cvl666 Privacy Policy

1. Information We Collect

When you interact with the cvl666 platform — whether by browsing, registering an account, depositing funds, placing bets, or contacting support — we collect certain categories of personal data. The data we collect falls into the following categories:

1.1 Information You Provide Directly

• Registration data: Full legal name, date of birth, gender, residential address (including division, district, upazila), Bangladesh mobile number, and email address.
• Identity verification (KYC) data: Scanned or photographed copies of your National Identity Card (NID), Bangladesh passport, or driving licence; proof of address documents such as utility bills or bank statements; and proof of payment method ownership.
• Financial data: The mobile wallet numbers (bKash, Nagad, Rocket, Upay) or bank account details you register for deposits and withdrawals. Card details (Visa, Mastercard) are processed via a PCI DSS-compliant payment gateway and are not stored in raw form on cvl666 servers.
• Communications data: Messages, emails, and chat transcripts you exchange with the cvl666 support team, including any attachments you submit.
• Responsible gaming data: Self-exclusion requests, deposit limit settings, session time limits, and loss limit configurations you apply to your account.

1.2 Information Collected Automatically

• Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and language settings.
• Usage data: Pages visited on the cvl666 platform, time spent on each page, game sessions initiated and completed, betting history, search queries entered on the platform, and links clicked.
• Session data: Login timestamps, session duration, logout events, and geographic region derived from IP address (country and city level only — not precise GPS location).
• Cookie and tracker data: Data collected via first-party cookies and similar technologies as described in the Cookies section of this policy.

1.3 Information From Third Parties

• Payment provider confirmation: Transaction reference numbers, payment status (success/failure/pending), and masked account identifiers returned by bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard to confirm deposit and withdrawal outcomes.
• Identity verification partners: Where cvl666 uses a third-party identity verification service to assist with KYC processing, that provider may return a verification status (pass/fail) and confidence score to cvl666. Raw document images are processed in accordance with the third-party provider's privacy policy.
• Fraud and risk screening: Information returned by anti-fraud and risk-management service providers to assist in the detection and prevention of fraudulent account activity.

2. How We Use Your Data

cvl666 uses the personal data it collects for the following purposes. Each purpose is tied to a lawful basis for processing, which is set out in the next section of this policy.

Marketing Communications

cvl666 will only send you promotional emails or SMS notifications about bonuses, seasonal offers (such as Eid promotions, BPL season offers, or Pohela Boishakh specials), and new game releases if you have explicitly opted in to receive such communications during registration or via your account settings. You may withdraw your marketing consent at any time by updating your communication preferences in your account settings or by contacting support at [email protected]. Withdrawing marketing consent does not affect your ability to use the platform.

Automated Decision-Making

cvl666 uses automated processes to assist with certain decisions, including fraud risk scoring, responsible gaming monitoring (e.g., flagging unusual betting patterns), and bonus eligibility checks. Where an automated decision has a significant effect on your account — such as an account restriction triggered by a risk alert — you have the right to request a human review of that decision by contacting our compliance team.

3. Legal Basis for Processing

cvl666 processes your personal data under the following lawful bases:

• Contractual necessity: Processing required to enter into and perform the contract between you and cvl666 — including account registration, KYC verification, payment processing, and the delivery of gaming services. Without this processing, cvl666 cannot provide its services to you.
• Legal obligation: Processing required to comply with applicable legal and regulatory obligations, including anti-money laundering (AML) record-keeping, fraud reporting, and responses to lawful requests from law enforcement agencies.
• Legitimate interests: Processing carried out in pursuit of cvl666's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and aggregate analytics — provided those interests are not overridden by your own data protection rights.
• Consent: Processing carried out on the basis of your freely given, specific, and informed consent — specifically, the sending of marketing communications. You may withdraw your consent at any time without affecting the lawfulness of processing that took place before withdrawal.

4. Data Sharing & Disclosure

cvl666 does not sell your personal data. We share your data only with the categories of third parties described below, and only to the extent necessary for the stated purpose.

