c671l Privacy Policy — How We Protect Your Personal Data

This Privacy Policy ("Policy") describes how c671l ("c671l", "we", "us", "our"), the operator of the online betting and casino platform at https://c671l.io (the "Platform"), collects, uses, stores, and protects the personal data of individuals ("you", "your", "the Player") who access or use our services, primarily players based in Bangladesh.

We are committed to handling your personal data responsibly and in accordance with applicable data protection principles. This Policy applies to all personal data collected through the Platform, including during account registration, deposit and withdrawal transactions, identity verification, gameplay, customer support interactions, and any promotional or marketing communications you have opted into.

By accessing the Platform or creating a c671l account, you acknowledge that you have read this Privacy Policy and consent to the data practices described herein. If you do not agree with any part of this Policy, you must not use the Platform.

For the purposes of this Privacy Policy, c671l is the data controller — meaning we determine the purposes and means by which your personal data is processed. Our primary point of contact for data-related matters is our support team, reachable at the email address displayed in the footer of this page.

Where c671l engages third-party service providers to process personal data on our behalf (for example, payment processors or KYC verification services), those parties act as data processors and are bound by contractual obligations to process your data only in accordance with our documented instructions and in a manner consistent with this Privacy Policy.

Depending on how you interact with the c671l Platform, we may collect and process the following categories of personal data:

3.1 Identity & Contact Information

• Full legal name as it appears on your government-issued identity document.
• Date of birth (for age verification — players must be 21 years or older).
• Mobile phone number registered in Bangladesh (used for account communications and payment method verification, e.g., bKash, Nagad, Rocket).
• Email address.
• Residential address, including city (Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, or other locations across Bangladesh) and postal code.

3.2 Identity Verification (KYC) Documents

• Copy of National Identity Card (NID) issued by the Election Commission of Bangladesh, or a valid passport.
• Proof of address documents such as utility bills or bank statements dated within the past three months.
• Proof of payment method ownership, such as a screenshot of your bKash or Nagad account showing your registered mobile number.

3.3 Financial & Transaction Data

• Deposit and withdrawal history, including amounts in Bangladeshi Taka (BDT), timestamps, and payment method identifiers.
• Partial payment account details (e.g., last four digits of a card, or the mobile number associated with your bKash/Nagad wallet) — we do not store full card numbers or mobile financial service PINs.
• Bonus and promotional activity records.

3.4 Gaming Activity Data

• Betting history, including bet amounts, selections, outcomes, and timestamps across all products (cricket betting, live casino, slots, color prediction, etc.).
• Session duration and frequency of use data, used for responsible gaming monitoring.
• Game preferences and interaction patterns, used to improve Platform recommendations.

3.5 Technical & Device Data

• IP address at the time of login and transaction.
• Device type, operating system, browser type and version.
• Mobile network operator (where applicable).
• Cookies and similar tracking data as described in Section 10 of this Policy.

3.6 Customer Support Data

• Records of live chat, email, and any other communications you have with the c671l support team, including the content of those communications and any attachments provided.
• Complaint and dispute records.

c671l collects personal data through the following channels:

• Directly from you: When you register an account, complete the KYC process, make a deposit or withdrawal, contact our support team, or interact with promotional features on the Platform.
• Automatically: When you browse or use the Platform, our servers automatically log certain technical data such as your IP address, device information, and session activity. Cookies and similar tracking technologies also collect data automatically — see Section 10 for details.
• From third-party service providers: We may receive data about you from our payment processing partners (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, Mastercard) when you initiate a transaction, or from identity verification services used to confirm the validity of your KYC documents.
• From publicly available sources: In limited circumstances related to fraud prevention or anti-money laundering compliance, we may cross-reference information from publicly available databases or sources.

c671l uses your personal data for the following purposes:

Purpose	Examples
Account management	Creating and maintaining your c671l account, verifying your identity, processing login requests.
Payment processing	Facilitating deposits and withdrawals in BDT via bKash, Nagad, Rocket, and other supported methods.
KYC & compliance	Verifying age (21+), identity, and payment method ownership; complying with anti-money laundering obligations.
Platform operation	Delivering games and betting services, settling bets, crediting bonuses, and resolving disputes.
Customer support	Responding to queries, complaints, and requests from players across Bangladesh.
Responsible gaming	Monitoring session behaviour to identify potential signs of problem gambling; applying and enforcing player-requested limits and self-exclusions.
Security & fraud prevention	Detecting and preventing multi-accounting, bonus abuse, bot activity, and other fraudulent or prohibited conduct.
Platform improvement	Analysing aggregated and anonymised usage data to improve the Platform's features, performance, and user experience.
Marketing (with consent)	Sending promotional offers, bonus announcements, and Platform updates to players who have opted in to receive marketing communications.

c671l processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to provide the services you have requested — for example, operating your account, processing payments, and settling bets. Without this processing, c671l cannot deliver its core services to you.
• Legal obligation: Processing necessary to comply with applicable laws and regulations, including anti-money laundering requirements, age verification obligations, and any demands from competent authorities.
• Legitimate interests: Processing undertaken to pursue c671l's legitimate business interests where those interests are not overridden by your rights — for example, fraud detection, platform security, and internal analytics. We conduct balancing tests to ensure this basis is applied proportionately.
• Consent: Where required — for example, for the sending of direct marketing communications — we rely on your freely given, specific, and informed consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

c671l does not sell your personal data. We share your data only in the following limited circumstances:

7.1 Payment Processors

When you make a deposit or withdrawal, c671l shares the minimum necessary data with the relevant payment service provider (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, Mastercard) to facilitate the transaction. These providers operate under their own privacy policies and are independently responsible for your data once it is in their systems.

