cx664 Privacy Policy

Information We Collect

cx664 collects personal data through several channels: information you provide directly during registration and account management, information generated automatically through your use of the Platform, and information received from trusted third-party service providers such as payment processors and identity verification partners.

Information You Provide Directly

• Registration data: Full legal name, date of birth, residential address (including district, division, and postcode within Bangladesh), email address, and phone number.
• Identity verification documents: Copies of your National Identity Card (NID), passport, driving licence, or other government-issued identification submitted during KYC verification.
• Payment information: Your bKash, Nagad, Rocket, or Upay mobile wallet numbers; bank account details for supported Bangladeshi banks; Visa or Mastercard details as applicable. Note that cx664 does not store full card numbers — card data is tokenised by our payment processor.
• Communications: The content of any messages, emails, or live chat conversations you have with cx664 support, including support tickets and complaint correspondence.
• Responsible gaming data: Any deposit limits, session time limits, cooling-off periods, or self-exclusion requests you submit through your account settings.

Information Collected Automatically

• Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage and behavioural data: Pages visited, games played, bets placed, session duration, click-stream data, search queries within the Platform, and feature interactions.
• Transaction data: Complete record of all deposits, withdrawals, bonus claims, wagering activity, and balance history associated with your account.
• Geolocation data: Approximate location derived from your IP address, used to confirm you are accessing from Bangladesh and to detect unusual login patterns.
• Log data: Server logs recording the date and time of each access, the resources requested, and the HTTP status code returned.

Information from Third Parties

• Payment providers: Transaction confirmation, payment status, and fraud-screening signals from bKash, Nagad, Rocket, Upay, and card-processing networks.
• Identity verification services: Results of automated document and biometric checks performed by cx664's KYC partners.
• Fraud prevention services: Device fingerprint data and risk scores from third-party fraud prevention platforms used to protect the integrity of the cx664 Platform.

How We Use Your Data

cx664 processes your personal data only where we have a lawful basis to do so. The primary bases we rely on are: performance of our contract with you (i.e., providing the Platform services you have signed up for), compliance with legal obligations, our legitimate business interests, and in limited cases, your explicit consent.

cx664 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or unless required to do so by applicable law.

Data Sharing and Disclosure

cx664 does not sell, rent, or trade your personal data. We share personal data only in the following limited and controlled circumstances:

Service Providers and Data Processors

cx664 works with carefully selected third-party service providers who process personal data on our behalf. These providers are contractually bound to process your data only for the specific purpose for which it was shared, and to maintain appropriate security standards. Categories of service providers include:

• Payment processors: bKash, Nagad, Rocket, Upay, and card-processing networks for the purpose of executing and verifying financial transactions.
• KYC and identity verification partners: Specialist providers who verify identity documents and perform age-verification checks as required for cx664 compliance.
• Fraud prevention and security vendors: Third-party platforms that analyse device and behavioural data to detect fraudulent activity and protect player accounts.
• Cloud infrastructure and hosting providers: Secure data centre operators responsible for hosting the cx664 Platform and its databases.
• Customer support platforms: Helpdesk and live chat tools used by our support team to manage and respond to player queries.
• Analytics providers: Privacy-compliant analytics tools used to understand Platform usage patterns and improve the player experience.

Legal and Regulatory Disclosures

cx664 may disclose personal data to government bodies, law enforcement agencies, financial intelligence units, or regulatory authorities when required to do so by applicable law, court order, or in response to a formal legal process. cx664 will, where legally permitted, notify affected players of such disclosures.

Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of cx664's business operations, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and of any resulting changes to this Privacy Policy.

Cookies and Tracking Technologies

cx664 uses cookies, web beacons, pixel tags, and similar tracking technologies to operate the Platform effectively, remember your preferences, analyse usage, and deliver relevant content. The following categories of cookies are used on the cx664 Platform:

Managing Cookies

You can control and delete cookies through your browser settings. Most modern browsers — including Chrome, Firefox, Edge, and Samsung Internet (widely used on Android devices popular in Bangladesh) — allow you to view, manage, and delete stored cookies. Please be aware that disabling certain cookies may affect the functionality of the cx664 Platform, including your ability to maintain a logged-in session.

