c888 Privacy Policy — How We Handle Your Personal Data

1. Introduction

1.1 This Privacy Policy ("Policy") applies to all users of the c888 platform, including the c888 website, mobile browser experience and any associated services provided by c888 (collectively, "the Platform"). By registering an account or continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

1.2 This Policy is incorporated by reference into c888's Terms & Conditions. In the event of any conflict between this Policy and the Terms & Conditions with respect to data privacy matters, this Policy shall prevail.

1.3 We may update this Policy from time to time. The current version is always published on this page with the effective date clearly stated at the top. Continued use of the Platform following a policy update constitutes your acceptance of the revised terms.

2. Data Controller

2.1 For the purposes of this Policy, c888 acts as the data controller in respect of personal data collected from users of the Platform. c888 determines the purposes and means by which personal data is processed.

2.2 If you have any questions or concerns regarding the processing of your personal data, you may contact c888's data support team at [email protected]. We aim to respond to all data-related queries within 5 business days.

3. Data We Collect

3.1 c888 collects the following categories of personal data from users of the Platform:

3.2 c888 does not collect or process special categories of sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health data, unless legally required to do so in specific circumstances.

3.3 Where you voluntarily provide additional information beyond what is requested during registration (for example, in a support chat), that information may be retained as part of your account record.

4. How We Collect Your Data

4.1 Direct Collection. The majority of data c888 holds about you is provided directly by you when you: (a) register an account on the c888 platform; (b) complete identity verification (KYC); (c) make a deposit or withdrawal; (d) contact our customer support team; (e) respond to surveys or promotional communications; or (f) update your account profile settings.

4.2 Automated Collection. When you access the c888 platform, certain technical and usage data is collected automatically via cookies, server logs and similar tracking technologies. This data helps us maintain the security and performance of the Platform and understand how users interact with it. See Section 8 (Cookies & Tracking) for full details.

4.3 Third-Party Sources. In limited circumstances, c888 may receive data about you from third parties, including: (a) payment service providers (bKash, Nagad, Rocket, Upay) to confirm transaction status; (b) identity verification services used to authenticate KYC documents; (c) fraud prevention partners who flag suspicious account activity.

5. Purposes and Legal Basis for Processing

5.1 c888 processes your personal data only where there is a lawful basis for doing so. The table below sets out the primary purposes for which we process your data and the corresponding legal basis:

6. Data Sharing and Disclosure

6.1 c888 does not sell, rent or trade your personal data to any third party. We share your data only in the following limited and necessary circumstances:

• Payment Processors: We share transaction data (amount, mobile number, account identifier) with bKash, Nagad, Rocket and Upay solely to execute your deposit or withdrawal instruction. These processors handle your data under their own privacy policies.
• Identity Verification Providers: During KYC review, your submitted documents may be passed to a third-party verification service to authenticate their validity. These providers are contractually bound to process your data only for this stated purpose.
• Fraud & Security Partners: Aggregated or anonymised data about suspicious activity may be shared with fraud detection services. Where individual account data is involved, it is shared only to the minimum extent necessary.
• Game Technology Providers: Your gameplay and bet data may be processed by third-party game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) to render games and calculate outcomes. These providers operate as data processors under agreements with c888.
• Legal and Regulatory Authorities: c888 may disclose your personal data where required to do so by applicable law, court order or regulatory instruction. We will notify you of such disclosure where permitted to do so by law.

6.2 All third parties with whom c888 shares personal data are required to maintain appropriate technical and organisational security measures and to process your data only for the purposes for which it was shared.

7. Payment Data

7.1 When you make a deposit or withdrawal on c888 using bKash, Nagad, Rocket or Upay, your mobile banking credentials are entered directly into the respective payment provider's interface. c888 does not store your mobile banking PIN, password or OTP at any point during this process.

7.2 c888 retains a record of the transaction amount, date, time, associated mobile number and payment method for account management, dispute resolution and regulatory compliance purposes. This record does not constitute access to your mobile banking account.

7.3 In the event of a disputed transaction, c888 may share transaction records with the relevant payment provider to assist in resolution. You will be notified of any such sharing where it involves your personal data beyond standard transaction logs.

8. Cookies and Tracking Technologies

8.1 c888 uses cookies and similar technologies (local storage, session tokens, server-side logs) to operate the Platform securely and efficiently. The following categories of cookies may be set when you visit c888:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication tokens and security cookies. They cannot be disabled without breaking core platform functionality.
• Performance Cookies: Collect anonymous data about how users navigate the Platform (page views, time on page, error events). This data is used to improve the user experience and platform reliability.
• Functional Cookies: Remember your preferences such as language setting, last-visited game category and notification preferences to personalise your experience.
• Analytics Cookies: Used to understand aggregate usage patterns. Data collected is anonymised and cannot be used to identify individual users.

8.2 You may control or delete cookies via your browser settings. Please note that disabling strictly necessary cookies may prevent you from logging in or using certain features of the c888 platform.

8.3 c888 does not use third-party advertising or retargeting cookies. We do not allow advertising networks to place cookies on the c888 platform.

