ctg66 Privacy Policy

1 About This Policy

This Privacy Policy applies to all personal data collected by ctg66 through your use of the ctg66 website and platform accessible at ctg66.io, including all associated gaming, betting, account management, payment, and customer support services. It applies to all registered players, prospective players who browse the platform, and any individual who contacts ctg66's support team.

ctg66 acts as the data controller in respect of the personal data collected through the platform. This means ctg66 determines the purposes and means by which your personal data is processed. Where ctg66 engages third-party service providers to process personal data on its behalf, those providers act as data processors and are bound by written data processing agreements that restrict their use of your data to the specific purposes ctg66 instructs.

This policy should be read alongside the ctg66 Terms & Conditions, which together govern the relationship between ctg66 and its players. In the event of a conflict between this Privacy Policy and the Terms & Conditions on a privacy-related matter, this Privacy Policy shall prevail.

2 Personal Data We Collect

ctg66 collects personal data through several channels: directly from you when you register or use the platform, automatically through your interaction with the platform, and occasionally from third-party service providers engaged to verify your identity or process payments. The categories of personal data we collect are set out below.

2.1 Registration Data

When you create a ctg66 account, we collect the following information:

• Full legal name (as it appears on your government-issued identity document)
• Date of birth (to verify that you meet the 21+ age requirement)
• Residential address (including district, city, and postal code)
• Email address
• Mobile phone number
• Username and encrypted password
• Preferred currency (BDT)

2.2 Identity Verification (KYC) Data

To comply with our know-your-customer (KYC) obligations and prevent fraud and money laundering, we collect:

• Copy of your Bangladeshi National Identity Card (NID) — front and back
• Copy of your valid passport or driving licence (where NID is unavailable)
• Proof of address documents such as utility bills or bank statements (where required)
• Selfie photographs or live identity verification images (where required by our KYC process)
• Screenshots or confirmation of ownership of your bKash, Nagad, or Rocket mobile wallet account

2.3 Transaction Data

When you make deposits or withdrawal requests, we collect:

• Transaction amounts in BDT
• Payment method used (e.g., bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank)
• Mobile wallet number or bank account reference (stored in masked/tokenised form)
• Transaction timestamps and reference numbers
• Transaction status and history

2.4 Gaming and Betting Activity Data

In the course of your use of the ctg66 platform, we automatically record:

• Games played, bets placed, and wager amounts
• Game session duration and timestamps
• Bet outcomes and winnings/losses
• Sports betting market selections (cricket, football, kabaddi, etc.)
• Bonus and promotion usage history

2.5 Technical and Device Data

We automatically collect certain technical data when you access the ctg66 platform:

• IP address and approximate geographic location (country/city level)
• Device type, operating system, and browser type and version
• Session login and logout timestamps
• Pages visited and features used within the platform
• Referral source (i.e., how you arrived at ctg66.io)

2.6 Communications Data

When you contact ctg66's customer support team, we retain records of:

• Live chat transcripts
• Email correspondence
• The nature and outcome of your support request or complaint

3 How We Use Your Personal Data

ctg66 uses the personal data it collects for the following specific purposes. We do not use your data for any purpose that is incompatible with the purposes listed below.

4 Legal Basis for Processing

ctg66 processes your personal data only where a valid legal basis exists. The principal legal bases on which ctg66 relies are as follows:

• Contractual necessity: Processing that is required to fulfil our obligations to you under the ctg66 Terms & Conditions — including account registration, payment processing, KYC verification, game provision, and customer support.
• Compliance with legal obligations: Processing required to comply with applicable anti-money laundering regulations, age verification obligations, and fraud prevention requirements.
• Legitimate interests: Processing carried out for ctg66's legitimate business interests, including platform security, fraud detection, responsible gaming monitoring, and aggregated analytics — provided those interests are not overridden by your privacy rights.
• Consent: Processing carried out with your explicit consent, specifically for marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5 Data Sharing and Disclosure

5.1 Third-Party Service Providers

ctg66 shares personal data with carefully selected third-party service providers who assist in operating the platform. These providers act solely as data processors under ctg66's instruction and are bound by written data processing agreements. Categories of third-party processors include:

• KYC and identity verification providers: To verify the identity and age of players before processing withdrawal requests.
• Payment processors: Including the technical intermediaries that facilitate transactions via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank. These providers receive only the minimum data necessary to process the specific transaction.
• Game software providers: Including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe. Game providers receive anonymised or pseudonymised session data necessary to deliver game functionality. They do not receive your full identity documents or payment details.
• Platform hosting and infrastructure providers: Who provide the servers and cloud infrastructure on which ctg66 operates. These providers implement industry-standard physical and logical security controls.
• Customer support software providers: Who provide the live chat and ticketing systems through which ctg66's support team operates.

5.2 Legal Disclosure

ctg66 may disclose your personal data to law enforcement agencies, regulatory bodies, or other authorised government authorities where ctg66 is legally required to do so, or where disclosure is necessary to prevent fraud, money laundering, or other criminal activity. ctg66 will, wherever legally permitted, notify you of such a disclosure request before complying.

5.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of ctg66's business or assets, your personal data may be transferred to the successor entity. ctg66 will notify you via email or prominent in-platform notice before your data is transferred and becomes subject to a different privacy policy.

6 Data Retention

ctg66 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The table below outlines ctg66's standard data retention periods by category:

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised so that it can no longer be linked to any individual. Where anonymisation is not technically feasible, data is pseudonymised and access is restricted to authorised compliance personnel only.

7 Cookies and Tracking Technologies

7.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device across multiple visits and store certain information about your preferences and session state. ctg66 uses cookies and similar tracking technologies (such as local storage objects) to operate the platform effectively.

