ct66 Privacy Policy

ct66 is an online casino and sports betting platform operating at https://ct66.io, serving registered players in Bangladesh. We are committed to protecting the privacy and personal data of every player who interacts with our platform, whether through a desktop browser, mobile device, or any other access method.

This Privacy Policy has been prepared to clearly explain our data practices in plain, accessible English. It covers the entire ct66 platform including the website, account dashboard, game lobby, live betting interface, promotional pages, and all communication channels including Live Chat, WhatsApp, and email support.

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy. Together, these three documents form the complete regulatory framework governing your relationship with ct66.

If you have any questions about this Privacy Policy or your personal data, please contact our Data Protection team at [email protected]. We are available 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6).

ct66 collects personal data across several categories. The specific data points we collect depend on the nature of your interaction with the platform. The following table outlines the categories of personal data we may collect and the typical data points within each category:

We do not collect sensitive personal data such as biometric data, racial or ethnic origin, political opinions, religious beliefs, or health information unless specifically required for enhanced age or identity verification and only with your explicit consent.

ct66 collects personal data through the following mechanisms. Understanding these collection points will help you make informed choices about your interactions with the platform:

• Direct Submission: Data you voluntarily provide when completing the registration form, updating your account profile, submitting identity verification documents, or contacting support via Live Chat, WhatsApp, or email.
• Automated Technical Collection: Data collected automatically when you visit the ct66 website, including your IP address, browser fingerprint, device identifiers, and session activity, via server logs and analytics tools.
• Payment Processors: Financial transaction data received from bKash, Nagad, Rocket, and Upay as part of processing your deposit and withdrawal requests. This data transfer is essential for account crediting and fraud prevention.
• Game Providers: Gameplay logs and session data forwarded by our licensed game providers (Pragmatic Play, Evolution Gaming, JILI, Spribe, and others) in order to maintain accurate game history in your account.
• Cookies and Similar Technologies: Session cookies, persistent cookies, and similar browser-based tracking technologies as described in detail in Section 7 of this Privacy Policy.

ct66 uses the personal data it collects for a defined set of purposes. We do not use your data for any purpose incompatible with the purposes described in this section without first obtaining your explicit consent. The primary purposes for which ct66 processes your personal data are as follows:

• Account Operation: To create, verify, maintain, and close your ct66 player account, including processing identity and age verification in compliance with our 21+ policy.
• Payment Processing: To facilitate BDT deposits and withdrawals via bKash, Nagad, Rocket, and Upay, including fraud detection and transaction reconciliation.
• Platform Delivery: To provide access to casino games, live dealer tables, sports betting markets, and all other features of the ct66 platform.
• Customer Support: To respond to your enquiries, resolve disputes, investigate complaints, and provide technical assistance through Live Chat, WhatsApp, and email.
• Responsible Gaming: To monitor gameplay patterns and identify potential signs of problem gambling, and to implement player-requested tools such as deposit limits, session reminders, and self-exclusion.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, collusion, and other prohibited conduct on the platform.
• Legal Compliance: To comply with applicable legal and regulatory obligations, including responding to lawful requests from government authorities or law enforcement agencies.
• Platform Improvement: To analyse aggregated usage data and feedback to improve the ct66 platform, optimise game performance, and develop new features for Bangladesh players.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have opted in to receive such communications. You may opt out at any time by contacting support.

ct66 processes your personal data on one or more of the following legal bases, depending on the specific processing activity involved:

• Contractual Necessity: Processing that is necessary for the performance of the contract between you and ct66, including account creation, payment processing, and game delivery.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) obligations, age verification requirements, and responses to lawful authority requests.
• Legitimate Interests: Processing carried out in pursuit of ct66's legitimate business interests, such as fraud prevention, platform security, and service improvement, where these interests are not overridden by your fundamental rights.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications and optional analytics. You may withdraw consent at any time without affecting the lawfulness of prior processing.

ct66 does not sell your personal data to any third party. We share personal data only in the limited circumstances described below and always with appropriate safeguards in place to protect your information:

• Payment Service Providers: bKash, Nagad, Rocket, and Upay receive the minimum financial data necessary to process your deposit and withdrawal transactions securely.
• Game Providers: Licensed game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, JILI, Spribe, and Ezugi may receive your player ID and session data to deliver game content and maintain accurate records.
• Identity Verification Services: Third-party KYC and identity verification providers may process your submitted identity documents (NID, passport) to confirm your age and identity. These providers are contractually bound to strict data confidentiality terms.
• Fraud Prevention Partners: Specialist fraud detection services may receive technical data (IP address, device fingerprint, transaction patterns) to help identify and prevent fraudulent activity on the platform.
• Legal and Regulatory Authorities: ct66 may disclose personal data to relevant government authorities, law enforcement agencies, or regulatory bodies when required to do so by applicable law, court order, or in response to a lawful investigation.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of the ct66 business, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and its privacy implications in advance.

