cdc666 Privacy Policy
Your privacy matters at cdc666. This Privacy Policy explains exactly what personal data we collect from Bangladeshi players, how we use it, who we share it with, and the rights you hold over your own information.
1. Introduction
This Privacy Policy ("Policy") applies to all personal data collected, processed, stored, or transmitted by cdc666 ("we", "us", "the Platform") through the website cdc666.org and all associated services including the online casino, live dealer games, sports betting markets, fishing game titles, cashier system, and customer support channels.
cdc666 is committed to handling personal data responsibly and transparently. This Policy describes the types of information we gather from registered Members and visitors in Bangladesh, the lawful bases under which we process that data, how long we retain it, and the controls you have over your own information. By registering an account or continuing to use the cdc666 platform, you acknowledge that you have read and understood this Privacy Policy.
This Policy should be read alongside the cdc666 Terms & Conditions, which are incorporated by reference. Capitalised terms not defined in this Policy carry the meanings given to them in the Terms & Conditions.
cdc666 processes data for Bangladeshi players in accordance with internationally recognised privacy principles, including purpose limitation, data minimisation, storage limitation, and security. We do not sell your personal data to third-party marketers.
2. Personal Data We Collect
We collect only the data necessary to provide a secure and compliant online gaming service.
Registration Data
When you create a cdc666 account, we collect:
- Full legal name as it appears on your National ID card or passport
- Date of birth (to verify the 21+ age requirement)
- Bangladesh mobile phone number
- Email address (where provided)
- Username and encrypted password
- Division and district of residence (for Bangladesh localisation purposes)
Payment and Financial Data
To process deposits and withdrawals through bKash, Nagad, Rocket, Upay, Visa, and Mastercard, we collect:
- Mobile wallet account numbers (bKash, Nagad, Rocket, Upay)
- Card type and the last four digits of card numbers (full card numbers are never stored by cdc666)
- Transaction reference numbers and timestamps
- Deposit and withdrawal amounts in BDT
Gaming Activity Data
We automatically record the following data related to your gaming activity on cdc666:
- Games played, bet amounts, game outcomes, and session durations
- Sports betting markets accessed, odds accepted, and bet settlement records
- Bonus credits claimed and wagering progress
- Responsible gaming settings you have enabled (deposit limits, time-out periods)
Device and Technical Data
When you access cdc666.org, our servers automatically collect:
- IP address and approximate geographic location
- Device type, operating system version, and browser type
- Mobile network operator and connection type
- Session start and end timestamps, pages visited, and click-path data
- Cookie identifiers and similar tracking technologies (see Section 7)
Identity Verification Documents
To comply with anti-money-laundering obligations and to verify the 21+ age requirement, we may request:
- Copy of National ID card (NID) or valid passport
- Proof of ownership of your registered payment method (e.g., screenshot of bKash or Nagad account showing your registered mobile number)
- Proof of address (utility bill, bank statement, or similar document no older than three months)
Communications Data
When you contact cdc666 support at [email protected] or through the in-platform messaging system, we retain a record of the correspondence, including the subject matter, timestamps, and any attachments you provide. This data is used solely to resolve your query and to improve service quality.
3. How We Use Your Personal Data
cdc666 processes your personal data only for specific, legitimate purposes. Below is a summary of each purpose and the lawful basis on which we rely.
cdc666 does not use your personal data for automated profiling that produces legal or similarly significant effects on you, nor do we use your data to make fully automated decisions about your account without human review.
4. How We Protect Your Data
Six core protections cdc666 applies to every Member's personal information.
256-bit SSL Encryption
All data transmitted between your device and cdc666.org is encrypted using industry-standard 256-bit SSL/TLS protocols. This protects your login credentials, payment details, and personal information from interception during transit.
Secure Payment Tokenisation
cdc666 never stores full card numbers on its own servers. Card payments are tokenised by our payment processor, meaning only an anonymised reference token is retained. Your bKash and Nagad wallet numbers are stored in encrypted form and are never displayed in plain text to support agents.
Access Controls and Auditing
Internal access to Member personal data is restricted on a strict need-to-know basis. All staff access to personal data is logged and audited regularly. cdc666 conducts periodic internal reviews to ensure data handling practices remain consistent with this Privacy Policy.
Data Minimisation
We collect only the personal data genuinely required to operate a safe, compliant online gaming platform for Bangladesh players. We do not collect sensitive categories of data such as health information, religious beliefs, or biometric data unless specifically required for a regulatory obligation.
Defined Retention Periods
cdc666 retains personal data only for as long as necessary for the purpose it was collected, or as required by applicable law. Financial transaction records are retained for a minimum of five years in line with standard AML record-keeping requirements. Gaming activity logs are retained for three years. Account data for closed accounts is deleted or anonymised within 12 months of closure, subject to any outstanding legal holds.
Breach Notification
In the unlikely event of a personal data breach that poses a risk to Members, cdc666 will notify affected individuals promptly by platform message and email. We will provide a clear description of what data was affected, what steps we are taking to contain the breach, and what actions you should take to protect your account.
