cvv66 Privacy Policy

This Privacy Policy ("Policy") is published by cvv66 ("cvv66", "we", "us", "our"), the operator of the online casino and sports betting platform accessible at https://cvv66.onl and all associated sub-domains and mobile interfaces (collectively, "the Platform"). This Policy describes how we collect, use, store, and protect personal data relating to registered users, visitors, and prospective customers ("you", "your") who interact with the Platform.

cvv66 serves players throughout Bangladesh, including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, and all 64 districts. We recognise that our users trust us with sensitive personal and financial data, and we take that responsibility seriously. This Policy is designed to give you clear, transparent information about your privacy so you can make informed decisions about your use of the Platform.

This Policy should be read together with our Terms & Conditions and our Responsible Gaming policy, both of which form part of the overall agreement between you and cvv66.

cvv66 collects the following categories of personal data in connection with the operation of the Platform and the provision of our services:

We only collect personal data that is adequate, relevant, and limited to what is necessary for the purposes for which it is processed. We do not collect special categories of sensitive personal data (such as health data, racial or ethnic origin, or religious beliefs) except where strictly required by applicable law or responsible gaming obligations.

cvv66 collects personal data through the following channels:

• Direct Interaction: Data you provide when registering an account, completing identity verification, making a deposit or withdrawal, contacting customer support, or responding to promotions.
• Automated Technologies: Technical and usage data collected automatically when you access the Platform, including through cookies, server logs, pixel tags, and similar tracking technologies. See Section 7 for full details on cookies.
• Payment Processors: Transaction confirmation data received from mobile financial service providers including bKash, Nagad, Rocket, and Upay when you initiate a deposit or withdrawal.
• Identity Verification Partners: Where we use third-party KYC service providers to assist with age and identity verification, we may receive verification status and document authenticity data from those partners.
• Fraud Prevention Services: Data from third-party risk and fraud monitoring tools that help us detect suspicious activity, money laundering patterns, and account security threats.

cvv66 uses the personal data we collect for the following purposes:

• Account Administration: Creating and managing your cvv66 account, processing registration, verifying your identity, and maintaining your account preferences.
• Service Delivery: Enabling access to casino games, sports betting markets, live dealer tables, and all other Platform features available to registered users.
• Payment Processing: Executing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment methods; reconciling transaction records; and detecting payment fraud.
• Legal Compliance: Meeting our obligations under applicable anti-money laundering (AML) regulations, including customer due diligence, transaction monitoring, and suspicious activity reporting.
• Responsible Gaming: Monitoring your gaming activity to identify indicators of problem gambling, applying requested account restrictions such as deposit limits and self-exclusion, and fulfilling our duty of care obligations.
• Security & Fraud Prevention: Detecting, investigating, and preventing fraudulent transactions, unauthorised account access, collusion, and other forms of abuse.
• Customer Support: Responding to your queries, resolving disputes, and improving the quality of our support services through interaction review.
• Marketing & Personalisation: Sending promotional communications, bonus notifications, and personalised game recommendations where you have given consent, and managing your marketing preferences.
• Analytics & Product Development: Analysing aggregated usage patterns to improve Platform performance, game selection, and user experience.

We will not use your personal data for any purpose that is incompatible with the purposes listed above without first providing you with appropriate notice and, where required, obtaining your consent.

cvv66 processes your personal data on the following legal grounds:

• Contractual Necessity: Processing required to perform our contract with you — principally, operating your account and delivering the gaming and betting services you have requested.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including AML/CFT obligations, age verification requirements, and tax reporting duties.
• Legitimate Interests: Processing carried out for our legitimate business interests, including fraud detection, security monitoring, and service improvement, where those interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for direct marketing communications. You may withdraw consent at any time by contacting our support team or updating your account preferences.

cvv66 does not sell, rent, or trade your personal data to unaffiliated third parties for their own marketing purposes. We may share your data with the following categories of recipients, and only to the extent necessary for the stated purpose:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, and other payment partners, solely for the purpose of processing your transactions.
• Identity Verification Partners: Third-party KYC and age-verification service providers who assist us in confirming your identity and eligibility to use the Platform.
• Game Content Providers: Software studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session data required to deliver their game content within the Platform.
• Fraud & Risk Management Services: Specialist third-party providers who help us detect and prevent fraudulent activity, money laundering, and account security threats.
• Legal & Regulatory Authorities: Law enforcement agencies, regulatory bodies, or courts where we are required by law to disclose information or where disclosure is necessary to protect the legal rights of cvv66 or third parties.
• Professional Advisers: Lawyers, accountants, auditors, and insurers who provide professional services to cvv66 under obligations of confidentiality.

cvv66 uses cookies and similar tracking technologies to operate the Platform, enhance your experience, and collect usage data. A cookie is a small text file stored on your device when you visit a website. We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session authentication cookies, security tokens, and load-balancing cookies. These cookies cannot be disabled without preventing you from using the Platform.
• Functional Cookies: Used to remember your preferences, such as language settings and game lobby layout choices, so you do not need to reset them on each visit.
• Analytics Cookies: Used to collect aggregated, anonymised data about how users navigate the Platform, which pages are visited most frequently, and where users encounter difficulties. This data helps us improve the Platform.
• Marketing Cookies: Used to track the effectiveness of our promotional campaigns and to deliver relevant offers to users who have consented to marketing communications. These cookies are only placed where you have given consent.

