Privacy Policy — How cv666bd Collects, Uses, and Protects Your Personal Data

cv666bd collects personal data from players through several channels: the account registration process, ongoing platform use, payment transactions, identity verification procedures, and customer support interactions. The categories of personal data we collect are described in detail below.

1.1 Registration Data

When you create a Player Account on cv666bd, we collect the following information:

• Your full legal name as it appears on a government-issued identity document.
• Your date of birth, collected to verify that you meet the 18+ age requirement.
• Your mobile phone number, used for account verification, two-factor authentication, and critical account notifications.
• Your email address, used for account communications, password resets, and marketing (where consented).
• Your chosen username and password (password stored in hashed form only — never readable by cv666bd staff).
• Your residential city or district within Bangladesh, used for localisation and fraud detection purposes.

1.2 Identity Verification (KYC) Data

Prior to authorising your first withdrawal, cv666bd is required to verify your identity in accordance with our Know Your Customer (KYC) obligations. During this process, we may collect:

• A copy of your National Identity Card (NID), passport, or birth certificate.
• A recent selfie or photograph submitted alongside your identity document for liveness verification.
• Proof of address documentation where required for enhanced due diligence.
• Source of funds information where transaction volumes or patterns trigger an enhanced review under our Anti-Money Laundering (AML) policy.

1.3 Financial & Transaction Data

All deposits and withdrawals processed through cv666bd generate transaction records. We collect and retain:

• The mobile wallet number or bank account details associated with each transaction (bKash, Nagad, Rocket, Upay, or bank account).
• Transaction amounts, dates, times, and reference identifiers.
• Deposit and withdrawal history for the lifetime of the Player Account.
• Bonus claims, wagering activity records, and game session histories used for bonus verification and dispute resolution.

1.4 Technical & Usage Data

When you access and use the cv666bd Platform, our servers automatically record certain technical information:

• IP address and approximate geolocation derived from the IP address.
• Device type, operating system, browser type, and browser version.
• Pages visited, time spent on each page, game sessions initiated, and navigation paths through the Platform.
• Session tokens and cookie data (see the Cookies section for full details).
• Referral source — the URL or channel through which you arrived at cv666bd.

1.5 Customer Support Data

When you contact the cv666bd support team via live chat, email, or any other communication channel, we retain a record of that interaction. This includes the content of your messages, any attachments you send, the date and time of the interaction, and the resolution outcome. These records are retained to ensure service continuity, for staff training purposes, and for dispute resolution.

cv666bd processes personal data only for specific, legitimate, and clearly defined purposes. We do not process personal data in any manner that is incompatible with the purposes for which it was collected. The lawful bases and purposes for our data processing activities are set out below.

2.1 Contract Performance

The primary legal basis for processing most of your personal data is the performance of the contract between you and cv666bd — specifically, the Terms and Conditions you agreed to upon registration. Under this basis, we process your data to:

• Create, maintain, and administer your Player Account.
• Process deposits and withdrawals via your registered payment method (bKash, Nagad, Rocket, or bank account).
• Verify your eligibility to play, including age verification (18+ requirement) and identity confirmation.
• Deliver bonuses, promotional credits, and free spins to qualifying accounts.
• Provide customer support and resolve disputes or complaints relating to your account or game outcomes.

2.2 Legal and Regulatory Compliance

cv666bd is required by law to collect and retain certain personal data. Under this basis, we process your data to:

• Conduct KYC identity and age verification as required by our AML obligations.
• Detect, investigate, and report suspected financial crime, fraud, or money laundering.
• Maintain transaction records for the minimum periods required by applicable financial record-keeping regulations.
• Respond to lawful requests from courts, law enforcement agencies, or regulatory bodies.

2.3 Legitimate Interests

Where we rely on legitimate interests as our processing basis, we have assessed that our interests do not override your fundamental privacy rights. Under this basis, we process your data to:

• Detect and prevent fraud, account takeover, and bonus abuse through analysis of usage patterns and transaction data.
• Monitor and improve Platform performance, stability, and user experience through aggregated analytics data.
• Send you important service notifications relating to your account, including security alerts and policy updates.
• Conduct internal research and product development to enhance the cv666bd gaming and betting offering for Bangladeshi players.

