cf66 Privacy Policy

cf66 ("we", "us", "our") operates the online betting and casino platform accessible at cf66.io. We are committed to protecting the privacy of every player who registers and uses our platform. This Privacy Policy sets out in clear, formal terms the data we collect, how we handle it, the parties we may share it with, and the rights you retain over your personal information.

This Policy applies to all personal data collected through the cf66 website, any mobile interfaces provided by cf66, customer support communications, and all interactions with our payment and verification systems. By creating an account on cf66, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.

This document should be read alongside the cf66 Terms & Conditions, which govern the overall relationship between cf66 and its registered players. In the event of a conflict between this Privacy Policy and the Terms & Conditions on a data-related matter, this Privacy Policy shall prevail.

cf66 collects personal data in several ways: directly from you when you register or interact with our platform, automatically through your use of our services, and from trusted third-party partners where necessary for verification or fraud prevention purposes. The categories of data we collect include the following:

cf66 does not collect sensitive personal data categories such as racial or ethnic origin, religious beliefs, political opinions, biometric data (except for identity document photographs submitted for KYC), or health data, unless legally required to do so for responsible gaming compliance.

cf66 processes your personal data only for specific, legitimate purposes. We do not use your data for any purpose incompatible with the original basis on which it was collected. The primary purposes for which cf66 uses personal data are as follows:

• Account creation and management: To register your account, verify your identity, maintain your player profile, and manage your settings and preferences.
• Service delivery: To process deposits and withdrawals, settle bets, credit winnings, apply bonuses, and deliver all platform features you access as a registered player.
• Identity verification (KYC): To fulfil Know Your Customer obligations, confirm that you meet the minimum age requirement of 21 years, and verify that payment methods belong to the registered account holder.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, bonus abuse, and other prohibited conduct described in the cf66 Terms & Conditions.
• Responsible gaming: To monitor betting patterns for signs of problematic gambling behaviour, enforce player-set deposit and time limits, and administer self-exclusion requests.
• Customer support: To respond to your queries, complaints, and requests submitted via email or live chat, and to maintain records of support interactions.
• Platform improvement: To analyse aggregated usage patterns, optimise platform performance, and develop new features based on behavioural data.
• Legal and regulatory compliance: To maintain transaction records, respond to lawful requests from competent authorities, and fulfil any applicable record-keeping obligations.
• Direct marketing (where consented): To send you personalised promotional offers, bonus alerts, and platform updates by email or SMS, where you have provided explicit consent and have not subsequently opted out.

cf66 processes your personal data on the following legal grounds, depending on the specific purpose of the processing activity:

• Contractual necessity: Processing required to perform the contract between you and cf66 — including account registration, payment processing, and service delivery. Without this processing, cf66 cannot provide its services to you.
• Legitimate interests: Processing carried out in pursuit of cf66's legitimate business interests, including fraud detection, security monitoring, platform analytics, and responsible gaming oversight, where such interests are not overridden by your fundamental privacy rights.
• Legal obligation: Processing necessary for cf66 to comply with applicable legal and regulatory requirements, including anti-money-laundering (AML) obligations, identity verification mandates, and lawful authority requests.
• Consent: Processing activities for which cf66 relies on your freely given, specific, and informed consent — primarily direct marketing communications and optional analytics cookies. You may withdraw consent at any time without penalty to your access to core platform services.

Where processing is based on legitimate interests, cf66 has assessed that those interests are proportionate and do not override your rights as a data subject. If you wish to understand more about the specific legitimate interests relied upon for a particular processing activity, please contact [email protected].

cf66 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share your data only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose:

• Payment processors: We share financial data with payment service providers — including bKash, Nagad, Rocket, Upay, and card network processors — for the sole purpose of completing deposit and withdrawal transactions you initiate.
• Identity verification providers: We engage trusted KYC and AML compliance partners to verify identity documents and screen against sanctions lists. These providers process your identity data strictly under our instruction and under contractual confidentiality obligations.
• Game content providers: Third-party game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive technical session data (such as a player session token) necessary to load and run their games. These studios do not receive your full personal profile.
• Fraud and security services: We may share technical data (IP address, device fingerprint, behavioural signals) with anti-fraud platforms to detect and prevent prohibited activity on the cf66 platform.
• Legal and regulatory authorities: cf66 will disclose personal data to law enforcement agencies, financial intelligence units, or other competent public authorities where required to do so by applicable law, court order, or regulatory direction.
• Business transfers: In the event of a merger, acquisition, or sale of assets involving cf66, personal data held by cf66 may be transferred to the acquiring entity, subject to equivalent privacy protections and advance notice to affected players where practicable.

All third-party recipients of personal data are required to process that data in accordance with applicable privacy law and are prohibited from using it for any purpose beyond that for which it was shared.

cf66 uses cookies and similar tracking technologies to operate the platform, maintain session continuity, and analyse usage patterns. A cookie is a small text file stored on your device by your browser when you visit a website. The types of cookies used on cf66 are as follows:

• Essential cookies: Required for the platform to function correctly. These include session authentication cookies, security tokens, and load-balancing cookies. Essential cookies cannot be disabled without disrupting the platform service.
• Functional cookies: Used to remember your preferences such as language settings, display options, and recently viewed games, providing a more personalised experience across sessions.
• Analytical cookies: Used to collect aggregated data about how players navigate and use the platform, helping cf66 identify performance bottlenecks and areas for improvement. These cookies do not identify you personally and are deployed only with your consent.
• Security cookies: Used to detect fraud signals, bot activity, and suspicious login attempts, contributing to the integrity and safety of the cf66 platform.

