cv66 Privacy Policy — How We Protect Your Personal Data

cv66 ("cv66", "we", "us", "our") operates the online betting and gaming platform accessible at https://cv66.bar. We provide sports betting, live casino, slot games, fishing games, and related entertainment services to adult players located in Bangladesh and other permitted markets.

For the purposes of this Privacy Policy, cv66 is the data controller responsible for the personal data you provide or that is generated through your use of the cv66 platform. As data controller, cv66 determines the purposes for which your personal data is processed and the means by which it is processed.

This Privacy Policy applies to all personal data collected through the cv66 website (https://cv66.bar), any associated mobile interfaces, customer support communications, and marketing communications you receive from cv66. It does not apply to third-party websites or services that may be linked from the platform, which are governed by their own privacy policies.

If you have any questions about how cv66 handles your personal data, or if you wish to exercise any of your rights described in this Policy, you may contact us at any time at [email protected].

cv66 collects personal data from you in the following circumstances: when you register an account, when you make a deposit or withdrawal, when you contact our support team, when you participate in promotions, and automatically through your use of the platform. The categories of data we collect are described below.

cv66 does not intentionally collect sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) unless it is strictly necessary for a specific legal or regulatory purpose, such as a responsible gaming self-exclusion request.

cv66 uses the personal data we collect for the following purposes. Each purpose is linked to a legal basis described in Section 4.

• Account Management: To create, maintain, and administer your cv66 player account, including processing your registration, verifying your identity, and managing your account settings and preferences.
• Payment Processing: To process deposits and withdrawals in Bangladeshi Taka (৳) via your chosen payment method (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and others), and to maintain accurate financial records of all transactions.
• Age Verification and KYC: To verify that you are aged 21 or above and to comply with our Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations by confirming your identity and, where required, your source of funds.
• Service Delivery: To provide you with access to all games, betting markets, live casino features, slot games, fishing games, and promotional content available on the cv66 platform.
• Responsible Gaming: To monitor your gaming activity and identify patterns that may indicate problem gambling behaviour, to enforce deposit limits, cool-off periods, and self-exclusion requests you have set, and to fulfil our duty of care to players.
• Fraud Prevention and Security: To detect, investigate, and prevent fraud, money laundering, unauthorised account access, bonus abuse, and other illegal or prohibited activities on the platform.
• Customer Support: To respond to your enquiries, process complaints, manage disputes regarding bet outcomes or payments, and provide technical assistance.
• Marketing Communications: Where you have opted in, to send you personalised promotional emails, bonus offers, and platform updates. You may withdraw your consent to marketing communications at any time by contacting [email protected].
• Platform Improvement: To analyse aggregated usage data, identify technical issues, improve game performance, and develop new features and services for the benefit of all cv66 players.
• Legal Compliance: To comply with applicable legal obligations, respond to requests from competent authorities, and maintain records as required by law.

cv66 processes your personal data on the following legal bases:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and cv66 — specifically, to operate your account, process deposits and withdrawals, and deliver the gaming and betting services you have requested.
• Legal Obligation: Processing is required to comply with legal and regulatory obligations, including age verification (21+), KYC/AML checks, responsible gaming requirements, and financial record-keeping.
• Legitimate Interests: Processing is necessary for cv66's legitimate business interests, including fraud prevention, platform security, improving our services, and protecting the platform from abuse — provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we rely on your consent (such as for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. Consent withdrawal can be directed to [email protected].

cv66 does not sell, rent, or trade your personal data to any third party. We share your data only in the following limited and controlled circumstances:

• Payment Processors: Your financial data is shared with payment service providers (including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and card networks Visa and Mastercard) strictly for the purpose of processing your deposits and withdrawals. These providers operate under their own privacy policies and security standards.
• Identity Verification Providers: To fulfil our KYC and AML obligations, cv66 may share identity documentation with regulated third-party verification services. These services are contractually bound to process your data solely for verification purposes.
• Game Technology Providers: Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive session data necessary to deliver and authenticate game rounds. They do not receive your full identity profile.
• Fraud Prevention & Security Services: cv66 may share device and session data with fraud detection partners to identify and prevent fraudulent activity on the platform.
• Legal and Regulatory Disclosure: cv66 may disclose your personal data to law enforcement authorities, regulatory bodies, or courts of competent jurisdiction where required to do so by law, or where disclosure is necessary to protect the legal rights of cv66 or other parties.
• Business Transfers: In the event of a merger, acquisition, or sale of assets involving cv66, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and the privacy terms applicable to your data following the transaction.

All third-party service providers with whom cv66 shares personal data are required to maintain appropriate technical and organisational security measures and to process personal data only in accordance with cv66's instructions and applicable data protection standards.

cv66 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small data file placed on your device when you visit the cv66 website. The following categories of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They manage your login session, maintain your account security, and remember your preferences during a session. You cannot opt out of strictly necessary cookies without ceasing to use the platform.
• Performance & Analytics Cookies: These cookies collect anonymised information about how visitors use the cv66 platform — for example, which pages are visited most frequently, how long sessions last, and where technical errors occur. This data helps us improve the platform experience for all players.
• Functionality Cookies: These cookies remember your preferences and personalisation choices, such as your preferred language (English), your notification settings, and your last-visited game category.
• Fraud Prevention & Security Cookies: These cookies are used to identify suspicious activity, detect bot traffic, and protect your account from unauthorised access attempts.

