ch666 Privacy Policy — Your Data, Your Rights
This Privacy Policy explains how ch666 collects, processes, stores, and protects personal information provided by players in Bangladesh. Your privacy matters to us.
Introduction
ch666 is committed to protecting the privacy of every player on the platform. We recognise that players in Bangladesh entrust us with sensitive personal and financial information when they register, verify their identity, and carry out transactions on our platform. This Policy sets out exactly what data we collect, why we collect it, how we use it, who we may share it with, how long we retain it, and what rights you have in relation to your data.
This Policy applies to all personal data collected through the ch666 website, mobile browser experience, customer support communications, and any other interaction you have with ch666 as a registered or prospective player. Please read this Policy carefully. If you have any questions about how ch666 handles your personal data, you may contact our support team at any time via the contact details provided at the end of this document.
1 Information We Collect
ch666 collects personal data in the following categories when you register, verify your account, make transactions, or interact with our platform:
- Identity data: full legal name, date of birth, gender, and copies of government-issued identity documents such as your Bangladesh National ID card (NID) or passport, submitted during the KYC verification process.
- Contact data: mobile phone number (used as the primary account identifier on ch666), email address if provided, and any correspondence you send to our customer support team.
- Financial data: details of your deposit and withdrawal transactions including payment method (bKash account number, Nagad account number, Rocket number, Upay number, or card details), transaction amounts in BDT, transaction timestamps, and transaction reference numbers. ch666 does not store full card numbers; card payment processing is handled by PCI-DSS compliant payment gateways.
- Gaming activity data: records of all bets placed, games played, game outcomes, session durations, login timestamps, responsible gaming tool settings (deposit limits, self-exclusion status, session reminder preferences), and any in-game chat messages where applicable.
- Technical data: IP address, device type, operating system version, browser type and version, mobile network operator, screen resolution, and other technical identifiers collected automatically when you access the ch666 platform from your phone or browser.
ch666 collects only the personal data that is necessary for the purposes described in this Policy. We do not collect sensitive personal data categories beyond identity documents required for age and identity verification under our KYC process. We do not collect information about religion, political affiliation, health conditions, or biometric data.
2 How We Use Your Information
ch666 uses the personal data collected from you for the following specific and lawful purposes:
- Account management and authentication: to create and manage your ch666 player account, verify your identity at registration and during KYC, authenticate your logins, and maintain the security and integrity of your account.
- Payment processing and financial compliance: to process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard in BDT; to verify the ownership of the payment methods used; and to comply with anti-money laundering (AML) obligations including transaction monitoring and source-of-funds checks.
- Service delivery and platform operation: to provide you with access to all ch666 games and betting markets, to personalise your platform experience based on your gaming history and preferences, and to deliver responsive customer support.
- Responsible gaming and player protection: to monitor your gaming activity for signs of problem gambling; to apply deposit limits, session reminders, and self-exclusion restrictions you have requested; and to proactively reach out if our systems detect patterns consistent with harmful gambling behaviour.
- Fraud prevention and security: to detect, investigate, and prevent fraudulent activity, money laundering, identity theft, account takeover, bonus abuse, and other forms of prohibited conduct on the ch666 platform.
- Legal and regulatory compliance: to fulfil our obligations under applicable laws and regulations, to respond to lawful requests from law enforcement and regulatory authorities, and to establish, exercise, or defend legal claims.
3 Legal Basis for Processing Personal Data
ch666 processes your personal data only where there is a valid legal basis for doing so. The legal bases on which ch666 relies are:
- Contractual necessity: processing that is necessary to perform the contract between you and ch666 (i.e. the Terms & Conditions you accepted at registration), including account creation, identity verification, payment processing, and game delivery.
- Legal obligation: processing that is necessary to comply with our legal and regulatory obligations, including AML compliance, KYC verification, age verification, and responding to lawful requests from competent authorities.
- Legitimate interests: processing carried out for the purposes of fraud prevention, platform security, abuse detection, and improving the quality and safety of our services, where these interests are not overridden by your privacy rights.
- Consent: where ch666 relies on your consent as the legal basis for a specific processing activity (for example, sending you promotional communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.
