Privacy Policy — cx664

Data Controller

cx664 (referred to throughout this document as "cx664", "we", "us", or "our") operates the online gaming and sports betting platform accessible at cx664.org. For the purposes of applicable data protection law, cx664 is the data controller responsible for the personal information collected through cx664.org and all associated platform services.

By registering an account on cx664.org, making a deposit, placing a bet, participating in a promotion, or otherwise using any cx664 service, you acknowledge that you have read this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to the terms of this Privacy Policy, you must not use cx664.org or any associated cx664 service.

This Privacy Policy applies to all current and former cx664 account holders, visitors to cx664.org who have not yet registered, and any individual who contacts cx664 via email, live chat, or WhatsApp. It covers all personal data collected through these interactions regardless of the device or network used to access the Platform.

Information We Collect

cx664 collects personal data that you provide directly when using the Platform, as well as data that is generated automatically by your use of cx664.org. The categories of personal data we collect are described below.

Data You Provide Directly:

• Registration Data: Full name, date of birth, mobile number, email address, username, and password when you create a cx664 account.
• KYC Verification Data: National ID Card (NID) number, passport number, proof of address, and in some cases a photograph or selfie with ID document, as required to complete identity verification prior to withdrawal processing.
• Payment Data: bKash mobile number, Nagad mobile number, Rocket account details, Upay account details, bank account details, or card details (Visa/Mastercard) provided when making deposits or requesting withdrawals. Full card numbers are not stored by cx664 — payment card data is handled by PCI-compliant payment processors.
• Communications Data: The content of messages you send to cx664 via live chat, email, or WhatsApp, including any attachments, images, or documents you choose to share with our support team.
• Responsible Gaming Data: Information you provide when requesting deposit limits, cooling-off periods, or self-exclusion, including the reason for your request where voluntarily disclosed.

Data Generated Automatically:

• Device & Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers collected when you access cx664.org.
• Usage Data: Pages visited, features accessed, games played , time spent on each page, search queries entered, bet and game history, session start and end times, and navigation paths through cx664.org.
• Transaction Data: Deposit amounts, withdrawal amounts, bonus activations, wagering activity, game round results, and account balance history generated through your use of the Platform.
• Location Data: General geographic location inferred from your IP address. cx664 does not collect precise GPS-level location data from your device.
• Cookie & Tracking Data: Data collected through cookies, pixel tags, and similar technologies as described in the Cookies & Tracking section of this Privacy Policy.

How We Use Your Data

cx664 processes your personal data only for clearly defined, lawful purposes. The table below sets out the primary purposes for which cx664 uses your personal data, together with the legal basis for each processing activity.

cx664 will never use your personal data for any purpose that is incompatible with the purposes described in this Privacy Policy without first seeking your explicit consent. We do not sell, rent, or trade your personal data to third-party marketers or data brokers under any circumstances.

Data Sharing & Third Parties

cx664 does not sell your personal data. We share personal data with third parties only where strictly necessary to deliver our services or where required by law. The categories of third parties with whom cx664 may share your data are described below.

• Payment Processors: bKash, Nagad, Rocket (Dutch-Bangla Bank), Upay, Visa, and Mastercard payment networks receive the minimum payment data necessary to process deposits and withdrawals on your behalf. These providers operate under their own privacy policies and are bound by applicable financial data protection obligations.
• Game Content Providers: Third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive your account session token and relevant gameplay data to deliver game content. These providers do not receive your full personal profile, payment details, or KYC documents.
• Identity Verification Services: cx664 uses third-party KYC verification partners to assist with the review of identity documents submitted during account verification. These partners are contractually bound to process your identity data solely for the purpose of verification and may not use it for any other purpose.
• Fraud Prevention & Security Providers: cx664 works with specialist fraud detection providers who analyse usage and device data to identify suspicious account activity. These providers act under data processing agreements and are not permitted to use your data independently.
• Analytics Providers: Anonymised and aggregated usage data may be shared with analytics platforms to help cx664 understand how the Platform is used and identify opportunities for improvement. No personally identifiable information is shared with analytics providers in a form that allows individual identification.
• Legal and Regulatory Authorities: cx664 will disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required to do so by a lawful order, subpoena, or applicable regulatory obligation. cx664 will notify affected account holders of such disclosures to the extent permitted by law.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of cx664's business assets, personal data held by cx664 may be transferred to the acquiring entity. Affected account holders will be notified of any such transfer and the privacy terms applicable to their data following the transfer.

