c677 Privacy Policy
At c677, protecting your personal data is a core responsibility. This Privacy Policy explains exactly what information we collect when you use our platform, why we collect it, how it is stored, and the rights you hold over your own data as a registered player in Bangladesh.
How We Handle Your Data
Six core principles guide every data decision made at c677. These commitments are built into our platform operations and inform everything in the full Privacy Policy below.
Minimal Collection
c677 collects only the personal data that is strictly necessary for account management, identity verification, payment processing, and regulatory compliance. We do not collect data speculatively or in excess of operational needs.
Secure Storage
All personal data held by c677 is stored in encrypted form using 256-bit SSL technology. Access to personal data is restricted to authorised c677 personnel only, and all internal access is logged and audited on a regular basis.
No Data Selling
c677 does not sell, rent, or trade your personal data to third parties for marketing or commercial purposes. Your information is shared only with essential service providers operating under strict confidentiality agreements.
Your Rights First
You retain full rights over your personal data at all times. This includes the right to access, correct, or request deletion of your data. All such requests are handled by our support team within a reasonable timeframe.
Defined Retention
c677 retains personal data only for as long as is necessary for the purposes for which it was collected or as required by applicable compliance obligations. Data that is no longer required is securely deleted or anonymised.
Full Transparency
We believe you have the right to know exactly how your data is used. This Privacy Policy is written in plain, accessible English so that every c677 player in Bangladesh can understand our data practices without ambiguity.
What Data We Collect and Why
The table below provides a concise overview of the categories of personal data c677 collects, the legal basis for processing, and the primary purpose of each category.
| Data Category | Examples | Purpose | Retention |
|---|---|---|---|
| Identity Data | Full name, date of birth, NID / passport number | Account registration, KYC verification, age compliance | Duration of account + 5 years |
| Contact Data | Mobile number, email address, city (Dhaka, Chittagong, Sylhet, etc.) | Account communications, support, notifications | Duration of account + 2 years |
| Financial Data | bKash / Nagad / Rocket number, Visa / Mastercard last 4 digits, deposit and withdrawal records | Payment processing, fraud prevention, audit compliance | Duration of account + 7 years |
| Technical Data | IP address, browser type, device ID, operating system, session timestamps | Security monitoring, fraud detection, platform optimisation | 13 months rolling |
| Gameplay Data | Bet history, game sessions, win/loss records, bonus activity | Responsible gaming monitoring, personalisation, dispute resolution | Duration of account + 5 years |
| Communications Data | Support chat transcripts, email correspondence, complaint records | Customer service quality, compliance records | 3 years from last contact |
1 Introduction
This Privacy Policy describes how c677 (referred to throughout this document as "c677", "we", "us", or "our") collects, uses, stores, shares, and protects the personal information you provide when you register an account, make a deposit or withdrawal, place bets, play casino games, or otherwise interact with the c677 platform at https://c677.io.
We are committed to handling your personal data responsibly and in accordance with applicable data protection principles. This Privacy Policy applies to all players who access c677 from Bangladesh or any other jurisdiction where the platform is accessible.
By registering an account on c677 or continuing to use our platform, you acknowledge that you have read and understood this Privacy Policy and you consent to the collection, processing, and storage of your personal data as described herein. If you do not agree to this Privacy Policy, please do not register an account or continue using the platform.
This Privacy Policy is incorporated by reference into the c677 Terms & Conditions. In the event of any conflict between this Policy and the Terms & Conditions on matters relating to personal data, this Privacy Policy shall prevail.
2 Who We Are
c677 is an online betting and casino platform operating at https://c677.io, offering sports betting (with a particular focus on cricket including the BPL, Bangladesh Tigers, IPL, and T20 World Cup), live casino games, slots, and fishing games to players in Bangladesh and other accessible jurisdictions.
For the purposes of this Privacy Policy, c677 acts as the data controller in respect of personal data collected through the platform. As data controller, c677 determines the purposes for which and the means by which your personal data is processed.
Data Controller Contact: For any privacy-related enquiries, requests, or complaints, you may contact the c677 data protection team directly by email at [email protected]. Please include "Privacy Request" in the subject line of your message so that it is routed to the correct team without delay.
3 Data We Collect
c677 collects the following categories of personal data from players. Collection occurs at registration, during ongoing use of the platform, and as part of our KYC and compliance processes.