For detailed guidance on managing cookies in your browser, please refer to your browser's official help documentation. cx664 does not currently respond to browser "Do Not Track" signals, as there is no consistent industry standard for interpreting such signals.

Data Retention

cx664 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

When personal data is no longer required, cx664 will securely delete or anonymise it so that it can no longer be associated with any individual. Anonymised and aggregated data (from which no individual can be identified) may be retained indefinitely for statistical and analytical purposes.

Data Security Measures

cx664 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Transport Layer Security (TLS/SSL): All data in transit between your device and cx664's servers is encrypted using current industry-standard TLS protocols.
• Data encryption at rest: Sensitive data stored in cx664's databases, including identity documents and payment information, is encrypted using AES-256 or equivalent industry-standard algorithms.
• Access controls: Access to personal data is restricted on a strict need-to-know basis. cx664 staff members are granted access only to the data necessary to perform their specific role. All access is logged and subject to periodic audit.
• Two-factor authentication (2FA): cx664 supports and strongly encourages the use of two-factor authentication on player accounts to protect against unauthorised login attempts.
• Penetration testing and vulnerability assessments: cx664's Platform and infrastructure undergo regular independent security testing to identify and remediate potential vulnerabilities before they can be exploited.
• Incident response plan: cx664 maintains a documented data breach response procedure. In the event of a breach that poses a risk to your rights and freedoms, cx664 will notify affected players without undue delay as required by applicable law.

Your Privacy Rights

cx664 respects your rights with respect to your personal data. Depending on your circumstances and applicable law, you may have the following rights:

• Right of access: You have the right to request a copy of the personal data cx664 holds about you, together with information about how it is being processed. cx664 will provide this information within a reasonable timeframe upon receipt of a verified request.
• Right to rectification: If any personal data cx664 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update basic account details directly through your account settings at any time.
• Right to erasure: In certain circumstances, you have the right to request that cx664 delete your personal data. This right is subject to exceptions, including where retention is required by law (for example, financial records required under anti-money laundering regulations).
• Right to restrict processing: You may request that cx664 restrict the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
• Right to data portability: Where cx664 processes your personal data on the basis of consent or contractual necessity, you may request that cx664 provide your data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing of your personal data where cx664 relies on legitimate interests as the legal basis. You also have an unconditional right to object to the use of your data for direct marketing purposes.
• Right to withdraw consent: Where cx664 processes your data on the basis of your consent (for example, for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

To exercise any of the rights listed above, please contact the cx664 Privacy team at [email protected] with the subject line "Privacy Rights Request". cx664 will verify your identity before processing any data rights request. We aim to respond to all requests within 30 days. Complex or high-volume requests may take up to 60 days, in which case cx664 will notify you of the extension.

Contact and Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or cx664's handling of your personal data, please contact us using the details below. Our support team is available 24 hours a day, seven days a week, on Bangladesh Standard Time (BST, UTC+6).

Privacy and Data Enquiries:
[email protected]
Subject line: Privacy Enquiry

Data Rights Requests:
[email protected]
Subject line: Privacy Rights Request

Complaints

If you are not satisfied with cx664's response to a privacy concern or data rights request, you have the right to escalate your complaint to the relevant data protection authority or regulatory body in your jurisdiction. cx664 is committed to working constructively to resolve all data-related complaints and will cooperate fully with any regulatory investigation.

Changes to This Privacy Policy

cx664 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made, cx664 will notify registered players via the email address associated with their account. The updated Privacy Policy will be posted on this page with a revised "Last Updated" date. Continued use of the cx664 Platform following notification of changes constitutes your acceptance of the revised Privacy Policy.

We encourage you to review this Privacy Policy periodically. If you do not agree to any changes, you should discontinue use of the cx664 Platform and contact support to arrange account closure and data handling in accordance with your rights.