Legal Document

cm666 Privacy Policy

This Privacy Policy explains how cm666 collects, uses, stores, and protects the personal information of players who access our platform. We are committed to handling your data with transparency and care.

🔏 Effective Date: 1 January 2026 | Last Updated: 1 January 2026

1. Introduction

This Privacy Policy ("Policy") applies to all users who access or use the cm666 platform, available at https://cm666.bio (the "Service"). It sets out the categories of personal data we collect, the purposes for which that data is used, how long we retain it, with whom we may share it, and the rights available to you in relation to your personal data. By registering an account or continuing to use the cm666 Service, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein.

cm666 is the data controller responsible for the personal data it collects through the Service. We take our data protection obligations seriously and have implemented technical and organisational measures to ensure that your information is handled securely and in accordance with applicable data protection principles. If you have any questions about this Policy or about how cm666 handles your personal data, please contact us at [email protected].

Your Consent

Your use of the cm666 platform constitutes your agreement to the terms of this Privacy Policy. If you do not agree with any part of this Policy, you should discontinue your use of the Service and may contact us to request deletion of your personal data subject to applicable legal retention requirements.

Our Privacy Commitments

🔒

SSL Encryption

All data transmitted between your device and the cm666 platform is protected with industry-standard SSL encryption. Your account credentials, financial details, and personal information are never sent in plain text over the network.

🎯

Purpose Limitation

We collect only the data we genuinely need to operate the Service. We do not collect excessive or irrelevant data, and we do not use your data for purposes other than those clearly stated in this Policy without your separate consent.

🚫

No Sale of Personal Data

cm666 does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. Your data is yours, and we treat it with the respect it deserves.

✏️

Right to Correction

You have the right to request correction of any inaccurate personal data cm666 holds about you. You can update most account details directly within your account settings, or contact our support team for assistance.

🗑️

Right to Erasure

Subject to applicable legal retention requirements (including anti-money-laundering regulations), you may request deletion of your personal data by contacting [email protected]. We will process your request and respond within a reasonable timeframe.

📞

Direct Support Channel

For any privacy-related query — including access requests, complaints, or data deletion — contact our support team at [email protected]. We operate 24/7 to ensure your request is handled promptly.

2. Information We Collect

cm666 collects personal data across four broad categories. We collect only the data that is necessary to deliver, secure, and continuously improve the Service for players in Bangladesh.

Category A

Registration and Identity Data

When you register a cm666 account, we collect your full name, date of birth, gender, residential address, email address, and mobile phone number. This data is required to create your account, verify your age (21+ only), and satisfy our Know Your Customer (KYC) obligations. We may also collect copies of government-issued identification documents such as a National ID card or passport when KYC verification is required.

Category B

Financial and Transaction Data

To process your deposits and withdrawals, we collect details of your payment method — including your bKash, Nagad, Rocket, or Upay mobile wallet number, and where applicable your bank account details (bank name, account number, account holder name). We also maintain a complete record of all transactions conducted on your account, including deposits, withdrawals, bet placements, game outcomes, bonus credits, and balance adjustments. This financial data is retained in accordance with applicable anti-money-laundering and financial record-keeping regulations.

Category C

Technical and Usage Data

When you access the cm666 Service, our servers automatically collect certain technical information including your IP address, device type, operating system, browser type and version, referring URL, pages visited, session duration, and clickstream data. This technical data is used to maintain platform security, detect fraudulent access, optimise platform performance, and improve the overall user experience. We may also use cookies and similar tracking technologies as described in Section 5 of this Policy.

Category D

Communications Data

When you contact our customer support team — whether by email or through in-platform messaging — we collect and retain the content of those communications, including any attachments or documents you share with us, the date and time of communication, and the resolution outcome. We use this data to resolve your query, train our support team, and maintain a record of any commitments made. We may also send you service-related communications (such as account verification emails, transaction confirmations, and security alerts) to the contact details you have registered with us.

3. How We Use Your Information

The table below summarises the key purposes for which cm666 uses your personal data and the corresponding legal basis for each processing activity.

Purpose	Legal Basis
Account registration and management	Performance of contract
Identity verification (KYC) and age verification	Legal obligation
Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay	Performance of contract
Fraud detection, anti-money-laundering compliance	Legal obligation / legitimate interest
Responsible gaming monitoring and player protection	Legal obligation / legitimate interest
Sending service communications and security alerts	Legitimate interest / consent

4. Legal Basis for Processing

cm666 processes your personal data under one or more of the following legal bases. We do not process your data without a valid legal basis, and we will always be transparent about the basis on which we are relying for each processing activity.

