cv660 Privacy Policy

This Privacy Policy ("Policy") describes how cv660 ("cv660", "we", "us", or "our") collects, processes, stores, shares, and protects personal data relating to individuals ("you", "the Player", or "the User") who register for an account, access the cv660 website at https://cv660.io, use any associated mobile interface, participate in any game or betting product, claim any promotional offer, or otherwise interact with the cv660 platform and its support channels (collectively, the "Services").

This Policy forms part of the legally binding agreement between you and cv660 and must be read alongside the cv660 Terms and Conditions and the Responsible Gaming Policy. By creating a cv660 account or continuing to use the Services, you acknowledge that you have read, understood, and consent to the data practices described in this Policy.

cv660 is committed to handling personal data with integrity, transparency, and respect for the individuals to whom that data belongs. This Policy is written in plain English so that every cv660 player — whether based in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar — can understand exactly how their information is handled.

For the purposes of this Privacy Policy, cv660 acts as the data controller in respect of the personal data of its registered players and website visitors. As data controller, cv660 determines the purposes and means by which personal data is processed.

All data protection enquiries, rights requests, and complaints should be directed to the cv660 Data Protection contact channel. Full contact details are provided in Section 15 of this Policy. cv660 will acknowledge all formal data protection requests within 5 business days and will provide a substantive response within 30 calendar days, consistent with applicable legal obligations.

cv660 collects personal data in the following categories. The specific data fields collected depend on the nature of your interaction with the platform:

3.1 Registration Data

When you create a cv660 account, we collect the information you provide during the registration process, which includes your full legal name, date of birth, email address, mobile phone number, and residential address. This information is required to create and manage your account and to meet our Know Your Customer (KYC) obligations.

3.2 Identity Verification Data

As part of the KYC verification process, we collect copies of government-issued identity documents such as your Bangladesh National ID card or passport. We may also collect a selfie or likeness photograph for identity matching purposes. This data is processed solely for identity verification and fraud prevention purposes.

3.3 Financial Data

When you make deposits or request withdrawals, we collect information related to those transactions, including the payment method used (e.g., bKash, Nagad, Rocket, Upay), the mobile number or account identifier associated with the payment method, transaction amounts, and transaction reference numbers. We do not store full payment credentials — payment processing is handled by the relevant payment provider.

3.4 Transactional & Gaming Data

We record all transactions conducted on your cv660 account, including deposits, withdrawals, bonus credits, bonus forfeitures, game sessions, bet placements, bet settlements, and account balance changes. This data is used for account management, dispute resolution, and regulatory compliance purposes.

3.5 Technical & Usage Data

When you access the cv660 platform, we automatically collect certain technical data, including your IP address, device type and operating system, browser type and version, screen resolution, session start and end times, pages visited, features used, and referring URL. This data is used for security monitoring, fraud detection, and platform performance optimisation.

3.6 Communications Data

If you contact cv660 via live chat, email, or any other support channel, we retain a record of that communication, including the content of messages, timestamps, and the resolution outcome. These records are maintained for quality assurance and dispute resolution purposes.

3.7 Responsible Gaming Data

Where you set responsible gaming controls on your account — such as deposit limits, session time limits, cool-off periods, or self-exclusion — we record those settings and their effective dates. This data is used exclusively to enforce the controls you have selected and to meet our responsible gaming obligations.

cv660 collects personal data through the following channels:

• Directly from you: Information you provide when registering, completing KYC verification, making deposits or withdrawals, setting responsible gaming controls, participating in promotions, or contacting customer support.
• Automatically during platform use: Technical and usage data collected by our servers, analytics systems, and security monitoring tools when you access the cv660 website or mobile interface.
• From payment providers: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, and other payment processors when a deposit or withdrawal instruction is processed.
• From identity verification providers: Results of automated document verification checks conducted as part of the KYC process by our third-party verification partner.
• From fraud prevention systems: Risk signals generated by our internal fraud detection systems and, where applicable, industry-shared fraud databases, used to identify and prevent suspicious account activity.

cv660 processes personal data only where a lawful basis exists for doing so. The lawful bases on which cv660 relies are as follows:

• Contractual necessity: The majority of data processing at cv660 is necessary to perform the contract between cv660 and the player — that is, to provide the gambling and betting services that the player has registered to use. This includes account creation, payment processing, game delivery, and customer support.
• Legal obligation: Certain processing activities — particularly KYC identity verification, transaction record-keeping, and the reporting of suspicious activity — are required by applicable legal and regulatory frameworks governing online gambling and financial services.
• Legitimate interests: cv660 processes certain categories of data on the basis of its legitimate interest in operating a secure, fair, and commercially viable platform. This includes security monitoring, fraud detection, platform analytics, and responsible gaming enforcement. In each case, cv660 has assessed that its legitimate interest is not overridden by the interests or rights of the individual player.
• Consent: Where cv660 relies on consent as the lawful basis for processing — for example, for sending optional promotional communications — consent is obtained clearly and separately at the point of collection and may be withdrawn at any time without affecting any other aspect of the player's account.