All third-party service providers engaged by cx664 are required to enter into data processing agreements that bind them to process your personal data only as directed by cx664 and in accordance with applicable data protection standards. cx664 conducts periodic due diligence reviews of its third-party data processors to ensure continued compliance.

Cookies & Tracking

cx664.org uses cookies and similar tracking technologies to ensure the Platform functions correctly, to keep your session active while you are logged in, and to help cx664 understand how the Platform is being used. A cookie is a small text file placed on your device by your browser when you visit cx664.org. Cookies do not contain executable code and cannot access other files stored on your device.

The categories of cookies used on cx664.org are as follows:

You can manage or delete cookies at any time through your browser settings. Please note that disabling essential or security cookies will impair the functionality of cx664.org and may prevent you from logging in or completing transactions. Instructions for managing cookies are available in the help documentation of all major browsers including Chrome, Firefox, Safari, and Samsung Internet.

Data Retention

cx664 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply to the main categories of personal data held by cx664:

• Account & Registration Data: Retained for the duration of your active account plus a minimum of 5 years following account closure. This retention period reflects anti-money laundering (AML) record-keeping obligations.
• KYC & Identity Documents: Retained for a minimum of 5 years from the date of verification, or from the date of account closure if later. Original document images are deleted at the end of the applicable retention period; verification status records are retained for audit purposes.
• Transaction & Payment Records: Retained for a minimum of 5 years following each transaction date. This retention period is required to satisfy financial record-keeping and AML obligations.
• Customer Support Communications: Retained for 3 years from the date of the last communication in each support interaction thread. Interactions involving formal complaints or dispute resolution may be retained for a longer period where required.
• Usage & Analytics Data: Anonymised aggregated analytics data is retained indefinitely for platform improvement purposes. Individually identifiable usage logs are retained for 12 months and then deleted or anonymised.
• Marketing Consent Records: Retained for the duration of the marketing relationship plus 3 years, to provide evidence of consent in the event of a complaint or regulatory query.

At the end of each applicable retention period, personal data is securely deleted or anonymised in accordance with cx664's internal data destruction procedure. Anonymised data (data from which all personally identifying information has been irreversibly removed) is not subject to deletion obligations and may be retained indefinitely for statistical and platform improvement purposes.

Your Privacy Rights

As a cx664 account holder and data subject, you hold the following rights in relation to your personal data. cx664 is committed to honouring these rights promptly and without unnecessary bureaucracy. To exercise any of the rights below, please submit a written request to [email protected] with the subject line "Privacy Rights Request" and include your registered username and the nature of your request.

• Right of Access: You have the right to request a copy of the personal data cx664 holds about you, along with information about how that data is being used. cx664 will provide a data subject access response within 14 calendar days of receiving a valid request.
• Right to Rectification: If any personal data cx664 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Many registration details (such as your mobile number and email address) can be updated directly within your cx664 account settings.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been processed unlawfully. Please note that erasure requests cannot be fulfilled where cx664 has a legal obligation to retain the data (e.g., AML record-keeping requirements).
• Right to Restriction: You may request that cx664 restrict the processing of your personal data in certain circumstances — for example, while a data accuracy dispute is being resolved, or where you have objected to processing based on legitimate interest and cx664 is assessing the grounds for that objection.
• Right to Object: You have the right to object to the processing of your personal data where cx664 relies on legitimate interest as the legal basis. You also have an absolute right to object to the use of your personal data for direct marketing purposes at any time.
• Right to Data Portability: Where cx664 processes your personal data on the basis of consent or contract performance, and where the processing is carried out by automated means, you have the right to receive a copy of your data in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: Where cx664 relies on your consent to process your personal data (e.g., for marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.

cx664 will not charge a fee for processing standard privacy rights requests. We reserve the right to charge a reasonable administrative fee for requests that are manifestly unfounded, repetitive, or excessive in scope. All privacy rights requests are handled in strict confidence by the cx664 Data Privacy team.