ct66 uses cookies and similar browser-based technologies to enable core platform functionality, maintain your login session, and analyse how the platform is used. The following categories of cookies are deployed on the ct66 website:

ct66 does not deploy advertising cookies, retargeting pixels, or social media tracking cookies of any kind. You can control and delete cookies through your browser settings. Note that disabling strictly necessary cookies may prevent you from logging in or using certain features of the ct66 platform.

ct66 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the ct66 servers.
• Encrypted storage of all sensitive personal and financial data at rest using AES-256 encryption.
• Password hashing using industry-standard bcrypt algorithms. ct66 support staff cannot view your account password.
• Two-factor authentication (2FA) available for all player accounts to add an additional layer of login security.
• Continuous monitoring of platform systems for suspicious activity, including automated intrusion detection and anomaly alerting.
• Role-based access controls limiting ct66 staff access to personal data on a strict need-to-know basis.
• Regular internal security audits and vulnerability assessments of the ct66 platform infrastructure.

In the event of a personal data breach that poses a risk to your rights and freedoms, ct66 will notify affected players promptly and take immediate remedial action. Despite our robust security measures, no internet-based platform can guarantee absolute security. We encourage you to use a strong, unique password for your ct66 account and to enable 2FA.

ct66 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required by law. The following retention schedule applies to the main categories of personal data held by ct66:

Upon expiry of the applicable retention period, ct66 will securely delete or anonymise your personal data. Anonymised data (from which you cannot be identified) may be retained indefinitely for statistical and platform improvement purposes.

As a player on the ct66 platform, you hold the following rights with respect to your personal data. These rights may be exercised at any time by contacting the ct66 Data Protection team at [email protected]:

• Right of Access: You have the right to request a copy of the personal data ct66 holds about you, along with information about how it is being used.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held by ct66 without undue delay.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Restrict Processing: You have the right to request that ct66 restricts the processing of your personal data in certain circumstances, such as while a dispute is being investigated.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format, and to transmit it to another service provider where technically feasible.
• Right to Object: You have the right to object to ct66 processing your personal data on the basis of legitimate interests, including for profiling purposes. You also have an absolute right to object to processing for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

ct66 will respond to all rights requests within 30 days of receipt. In complex cases, this period may be extended by a further 60 days, of which you will be notified. There is no fee for exercising your rights unless requests are manifestly unfounded or excessive, in which case ct66 reserves the right to charge a reasonable administrative fee.

The ct66 platform is strictly intended for adults aged 21 years and above. ct66 does not knowingly collect personal data from any individual under the age of 21. If you are under 21, you must not register for or use the ct66 platform in any capacity.

If ct66 discovers or receives reliable notification that personal data has been collected from an individual under the age of 21, we will take immediate action to delete all associated data and close the relevant account. Any winnings generated by an underage player will be forfeited and returned to the original payment source.

The ct66 platform may contain references to third-party services such as payment providers (bKash, Nagad, Rocket, Upay) and game studios (Pragmatic Play, Evolution Gaming, JILI, Spribe, and others). Where links to third-party websites or services are present, please be aware that ct66 has no control over the content, privacy practices, or data handling policies of those third-party platforms.

This Privacy Policy applies solely to the ct66 platform at https://ct66.io. We strongly recommend that you review the privacy policies of any third-party service you interact with, particularly payment providers through whom you conduct financial transactions. ct66 accepts no responsibility or liability for the privacy practices of third-party platforms.

ct66 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. When material changes are made to this Privacy Policy, we will notify registered players by posting a prominent notice on the ct66 platform and, where appropriate, sending a notification to the email address or phone number associated with your account.

The "Last Updated" date at the top of this Privacy Policy will be revised each time a change is made. We encourage you to review this page periodically to stay informed of how ct66 protects your personal data. Your continued use of the ct66 platform following notification of changes constitutes your acceptance of the updated Privacy Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way ct66 handles your personal data, please contact our Data Protection team using the details below. All enquiries are handled in English and responses are provided within 2 business days under normal circumstances.

• Email: [email protected]
• Support Hours: Available 24/7 — Live Chat, WhatsApp & Email
• Time Zone: Bangladesh Standard Time (BST, UTC+6)
• Subject Line: Use "Privacy Policy Enquiry" or "Data Rights Request" when contacting us about this policy.

When submitting a data rights request (see Section 10), please include your registered email address or mobile number, the nature of your request, and any relevant account details to help us identify your records efficiently. ct66 may request additional identity verification before processing sensitive data rights requests to protect your account security.