cv6661 Privacy Policy

1 Information We Collect

cv6661 collects personal information that is necessary to operate a safe, fair, and legally compliant online gaming platform for players in Bangladesh. The categories of personal data we collect include, but are not limited to:

We do not intentionally collect special categories of sensitive personal data (such as health information, religious beliefs, or political opinions) unless you voluntarily disclose such information in the context of a responsible gaming self-assessment or support interaction. Where such data is disclosed, it is treated with the highest level of care and used solely for the purpose of player protection.

2 How We Collect Information

cv6661 collects personal information through the following channels:

• Direct Registration: When you create an account on cv6661, you provide identity, contact, and security information directly through the registration form.
• KYC Verification: When you submit identity documents (NID, passport, utility bill, selfie) in response to a KYC request, this information is collected and processed by our verification team or a third-party KYC provider.
• Payment Transactions: When you make a deposit or request a withdrawal via bKash, Nagad, Rocket, Upay, or any other supported payment method, transaction data is collected and shared with the relevant payment processor.
• Platform Interactions: Your usage patterns, gaming activity, and navigation behaviour on the cv6661 platform are automatically recorded via server logs, analytics tools, and session-tracking technology.
• Customer Support: When you contact our support team by email or live chat, the content of those communications and any attachments you provide are collected and retained as part of our support and compliance records.
• Cookies and Tracking Technologies: We use first-party cookies, session tokens, and analytics scripts to collect technical and usage data. See Section 6 for full details.
• Third-Party Sources: We may receive identity-verification results, fraud-risk scores, and sanctions-screening data from third-party KYC and AML compliance partners.

3 Purposes of Processing

cv6661 processes your personal data for the following specific, legitimate, and documented purposes:

• Account Management: Creating, maintaining, and closing your player account; authenticating your identity at login; managing your account preferences and responsible gaming settings.
• Age & Identity Verification: Confirming that you are at least 18 years of age and that your account details correspond to a real, uniquely identifiable individual, in compliance with our 18+ policy.
• Payment Processing: Facilitating the deposit of funds into your account and the withdrawal of winnings, including verification that payment accounts are registered in your own name.
• Anti-Money Laundering (AML): Screening transactions and player behaviour for indicators of money laundering, terrorist financing, or other financial crimes, as required by applicable law and our internal compliance framework.
• Responsible Gaming: Monitoring gameplay data to identify patterns consistent with problem gambling; enabling and enforcing deposit limits, loss limits, cooling-off periods, and self-exclusion orders; reaching out proactively when concerning patterns are detected.
• Fraud Prevention & Security: Detecting and preventing duplicate accounts, bonus abuse, chargebacks, account takeovers, and other forms of fraud or platform exploitation.
• Customer Support: Responding to your enquiries, resolving disputes, investigating complaints, and maintaining records of support interactions for quality and compliance purposes.
• Marketing Communications: Sending you promotional offers, bonus notifications, and platform updates by email or SMS — subject to your marketing preferences. You may opt out of marketing communications at any time by contacting [email protected].
• Platform Improvement: Analysing aggregated and anonymised usage data to understand player behaviour, improve game selection, optimise platform performance, and develop new features.
• Legal & Regulatory Compliance: Fulfilling obligations under applicable laws, responding to lawful requests from regulatory authorities, and maintaining records as required by law.

4 Legal Bases for Processing

cv6661 processes your personal data on the following legal bases, each of which applies to the specific processing activities described:

• Contractual Necessity: Processing your identity data, contact data, and financial data is necessary to perform the contract between you and cv6661 (i.e., the Terms and Conditions you agree to at registration). Without this processing, we cannot provide account services, process payments, or fulfil winnings.
• Legal Obligation: Processing for KYC verification, AML screening, and record-keeping is necessary to comply with applicable anti-money-laundering laws, age-restriction requirements, and financial reporting obligations.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and platform analytics is carried out on the basis of cv6661's legitimate interests in operating a safe, fair, and commercially viable gaming platform — provided those interests are not overridden by your fundamental privacy rights.
• Consent: Processing your data for direct marketing communications is carried out on the basis of your consent, given at registration or subsequently through your account settings. You may withdraw consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

5 Data Sharing & Disclosure

cv6661 may share your personal data with the following categories of third parties, strictly as necessary and under contractual data-protection obligations:

• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard — to facilitate deposit and withdrawal transactions. These providers process payment data under their own privacy policies and applicable financial regulations.
• KYC & Identity Verification Partners: Third-party identity verification providers who assist cv6661 in confirming player identity and age, performing document authentication, and conducting sanctions and PEP screening.
• Fraud Prevention & AML Services: Specialised compliance technology providers who assist cv6661 in detecting fraudulent activity, monitoring for money-laundering indicators, and maintaining a clean and fair platform environment.
• IT Infrastructure & Hosting Providers: Cloud hosting and data-centre operators who provide the secure server infrastructure on which cv6661's platform and data are hosted. These providers operate under strict confidentiality and data-processing agreements.
• Customer Support Platforms: Third-party live-chat and ticketing systems used to manage support interactions. Support data is processed in accordance with those providers' data-protection commitments.
• Regulatory & Law Enforcement Authorities: cv6661 may disclose personal data to competent regulatory bodies, law enforcement agencies, or courts of law when required to do so by applicable law, court order, or lawful regulatory request. cv6661 will notify affected users of such disclosures where legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of cv6661's business, your personal data may be transferred to the acquiring entity as part of that transaction, subject to equivalent privacy protections.