7.2 Identity Verification Services

To fulfil our KYC obligations, c671l may share your identity documents and personal details with third-party verification service providers. These providers are contractually bound to use your data only for the verification purpose and to maintain appropriate security standards.

7.3 Game Providers

The games available on c671l are provided by third-party game studios including Pragmatic Play, NetEnt, Microgaming, Evolution Gaming, Ezugi, and Spribe, among others. These providers may receive limited technical data (such as a pseudonymous player identifier and session token) necessary to deliver their games. They do not receive your full identity or payment details.

7.4 Legal & Regulatory Authorities

c671l may disclose your personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, court order, or regulatory direction. We will notify you of such disclosures where legally permitted to do so.

7.5 Business Transfers

In the event of a merger, acquisition, or sale of all or a substantial portion of c671l's assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and of any material change to how your data is processed as a result.

c671l retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our general retention guidelines are as follows:

• Active account data: Retained for the duration of your account's active status plus a minimum period after closure to satisfy legal and compliance obligations.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, in line with standard financial record-keeping requirements applicable to our operations.
• KYC documents: Retained for a minimum of five (5) years from the date of submission or account closure, whichever is later.
• Customer support records: Retained for three (3) years from the date of the last interaction.
• Marketing consent records: Retained for the duration of your consent, plus a reasonable period thereafter to demonstrate compliance.

Once the applicable retention period has expired, c671l will securely delete or irreversibly anonymise your personal data. Anonymised data (which can no longer be used to identify you) may be retained indefinitely for statistical and analytical purposes.

c671l takes the security of your personal data seriously. We implement a range of technical and organisational measures to protect your data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the c671l Platform.
• Encrypted storage for sensitive data fields including passwords (stored as salted hashes — never in plain text) and identity document copies.
• Access controls ensuring that internal access to personal data is restricted to authorised personnel who require it to perform their role.
• Regular security assessments and vulnerability testing of the Platform's infrastructure.
• Fraud detection systems that monitor for anomalous login attempts, suspicious transaction patterns, and other indicators of unauthorised access.

Whilst c671l takes all reasonable precautions, no online system can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, c671l will notify affected players without undue delay.

c671l uses cookies and similar technologies (such as local storage and session tokens) to operate the Platform effectively. A cookie is a small text file placed on your device when you visit the Platform. Cookies serve several functions:

• Strictly necessary cookies: Essential for the Platform to function. These include session cookies that keep you logged in during your visit, security tokens, and cookies that remember your language or region settings. These cannot be disabled without affecting core Platform functionality.
• Functional cookies: Used to remember your preferences (such as your preferred game category or responsible gaming settings) so that you do not need to reconfigure them on each visit.
• Analytics cookies: Used to collect aggregated, anonymised information about how players use the Platform — for example, which pages are visited most frequently and where users encounter errors. This data helps us improve the Platform. We do not use analytics data to identify individual users.
• Security cookies: Used to detect and prevent fraudulent activity, including detection of bot behaviour and multi-account access from the same device.

c671l does not use third-party advertising or behavioural tracking cookies for the purpose of serving targeted advertisements from external advertising networks.

You may configure your browser to refuse or delete cookies. Please note that disabling strictly necessary cookies may impair the functionality of your c671l account. For guidance on managing cookies in your specific browser, refer to your browser's help documentation.

As a player using the c671l Platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team using the email address displayed in the footer of this page.

• Right of access: You may request a copy of the personal data c671l holds about you. We will provide this information within a reasonable timeframe and at no charge for a first request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. For account-registered details, you may also update certain information directly through your account settings.
• Right to erasure: In certain circumstances, you may request that we delete your personal data. This right is subject to limitations where retention is required by law (for example, for financial record-keeping or anti-money laundering compliance).
• Right to restriction of processing: You may ask us to restrict how we use your personal data in certain situations — for example, while a dispute about the accuracy of your data is being resolved.
• Right to data portability: Where technically feasible and legally applicable, you may request that we provide your personal data in a structured, machine-readable format so that you can transfer it to another service provider.
• Right to object: You may object to the processing of your data where we rely on legitimate interests as the legal basis, or where your data is being used for direct marketing purposes. Objections to direct marketing will be honoured immediately and unconditionally.
• Right to withdraw consent: Where our processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal.

c671l aims to respond to all data rights requests within 30 days of receipt. Where a request is complex or voluminous, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reasons for it.

The c671l Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been submitted by a person under 21, we will immediately close the associated account, forfeit any balance held, and delete the data in question.

If you are a parent or guardian and believe that a person under 21 in your care has created a c671l account, please contact our support team immediately so that we can take appropriate action. Please provide as much detail as possible about the account in question to allow us to investigate and resolve the matter promptly.

c671l reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made, we will update the "Last Updated" date at the top of this page and notify registered players via email or via an in-platform notification prior to the changes taking effect.

Your continued use of the c671l Platform following the publication of a revised Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with the revised Policy, you must stop using the Platform and contact our support team to request account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way c671l processes your personal data, please contact our support team. We are available 24 hours a day, 7 days a week via in-platform live chat, and our support email is displayed as plain text in the footer of this page.

We take all privacy enquiries seriously and aim to acknowledge your message within 24 hours. For formal data rights requests, we recommend using the subject line "Data Rights Request" so that your message is routed directly to the appropriate team member.

c671l is committed to resolving all privacy-related concerns fairly and transparently. If you are not satisfied with our response to your enquiry, you have the right to escalate the matter to the relevant supervisory authority in your jurisdiction.