c366 Privacy Policy

This Privacy Policy ("Policy") explains how c366 ("c366", "we", "our", "us") collects, uses, stores, shares, and protects the personal data of individuals who visit, register with, or use the c366 platform at c366.app ("the Service"). By creating a c366 account or continuing to use the Service, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

This Policy applies to all users of the c366 platform regardless of the device or access method used. It covers data collected via the c366 website, any associated mobile-optimised pages, and any communications between you and c366 support. It does not apply to third-party websites, payment processors, or game studios that may be accessible via links or integrations within the Service — those parties have their own privacy policies which govern their data practices.

We collect the following categories of personal data when you register, use the Service, or interact with c366 support:

c366 uses your personal data only for the purposes described in this Policy. Our primary bases for processing your data are the performance of our contract with you, compliance with legal obligations, our legitimate interests in operating a secure and sustainable platform, and where applicable, your consent. We use your data to:

• Create and administer your c366 account, including verifying your identity and age.
• Process deposits and withdrawals through bKash, Nagad, Rocket, and other registered payment methods.
• Deliver the gaming and sports betting services you request, including tracking bet history and game results.
• Deliver responsible gaming tools such as deposit limits, session reminders, and self-exclusion where requested.
• Comply with applicable legal, regulatory, and anti-money-laundering obligations, including KYC verification requirements.

We do not use your personal data for automated profiling that produces legal effects or similarly significant decisions about you without human review. We do not use your data to target you with advertising for other brands or services outside the c366 platform.

c366 does not sell, rent, or trade your personal data. We share your personal data only in the following limited circumstances:

• Payment processors (bKash, Nagad, Rocket, Upay): to facilitate deposits and withdrawals. These processors receive only the transaction data necessary to complete your payment.
• Game technology providers (such as Evolution Gaming, Pragmatic Play, Spribe, Ezugi): to deliver the game experience. These providers may process technical session data under their own security frameworks.
• Identity verification and KYC partners: to complete age and identity checks as required for player account compliance.
• Law enforcement and regulatory authorities: where c366 is required by applicable law, court order, or regulatory directive to disclose data. c366 will notify you of such disclosures where legally permitted to do so.

All third parties with whom c366 shares personal data are required to handle your data securely and solely for the purpose for which it was shared. c366 does not permit third-party recipients to use your data for their own independent marketing or profiling purposes.

c366 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including the duration of your account and any applicable legal retention obligations. Specific retention periods are as follows:

• Account and identity data: retained for the lifetime of the active account and for a minimum of 5 years following account closure, in line with anti-money-laundering record-keeping requirements.
• Financial transaction records: retained for a minimum of 5 years from the date of each transaction, as required for financial compliance purposes.
• Support communications: retained for up to 2 years from the date of your last support interaction, to enable dispute resolution.
• Technical and usage data: typically retained in aggregated or anonymised form after 13 months from collection, unless required for an ongoing investigation or compliance review.

c366 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• SSL (Secure Sockets Layer) encryption on all data transmitted between your device and the c366 platform, ensuring that your login credentials, payment details, and personal information cannot be intercepted in transit.
• Access controls: your personal data is accessible only to c366 staff and authorised service providers who have a legitimate need to process it for the purposes described in this Policy.
• Secure server infrastructure: c366 account and transaction data is stored on secured servers with regular security audits, vulnerability assessments, and patch management processes in place.
• Fraud detection systems: automated tools monitor account activity in real time to detect unusual patterns that may indicate unauthorised access, identity fraud, or money laundering.
• Staff training: all c366 personnel who handle personal data undergo regular data protection training and are bound by confidentiality obligations.

Whilst c366 takes all reasonable steps to protect your data, no method of transmission over the internet or electronic storage is completely secure. In the event of a data breach that is likely to result in a high risk to your rights and interests, c366 will notify you without undue delay using the contact details you have provided.

c366 uses cookies and similar tracking technologies to operate and improve the Service. The types of cookies we use are as follows:

• Essential cookies: required for the platform to function correctly, including maintaining your login session, remembering your language preference, and enabling secure payment flows. These cookies cannot be disabled without impairing your ability to use the Service.
• Analytics cookies: used to collect aggregated, anonymised data about how players use the platform, which pages they visit most, and where they encounter difficulties. This data helps c366 improve the user experience.
• Functional cookies: used to remember your preferences such as display settings and game history to provide a more personalised experience on return visits.
• Security cookies: short-lived cookies used to detect and prevent fraudulent account activity, including bot detection and session validation.
• You can manage or delete cookies through your browser settings at any time. Please note that disabling non-essential cookies may affect some features of the c366 platform.
• c366 does not use third-party advertising cookies or permit advertising networks to place tracking cookies on the c366 platform.