3.1 Identity and Contact Data
- Full legal name as it appears on your official identification document
- Date of birth (used to verify that you meet the 21+ age requirement)
- National Identity Card (NID) number or passport number
- Registered mobile number (the primary contact channel on c677)
- Email address
- City or district of residence within Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar)
3.2 Financial and Transaction Data
- Mobile financial service account numbers (bKash, Nagad, Rocket, Upay)
- Card details where applicable (last 4 digits of Visa or Mastercard only — full card numbers are not stored by c677)
- Transaction history including deposit amounts, withdrawal amounts, dates, and payment method used
- Account balance history
- Bonus credit and wagering activity records
3.3 Technical and Device Data
- IP address at time of login and at time of each transaction
- Device type, model, and operating system
- Browser type and version
- Session start and end timestamps (Bangladesh Standard Time, UTC+6)
- Geolocation data derived from IP address (country and city level only)
3.4 Gameplay and Betting Data
- Full history of bets placed across all sports markets and casino games
- Game session duration and frequency
- Win, loss, and net gaming revenue records
- Bonus activation and wagering progress data
- Responsible gaming tool settings (deposit limits, time-out periods, self-exclusion status)
3.5 KYC Verification Documents
- Copies of identity documents (NID, passport) submitted for verification
- Proof of address documents (utility bills, bank statements)
- Proof of payment method ownership (account screenshots showing registered mobile number)
3.6 Communications Data
- Content of support enquiries, complaint records, and related correspondence
- Records of any notifications sent to you and whether they were opened or acted upon
4 How We Collect Data
c677 collects personal data through the following channels and mechanisms:
4.1 Direct Collection
The majority of personal data held by c677 is provided directly by you when you: register a new account; complete the KYC verification process; make a deposit or request a withdrawal; contact customer support; or update your account profile settings.
4.2 Automated Collection
When you access and use the c677 platform, certain technical data is collected automatically by our systems. This includes your IP address, device identifiers, session timestamps, and interaction logs. This automated collection occurs in the background during normal platform use and does not require any action on your part.
4.3 Cookies and Similar Technologies
c677 uses browser cookies and similar tracking technologies to maintain session continuity, remember your preferences, and gather aggregate platform usage statistics. Please see Section 8 (Cookies & Tracking) for full details of the cookies we use and how to manage your cookie preferences.
4.4 Third-Party Sources
In limited circumstances, c677 may receive personal data about you from third-party sources. This includes identity verification data from our KYC technology partner and fraud-risk signals from our payment processing partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard network operators). Data received from third-party sources is handled in accordance with this Privacy Policy and is used solely for the purposes described herein.
5 Legal Basis for Processing
c677 processes your personal data on the basis of one or more of the following legal grounds, depending on the specific processing activity:
- Contractual Necessity: Processing is required to fulfil the contract between c677 and you as a registered player. This includes operating your account, processing deposits and withdrawals, and delivering the games and services you have signed up for.
- Legitimate Interests: Processing is necessary for c677's legitimate business interests, including fraud prevention, security monitoring, platform improvement, and responsible gaming compliance, provided those interests are not overridden by your fundamental rights and interests.
- Legal Obligation: Processing is required to comply with applicable legal or regulatory obligations, including anti-money laundering (AML) requirements, Know Your Customer (KYC) obligations, and financial record-keeping requirements.
- Consent: Where no other legal basis applies, c677 will rely on your freely given, informed, and specific consent. You may withdraw consent at any time by contacting [email protected], although withdrawal of consent will not affect the lawfulness of any processing carried out prior to withdrawal.
6 How We Use Your Data
The personal data c677 collects is used for the following specific purposes:
- Creating and managing your c677 player account
- Verifying your identity and age (21+ compliance) as part of the KYC process
- Processing deposits and withdrawal requests via bKash, Nagad, Rocket, Upay, Visa, and Mastercard
- Delivering the betting, casino, slots, and fishing game services you access on the platform
- Detecting, investigating, and preventing fraudulent activity, money laundering, and prohibited conduct as defined in the c677 Terms & Conditions
- Administering bonus offers, promotional campaigns (including BPL season promotions, Eid specials, and Pohela Boishakh offers), and loyalty programmes
- Monitoring gameplay patterns for responsible gaming purposes and applying any restrictions or limits you have set on your account
- Responding to support enquiries, complaints, and account-related requests
- Sending you transactional notifications (deposit confirmations, withdrawal approvals, bet settlement results) via SMS and email
- Maintaining the security, performance, and technical integrity of the c677 platform
- Complying with applicable legal and regulatory obligations
Marketing: c677 may use your contact details to send you personalised promotional offers and platform updates where you have provided consent or where we have a legitimate interest in doing so. You may opt out of marketing communications at any time — see Section 14 for full details.
