cl666 Privacy Policy

1Who We Are

cl666 is an online casino and sports betting platform operated at cl666.io, serving players primarily based in Bangladesh. For the purposes of this Privacy Policy, cl666 acts as the data controller in respect of all personal data collected through the cl666 platform, its customer support channels, and its integrated payment processing services.

All data controller responsibilities, including responding to player data rights requests, are managed through the cl666 support team. Players may direct all privacy-related enquiries to [email protected] (plain text — not a clickable link). cl666 is committed to handling all such requests promptly and in accordance with the standards set out in this policy.

2Personal Data We Collect

cl666 collects personal data across several categories. The table below summarises the types of data collected and the primary reason for each category:

cl666 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (other than identity document photographs required for KYC), or health information, unless you voluntarily disclose such information in the context of a responsible gaming self-exclusion request.

3How We Collect Your Data

cl666 collects personal data through the following channels:

3.1 Direct Submissions

You provide data directly when you complete the account registration form, submit KYC verification documents, make a deposit or withdrawal request, contact our support team via live chat or email, or respond to a promotional survey or feedback request. All data you enter through the cl666 platform is transmitted under SSL/TLS encryption.

3.2 Automated Technical Collection

When you access cl666.io, our platform automatically records technical data including your IP address, device identifiers, browser type, operating system, and interaction timestamps. This data is collected through server logs and first-party analytics tools for security monitoring and platform performance purposes.

3.3 Payment Partners

When you initiate a deposit or withdrawal through bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, or BRAC Bank, the relevant payment partner may share transaction confirmation data — including transaction reference numbers and the mobile number or account identifier associated with the payment — with cl666 to reconcile your account balance. cl666 does not receive full payment credentials (such as card numbers or full mobile banking PINs) through this process.

3.4 Third-Party Verification Providers

Where cl666 engages a third-party identity verification provider to assist with KYC processing, that provider may return data to cl666 confirming the result of an identity or age check. cl666 selects KYC partners that maintain industry-standard data security certifications and process data under contractual data protection obligations.

3.5 Cookies and Similar Technologies

cl666 uses cookies and similar tracking technologies on the cl666.io platform. Full details of the cookies we use, their purpose, and how you can manage your cookie preferences are set out in Section 7 of this policy.

4How We Use Your Personal Data

cl666 uses personal data collected from players for the following purposes:

• Account Creation and Management: To register your cl666 account, verify your identity and age, maintain your account profile, and provide you with access to the platform's full range of games and betting markets.
• Transaction Processing: To process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfer, and to maintain an accurate record of all financial activity on your account in Bangladeshi Taka (BDT).
• Platform Security and Fraud Prevention: To detect and investigate suspicious activity, identify and prevent multi-accounting, bonus abuse, money laundering, and other fraudulent or prohibited conduct as defined in our Terms & Conditions.
• Responsible Gaming Compliance: To monitor gaming activity for signs of problem gambling behaviour, to apply self-exclusion restrictions requested by players, and to enforce deposit limits, session limits, and time-out features set by the player.
• Customer Support: To respond to your enquiries, process complaints, and maintain a record of communications for quality assurance and dispute resolution purposes.
• Regulatory and Legal Compliance: To meet obligations under applicable anti-money-laundering (AML) frameworks, to respond to law enforcement or regulatory requests, and to maintain transactional records for audit purposes.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates where you have provided consent to receive such communications. You may withdraw this consent at any time by contacting [email protected].
• Platform Improvement: To analyse usage patterns, identify technical issues, and develop new features and game content that better serve the cl666 player community, particularly players based in Dhaka, Chittagong, Sylhet, and across Bangladesh.

cl666 does not use your personal data for automated decision-making that produces legal or similarly significant effects on your account status without human review, except where automated fraud detection flags an account for urgent suspension pending investigation.

5Legal Basis for Processing

cl666 processes personal data on the following legal bases:

5.1 Contractual Necessity

Processing your identity data, contact data, financial data, and account data is necessary to perform the contract between cl666 and you as a registered player. Without this processing, cl666 cannot create your account, verify your eligibility, process transactions, or provide access to the platform.

5.2 Legal Obligation

Processing for KYC verification, AML monitoring, and maintaining transactional records is necessary for cl666 to comply with its obligations under applicable international financial crime prevention frameworks and the terms of its operating licence.

5.3 Legitimate Interests

Processing technical data, usage data, and communications data for fraud prevention, platform security, and platform improvement is conducted on the basis of cl666's legitimate interest in operating a secure, reliable, and commercially viable platform. cl666 has assessed that this processing does not override the fundamental rights or freedoms of individual players.

