Privacy Policy — How cv666 app Protects Your Data
At cv666 app, the privacy and security of your personal data is a core commitment, not an afterthought. This Privacy Policy explains in clear English what information we collect from players in Bangladesh, why we collect it, how it is used, and what rights you hold over your own data.
Please Read Carefully: This Privacy Policy applies to all personal data collected through the cv666 app website at https://cv666-app.club and any associated services, features, or communications. By registering an account or continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy. If you have any questions about how your data is handled, contact us at [email protected] (plain text — not a clickable link).
Data Controller Identity
For the purposes of this Privacy Policy, cv666 app is the data controller responsible for the personal information collected from players who register and use the Platform. As data controller, cv666 app determines the purposes for which personal data is processed and the means by which that processing is carried out.
The Platform is operated under the brand name cv666 app and is accessible at https://cv666-app.club. All data processing activities described in this Privacy Policy are conducted in relation to the sports betting and online casino services offered through that domain.
cv666 app is committed to handling all personal data in a manner consistent with applicable data protection principles, including purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality. These principles guide every aspect of our data processing operations, from the moment you submit your registration details through to the permanent deletion of your account records at the conclusion of the mandatory retention period.
If you wish to exercise any of your data rights, submit a data subject access request, or raise a concern about the way your personal information is being handled, you may contact the cv666 app data team directly by writing to: [email protected]. We will acknowledge your request within 5 business days and aim to resolve it fully within 30 calendar days.
| Detail | Information |
|---|---|
| Brand Name | cv666 app |
| Website | https://cv666-app.club |
| Role | Data Controller |
| Market | Bangladesh (en-BD) |
| Contact | [email protected] |
| Policy Language | English |
| Effective Date | January 2026 |
Information We Collect
cv666 app collects personal data from players through several channels: directly from you when you register an account or interact with the Platform, automatically through your use of the website, and occasionally from third-party payment providers and identity verification services. The categories of personal data we collect are described below.
| Data Category | Examples |
|---|---|
| Identity Data | Full legal name, date of birth, National ID (NID) number, passport number, driving licence number, photograph from identity documents. |
| Contact Data | Email address, Bangladeshi mobile number (used for OTP verification), residential address in Bangladesh (Dhaka, Chittagong, Sylhet, Khulna, or other divisions). |
| Account Data | Username, encrypted password hash, account creation date, login history, session timestamps, device fingerprint. |
| Financial Data | bKash wallet number, Nagad wallet number, Rocket account number, Upay number, bank account details (City Bank, BRAC Bank, Dutch-Bangla Bank), transaction history in BDT (৳). |
| Transaction Data | Deposit amounts, withdrawal requests, bet history, game session logs, bonus claims, wagering records. |
| Technical Data | IP address, browser type and version, operating system, device type, screen resolution, time zone setting (Bangladesh Standard Time, UTC+6), referral URL. |
| Usage Data | Pages visited, games played, duration of sessions, click patterns, search queries within the Platform, feature interaction logs. |
| Communications Data | Records of live chat conversations, support ticket content, email correspondence, and any other communications you initiate with cv666 app. |
cv666 app operates on a principle of data minimisation. We collect only the personal data that is genuinely necessary for the specific purposes outlined in this Privacy Policy. We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic or biometric data (other than identity document photographs required for KYC), health data, or data concerning sexual orientation, unless such data is volunteered by you in the context of a responsible gaming self-assessment.
Children's Data: cv666 app does not knowingly collect personal data from any individual under the age of 18. The Platform is strictly for adults. If we become aware that personal data has been collected from a person under 18, that data will be deleted immediately and the associated account will be permanently closed. If you are a parent or guardian and believe a minor in your care has registered on the Platform, contact us at [email protected] immediately.
Mandatory vs. Optional Data: Certain personal data — such as your legal name, date of birth, email address, and mobile number — is mandatory for account registration. Without this data, we cannot create or maintain your account. Other data, such as preferences and optional profile details, is voluntary. Where data collection is mandatory, this will be indicated at the point of collection.
- We do not purchase personal data lists from third-party data brokers.
- We do not scrape personal data from social media platforms.
- Financial data is collected solely for payment processing and AML compliance — it is never sold to advertisers.
- Identity document images submitted for KYC are handled securely and deleted from active systems once verification is confirmed, subject to mandatory retention obligations.
Lawful Basis for Processing
Every processing activity carried out by cv666 app in relation to your personal data is underpinned by one or more lawful bases. cv666 app does not process personal data without a valid legal justification. The primary lawful bases we rely upon are described below.