You may manage cookie preferences through your browser settings. Most modern browsers allow you to refuse new cookies, delete existing cookies, and configure alerts when cookies are being set. Please note that disabling essential cookies will impair your ability to use the cf66 platform, including the ability to log in and maintain an active session.

cf66 does not use third-party advertising cookies or cross-site tracking technologies to serve targeted advertisements on external websites.

cf66 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following general retention periods apply:

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.

Where a legal dispute, investigation, or regulatory inquiry is ongoing, cf66 may retain relevant data beyond the standard retention period until the matter is fully resolved.

As a registered player on the cf66 platform, you hold meaningful rights over the personal data we process about you. cf66 is committed to honouring these rights promptly and without undue restriction. Your rights include:

To exercise any of these rights, submit a written request to [email protected] with the subject line "Privacy Rights Request". cf66 will acknowledge your request within five (5) business days and respond substantively within thirty (30) days of receipt. In cases of complexity or high volume, this period may be extended by a further two months, in which case you will be informed of the extension and the reasons for it.

cf66 will not charge a fee for reasonable, good-faith requests. Where requests are manifestly unfounded or excessive, cf66 reserves the right to charge a reasonable administrative fee or decline to act on the request, with written explanation.

cf66 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes the following controls:

• 256-bit SSL/TLS encryption: All data transmitted between your device and the cf66 platform is encrypted using industry-standard SSL/TLS protocols, preventing interception during transit.
• Encrypted data storage: Sensitive personal data held in cf66 databases — including identity document images and payment account references — is stored in encrypted form using strong symmetric encryption.
• Access controls: Access to personal data within cf66 is restricted on a strict need-to-know basis. Staff access is governed by role-based permissions and is subject to activity logging and regular access reviews.
• Multi-factor authentication: Administrative access to cf66 systems requires multi-factor authentication. Players are encouraged to use strong, unique passwords for their cf66 accounts.
• Penetration testing: cf66 conducts periodic security assessments and penetration tests on its platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Incident response: cf66 maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to player rights, affected players will be notified promptly and without undue delay.

While cf66 takes all reasonable precautions to protect your data, no internet-based platform can guarantee absolute security. Players are responsible for maintaining the security of their own devices and for keeping their cf66 account credentials confidential. If you suspect your account has been accessed without authorisation, contact [email protected] immediately.

The cf66 platform integrates third-party services that are essential to its operation. Each such integration is governed by a data processing agreement obligating the third party to handle your data securely and exclusively for the purpose specified by cf66. These services include:

• Game studios: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi provide the casino and game content accessible through cf66. These providers receive only the minimum technical data (session tokens, game identifiers) required to deliver game functionality. They do not have access to your financial or identity data held by cf66.
• Mobile wallet providers: bKash, Nagad, Rocket, and Upay process payment instructions initiated from your cf66 account. These providers operate under their own privacy policies, which govern how they handle transaction data within their own systems.
• Analytics platforms: cf66 may use privacy-respecting analytics services to collect aggregated, anonymised usage data. No personally identifiable information is transmitted to analytics platforms without your consent.
• Cloud infrastructure: cf66's platform is hosted on secure cloud infrastructure. Server locations and data residency are managed to comply with applicable data protection standards.

cf66 is not responsible for the privacy practices of external websites that may be referenced in informational content. Players accessing third-party websites do so at their own risk and should review the privacy policies of those sites independently.

cf66 is strictly an adult platform. Access to the cf66 platform is limited to individuals who are 21 years of age or older. cf66 does not knowingly collect or process personal data belonging to individuals under the age of 21.

cf66 employs age verification procedures at the point of registration and may request identity documents at any time to confirm that a player meets the minimum age requirement. Where cf66 discovers or has reasonable grounds to believe that an account has been registered by or on behalf of a person under 21 years of age, the following actions will be taken:

• The account will be immediately and permanently suspended.
• All personal data associated with the underage account will be deleted as promptly as practicable, subject to any legal retention obligations that may apply.
• All deposits associated with the account will be returned to the originating payment method where technically possible.
• All winnings generated on the account will be forfeited in full.

If you are a parent or guardian and have reason to believe that a person under 21 in your care has registered an account on cf66, please contact [email protected] immediately with the relevant account details so that cf66 can take appropriate action without delay.

cf66 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. Where changes are material — meaning they significantly affect your rights or the way we process your personal data — cf66 will notify registered players via the email address associated with their account prior to the changes taking effect.

The effective date displayed at the top of this Policy indicates when the current version came into force. Players are encouraged to review this Policy periodically. Continued use of the cf66 platform following notification of an updated Privacy Policy constitutes acceptance of the revised terms.

For all privacy-related queries, requests to exercise data rights, concerns about how your personal data is handled, or reports of suspected privacy incidents, please contact the cf66 privacy team using the details below:

• Email: [email protected] (subject line: "Privacy Enquiry" or "Privacy Rights Request")
• Response time: Within 5 business days for acknowledgement; within 30 days for substantive response
• Support hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (UTC+6)

cf66 takes all privacy concerns seriously. We will investigate every complaint thoroughly and respond with our findings and any remedial actions taken within the timeframes stated above.