As a c366 player, you have the following rights in respect of your personal data. To exercise any of these rights, please contact c366 support using the email address shown in the footer of this page:

• Right of access: you may request a copy of the personal data c366 holds about you. We will provide this within a reasonable timeframe and at no charge for standard requests.
• Right of rectification: if any personal data c366 holds about you is inaccurate or incomplete, you may request that it be corrected or updated. You may also update certain details directly within your account settings.
• Right of erasure: you may request that c366 delete your personal data. This right is subject to limitations where retention is required by law or for the resolution of disputes. Where erasure is not possible in full, c366 will anonymise your data instead.

To submit a data rights request, please email c366 support using the address in the footer of this page with the subject line "Data Rights Request" and include your registered mobile number and a brief description of your request. c366 will acknowledge receipt within 3 business days and aim to fulfil the request within 30 days.

The c366 Service is strictly for adults aged 21 and above. c366 does not knowingly collect personal data from any person under the age of 21. If you are under 21 years of age, you must not use the Service or provide any personal information to c366.

• If c366 discovers or is notified that personal data has been collected from a person under 21, it will take immediate steps to delete that data and close any associated account. If you believe a person under 21 has provided personal data to c366, please contact us immediately using the email address in the footer of this page.
• Right to object: you may object to the processing of your personal data where c366 is relying on its legitimate interests as the legal basis. c366 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to restriction: in certain circumstances (for example, where you contest the accuracy of data or have objected to processing), you may request that c366 restrict the processing of your personal data whilst the matter is resolved.
• Right to data portability: where c366 processes your personal data by automated means on the basis of your consent or a contract with you, you may request a machine-readable copy of your data in a structured, commonly used format.
• Right to withdraw consent: where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
• Right to lodge a complaint: if you believe c366 has not handled your personal data in accordance with this Policy, you have the right to raise the matter with c366 support in the first instance. If the matter is not resolved to your satisfaction, you may seek advice from an appropriate consumer protection or data protection authority in your jurisdiction.

c366 aims to respond to all data rights requests within 30 days of receipt. Where a request is complex or where c366 has received a high volume of requests, this period may be extended by a further 30 days, in which case c366 will notify you of the extension and the reason for it within the initial 30-day period.

c366 reserves the right to update this Privacy Policy at any time. Where changes are material, we will make reasonable efforts to notify registered players before the changes take effect — for example by displaying a notice on the platform or sending an alert to your registered mobile number. The effective date of any revised Policy will be stated at the top of the updated document.

• It is your responsibility to review this Policy periodically. Your continued use of the Service after the effective date of any amendment constitutes acceptance of the revised Policy.
• Previous versions of this Privacy Policy are available on request by contacting c366 support using the email address in the footer of this page.
• If you do not accept the revised Policy, you must stop using the Service. You may request account closure by contacting c366 support, and any undisputed real-money balance will be returned to you via your registered payment method.

All notifications regarding amendments to this Policy will be issued in English. The English version of this Policy shall prevail in the event of any inconsistency between language versions.

c366 is the data controller for the personal data collected and processed through the c366 platform. If you have any questions, concerns, or requests relating to this Privacy Policy or the way c366 handles your personal data, please contact our support team using the email address displayed in the footer of this page. Please include "Privacy Enquiry" in the subject line so that your message can be directed to the appropriate team promptly.

c366 aims to respond to all privacy-related enquiries within 5 business days Bangladesh Standard Time (BST, UTC+6). For urgent matters relating to suspected unauthorised access to your account or a potential data breach, please mark your message "URGENT" in the subject line and c366 will prioritise your request accordingly.

This Privacy Policy is governed by and construed in accordance with applicable law. Any dispute arising out of or in connection with this Policy that cannot be resolved through c366 support shall be subject to the exclusive jurisdiction of the courts or appropriate dispute resolution forum applicable under the laws of the relevant jurisdiction.

The English version of this Privacy Policy is the authoritative version. Where this Policy is made available in Bengali or any other language, it is provided as a convenience only. In the event of any conflict or inconsistency between language versions, the English version shall take precedence.

If anything in this Privacy Policy is unclear or you would like further clarification on any aspect of how c366 uses your personal data, do not hesitate to reach out to our support team. We are committed to being transparent about our data practices and will always do our best to answer your questions fully and promptly.

Your trust is important to c366. We take our responsibility as a data controller seriously and continually review our security and privacy practices to ensure that your personal data is protected to the highest possible standard.