c6zz Privacy Policy
Your Data. Your Rights. Our Responsibility.

1 Introduction

c6zz is committed to protecting the privacy and personal data of every individual who interacts with our platform. This Policy applies to all services provided through https://c6zz.io, including account registration, deposits, withdrawals, gameplay, sports betting, customer support interactions, and any promotional communications.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy. In the event of any conflict between this Policy and those documents with respect to data handling, this Privacy Policy shall take precedence.

We review and update this Policy periodically to reflect changes in our practices, technology, legal requirements, or business operations. The "Last updated" date at the top of this page indicates when the most recent revision took effect. We encourage you to review this Policy whenever you visit the platform to stay informed about how we handle your data.

2 Who We Are

c6zz operates the online casino and sports betting platform accessible at https://c6zz.io. The platform is designed primarily for adult players (aged 21 and above) based in Bangladesh. For the purposes of this Privacy Policy, c6zz is the data controller — meaning we determine the purposes for which and the means by which your personal data is processed.

If you have any questions about how c6zz handles your personal data, or if you wish to exercise any of your data rights as described in Section 10 of this Policy, you may contact our Data Protection contact at the following address:

• Email: [email protected]
• Subject Line: Privacy / Data Request
• Response Time: Within 30 calendar days of receipt

3 Personal Data We Collect

3.1 Registration and Identity Data

When you create a c6zz account, we collect the following information: full legal name, date of birth, email address, mobile phone number, and preferred username. This data is required to open and maintain your account and to verify that you meet our minimum age requirement of 21 years.

3.2 Identity Verification (KYC) Data

To comply with anti-money laundering obligations and to protect all players on the platform, we may request copies of government-issued identification documents (such as a National ID card, passport, or driving licence), proof of address documents, and proof of payment method ownership. These documents are processed through our secure verification system and are never shared with third parties for marketing purposes.

3.3 Financial and Transaction Data

We collect records of all financial transactions conducted through your c6zz account, including: deposit amounts and dates, withdrawal requests and settlement confirmations, payment method identifiers (e.g., the last four digits of a registered bKash or Nagad number, or a masked card number), and bonus credit and wagering activity. Full payment credentials (such as full card numbers or mobile banking PINs) are never stored by c6zz — these are handled exclusively by the respective payment providers.

3.4 Usage and Behavioural Data

We collect data about how you interact with the c6zz platform, including: pages visited and time spent on each, games played and bet history, session start and end times, device type, operating system, browser type and version, and IP address. This data is used to improve platform performance, detect fraud, and personalise your experience where appropriate.

3.5 Communications Data

We retain records of all communications between you and c6zz, including live chat transcripts, support ticket exchanges, and emails. This enables us to maintain continuity of support, resolve disputes, and monitor service quality.

3.6 Summary Table of Data Categories

4 How We Collect Your Data

c6zz collects personal data through the following means:

• Directly from you — when you register an account, submit KYC documents, make a deposit or withdrawal, contact support, respond to a survey, or opt in to marketing communications.
• Automatically — when you browse or interact with the c6zz website, our servers automatically record usage data including IP address, device identifiers, session timing, and interaction patterns. This data is collected via server logs and first-party analytics tools.
• From payment providers — when you make a deposit or request a withdrawal via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, those providers may share transaction confirmation data (such as a transaction reference number and masked account identifier) with c6zz to reconcile your account balance.
• From identity verification services — if c6zz uses a third-party KYC verification service, that provider may return a verified identity status and document authenticity confirmation. c6zz does not receive raw biometric data from these services.

5 Purposes and Legal Basis for Processing

c6zz processes your personal data for the following purposes, each supported by a corresponding lawful basis:

Where processing is based on consent (e.g., receiving promotional emails), you have the right to withdraw that consent at any time by contacting [email protected] or updating your account notification preferences. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

6 Sharing Your Personal Data

6.1 Payment Providers

To process your deposits and withdrawals, c6zz shares the minimum necessary data (such as your account name and transaction amount) with our payment processing partners: bKash, Nagad, Rocket, Upay, Visa, and Mastercard. These providers act as independent data controllers for their own services and are governed by their respective privacy policies.

6.2 Identity Verification Partners

Where required to fulfil our KYC obligations, c6zz may share identity document data with a certified third-party identity verification provider. These providers are contractually bound to process data solely for the purpose of identity verification and to apply security standards at least equivalent to those described in this Policy.

6.3 Game Content Providers

Games on the c6zz platform are provided by licensed third-party studios including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive anonymised session data (such as game round IDs and bet amounts) necessary to operate the game. They do not receive your name, contact details, or payment information directly through gameplay.

6.4 Legal and Regulatory Disclosures

c6zz may disclose your personal data to law enforcement agencies, financial intelligence authorities, or other regulatory bodies where required to do so by applicable law, court order, or in connection with the investigation of suspected financial crime, fraud, or match-fixing. Such disclosures are made only to the extent required by the relevant legal obligation.

6.5 What We Will Never Do

• Sell your personal data to third-party advertisers or data brokers
• Share your data with unaffiliated marketing partners without your explicit consent
• Transfer your full payment credentials to any party other than the relevant payment processor
• Use your data in a way that is incompatible with the purposes stated in this Policy

7 Cookies and Tracking Technologies

7.1 What Are Cookies

Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember your actions and preferences over time, so you do not have to re-enter them each time you return or navigate between pages.

7.2 Cookies Used by c6zz

c6zz uses the following categories of cookies:

• Strictly Necessary Cookies: These are essential for the platform to function. They manage your login session, maintain your account state, and protect against cross-site request forgery (CSRF). These cookies cannot be disabled without breaking core platform functionality.
• Analytics Cookies: c6zz uses first-party, anonymised analytics to understand aggregate user behaviour, such as which pages are most visited and where users experience difficulties. No personally identifiable information is associated with these analytics records.
• Preference Cookies: These remember your settings such as language preference and display choices to provide a consistent experience across sessions.