4 KYC and Identity Verification
KYC (Know Your Customer) verification is a standard requirement for online gaming and financial platforms. ch666 is required to verify the age and identity of every player before processing their first withdrawal. The KYC process may also be triggered by unusual account activity or as part of a routine compliance review. Documents you may be asked to provide include:
- Proof of identity: a clear photograph or scan of your Bangladesh National ID card (NID), passport, or driving licence. The document must be valid, not expired, and the name must match the name provided during registration.
- Proof of address (if required): a recent utility bill, bank statement, or other official document showing your name and current residential address in Bangladesh, dated within the past 90 days.
- Proof of payment method (if required): a screenshot or other evidence confirming that the bKash, Nagad, Rocket, or Upay wallet used for deposits is registered in your name and linked to the mobile number on your ch666 account.
All KYC documents submitted to ch666 are transmitted via 256-bit SSL encrypted connections and stored in an encrypted format on secure servers. Access to KYC documents is restricted to ch666 personnel who require access for compliance and verification purposes. ch666 does not share your KYC documents with any third party except where required by law or as described in Section 7 of this Policy.
5 Payment Data and Financial Transactions
ch666 processes financial transaction data in order to facilitate deposits and withdrawals and to comply with financial regulations. The following rules govern how payment data is handled:
- Mobile wallet data (bKash, Nagad, Rocket, Upay): ch666 records the mobile wallet number associated with each transaction. This number is used to verify that withdrawals are returned to the same wallet used for deposits, and to satisfy AML requirements regarding payment method consistency.
- Card payment data (Visa, Mastercard): ch666 does not store full card numbers. Card payment processing is carried out by PCI-DSS compliant third-party payment gateways. ch666 retains only the last four digits of the card number, the card type, and the transaction reference for record-keeping purposes.
- Transaction history: a complete record of all deposits and withdrawals on your ch666 account is maintained for a minimum of five years from the date of each transaction. This retention period is required to satisfy financial compliance and audit obligations.
ch666 does not use your payment data for any purpose other than transaction processing, fraud prevention, AML compliance, and financial record-keeping. ch666 does not sell, rent, or otherwise commercially exploit your financial transaction data to any third party.
6 Cookies and Tracking Technologies
ch666 uses cookies and similar tracking technologies to operate the platform, improve the player experience, and prevent fraud. The following types of cookies are used on the ch666 platform:
| Cookie Type | Purpose |
|---|---|
| Essential cookies | Required to keep you logged in, maintain your session, and enable core platform functions. Cannot be disabled. |
| Analytics cookies | Used to understand how players navigate the platform, which pages are visited most, and where technical errors occur. Data is aggregated and anonymised. |
| Fraud detection cookies | Used to identify suspicious login patterns, detect duplicate accounts, and flag potentially fraudulent transactions. These are essential security cookies and cannot be disabled. |
Most modern mobile browsers allow you to manage cookie preferences through your browser settings. Disabling essential or fraud detection cookies may prevent certain platform features from functioning correctly or may result in your account being flagged for a security review.
7 Sharing Your Personal Data
ch666 does not sell, rent, or trade your personal data to any third party for commercial purposes. Your personal data may be shared only in the following limited circumstances:
- Payment processors and wallet providers: ch666 shares the minimum necessary transaction data with bKash, Nagad, Rocket, Upay, and card payment gateways (Visa/Mastercard processors) in order to execute your deposit and withdrawal requests. These providers process data only as instructed by ch666 and are contractually bound to protect your data.
- Game providers and platform technology partners: ch666 shares session and technical identifiers with game providers (such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, and others) for the purpose of delivering games and ensuring correct game round resolution. Game providers do not receive your KYC documents, financial account details, or full contact information.
- Law enforcement and regulatory authorities: ch666 may disclose personal data to competent authorities, financial intelligence units, or law enforcement agencies where required to do so by applicable law, court order, or regulatory requirement. ch666 will notify you of such disclosure where legally permitted to do so.
