xc666 Privacy Policy

1. Information We Collect

When you interact with the xc666 platform — whether by registering an account, making a deposit, placing a bet, or contacting customer support — xc666 collects certain categories of personal information. The nature of the information collected depends on the action you take and the features of the xc666 platform you access.

1.1 Registration Information

When you create an xc666 account, we collect the following information:

• Full legal name — as it appears on your national identity document
• Date of birth — to verify that you meet the 18+ age requirement
• Residential address — including division, district, and upazila within Bangladesh
• Contact email address — used for account notifications and correspondence
• Mobile number — used for account verification and, where applicable, two-factor authentication
• Username and encrypted password — passwords are stored in hashed form only; xc666 cannot retrieve your plain-text password

1.2 Identity Verification Documents

When xc666 requests formal identity verification — which may occur at registration, before processing a withdrawal, or as part of an account review — we may collect copies of:

• National Identity Card (NID)
• Passport (valid, showing photograph and date of birth)
• Driver's Licence (where date of birth is shown)
• Utility bill or bank statement (as proof of residential address, dated within 90 days)

These documents are used exclusively for identity verification, age confirmation, and anti-money-laundering compliance. They are stored securely and are not shared with third parties except as required by law or as described in Section 3 of this policy.

1.3 Financial Transaction Data

When you make a deposit or request a withdrawal, xc666 records transaction metadata, including:

• Payment method type (e.g., bKash, Nagad, Rocket, Dutch-Bangla Bank)
• Transaction reference numbers generated by your payment provider
• Transaction amounts in BDT (৳)
• Transaction timestamps in Bangladesh Standard Time (UTC+6)

xc666 does not store your full bKash PIN, Nagad PIN, or bank account passwords. Complete card numbers are handled exclusively by PCI-DSS compliant payment processors, not stored on xc666 servers.

1.4 Platform Usage Data

As you use the xc666 platform, we automatically collect certain technical and behavioural data, including:

• IP address and approximate geolocation (country and city level)
• Device type, operating system, and browser version
• Pages visited on xc666.club, session duration, and click-path data
• Game history, betting activity, and wagering patterns
• Login timestamps and session identifiers

This usage data is collected to ensure the technical performance of the xc666 platform, detect fraudulent activity, enforce our responsible gaming tools, and improve the player experience over time.

1.5 Customer Support Communications

When you contact xc666 via Live Chat, email, or WhatsApp, we retain records of those communications, including the content of your messages, attachments you provide, and the resolution of your query. These records are maintained for quality assurance, dispute resolution, and regulatory compliance purposes.

2. How We Use Your Data

xc666 collects personal data only for specific, legitimate purposes. We do not process your data in ways that are incompatible with the purpose for which it was originally collected. The table below summarises the primary purposes for which xc666 uses personal data and the legal basis for each use:

Purpose	Data Used	Legal Basis
Account registration and management	Name, email, mobile, date of birth, address	Contractual necessity
Age and identity verification	NID, passport, date of birth	Legal obligation
Processing deposits and withdrawals	Payment method, transaction reference, amount	Contractual necessity
Fraud detection and prevention	IP address, device data, betting patterns	Legitimate interest
Anti-money-laundering compliance	Identity documents, transaction history	Legal obligation
Responsible gaming enforcement	Betting patterns, session data, account history	Legal obligation / legitimate interest
Customer support	Communication records, account details	Contractual necessity
Promotional communications	Email, mobile number, game preferences	Consent (opt-in)
Platform analytics and improvement	Anonymised usage data, session data	Legitimate interest

2.1 Promotional Communications

xc666 may send you promotional communications about bonuses, new game releases, seasonal offers (such as Eid promotions or BPL season specials), and platform updates. These communications are sent only where you have provided explicit consent at registration or at a later date. You may withdraw your consent to receive promotional communications at any time by updating your account preferences or contacting xc666 support via Live Chat. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.

2.2 Automated Decision-Making

xc666 uses automated systems to monitor betting activity and detect patterns consistent with fraud, bonus abuse, or problem gambling. Where such systems generate an automated decision that materially affects your account — such as an account restriction or suspension — you have the right to request a manual review of that decision by contacting xc666 support. xc666 will acknowledge such requests and provide a response within a reasonable timeframe.

3. Data Sharing & Third Parties

xc666 does not sell, rent, or otherwise commercially transfer your personal data to third parties for their own marketing purposes. However, xc666 does share certain data with carefully selected third-party service providers where it is necessary to operate the platform and fulfil our obligations to you. All third-party providers who process xc666 player data are required to maintain data-protection standards consistent with this Privacy Policy.

3.1 Categories of Third Parties

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and international card processors (Visa, Mastercard). These providers receive the minimum data necessary to process your transaction.
• Game content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other licensed studios. These providers may receive an anonymised session token to deliver game content; they do not receive your name, NID, or full financial records.
• Identity verification providers: Third-party KYC (Know Your Customer) service providers used to cross-reference identity documents submitted during the verification process.
• Analytics providers: Anonymised, aggregated usage data may be shared with analytics platforms to help xc666 understand overall platform performance. No personally identifiable information is included in these data sets.
• Legal and regulatory authorities: Where required by applicable law, court order, or regulatory request, xc666 may disclose personal data to competent authorities. xc666 will only disclose the minimum data necessary to satisfy the legal requirement.

4. Cookies & Tracking Technologies

xc666 uses cookies and similar tracking technologies on the xc666.club website to ensure the platform functions correctly, to maintain your session after login, and to gather anonymised analytics that help us improve the player experience. This section explains the types of cookies xc666 uses and how you can manage them.