Basis 1

Contractual Necessity

The majority of data processing activities at cm666 are necessary for the performance of the contract between cm666 and you as a registered player. This includes processing your registration information, managing your account balance, executing deposit and withdrawal transactions, and delivering the games and betting services you have requested.

Basis 2

Legal Obligation

Certain processing activities are required by law. These include identity verification under KYC requirements, age verification to enforce our 21+ policy, transaction record retention under anti-money-laundering regulations, and the reporting of suspicious activity to relevant financial and law enforcement authorities where required by applicable law.

Basis 3

Legitimate Interest

Where not covered by contractual necessity or legal obligation, cm666 may process certain data on the basis of its legitimate business interests — provided that these interests are not overridden by your rights and interests. Legitimate interest processing activities include fraud detection, platform security monitoring, responsible gaming analysis, and improving our products and services based on aggregate usage data.

Basis 4

Consent

For certain optional processing activities — such as sending you promotional offers, newsletters, or personalised marketing communications — cm666 will seek your explicit consent. You may withdraw your consent to marketing communications at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of any processing already carried out prior to your withdrawal.

cm666 does not share your personal data with third parties except in the circumstances described below. In all cases where sharing occurs, we take appropriate steps to ensure that your data is handled securely and in a manner consistent with this Policy.

Disclosure A

Payment Processors

To process your financial transactions, we share the minimum necessary financial data with our payment processing partners — including bKash, Nagad, Rocket, Upay, and selected Bangladeshi bank partners such as Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank. These partners are authorised to use your financial data only to execute the specific transaction requested and are bound by their own data protection obligations.

Disclosure B

Regulatory and Law Enforcement Authorities

cm666 may be required by applicable law to disclose certain personal data to regulatory bodies, financial intelligence units, tax authorities, or law enforcement agencies. Such disclosures will only be made where legally required, and cm666 will not disclose more information than is strictly necessary to comply with the relevant legal request or obligation.

Disclosure C

Technology and Service Providers

cm666 works with a small number of trusted technology providers — including game software providers such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi — to deliver the Service. These providers may have access to limited technical data (such as session tokens and game round IDs) necessary to deliver their services. They are contractually prohibited from using this data for any purpose other than providing the relevant service to cm666.

Important: No Data Sales

cm666 does not sell, rent, or otherwise transfer your personal data to any unaffiliated third party for commercial or marketing purposes. Any sharing of data outside the categories described above requires your explicit prior consent.

6. Cookies and Tracking Technologies

cm666 uses cookies and similar tracking technologies to enhance your experience on the platform, maintain your session, and analyse how the Service is used. This section explains what cookies we use, why we use them, and how you can manage your cookie preferences.

Cookie Type 1

Essential Cookies

These cookies are strictly necessary for the cm666 platform to function. They maintain your login session, keep your account secure during your visit, remember your language preferences, and enable core platform features such as the game lobby and deposit flows. Essential cookies cannot be disabled without disrupting the Service.

Cookie Type 2

Analytics Cookies

Analytics cookies allow cm666 to understand how players interact with the platform — including which pages are visited most frequently, how long users spend on different sections of the Service, and where navigation issues may exist. This data is used in aggregate form and does not identify you personally. Analytics data helps us make informed decisions about improving the cm666 platform for all Bangladesh players.

Cookie Type 3

Managing Your Cookie Preferences

You may manage, restrict, or delete cookies via your browser settings at any time. Please note that disabling non-essential cookies will not affect your ability to use the core cm666 Service, but may limit certain personalisation features. For more information on how to manage cookies in your specific browser, please refer to your browser's help documentation. Continued use of the cm666 platform following the display of any cookie notice constitutes your acceptance of our use of cookies as described in this Policy.

7. Data Security

cm666 takes the security of your personal data seriously and has implemented a range of technical and organisational security measures designed to protect your data against unauthorised access, accidental loss, alteration, or destruction. These measures include SSL/TLS encryption for all data in transit, encrypted storage for sensitive data at rest, access controls limiting which staff members can view player data, regular security reviews, and account activity monitoring to detect unusual access patterns.

While cm666 takes all reasonable steps to secure your data, no method of electronic transmission or storage is completely secure. In the event of a data security incident that may affect your personal data, cm666 will take prompt action to contain the incident and will notify affected players in accordance with applicable data breach notification requirements.

Your Account Security Responsibility

You are responsible for keeping your cm666 account credentials — including your username and password — confidential and secure. Do not share your login details with anyone. If you suspect your account has been accessed without your authorisation, contact cm666 support immediately at [email protected] and change your password without delay.

