cx777 Privacy Policy — How We Protect Your Personal Data

Introduction and Scope

This Privacy Policy ("Policy") describes how cx777 ("the Platform", "we", "us", "our") collects, uses, stores, shares, and protects the personal data of individuals ("you", "Player", "User") who access or use the cx777 website located at https://cx777.io and any associated services, applications, or features offered through the platform.

This Policy applies to all registered players, prospective players who browse the cx777 platform without registering, and any individual who contacts cx777 through its support channels. By accessing the cx777 platform and using its services, you acknowledge that you have read this Policy and consent to the processing of your personal data as described herein.

cx777 operates primarily to serve players located in Bangladesh. The platform is an English-language service and all privacy communications are provided in English. References to "personal data" in this Policy mean any information relating to an identified or identifiable natural person, consistent with recognised international data protection standards.

Data We Collect

cx777 collects the following categories of personal data in connection with your use of the platform:

cx777 does not collect sensitive categories of personal data such as health information, religious beliefs, political opinions, or biometric data except where expressly required by applicable law or where you voluntarily disclose such information in a support communication.

How We Collect Your Data

cx777 collects personal data through the following methods:

• Directly from you — when you complete the registration form, submit KYC documents, add a payment method, place a bet, contact support, or update your account profile.
• Automatically — through cookies, web beacons, server-side logs, and analytics tools that record technical and behavioural data as you interact with the cx777 platform.
• From payment providers — when you initiate a deposit or withdrawal, your payment provider (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, Mastercard) may transmit transaction confirmation data to cx777 to reconcile the transaction in your account.
• From identity verification services — cx777 may use third-party KYC and identity verification tools to cross-check the documents you submit. These services return a verification outcome (pass/fail/flag) and may process your document data on cx777's behalf.
• From fraud and risk management services — cx777 uses third-party risk tools that analyse device fingerprints, IP geolocation data, and behavioural patterns to detect suspicious or fraudulent activity.

How We Use Your Data

cx777 uses the personal data it collects for the following purposes:

• Account Management: To create, maintain, and administer your cx777 player account, including processing your registration, verifying your identity, and managing your account preferences.
• Payment Processing: To facilitate deposits via bKash, Nagad, Rocket, Upay, and bank transfer, and to process withdrawal requests to your verified payment method in Bangladeshi Taka (BDT).
• Identity and Age Verification: To verify that you are aged 21 or over and that your identity matches the details provided during registration, in compliance with cx777's responsible gaming and anti-fraud obligations.
• Regulatory Compliance: To comply with anti-money-laundering (AML) obligations, record-keeping requirements, and any other applicable legal or regulatory obligations. This includes retaining transaction records and KYC documentation for the periods prescribed by law.
• Customer Support: To respond to your support enquiries, resolve complaints, process responsible gaming requests (such as self-exclusion or deposit limit setting), and communicate account-related updates.
• Platform Security and Fraud Prevention: To detect, investigate, and prevent fraudulent activity, unauthorised account access, bonus abuse, and any other prohibited conduct described in the cx777 Terms and Conditions.
• Personalisation and Analytics: To analyse how players use the cx777 platform, identify areas for improvement, personalise game recommendations, and ensure a consistent user experience across devices.
• Responsible Gaming Monitoring: To monitor player behaviour patterns that may indicate problem gambling activity, trigger responsible gaming tool prompts, and fulfil cx777's duty of care obligations to players.
• Marketing Communications: Where you have provided explicit consent, to send you promotional offers, bonus notifications, tournament announcements, and seasonal promotions relevant to your interests as a cx777 player in Bangladesh. You may withdraw consent at any time by contacting [email protected].

Legal Basis for Processing

cx777 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between cx777 and you as a registered player — including account creation, payment processing, bet settlement, and customer support.
• Legal Obligation: Processing required to comply with applicable legal obligations, including KYC verification, AML record-keeping, and age verification requirements.
• Legitimate Interests: Processing undertaken in cx777's legitimate interests, including fraud detection, platform security, responsible gaming monitoring, and analytics — provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — principally for marketing communications. You may withdraw your consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

Data Sharing and Disclosure

cx777 does not sell, rent, or trade your personal data. We may share your data with the following categories of third parties, strictly as necessary to operate the cx777 platform:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — for the purpose of processing deposit and withdrawal transactions.
• Identity Verification and KYC Providers: Third-party KYC service providers who process your identity documents on cx777's behalf to perform age and identity verification checks.
• Game Content Providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe may receive your player session token and game-play data to facilitate game delivery. These providers operate under their own data protection standards and are certified by independent auditors.
• IT Infrastructure and Cloud Service Providers: Hosting, database, and content delivery providers who process data on cx777's behalf under binding data processing agreements.
• Fraud and Risk Management Providers: Third-party tools that analyse technical and behavioural signals to detect fraudulent or suspicious activity on the cx777 platform.
• Law Enforcement and Regulatory Bodies: Where cx777 is required by law, court order, or regulatory instruction to disclose personal data to a competent authority, it will do so. cx777 will notify you of such a disclosure where legally permitted to do so.

