cz66 Privacy Policy —
Your Data, Your Rights

1Introduction

cz66 ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of every individual who interacts with the cz66 platform. This Privacy Policy describes our data collection practices, the purposes for which we use personal information, the circumstances under which data may be shared with third parties, and the rights available to you as a member or visitor of cz66.io.

This policy has been written to be clear, honest, and accessible. We have deliberately avoided overly technical or legalistic language wherever possible, while still ensuring that the document accurately reflects our data handling practices. Where specific legal terminology is used, we have provided plain-language explanations alongside it.

cz66 operates primarily for players located in Bangladesh. The platform is available in English and all data processing activities described in this policy are carried out in accordance with applicable data protection principles relevant to our operations and the markets we serve. If you have any questions about this policy that are not addressed below, please contact us at [email protected].

2Data We Collect

cz66 collects personal data through several channels: information you provide directly when registering and using the platform, information generated automatically through your use of the platform, and information received from third-party service providers such as payment processors and identity verification partners.

2.1 Information You Provide Directly

• Registration data: Full name, date of birth, email address, mobile number, and residential address in Bangladesh
• Identity verification documents: Copies of government-issued photo ID (National ID card, passport, or driving licence) provided during KYC verification
• Payment information: Mobile wallet numbers (bKash, Nagad, Rocket, Upay), bank account details, and card details (Visa, Mastercard) provided when making deposits or requesting withdrawals
• Communications: Records of your correspondence with the cz66 support team via live chat, email, or any other channel
• Responsible gaming preferences: Deposit limits, session limits, cool-off requests, and self-exclusion applications submitted through your account settings

2.2 Information Collected Automatically

• Device and technical data: IP address, device type, operating system, browser type and version, screen resolution
• Usage data: Pages visited on cz66.io, time and duration of sessions, games played, bets placed, features accessed, and navigation paths through the platform
• Transaction history: Records of all deposits, withdrawals, bets, game rounds, bonus claims, and account balance changes
• Cookie data: Session cookies, preference cookies, and analytics identifiers — see Section 6 for full details

2.3 Information from Third Parties

cz66 may receive supplementary personal data from third-party partners engaged to assist with identity verification, fraud prevention, and payment processing. This may include confirmation of identity and address details from verification service providers, and transaction status updates from payment gateway partners including bKash, Nagad, Rocket, Upay, and banking institutions operating in Bangladesh.

3How We Use Your Data

The personal data collected by cz66 is used for the following defined purposes. We do not use your data for any purpose not listed here without first seeking your explicit consent or unless required to do so by law.

4Legal Basis for Processing

cz66 processes your personal data on the following legal grounds depending on the specific purpose:

• Contractual necessity: Processing required to fulfil our obligations under the account agreement with you — including account management, payment processing, and bet settlement.
• Legal obligation: Processing required to comply with applicable laws — including anti-money laundering (AML) regulations, identity verification requirements, and financial record-keeping obligations.
• Legitimate interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and improvement of our services, where these interests are not overridden by your rights.
• Consent: Processing for marketing communications and non-essential personalisation features, carried out only where you have provided explicit opt-in consent. You may withdraw this consent at any time without affecting your account.

5Data Sharing and Disclosure

cz66 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share personal data only in the specific, limited circumstances described below.

5.1 Service Providers

cz66 engages trusted third-party service providers to assist with the delivery of platform services. These providers act under strict data processing agreements and are permitted to use your data only for the specified purpose:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard for transaction processing
• Identity verification partners: KYC and document verification service providers for age and identity confirmation
• Game content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other studios whose games are hosted on the cz66 platform may receive anonymised session data for game integrity purposes
• Fraud prevention and security: Specialist fraud detection platforms that analyse transaction and behavioural patterns
• Analytics providers: Platform analytics tools that process aggregated and pseudonymised usage data to help us improve the cz66 experience

5.2 Legal Disclosure

cz66 may disclose personal data to regulatory authorities, law enforcement agencies, or other governmental bodies where required to do so by applicable law, court order, or lawful regulatory request. We will notify affected members of such disclosures where we are legally permitted to do so.

5.3 Business Transfers

In the event that cz66 undergoes a merger, acquisition, or sale of all or part of its business assets, personal data held by cz66 may be transferred to the successor entity as part of that transaction. Members will be notified of any such transfer and of any changes to this Privacy Policy that may result from it.