Payment Processing Partners

To process your deposits and withdrawals, cvl666 shares necessary financial data — such as your registered mobile wallet number or bank account identifier — with the relevant payment provider (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, or Mastercard). These providers process your data under their own privacy policies and are contractually required to use your data solely for the purpose of completing the specific transaction.

Identity Verification Providers

Where cvl666 uses a third-party KYC verification service, your identity documents may be transmitted to and processed by that provider's secure systems. The provider returns a verification result to cvl666 and is not permitted to retain or reuse your documents for any other purpose.

Game Software Providers

Game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive a pseudonymous player identifier (not your real name or contact details) to deliver game sessions and record round outcomes. These providers do not receive personally identifying registration data.

Fraud and Risk Management Services

cvl666 may share device fingerprint data, IP addresses, and transaction metadata with specialist anti-fraud service providers to assess the risk level of account activity. These providers act as data processors under contract with cvl666 and may not use this data for their own purposes.

Legal and Regulatory Disclosure

cvl666 will disclose personal data to law enforcement agencies, courts, or regulatory bodies when required to do so by a valid legal order, warrant, or regulatory instruction. Where permissible by law, cvl666 will notify the affected player of such a disclosure. cvl666 may also proactively disclose data where it believes, in good faith, that disclosure is necessary to prevent a crime, protect the safety of a person, or protect the legal rights of cvl666.

Corporate Transactions

In the event of a merger, acquisition, or sale of substantially all of cvl666's assets, player data may be transferred to the acquiring entity as part of that transaction. cvl666 will notify affected players of any such transfer via the email address registered to their account and will ensure the acquiring entity agrees to honour the terms of this Privacy Policy or provide a materially equivalent level of protection.

5. Cookies & Tracking Technologies

cvl666 uses cookies and similar client-side storage technologies to operate the platform, maintain your session, and understand how players interact with the site in aggregate. This section explains what types of cookies we use and the purpose of each.

What We Do Not Use

cvl666 does not use behavioural advertising cookies, third-party retargeting pixels, social media tracking scripts, or any cookie that tracks your activity across websites other than cvl666.app. We do not integrate Facebook Pixel, Google Ads conversion tags, or similar advertising network trackers into our platform.

Managing Your Cookie Preferences

You can manage cookie preferences through your browser settings. Most modern browsers allow you to view, block, or delete cookies stored by individual websites. Note that blocking strictly necessary cookies will prevent you from logging in and using the platform. For analytical and functional cookies, blocking them will not prevent you from accessing cvl666's services but may affect your user experience. Refer to your browser's help documentation for instructions on managing cookies.

Local Storage

In addition to cookies, cvl666 may use browser local storage to persist non-personal preference data (such as UI state) between sessions. Local storage data does not leave your device and is not transmitted to cvl666 servers unless explicitly included in a platform request.

6. Data Retention

cvl666 retains your personal data only for as long as is necessary to fulfil the purposes described in this Privacy Policy, or for as long as is required by applicable law. The following retention periods apply to the main categories of data we hold:

When the applicable retention period expires, personal data is securely deleted or irreversibly anonymised. Where deletion is not immediately technically feasible (e.g., backup media), the data is isolated from active systems and deleted at the next scheduled purge cycle.

7. Data Security

cvl666 implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Our security framework includes the following controls:

• Transport encryption: All data transmitted between your browser or app and the cvl666 platform is encrypted using TLS 1.2 or TLS 1.3 (256-bit AES). Connection security is verified via a valid SSL certificate issued by a trusted certificate authority.
• Password storage: Account passwords are never stored in plain text. Passwords are hashed using a strong adaptive hashing algorithm before storage, ensuring that even in the event of a data breach, raw passwords cannot be recovered.
• Access controls: Access to systems containing personal data is restricted to authorised cvl666 personnel on a strict need-to-know basis. All staff access is logged and reviewed periodically. Privileged access requires multi-factor authentication.
• KYC document security: Identity documents submitted for verification are stored in an encrypted, access-controlled document management system. Documents are accessible only to trained compliance officers directly involved in your verification case.
• Payment data tokenisation: Mobile wallet numbers and bank account identifiers are stored in tokenised form. Full card numbers and CVV codes are never stored on cvl666 infrastructure.
• Intrusion detection: cvl666's systems are monitored around the clock for suspicious activity using automated intrusion detection and log analysis tools. Security incidents are escalated to the security team immediately upon detection.
• Regular security reviews: cvl666 conducts periodic internal security assessments and vulnerability scans of its platform infrastructure to identify and remediate potential weaknesses before they can be exploited.