Contractual Necessity: The majority of personal data processing at cv666 app is necessary for the performance of the contract between you and the Platform — that is, the provision of betting and gaming services under the Terms & Conditions you accepted at registration. This includes processing identity data to create your account, financial data to process deposits and withdrawals, and transaction data to settle bets and record game outcomes.
Legal Obligation: Certain processing activities are required to comply with applicable legal obligations. This includes KYC identity verification to meet anti-money laundering (AML) requirements, age verification to enforce the 18+ restriction, and the retention of financial transaction records for the statutory minimum period.
Legitimate Interests: cv666 app may process personal data where it has a legitimate interest in doing so, provided that interest is not overridden by your fundamental rights and freedoms. Legitimate interests relied upon include: fraud detection and prevention, platform security monitoring, responsible gaming interventions, internal analytics to improve the Platform, and communications regarding changes to services.
Consent: Where cv666 app relies on your consent as the lawful basis for processing — for example, to send you promotional emails, seasonal offers (Eid, Pohela Boishakh, BPL season promotions), or optional personalisation features — you will be clearly informed and given a genuine choice. You may withdraw your consent at any time without detriment to your account by contacting support or adjusting your notification preferences.
Withdrawing Consent: Withdrawing consent does not affect the lawfulness of any processing that was carried out before your withdrawal. It also does not affect processing that is justified on a different lawful basis (e.g., contract performance or legal obligation). If you withdraw marketing consent, you will continue to receive essential account communications such as password resets and transaction confirmations.
Our Core Data Protection Commitments
SSL Encryption
All data transmitted between your device and the cv666 app platform is protected by industry-standard SSL/TLS encryption. Your personal details and payment information are never sent over unencrypted channels.
Secure Data Storage
Personal data is stored on secured servers with access controls, firewalls, and intrusion detection systems. Only authorised personnel with a demonstrated operational need may access player records.
No Data Sales
cv666 app does not sell, rent, or trade your personal data to any third party for commercial gain. Your data is used exclusively to deliver and improve the services you have requested from us.
KYC Data Protection
Identity documents submitted for Know Your Customer verification are handled with the highest level of security. Document images are reviewed by authorised staff only and are not used for any purpose beyond identity verification.
Marketing Opt-Out
You can opt out of promotional communications at any time. cv666 app will honour your preferences and will not send marketing messages to players who have withdrawn their consent, though essential account notifications remain active.
Regular Policy Reviews
This Privacy Policy is reviewed and updated whenever there are material changes to our data processing activities or applicable legal requirements. The effective date at the top of this page always reflects the most recent revision.
How We Use Your Data
cv666 app uses the personal data we collect for a defined and limited set of purposes. We do not use personal data for purposes that are incompatible with those for which it was originally collected, and we do not engage in automated decision-making or profiling that produces legal or similarly significant effects without human review.
- Account Management: Creating, maintaining, and administering your account — including processing your registration, verifying your identity, and managing your login credentials.
- Service Delivery: Processing deposits and withdrawals via bKash, Nagad, Rocket, and Upay; settling bets; recording game session outcomes; and crediting bonuses to eligible accounts.
- Fraud Prevention and Security: Detecting and investigating suspicious account activity, preventing the use of the Platform for money laundering or fraud, and maintaining the integrity of the betting and gaming environment.
- AML and Age Compliance: Conducting KYC identity verification, confirming that all players are aged 18 or above, and meeting anti-money laundering record-keeping obligations.
- Customer Support: Responding to your support queries, resolving disputes, and maintaining records of communications for quality assurance and dispute resolution purposes.
- Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling, applying self-exclusion or cooling-off measures, and communicating with at-risk players.
- Platform Improvement: Analysing usage patterns and technical data in aggregate to identify areas for improvement, test new features, and optimise the user experience for Bangladeshi players.
- Marketing (with consent): Sending promotional offers, BPL season betting promotions, bonus announcements, and news about new games — but only to players who have opted in to marketing communications.
cv666 app does not use personal data to build individual advertising profiles for sale to third parties. Any analytics and segmentation activities carried out internally are for the purpose of improving the Platform and tailoring offers to players who have consented to receive them.
Where cv666 app uses automated systems to assist with fraud detection or responsible gaming monitoring, a human review step is built into any consequential outcome — such as account suspension, withdrawal delays, or a responsible gaming intervention. Fully automated decisions without human review are not used to produce outcomes that significantly affect your account.
Location Data: cv666 app does not collect precise real-time GPS location data. We do collect IP address data, which may be used to derive your approximate geographic location for the purpose of enforcing jurisdictional access controls and fraud prevention. Players accessing the Platform from a Prohibited Jurisdiction will be denied access regardless of any other data they have provided.