All third-party service providers who receive personal data from cx777 are required to process that data only for the specified purpose, maintain appropriate security standards, and not disclose it to further parties without cx777's prior written consent.

Cookies and Tracking Technologies

cx777 uses cookies and similar tracking technologies to deliver a functional, personalised, and secure user experience. The following cookie categories are used on the cx777 platform:

You may manage or disable non-essential cookies through your browser settings. Please note that disabling essential cookies will impair your ability to log in and use core cx777 platform features. cx777 does not use third-party advertising cookies or cross-site tracking cookies for the purpose of serving advertisements on external websites.

Data Retention

cx777 retains personal data for the following periods, after which data is securely deleted or irreversibly anonymised:

• Active Account Data: Retained for the duration of your account being open and active on the cx777 platform.
• Closed Account Data: Following account closure, cx777 retains identity data, KYC documents, transaction records, and communication logs for a minimum of five (5) years to satisfy AML, fraud investigation, and legal record-keeping obligations.
• Marketing Consent Records: Retained for three (3) years from the date consent was given or last confirmed, to demonstrate compliance with consent obligations.
• Support Communications: Retained for three (3) years following the resolution of the relevant support case, or longer if the matter is subject to ongoing legal proceedings.
• Server Logs and Technical Data: Retained for up to twelve (12) months for security monitoring and fraud investigation purposes, then automatically purged.

Where retention beyond these periods is required by a specific legal obligation or ongoing investigation, cx777 will retain the relevant data until that obligation is fulfilled or the investigation is resolved.

Your Data Rights

As a player whose personal data is processed by cx777, you hold the following rights in relation to that data. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request". cx777 will acknowledge your request within 72 hours and respond in full within 30 days.

• Right of Access: You may request a copy of all personal data cx777 holds about you, along with information about how it is being processed.
• Right to Rectification: You may request the correction of any inaccurate or incomplete personal data held about you.
• Right to Erasure ("Right to Be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to cx777's legal retention obligations. Note that data subject to AML or legal record-keeping requirements cannot be erased before the applicable retention period expires.
• Right to Restriction of Processing: You may request that cx777 restrict the processing of your data in certain circumstances — for example, while a rectification request is being assessed.
• Right to Data Portability: You may request that cx777 provide your personal data in a structured, machine-readable format, or transmit it directly to another service provider where technically feasible.
• Right to Object: You may object to processing based on cx777's legitimate interests, including profiling for responsible gaming monitoring or personalisation purposes. cx777 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time by emailing [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

Children and Minors

The cx777 platform is strictly for adults aged 21 years and over. cx777 does not knowingly collect, process, or store the personal data of any individual under the age of 21. If cx777 becomes aware that personal data has been collected from a person under the age of 21, it will immediately delete that data and close the associated account.

If you are a parent or guardian and believe that a minor has registered on the cx777 platform or submitted personal data without your consent, please contact cx777 immediately at [email protected]. cx777 takes the protection of minors very seriously and will act promptly to investigate and resolve any such report.

Security Measures

cx777 implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• SSL/TLS Encryption: All data in transit between your device and cx777's servers is encrypted using TLS 1.2 or higher.
• Encrypted Storage: Sensitive data fields — including payment account numbers, NID references, and KYC document files — are stored in encrypted form at rest.
• Access Controls: Access to personal data within cx777's internal systems is restricted to authorised personnel on a strict need-to-know basis. All internal access is logged and reviewed periodically.
• Two-Factor Authentication (2FA): cx777 offers 2FA for player accounts to provide an additional layer of login security beyond username and password.
• Regular Security Audits: cx777's platform and infrastructure undergo periodic security assessments to identify and address vulnerabilities before they can be exploited.
• Incident Response: cx777 maintains a documented data breach response procedure. In the event of a breach affecting your personal data, cx777 will notify affected players without undue delay and take immediate steps to contain and remediate the incident.

While cx777 takes all reasonable steps to protect your data, no internet-based platform can guarantee absolute security. You are encouraged to use a strong, unique password for your cx777 account and to enable 2FA to reduce the risk of unauthorised access.

Changes to This Policy

cx777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in legal requirements, regulatory guidance, platform features, or data processing practices. When a material change is made, cx777 will notify registered players via the email address on file at least 14 days before the change takes effect, and will publish the updated Policy at https://cx777.io/privacy-policy with a revised "Last Updated" date.

Your continued use of the cx777 platform after the effective date of a revised Policy constitutes your acceptance of the changes. If you do not agree with the revised Policy, you must stop using the platform and contact [email protected] to request account closure and withdrawal of any available balance.

Previous versions of this Privacy Policy are available upon request by emailing [email protected] with the subject line "Privacy Policy — Historical Version Request".

Contact and Data Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or cx777's data processing practices, please contact the cx777 support team. All data-related enquiries should be submitted by email. cx777 customer support operates 24 hours a day, 7 days a week, including Bangladesh public holidays.

Support Email: [email protected]

Subject Line for Data Requests: Data Rights Request

Platform URL: https://cx777.io

Response Commitment: cx777 will acknowledge data enquiries within 72 hours and provide a full response within 30 days. For complex data rights requests requiring extensive investigation, cx777 may extend this period by a further 30 days with written notice.