cz666 Privacy Policy — How We Collect, Use, and Protect Your Data

Introduction

This Privacy Policy ("Policy") describes how cz666 ("cz666", "We", "Us", "Our") collects, processes, stores, and protects personal information provided by users ("You", "Player", "User") of the cz666 online casino and sports betting platform available at https://cz666.io ("the Platform" or "the Service").

By registering an account on cz666, accessing the Platform, or otherwise engaging with our services, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. This Policy forms part of the overall agreement between you and cz666 and should be read alongside our Terms & Conditions and Responsible Gaming Policy.

We are committed to handling your personal data with transparency, integrity, and a genuine respect for your privacy. This Policy is written in plain, accessible English so that you understand exactly what happens to your information when you use cz666. If any provision is unclear, please contact our support team before proceeding.

This Policy applies to all personal data collected through the cz666 website, any associated mobile-optimised web application, email communications, live chat interactions, and customer support correspondence. It does not apply to third-party websites or services that may be linked from the Platform.

Data Controller

For the purposes of applicable data protection law, cz666 acts as the data controller in respect of personal data collected through the Platform. As data controller, cz666 determines the purposes and means of processing your personal data and is responsible for ensuring that processing is carried out lawfully, fairly, and transparently.

All enquiries relating to the use of your personal data, including requests to exercise your data rights, should be directed to the cz666 data protection contact using the details provided in Section 15 of this Policy. We will respond to all verified data-related requests within 30 calendar days of receipt.

Information We Collect

cz666 collects personal information through several channels. The categories of data we collect and the circumstances in which each is collected are set out below.

3.1 Information You Provide Directly

• Registration data: Full legal name, date of birth, gender, residential address, email address, and mobile phone number provided when creating a cz666 account.
• Identity verification documents: Copies of government-issued identification (National ID card, passport, driving licence), proof of address (utility bill, bank statement), and in some cases a selfie photograph, submitted as part of the KYC verification process.
• Payment information: Mobile financial service account numbers (bKash, Nagad, Rocket, Upay), bank account details, and card numbers (Visa, Mastercard). Full card numbers are processed by our payment provider and are not stored on cz666 servers in unencrypted form.
• Support communications: The content of any messages, emails, or live-chat conversations you initiate with our support team, including attachments you choose to share.
• Responsible gaming information: Deposit limits, self-exclusion requests, cooling-off settings, and any other responsible gaming preferences you configure through your account.

3.2 Information Collected Automatically

• Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and language settings.
• Usage data: Pages visited, games played, bet amounts and outcomes, session duration, click-path data, and feature interactions recorded during your use of the Platform.
• Transaction records: Full history of deposits, withdrawals, bonus claims, wagers placed, and account balance changes, retained for audit and regulatory purposes.
• Cookie and session data: Session identifiers, preference cookies, and aggregate analytics data as described in Section 8.

3.3 Information from Third Parties

• KYC and fraud-prevention providers: Identity verification results, risk scores, and fraud indicators returned by our third-party verification partners as part of the account onboarding process.
• Payment processors: Transaction status confirmations, chargeback notifications, and payment method validity data received from bKash, Nagad, Rocket, Upay, Visa, and Mastercard processing networks.

How We Use Your Data

cz666 uses the personal data we collect for the following specific purposes. We do not use your data for any purpose incompatible with those listed below without first obtaining your consent or establishing a separate lawful basis.

Where we process your data for direct marketing purposes, you may opt out at any time by contacting our support team. Opting out of marketing will not affect any other aspect of your account or the Service.

Legal Basis for Processing

cz666 processes personal data only where there is a valid legal basis for doing so. The primary legal bases we rely upon are:

• Contract performance: Processing is necessary to fulfil our obligations under the contract formed when you register a cz666 account and agree to our Terms & Conditions. This covers account creation, payment processing, and delivery of the gaming service.
• Legal obligation: Processing is required to comply with applicable laws and regulatory requirements, including anti-money laundering (AML) legislation, age verification mandates, and financial record-keeping obligations.
• Legitimate interests: Processing is necessary for our legitimate business interests, including fraud detection, platform security, responsible gaming monitoring, and service improvement through analytics — provided these interests are not overridden by your privacy rights and interests.
• Consent: For direct marketing communications and non-essential cookies, we rely on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Data Sharing

