Your Privacy Matters at cv66c — Here Is How We Protect It

cv66c is Bangladesh's trusted online casino and sports betting platform, serving players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. As a platform that handles real-money transactions, identity verification, and sensitive account data, we take our data protection responsibilities extremely seriously.

This Policy applies to all personal data collected through the cv66c website (https://cv66c.bio), including data collected during registration, KYC verification, deposits, withdrawals, gameplay, customer support interactions, and marketing communications. It covers data collected via desktop browsers, mobile browsers, and any other access channel supported by the cv66c platform.

cv66c is committed to handling all personal data lawfully, fairly, and transparently. We apply security measures appropriate to the sensitivity of the data we hold, and we give our players meaningful control over their own information.

cv66c collects personal data through several channels during the course of our relationship with you. The categories of data we collect are as follows:

We do not collect sensitive personal data such as biometric data, health records, or political opinions. We do not collect data from children; our platform is strictly for individuals aged 21 and above.

cv66c uses the personal data it collects strictly for the following purposes. We do not use your data in any way that is incompatible with the purpose for which it was originally collected without first obtaining your specific consent:

• Account Management: To create, maintain, and administer your cv66c player account, including processing your login credentials and account settings.
• Identity Verification: To verify your age (21+) and identity in compliance with KYC requirements before processing withdrawals or granting access to certain platform features.
• Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank, and to maintain an accurate transaction record for your account.
• Platform Delivery: To provide access to casino games (slots, live dealer tables, virtual games) and sports betting markets (cricket BPL, IPL, T20, football, kabaddi, and others).
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible Gaming: To monitor gambling patterns that may indicate problem gambling behaviour, and to apply any deposit limits, session limits, or self-exclusion requests you have submitted.
• Customer Support: To respond to your queries, complaints, and support requests submitted via live chat, email, or WhatsApp.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — but only if you have opted in to receive such communications. You may opt out at any time through Account Settings or by contacting support.
• Platform Improvement: To analyse aggregated, anonymised usage data for the purpose of improving the cv66c platform's performance, user experience, and game selection.
• Legal Compliance: To comply with applicable legal and regulatory obligations, including responding to lawful requests from authorities.

cv66c processes your personal data on one or more of the following legal grounds, depending on the specific processing activity in question:

• Contractual Necessity: Processing that is necessary to fulfil the contract between you and cv66c — i.e., to provide the platform services you have signed up for. This covers account management, game delivery, and payment processing.
• Legal Obligation: Processing required to comply with applicable legal obligations, including KYC/AML requirements, fraud prevention duties, and responses to lawful authority requests.
• Legitimate Interests: Processing for purposes that are in cv66c's legitimate business interests and do not override your fundamental rights — including platform security, fraud detection, and aggregated analytics for service improvement.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

cv66c does not sell, rent, or commercially exploit your personal data to any third party. We share personal data only in the following strictly controlled circumstances:

• Payment Processors: Your financial data (wallet numbers, transaction amounts) is shared with bKash, Nagad, Rocket/DBBL, Upay, and banking partners solely for the purpose of processing your deposit or withdrawal transaction. These partners operate under their own data protection policies and are bound by contractual data processing agreements with cv66c.
• KYC Verification Partners: Identity documents submitted for verification may be shared with third-party KYC/identity verification service providers, who process this data under a data processing agreement with cv66c and are prohibited from using it for any other purpose.
• Game Providers: Aggregated, non-personally-identifiable session data may be shared with licensed game providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) for the purpose of game integrity monitoring and technical fault resolution.
• Legal and Regulatory Authorities: cv66c may disclose personal data to law enforcement, financial intelligence units, or other competent authorities where required to do so by law or in response to a valid legal order. We will notify you of such disclosure unless prohibited by law from doing so.
• Business Transfers: In the event of a merger, acquisition, or sale of cv66c's business assets, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and given the opportunity to request deletion of your data.

cv66c uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file stored on your device when you visit the cv66c website. The following categories of cookies are used:

• Essential Cookies: Required for the platform to function correctly. These include session cookies that keep you logged in during your visit, security tokens that protect against cross-site request forgery (CSRF), and cookies that maintain your game state. These cookies cannot be disabled without affecting platform functionality.
• Preference Cookies: Store your language preference, display settings, and notification choices so that the platform remembers your settings between visits.
• Analytics Cookies: Collect anonymised, aggregated data about how players use the cv66c platform — including which pages are visited most frequently, average session duration, and device types. This data is used to improve the platform and does not identify individual players.
• Security Cookies: Used to detect and prevent fraudulent logins, bot activity, and unusual session behaviour. These cookies are essential for platform security.

