Privacy Policy — How cu66 Protects Your Data

cu66 collects personal data from players in several ways: directly when you register an account or contact support; automatically when you use the platform; and, in limited circumstances, from third-party verification partners as part of our Know Your Customer (KYC) process. Below is a complete breakdown of the categories of personal data we collect.

1.1 Registration & Account Data

When you create a cu66 account, we collect the following information:

• Full legal name
• Date of birth (for age verification — 18+ requirement)
• Residential address (including city, district, and postal code within Bangladesh)
• Email address
• Mobile phone number
• Username and encrypted password
• Preferred language and currency (BDT by default for Bangladesh players)

1.2 Identity Verification (KYC) Data

To comply with responsible gaming standards and anti-money laundering best practices, cu66 may request and retain copies of the following documents:

• National Identity Card (NID) or passport
• Proof of address (utility bill, bank statement, or mobile financial service record dated within 3 months)
• Proof of payment method ownership (e.g., screenshot of registered bKash or Nagad account)
• Selfie or live photo for biometric identity confirmation where required

1.3 Financial Transaction Data

When you make a deposit or withdrawal on cu66, we collect and retain records of:

• Transaction type (deposit or withdrawal)
• Transaction amount in BDT (৳)
• Payment method used (bKash, Nagad, Rocket, Upay, SureCash, Bank Transfer)
• Transaction date, time, and reference number
• Account name associated with the payment method

cu66 does not store full mobile banking PINs, card numbers, or bank account passwords. Payment credentials are handled directly by the respective payment provider through their encrypted APIs.

1.4 Usage & Behavioural Data

When you use the cu66 platform, we automatically collect technical and behavioural data, including:

• IP address and approximate geographic location
• Device type, operating system, and browser version
• Pages visited, features used, and time spent on the platform
• Betting history, game activity, and session duration
• Login timestamps and frequency of access
• Referral source (how you arrived at cu66.vip)

This data is collected using standard server logs, cookies, and analytics tools (see Section 4 for the full Cookie Policy).

1.5 Communications Data

If you contact cu66 customer support via live chat or email, we retain a record of the communication, including the content of messages, timestamps, and any resolution notes. This data is used to improve support quality and to maintain an accurate record of any account-related disputes or requests.

cu66 does not sell your personal data to any third party. We share your data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.

3.1 Payment Service Providers

To process your deposits and withdrawals, cu66 shares the minimum necessary transaction data with your selected payment provider (bKash, Nagad, Rocket, Upay, SureCash, or your bank). Each payment provider operates under their own privacy policy and data protection obligations. cu66 recommends reviewing the privacy policies of the payment providers you use.

3.2 Game Providers & Technology Partners

cu66 sources its game content from certified third-party providers including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, and Microgaming. These providers receive only the data required to deliver the game experience — typically an anonymised player session token — and do not receive your full personal profile or financial details.

3.3 Identity Verification Partners

Where automated KYC verification is used, cu66 may share identity document images and biometric data with a certified third-party verification service provider. Such providers are contractually bound to process your data only for the purpose of identity verification and to maintain data security standards equivalent to those applied by cu66.

3.4 Legal and Regulatory Disclosure

cu66 may disclose personal data to law enforcement agencies, regulatory authorities, or other competent public bodies where required to do so by applicable law, court order, or where such disclosure is necessary to:

• Investigate or prevent suspected fraud, money laundering, or other criminal activity.
• Protect the rights, property, or safety of cu66, its players, or the public.
• Comply with any applicable legal obligation or regulatory requirement.

3.5 Business Transfers

In the event of a merger, acquisition, or sale of all or a substantial portion of cu66's assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the applicable privacy terms via a notice published on cu66.vip prior to the transfer taking effect.

cu66 takes the security of your personal data seriously and has implemented a comprehensive set of technical and organisational security measures to protect your information against unauthorised access, disclosure, alteration, or destruction.

5.1 Technical Security Controls

• 256-bit SSL/TLS Encryption: All data transmitted between your browser or app and cu66 servers is encrypted using industry-standard SSL/TLS protocols. Look for the padlock icon in your browser's address bar when visiting cu66.vip.
• Encrypted Password Storage: cu66 never stores passwords in plain text. All account passwords are hashed using a strong one-way hashing algorithm with per-account salting.
• Tokenised Payment Processing: Payment transactions are processed via tokenised channels — cu66 servers do not store raw mobile banking credentials or full bank account numbers.
• Intrusion Detection Systems: cu66's infrastructure is monitored 24/7 by automated intrusion detection and prevention systems that flag and respond to suspicious access patterns in real time.
• Regular Security Audits: cu66 conducts periodic security assessments, including vulnerability scanning and penetration testing, to identify and remediate potential weaknesses in the platform.

5.2 Organisational Security Measures

• Access to personal data is restricted on a strict need-to-know basis. Only authorised cu66 personnel whose job functions require access to personal data are permitted to view it.
• All personnel with access to personal data are subject to confidentiality obligations and receive data protection training.
• cu66 maintains an incident response plan. In the event of a data breach that poses a risk to your rights, affected players will be notified promptly with details of the breach and recommended protective actions.

5.3 Your Responsibility

While cu66 implements robust security measures on our end, the security of your account also depends on the steps you take to protect your login credentials. cu66 strongly recommends:

• Using a unique, strong password for your cu66 account that you do not use on any other website or app.
• Never sharing your cu66 username or password with any other person.
• Logging out of your cu66 account after each session, particularly when using a shared or public device.
• Contacting cu66 support immediately if you suspect your account has been accessed by an unauthorised party.

As a cu66 player, you have meaningful rights over your personal data. cu66 is committed to honouring these rights promptly and without unnecessary friction. The following rights are available to you at any time.

7.1 Right of Access

You have the right to request a copy of all personal data cu66 holds about you. Upon receiving a verified access request, cu66 will provide a structured summary of your data within 30 days. This service is provided free of charge for reasonable requests.

7.2 Right to Rectification

If any personal data cu66 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For basic account details (such as your email address or mobile number), you may update these directly through your account settings. For identity-verified data (such as your registered name or date of birth), corrections must be requested via the cu66 support team and may require supporting documentation.

7.3 Right to Erasure ("Right to Be Forgotten")

You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis for processing applies. Please note that cu66 may be unable to delete certain data where retention is required by law — for example, financial transaction records and KYC data held for anti-money laundering compliance purposes.

7.4 Right to Restrict Processing

You have the right to request that cu66 restricts the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved. During a restriction period, cu66 may continue to store your data but will not actively process it for purposes other than those to which you have consented or which are required by law.

7.5 Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes at any time. Upon receiving an objection, cu66 will cease processing your data for marketing immediately. You may also object to processing carried out on the basis of cu66's legitimate interests, though cu66 may continue such processing where it can demonstrate compelling legitimate grounds that override your interests.

7.6 Right to Data Portability

Where cu66 processes your personal data on the basis of your consent or in performance of a contract, you have the right to receive a copy of that data in a structured, commonly used, machine-readable format (such as CSV or JSON), and to request that cu66 transmit that data directly to another service provider where technically feasible.

7.7 How to Exercise Your Rights

To exercise any of the rights described above, please contact the cu66 support team via the email address published in the footer of this page. In your request, please clearly identify yourself (we may need to verify your identity before processing the request) and specify which right or rights you wish to exercise. cu66 aims to respond to all data rights requests within 30 calendar days.