cz666 does not sell, rent, or trade your personal data to third parties. Data may be shared in the following limited and controlled circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, and card processing networks receive the minimum payment data necessary to authorise and settle transactions. All payment partners operate under their own independently audited security frameworks.
• KYC and identity verification providers: Third-party verification services receive identity document images and personal details solely for the purpose of confirming the authenticity of your identity and age. These providers are contractually prohibited from using your data for any other purpose.
• Fraud prevention and security services: Aggregated technical data (IP addresses, device fingerprints, behavioural signals) may be shared with anti-fraud platforms to detect and prevent account takeovers, payment fraud, and bonus abuse.
• Customer support infrastructure: Our live-chat and ticket management platforms process support conversation data on our behalf under strict data processing agreements.
• Legal and regulatory authorities: cz666 will disclose personal data to competent authorities, courts, or law enforcement bodies where required by applicable law, valid legal process, or regulatory instruction. Where permitted, we will notify you of such disclosure.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of the cz666 business, personal data held by cz666 may be transferred to the acquiring entity. You will be notified in advance of any such transfer and of any material change to the way your data is processed as a result.

All third-party data processors engaged by cz666 are required to process data only on our documented instructions, implement appropriate technical and organisational security measures, and return or delete data upon termination of the processing relationship.

International Data Transfers

cz666 operates infrastructure that may involve the transfer and storage of personal data in locations outside of Bangladesh. Whenever personal data is transferred internationally, cz666 ensures that appropriate safeguards are in place to protect that data to a standard at least equivalent to the protections provided under this Policy.

Safeguards employed for international data transfers may include contractual obligations on recipient entities (standard contractual clauses or equivalent instruments), processing only with third parties who maintain independently certified security standards, and technical controls such as end-to-end encryption of data in transit.

If you would like further information about the specific safeguards applied to any particular international data transfer involving your personal data, please contact us using the details in Section 15.

Cookies & Tracking Technologies

cz666 uses cookies and similar browser-based technologies to operate the Platform, maintain your session, and understand aggregate usage patterns. The following categories of cookies are in use on cz666:

• Essential cookies: These are strictly necessary for the Platform to function. They include session authentication tokens, CSRF protection tokens, and preference storage. The Platform cannot operate without these cookies and they cannot be disabled.
• Analytics cookies: We use privacy-respecting, aggregate analytics to understand how the Platform is used — for example, which pages are visited most frequently and where users encounter difficulties. These analytics do not track individual users across unrelated websites and do not create behavioural profiles for advertising purposes.
• Functional cookies: These store your preferences such as language settings, responsible gaming dashboard configurations, and notification preferences, so that they persist between sessions without requiring you to re-enter them each time.

cz666 does not use third-party advertising cookies, retargeting pixels, social media tracking pixels, or any other cross-site tracking mechanism. Cookies set by third-party game providers (Evolution Gaming, Pragmatic Play, Spribe, etc.) within embedded game windows are governed by those providers' own cookie policies and are limited to game session functionality.

You can manage or delete cookies through your browser settings at any time. Disabling essential cookies will prevent you from logging in to your cz666 account. Disabling analytics or functional cookies will not affect access to the Service but may reduce personalisation.

Data Retention

cz666 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to maintain your account relationship with us, and to comply with applicable legal and regulatory retention obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account relationship with cz666 and for a minimum of five (5) years following permanent account closure, to satisfy AML record-keeping requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with financial record-keeping obligations.
• Customer support records: Retained for three (3) years from the date of the last support interaction, unless a longer retention period is required by ongoing legal proceedings.
• Marketing consent records: Retained for as long as the consent remains active and for one (1) year following withdrawal of consent, to demonstrate compliance with consent management obligations.
• Analytics data: Aggregate, anonymised analytics data that cannot be linked back to any individual is retained indefinitely for platform improvement purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. If you request erasure of your data before a mandatory retention period has expired, cz666 will restrict active processing of that data and delete it as soon as the retention obligation no longer applies.

Security Measures

cz666 implements a layered set of technical and organisational security controls to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Key measures include:

• 256-bit SSL/TLS encryption: All data transmitted between your browser or device and the cz666 Platform is encrypted in transit using industry-standard TLS protocols. The padlock icon displayed in your browser confirms that an encrypted connection is active.
• Encrypted data storage: Sensitive personal data fields, including identity document images and payment credentials, are encrypted at rest using strong symmetric encryption algorithms.
• Access controls: Access to personal data is restricted to cz666 personnel and authorised third-party processors who require it for legitimate operational purposes. Access is governed by role-based permissions and requires multi-factor authentication.
• Regular security assessments: cz666 conducts periodic security reviews and vulnerability assessments of its infrastructure to identify and remediate potential weaknesses before they can be exploited.
• Incident response: In the event of a data security incident affecting your personal data, cz666 will notify affected users and, where required by applicable law, relevant authorities, within the timeframe prescribed by applicable regulations.