7.3 What c6zz Does Not Use

c6zz does not use third-party advertising cookies, cross-site behavioural tracking pixels, social media tracking scripts, or any cookie that builds a personal advertising profile linked to your identity. We do not integrate Facebook Pixel, Google Ads remarketing tags, or any equivalent third-party advertising tracker on our platform.

7.4 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to block or delete cookies. Please be aware that disabling strictly necessary cookies will impair your ability to log in and use the c6zz platform. For guidance on managing cookies in your specific browser, refer to your browser's help documentation.

8 Data Retention

c6zz retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or to comply with our legal obligations. The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of an active account relationship, plus a minimum of five (5) years following account closure, in accordance with anti-money laundering record-keeping requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• KYC documents: Retained for the duration of the account relationship plus five (5) years following closure or the completion of the relevant verification process.
• Customer support communications: Retained for three (3) years from the date of the most recent interaction, unless the communication relates to an unresolved dispute or legal proceeding, in which case it is retained until the matter is fully resolved.
• Analytics data: Anonymised aggregated analytics data may be retained indefinitely as it cannot be linked back to any individual.
• Marketing consent records: Retained for three (3) years from the date of your last interaction with a marketing communication, or until consent is withdrawn, whichever is earlier.

When personal data is no longer required, c6zz securely deletes or anonymises it using industry-standard methods so that it cannot be recovered or linked back to any individual.

9 Data Security

c6zz takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser and the c6zz platform is encrypted using industry-standard TLS protocols. The padlock symbol in your browser's address bar confirms an active encrypted connection.
• Password Hashing: Account passwords are stored using a strong one-way cryptographic hashing algorithm. c6zz staff cannot view your password in plaintext under any circumstances. If you forget your password, a reset process is initiated — your existing password is never retrieved or displayed.
• Access Controls: Access to systems holding personal data is restricted on a strict need-to-know basis. All staff with access to personal data undergo data protection awareness training and are bound by confidentiality obligations.
• Infrastructure Security: c6zz servers are hosted in secure data centre environments with physical access controls, regular security patching, intrusion detection systems, and firewall protection.
• Fraud Monitoring: Automated and manual monitoring systems are in place to detect unusual account activity, suspicious login patterns, and potential data breach indicators.

While c6zz applies rigorous security measures, no internet-based service can guarantee absolute security. You also play a role in protecting your account — use a strong, unique password, never share your login credentials, and notify us immediately at [email protected] if you suspect your account has been compromised.

10 Your Data Rights

As a c6zz account holder, you have the following rights with respect to your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Privacy / Data Request". We will respond within 30 calendar days.

• Right of Access: You have the right to request a copy of all personal data c6zz holds about you, along with information about how it is being processed.
• Right to Rectification: If any personal data c6zz holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent and there is no other legal basis for processing. Note that this right is subject to our legal retention obligations — we cannot delete transaction or KYC records before the end of their mandatory retention period.
• Right to Restriction of Processing: You have the right to request that c6zz restricts the processing of your data in certain circumstances, such as where you contest the accuracy of the data or object to its processing.
• Right to Data Portability: You have the right to receive a copy of the personal data you provided to c6zz in a structured, commonly used, machine-readable format, and to request that it be transmitted directly to another service provider where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on c6zz's legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before the withdrawal.

11 Children and Minors

The c6zz platform is strictly for adults aged 21 years and above. c6zz does not knowingly collect personal data from individuals under the age of 21. Registration by persons under 21 is a violation of our Terms & Conditions and constitutes grounds for immediate account closure and forfeiture of any associated balance.

If you are the parent or guardian of a minor and you believe that your child has registered a c6zz account or submitted personal data to the platform, please contact us immediately at [email protected]. We will take prompt action to close the account and securely delete all associated personal data upon verification of the complaint.

c6zz encourages parents and guardians to make use of parental control software to prevent minors from accessing online gambling services. For more information on responsible gaming tools, please visit our Responsible Gaming page.

12 Third-Party Links and Services

The c6zz platform does not include external links to third-party websites. However, some game content is delivered by third-party studios (such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi). While these studios are our licensed partners and are bound by contractual data handling obligations, their services are governed by their own privacy policies with respect to the data they independently process.

Payment services accessed through c6zz (bKash, Nagad, Rocket, Upay, Visa, Mastercard) are operated by independent entities. When you transact through these providers, their respective terms and privacy policies also apply to the data you submit directly to their systems. c6zz is not responsible for the privacy practices of these independent providers.

13 Updates to This Privacy Policy

c6zz reserves the right to update or amend this Privacy Policy at any time. When we make material changes to this Policy, we will notify registered Players via a notice displayed on the c6zz platform homepage or by email to the address registered on your account. The updated Policy will take effect on the date stated in the notice.

The "Last updated" date at the top of this page reflects the date of the most recent revision. We encourage you to review this Policy periodically. Your continued use of the c6zz platform following notification of any changes constitutes your acceptance of the updated Policy.

If you do not accept the revised Privacy Policy, you must cease using the platform and contact [email protected] to request account closure and data deletion, subject to our mandatory legal retention obligations.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact the c6zz privacy team:

• Email: [email protected]
• Subject Line: Privacy / Data Request
• Response Time: Within 30 calendar days
• Support Hours: 24 hours a day, 7 days a week
• Language: English
• Time Zone: Bangladesh Standard Time (BS T, UTC+6)