cvy66 Privacy Policy

This Privacy Policy ("Policy") describes how cvy66 ("we", "us", "our") collects, uses, stores, and protects the personal information of individuals ("you", "your", "player") who access or use the cvy66 online casino and sports betting platform, available at cvy66.io (the "Platform"). This Policy applies to all players registered from Bangladesh and to any visitor who browses the Platform without registering.

By registering an account, making a deposit, or otherwise using any feature of the cvy66 Platform, you acknowledge that you have read, understood, and agreed to the terms of this Privacy Policy. If you do not agree with any part of this Policy, you should not use the Platform and should contact our support team to arrange account closure.

This Policy is incorporated by reference into the cvy66 Terms & Conditions. In the event of any conflict between this Policy and the Terms & Conditions on a data-protection matter, this Policy shall take precedence. For matters unrelated to data protection, the Terms & Conditions govern.

We review and update this Policy periodically to reflect changes in our data practices, applicable laws, or the services we offer. The version number and effective date at the top of this page always reflect the current, binding version of the Policy.

For the purposes of this Privacy Policy, cvy66 acts as the data controller in respect of all personal data collected through the Platform. As data controller, cvy66 determines the purposes and means by which personal data is processed and is responsible for ensuring that such processing is carried out in accordance with applicable data protection principles.

All data-related enquiries, access requests, correction requests, or deletion requests should be directed to the cvy66 Data Protection contact point. You may reach us at any time via live chat on the Platform or by email at [email protected]. Please note that this email address is provided as plain text only and is not a clickable link — copy it manually into your email client.

cvy66 collects only the personal data that is necessary and proportionate to the specific purposes described in this Policy. The categories of personal data we collect are as follows:

We do not collect sensitive personal data such as racial or ethnic origin, religious beliefs, health data, or biometric data, except where identity document photographs are submitted for age and identity verification purposes, in which case they are used solely for that purpose and not retained beyond the verification process unless required by law.

cvy66 collects personal data through the following means:

• Direct interactions: Data you provide when you register an account, complete identity verification, make deposits or withdrawals, adjust your responsible gaming settings, or contact our support team.
• Automated technologies: Technical and usage data collected automatically when you access the Platform, including through cookies, server logs, and session tracking technologies. Please refer to Section 10 of this Policy for full details on cookies.
• Third-party payment providers: Transaction reference data passed to us by payment processors such as bKash, Nagad, Rocket, and Upay when you initiate a deposit or withdrawal. We receive only the minimum transaction data necessary to reconcile your account; we do not receive or store your full payment account credentials.
• Identity verification services: Where we use a third-party identity verification provider to assist in confirming your age and identity, that provider may share the result of the verification check (pass/fail) and a reference identifier with us. The underlying document images are handled in accordance with that provider's own data retention policy.
• Anti-fraud and risk systems: Automated systems that analyse device fingerprints, IP geolocation, and behavioural patterns for the purpose of detecting fraudulent activity, account sharing, or bonus abuse.

cvy66 processes your personal data for the following clearly defined purposes. We do not use your data for any purpose that is incompatible with those listed below:

• Account creation and management: To register your account, authenticate your identity at login, and maintain your account profile across the Platform.
• Age and identity verification (KYC): To confirm that you are at least 21 years of age and that the identity details you have provided are accurate, in compliance with our responsible gaming obligations.
• Payment processing: To process deposits and withdrawals through bKash, Nagad, Rocket, Upay, and other available payment methods, and to reconcile transactions against your account balance.
• Game and betting services: To facilitate gameplay, record bet outcomes, apply bonus credits, and maintain an accurate transaction history within your account.
• Customer support: To respond to your enquiries, investigate complaints, and maintain records of support interactions for quality assurance purposes.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, account sharing, bot usage, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible gaming: To monitor gambling patterns, enforce player-set limits, identify signs of potential problem gambling, and facilitate self-exclusion or cooling-off requests.
• Legal and regulatory compliance: To meet obligations arising from applicable anti-money laundering (AML) laws, record-keeping requirements, and any lawful order or directive received from a competent authority.
• Platform improvement: To analyse aggregated, anonymised usage data in order to improve the Platform's performance, user interface, and game offering. No individually identifiable data is used for this purpose.
• Promotional communications: Where you have opted in to receive promotional messages, to send you information about relevant offers, tournaments, and seasonal promotions (e.g., Eid special offers, Pohela Boishakh bonuses). You may opt out at any time via account settings or by contacting support.