While cz666 takes all reasonable steps to protect your personal data, no system connected to the internet can be guaranteed as completely secure. You are encouraged to use a strong, unique password for your cz666 account, enable any available two-factor authentication, and notify us immediately at [email protected] if you suspect unauthorised access to your account.

Your Rights

Subject to applicable law and the limitations inherent in our legal retention obligations, you hold the following rights in respect of your personal data held by cz666:

• Right of access: You may request a copy of the personal data we hold about you, together with information about how and why we process it.
• Right of rectification: You may request correction of any inaccurate or incomplete personal data. For certain data fields (such as name and date of birth), corrections may require supporting documentation.
• Right of erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other lawful basis applies), or where processing is unlawful. This right is subject to our legal retention obligations.
• Right to restrict processing: You may request that we limit processing of your personal data to storage only in certain circumstances, for example while you contest the accuracy of data or object to its processing.
• Right to object: You may object to processing based on our legitimate interests, including profiling for responsible gaming purposes, where your individual circumstances justify an override of those interests.
• Right to data portability: Where processing is based on your consent or on contract performance and is carried out by automated means, you may request a structured, commonly used, machine-readable copy of your personal data for transfer to another service.
• Right to withdraw consent: Where processing is based solely on your consent, you may withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please submit a written request to our support team using the contact details in Section 15. We will verify your identity before processing any data rights request to protect against unauthorised requests. We aim to fulfil all valid requests within 30 calendar days. Where a request is complex or voluminous, we may extend this period by a further 30 days with prior notification to you.

Third-Party Links

The cz666 Platform may contain references to, or embed content from, third-party services such as game studios (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi, Play'n GO) and payment networks. While these providers are integrated into the cz666 experience, they operate under their own privacy policies and data practices.

cz666 does not control the privacy practices of third-party game providers or payment processors and is not responsible for the content or data handling of their systems. We encourage you to review the privacy policies of any third-party service whose content you interact with through the Platform. Data shared with those services as part of game session management or payment authorisation is governed by the providers' own policies.

cz666 does not include outbound links to external websites on the Platform and therefore this section is relevant primarily to embedded game and payment content rather than to linked external pages.

Children's Privacy

The cz666 Platform is strictly for adults aged 21 and above. cz666 does not knowingly collect, process, or store personal data from any person under the age of 21. Registration on the Platform requires confirmation that you are at least 21 years of age, and our KYC verification process is designed to detect and reject underage registration attempts.

If cz666 discovers that personal data has been collected from a person under the age of 21 — whether through a false age declaration or any other means — that account will be immediately suspended, all data associated with the account will be deleted without delay, and any funds held will be returned to the payment method from which they originated after appropriate verification.

If you are a parent or guardian and you believe that a person under 21 in your care has created a cz666 account, please contact us immediately at [email protected] so that we can take immediate action. We treat such notifications as a top-priority matter.

Changes to This Privacy Policy

cz666 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or the features of the Service. The effective date at the top of this Policy will be updated whenever a material revision is made.

Where a change is material — meaning it significantly affects your rights or the way your personal data is processed — cz666 will provide advance notice to registered account holders via email or a prominent notification on the Platform before the revised Policy takes effect. For minor, non-material changes (such as editorial corrections or clarifications), the updated Policy will simply be published on this page.

Your continued use of the cz666 Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the changes. If you do not agree with the revised Policy, you may request account closure before the new Policy takes effect, and cz666 will process your request in accordance with the data retention obligations in Section 9.

We recommend revisiting this page periodically to stay informed about how cz666 handles your personal data. The current version of this Policy will always be accessible at https://cz666.io/privacy-policy.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way cz666 handles your personal data, please contact our support and data protection team using the details below. All privacy-related enquiries are handled with priority and discretion.

• Email: [email protected]
• Subject line for data rights requests: "Data Rights Request — [Your Registered Name]"
• Subject line for privacy concerns: "Privacy Enquiry — [Brief Description]"
• Support Hours: 24 hours a day, 7 days a week, including Bangladesh public holidays
• Response Time: We aim to acknowledge all privacy enquiries within 24 hours and provide a full response within 30 calendar days
• Time Zone: Bangladesh Standard Time (BST, UTC+6)

For data rights requests, please include your full registered name, the email address associated with your cz666 account, and a clear description of the right you wish to exercise. We will verify your identity before processing the request to ensure that personal data is not disclosed to or modified by an unauthorised party.