2.4 Consent-Based Processing

Where we rely on your consent as the processing basis — specifically for marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. Under this basis, and only where you have expressly opted in, we process your data to:

• Send promotional emails and SMS messages about new games, seasonal offers, BPL cricket betting promotions, and platform updates.
• Personalise the promotional content displayed to you on the Platform based on your game preferences and betting history.

You may withdraw marketing consent at any time by clicking the unsubscribe link in any marketing email, by sending an opt-out SMS in response to a marketing message, or by contacting support@cv666bd with the subject line "Marketing Opt-Out".

cv666bd does not sell, rent, or trade your personal data to any third party. However, in order to operate the Platform effectively and meet our legal obligations, we share limited personal data with a small number of carefully selected third-party service providers and, where required by law, with competent authorities.

3.1 Authorised Third-Party Processors

The following categories of third parties may receive limited personal data from cv666bd in the course of providing services to us. All third-party processors are contractually bound to use your data only for the specified purpose and to protect it with equivalent or greater security standards:

• Payment Processing Partners: bKash, Nagad, Rocket, Upay, and banking partners receive transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are independent data controllers in respect of transactions processed through their own systems.
• Identity Verification Providers: Our KYC verification partner receives copies of identity documents and photographs submitted during the verification process. This data is used solely for the purpose of confirming your identity and age and is not used for any other purpose.
• Game Software Providers: Game studios and software providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) receive a pseudonymous player identifier and session token to enable game play. They do not receive your full name, contact details, or financial information.
• Cloud Infrastructure Providers: Our hosting and data storage infrastructure providers maintain the servers on which Platform data, including personal data, is stored. These providers operate under strict data processing agreements and have no independent right to access or use your personal data.
• Customer Support Platform: Our live chat and support ticket system provider processes the content of support interactions in order to deliver support services to you.

3.2 Legal Disclosures

cv666bd may disclose personal data to law enforcement agencies, courts, regulators, or other competent authorities where we are required to do so by applicable law, court order, or regulatory direction. We will notify affected players of such disclosures where we are legally permitted to do so. Where we are prohibited from providing such notification — for example, where a disclosure is made pursuant to an active fraud or financial crime investigation — we will retain a record of the disclosure internally.

cv666bd uses cookies and similar tracking technologies to ensure the Platform functions correctly, to maintain the security of your session, and to understand how players use the Platform so that we can improve it. This section explains what cookies we use, why we use them, and how you can manage your cookie preferences.

4.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits, to maintain your login session, and to store your preferences. Cookies cannot execute code, carry viruses, or access files stored elsewhere on your device.

4.2 Cookies Used by cv666bd

4.3 Managing Cookies

Most modern browsers allow you to control cookie behaviour through the browser's settings menu. You can typically choose to block all cookies, block third-party cookies only, or delete existing cookies. Please note that blocking essential session cookies will prevent you from logging in to the cv666bd Platform, as these cookies are technically necessary for secure account access. Blocking analytics or preference cookies will not affect your ability to use the Platform but may result in a degraded experience. Instructions for managing cookies in common browsers are available through the browser's own help documentation.

cv666bd retains personal data only for as long as it is necessary to fulfil the purposes for which it was collected or as required by applicable law. The retention periods applicable to different categories of personal data are outlined below.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised, aggregated data (from which no individual can be identified) may be retained indefinitely for statistical and analytical purposes.

As a player on the cv666bd Platform, you hold several important rights in respect of your personal data. cv666bd is committed to honouring these rights promptly and without creating unnecessary barriers. All data rights requests should be submitted in writing to support@cv666bd with the subject line "Data Rights Request".

6.1 Right of Access

You have the right to request a copy of all personal data that cv666bd holds about you. Upon a verified request, we will provide a structured summary of your personal data within 30 days. This includes your registration data, transaction history, KYC records (excluding third-party processing records), and support interaction logs.

