cu66 Privacy Policy

1 Introduction

cu66 is Bangladesh's trusted online betting and casino platform, offering cricket betting, live casino games, slots, basketball wagering, and fishing games to players aged 21 and above. In the course of providing these services, cu66 necessarily collects and processes certain personal data about registered players and platform visitors.

This Privacy Policy sets out in clear, plain English exactly what data we collect, why we collect it, how long we keep it, and what rights you have in relation to your personal data. We are committed to protecting your privacy and processing your personal data lawfully, fairly, and transparently.

This Policy applies to all users of the cu66 website at cu66.io, including registered account holders and unregistered visitors. It covers data collected via the website and via any direct communications with our support team.

2 Data Controller

For the purposes of applicable data protection law, cu66 acts as the data controller in respect of personal data collected through the cu66 platform. As data controller, cu66 determines the purposes and means of processing your personal data and is responsible for ensuring that processing is carried out lawfully and securely.

If you have any questions about how cu66 processes your personal data, or wish to exercise any of your data rights described in Section 11, please contact our Data Privacy team using the contact details provided in Section 16.

3 Personal Data We Collect

cu66 collects the following categories of personal data from players and platform visitors. We only collect data that is necessary for the purposes described in this Policy.

3.1 Registration and Account Data

• Full legal name
• Date of birth (required for 21+ age verification)
• Bangladesh mobile phone number
• Email address
• Username and encrypted password
• Preferred language (English)

3.2 Identity Verification (KYC) Data

Where required to verify your identity or age, cu66 may collect:

• National Identity Card (NID) number and copy
• Passport details and copy
• Bangladesh driving licence copy
• Selfie or facial photograph for identity matching
• Proof of registered payment method (e.g., bKash or Nagad account screenshot)

3.3 Financial and Transaction Data

• Mobile banking number (bKash, Nagad, Rocket, Upay) — used for deposit and withdrawal processing only
• Transaction history (deposits, withdrawals, bonus credits)
• Account balance history
• Wagering and game-play history

3.4 Technical and Device Data

• IP address
• Device type, model, and operating system
• Browser type and version
• Session duration and login timestamps
• Geolocation data (country/city level, derived from IP address)
• Referring URL and on-site navigation path

3.5 Communications Data

• Support chat transcripts and email correspondence with the cu66 team
• Complaints, feedback, and dispute records
• Survey responses (where you voluntarily participate)

3.6 Responsible Gaming Data

• Deposit limits set by you in your account dashboard
• Self-exclusion requests and exclusion period details
• Session time reminder preferences
• Responsible gaming support interaction records

4 How We Collect Your Data

cu66 collects personal data through the following means:

4.1 Directly from You

The majority of personal data we hold is provided directly by you when you: register an account on cu66.io; complete identity verification (KYC); make a deposit or request a withdrawal; contact our customer support team; submit a complaint or feedback form; or set responsible gaming preferences in your account dashboard.

4.2 Automatically via Technology

When you access the cu66 platform, certain technical data is collected automatically through cookies, server logs, and similar technologies. This includes your IP address, device information, browser type, session duration, and navigation behaviour on the site. See Section 10 for full details of our cookie use.

4.3 From Third Parties

cu66 may receive limited personal data from trusted third-party service providers in the following circumstances:

• Payment providers (bKash, Nagad, Rocket, Upay): Transaction confirmation data, including mobile number and transaction reference, is passed to cu66 to confirm successful deposits and to process withdrawals.
• Identity verification services: Where cu66 uses a third-party KYC service to assist with document verification, that provider may return a verification result and confidence score to cu66.
• Fraud prevention services: cu66 may receive risk-scoring data from fraud detection providers to help identify suspicious account activity.

5 How We Use Your Personal Data

cu66 uses the personal data we collect only for the specific purposes described below. We do not use your data for any purpose that is incompatible with these stated purposes.