cvy66 processes personal data on one or more of the following legal bases, depending on the specific purpose of the processing activity:

• Performance of a contract: Processing that is necessary to provide the gaming and betting services you have registered for, including account management, payment processing, and gameplay records.
• Legal obligation: Processing required to comply with applicable laws, including identity verification for age-gating (21+ requirement), anti-money laundering obligations, and record-keeping mandates.
• Legitimate interests: Processing carried out for purposes that are in cvy66's legitimate business interests and that do not override your privacy rights — for example, fraud prevention, platform security, and aggregated analytics for service improvement.
• Consent: Processing for optional purposes where you have given clear, freely given, and informed consent — specifically, the sending of personalised promotional communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

cvy66 does not sell, rent, or trade your personal data to any third party for marketing purposes. We may share your personal data with the following categories of third parties, strictly limited to what is necessary for the stated purpose:

• Payment service providers: bKash, Nagad, Rocket, Upay, and other payment processors receive only the transaction data necessary to process your deposit or withdrawal. Their handling of your data is governed by their own privacy policies.
• Identity verification providers: Third-party KYC service providers engaged to assist with age and identity verification. They receive only the documents and data necessary to complete the verification check.
• Technology and hosting providers: Cloud infrastructure, database, and content delivery providers who process data on our behalf under strict data processing agreements that prohibit any use of your data beyond the provision of their contracted services to cvy66.
• Anti-fraud and risk management providers: Specialised service providers who assist in detecting and preventing fraudulent activity. Data shared is limited to technical identifiers (e.g., IP address, device fingerprint) and behavioural indicators — never sensitive financial account details.
• Legal and regulatory authorities: Where cvy66 receives a valid legal order, court direction, or regulatory request requiring disclosure of specific player data, we will comply with that order to the extent required by law. Where permitted, we will endeavour to notify the affected player before disclosure.
• Professional advisors: Lawyers, auditors, and compliance consultants engaged by cvy66, who are bound by professional confidentiality obligations.

All third parties to whom cvy66 discloses personal data are required to implement appropriate technical and organisational measures to protect that data against unauthorised access, disclosure, or loss, consistent with the standards applied by cvy66 itself.

cvy66 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any identifiable individual. Where data is anonymised rather than deleted, the resulting anonymised dataset may be retained indefinitely for aggregated analytics purposes.

cvy66 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, disclosure, or alteration. These measures include but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the cvy66 Platform, ensuring that your login credentials, financial data, and personal information cannot be intercepted in transit.
• Encrypted data storage for all sensitive data held in our databases, including identity documents, financial transaction records, and account credentials. Passwords are stored using one-way cryptographic hashing and are never stored in plain text.
• Access controls and role-based permissions ensuring that only authorised cvy66 personnel with a genuine business need can access personal data, and only to the extent required for their specific role.
• Multi-factor authentication for all internal administrative systems that have access to player data, supplemented by regular access reviews and privilege audits.
• Intrusion detection and prevention systems that continuously monitor the Platform for suspicious activity, including brute-force login attempts, unusual API usage, and data exfiltration patterns.
• Regular security assessments including vulnerability scanning and penetration testing carried out by independent security specialists, with findings remediated within defined timeframes.
• Staff training on data protection principles and secure data handling practices, conducted at onboarding and updated at least annually.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, cvy66 will notify affected individuals without undue delay and will take all appropriate remedial action.

cvy66 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit the Platform. We use the following categories of cookies:

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without significantly impairing your ability to use the Platform.
• Functional cookies: Used to remember your preferences, such as language settings and responsible gaming limits, so that you do not need to re-enter them each time you visit.
• Analytics cookies: Used to collect aggregated, anonymised data about how players interact with the Platform — for example, which pages are visited most frequently and how long sessions last. This data is used solely to improve the Platform and is never used to identify individual users.
• Security and fraud-prevention cookies: Used to identify devices associated with suspicious activity, detect automated bot traffic, and protect against cross-site request forgery (CSRF) attacks.

cvy66 does not use third-party advertising cookies or behavioural tracking technologies that profile you for advertising purposes across other websites.