- Professional advisers: ch666 may share personal data with its legal advisers, auditors, or insurers on a need-to-know basis where required for the conduct of ch666's business operations, legal defence, or audit processes.
ch666 requires all third parties to whom it discloses personal data to implement appropriate technical and organisational security measures to protect that data, and to use the data only for the specific purpose for which it was shared. ch666 does not authorise any third party to use your personal data for their own independent marketing or commercial purposes.
8 Data Retention
ch666 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following retention periods apply:
- Active account data: retained for the duration of your active account relationship with ch666. Data may be reviewed and minimised periodically where no longer required for active account management purposes.
- Closed account data: following account closure (whether voluntary or by ch666), identity verification documents, transaction records, and account activity logs are retained for a minimum of five years to satisfy AML, financial compliance, and potential legal proceedings requirements.
- Fraud investigation data: data collected or generated during a fraud investigation may be retained for longer than standard periods where required for the conclusion of legal proceedings or regulatory investigations.
9 Data Security
ch666 implements a range of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include 256-bit SSL encryption for all data in transit, encryption of sensitive data at rest, access controls limiting data access to authorised personnel on a need-to-know basis, regular security assessments and penetration testing of the platform infrastructure, and staff training on data protection and information security practices.
Despite these measures, no internet-based platform can guarantee absolute security. In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, ch666 will take prompt action to contain the breach, assess the risk, and notify affected players as soon as reasonably practicable. You can help keep your account secure by using a strong, unique password for your ch666 account and by not sharing your login credentials with any other person.
10 Your Privacy Rights
As a ch666 player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact ch666's support team using the contact details in Section 13 of this Policy:
- Right of access: you have the right to request a copy of the personal data ch666 holds about you. ch666 will provide this information within 30 days of receiving your verified request.
- Right of rectification: if any personal data ch666 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Where the inaccuracy relates to your registered name or date of birth, correction may require additional identity verification.
- Right to erasure: in certain circumstances, you have the right to request the deletion of your personal data. This right is subject to limitations where data must be retained to comply with legal obligations (for example, AML record-keeping requirements) or to defend legal claims.
- Right to restrict processing: you have the right to request that ch666 restrict the processing of your personal data in certain circumstances, for example where you contest the accuracy of the data or where you have objected to processing based on legitimate interests.
- Right to withdraw consent: where ch666 processes your data on the basis of consent (for example, marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before withdrawal.
ch666 will respond to all privacy rights requests within 30 days of receipt. In complex cases, this period may be extended by an additional 60 days, in which case ch666 will notify you of the extension and the reason for it. ch666 will not charge a fee for handling privacy rights requests, except where requests are manifestly unfounded or excessive, in which case a reasonable administrative fee may be applied.
11 Children's Privacy
ch666 is strictly an adult-only platform. The minimum age requirement to register and use ch666 is 21 years. ch666 does not knowingly collect personal data from individuals under the age of 21. If ch666 becomes aware that personal data has been collected from a person under the age of 21, that account will be immediately suspended, all data collected will be securely deleted to the extent permitted by law, and the matter will be escalated to ch666's compliance team. If you are a parent or guardian and believe your child has registered on ch666, please contact our support team immediately at [email protected] so that we can take prompt action.
12 Changes to This Privacy Policy
ch666 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or the services we offer. The most current version of this Policy will always be available on this page. The effective date at the top of this page will be updated whenever a material change is made. Where a change materially affects your rights as a data subject, ch666 will make reasonable efforts to notify registered players via the contact details on their account prior to the change taking effect. Your continued use of the ch666 platform after the effective date of any update to this Policy constitutes your acknowledgement of the updated terms.
13 Contact Us About Privacy
If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or wish to make a complaint about how ch666 has handled your personal data, please contact ch666's support team. Our support team will acknowledge your query within 48 hours and aim to provide a full response within 30 days.
You can reach our support team by email at [email protected]. Please include your registered mobile number and a clear description of your query or request in your communication so that we can identify your account and respond as efficiently as possible. Our support team operates seven days a week and aims to respond to all privacy-related queries within 48 hours of receipt.
Your Privacy at a Glance
Questions About Your Privacy?
Our FAQ page answers common questions about account security and data handling. You can also log in to your ch666 account to manage your privacy settings, or read our About Us page to learn more about who we are.
View Our FAQ Login to ch666 About ch666