9. Data Retention

9.1 c888 retains your personal data for as long as your account is active and for a period thereafter as required by applicable legal, regulatory and operational obligations. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your account plus a minimum of 5 years after account closure, for regulatory compliance purposes.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of the transaction.
• Customer Support Communications: Retained for 2 years from the date of the communication, or longer if the matter relates to an active dispute.
• Technical and Usage Logs: Retained for up to 12 months in identifiable form; thereafter anonymised and retained indefinitely for aggregate analytics.
• Marketing Consent Records: Retained for the duration of your consent plus 2 years, to demonstrate compliance with consent obligations.

9.2 At the end of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data.

10. Data Security

10.1 c888 implements robust technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, alteration or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and c888 servers;
• Encryption of sensitive data fields (including identity data and financial records) at rest in our databases;
• Role-based access controls ensuring that only authorised c888 personnel can access personal data, and only to the extent required for their role;
• Regular penetration testing and security audits of the Platform's infrastructure;
• Two-factor authentication options available for player accounts;
• Automatic session expiry after periods of inactivity to prevent unauthorised access from unattended devices.

10.2 While c888 takes all reasonable steps to protect your data, no method of electronic transmission or storage is 100% secure. In the unlikely event of a data breach that poses a risk to your rights, c888 will notify affected users promptly and take all necessary remediation steps.

10.3 You are responsible for maintaining the confidentiality of your c888 account password. c888 staff will never ask you for your password via live chat, email or any other channel. If you suspect your credentials have been compromised, change your password immediately and contact [email protected].

11. Your Data Rights

11.1 As a c888 account holder, you hold the following rights with respect to your personal data:

• Right of Access: You may request a copy of all personal data c888 holds about you. Requests will be fulfilled within a reasonable period at no charge.
• Right to Rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request correction. For simple corrections (such as a phone number update), this can be done via your account settings. For identity data corrections, please contact support.
• Right to Erasure: You may request deletion of your personal data. This right is subject to legal and regulatory retention obligations — data we are required to hold by law cannot be deleted before the mandatory retention period expires.
• Right to Restrict Processing: You may request that c888 restrict the processing of your data in certain circumstances, such as while a correction request is being investigated.
• Right to Data Portability: You may request a copy of your personal data in a commonly used, machine-readable format to transfer to another service provider.
• Right to Object: You have the right to object to processing of your personal data where c888 relies on legitimate interests as the legal basis. If you object and c888 cannot demonstrate overriding legitimate grounds, processing will cease.
• Right to Withdraw Consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

11.2 To exercise any of these rights, contact our data support team at [email protected] with the subject line "Data Rights Request". We will respond within 5 business days to acknowledge your request and within 30 days to fulfil it, unless an extension is required due to the complexity of the request.

12. Children's Privacy

12.1 c888 is strictly for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If you are under 21, you must not register an account or attempt to use the c888 platform.

12.2 If c888 becomes aware that personal data has been collected from a person under 21, that account will be immediately suspended, the data will be securely deleted, and any funds deposited will be returned via the original payment method.

13. Marketing Communications

13.1 With your consent, c888 may send you promotional communications about bonuses, new games, special offers and platform updates. These communications may be delivered via SMS to your registered mobile number or via in-platform notification.

13.2 You may opt out of marketing communications at any time by contacting [email protected] with the subject line "Unsubscribe". Opting out of marketing communications does not affect the delivery of transactional messages such as deposit confirmations, withdrawal receipts or account security alerts — these are sent on the basis of contract performance and cannot be disabled while your account is active.

13.3 c888 does not share your contact details with third-party marketers or advertising networks.

14. Third-Party Links and Services

14.1 The c888 platform may contain references to third-party game providers and payment services. These third parties operate their own platforms and privacy policies, which are independent of this Policy. c888 is not responsible for the privacy practices of third-party providers. We encourage you to review the relevant privacy policy of any third-party service you interact with.

14.2 Game studios whose titles are available on c888 (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe and Ezugi) may process technical gameplay data in the course of rendering their games. This processing is governed by data processing agreements between c888 and each studio, requiring them to act only on c888's documented instructions and to maintain appropriate security standards.

15. Changes to This Privacy Policy

15.1 c888 may amend this Privacy Policy periodically to reflect changes in our data practices, applicable law or platform functionality. When material changes are made, c888 will publish the updated Policy on this page with a revised effective date and, where feasible, provide notice to registered account holders via an in-platform notification.

15.2 We encourage you to review this Policy regularly. Your continued use of the c888 platform after the effective date of any update constitutes your acceptance of the revised Policy. If you do not agree with material changes, you should cease using the Platform and close your account.

16. Contact Us

16.1 For any questions, concerns or requests relating to this Privacy Policy or the processing of your personal data by c888, please contact us using the details below:

• Email: [email protected]
• Subject Line for Data Requests: "Data Rights Request" or "Privacy Query"
• Live Chat: Available 24/7 via the c888 platform
• Response Time: Data queries acknowledged within 5 business days; fulfilled within 30 days
• Support Languages: English & Bengali

16.2 This Privacy Policy was last updated on 1 January 2026. The version published on this page is the current and operative version.