Privacy Policy

At cf66, we take your privacy seriously. This Privacy Policy explains what personal information we collect from players on our platform, how that information is used, and the measures we take to keep it secure. By accessing or using cf66, you agree to the practices described in this document.

This policy applies to all users of cf66 regardless of location, with specific provisions for players in Bangladesh who use BDT-denominated accounts, bKash, Nagad, Rocket, or other local payment methods. We encourage you to read this policy in full before registering or making any financial transactions on our platform.

01Information We Collect

When you create an account with cf66 or interact with our platform, we may collect the following categories of personal information:

• Identity data: full name, date of birth (to verify the 21+ age requirement), and a government-issued photo ID for KYC verification.
• Contact data: email address, mobile phone number, and a verified delivery address where applicable.
• Financial data: bKash, Nagad, or Rocket mobile-money account references, transaction IDs, deposit and withdrawal history, and account balances.
• Technical data: IP address, device type, browser version, operating system, session timestamps, and geolocation data (city/region level only).
• Behavioral data: game history, bet amounts, session duration, bonus activity, and responsible gaming settings you configure.

02How We Use Your Information

cf66 processes your personal data for the following specific, lawful purposes:

• Account management: to create and maintain your player account, verify your identity, and authenticate logins.
• Payment processing: to execute deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment channels in BDT.
• Platform improvement: to analyse gameplay patterns and user feedback so that we can enhance game selection, performance, and the overall player experience.
• Responsible gaming: to monitor activity for signs of problem gambling, enforce account deposit limits and time-out settings, and provide targeted self-exclusion support.
• Communications: to send you service notifications, transaction receipts, security alerts, and — only where you have opted in — promotional offers and bonus updates.
• Fraud prevention: to detect, investigate, and prevent fraudulent transactions, multi-account abuse, bonus misuse, and other forms of platform manipulation.

03Data Sharing & Disclosure

cf66 does not sell your personal data. We share data only with trusted partners who assist us in delivering the platform, and only to the extent necessary for those specific functions:

All third-party partners are bound by strict data-processing agreements and are prohibited from using your information for any purpose beyond what is listed above. We will disclose personal data to law enforcement or regulatory authorities only if required to do so by applicable law or a valid legal order.

04Cookies & Tracking Technologies

cf66 uses cookies and similar technologies to operate our website, remember your preferences, and improve performance. The types of cookies we use are:

• Essential cookies: required for core site functions such as session management, login state, and security tokens. These cannot be disabled.
• Analytics cookies: help us understand how players navigate the platform. We use aggregated, anonymised data only — no individual profiling.
• Preference cookies: store your language setting, stake preferences, and display options so you enjoy a personalised experience on return visits.

You can manage or delete non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the cf66 platform.

05Data Retention

We retain your personal data for as long as your account remains active or as required to provide you with our services. If you close your account, we will retain your data for a minimum of five (5) years from the date of account closure to fulfil our obligations related to anti-money-laundering (AML) compliance, financial record-keeping, and the resolution of any outstanding disputes.

Backups and anonymised analytics data may be retained for longer periods for legitimate operational purposes. Once the retention period expires, personal data is securely deleted or irreversibly anonymised so that it can no longer be linked to any individual.

06Data Security

The security of your personal information is a top priority at cf66. We implement a layered security architecture that includes:

• 256-bit SSL/TLS encryption on all data transmitted between your device and our servers.
• Encrypted at-rest storage for all personally identifiable information and financial records.
• Role-based access controls ensuring that only authorised personnel can access sensitive player data, with all access logged and auditable.
• Regular internal audits and third-party penetration testing to identify and remediate security vulnerabilities before they can be exploited.

07Your Rights as a User

cf66 respects your right to control your personal data. You are entitled to exercise the following rights at any time by contacting our support team:

• Right of access: request a copy of all personal data we hold about you, delivered in a clear, readable format.
• Right of rectification: request the correction of any inaccurate or incomplete data without undue delay.
• Right to erasure: request the deletion of your personal data where there is no overriding legal basis for us to continue processing it.
• Right to restrict processing: request that we limit how we use your data while a dispute or complaint is under review.
• Right to data portability: receive your data in a structured, machine-readable format so you can transfer it to another service provider if you choose.

We will respond to all data rights requests within 5 business days and aim to resolve them within 30 calendar days. Some requests may be subject to identity verification to protect your account security.

08Payment Data & Financial Privacy

All payment transactions on cf66 are processed through encrypted channels. When you use bKash, Nagad, Rocket, or Upay, the relevant mobile-money operator processes your transaction independently; cf66 receives only a transaction confirmation reference and the associated amount — not your full mobile wallet credentials.

We maintain detailedfinancial records as required for AML compliance and responsible gaming monitoring. These records are stored securely and are never shared with any party other than those listed in Section 3 of this policy.

09Children's Privacy & Age Verification

cf66 is strictly an adult gaming platform. Our services are not directed at, and must not be accessed by, any person under the age of 21. We do not knowingly collect personal data from individuals under 21 years of age. All accounts are subject to mandatory KYC age verification before any deposit or withdrawal is permitted. If we discover that a user under the age of 21 has registered an account, that account will be immediately suspended, all funds returned, and all associated personal data securely deleted. Parents and guardians are encouraged to use parental control software to prevent underage access to online gaming services.

10Changes to This Privacy Policy

cf66 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or regulatory guidance. When we make material changes, we will notify registered users via email or an in-platform notification at least 14 days before the changes take effect.

Your continued use of cf66 after the effective date of any revised policy constitutes your acceptance of the updated terms. We recommend bookmarking this page and reviewing it periodically so you remain informed of how your data is protected.

11Contact Us & Data Protection

If you have any questions, concerns, or requests relating to this Privacy Policy or the way cf66 handles your personal data, our support team is available to assist you. We are committed to handling all privacy enquiries with transparency and care.

Email us at: [email protected]

We aim to respond to all privacy-related enquiries within 5 business days. For urgent account security matters, please contact us immediately and mark your message as high priority.