Personal data collected by cv660 is used for the following specific purposes:

• Account management: Creating and maintaining your cv660 player account, authenticating your identity on login, managing account preferences, and communicating account-related information such as transaction confirmations, security alerts, and policy update notifications.
• Payment processing: Processing deposit instructions and withdrawal requests, reconciling transaction records, and investigating payment disputes or discrepancies.
• KYC & compliance: Verifying your identity and age before approving withdrawals, meeting our obligations under applicable anti-money laundering (AML) frameworks, and maintaining the records required by law.
• Fraud prevention & security: Detecting, investigating, and preventing fraudulent transactions, account takeover attempts, multi-accounting, bonus abuse, collusion, and other prohibited conduct as defined in the cv660 Terms and Conditions.
• Game delivery & support: Providing access to casino games and sports betting markets, recording game session data for dispute resolution, and delivering customer support services.
• Responsible gaming: Enforcing deposit limits, session time limits, cool-off periods, and self-exclusion settings as configured by the player, and identifying patterns of play that may indicate problem gambling behaviour.
• Platform improvement: Analysing aggregated, anonymised usage data to improve the design, performance, and content of the cv660 platform.
• Marketing communications (consent-based): Sending promotional emails, SMS messages, or in-platform notifications about bonuses, seasonal offers (such as Eid or Pohela Boishakh promotions), new games, and BPL or IPL betting markets — but only to players who have given explicit consent to receive such communications and have not subsequently withdrawn that consent.

cv660 does not sell personal data to any third party. Data is shared with third parties only in the following limited circumstances, and only to the minimum extent necessary for the stated purpose:

7.1 Payment Processors

To process deposits and withdrawals, cv660 shares transaction instructions with the relevant payment service providers including bKash, Nagad, Rocket, and Upay. These providers receive only the information necessary to execute the transaction — typically the transaction amount and the account identifier registered to your payment method. Payment providers are contractually obligated to process this data securely and in accordance with their own privacy policies.

7.2 Identity Verification Partners

To conduct KYC verification, cv660 shares identity document images and registration data with a contracted third-party identity verification provider. This provider processes the data solely for the purpose of performing the verification check and returning a result to cv660. The identity verification provider is not permitted to retain or use your data for any other purpose.

7.3 Game Providers

When you access a game provided by a third-party studio such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi, a technical session is established with that provider's platform. The game provider may receive a session token and anonymised player identifier for the purpose of delivering and recording the game session. cv660 does not share your name, email address, or payment information with game providers.

7.4 Legal & Regulatory Disclosure

cv660 may be required by law or by a competent regulatory or law enforcement authority to disclose personal data relating to a specific account. In such cases, cv660 will disclose only the data specifically requested and will comply with all applicable legal obligations governing such disclosures. Where permitted by law, cv660 will attempt to notify the account holder of any such request before complying.

7.5 Business Transfers

In the event that cv660 undergoes a merger, acquisition, restructuring, or sale of assets, personal data held by cv660 may form part of the transferred assets. In such circumstances, cv660 will take reasonable steps to ensure that the acquiring entity is bound by privacy obligations no less protective than those set out in this Policy, and will notify affected players of the change in data controller.

cv660 uses cookies and similar tracking technologies on its website and mobile interface. Cookies are small text files placed on your device by the cv660 server when you visit the platform. They allow cv660 to recognise your device on return visits, maintain your session state, and gather aggregated usage data.

8.1 Essential Cookies

These cookies are strictly necessary for the platform to function. They maintain your login session, preserve your account settings during a session, and enable core platform features such as the game lobby and the cashier. Essential cookies cannot be disabled without breaking the functionality of the platform.

8.2 Analytics Cookies

cv660 uses aggregated analytics data to understand how players interact with the platform — for example, which game categories attract the most engagement, which deposit methods are most commonly used, and at which points players exit registration flows. This data is anonymised before analysis and is used solely to improve the platform experience. Analytics cookies are set only with your consent.

8.3 Security Cookies

Certain cookies are placed by cv660's security and fraud detection systems to identify and block automated bot activity, credential stuffing attacks, and other forms of unauthorised access. These cookies collect technical device fingerprint data and session behaviour signals. They are classified as essential for platform integrity purposes.