• Account creation and management: To register your account, verify your identity, and maintain your account details.
• Age verification: To confirm that you are 21 years of age or older before permitting use of real-money services, as required by our 21+ policy.
• Transaction processing: To process deposits and withdrawals via bKash, Nagad, Rocket, and Upay securely and accurately.
• Customer support: To respond to your enquiries, resolve complaints, and provide account assistance via our 24/7 English-language support team.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, match-fixing, and other prohibited conduct on the platform.
• Legal and regulatory compliance: To fulfil our obligations under applicable law, including responding to lawful requests from law enforcement or regulatory authorities.
• Responsible gaming: To implement and maintain deposit limits, self-exclusion requests, and session time reminders requested by players, and to monitor for signs of problem gambling.
• Platform performance and analytics: To analyse anonymous, aggregated usage data to improve the cu66 platform, fix bugs, and optimise the user experience.
• Communications: To send you account-related notifications such as transaction confirmations, security alerts, and policy updates. We do not send unsolicited promotional emails without your explicit opt-in consent.

6 Legal Basis for Processing

cu66 processes your personal data on the following legal bases:

• Contract performance: Processing your registration data, transaction data, and account management data is necessary to perform the contract between you and cu66 (i.e., to provide the betting and gaming services you have signed up for).
• Legal obligation: Age verification (KYC), fraud prevention, anti-money-laundering checks, and responding to lawful authority requests are required by applicable law and regulatory obligations.
• Legitimate interests: Processing technical data for platform security, fraud detection, and anonymous analytics is justified by cu66's legitimate interests in maintaining a safe, fair, and reliable platform for all players.
• Consent: Where we send optional marketing communications or use non-essential cookies, we rely on your freely given, informed consent. You may withdraw consent at any time.

7 Data Sharing and Disclosure

cu66 does not share your personal data with third parties except in the following limited and necessary circumstances:

7.1 Payment Service Providers

To process deposits and withdrawals, cu66 must share relevant transaction details (including your registered mobile number) with bKash, Nagad, Rocket, and Upay. These providers act as independent data controllers for the data they receive and are bound by their own privacy policies and applicable financial regulations.

7.2 Identity Verification Providers

Where third-party KYC services are used to assist with document verification, cu66 shares only the minimum data necessary (such as the document image and date of birth) with those providers. All such providers are contractually bound to process that data solely for the purpose of identity verification on cu66's behalf.

7.3 Fraud Prevention and Security Services

cu66 may share device fingerprint data, IP addresses, and behavioural signals with fraud prevention service providers to detect and prevent prohibited conduct. This sharing is carried out on the basis of cu66's legitimate interest in maintaining platform integrity.

7.4 Legal and Regulatory Disclosure

cu66 may disclose personal data to law enforcement agencies, regulators, or other competent authorities where required to do so by applicable law, court order, or in connection with the investigation of suspected criminal activity including match-fixing, money laundering, or fraud.

7.5 Business Transfers

In the event that cu66 is acquired by, merged with, or transfers its operations to another entity, your personal data may be transferred to that entity as part of the transaction. You will be notified of any such transfer via the email address associated with your account prior to the transfer taking effect.

8 International Data Transfers

The cu66 platform is operated primarily for users in Bangladesh, and we aim to store and process personal data within secure data centres wherever possible. Where data is transferred to or processed in countries outside Bangladesh, cu66 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that required under applicable Bangladeshi data protection principles.

Such safeguards may include contractual data protection clauses with the receiving party, ensuring the recipient is bound by equivalent privacy and security obligations to those described in this Policy.

If you wish to obtain more information about the specific safeguards applicable to any international transfer of your personal data, please contact us using the details in Section 16.

9 Data Retention

cu66 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by applicable law.

When personal data is no longer needed and no legal obligation requires its continued retention, cu66 will securely delete or anonymise it so that it can no longer be linked to you as an individual.

10 Cookies & Tracking Technologies

10.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They are widely used to make websites work efficiently, remember your preferences, and provide anonymous information to site owners about how their platforms are used.

10.2 Cookies Used by cu66

cu66 uses the following categories of cookies:

• Strictly necessary cookies: These are essential for the cu66 platform to function. They enable core features such as maintaining your logged-in session, remembering items in your active bet slip, and keeping your account secure. These cookies cannot be disabled without breaking core platform functionality.
• Performance and analytics cookies: cu66 uses anonymous, aggregated analytics cookies to understand how players navigate the platform — for example, which pages are visited most frequently, where users encounter errors, and how long sessions typically last. This data is used solely to improve the cu66 platform. No personally identifiable data is collected through these cookies.
• Functional cookies: These remember your preferences such as language setting and display options so that you do not need to re-enter them on each visit.

