c677 Privacy Policy — How We Handle Your Data

This Privacy Policy ("Policy") explains how c677 ("we", "us", "our") collects, uses, stores, shares, and protects personal information provided by or collected about users ("you", "your") of the c677 platform at https://c677.org. By registering an account or using the platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

We may update this Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will notify you via a notice on the platform or by email to your registered address. We encourage you to review this page periodically. The effective date at the top of this page indicates when this version was last revised.

When you use c677, we collect the following categories of personal information, either directly from you or automatically through your use of the platform:

• Registration data: full name, date of birth, Bangladeshi mobile number, email address, and residential address provided at the time of account creation.
• Identity verification documents: government-issued national ID (NID), passport, or driving licence submitted during KYC review.
• Payment data: transaction amounts, payment method identifiers (e.g. bKash wallet number, last four digits of a card), and transaction history. We do not store full card numbers.
• Technical data: IP address, device type, operating system, browser version, and session duration collected automatically each time you access the platform.
• Gameplay data: betting history, game session logs, bonus usage records, and responsible gaming tool activations associated with your account.

We collect only the minimum personal data necessary to provide and improve the c677 platform, comply with our legal obligations, and protect the integrity of our operations. We do not collect sensitive personal data such as racial or ethnic origin, political opinions, or health information, except where required for responsible gaming assessments.

c677 uses the personal information we collect for the following specific purposes:

• Account management: to create, verify, and maintain your c677 account, authenticate your identity at login, and communicate account-related updates to you.
• Transaction processing: to process BDT deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa and Mastercard, and to maintain accurate financial records.
• Legal and compliance: to fulfil our obligations under applicable anti-money laundering (AML), know-your-customer (KYC), and responsible gaming regulations, and to respond to lawful requests from regulatory authorities.
• Fraud prevention and security: to detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, bonus abuse, and other prohibited conduct on the platform.
• Service improvement: to analyse aggregated, anonymised usage data to understand platform performance, identify technical issues, and develop new features that benefit all c677 users.

c677 processes your personal data under one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: processing required to fulfil our obligations under the account agreement you enter into when you register, including operating your account, processing transactions, and delivering platform services.
• Legal obligation: processing required to comply with applicable AML, KYC, data retention, and responsible gaming laws and regulations.
• Legitimate interests: processing for fraud prevention, security monitoring, and platform analytics, where such interests are not overridden by your rights.
• Consent: where we rely on your consent for specific processing activities (e.g. marketing communications), you may withdraw that consent at any time by contacting [email protected] or by using the opt-out mechanism in any marketing message we send you.

c677 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your information with the following categories of recipient, strictly as required to operate the platform or comply with the law:

• Payment processors and financial partners: bKash, Nagad, Rocket, Upay, Visa and Mastercard, and our banking partners, solely to process transactions you initiate on the platform.
• Technology and service providers: third-party vendors who assist with platform hosting, identity verification, fraud detection, customer support software, and analytics — all bound by confidentiality agreements and prohibited from using your data for their own purposes.
• Regulatory and law enforcement authorities: when required by applicable law, court order, or government request, we will disclose data to the relevant authority. We will notify you of such disclosure where legally permitted to do so.

All third-party recipients of your personal data are required to implement appropriate technical and organisational measures to protect that data, and to process it only for the purposes for which it was shared. c677 remains responsible for ensuring these obligations are met through contractual arrangements with each partner.

c677 uses cookies and similar tracking technologies (such as local storage and session tokens) to ensure the platform operates correctly, to remember your preferences, and to gather anonymised analytics data that helps us understand how players interact with our services.

We use the following categories of cookie on the c677 platform:

• Essential cookies: strictly necessary to enable core platform functionality including secure login, session management, and fraud detection. These cannot be disabled without impairing the platform's operation.
• Functional cookies: used to remember your language preference, display settings, and other personalisation choices so you do not need to re-enter them on each visit.
• Analytics cookies: used to collect aggregated, anonymised data about how users navigate the platform so we can identify areas for improvement and measure the effectiveness of our content. No individual user is identified in this data.

You may manage or disable non-essential cookies at any time through your browser settings. Please note that disabling certain functional cookies may affect your experience on the platform, for example by requiring you to re-enter language preferences on each visit. Your browser's help documentation will explain how to manage cookie preferences for the specific browser you use.

c677 retains personal data only for as long as necessary to fulfil the purposes outlined in this Policy, or as required by law. The retention periods we apply are as follows: account registration data is retained for the lifetime of the account plus 5 years after closure; transaction records and KYC documents are retained for a minimum of 5 years after the last transaction in compliance with AML obligations; gameplay logs are retained for 2 years; technical and device data is retained for 12 months.

When personal data is no longer required for the purposes for which it was collected, and no legal obligation requires its further retention, c677 will securely delete or anonymise that data. If you request deletion of your account data, we will process your request within 30 days subject to any legal retention obligations that override the deletion request.

c677 implements a layered security architecture to protect your personal and financial information. Our measures include 256-bit SSL/TLS encryption for all data transmitted between your device and our servers; encrypted storage of sensitive data at rest; strict role-based access controls that limit staff access to personal data on a need-to-know basis; regular security audits and penetration testing; and a dedicated incident response process for promptly addressing any suspected data breach.

Despite these measures, no internet-based platform can guarantee absolute security. If you become aware of any unauthorised access to your account or suspicious activity, please contact [email protected] immediately. c677 will act promptly to investigate, contain, and where necessary notify you of any confirmed data breach that affects your personal information.

As a user of c677, you have the following rights in relation to your personal data. To exercise any of these rights, please contact [email protected] with your registered mobile number and a description of your request. We will respond within 5 business days:

• Right of access: you may request a copy of the personal data c677 holds about you, together with information about how and why it is being processed.
• Right to rectification: if any personal data we hold about you is inaccurate or incomplete, you may request that we correct or complete it without undue delay.
• Right to erasure: you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to any legal retention obligations that prevent deletion.
• Right to restrict processing: in certain circumstances (e.g. while a rectification request is being assessed) you may request that we limit our processing of your data to storage only.
• Right to object: you may object to processing carried out on the basis of legitimate interests, including direct marketing. Where you object to direct marketing, we will cease that processing immediately.

We will not charge a fee for handling any rights request unless a request is manifestly unfounded or excessive, in which case we reserve the right to charge a reasonable administrative fee or to decline the request, providing you with our reasons in writing.

c677 is strictly intended for adults aged 21 and above. We do not knowingly collect, use, or store personal data from any person under the age of 21. If we become aware that a user under 21 has provided personal data to us, we will take immediate steps to delete that data and permanently close the associated account. Any winnings or balances in such an account will be forfeited. If you believe a person under 21 has registered an account on c677, please notify us immediately at [email protected].

c677 reserves the right to update this Privacy Policy at any time. When we make changes, the revised Policy will be published on this page with an updated effective date. Where a change materially affects how we process your personal data, we will provide at least 7 days' advance notice via a notification on the platform or by email to your registered address. Your continued use of the c677 platform after the revised Policy takes effect constitutes your acceptance of the updated terms.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how c677 handles your personal information, please contact our data protection team by email at [email protected]. Please include your registered mobile number and a clear description of your query. We aim to acknowledge all privacy-related enquiries within 2 business days and to resolve them fully within 5 business days.