ch66 Privacy Policy

This Privacy Policy describes how ch66 ("we", "us", "our") collects, processes, stores, and protects personal data relating to individuals ("you", "your", "member") who access or use the ch66 platform at ch66.io, including all betting, casino, and account management services available therein.

By registering a ch66 account or by continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. This Privacy Policy forms part of the overall agreement between you and ch66 alongside the Terms & Conditions and Responsible Gaming Policy.

ch66 collects personal data in three primary ways: information you provide directly during registration and account management; information generated automatically through your use of the platform; and information received from trusted third-party verification and payment partners. The specific categories of data collected are described below.

ch66 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data (beyond responsible gaming self-disclosures), biometric data, or genetic data, except where expressly required for KYC verification under applicable compliance obligations.

ch66 uses the personal data we collect for the following purposes, each of which is tied to a legitimate operational or legal basis as described in Section 4:

• Account Registration & Management: To create and maintain your ch66 account, verify your identity and age (21+), and manage your BDT wallet balance and preferences.
• Service Delivery: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and supported bank channels; to make cricket betting, live casino, slots, and other game categories available to you; and to record and settle your bets accurately.
• KYC & Fraud Prevention: To verify your identity documents (NID, passport) and address, to detect and prevent fraudulent activity, bonus abuse, money laundering, and underage gambling.
• Responsible Gaming: To monitor gaming behaviour for signs of problem gambling, to apply deposit limits or self-exclusion measures where appropriate, and to fulfil our responsible gaming obligations.
• Customer Support: To respond to your account queries, complaints, and responsible gaming requests in a timely and effective manner.
• Legal & Compliance Obligations: To comply with applicable anti-money laundering (AML) requirements, to respond to lawful requests from regulatory or law enforcement authorities, and to maintain records as required by applicable international gaming licence conditions.
• Platform Improvement: To analyse anonymised and aggregated usage data to improve the performance, reliability, and user experience of the ch66 platform for Bangladesh members.
• Marketing Communications (with consent): To send you promotional offers, bonus notifications, and product updates by SMS or email where you have opted in to receive such communications. You may opt out at any time by contacting [email protected].

ch66 processes your personal data on the following legal grounds, depending on the specific purpose for which the data is used:

• Contract Performance: Processing necessary to create and maintain your ch66 account, process your deposits and withdrawals, settle your bets, and deliver the gaming services you have contracted for.
• Legal Obligation: Processing necessary for ch66 to comply with applicable AML obligations, KYC regulations, licence conditions, and lawful requests from competent authorities.
• Legitimate Interests: Processing carried out to prevent fraud and abuse, maintain platform security, improve service quality, and protect the interests of ch66 and other members — where such interests are not overridden by your fundamental rights.
• Consent: Processing for direct marketing communications, certain cookie categories, and any other purpose for which we have obtained your explicit opt-in consent. You have the right to withdraw consent at any time without affecting prior processing.

ch66 does not sell, rent, or trade your personal data with unaffiliated third parties for their own commercial purposes. We share your data only with the categories of third party listed below, and only to the extent strictly necessary for the stated purpose:

• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and other payment partners receive the minimum data required to authenticate and settle your deposit or withdrawal transaction in BDT. Payment credentials are processed through tokenised, PCI-compliant connections.
• KYC & Identity Verification Providers: Certified third-party KYC partners receive copies of identity documents (NID, passport, utility bill) submitted during account verification. These providers operate under strict data processing agreements with ch66.
• Game Content Providers: Studios including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi receive anonymised session tokens and game identifiers necessary to deliver certified RNG and live dealer game outcomes. These providers do not receive your full personal profile.
• Technology & Infrastructure Partners: Cloud hosting, cybersecurity monitoring, and platform analytics vendors who process data on behalf of ch66 under binding data processing agreements and strict confidentiality obligations.
• Regulatory & Law Enforcement Authorities: ch66 will disclose personal data to applicable government bodies, regulators, or law enforcement agencies where we are required to do so by law, court order, or in connection with the investigation of fraud, money laundering, or other criminal activity.

The security of your financial data is a top priority at ch66. All deposit and withdrawal transactions on ch66 are processed through encrypted, tokenised payment gateway connections. ch66 does not store raw bKash or Nagad account numbers, bank card numbers, CVV codes, or other sensitive payment credentials on its own servers.

Your BDT wallet balance is recorded securely in ch66's transaction database, which is protected by role-based access controls, encrypted at rest, and backed up to geographically separated secure data centres. Access to transaction records is restricted to authorised ch66 personnel and auditors only, with full audit logging of all access events.

