co666 Privacy Policy — Your Data, Your Rights, Our Commitment

This Privacy Policy ("Policy") describes how co666 ("the Platform", "we", "us", "our") collects, uses, stores, and protects the personal data of individuals ("you", "Player", "User") who register for, access, or use the co666 online casino and sports betting platform available at co666.io and any associated mobile or web-based interfaces.

co666 is committed to handling your personal information responsibly, transparently, and in accordance with internationally recognised data protection standards. We apply these standards consistently for all players, including those based across Bangladesh — in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, and all other locations.

This Policy should be read alongside the co666 Terms & Conditions, which govern the overall relationship between you and co666. By registering a co666 account or continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy in full.

co666 collects personal data through several channels: directly from you during registration and account management, automatically through your use of the platform, and from approved third-party sources where permitted. The categories of personal data we collect are set out in the table below.

2.1 Special Categories of Data. co666 does not intentionally collect any special category personal data (such as data revealing racial or ethnic origin, political opinions, religious beliefs, health information, or biometric data) unless you volunteer such information in the course of a support communication. Where such data is inadvertently received, it will not be processed for any purpose other than addressing the specific communication in which it appeared and will be deleted promptly thereafter.

2.2 Data from Third Parties. co666 may receive limited personal data about you from third-party service providers — for example, identity verification agencies used during KYC processing, payment processors confirming the status of a deposit or withdrawal, and fraud prevention services. Such data is used only for the specific purpose for which it was shared and is subject to the same protections described in this Policy.

co666 uses the personal data we hold about you for the following purposes:

• Account Creation and Management: To register your co666 account, verify your identity, maintain your account profile, and ensure the integrity of your session;
• Provision of Gaming Services: To enable you to participate in casino games, live dealer tables, and sports betting markets (including BPL, IPL, T20 World Cup, and Bangladesh Tigers cricket fixtures) available on the co666 platform;
• Payment Processing: To process deposits from and withdrawals to your bKash, Nagad, Rocket, Upay, or bank account; to reconcile transaction records; and to investigate and resolve payment disputes;
• KYC and Compliance: To verify your identity and age (21+ requirement), to assess the source of funds where required, and to fulfil our anti-money-laundering (AML) and fraud prevention obligations;
• Responsible Gaming: To monitor your gaming behaviour for signs of problem gambling, to enforce self-exclusion and deposit limit settings, and to deliver responsible gaming notifications as appropriate;
• Customer Support: To respond to your enquiries, resolve complaints, manage disputes, and maintain accurate records of all support interactions;
• Platform Security: To detect and prevent fraud, account takeovers, bot activity, and other misuse of the co666 platform; to investigate suspected prohibited activities as defined in the co666 Terms & Conditions;
• Marketing Communications: Where you have given explicit consent, to send you information about co666 bonuses, promotions, new game launches, and seasonal offers relevant to the Bangladesh market. You may withdraw this consent at any time;
• Analytics and Improvement: To analyse how players interact with the platform in aggregate, to identify areas for improvement, and to test new features — always using anonymised or pseudonymised data where possible;
• Legal Compliance: To fulfil any legal obligations to which co666 is subject, including responding to lawful requests from regulatory or law enforcement authorities.

co666 will not use your personal data for any purpose that is incompatible with the purposes listed above without first providing you with notice and, where required, obtaining your consent.

co666 processes your personal data on the following legal bases:

• Contractual Necessity: Processing that is necessary to fulfil our obligations under the co666 Terms & Conditions — including account registration, payment processing, and delivery of gaming services — is carried out on the basis that it is required for the performance of a contract to which you are a party.
• Legal Obligation: Processing required to comply with applicable legal and regulatory requirements — including KYC identity verification, AML transaction monitoring, and record-keeping obligations — is carried out on the basis of legal obligation.
• Legitimate Interests: Processing undertaken to protect the security of the platform, detect fraud, improve our services, and manage business risk is carried out on the basis of co666's legitimate interests, provided those interests are not overridden by your rights and freedoms.
• Consent: Processing for the purpose of sending you promotional and marketing communications is carried out solely on the basis of your freely given, specific, and informed consent. You have the right to withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5.1 Service Providers. co666 shares personal data with carefully selected third-party service providers who assist in operating the platform. These include identity verification and KYC providers, payment processing partners (including the operators of bKash, Nagad, Rocket, and Upay integrations), cloud hosting and infrastructure providers, customer support software providers, and game content suppliers such as Pragmatic Play, NetEnt, Microgaming, Ezugi, and Spribe. All service providers are contractually required to process your data only as instructed by co666 and to apply data security standards no less stringent than those maintained by co666 itself.

