Privacy & Security

Xe66cm Privacy Policy — your data is our responsibility

Xe66cm understands that your personal information is a sensitive matter. What data we collect, why we collect it, how we store it, and who we share it with — it's all explained here in plain English.

Last updated: January 2026

Privacy Policy highlights at a glance

Before reading the full details, here are the most important things to know

Data Is Never Sold

Xe66cm never sells your personal data to third parties — not even for marketing purposes.

SSL encryption

Every transaction and login is protected with industry-leading SSL/TLS encryption. Your data cannot be intercepted during transfer.

Minimal Data Collection

Only the data needed to provide our services is collected. No unnecessary information is ever requested.

Payment details are not stored

Your mobile banking PIN and card number are never stored on xe66cm's servers. They remain secured within the payment gateway at all times.

In your control

You have the right to view, correct, and delete your personal data at any time. Simply contact support to make a request.

International Standards

Xe66cm complies with international data protection standards. Data handling practices are reviewed on a regular basis.

What data, why, and for how long — a quick reference list

A clear picture of what xe66cm collects

Data Type Reason for collection Retention Period
Name & Date of Birth Identity Verification (KYC) While Your Account Is Active
Mobile Number & Email Contact & Account Verification 5 years after account closure
Payment Method Records Transaction History & Fraud Prevention 5 years (legal obligation)
Betting & gaming history Dispute resolution & reporting 3 years
IP Address & Device Information Security & fraud detection 1 year
Support Conversations Service Improvement & Record Keeping 2 years

1

What Data Is Collected

Xe66cm collects two types of information — what you provide directly and what is automatically generated as you use the platform.

Directly provided information:

  • At registration: name, date of birth, mobile number, and email address.
  • During KYC verification: a copy of your national ID or passport, plus a selfie.
  • At the time of payment: your mobile banking number (never your PIN or password).
  • When contacting Support: details of your messages and queries.

Automatically Collected Information:

  • IP address and geographic location (down to country and city level).
  • Device type, operating system, and browser.
  • Time spent on the platform and pages visited.
  • Betting and gaming history.
  • Date and time of login and logout.

Xe66cm never collects your mobile banking PIN, card CVV, or full card number. This information is processed securely within the payment gateway and is never sent to xe66cm's servers.


2

How Your Data Is Used

Xe66cm uses the data it collects for specific purposes only, and never beyond those purposes:

  • Service delivery: Account creation, login, bet processing, payments, and withdrawal completion.
  • Identity verification: KYC processing, age verification, and fraud prevention.
  • Security: Detection of unauthorised access, money laundering, or suspicious activity.
  • Contact: Sending important updates, transaction confirmations, and support messages.
  • Promotions: Showing relevant offers and bonuses based on your preferences (you can opt out at any time).
  • Legal Obligations: Mandatory reporting required by regulatory authorities.
  • Service Improvement: Identifying problem areas and improving the platform experience.

To opt out of marketing communications such as promotional emails or SMS, go to your account settings or contact support. Essential service messages — such as password resets or withdrawal confirmations — cannot be turned off, as they exist to protect your account.


3

Who Your Data Is Shared With

Xe66cm will never sell your data under any circumstances. However, there are specific situations where data must be shared:

  • Payment Processors: Only the information necessary to complete a transaction is shared with bKash, Nagad, Rocket, or your bank.
  • KYC verifier: With authorised third-party services for identity verification purposes.
  • Security Services: Minimum necessary data shared with fraud detection software providers.
  • Legal Authorities: Where required by court order, regulatory request, or legal obligation.

Xe66cm never sells or rents your data to advertising companies, data brokers, or any other third party. This is not a conditional promise tied to bonuses or terms — it is xe66cm's fundamental policy position.

Third-party service providers who receive your data are contractually bound to uphold the same privacy standards as xe66cm. They may only use the data for the specific purpose for which it was shared.


4

Data Storage & Security Methods

Xe66cm uses multiple technical and organisational measures to keep your data secure:

  • Encryption: All data transfers are encrypted via SSL/TLS protocols. Sensitive data stored on our servers is encrypted as well.
  • Access Controls: Only authorized personnel can access specific data, and all access is logged.
  • Server Security: Physical security and firewalls at our data centers.
  • Regular Security Audits: Penetration testing and vulnerability assessments are conducted on a regular basis.
  • Backup: Data is backed up regularly and stored separately in a secured location.

In the event of a data breach or cyberattack, xe66cm will notify affected members as quickly as possible and take all necessary steps. Regulatory authorities will also be informed within the required timeframe.

Enabling two-factor authentication (2FA) on your account significantly increases your security. Go to Settings to turn it on now.


5

Cookies & Tracking Technologies

Xe66cm uses cookies and similar technologies on its website and app. Cookies are small text files stored in your browser.

Essential Cookies: For maintaining login sessions, security tokens, and core platform functionality. These cannot be disabled as the platform will not work without them.

Functional cookies: To remember your language preference, theme setting, and other user preferences. These can be disabled, though some features will no longer function as expected.

Analytical Cookies: To understand which parts of the platform are most used. This data is anonymised and aggregated — it cannot be used to identify any individual.

You can manage cookies through your browser settings. However, disabling essential cookies may cause some features to stop working correctly.


6

Your Data Rights

Every registered xe66cm member holds certain important rights over their own data. To exercise these rights, please contact Support:

Your rights over your data

You can exercise any of these rights on xe66cm at any time

Right to access

You have the right to know what information xe66cm holds about you. Submit a request to Support and a copy of your data will be provided within 30 days.

Right to Rectification

You have the right to correct any inaccurate information about you. Changes can be made through Account Settings or by contacting Support.