You may manage cookie preferences through your browser settings. Disabling performance or functionality cookies may affect your experience on the cv66 platform but will not prevent you from using the core service. Blocking strictly necessary cookies will prevent the platform from functioning correctly.

cv66 retains your personal data for as long as necessary to fulfil the purposes for which it was collected, to comply with legal obligations, and to resolve disputes. The following retention guidelines apply:

• Active Account Data: Personal data associated with your cv66 account is retained for the full duration of your account's active status and for a period of five (5) years following account closure, to satisfy legal and regulatory record-keeping requirements.
• Financial Transaction Records: Records of all deposits, withdrawals, and bets are retained for a minimum of five (5) years from the date of each transaction, in compliance with applicable financial record-keeping obligations.
• Identity Verification Documents: KYC documentation (such as copies of your NID or passport) is retained for the duration of your account and for five (5) years following account closure.
• Communications Records: Support tickets, email correspondence, and chat transcripts are retained for three (3) years from the date of the last communication.
• Marketing Consent Records: Records of your marketing opt-in or opt-out status are retained for as long as your account is active and for one (1) year following account closure, to evidence consent decisions.
• Self-Exclusion Records: Where you have requested self-exclusion, a record of your exclusion is retained for the full duration of the exclusion period and for five (5) years thereafter to prevent re-registration during the exclusion window.

When the applicable retention period expires, cv66 will securely delete, destroy, or anonymise your personal data so that it can no longer be attributed to you as an individual.

As a cv66 player, you have the following rights with respect to the personal data cv66 holds about you. To exercise any of these rights, please contact us at [email protected] with your full name and registered account details.

• Right of Access: You have the right to request a copy of the personal data cv66 holds about you and information about how that data is processed. We will respond to access requests within a reasonable timeframe.
• Right to Rectification: If any personal data held by cv66 is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may update certain account details directly within your account settings.
• Right to Erasure: You may request the deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose it was collected, or where you have withdrawn consent and there is no other legal basis for processing. This right is subject to cv66's legal obligations to retain certain data.
• Right to Restrict Processing: You may request that cv66 restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where you have objected to processing pending a determination of cv66's legitimate grounds.
• Right to Object: Where cv66 processes your personal data on the basis of legitimate interests, you have the right to object to that processing. cv66 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Data Portability: Where processing is based on consent or contract and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time by contacting [email protected]. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.

cv66 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security measures include, but are not limited to:

• SSL/TLS Encryption: All data transmitted between your device and the cv66 platform is encrypted using industry-standard SSL/TLS protocols, ensuring that your personal and financial data cannot be intercepted in transit.
• Access Controls: Access to personal data within cv66's systems is restricted to authorised personnel on a strict need-to-know basis. All staff with access to player data are subject to confidentiality obligations.
• Secure Data Storage: Personal data is stored on secure servers with appropriate access controls, firewalls, and intrusion detection systems. Financial data and payment credentials are processed and stored in compliance with applicable security standards.
• Regular Security Reviews: cv66 conducts periodic security assessments and reviews of its data handling procedures to identify and address potential vulnerabilities.
• Incident Response: In the event of a personal data breach that poses a risk to your rights and freedoms, cv66 will take prompt remedial action and notify affected players without undue delay where required.

While cv66 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account password and for ensuring your device is appropriately secured. Report any suspected account security issues immediately to [email protected].

cv66 operates a strict 21+ age policy. The platform is not intended for use by individuals under the age of 21. cv66 does not knowingly collect personal data from individuals under 21 years of age.

As part of the registration process, all players are required to confirm they are aged 21 or above. cv66 reserves the right to request documentary proof of age at any time. Where cv66 discovers or reasonably suspects that a player is under the age of 21, the player's account will be immediately suspended, all pending transactions will be placed on hold, and the matter will be reviewed. Any funds deposited by an underage player may be returned to the original payment source subject to verification.

If you are a parent or guardian and believe that a minor may have created a cv66 account or accessed the platform, please contact us immediately at [email protected] so we can take appropriate action without delay.

The cv66 platform integrates third-party game technology provided by licensed game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers operate their game software under commercial licensing agreements with cv66 and may process limited technical session data (such as game round IDs and session tokens) to deliver their services. Their data handling for these limited purposes is governed by their respective privacy frameworks.

Payment services on the cv66 platform are provided by third-party payment processors including bKash, Nagad, Rocket, Upay, and various banking partners. When you make a payment through these services, you are also subject to the privacy policy of the respective payment provider for data they collect and process on their own systems.

cv66 does not include links to external third-party websites in its main content. However, where any such links are present, cv66 is not responsible for the privacy practices of those external sites and encourages you to review their privacy policies independently.

cv66 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. Where changes are material, cv66 will notify registered players via email or via a prominent notice on the platform at least 7 days before the changes take effect.

The most current version of this Privacy Policy is always accessible on this page and is identified by the "Last Updated" date shown at the top of the document. Your continued use of the cv66 platform after any amendment becomes effective constitutes your acceptance of the updated Privacy Policy.

If you do not agree to the amended Privacy Policy, you must cease using the cv66 platform and may request account closure by contacting us at [email protected].

If you have any questions, concerns, or requests regarding this Privacy Policy or the way cv66 processes your personal data, please contact our support team using the details below. We aim to acknowledge all privacy-related enquiries within 48 hours and to provide a full response within a reasonable timeframe.

Email: [email protected] (plain text — not a clickable link)

Support Hours: cv66 support operates 24 hours a day, 7 days a week including Bangladeshi public holidays (Eid, Pohela Boishakh, Victory Day, Independence Day). All times are Bangladesh Standard Time (BST, UTC+6).

Complaints: If you are not satisfied with cv66's response to your privacy enquiry or complaint, you have the right to escalate the matter through appropriate dispute resolution channels. cv66 is committed to resolving all privacy complaints fairly and transparently without undue delay.

For requests to exercise your data subject rights (access, rectification, erasure, restriction, portability, or objection), please include your full name, registered email address, and a clear description of your request when contacting [email protected]. This helps us locate your records accurately and respond efficiently.