5.2 Legal and Regulatory Disclosure. co666 may disclose your personal data to regulatory bodies, law enforcement agencies, or courts where required to do so by applicable law, or where such disclosure is necessary to protect the rights, property, or safety of co666, its players, or third parties. co666 will notify you of any such disclosure to the extent permitted by law.

5.3 Business Transfers. In the event of a merger, acquisition, restructuring, or sale of assets involving co666, personal data held about players may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer in advance and will be provided with information about any material change to the terms under which your data is processed.

5.4 No Sale of Data. co666 does not sell, rent, or otherwise commercially exploit your personal data to any third party for that party's own marketing or commercial purposes. This restriction applies without exception.

6.1 What Are Cookies. Cookies are small text files placed on your device by the co666 platform when you visit the site. They allow the platform to recognise your device across sessions, remember your preferences, and gather information about how you interact with the site.

6.2 Types of Cookies Used. co666 uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies that keep you logged in securely and cookies that enable core platform features such as the game lobby and cashier. These cannot be disabled without impairing your use of the platform.
• Functional Cookies: Used to remember your preferences such as language settings, display preferences, and previously visited game categories. These improve your experience but are not strictly necessary.
• Analytics Cookies: Used to collect anonymised data about how players navigate the platform — pages visited, session duration, click paths — so that co666 can identify usage patterns and make product improvements. These do not identify you personally.
• Security Cookies: Used to support fraud detection and platform integrity functions, including recognising unusual access patterns that may indicate unauthorised account activity.

6.3 Cookie Management. Most web browsers allow you to control the acceptance of cookies through their settings. Please note that disabling strictly necessary cookies will prevent core co666 features from functioning correctly. For all other cookie categories, you may adjust your preferences through your browser's cookie management interface. Changes to cookie settings take effect on your next visit to the platform.

6.4 Local Storage. In addition to cookies, co666 may use browser local storage and session storage to retain temporary data that enhances platform performance and session continuity. This data is stored on your device and is not transmitted to co666 servers unless required for a specific platform function.

7.1 Technical Measures. co666 implements a comprehensive set of technical security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include 256-bit SSL/TLS encryption for all data in transit, encrypted storage of sensitive data at rest, strict access controls limiting data access to authorised personnel only, multi-factor authentication for administrative systems, and regular independent security assessments.

7.2 Organisational Measures. In addition to technical controls, co666 maintains internal data handling policies and staff training programmes to ensure that all team members who handle player data do so in accordance with the principles set out in this Policy. Data access is granted on a need-to-know basis and is regularly reviewed.

7.3 Data Breach Response. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, co666 will notify affected players without undue delay. Notifications will be sent to the email address registered on your co666 account and will include a description of the nature of the breach, the categories of data affected, the likely consequences, and the measures co666 has taken or proposes to take to address the breach.

7.4 Your Responsibility. While co666 takes all reasonable steps to protect your data, the security of your co666 account also depends on the strength and confidentiality of your login credentials. You are responsible for choosing a strong password, keeping it confidential, and notifying co666 immediately at [email protected] if you suspect your account has been compromised.

co666 retains your personal data for as long as is necessary to fulfil the purposes described in this Policy, subject to the following retention guidelines:

• Active Account Data: Identity, contact, financial, and usage data relating to an active co666 account is retained for the lifetime of the account and for a period of five (5) years following account closure, to meet AML and compliance record-keeping requirements.
• KYC Documentation: Copies of identity verification documents are retained for five (5) years following the date of submission or account closure, whichever is later.
• Transaction Records: Records of all deposits, withdrawals, bonuses, and wagers are retained for five (5) years following the date of each transaction.
• Support Communications: Records of customer support interactions are retained for three (3) years from the date of the final communication in each case.
• Marketing Data: Marketing consent records and interaction data are retained for two (2) years from the date of your last marketing interaction, or until you withdraw consent, whichever occurs first.
• Technical and Usage Data: Anonymised analytics data may be retained indefinitely in aggregate form. Non-anonymised technical data is retained for twelve (12) months from collection.

When a retention period expires, co666 will securely delete or irreversibly anonymise the relevant personal data. You may request early deletion of certain categories of data in accordance with your rights described in Section 9, subject to co666's legal obligations to retain specific records.

As a co666 player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact co666 support at [email protected] with a clear description of your request and sufficient information to verify your identity. co666 will respond to all valid rights requests within 30 calendar days.