5.4 Consent

Processing your data for direct marketing communications is conducted solely on the basis of your consent, which is obtained at the point of registration and is withdrawable at any time. Processing data in connection with non-essential cookies is also consent-based.

6Data Sharing and Disclosure

cl666 does not sell your personal data to third parties. Data is shared only in the circumstances described below:

6.1 Payment Processing Partners

cl666 shares the minimum necessary transaction data with bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank to facilitate the processing of your deposits and withdrawals. These partners process data under their own privacy policies and applicable financial services regulations.

6.2 Identity Verification Providers

cl666 may share identity document data with certified third-party KYC providers for the sole purpose of verifying your age and identity in connection with the cl666 account verification process. All such providers are engaged under contractual data protection obligations that prohibit secondary use of your data.

6.3 Game Technology Providers

Game studios supplying content to cl666, including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, may receive session identifiers and stake data necessary to deliver game functionality and calculate payouts. These providers do not receive your full identity profile. Data shared with game providers is used solely for game operation and RTP auditing purposes.

6.4 Legal and Regulatory Authorities

cl666 will disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by a valid legal order, subpoena, or equivalent compulsory process. cl666 will, where legally permitted, notify the affected player before making such a disclosure.

6.5 Business Transfers

In the event that cl666 undergoes a merger, acquisition, or transfer of platform assets, player data may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and of any material change to this Privacy Policy resulting from it, with a minimum of 30 days' advance notice where possible.

7Cookies and Tracking Technologies

cl666 uses cookies and similar client-side storage technologies on the cl666.io platform. Cookies are small text files stored on your device that allow the platform to recognise your browser session, maintain your login state, and record usage patterns for analytics purposes.

7.1 Essential Cookies

Essential cookies are strictly necessary for the cl666 platform to function. They maintain your authenticated session, remember your account preferences, and protect the platform against cross-site request forgery (CSRF) attacks. Essential cookies cannot be disabled without preventing you from using core platform features including login, deposit, and game play.

7.2 Analytics Cookies

Analytics cookies collect aggregated, anonymised data about how players navigate cl666.io, including which pages are visited most frequently, how long sessions last, and which features generate the most engagement. This data is used exclusively to improve platform usability and game catalogue relevance for our player base in Bangladesh.

7.3 Functional Cookies

Functional cookies remember your platform preferences — such as your default game category, display language setting, and notification preferences — so that you do not need to reconfigure them on each visit. These cookies do not track you across third-party websites.

7.4 Marketing Cookies

Where you have provided consent, marketing cookies allow cl666 to deliver promotional communications that are relevant to your gaming history and stated preferences. Marketing cookies are not placed without prior consent, and consent can be withdrawn at any time by contacting [email protected].

7.5 Managing Cookies

You may manage your cookie preferences through your browser settings. Most modern browsers allow you to block, delete, or receive warnings before cookies are stored. Please note that disabling essential cookies will impair your ability to use the cl666 platform. cl666 does not currently respond to browser-level "Do Not Track" signals, but we do honour consent choices made explicitly through your account preferences.

8Data Retention

cl666 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or audit obligations. The following retention periods apply as a general guide:

• Account and Identity Data: Retained for the full duration of your active cl666 account plus a minimum of five years following permanent account closure, in accordance with anti-money-laundering record-keeping requirements.
• Financial Transaction Data: Retained for a minimum of five years from the date of each transaction to support AML compliance, tax record obligations, and dispute resolution.
• Gaming Session Data: Retained for a minimum of three years to support responsible gaming monitoring, bonus eligibility auditing, and dispute resolution.
• Customer Support Communications: Retained for a minimum of two years from the date of the most recent communication in each support thread, or for the duration of any unresolved dispute plus one year, whichever is longer.
• Marketing Consent Records: Retained for the period during which you hold a cl666 account, and for one year following account closure, as evidence of the consent basis for any marketing communications sent during that period.
• Technical and Usage Data: Typically retained in identifiable form for 12 months, after which it is either deleted or anonymised for long-term analytics purposes.

When personal data reaches the end of its retention period, cl666 will securely delete or anonymise it using industry-standard data destruction methods.

9Data Security

cl666 implements a layered security architecture to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Key security measures include:

• SSL/TLS Encryption: All data transmitted between your device and cl666.io is encrypted in transit using current-generation SSL/TLS protocols. The cl666.io domain carries a valid SSL certificate, and our servers are configured to reject unencrypted HTTP connections.
• Encrypted Password Storage: Player passwords are never stored in plain text. cl666 uses strong one-way cryptographic hashing with salt to store password data, meaning that even cl666 staff cannot retrieve your password — only reset it.
• Access Controls: Access to player personal data within cl666's internal systems is restricted on a strict need-to-know basis. Staff members do not have access to player data beyond what is required for their specific operational role.
• Fraud and Anomaly Detection: cl666's security systems monitor account activity in real time for patterns associated with account takeover, payment fraud, and identity theft. Unusual activity triggers automatic protective measures including temporary account holds pending verification.
• Third-Party Security Standards: All third-party partners who process player data on cl666's behalf — including payment processors and KYC providers — are required to maintain security standards at least equivalent to those applied by cl666 directly.