Data Security

cx664 takes the security of your personal data seriously and implements a comprehensive range of technical and organisational measures to protect it against unauthorised access, loss, destruction, alteration, or disclosure. The key security measures in place at cx664 include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and cx664.org is encrypted using industry-standard 256-bit SSL/TLS encryption. The padlock icon displayed in your browser address bar when visiting cx664.org confirms that this encryption is active.
• Encrypted Data Storage: Sensitive personal data — including passwords, KYC documents, and payment details — is stored in encrypted form. Passwords are hashed using a strong, salted cryptographic algorithm and are never stored or transmitted in plain text.
• Access Controls: Access to personal data held by cx664 is restricted on a strict need-to-know basis. Staff members who handle personal data are subject to confidentiality obligations and receive regular data protection training.
• Fraud Detection Systems: cx664 operates real-time monitoring systems that detect and flag unusual account activity, including anomalous login patterns, suspicious transaction sequences, and device fingerprint mismatches.
• Penetration Testing: cx664's technical infrastructure undergoes periodic security assessments and penetration testing by qualified security professionals to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: cx664 maintains a documented data breach response plan. In the event of a personal data breach that is likely to result in risk to affected individuals, cx664 will notify affected account holders without undue delay and take immediate steps to contain the breach and prevent further exposure.

While cx664 employs robust security measures, no online platform can guarantee absolute security. You share responsibility for protecting your own account by using a strong unique password, enabling any available security features on your cx664 account, and logging out after each session — particularly on shared or public devices. If you believe your cx664 account has been compromised, contact [email protected] immediately.

Policy Updates

cx664 reserves the right to update this Privacy Policy at any time. Changes may be made in response to updates in applicable data protection law, changes to cx664's data processing practices, feedback from users or regulators, or updates to the services offered on cx664.org. The revised effective date at the top of this document will always reflect the date on which the most recent version came into effect.

When cx664 makes material changes to this Privacy Policy — that is, changes that significantly affect your rights or how your personal data is used — we will notify registered account holders by email at the address associated with their cx664 account. We will also display a prominent notice on cx664.org for a reasonable period following the update.

Your continued use of cx664.org following the publication of an updated Privacy Policy constitutes your acknowledgement of the revised policy. If you do not agree to the updated terms, please cease using the Platform and request account closure by contacting [email protected]. cx664 maintains a version archive of previous Privacy Policy iterations; prior versions are available upon written request to [email protected].

Contact & Complaints

If you have any question, concern, or complaint about the way in which cx664 collects, uses, stores, or shares your personal data, or if you wish to exercise any of the privacy rights described in Section 07 of this Privacy Policy, please contact the cx664 Data Privacy team using the details below.

Written Enquiries: Send your enquiry to [email protected] with the subject line "Privacy Enquiry" or "Data Subject Request" as appropriate. Please include your registered username and a clear description of your request or concern. cx664 will acknowledge receipt of your enquiry within 2 business days and provide a full response within 14 calendar days. All times are Bangladesh Standard Time (BST, UTC+6).

Live Chat: For non-sensitive privacy queries, you may contact cx664 via the 24/7 live chat service available on cx664.org. Please note that formal data subject requests and formal complaints must be submitted in writing to [email protected] to ensure they are properly logged and tracked.

Complaints: cx664 takes all privacy complaints seriously. If you are dissatisfied with cx664's response to your privacy concern or data subject request, you have the right to escalate your complaint to the relevant data protection authority or consumer protection body in your jurisdiction. cx664 commits to cooperating fully with any regulatory investigation arising from a privacy complaint.