cb66y Privacy Policy

This Privacy Policy ("Policy") sets out the basis on which cb66y ("cb66y", "we", "us", "our") collects, processes, stores, and shares personal data relating to individuals ("you", "the player", "the user") who access or use the cb66y website available at https://cb66y.io and all associated services (collectively, the "Platform").

cb66y is committed to handling personal data with care, transparency, and in full accordance with applicable data protection principles. This Policy applies to all registered players, visitors to the cb66y website, and any individual whose personal data is processed by cb66y in connection with the Platform.

This Policy should be read alongside the cb66y Terms & Conditions and Responsible Gaming Policy. By registering an account or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

For the purposes of applicable data protection law, cb66y acts as the data controller in respect of the personal data collected and processed through the Platform. As data controller, cb66y determines the purposes for which and the means by which personal data is processed.

If you have any questions about this Privacy Policy or wish to exercise any of your data protection rights, you may contact the cb66y Data Protection contact point using the details provided in Section 15 of this Policy.

cb66y collects personal data from players across several categories, depending on the nature of your interaction with the Platform. The table below summarises the principal categories of personal data collected.

Data You Provide Voluntarily

Some data — such as your name, email address, and mobile number — is provided directly by you when you register an account or interact with cb66y's customer support. Providing this data is a prerequisite for using the cb66y Platform; without it, we cannot verify your identity or process transactions.

Data Collected Automatically

When you visit the cb66y website, certain technical data is collected automatically through server logs, cookies, and similar technologies. This includes your IP address, device type, browser version, and session activity. This data is used primarily for security monitoring, fraud prevention, and improving the performance of the Platform.

cb66y uses the personal data it collects for the following purposes:

• Account Creation and Management: To register your account, verify your identity, and maintain your player profile on the cb66y Platform.
• KYC and Age Verification: To confirm that you are at least 21 years of age and to comply with our identity verification obligations. Players who cannot be verified will not be permitted to place wagers or withdraw funds.
• Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, bank transfer, and card networks. Financial data is used solely for the purpose of processing your transactions.
• Service Delivery: To provide access to sports betting, live casino, and slots products, and to ensure those products function correctly on your device.
• Customer Support: To respond to your enquiries, resolve disputes, and manage complaints submitted via email or live chat.
• Security and Fraud Prevention: To monitor account activity for suspicious behaviour, detect and prevent fraud, money laundering, and prohibited conduct as defined in our Terms & Conditions.
• Responsible Gaming: To administer deposit limits, session timers, self-exclusion requests, and reality checks, and to identify and reach out to players who may be displaying signs of problem gambling.
• Legal and Regulatory Compliance: To fulfil our obligations under applicable anti-money laundering regulations, financial reporting requirements, and any other legal obligation imposed on cb66y.
• Platform Improvement: To analyse usage patterns and technical data in order to improve the functionality, performance, and user experience of the cb66y Platform.
• Marketing Communications: To send promotional emails, SMS notifications, and in-platform messages about bonuses, seasonal promotions (Eid, Pohela Boishakh, BPL season), and platform updates — but only where you have provided your explicit consent to receive such communications.

cb66y processes personal data on one or more of the following legal bases, depending on the specific purpose:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and cb66y (i.e., your account agreement and these Terms). This covers account management, payment processing, and service delivery.
• Legal Obligation: Processing is necessary to comply with a legal obligation applicable to cb66y, such as anti-money laundering regulations, KYC requirements, and responsible gaming obligations.
• Legitimate Interests: Processing is necessary for the purposes of cb66y's legitimate business interests — including fraud prevention, security monitoring, and Platform improvement — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: For marketing communications and non-essential cookies, cb66y relies on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

cb66y does not sell, rent, or trade your personal data to third parties. Data is shared only in the limited circumstances described below:

Payment Service Providers

To process your deposits and withdrawals, cb66y shares necessary transaction data with payment providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Visa, and Mastercard. These providers act as independent data controllers for the processing of payment transactions and are governed by their own privacy policies.

Game Content Providers

cb66y's live casino and slots products are delivered by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive limited technical data (such as session tokens and player identifiers) in order to deliver the game experience. They are contractually prohibited from using this data for any purpose beyond game delivery.

Identity Verification Services

To carry out KYC checks, cb66y may share identity document data with third-party verification service providers. These providers process data solely on cb66y's instructions and under strict confidentiality obligations.

Legal and Regulatory Authorities

cb66y may disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory bodies where required to do so by applicable law, court order, or regulatory direction. In such cases, cb66y will disclose only the minimum data required to satisfy the legal obligation.

Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of cb66y's assets, personal data held by cb66y may be transferred to the acquiring entity. Players will be notified by email if such a transfer results in a material change to the way their data is processed.

cb66y uses cookies and similar tracking technologies to ensure the Platform functions correctly, to enhance your user experience, and to gather anonymised analytics data. The following categories of cookies are used:

• Strictly Necessary Cookies: These cookies are required for the Platform to function. They enable core features such as user authentication, session management, and security monitoring. These cookies cannot be disabled.
• Functional Cookies: These cookies remember your preferences — such as language settings and responsible gaming configuration — to personalise your experience on the Platform.
• Analytics Cookies: These cookies collect anonymised data about how users interact with the cb66y website, including pages visited, session duration, and click patterns. This information is used to improve Platform performance and content. Analytics cookies are only placed with your consent.
• Marketing Cookies: If you have consented to marketing communications, certain cookies may be used to track the effectiveness of promotional campaigns. These cookies are only active where you have provided your explicit consent.