4.1 Types of Cookies Used

• Strictly Necessary Cookies: These cookies are essential for the xc666 platform to operate. They maintain your login session, remember your preferred language settings, and enable core security features such as CSRF protection. Without these cookies, the platform cannot function correctly. They cannot be disabled without breaking the service.
• Functional Cookies: These cookies remember your preferences — such as your preferred display settings or notification configurations — so that you do not need to reconfigure them each time you visit xc666.club.
• Analytics Cookies: xc666 uses anonymised analytics cookies to understand how players navigate the platform, which pages attract the most engagement, and where technical errors occur. This data is used in aggregate form only and cannot be traced back to any individual player.
• Security Cookies: These cookies help xc666 detect and prevent fraudulent activity, including detecting unusual login patterns and monitoring for automated bot activity.

4.2 Managing Cookies

You can control and manage cookies through your browser settings. Most modern browsers allow you to block or delete cookies entirely, or to configure them on a site-by-site basis. Please be aware that blocking strictly necessary cookies will impair or prevent your ability to use the xc666 platform, including logging in to your account. Blocking analytics or functional cookies will not affect your core ability to use xc666 but may result in a less personalised experience.

For guidance on managing cookies in specific browsers, refer to your browser's official help documentation. xc666 does not use cookies from third-party advertising networks.

5. Data Security Measures

xc666 takes the security of your personal data seriously and implements a layered set of technical and organisational measures to protect it against unauthorised access, loss, destruction, or alteration. Key security measures in place at xc666 include:

• SSL/TLS Encryption: All data transmitted between your device and xc666.club is encrypted using TLS (Transport Layer Security). Look for the padlock icon in your browser's address bar when visiting xc666.club.
• Password Hashing: Account passwords are never stored in plain text. xc666 uses a strong cryptographic hashing algorithm to store password credentials, meaning that even internal xc666 staff cannot retrieve your password.
• Access Controls: Access to xc666 player data within our organisation is granted on a strict need-to-know basis. Staff members who handle player data are bound by confidentiality obligations.
• Two-Factor Authentication (2FA): xc666 offers optional two-factor authentication for all player accounts, providing an additional layer of security beyond your username and password.
• Regular Security Reviews: xc666 conducts periodic internal reviews of its data-handling systems and access controls to identify and address potential vulnerabilities.
• Incident Response: In the event of a data security incident that materially affects your personal data, xc666 will notify affected players via the registered email address on their account as promptly as practicable.

6. Data Retention & Deletion

xc666 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with applicable legal obligations, and to resolve any disputes or enforce our agreements. The following general retention periods apply:

• Active account data: Retained for the duration of your account's active status plus a period of five years following account closure, to satisfy anti-money-laundering and regulatory record-keeping requirements.
• Identity verification documents: Retained for a minimum of five years from the date of verification or account closure, whichever is later, in accordance with applicable compliance obligations.
• Transaction records: Retained for a minimum of five years from the date of the transaction.
• Customer support communications: Retained for two years from the date of the most recent interaction, unless the communication relates to an ongoing dispute, in which case it is retained until the dispute is resolved.
• Analytics data: Anonymised usage analytics are retained indefinitely in aggregate form. Any personally identifiable component of usage data is anonymised or deleted within 12 months of collection.

6.1 Requesting Data Deletion

You may request the deletion of your personal data by contacting xc666 support via Live Chat or by emailing [email protected]. xc666 will process deletion requests subject to the following conditions:

• Data that xc666 is legally required to retain (e.g., transaction records for AML compliance) cannot be deleted before the applicable retention period expires, even upon request.
• A deletion request will result in the permanent closure of your xc666 account. This action is irreversible.
• Any pending withdrawals will be processed before the account closure is finalised.
• xc666 will confirm the completion of a deletion request within 30 days of receipt.

7. Your Privacy Rights

As an xc666 player, you hold specific rights in relation to the personal data that xc666 holds about you. These rights are designed to give you meaningful control over your own information. Your rights include:

• Right of Access: You have the right to request a copy of the personal data that xc666 holds about you. xc666 will provide this information in a clear, portable format within 30 days of a verified request.
• Right to Rectification: If any personal data that xc666 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update many details directly through your xc666 account profile page.
• Right to Erasure: Subject to the retention obligations described in Section 6, you may request that xc666 delete your personal data. See Section 6.1 for the applicable conditions.
• Right to Restrict Processing: In certain circumstances, you may request that xc666 restrict the processing of your personal data — for example, while a rectification request is being assessed.
• Right to Data Portability: You may request that xc666 provide your personal data in a structured, machine-readable format so that it can be transferred to another service provider.
• Right to Object: Where xc666 processes your data on the basis of legitimate interest — such as for analytical purposes — you have the right to object to that processing. xc666 will cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., promotional communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of the rights listed above, contact xc666 support via Live Chat or email [email protected]. xc666 may need to verify your identity before processing a rights request to ensure that we do not disclose or delete data belonging to the wrong person.

8. Contact & Privacy Queries

If you have any questions, concerns, or complaints about the way xc666 handles your personal data, or if you wish to exercise any of the rights described in Section 7, please contact the xc666 support team using the details below. All privacy-related enquiries are handled with priority by xc666's dedicated support staff.

• Live Chat: Available 24 hours a day, 7 days a week, via the xc666.club platform
• Email: [email protected]
• Response Time: xc666 aims to acknowledge all privacy enquiries within 48 hours and to provide a full response within 30 days
• Support Hours: Bangladesh Standard Time (UTC+6), though Live Chat operates continuously

xc666 takes all privacy complaints seriously. Where a complaint cannot be resolved to your satisfaction through our internal process, you may have the right to escalate the matter to a relevant supervisory authority. xc666 will cooperate fully with any such process.