No data transmission or storage system can guarantee absolute security. In the event of a data breach that poses a material risk to affected players, cl666 will notify impacted players without undue delay and will take all reasonable steps to contain and remediate the breach.

10Your Data Rights

As a cl666 player, you hold the following rights in respect of your personal data. cl666 will respond to all valid data rights requests within 30 days of receipt:

10.1 Right of Access

You may request a copy of the personal data cl666 holds about you at any time. Upon a verified identity confirmation, cl666 will provide a structured summary of your account data, transaction history, gaming records, and communication history in a readable format.

10.2 Right to Rectification

If any personal data cl666 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Requests to update core identity data (name, date of birth) must be accompanied by supporting documentary evidence, as these fields are subject to KYC verification requirements.

10.3 Right to Erasure

You may request that cl666 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (for consent-based processing only), or where you believe the data has been processed unlawfully. Please note that erasure requests cannot override cl666's legal obligations to retain financial and identity records for the minimum periods specified in Section 8.

10.4 Right to Restrict Processing

You may request that cl666 restrict the processing of your personal data while a rectification request is pending, while you contest the lawfulness of processing, or where cl666 no longer needs the data but you require it for a legal claim.

10.5 Right to Data Portability

Where processing is based on your consent or on contractual necessity, you may request that cl666 provide your personal data in a structured, machine-readable format suitable for transfer to another service provider.

10.6 Right to Object

You may object to processing of your personal data that is conducted on the basis of cl666's legitimate interests, including profiling for marketing purposes. cl666 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

10.7 How to Exercise Your Rights

To exercise any of the rights above, contact cl666 support at [email protected] with the subject line "Data Rights Request" and a description of the right you wish to exercise. cl666 will acknowledge your request within 48 hours and provide a substantive response within 30 days. Identity verification will be required before any data is disclosed or deleted.

11Children and Minors

The cl666 platform is strictly intended for adults aged 21 years and above. cl666 does not knowingly collect personal data from individuals under the age of 21. If we become aware that a player who has provided personal data is under 21, we will immediately close the associated account, delete the personal data collected in connection with that account, and return any deposited funds to the originating payment method to the extent technically possible.

If you are a parent or guardian and believe that a person under your care has registered a cl666 account, please contact [email protected] immediately with details of the account so that we can investigate and take appropriate action without delay.

12International Data Transfers

cl666 operates as an internationally licensed offshore platform. Personal data collected from players based in Bangladesh may be stored on or transmitted to servers located outside Bangladesh. cl666 ensures that all international transfers of personal data are conducted under appropriate safeguards, including contractual data protection clauses with receiving parties that establish obligations equivalent to those set out in this Privacy Policy.

By registering a cl666 account, you acknowledge that your personal data may be transferred to and processed in jurisdictions other than Bangladesh. cl666 will not transfer your data to jurisdictions that do not provide adequate data protection standards without first implementing appropriate transfer safeguards.

13Updates to This Privacy Policy

cl666 reserves the right to update or replace this Privacy Policy at any time. Material changes — those that significantly affect how we collect, use, or share your personal data — will be communicated to registered players via the email address on file or through a prominent platform notice, no fewer than 14 days before the changes take effect.

The most current version of the cl666 Privacy Policy is always accessible at cl666.io/privacy-policy and carries the effective date shown in the header of this document. Continued use of the cl666 platform following the effective date of any updated policy constitutes your acceptance of the revised terms. If you do not agree with a material change, you should contact [email protected] to close your account before the change takes effect.

14Contact and Data Enquiries

For all privacy-related enquiries, data rights requests, or concerns about how cl666 handles your personal data, please use the contact details below:

• Email: [email protected] — subject line: "Privacy Enquiry" or "Data Rights Request"
• Live Chat: Available 24 hours a day, 7 days a week through your cl666 account dashboard
• Response Time: Email acknowledgement within 48 hours; full response within 30 calendar days for data rights requests; general privacy enquiries within 5 Bangladesh Standard Time (BST, UTC+6) business days

cl666 is committed to resolving all privacy concerns fairly and transparently. If you are not satisfied with cl666's response to a privacy complaint, you may be entitled to escalate the matter to a relevant data protection authority or pursue resolution through the dispute mechanism available under cl666's operating licence, as further described in the cl666 Terms & Conditions.