8.4 Managing Cookies

You may manage non-essential cookie settings through your account preferences or through your browser's built-in cookie management tools. Disabling essential cookies will impair or prevent your ability to use the cv660 platform. Disabling analytics cookies will not affect your ability to use the platform or your account features.

cv660 employs a layered security architecture to protect personal data from unauthorised access, disclosure, alteration, or destruction. The primary security measures in place include:

• TLS/SSL Encryption in Transit: All data transmitted between your device and cv660 servers is encrypted using TLS 1.2 or higher. This ensures that data cannot be intercepted in readable form during transmission.
• Encryption at Rest: Sensitive personal data stored in cv660 databases — including identity document data and payment identifiers — is encrypted at rest using industry-standard encryption protocols.
• Access Controls: Access to systems containing personally identifiable data is restricted to cv660 personnel with a documented operational need. All internal access is authenticated, logged, and subject to periodic review.
• Two-Factor Authentication: cv660 offers SMS-based two-factor authentication to all players and strongly recommends enabling it as an additional layer of account security.
• Penetration Testing: cv660 conducts regular security assessments of its infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: cv660 maintains a documented data breach response procedure. In the event of a security incident that affects your personal data, cv660 will notify affected players within a reasonable timeframe and take immediate remedial action.

cv660 retains personal data only for as long as is necessary for the purpose for which it was collected, or for as long as is required by applicable legal or regulatory obligations. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where anonymisation is applied, the resulting anonymised data may be retained indefinitely for statistical analysis purposes as it can no longer be linked to an identifiable individual.

As a cv660 player, you have the following rights in relation to your personal data. These rights may be exercised by contacting cv660 through the support channels listed in Section 15:

• Right of Access: You have the right to request a copy of the personal data that cv660 holds about you. cv660 will provide this data in a structured, commonly used format within 30 calendar days of a verified request.
• Right to Rectification: If any personal data held by cv660 is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections — such as updating your email address or mobile number — can be made directly within the account dashboard.
• Right to Erasure: You have the right to request deletion of your personal data where the data is no longer necessary for the purpose for which it was collected, where you have withdrawn consent and no other lawful basis exists, or where the data has been processed unlawfully. Note that this right is subject to overriding legal and regulatory obligations — for example, cv660 is required to retain transaction records for a minimum period regardless of a deletion request.
• Right to Restriction: You have the right to request that cv660 restricts the processing of your personal data in certain circumstances — for example, while the accuracy of data is under dispute, or while a legitimate interest assessment is being reviewed.
• Right to Data Portability: For data processed on the basis of consent or contractual necessity, you have the right to receive a copy of your personal data in a machine-readable format and to have it transmitted to another data controller where technically feasible.
• Right to Object: You have the right to object to processing based on legitimate interests or for direct marketing purposes. Where you object to marketing, cv660 will cease processing your data for that purpose immediately. Where you object to processing based on legitimate interests, cv660 will assess whether its legitimate interests are overridden by your interests or rights and will respond within 30 calendar days.
• Right to Withdraw Consent: Where cv660 processes your data on the basis of consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

cv660 is strictly an adult platform. Access to the Services is permitted only to individuals who are 21 years of age or older. cv660 does not knowingly collect personal data from any individual under the age of 21.

During account registration, all players are required to declare that they are aged 21 or above and to provide a date of birth. Where the date of birth provided indicates that the applicant is under 21, the registration is automatically declined. cv660 also conducts age verification as part of its KYC process, which requires submission of a government-issued identity document confirming the player's date of birth.

If cv660 becomes aware that personal data has been collected from an individual who is under the age of 21, that data will be deleted immediately and the associated account will be permanently closed. Any funds deposited by an underage player will be returned to the source payment method after identity verification of the account holder.

If you believe that a minor may have registered for a cv660 account, please contact support immediately at [email protected] so that the matter can be investigated and resolved without delay.

The cv660 platform may reference third-party products, services, or providers — for example, game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, or payment services such as bKash, Nagad, Rocket, and Upay. While cv660 works only with reputable partners, this Privacy Policy does not extend to the data practices of those third-party entities.

Each third-party provider operates under its own privacy policy and data protection framework. cv660 is not responsible for the privacy practices of any third party and encourages players to review the relevant privacy documentation of any third-party service they interact with independently of the cv660 platform.

cv660 reserves the right to amend this Privacy Policy at any time. Amendments may be made in response to changes in applicable law or regulation, changes in our data processing practices, the introduction of new features or services, or to clarify existing provisions.

When a material change is made to this Policy, cv660 will notify registered players by email to the address on file and will display a prominent notice on the cv660 platform for a period of not less than 14 days prior to the amended Policy taking effect. The effective date at the top of this Policy will be updated to reflect the date on which the most recent version came into force.

Your continued use of the cv660 Services after the effective date of an amended Policy constitutes your acceptance of the revised terms. If you do not agree with an amendment, you should cease using the Services and may request account closure by contacting support before the effective date of the change.

All previous versions of this Privacy Policy are archived and available upon written request to cv660 support.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way in which cv660 processes your personal data, please contact us through one of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week from within your cv660 account dashboard. Live chat is the fastest way to reach the cv660 support team — typical response time is under 3 minutes.
• Email: [email protected] — for formal data protection requests, rights exercises, and privacy complaints. Typical email response time is under 12 hours.

For formal data subject rights requests, please include your registered cv660 username, the email address associated with your account, and a clear description of your request. cv660 will verify your identity before actioning any rights request to ensure the security and integrity of your personal data.

cv660 is committed to resolving all privacy-related enquiries fairly and promptly. Our support team is available in English around the clock and can assist players from Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, and every other region of Bangladesh with any data protection matter relating to their cv660 account.