10.3 Managing Cookies

You can control and delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will affect the functionality of the cu66 platform and may prevent you from accessing certain features, including your account. Detailed instructions for managing cookies are available in the Help section of all major browsers including Chrome, Firefox, Safari, and Edge.

11 Your Privacy Rights

As a user of the cu66 platform, you have the following rights in respect of your personal data. cu66 is committed to facilitating the exercise of these rights promptly and without unnecessary barriers.

• Right of Access: You have the right to request a copy of all personal data cu66 holds about you. We will provide this information within 30 days of receiving your request.
• Right to Rectification: If any personal data cu66 holds about you is inaccurate or incomplete, you have the right to request that we correct or update it.
• Right to Erasure ("Right to be Forgotten"): In certain circumstances, you have the right to request that cu66 delete your personal data. This right may be limited where cu66 is required by law to retain certain data (e.g., transaction records for anti-money-laundering purposes) or where retention is necessary to resolve an open dispute.
• Right to Restrict Processing: You have the right to ask cu66 to pause or restrict the processing of your personal data in certain circumstances — for example, while a data accuracy dispute is being resolved.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another service provider where technically feasible.
• Right to Object: You have the right to object to cu66 processing your personal data on the basis of legitimate interests. Where you object, cu66 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where cu66 relies on your consent as the legal basis for processing (e.g., for optional marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

12 Children's Privacy

The cu66 platform is strictly intended for adults aged 21 years and above. cu66 does not knowingly collect, process, or store personal data from any person under the age of 21.

cu66 employs age verification procedures at the point of registration and may request documentary proof of age (KYC) before activating real-money services on any account. These measures are part of cu66's commitment to protecting young people from exposure to gambling.

13 Security Measures

cu66 takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure.

13.1 Technical Safeguards

• 256-bit SSL (Secure Sockets Layer) encryption on all data transmitted between your device and the cu66 platform
• Encrypted storage of all sensitive personal data including passwords (stored as salted hashes — your actual password is never stored in readable form)
• Firewalls and intrusion detection systems protecting cu66 servers
• Regular security patching and vulnerability assessments
• Two-factor authentication (2FA) available for player accounts

13.2 Organisational Safeguards

• Access to personal data is strictly limited to cu66 staff members who require it to perform their job functions
• All staff with access to personal data are trained in data protection obligations and bound by confidentiality agreements
• cu66 maintains an incident response procedure for handling potential data breaches, including timely notification to affected users where a breach poses a risk to their rights

14 Third-Party Links

The cu66 platform may contain links to third-party websites or services such as payment provider websites (bKash, Nagad, Rocket, Upay) for transaction processing. This Privacy Policy applies solely to the cu66 platform at cu66.io and does not extend to any third-party websites.

cu66 has no control over the privacy practices of third-party websites and accepts no responsibility for the content or privacy policies of those sites. We encourage you to read the privacy policy of any third-party site you visit, particularly before providing any personal information to that site.

15 Changes to This Privacy Policy

cu66 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer. When we make material changes to this Policy, we will:

• Update the "Effective Date" at the top of this page;
• Display a prominent notice on the cu66 platform informing users of the update;
• Send a notification email to all registered account holders at their registered email address where the changes are significant.

Your continued use of the cu66 platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree to the revised Policy, you must stop using the platform and request account closure as described in the cu66 Terms & Conditions.

We recommend that you review this Privacy Policy periodically to stay informed about how cu66 protects your personal information.

16 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way cu66 processes your personal data, please contact our Data Privacy team using the details below. We are committed to responding to all privacy-related enquiries promptly and thoroughly.

When contacting us regarding a data privacy request, please include your registered full name and cu66 username so we can locate your account records efficiently. For requests involving sensitive data such as identity documents, our team may need to verify your identity before processing the request.

For general platform support, game enquiries, deposit or withdrawal assistance, or account issues unrelated to data privacy, please contact our main support team at the same email address with an appropriate subject line.