cv66c does not use third-party advertising cookies, social media tracking pixels, or retargeting cookies. You can manage cookie preferences through your browser settings; however, disabling essential cookies will prevent you from logging in or playing games on the platform.

cv66c implements technical and organisational security measures appropriate to the nature and sensitivity of the personal data we process. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and cv66c's servers is encrypted using industry-standard SSL/TLS protocols, preventing interception by third parties.
• Encrypted Data Storage: Sensitive data fields — including passwords (stored as salted hashes), financial identifiers, and identity document references — are encrypted at rest in our databases.
• Access Controls: Access to personal data within cv66c's systems is restricted to authorised personnel on a need-to-know basis. All staff with access to personal data are subject to confidentiality obligations.
• Two-Factor Authentication: cv66c supports two-factor authentication (2FA) for player accounts as an optional but strongly recommended additional security layer.
• Security Monitoring: cv66c's systems are monitored continuously for unusual activity, unauthorised access attempts, and potential security incidents.
• Incident Response: In the event of a data breach that poses a risk to your rights and freedoms, cv66c will notify affected players via their registered email address within 72 hours of becoming aware of the breach.

cv66c retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be associated with an individual player. Anonymised, aggregated data may be retained indefinitely for statistical and platform improvement purposes.

As a cv66c player, you have the following rights with respect to the personal data we hold about you. To exercise any of these rights, submit a written request to [email protected] with your registered email address and a description of your request. We will respond within 10 business days:

• Right of Access: You may request a copy of all personal data cv66c holds about you, including account data, transaction history, and any KYC documents on file. We will provide this in a structured, commonly used format.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (such as updating a phone number) can be made directly through Account Settings.
• Right to Erasure: You may request deletion of your personal data. We will honour this request subject to our legal obligations — data required for AML compliance or financial record-keeping cannot be deleted before its minimum statutory retention period has elapsed.
• Right to Restrict Processing: You may request that we restrict the processing of your data in certain circumstances — for example, while a data accuracy dispute is being resolved.
• Right to Data Portability: You may request that we provide your personal data in a machine-readable format (JSON or CSV) so that you can transfer it to another service provider.
• Right to Object: You may object to processing based on our legitimate interests, including profiling for fraud detection. We will review and respond to objections on a case-by-case basis.
• Right to Withdraw Consent: Where processing is based on your consent (primarily marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

The cv66c platform is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. Registration by minors is a serious violation of our Terms & Conditions and is actively prevented through our age verification processes.

If cv66c becomes aware that a minor has successfully registered an account and provided personal data, we will immediately suspend the account, delete all associated personal data as quickly as our legal obligations permit, and reverse any transactions processed in connection with that account. If you are a parent or guardian and you believe your child has registered a cv66c account, please contact us immediately at [email protected] so we can take prompt corrective action.

The cv66c platform may contain references to third-party service providers such as payment partners (bKash, Nagad, Rocket) and game providers (Pragmatic Play, Evolution Gaming, and others). While these integrations are necessary for platform functionality, cv66c is not responsible for the privacy practices of these third parties.

When you initiate a deposit or withdrawal via a mobile banking service such as bKash or Nagad, you will interact with that provider's own interface, which is subject to that provider's own privacy policy and terms of service. We encourage you to review the privacy policies of any third-party service you use in connection with your cv66c account.

cv66c does not embed third-party social media widgets, advertising scripts, or analytics platforms from outside our controlled service ecosystem. Any technical integrations present on the platform are limited to those necessary for game delivery, payment processing, and platform security.

cv66c reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. When material changes are made, we will notify registered players via the email address on file at least 7 days before the updated Policy takes effect.

Non-material changes — such as typographical corrections, structural reformatting, or clarifications that do not alter player rights — may be made without prior notice. The "Last updated" date displayed at the top of this Policy will always reflect the date of the most recent revision. We recommend reviewing this Policy periodically to stay informed about how cv66c protects your data. Continued use of the platform after the effective date of any update constitutes acceptance of the revised Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or to cv66c's handling of your personal data, please contact our support team through the following channels. All privacy-related communications should be submitted in writing to ensure a clear record:

• Email: [email protected] — for data access requests, erasure requests, rectification requests, and privacy concerns. Include "Privacy Request" in the subject line.
• Live Chat: Available 24/7 on the cv66c platform for general privacy queries. For formal data requests, follow-up by email is recommended.
• Support Hours: 9 AM – 11 PM BST (UTC+6) for WhatsApp and live agent support. Automated live chat is available around the clock.
• Response Time: cv66c will acknowledge all privacy-related requests within 2 business days and aim to resolve them within 10 business days of receiving all necessary information.

We are committed to resolving all privacy concerns promptly and fairly. If you are not satisfied with our response to a data-related request or complaint, you have the right to escalate the matter through appropriate legal channels in your jurisdiction.