Purpose Limitation: If cv666 app intends to use your personal data for a purpose materially different from those listed above, we will contact you in advance to explain the new purpose and — where consent is the lawful basis — to seek your agreement before any such processing begins.
Cookies and Tracking Technologies
cv666 app uses cookies and similar tracking technologies — including local storage objects and session tokens — to operate the Platform effectively, maintain your login session, and collect usage analytics. A cookie is a small text file placed on your device by the Platform when you visit it. Cookies do not harm your device and do not contain executable code.
The Platform uses the following categories of cookies and tracking technologies:
| Cookie Type | Purpose |
|---|---|
| Strictly Necessary | Essential for the Platform to function. These cookies maintain your login session, enforce security controls, and enable the betting and payment features. They cannot be disabled. |
| Functional | Remember your account preferences such as language, preferred sports markets, and responsible gaming settings so you do not need to re-enter them on each visit. |
| Analytics | Collect aggregated, anonymised data about how players use the Platform — which pages are visited most, where users drop off, and how long game sessions last. Used solely to improve the Platform. |
| Security | Detect and prevent fraudulent login attempts, bot traffic, and suspicious account activity. These cookies assign a session fingerprint that is cross-referenced with login behaviour data. |
cv666 app does not use third-party advertising cookies or cross-site tracking pixels for the purpose of building external advertising profiles. The analytics cookies used on the Platform are limited to first-party and privacy-respecting tools that do not share identifiable data with advertising networks.
Most web browsers allow you to manage cookie preferences through the browser's settings menu. You can instruct your browser to refuse cookies or to alert you when cookies are being set. However, disabling strictly necessary cookies will prevent the Platform from functioning correctly, and you will not be able to access your account or use any of the betting and gaming features.
Session cookies are deleted automatically when you close your browser. Persistent cookies remain on your device for a defined period — typically between 30 days and 12 months depending on their function — after which they expire automatically. You can delete cookies at any time through your browser settings.
- Strictly necessary cookies are active on all pages of the Platform.
- Analytics cookies use anonymised identifiers — they do not contain your name, email, or payment details.
- No advertising retargeting cookies are used on cv666 app.
- Local storage is used to maintain game state across short interruptions in connectivity.
Data Sharing and Third Parties
cv666 app does not sell, rent, or disclose your personal data to third parties for their own commercial purposes. However, the operation of the Platform requires us to share limited personal data with a defined set of trusted service providers and, in certain circumstances, with regulatory or law enforcement authorities. All third-party service providers who process personal data on behalf of cv666 app are bound by data processing agreements that restrict their use of your data to the specific purpose for which it was shared.
| Recipient Category | Reason for Sharing |
|---|---|
| Payment Processors | bKash, Nagad, Rocket (Dutch-Bangla Bank), Upay, and partner banks receive the minimum transaction data necessary to process deposits and withdrawals in BDT. |
| Identity Verification | KYC identity data (name, date of birth, document images) is shared with accredited identity verification service providers for the sole purpose of confirming player identity and age. |
| Game Studios | Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive session tokens and stake data necessary to operate their games. No identity data is shared with game studios. |
| Legal Authorities | Personal data may be disclosed to law enforcement, courts, or regulatory authorities where required by law, pursuant to a lawful order, or to investigate serious fraud, money laundering, or criminal activity. |
| IT Infrastructure | Hosting, cloud storage, and security service providers who maintain the technical infrastructure of the Platform. All such providers operate under strict confidentiality obligations. |
cv666 app does not share personal data with social media platforms, advertising networks, data brokers, or any third party for purposes unrelated to the operation, security, or legal compliance of the Platform.
In the event that cv666 app undergoes a business restructuring, merger, or acquisition, personal data held by the Platform may be transferred to the relevant successor entity. In such circumstances, you will be notified in advance and the successor entity will be required to honour the commitments set out in this Privacy Policy.
International Data Transfers: Some of cv666 app's service providers — particularly game studios and cloud infrastructure partners — may be located outside Bangladesh. Where personal data is transferred to a recipient in another country, cv666 app ensures that appropriate safeguards are in place, such as standard contractual clauses or equivalent data protection commitments, to ensure your data remains protected to the same standard as described in this Privacy Policy.
- All third-party processors are contractually bound to process data only on cv666 app's documented instructions.
- cv666 app conducts due diligence on all third-party service providers before engaging them.
- Data shared with payment processors is limited to transaction reference data — full bank account details are not stored on Platform servers.
- No personal data is shared with advertisers or third-party marketing networks without your prior consent.