7 Data Sharing & Disclosure
c677 does not sell, rent, or trade your personal data to third parties. We share personal data only in the following limited and controlled circumstances:
7.1 Service Providers
c677 engages third-party service providers who process personal data on our behalf in order to operate the platform. These include:
- Payment processors (bKash, Nagad, Rocket, Upay, and card network partners) — for deposit and withdrawal transaction processing
- KYC and identity verification technology providers — for document verification and fraud screening
- Game content providers (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Ezugi, Spribe) — who may log session and gameplay data within their game environments
- Cloud hosting and infrastructure providers — who store platform data under strict data processing agreements
- Customer support platform providers — who facilitate our support ticketing and communication systems
All service providers are contractually bound to process your personal data only for the specific purpose for which it was shared and to maintain appropriate security standards. They are not permitted to use your data for their own marketing or commercial purposes.
7.2 Legal and Regulatory Disclosure
c677 may disclose your personal data to law enforcement agencies, regulatory bodies, or other government authorities where we are required to do so by applicable law, court order, or where we have a good-faith belief that such disclosure is necessary to prevent imminent harm or illegal activity.
7.3 Business Transfers
In the event of a merger, acquisition, restructuring, or sale of all or part of c677's assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer via email and through a prominent notice on the c677 website prior to your data being transferred or becoming subject to a different privacy policy.
No International Transfers Without Safeguards: Where any c677 service provider is located outside Bangladesh, c677 ensures that appropriate contractual safeguards are in place before any personal data is transferred, to ensure your data receives an equivalent level of protection to that described in this Privacy Policy.
8 Cookies & Tracking
c677 uses cookies and similar browser-based technologies to improve your experience on the platform. The following categories of cookies are in use:
8.1 Strictly Necessary Cookies
These cookies are essential for the c677 platform to function correctly. They enable session management (keeping you logged in as you navigate between pages), security token validation, and fraud prevention checks. These cookies cannot be disabled without impairing core platform functionality.
8.2 Performance and Analytics Cookies
These cookies collect anonymous, aggregated data about how players use the c677 platform — including which pages are visited most frequently, how long sessions last, and which features are most used. This data is used exclusively for internal platform performance analysis and improvement. No personally identifiable data is included in performance analytics.
8.3 Functional Cookies
These cookies remember your preferences and settings, such as your preferred display language and any customisation options you have applied to your account interface. Disabling functional cookies may cause certain personalisation features to stop working correctly.
8.4 Managing Cookies
You may manage or disable non-essential cookies through your browser settings. Most modern browsers (Chrome, Firefox, Safari, Edge) allow you to view, block, or delete cookies at any time. Please refer to your browser's help documentation for instructions. Note that blocking certain cookies may affect your ability to use some features of the c677 platform, including maintaining a logged-in session.
9 Data Security
c677 takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, loss, alteration, or disclosure:
- Encryption in Transit: All data transmitted between your device and the c677 platform is encrypted using 256-bit SSL/TLS encryption. Look for the padlock icon in your browser's address bar when visiting c677.io.
- Encryption at Rest: Sensitive data stored in our databases, including identity documents and financial records, is encrypted at the storage layer using AES-256 encryption.
- Access Controls: Access to personal data within c677's internal systems is restricted to authorised personnel only, on a strict need-to-know basis. All internal access is authenticated, logged, and periodically audited.
- Intrusion Detection: c677 operates real-time intrusion detection and monitoring systems that flag anomalous access patterns for immediate review by our security team.
- Incident Response: In the event of a data breach that is likely to result in a risk to your rights and freedoms, c677 will notify affected players promptly via the email address registered to their account, including details of the nature of the breach and the steps being taken to address it.
Your Role in Data Security: While c677 takes all reasonable steps to protect your data, the security of your account also depends on you keeping your login credentials confidential. Never share your password with anyone. c677 staff will never ask for your password under any circumstances. If you believe your account has been compromised, contact [email protected] immediately.
10 Data Retention
c677 retains your personal data for as long as your account remains active and for defined periods thereafter, as follows:
- Active Accounts: All categories of personal data are retained for the full duration that your c677 account remains open and active.
- Closed Accounts: Following account closure (whether voluntary or by c677), personal data is retained for a minimum of 5 years to comply with anti-money laundering record-keeping requirements. Financial transaction data may be retained for up to 7 years.
- Technical Logs: IP address and session log data is retained on a rolling 13-month basis and deleted automatically thereafter.
- KYC Documents: Identity verification documents are retained for the duration of the account plus 5 years following closure.
- Support Records: Customer support communications are retained for 3 years from the date of the last relevant interaction.
At the end of the applicable retention period, personal data is securely and permanently deleted or anonymised such that it can no longer be associated with any individual player.