Right to Erasure

You may request deletion of your personal data after your account is closed — however, certain data must be retained for a defined period to meet legal obligations.

Right to restrict processing

You may request that your data not be used for specific purposes, such as opting out of marketing communications.

Right to Data Portability

You may request a copy of your data in a machine-readable format. It will be provided within 30 days.

Right to Object

You have the right to object to the use of your data for specific purposes. xe66cm will consider your objection along with the reasons provided.

To exercise these rights support@xe66cm.best. xe66cm will respond within 30 days.

7

Minor Protection

Xe66cm strictly does not serve anyone under the age of 18. Date of birth is verified at registration, and KYC age verification is carried out in any case where there is doubt.

If xe66cm becomes aware that a minor is using an account, the account will be suspended immediately and any deposited funds will be returned (excluding bonuses or winnings).

If a parent or guardian believes their child is using xe66cm, please contact support@xe66cm.best immediately. xe66cm will treat the matter as the highest priority.


8

Privacy Policy Changes

Xe66cm may update this Privacy Policy from time to time. How you are notified depends on the nature of the change:

  • Minor updates: only the "Last Updated" date at the top of the page will change.
  • Moderate changes: a notification will be shown at your next login.
  • Major changes: you will be notified in advance via your registered email.

Continued use of the platform after a policy update takes effect will be considered acceptance of the revised terms. If you do not agree with the new policy, you have the option to close your account.


9

Privacy Contact

For any questions, complaints, or rights requests related to this Privacy Policy:

Privacy Contact

Email: support@xe66cm.best | with the subject line "Privacy Request". You can also reach us in English via live chat. xe66cm aims to respond within 30 business days.

How xe66cm truly keeps your information secure

When most people think about online data security, passwords are the first thing that comes to mind. But xe66cm's security framework goes much further than that. The platform was built from the ground up to minimise the number of places where user data is stored, and to apply the highest level of protection wherever it is.

Take payments, for example. When you deposit via bKash or Nagad, the transaction is processed directly through the payment gateway. xe66cm only receives confirmation that a deposit was made and the amount — your PIN or password never reaches xe66cm's servers. This is not just a policy; it is built into the technical architecture so that xe66cm is structurally unable to access that information.

Not all xe66cm staff have access to every type of data. A support agent may be able to view your betting history to resolve an issue, but may not have permission to access copies of your identity documents — that is reserved exclusively for the KYC team. This role-based access control applies to all staff logins, and every access is logged.

Xe66cm is committed to being transparent about data retention. No data is kept indefinitely. In most cases, certain information must be retained after an account is closed due to legal obligations — this is not xe66cm's preference, but a regulatory requirement. Once that retention period expires, the data is permanently deleted.

The most important thing to remember — no xe66cm employee or representative will ever ask for your password, PIN, or OTP. If anyone requests this information in xe66cm's name, it is a scam. Report it immediately to support@xe66cm.best.

Third-Party Links & Services

The xe66cm platform may occasionally reference third-party services — such as payment providers or game suppliers. These third parties have their own privacy policies, and xe66cm is not responsible for them.

That said, xe66cm's contracts with third-party service providers explicitly require them to use member data only for the specific purposes agreed upon. Any breach of these terms results in the immediate termination of that provider relationship.

Game providers — such as Live Casino dealer software or slot game engines — typically only receive technical session data. They do not have access to your personal identity or payment information.

International Data Transfers

Xe66cm is an international platform and servers may be located in multiple countries. Your data may be processed or stored outside Bangladesh — however, this only occurs in jurisdictions with strong data protection standards.

Regardless of where your data is stored, the protections outlined in this privacy policy apply universally. Geography makes no difference — your data is held to the same standard everywhere.

SSL encryption remains active when data is transferred to international servers. Protection is maintained at every stage of the transfer.

FAQs

Frequently asked questions about VIP benefits and account verification

xe66cm's VIP program has five tiers — Bronze, Silver, Gold, Platinum, and Diamond — each unlocking a distinct set of benefits. Bronze (৳10,000 wagered) is the entry point, offering 5% weekly cashback, 8 points per ৳100 bet, and 2 tickets per weekly draw. Silver (৳50,000) raises cashback to 8%, adds a birthday bonus, and includes a monthly reload bonus. Gold (৳2,00,000) brings 12% cashback and access to exclusive live tables not available to standard members. Platinum (৳5,00,000) offers 16% cashback and a dedicated personal account manager. At the top, Diamond (৳10,00,000+) delivers 20% cashback, custom withdrawal limits, a 24/7 dedicated support line, and the maximum number of free lottery tickets. For full details, VIP View page.

xe66cm's KYC (Know Your Customer) process is completed in three steps. The first step is submitting a form of ID — a Bangladesh National ID (NID) is the simplest option, though a valid passport is also accepted. Clear photos of both the front and back of the document are required; blurry or unclear images will not be accepted. The second step is a selfie — you must take a photo holding your ID so that both your face and the document are clearly visible. In some cases, you may be asked to include a piece of paper showing the current date and the word "xe66cm" in the selfie. The third step applies to larger withdrawals, where a mobile banking screenshot may be requested to verify your payment method. Once all documents are submitted to Support via email, verification is typically completed within 24–48 hours. KYC only needs to be completed once.
🔒

Join our secure platform today

Your data is secure at xe66cm, transactions are encrypted, and English-language support is always available.

Instant deposits via bKash, Nagad & Rocket. Fast, secure withdrawals. 24/7 support.

18+ | Play Responsibly | Terms & Conditions Applicable

বাংলা