Data Breach Response

In the event of a personal data breach that poses a risk to your rights and freedoms, cvl666 will notify affected players without undue delay. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the steps cvl666 has taken to address the breach and mitigate its effects. Notifications will be sent to the email address registered to your account. If you believe your cvl666 account has been compromised, contact support immediately at [email protected].

8. Your Privacy Rights

As a player registered with cvl666, you have the following rights with respect to your personal data. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request" and include your registered account username and a description of your request.

• Right of Access: You have the right to request a copy of the personal data cvl666 holds about you. We will respond to access requests within 30 days and provide the data in a structured, commonly used format.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. Note that certain data (such as your registered name) may require re-verification of identity documents before changes can be applied.
• Right to Erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where the data has been processed unlawfully. This right is subject to our legal obligations to retain certain data (e.g., transaction records for AML compliance), which take precedence.
• Right to Restriction of Processing: In certain circumstances, you have the right to request that we restrict the processing of your personal data — for example, while a rectification request is being assessed, or where you contest the legal basis for processing.
• Right to Data Portability: Where processing is based on your consent or contractual necessity, and is carried out by automated means, you have the right to receive your personal data in a machine-readable format and to request that it be transmitted directly to another service provider where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data where cvl666 relies on legitimate interests as the legal basis. We will cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your rights, or the processing is required for legal claims.
• Right to Withdraw Marketing Consent: You may withdraw your consent to receive marketing communications at any time, with immediate effect, by updating your communication preferences in your account settings or by emailing [email protected].
• Right to Human Review of Automated Decisions: Where a significant decision affecting your account has been made by an automated process, you have the right to request a human review of that decision.

9. Third-Party Services

The cvl666 platform integrates with a number of third-party service providers to deliver its full range of features. While cvl666 takes care to engage only reputable providers and to enter into data processing agreements with each, players should be aware that these third parties operate under their own privacy policies for their own internal processes.

Game Providers

Games on the cvl666 platform are supplied by Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other studio partners. Game sessions are delivered via secure API integrations. These providers receive only the pseudonymous session data necessary to run the game (a session token, bet amount, and game configuration). They do not receive your name, NID, or contact details.

Payment Providers

bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard each operate under their own privacy policies and are subject to applicable Bangladeshi banking and financial regulations. cvl666 shares only the data strictly necessary to initiate and confirm each transaction.

Analytics and Infrastructure

cvl666 may use infrastructure-level services (such as cloud hosting, content delivery networks, and server monitoring tools) that process platform data on cvl666's behalf. These providers act as data processors bound by contractual obligations and are not permitted to access or use your personal data for their own purposes.

Links to External Content

The cvl666 platform does not contain links to external third-party websites within its main navigation or content areas. However, if any such links are present in specific promotional contexts, cvl666 accepts no responsibility for the privacy practices of those external sites. Players are encouraged to review the privacy policy of any third-party website they visit.

10. Policy Updates & Contact

cvl666 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform features. When material changes are made, we will publish the revised policy on this page with an updated effective date. Where the changes are significant, we will also notify registered players via the email address associated with their account.

We encourage you to review this Privacy Policy periodically. Your continued use of the cvl666 platform following the publication of any update constitutes your acknowledgement of the revised policy. If you do not agree with a material change to this policy, you should cease using the platform and request account closure.

How to Contact Us About Privacy

For any questions, concerns, or requests relating to this Privacy Policy or the personal data cvl666 holds about you, please contact us at:

• Email: [email protected] (subject: "Privacy Enquiry" or "Data Rights Request")
• Response time: We aim to acknowledge all privacy-related enquiries within 5 business days (Bangladesh Standard Time, UTC+6)