contain references to third-party game providers and payment partners in the course of delivering platform services. Interactions with those third-party services — for example, a payment transaction processed through bKash or Nagad — are governed by the respective third party's own privacy policy. cd666 is not responsible for the privacy practices of third-party service providers and encourages players to review those policies independently.

cd666 does not include outbound links to unrelated external websites within the cd666 Platform interface. Any link you follow outside of the cd666 domain does so at your own risk and is outside the scope of this Privacy Policy.

cd666 may update this Privacy Policy from time to time to reflect changes in platform services, applicable law, or internal data handling practices. When a material change is made, cd666 will post a prominent notice on the Platform and update the "Last Updated" date at the top of this page. Where the nature of the change warrants it, cd666 may also notify players directly via their registered mobile number or email address.

Your continued use of the cd666 Platform following publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to an updated policy, you should stop using the Platform and contact cd666 support to initiate account closure.

We recommend reviewing this page periodically to stay informed about how cd666 protects your personal information. The version of this policy effective at the time of any interaction with the Platform is the version that governs that interaction.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way cd666 handles your Personal Data, please contact us through one of the following channels. cd666 aims to acknowledge all data-related enquiries within one business day and to resolve them within five business days where no extended investigation is required.

• Live Chat: available 24 hours a day, 7 days a week through the cd666 Platform
• Email: [email protected] (plain text — not a clickable link)

When contacting cd666 about a data privacy matter, please include your registered mobile number and a brief description of your request so that we can locate your account and respond efficiently. For security purposes, cd666 may ask you to verify your identity before fulfilling an access, rectification, or erasure request.