6.2 Right to Rectification

If any personal data held by cv666bd is inaccurate or incomplete, you have the right to request its correction. Minor corrections — such as a misspelled name or an outdated mobile number — can often be made directly through your account settings. For corrections to KYC documents or identity records, please contact our support team with the correct information and supporting documentation.

6.3 Right to Erasure

You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent and no other lawful basis applies, or where the data has been unlawfully processed. Please note that cv666bd is not able to delete data that it is legally required to retain — such as transaction records and KYC documents subject to AML retention obligations. We will inform you of which data can and cannot be deleted at the time of your request.

6.4 Right to Restrict Processing

In certain circumstances — for example, while a data accuracy dispute is being resolved — you may request that cv666bd restricts the processing of your personal data to storage only. During a restriction period, we will not use the restricted data for any purpose other than storing it securely pending resolution of the dispute.

6.5 Right to Object to Marketing

You have an absolute right to object to the processing of your personal data for direct marketing purposes at any time. Upon receipt of a marketing objection, cv666bd will cease all marketing communications to you within 5 business days (Bangladesh Standard Time). Your account and all non-marketing processing will remain unaffected.

6.6 Right to Data Portability

Where we process your personal data on the basis of consent or contract performance, and the processing is carried out by automated means, you have the right to receive a copy of your data in a structured, commonly used, and machine-readable format. This right applies primarily to your account registration data and transaction history.

cv666bd employs a comprehensive set of technical, organisational, and procedural security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Our security programme is reviewed and updated regularly to address emerging threats.

7.1 Technical Safeguards

• Transport Layer Security (TLS): All data transmitted between your device and the cv666bd Platform is encrypted using TLS 1.2 or higher (256-bit encryption), preventing interception by third parties.
• Password Hashing: Player passwords are stored using bcrypt one-way hashing with a per-password salt. No cv666bd employee can read your password. If you forget your password, it must be reset — not retrieved.
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA on their accounts. When enabled, login requires both your password and a one-time code sent to your registered mobile number.
• Automated Threat Detection: Our platform systems continuously monitor for anomalous access patterns, unusual transaction volumes, and signs of account compromise, triggering automated security responses where threats are detected.
• Data Segregation: Personal data, financial records, and game data are stored in logically segregated environments with strict access controls, reducing the risk of a single point of compromise affecting all data categories.

7.2 Organisational Safeguards

• Access to personal data is restricted on a strict need-to-know basis. Only those staff members whose role requires access to specific data categories are granted that access.
• All staff with access to personal data are required to complete data protection and information security training upon joining cv666bd and on an annual basis thereafter.
• Third-party service providers are assessed for data security practices before engagement and are required to sign Data Processing Agreements committing them to equivalent security standards.

7.3 Data Breach Response

In the event of a personal data breach that poses a risk to the rights and freedoms of affected players, cv666bd will take immediate containment action, conduct a thorough investigation, and notify affected players without undue delay. Notifications will be sent to the email address registered on the affected account and will include a description of the breach, the categories of data involved, the likely consequences, and the steps cv666bd is taking to address the breach and prevent recurrence.

cv666bd reserves the right to update or amend this Privacy Policy at any time. We will publish the revised policy on this page with an updated effective date. Where changes are material — meaning they significantly affect how we process your personal data or reduce your privacy rights — we will notify registered players by email at least 14 days before the changes take effect. Your continued use of the cv666bd Platform after the effective date of any amendment constitutes your acknowledgement of the updated Privacy Policy.

We recommend reviewing this Privacy Policy periodically so that you remain informed about how cv666bd collects, uses, and protects your personal data. The "Last updated" date at the top of each section is your reference point for the most recent revision.

8.1 How to Contact Us About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by cv666bd, please contact our data privacy team using the following details:

• Email: support@cv666bd — subject line "Privacy Enquiry" or "Data Rights Request"
• Live Chat: Available 24/7 on the cv666bd Platform for general privacy questions
• Response Time: We aim to respond to all privacy-related enquiries within 5 business days (Bangladesh Standard Time, BST UTC+6)
• Formal Requests: Data access, rectification, erasure, and portability requests will be acknowledged within 2 business days and fulfilled within 30 days of identity verification