Most web browsers allow you to control cookie settings through the browser's settings menu. You can choose to block or delete cookies; however, disabling strictly necessary cookies will prevent you from logging into your account or using core Platform features. Your cookie preferences for non-essential cookies can also be managed through the cookie preference centre accessible from the Platform's settings.

As a player on cvy66, you have the following rights in relation to your personal data. You may exercise any of these rights at any time by contacting our support team via live chat or by emailing [email protected]:

• Right of access: You have the right to request a copy of the personal data cvy66 holds about you, along with information about how it is being used and with whom it has been shared.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You can update basic account details (such as your email address or contact number) directly within your account settings.
• Right to erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where there is no overriding legal basis for continued retention. Note that certain data cannot be erased where retention is required by law (e.g., AML record-keeping obligations).
• Right to restriction of processing: You have the right to request that cvy66 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested, or while a complaint is under investigation.
• Right to data portability: Where processing is based on your consent or on the performance of a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to object: You have the right to object to the processing of your personal data where cvy66 relies on legitimate interests as the legal basis. You also have an unconditional right to object to processing for direct marketing purposes.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

cvy66 will respond to all data rights requests within 14 calendar days. In complex cases, we may extend this period by a further 14 days, in which case we will notify you of the extension and the reason for it. There is no charge for exercising your data rights, except where requests are manifestly unfounded or excessive.

cvy66 is strictly an adult platform. Access is prohibited for any person under the age of 21. We do not knowingly collect personal data from individuals under the age of 21. Our registration process requires all players to confirm that they are 21 years of age or older, and we conduct identity verification checks to enforce this requirement.

If cvy66 becomes aware that personal data has been collected from a person under the age of 21, that data will be deleted immediately, the associated account will be closed, and any funds in the account will be handled in accordance with our Terms & Conditions for underage account closure.

cvy66 operates a platform that may involve the processing of personal data on servers or by service providers located outside of Bangladesh. Where personal data is transferred to a jurisdiction that does not provide an equivalent level of data protection to that applicable in Bangladesh, cvy66 will ensure that appropriate safeguards are in place to protect that data.

Such safeguards may include contractual obligations imposed on the recipient of the data (such as standard contractual clauses), binding corporate rules, or other legally recognised transfer mechanisms. By using the cvy66 Platform, you acknowledge that your personal data may be transferred to, processed in, and stored in jurisdictions outside Bangladesh for the purposes described in this Policy.

Regardless of where your data is processed, cvy66 applies the same level of data protection described in this Policy and requires all third-party processors to maintain equivalent standards.

cvy66 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable laws, or Platform services. When material changes are made — meaning changes that meaningfully affect your rights or how your data is used — we will notify registered players by posting the updated Policy on this page and, where practicable, by sending a notification to your registered email address or displaying an in-platform alert.

The version number and effective date displayed at the top of this page will be updated each time the Policy is revised. Your continued use of the Platform after the effective date of any revision constitutes your acceptance of the updated Policy. If you do not accept a material change to this Policy, you should contact our support team to arrange voluntary account closure.

We encourage you to review this Policy periodically, particularly before submitting any new personal data through the Platform. Archived versions of previous Policy versions are available on request via our support team.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which cvy66 handles your personal data, please contact our support team. We take all privacy-related enquiries seriously and will work to address your concerns promptly and transparently.

Support is available 24 hours a day, 7 days a week via live chat on the Platform. For written correspondence, you may contact us at the following email address: [email protected]

Please note that this email address is provided as plain text only and is not a clickable link. Please copy it manually into your email client. Our team operates on Bangladesh Standard Time (BST, UTC+6) and aims to respond to all email enquiries within 24 hours.

For formal complaints that cannot be resolved through our support team, you may escalate the matter to a recognised independent dispute resolution body. Details of available escalation routes will be provided upon request.