8. Data Retention

cm666 retains your personal data only for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable law. The primary retention periods applicable to different categories of data are as follows: account registration data is retained for the duration of your account and for a minimum of five years following account closure; financial transaction records are retained for a minimum of five years from the date of the transaction in compliance with anti-money-laundering record-keeping requirements; KYC verification documents are retained for a minimum of five years from the date of verification; and customer support communications are retained for a minimum of two years from the date of the communication.

When your personal data is no longer required for its original purpose and there is no legal basis to continue retaining it, cm666 will securely delete or anonymise that data. Anonymised data that can no longer be linked to any individual may be retained indefinitely for analytical or statistical purposes.

9. Your Rights

As a player on the cm666 platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with your full name, registered email address, and a clear description of the right you wish to exercise. We will respond to your request within a reasonable timeframe and in accordance with applicable data protection principles.

Right of Access: You may request a copy of the personal data cm666 holds about you.
Right to Rectification: You may request correction of any inaccurate or incomplete personal data we hold about you.
Right to Erasure: You may request deletion of your personal data, subject to our legal retention obligations.
Right to Restriction: You may request that we restrict processing of your personal data in certain circumstances.
Right to Object: You may object to processing of your personal data where we are relying on legitimate interest as the legal basis.
Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

Please note that the exercise of certain rights may affect your ability to continue using the cm666 Service. For example, requesting deletion of your account data will necessarily result in your account being closed, as we cannot maintain an active account without the minimum data required to operate it.

10. Payments and Financial Data

All financial transactions on the cm666 platform are conducted in Bangladeshi Taka (BDT). When you make a deposit or withdrawal via bKash, Nagad, Rocket, or Upay, the relevant transaction data — including the wallet number, transaction reference, and amount — is transmitted securely to the relevant payment provider to execute the transaction. cm666 does not store your full mobile banking PIN, password, or OTP. These credentials are entered directly into the payment provider's secure interface and are never transmitted to or stored by cm666.

Financial transaction records — including deposit histories, withdrawal records, betting histories, and bonus transactions — are retained in accordance with applicable anti-money-laundering regulations. These records may be reviewed by cm666's compliance team or disclosed to relevant authorities as required by law. Access to financial records within cm666 is restricted to authorised personnel only and is subject to access logging.

Never Share Financial Credentials

cm666 will never ask you to share your bKash PIN, Nagad PIN, Rocket PIN, bank account password, or any OTP via email, chat, or any other channel. If anyone contacts you claiming to be cm666 support and requests this information, do not comply and report it immediately to [email protected].

11. Protection of Minors

The cm666 platform is strictly intended for adults aged 21 and above. cm666 does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted during the registration process, and additional KYC verification may be required at any time to confirm a player's age. If cm666 identifies or has reasonable grounds to believe that an account is being operated by a person under the age of 21, that account will be immediately suspended, all gameplay will be voided, and the matter will be referred for further investigation in accordance with applicable law.

If you believe that a minor has accessed your cm666 account or has created their own account on the platform, please contact us immediately at [email protected]. We will investigate the matter urgently and take all appropriate steps to remedy the situation, including removing the minor's data and returning any real-money funds to the appropriate depositing payment method.

12. Third-Party Links and Services

The cm666 platform may contain references to or integrations with third-party services — including game software providers such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi — that operate under their own privacy policies and data protection practices. cm666 is not responsible for the privacy practices of any third-party service provider. We encourage you to review the privacy policies of any third-party services you interact with directly. cm666's Privacy Policy applies solely to data collected and processed directly by cm666 through the Service.

13. Changes to This Privacy Policy

cm666 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to the Service. Where material changes are made, we will endeavour to notify registered players via the platform or by email to their registered address prior to the changes taking effect. The updated Policy will always display the revised effective date at the top of the document.

Your continued use of the cm666 Service following any update to this Privacy Policy constitutes your acceptance of the revised Policy. If you do not agree with any revised Privacy Policy, you should discontinue your use of the Service and may request voluntary account closure by contacting [email protected]. We encourage you to review this Policy periodically to stay informed about how cm666 protects your personal data.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy — including requests to access, correct, delete, or restrict the processing of your personal data — please contact the cm666 data privacy team. Our support team operates 24 hours a day, 7 days a week, including all Bangladesh public holidays, to ensure your privacy-related query is addressed promptly.

Email: [email protected]

Questions About Your Privacy?

Our support team is available 24/7 to help with any privacy query or data request. You can also explore cm666 Casino or read our FAQ for more information. For players aged 21 and above only.

Explore cm666 Casino Read Our FAQ