• All platform communications are protected by 256-bit SSL/TLS encryption.
• Account access requires OTP authentication to your registered Bangladesh mobile number for sensitive operations.
• ch66 conducts regular penetration testing and security audits of all payment and data infrastructure.
• Suspicious account activity triggers automated security alerts and temporary access restrictions pending member verification.

ch66 uses cookies and similar tracking technologies to maintain your session, remember your preferences, detect fraud, and analyse aggregate platform usage patterns. The categories of cookies used on ch66 are as follows:

• Strictly Necessary Cookies: Essential for the operation of the ch66 platform. These include session authentication cookies that keep you logged in securely and security cookies that protect against cross-site request forgery. These cookies cannot be disabled.
• Functional Cookies: Remember your account preferences such as language settings, notification preferences, and responsible gaming tool configurations. Disabling these may affect your experience on the platform.
• Analytics Cookies: Used by ch66's internal analytics systems to understand how members navigate the platform, which game categories are most popular, and where performance improvements are needed. All analytics data is aggregated and anonymised before analysis.
• Marketing Cookies (with consent): Used only where you have given explicit consent to receive personalised promotional content based on your platform activity. You may withdraw this consent at any time via your account settings or by contacting [email protected].

You can manage or disable non-essential cookies through your browser settings. Please note that disabling cookies may affect the functionality and security features of the ch66 platform, particularly session management and OTP-based login flows.

ch66 retains personal data for as long as is necessary to fulfil the purpose for which it was collected and to comply with applicable legal, regulatory, and audit obligations. The following general retention periods apply:

After the applicable retention period expires, ch66 will securely delete or irreversibly anonymise your personal data in accordance with our internal data disposal procedures. Anonymised, aggregated data that can no longer identify any individual may be retained indefinitely for statistical and platform improvement purposes.

As a ch66 member, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact us at [email protected] using your registered email address or Bangladesh mobile number for identity verification purposes.

• Right of Access: You may request a copy of the personal data ch66 holds about you. We will provide this within 30 days of a verified request.
• Right to Rectification: You may request that we correct inaccurate or incomplete personal data held on your account. You may also update many details directly through your ch66 account settings.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected and where no legal retention obligation applies. Note that AML and financial record-keeping obligations may prevent immediate deletion of certain data categories.
• Right to Restrict Processing: You may request that ch66 restrict the processing of your personal data in certain circumstances, for example while a rectification request is being assessed.
• Right to Data Portability: You may request a machine-readable copy of the personal data you have provided to ch66, where technically feasible.
• Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes. Where you object to marketing, we will cease all marketing communications immediately.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications, non-essential cookies), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

ch66 is strictly an adults-only platform. Persons under the age of 21 are prohibited from registering or using any ch66 service. ch66 does not knowingly collect personal data from any individual under the age of 21.

If ch66 becomes aware that personal data has been collected from a person under the age of 21, we will immediately close the relevant account, delete the associated personal data, and — where applicable — report the matter to relevant authorities. If you believe a minor has accessed ch66, please contact [email protected] immediately.

ch66 employs age verification as part of the KYC process for all new registrations to minimise the risk of underage access. This process is mandatory and cannot be bypassed.

ch66 is an international platform. Some of the third-party service providers with whom ch66 shares data — including cloud infrastructure providers and certified game studios — may process personal data in jurisdictions outside Bangladesh. Where such transfers occur, ch66 ensures that adequate safeguards are in place to protect your data, including:

• Contractual data processing agreements incorporating internationally recognised data protection standards.
• Technical safeguards including end-to-end encryption for all data in transit between ch66 and third-party processors.
• Strict restrictions on what data third-party processors may access and how they may use it.
• Regular reviews of third-party data processing agreements to ensure continued compliance with ch66's data protection standards.

ch66 does not transfer the personal data of Bangladesh members to any jurisdiction that does not provide an adequate level of data protection without first putting appropriate contractual or technical safeguards in place.

ch66 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or operational requirements. The "Last Updated" date at the top of this policy will always reflect the date of the most recent revision.

Where changes are material — meaning they significantly affect how we process your personal data or alter your rights — ch66 will notify you via a prominent notice on the platform and by SMS or email to your registered Bangladesh mobile number or email address at least 14 days before the changes take effect.

Your continued use of ch66 after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with a material change, you should close your account before the new policy takes effect by contacting [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or the way ch66 processes your personal data, please contact our data protection team using the details below. We respond to all privacy-related enquiries in English.

• Email: [email protected] — use the subject line "Privacy Request" for data rights enquiries
• Live Chat: Available 24 hours a day, 7 days a week via the ch66 platform
• Response Language: English
• Operating Hours: 24/7 — Bangladesh Standard Time (BST, UTC+6)
• Acknowledgement Timeframe: Within 48 hours for standard privacy queries; within 5 business days for formal data rights requests