You may manage your cookie preferences at any time via your browser settings. Please note that disabling certain categories of cookies may affect the functionality of the cb66y Platform. For full details of the cookies used, please refer to the cb66y Cookie Notice, which is available on the Platform.

cb66y retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

Upon the expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Where data is anonymised rather than deleted, the anonymised dataset may be retained indefinitely for statistical and analytical purposes.

cb66y implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures include:

• 256-Bit SSL Encryption: All data transmitted between your browser or device and cb66y servers is encrypted using TLS/SSL protocols, preventing interception during transit.
• Secure Server Infrastructure: cb66y's data is stored on access-controlled servers protected by firewalls, intrusion detection systems, and regular security audits.
• Access Controls: Access to personal data is restricted on a need-to-know basis. Only authorised cb66y personnel with a legitimate operational need may access player data, and all such access is logged and monitored.
• Password Protection: Player account passwords are stored using one-way cryptographic hashing. cb66y never stores passwords in plain text and will never ask you to provide your password via email or live chat.
• Two-Factor Authentication: Players are encouraged to enable two-factor authentication on their accounts for an additional layer of login security.
• Breach Response: In the event of a data security breach that poses a risk to players' rights and freedoms, cb66y will notify affected players and relevant authorities within the timeframes required by applicable law.

As a player whose personal data is processed by cb66y, you hold the following rights in respect of your personal data. To exercise any of these rights, contact cb66y at [email protected] with the subject line "Data Rights Request".

• Right of Access: You have the right to request a copy of the personal data that cb66y holds about you, along with information about how it is being used. cb66y will respond to access requests within 30 days.
• Right to Rectification: If any personal data cb66y holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent. This right is subject to cb66y's legal retention obligations — data required for regulatory compliance cannot be deleted until the applicable retention period has expired.
• Right to Restriction of Processing: You may request that cb66y restricts the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
• Right to Data Portability: Where processing is carried out by automated means on the basis of your consent or contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on cb66y's legitimate interests. You also have an unconditional right to object to the processing of your data for direct marketing purposes.
• Right to Withdraw Consent: Where cb66y processes your data on the basis of consent (e.g., marketing communications), you may withdraw that consent at any time via your account settings or by contacting support. Withdrawal of consent does not affect the lawfulness of processing that took place before withdrawal.

The cb66y Platform is strictly intended for adults aged 21 years and above. cb66y does not knowingly collect, process, or retain personal data from individuals under the age of 21. If you are under 21 years of age, you must not register an account or use any services on the cb66y Platform.

If cb66y becomes aware that personal data has been collected from an individual who is under 21 years of age, that data will be deleted immediately and the associated account will be suspended. Any funds deposited by an underage player may be returned to the payment method used, subject to verification.

Parents and guardians who believe a minor has registered on the cb66y Platform are urged to contact cb66y at [email protected] immediately so that the matter can be investigated and resolved without delay.

cb66y's primary operations and player base are located in Bangladesh. However, some of the third-party service providers used by cb66y — including game content providers and identity verification services — may process personal data on servers located outside Bangladesh.

Where personal data is transferred to a third country, cb66y takes appropriate steps to ensure that the transfer is subject to adequate safeguards, including contractual provisions that require the recipient to protect the data to a standard equivalent to that applied by cb66y. Players who have questions about international data transfers may contact cb66y using the details in Section 15.

The cb66y Platform integrates with third-party game providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) and payment providers (including bKash, Nagad, Rocket, Upay, Visa, and Mastercard). These providers operate under their own privacy policies and terms of service, which govern the data they collect and process in connection with their respective services.

cb66y is not responsible for the privacy practices of third-party providers. Players are encouraged to review the privacy policies of any third-party service they interact with. cb66y selects third-party partners carefully and requires all partners who process player data on cb66y's behalf to maintain appropriate data protection standards under contractual obligation.

cb66y reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, or operational practice. Where a material change is made, cb66y will notify registered players by email and by displaying a prominent notice on the Platform prior to the change taking effect.

The date of the most recent revision is displayed at the top of this page. It is the player's responsibility to review this Policy periodically. Continued use of the cb66y Platform following notification of any change constitutes acceptance of the updated Privacy Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which cb66y processes your personal data, please contact us using the details below:

• Email: [email protected] — please use the subject line "Privacy Enquiry" or "Data Rights Request" as appropriate.
• Response Time: cb66y aims to acknowledge all privacy-related correspondence within 5 business days (Bangladesh Standard Time, UTC+6).
• Support Hours: Our customer support team is available 24 hours a day, 7 days a week via live chat and email to assist with account and data-related queries.

Complaints

If you are not satisfied with cb66y's response to a data rights request or privacy concern, you have the right to escalate your complaint. cb66y takes all privacy complaints seriously and will endeavour to resolve any issue raised in good faith promptly and fairly.

Players who remain dissatisfied after cb66y's internal complaints process has been exhausted may seek further recourse through applicable consumer protection or data protection channels available in their jurisdiction. cb66y will cooperate fully with any legitimate regulatory investigation.