You may manage cookie preferences through your browser settings. Disabling certain non-essential cookies may affect your experience on the Platform, but will not prevent you from accessing core gaming and betting features once authenticated.

cvv66 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

• Active Account Data: Retained for the full duration of your account relationship with cvv66 and for a period of five (5) years following account closure, to meet AML record-keeping and audit trail requirements.
• Transaction Records: Financial transaction data, including deposit and withdrawal histories, is retained for a minimum of seven (7) years in accordance with standard financial record-keeping obligations.
• KYC & Identity Documents: Identity verification documents are retained for five (5) years following account closure or the last transaction, whichever is later.
• Customer Support Records: Support interaction logs, chat transcripts, and email correspondence are retained for three (3) years from the date of the interaction.
• Marketing Data: Where you have consented to marketing communications, your marketing preferences and contact details are retained until you withdraw consent, after which they are suppressed (not deleted, to ensure we do not contact you again) for a period consistent with legal requirements.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with you as an individual.

cvv66 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and the cvv66 servers is encrypted using industry-standard SSL/TLS protocols. You can verify this by the padlock symbol in your browser's address bar when accessing the Platform.
• Password Hashing: Account passwords are stored using strong one-way cryptographic hashing algorithms. cvv66 staff cannot view your password in plain text.
• Two-Factor Authentication (2FA): Optional OTP-based two-factor authentication is available for all accounts and is strongly recommended to protect against unauthorised login.
• Access Controls: Access to personal data within cvv66's internal systems is restricted on a strict need-to-know basis. Staff with access to personal data are bound by confidentiality obligations.
• Regular Security Audits: The Platform undergoes periodic security assessments and penetration testing to identify and remediate vulnerabilities.
• Fraud Monitoring: Automated systems monitor account activity in real time for indicators of fraud, account takeover, and money laundering.

Subject to applicable law and certain exceptions, you have the following rights in relation to the personal data cvv66 holds about you:

• Right of Access: You may request a copy of the personal data we hold about you, along with information about how it is used and with whom it is shared.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data we hold about you. Some data (such as your registered name) can be updated directly in your account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal obligations to retain certain records.
• Right to Restriction: You may request that we restrict the processing of your personal data in certain circumstances, for example while a dispute about its accuracy is being resolved.
• Right to Object: You may object to the processing of your personal data where we rely on legitimate interests as the legal basis, and where your particular circumstances mean the processing should not continue.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, please contact the cvv66 support team via the live chat function within the Platform or by email at [email protected]. We will respond to all verifiable requests within a reasonable timeframe. We may need to verify your identity before processing your request.

The cvv66 Platform is strictly for adults aged 21 years and above. We do not knowingly collect, process, or store personal data relating to any individual under the age of 21. Age verification is a mandatory step in the registration process, and enhanced verification checks are applied to accounts where there is any uncertainty about a user's age.

If cvv66 becomes aware that personal data has been collected from an individual under the age of 21 without appropriate verification having taken place, that account will be immediately suspended and the personal data will be deleted in accordance with our data retention procedures, subject to any legal obligations to retain records of the incident.

Parents and guardians who believe their child may have accessed or registered on the cvv66 Platform are encouraged to contact our support team immediately at [email protected] so that the matter can be investigated and resolved promptly.

The cvv66 Platform does not include links to third-party websites for general browsing purposes. Where third-party game content is delivered within the Platform via embedded interfaces from providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi, those providers operate under their own privacy practices and data processing agreements. cvv66 maintains data processing agreements with all game content providers to ensure appropriate data handling standards.

cvv66 is not responsible for the privacy practices of any third-party service provider operating independently outside the scope of our contractual agreements. We encourage users to review the privacy policies of any third-party services they interact with directly.

cvv66 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. The effective date of the current version is stated at the top of this document and in the "Last updated" field in the table of contents sidebar.

Where changes to this Policy are material — meaning they significantly affect your rights or the way we process your data — cvv66 will notify registered users by email and/or via a prominent notice within the Platform prior to the changes taking effect. Your continued use of the Platform following such notification constitutes your acceptance of the revised Policy.

We recommend reviewing this Policy periodically to stay informed about how cvv66 protects your personal data. Archived versions of previous policies are available on request by contacting our support team.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way cvv66 handles your personal data, please contact our dedicated data protection support team. We are available 24 hours a day, 7 days a week in both English and Bengali.

When contacting us about a privacy request, please include your registered username and the email address associated with your cvv66 account so we can locate your records and verify your identity efficiently. Do not include sensitive financial details such as full payment wallet numbers in your initial message.