5. Sharing Your Personal Data
cdc666 does not sell, rent, or trade your personal data to third-party advertisers or data brokers under any circumstances. We share personal data with third parties only in the following limited and controlled situations:
Payment Service Providers
To process your deposits and withdrawals, we share the minimum necessary payment data with licensed payment processors handling bKash, Nagad, Rocket, Upay, Visa, and Mastercard transactions. These providers are contractually bound to process your data solely for the purpose of completing the payment and are not permitted to use it for any other purpose.
Game Content Providers
Some game titles on the cdc666 platform are powered by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive a Member's anonymised session token and bet data to render the game correctly and settle bets. They do not receive your full name, contact details, or payment information.
Legal and Regulatory Authorities
cdc666 will disclose personal data to law enforcement agencies, courts, or regulatory bodies where required to do so by law, court order, or to prevent, detect, or investigate fraud, money laundering, or other criminal activity. We will always seek to notify affected Members of such disclosure where legally permitted to do so.
Fraud Prevention Services
We may share limited identifying data with specialist fraud prevention and identity verification services to detect unauthorised access, duplicate accounts, or patterns consistent with bonus abuse or money laundering. These services operate under strict confidentiality agreements and data processing restrictions.
No cross-border data transfers to unknown destinations: cdc666 takes reasonable steps to ensure that any third party receiving personal data from us provides an equivalent level of data protection. We do not transfer your data to territories with inadequate data protection frameworks without implementing appropriate contractual safeguards.
6. Cookies and Tracking Technologies
cdc666.org uses cookies and similar tracking technologies to ensure the platform functions correctly, to maintain your login session, and to analyse how Members use the site so we can improve it. A cookie is a small text file stored on your device by your browser when you visit our platform.
Strictly Necessary Cookies
These cookies are essential for the platform to function. They maintain your authenticated login session, remember your game preferences, preserve your shopping cart in the cashier, and ensure security tokens are valid. You cannot opt out of strictly necessary cookies without losing access to core platform features.
Analytics Cookies
We use anonymised analytics cookies to understand which pages Members visit most frequently, how long they spend on each section of the platform, and where they encounter errors or drop off. This data is aggregated and cannot be used to identify you as an individual. You may opt out of analytics cookies via your browser settings or our cookie preference panel.
Marketing Cookies (Opt-in)
With your explicit consent, cdc666 may set cookies that help us understand which promotional content is relevant to you — for example, whether you prefer cricket betting markets during the BPL season or slot game promotions. Marketing cookies are only activated where you have given clear affirmative consent and may be withdrawn at any time.
You can manage your cookie preferences at any time through your browser settings. Note that disabling certain cookies may affect the functionality of the cdc666 platform.
7. Your Privacy Rights
As a Member of cdc666, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with a clear description of your request and sufficient information to verify your identity. We will respond within a reasonable timeframe, ordinarily within 30 calendar days.
Right of Access
You have the right to request a copy of the personal data cdc666 holds about you, along with information about the purposes for which it is processed, the categories of data held, and the recipients to whom it has been disclosed.
Right to Rectification
If any personal data cdc666 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated promptly. You may update certain account details (such as your mobile number or email address) directly within your account settings.
Right to Erasure
You may request that cdc666 delete your personal data where it is no longer necessary for the purpose it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to overriding legal obligations — for example, we are required to retain financial transaction records for a minimum of five years for AML compliance purposes, and erasure requests cannot override this obligation.
Right to Restriction
You may request that cdc666 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested, or where you have objected to processing and a determination is pending.
Right to Object
Where cdc666 processes your personal data on the basis of legitimate interests or for direct marketing purposes, you have the right to object. If you object to direct marketing, we will cease processing your data for that purpose immediately. If you object to processing based on legitimate interests, we will assess whether our interests override your rights and respond accordingly.
Right to Data Portability
Where technically feasible and where processing is based on your consent or on a contract, you may request that cdc666 provide your personal data in a structured, commonly used, machine-readable format so you can transfer it to another service provider.
8. Protection of Minors
cdc666 operates a strict 21+ only policy. We do not knowingly collect, store, or process personal data from any individual under the age of 21. Age verification checks are applied at the point of registration and again at the point of first withdrawal. If cdc666 discovers or is notified that an account has been opened by a person under 21 years of age, we will immediately suspend that account, void any associated winnings, return deposits where practicable, and permanently delete all associated personal data in compliance with applicable data protection requirements.
Parents and guardians who believe that a minor has accessed the cdc666 platform should contact us immediately at [email protected] so we can take prompt corrective action.
9. Changes to This Privacy Policy
cdc666 may update this Privacy Policy from time to time to reflect changes in our data processing practices, operational requirements, or applicable law. When we make material changes to this Policy, we will notify registered Members by posting a prominent notice on the cdc666 platform and, where appropriate, by sending a notification to the mobile number or email address registered to your account.
The date at the top of this document ("Last updated") will always reflect when the most recent revision was made. We encourage you to review this Privacy Policy periodically. Your continued use of the cdc666 platform following the posting of a revised Policy constitutes your acceptance of the changes.
10. Contact Us About Privacy
If you have any questions, concerns, or requests relating to this Privacy Policy or the way cdc666 handles your personal data, please contact our support team. We are committed to addressing all privacy-related enquiries seriously and promptly.
Ready to Play at cdc666?
Your data is protected. Explore Bangladesh's most trusted online casino — live games, cricket betting, slots, and more. For players aged 21 and above only.
Login to cdc666 Explore cdc666 Casino