11 Your Rights
As a c677 player, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request":
- Right of Access: You have the right to request a copy of all personal data that c677 holds about you. We will provide this information in a structured, commonly used format within 30 days of receiving your verified request.
- Right to Rectification: If any personal data held by c677 is inaccurate or incomplete, you have the right to request that it be corrected or updated. Contact support with the specific data you wish to have corrected.
- Right to Erasure: In certain circumstances, you have the right to request the deletion of your personal data. Please note that this right is subject to c677's legal obligations to retain certain data (e.g., AML compliance records) and therefore may not apply to all data categories.
- Right to Restrict Processing: You have the right to request that c677 restricts the processing of your personal data in specific circumstances, such as while the accuracy of data is being contested.
- Right to Data Portability: Where processing is based on your consent or on a contractual relationship, you may request that c677 provide your personal data in a machine-readable format for transfer to another service provider.
- Right to Object: You have the right to object to c677's processing of your personal data where it is based on our legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your rights.
- Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
All rights requests are handled by c677's data protection team. We will respond to verified requests within 30 calendar days. In complex cases, this period may be extended by an additional 30 days, in which case you will be notified of the extension and the reason for it.
12 Children & Minors
The c677 platform is strictly intended for adults aged 21 years and above. c677 does not knowingly collect personal data from individuals under the age of 21 and does not permit minors to register accounts or access any betting or gaming services on the platform.
If c677 becomes aware that personal data has been collected from a person under the age of 21, all such data will be permanently deleted from our systems and the associated account will be immediately and permanently closed. Any deposits made by the minor will be refunded to the originating payment method.
Parental Guidance: If you believe a minor in your household has accessed or registered an account on c677, please contact us immediately at [email protected] with the subject line "Minor Account Report". We take all such reports seriously and will investigate and act without delay.
13 Third-Party Links
The c677 platform may contain references to or integrations with third-party game providers such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Ezugi, and Spribe. While c677 selects its game content partners carefully, please be aware that each provider operates under its own privacy policy governing data collected within their game environments. c677 is not responsible for the privacy practices of its game content providers and encourages you to review their respective privacy policies if you have concerns about how gameplay data is handled within third-party game clients.
The c677 platform does not contain outbound links to external websites for general browsing purposes. All navigation within c677.io remains within the c677 platform environment.
14 Marketing Communications
With your consent, c677 may send you promotional communications via SMS and email. These may include information about new games, seasonal bonus offers (such as BPL season promotions, Eid specials, Pohela Boishakh offers, and Victory Day promotions), deposit match offers, and platform feature updates.
You may opt out of receiving marketing communications at any time by any of the following methods:
- Replying "STOP" to any promotional SMS message sent by c677
- Clicking the unsubscribe link included at the bottom of any promotional email
- Contacting our support team at [email protected] with the subject line "Unsubscribe from Marketing"
- Updating your notification preferences within your c677 account settings
Please note that opting out of marketing communications does not affect transactional notifications. You will continue to receive essential account-related messages such as deposit confirmations, withdrawal approvals, and security alerts regardless of your marketing communication preferences.
Response Time: All opt-out requests are processed within 5 business days. During this period, you may receive one or two further promotional messages before the opt-out takes full effect. We apologise in advance for any inconvenience this may cause.
15 Policy Updates
c677 reserves the right to update or modify this Privacy Policy at any time. When material changes are made, c677 will notify registered players by email to the address associated with their account and will publish a prominent notice on the c677 platform for a minimum of 30 days following the update.
The "Last Updated" date displayed at the top of this Privacy Policy will be revised whenever changes are made. Your continued use of the c677 platform following notification of any changes constitutes your acceptance of the updated Privacy Policy. If you do not agree with any changes made to this Policy, you should discontinue use of the platform and may request account closure by contacting our support team.
We encourage you to review this Privacy Policy periodically to remain informed of how c677 is protecting your data. The most current version of this Policy is always available at https://c677.io/privacy-policy.
16 Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data c677 holds about you, please contact our data protection team using the details below. All privacy-related enquiries are handled by a dedicated team and we aim to respond within 4 business hours during Bangladesh Standard Time (BST, UTC+6) operating hours.
c677 Data Protection Team
Email: [email protected]
Subject line: "Privacy Request" or "Data Rights Request"
Response time: within 4 hours (BST, UTC+6)
Platform: https://c677.io
Please include your registered mobile number or email address in your message so that we can verify your identity before processing any data access or deletion requests. c677 is required to verify the identity of all data rights requesters before disclosing or modifying any personal data, in order to protect the security of all players on the platform.
Ready to Experience c677?
Now that you understand how c677 protects your personal data, explore everything our platform has to offer — from live cricket betting and top-rated slots to live casino tables and fishing games.