Data Retention
cv666 app retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with applicable legal and regulatory obligations, and to resolve any disputes or enforce the Terms & Conditions. Once the applicable retention period has expired and there is no longer a lawful basis for retaining the data, it is securely deleted or anonymised.
| Data Category | Retention Period |
|---|---|
| Account and Identity Data | 5 years from account closure or last account activity, whichever is later. |
| Financial Transaction Records | 5 years from the date of each transaction, in compliance with AML record-keeping requirements. |
| KYC Document Images | Deleted from active systems within 90 days of successful verification. Metadata retained for 5 years. |
| Betting and Game History | 5 years from account closure. Aggregated anonymised statistics may be retained indefinitely. |
| Support Communications | 2 years from the date of the last communication, unless related to an ongoing dispute. |
| Marketing Consent Records | Retained for the duration of the account and for 2 years after closure, to demonstrate compliance with consent obligations. |
| Technical and Usage Logs | 90 days for raw session logs; anonymised aggregate analytics retained indefinitely. |
Where an account has been closed following a fraud investigation or due to a confirmed breach of the Terms & Conditions, cv666 app may retain personal data for a longer period to the extent necessary to protect its legitimate interests and cooperate with law enforcement or regulatory inquiries.
At the end of the applicable retention period, personal data is securely deleted using industry-standard methods that prevent reconstruction or recovery of the deleted data. Physical document storage (where applicable) is disposed of using certified secure destruction procedures.
Self-Exclusion Records: Where a player has activated a permanent self-exclusion, cv666 app retains sufficient data — including the player's identity and contact details — for the lifetime of the self-exclusion to ensure that the player cannot re-register or be re-admitted to the Platform. This retention is carried out in the player's own long-term interest and is not subject to a right of erasure during the exclusion period.
Your Data Rights
As a player on the cv666 app platform, you hold a number of rights in relation to the personal data we hold about you. cv666 app respects and upholds these rights. To exercise any of the rights described below, contact our data team at [email protected]. We will verify your identity before processing any data rights request to ensure your data is not disclosed to an unauthorised person.
Right of Access
You have the right to request a copy of all personal data cv666 app holds about you, along with information about how it is being processed. We will respond within 30 calendar days.
Right to Rectification
If any personal data we hold is inaccurate or incomplete, you have the right to request that it be corrected. You may also update certain details directly through your account settings.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent. This right is subject to our legal retention obligations.
Right to Restrict Processing
You may ask us to suspend the processing of your personal data in certain circumstances — for example, while you contest the accuracy of data we hold, or while an objection is being assessed.
Right to Data Portability
Where processing is based on your consent or contract performance and is carried out by automated means, you may request your personal data in a structured, machine-readable format for transfer to another service.
Right to Object
You have the right to object to processing based on legitimate interests — including direct marketing. Where you object to marketing, your preference will be applied immediately and without detriment to your account.
Rights Regarding Automated Decisions
You have the right not to be subject to a decision based solely on automated processing that produces significant legal or similarly significant effects. cv666 app ensures human review is part of any consequential automated process.
Right to Withdraw Consent
Where processing is based on consent, you may withdraw that consent at any time by contacting support. Withdrawal does not affect the lawfulness of prior processing carried out under that consent.
How to Submit a Data Rights Request: Email [email protected] with the subject line "Data Rights Request" and specify which right you wish to exercise. We will verify your identity — typically by confirming details only the account holder would know — before processing your request. We aim to fulfil all requests within 30 calendar days. Complex requests may take up to 60 days; in such cases we will notify you of the extension and the reason for it.
Limitations on Data Rights: Certain rights are not absolute. For example, the right to erasure does not apply where cv666 app is required to retain data under AML record-keeping obligations, or where data is needed to establish, exercise, or defend a legal claim. Where we are unable to fulfil a data rights request in full, we will explain the specific reason and the legal basis for the limitation.
cv666 app reviews its privacy practices and this Privacy Policy on a regular basis. Any material changes — such as new categories of data being collected, new third-party sharing arrangements, or changes to retention periods — will be communicated to registered players via the email address on their account before taking effect. The updated policy will also be published on this page with a revised effective date. Continued use of the Platform following the publication of changes constitutes acceptance of the revised Privacy Policy.
If you have any concerns about how cv666 app handles your personal data that we have not addressed to your satisfaction, you are entitled to escalate your complaint to the relevant data protection authority in your jurisdiction. We strongly encourage you to contact us first so we have the opportunity to resolve your concern directly.
Questions About Your Privacy on cv666 app?
Our support team is available 24/7 to answer any questions about this Privacy Policy, your personal data, or your account. You can also explore our FAQ for quick answers, or review our full Terms & Conditions and Responsible Gaming commitments.