7.2 Types of Cookies Used by ctg66

• Strictly necessary cookies: These cookies are essential for the ctg66 platform to function. They manage your login session, maintain your account state across pages, and remember your language and currency preferences. These cookies cannot be disabled without breaking core platform functionality.
• Analytics cookies: ctg66 uses analytics tools to understand how players interact with the platform — including which pages are most visited, how long sessions last, and where players encounter errors. This data is collected in aggregated, anonymised form and is used solely to improve the platform experience. Analytics cookies are only placed where you have provided consent.
• Functional cookies: These cookies remember optional preferences you have set — such as responsible gaming display settings or notification preferences — to provide a more personalised experience.

7.3 Cookie Management

You can control and manage cookies through your browser settings. Most browsers allow you to view, block, or delete cookies at any time. Please note that blocking strictly necessary cookies will prevent you from logging into your ctg66 account and using core platform features. For guidance on managing cookies in your specific browser, please refer to your browser's help documentation.

ctg66 does not use advertising cookies, third-party tracking pixels, or any technology that shares your browsing behaviour with advertising networks or social media platforms.

8 Your Privacy Rights

As a player of ctg66, you have the following rights with respect to your personal data. ctg66 is committed to honouring these rights promptly and without undue delay.

• Right of access: You have the right to request a copy of all personal data that ctg66 holds about you. ctg66 will provide this within 30 days of receiving a verified request.
• Right to rectification: If any of the personal data ctg66 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic account information directly through your account settings; for KYC-related corrections, please contact the support team.
• Right to erasure ("right to be forgotten"): You may request that ctg66 delete your personal data. ctg66 will honour this request where the data is no longer necessary for the purpose for which it was collected and where no overriding legal obligation requires its retention. Note that certain data — particularly KYC documents and transaction records — must be retained for legally specified periods and cannot be deleted on request during those periods.
• Right to restriction of processing: You may request that ctg66 restrict the processing of your data while a rectification request is being assessed, or where you have objected to processing and ctg66 is considering that objection.
• Right to data portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format and to request that it be transmitted to another service provider where technically feasible.
• Right to object: You have the right to object to ctg66's processing of your personal data where that processing is based on legitimate interests. ctg66 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to withdraw consent: Where ctg66 processes your data based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of the rights listed above, please contact ctg66 via the live chat function within your account or by email at [email protected]. ctg66 may need to verify your identity before processing a data rights request to ensure that personal data is not disclosed to unauthorised individuals.

9 Children's Privacy

ctg66 is an adult-only platform. The minimum age to register and use ctg66 is 21 years. ctg66 does not knowingly collect personal data from any individual under the age of 21. If ctg66 becomes aware that personal data has been collected from a minor, that account will be immediately suspended and all associated data will be deleted as swiftly as legally permissible.

If you are a parent or guardian and you believe that a minor in your care has registered an account on ctg66, please contact the support team immediately via live chat or at [email protected]. ctg66 will investigate and take appropriate action without delay.

10 Data Security

ctg66 takes the security of your personal data seriously and maintains a comprehensive set of technical and organisational measures designed to protect your data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption: All data transmitted between your device and ctg66 is encrypted using 256-bit SSL/TLS protocols. Look for the padlock icon in your browser address bar when visiting ctg66.io.
• Encryption at rest: Sensitive data stored on ctg66 servers — including identity documents and payment references — is encrypted at rest using industry-standard encryption algorithms.
• Access controls: Access to personal data within ctg66's systems is restricted on a strict need-to-know basis. Only authorised personnel whose job functions require access to specific data categories are granted access, and all access is logged and audited.
• Password security: Player passwords are stored as salted cryptographic hashes. ctg66 does not store plaintext passwords and cannot recover your password — only a password reset is possible.
• Penetration testing and security reviews: ctg66 conducts regular security assessments and works with external security specialists to identify and remediate vulnerabilities.
• Incident response: In the event of a data security incident that poses a risk to your rights and freedoms, ctg66 will notify affected players without undue delay and take all necessary steps to contain, investigate, and remediate the incident.

While ctg66 employs strong security practices, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials and for using a strong, unique password for your ctg66 account. ctg66 will never ask you for your password via any channel.

11 Third-Party Links

The ctg66 platform does not contain links to third-party websites for general browsing purposes. However, certain game provider interfaces embedded within the platform may technically be served from the infrastructure of game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe. These providers operate their own privacy policies, and ctg66 encourages you to review their policies where relevant.

ctg66 is not responsible for the privacy practices or content of any third-party systems or providers whose technology is integrated into the platform for the purpose of delivering games and services. ctg66 selects its technology partners carefully and requires all partners to maintain data security standards consistent with those described in this policy.

12 Changes to This Privacy Policy

ctg66 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, ctg66 will update the "Last Updated" date at the top of this page. Where changes are significant — such as a new category of data being collected, a new purpose for processing, or a new category of third-party recipient — ctg66 will provide more prominent notice, which may include an in-platform notification or an email to your registered address.

Your continued use of the ctg66 platform following the publication of any updated Privacy Policy constitutes your acceptance of the changes. If you do not agree with a revised Privacy Policy, you should discontinue using the platform and may request account closure in accordance with the ctg66 Terms & Conditions. We recommend reviewing this page periodically to stay informed of how ctg66 protects your data.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or ctg66's handling of your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 within your logged-in ctg66 account — the fastest way to reach the support and compliance team for data-related enquiries.
• Email: [email protected] — for formal data rights requests, privacy complaints, or detailed written enquiries. Please allow up to 72 hours for a response, and up to 30 days for the fulfilment of formal data rights requests.

When submitting a data rights request by email, please include your full registered name, your registered email address or mobile number, and a clear description of your request. ctg66 may need to verify your identity before processing the request to protect the security of your personal data.