6 Cookies & Tracking Technologies

cv6661 uses cookies, web beacons, session tokens, and similar tracking technologies to operate the platform, maintain your login session, and collect analytics data. The following categories of cookies are used on the cv6661 platform:

Strictly necessary cookies cannot be disabled as they are essential to the operation of the platform. You may manage functional and analytics cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of your cv6661 account.

7 Data Retention

cv6661 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

• Active Account Data: Retained for the duration of your account's active status.
• Post-Closure Account Data: Following the closure of your account, identity, transaction, and compliance records are retained for a period of five (5) years to satisfy AML record-keeping requirements and to resolve any late-arising disputes or regulatory enquiries.
• KYC Documents: Retained for five (5) years following account closure, in line with standard financial-services compliance practice.
• Support Communications: Retained for three (3) years following the resolution of the relevant interaction or complaint.
• Marketing Preferences: Retained until you withdraw consent, after which only a record of the withdrawal (not the communications themselves) is kept.
• Technical & Usage Logs: Retained for up to twenty-four (24) months, after which they are anonymised or deleted.

When personal data is no longer required for any of the above purposes, cv6661 deletes it securely or anonymises it such that it can no longer be attributed to any individual player.

8 Data Security

Our security infrastructure includes, but is not limited to:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers;
• Encryption at rest for all sensitive personal and financial data stored on our server infrastructure;
• Role-based access controls that restrict data access to authorised personnel on a strict need-to-know basis;
• Multi-factor authentication requirements for all cv6661 administrative systems;
• Regular penetration testing and vulnerability assessments conducted by independent security specialists;
• Automated intrusion-detection and anomaly-monitoring systems operating around the clock;
• Secure data-centre facilities with physical access controls, 24/7 surveillance, and environmental protections;
• A documented data-breach response plan with defined escalation procedures and notification timelines.

In the event of a personal data breach that poses a risk to your rights and freedoms, cv6661 will notify affected players without undue delay, providing information about the nature of the breach, the likely consequences, and the measures taken or proposed to address it. cv6661 will not be held liable for security breaches attributable to your own failure to maintain the confidentiality of your account credentials.

9 Your Rights

As a registered player on cv6661, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 48 hours and provide a full response within ten (10) business days.

• Right of Access: You have the right to request a copy of the personal data cv6661 holds about you, along with information about the purposes for which it is processed and the third parties with whom it has been shared.
• Right to Rectification: You have the right to request that inaccurate or incomplete personal data held by cv6661 be corrected or completed without undue delay.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been unlawfully processed. This right is subject to overriding legal retention obligations — for example, cv6661 may be required to retain certain records for AML compliance purposes even after an account is closed.
• Right to Restriction of Processing: You have the right to request that cv6661 restricts the processing of your personal data in defined circumstances, such as while a dispute regarding data accuracy is being resolved.
• Right to Data Portability: You have the right to receive a copy of the personal data you provided to cv6661 in a structured, commonly used, machine-readable format, and to request that it be transmitted directly to another controller where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on cv6661's legitimate interests. cv6661 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., direct marketing), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.

10 Children's Privacy

If you are a parent or guardian and believe your child has registered on cv6661 or provided personal information to the platform, please contact us immediately at [email protected]. We will investigate and take prompt action to close the account and remove all associated data. cv6661 uses rigorous KYC age-verification procedures precisely to prevent underage access to our platform.

11 Third-Party Links

The cv6661 platform may, from time to time, contain references to game providers and payment partners (such as Pragmatic Play, Evolution Gaming, bKash, and Nagad) whose services operate under their own independent privacy policies. cv6661 is not responsible for the privacy practices of any third-party service provider or partner, and this Policy does not extend to cover those third parties' data-handling activities.

We encourage you to review the privacy policies of any third-party payment provider or game studio whose services you use in connection with your cv6661 account. If you have concerns about how a third party is handling your data, please contact that third party directly.

12 Changes to This Policy

cv6661 reserves the right to update, modify, or replace this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we provide. When material changes are made, we will notify registered players via email to the address on file, or via a prominent notice on the cv6661 homepage, no fewer than seven (7) days before the revised Policy takes effect — except where an immediate change is required for security or legal reasons.

The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. Your continued use of the cv6661 platform following the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you must cease using the platform and may request account closure by contacting [email protected].

We recommend that all players review this Privacy Policy periodically to remain informed of how cv6661 protects and processes their personal data.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by cv6661, please contact our Data & Privacy Support team:

Email: [email protected]

For formal data-rights requests or privacy complaints, please email [email protected] with the subject line "Privacy Request" or "Privacy Complaint" and include your account username, the specific right you wish to exercise or the concern you wish to raise, and any relevant supporting details. cv6661 will acknowledge your request within 48 hours and provide a substantive response within ten (10) business days.