6Cookies and Tracking Technologies

cz66.io uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your logged-in session, and gather anonymised analytics about how the site is used. The following categories of cookies are used on the cz66 platform:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies and security tokens. These cookies cannot be disabled without disrupting your ability to use the platform.
• Functional cookies: Used to remember your preferences such as language, display settings, and responsible gaming tool configurations between visits.
• Analytics cookies: Used to collect anonymised data about how visitors navigate cz66.io, which pages are visited most frequently, and where users encounter issues. This data helps us improve the platform experience. Analytics cookies are only placed with your consent.
• Fraud prevention cookies: Used to identify potentially fraudulent or suspicious behaviour patterns, including detection of multiple account registration attempts from the same device.

You may manage your cookie preferences through your browser settings. Note that disabling certain cookies may impair the functionality of the cz66 platform. cz66 does not use third-party advertising or retargeting cookies.

7Data Security

cz66 employs a range of technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and cz66.io
• Encrypted storage of sensitive personal and financial data at rest
• Role-based access controls limiting internal access to personal data to authorised personnel only, on a strict need-to-know basis
• Regular security assessments and penetration testing of the cz66 platform infrastructure
• Anomaly detection systems that monitor for unusual account activity and flag potential unauthorised access attempts
• Two-factor authentication options available to members to add an additional layer of protection to their cz66 accounts

While cz66 takes all reasonable precautions, no digital platform can guarantee absolute security. In the event of a data security incident that is likely to result in a risk to your rights and freedoms, cz66 will notify affected members without undue delay and will take all necessary steps to contain and remediate the incident.

8Data Retention

cz66 retains personal data for as long as is necessary to fulfil the purposes outlined in this Privacy Policy, or as required by applicable law. The following retention schedule applies as a general guide:

• Active account data: Retained for the lifetime of the account and for a minimum of 5 years following account closure
• Financial transaction records: Retained for a minimum of 5 years from the date of the transaction to meet financial record-keeping and AML obligations
• Identity verification documents: Retained for a minimum of 5 years following the most recent KYC verification event or account closure, whichever is later
• Customer support correspondence: Retained for 3 years from the date of the most recent interaction
• Analytics and usage data: Anonymised and aggregated after 12 months; raw usage logs deleted after 24 months
• Marketing consent records: Retained for the duration of your consent and for 2 years following withdrawal of consent as evidence of the consent event

When personal data is no longer required for any lawful purpose, cz66 will securely delete or irreversibly anonymise it. Requests for early deletion of personal data will be considered in accordance with your rights as described in Section 9, subject to any overriding legal retention obligations.

9Your Data Rights

As a member of cz66, you have the following rights with respect to your personal data. To exercise any of these rights, please contact the cz66 support team at [email protected] with the subject line "Data Rights Request". We will respond to all valid requests within 30 days.

• Right of Access: You may request a copy of the personal data cz66 holds about you, along with information about how it is being used.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations.
• Right to Restriction: You may request that cz66 restrict the processing of your personal data in certain circumstances, for example while the accuracy of the data is being verified.
• Right to Object: You may object to the processing of your personal data where it is based on legitimate interests, including profiling for responsible gaming monitoring purposes.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
• Right to Data Portability: You may request a copy of personal data you have provided to cz66 in a structured, machine-readable format.

10Children and Minors

The cz66 platform is strictly for adults aged 21 years and above. cz66 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that a minor in your care has registered an account on cz66, please contact the support team immediately at [email protected]. We take underage gambling and child data protection with the utmost seriousness.

11Third-Party Links

The cz66 platform may, from time to time, reference third-party services such as payment providers and game studios. cz66 is not responsible for the privacy practices of these third parties. Each third-party service operates under its own privacy policy, which governs their collection and use of data. We encourage you to review the privacy policies of any third-party service you use in connection with your cz66 account, particularly those of your chosen payment provider (bKash, Nagad, Rocket, Upay, or your bank).

12Updates to This Privacy Policy

cz66 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform features. When material changes are made, cz66 will notify registered members by email or via a prominent notice on the platform at least 7 days before the changes take effect. The "Effective Date" at the top of this policy indicates when the current version was last updated.

Your continued use of the cz66 platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised policy, you must stop using the platform and may request account closure by contacting the support team. The current version of this Privacy Policy is always available at cz66.io/privacy-policy.

13Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way cz66 handles your personal data, please do not hesitate to get in touch. Our support team is available 24 hours a day, 7 days a week and aims to respond to all privacy-related enquiries within 24 hours.

For responsible gaming-related data requests, including self-exclusion records and deposit limit history, please mark your email clearly as a "Responsible Gaming Data Request" and our dedicated team will prioritise your case.