cv667 Privacy
Policy

1. Overview & Scope

This Policy applies to all personal data processed by cv667 in connection with the operation of the platform, including data collected via the website at https://cv667.io, through the cv667 mobile-optimised interface, through communications with our customer support team, and through payment processing activities involving mobile financial services including bKash, Nagad, Rocket, and Upay.

This Policy covers all individuals who interact with cv667 in any of the following capacities: registered players, individuals who have commenced but not completed registration, individuals who contact our support team, and visitors who browse the platform without registering an account (in respect of technical data collected via cookies and server logs).

cv667 operates exclusively within the Bangladesh market. All account balances are maintained in Bangladeshi Taka (৳ BDT) and all payment processing is conducted through Bangladeshi mobile financial services. Data storage and processing operations are conducted with Bangladesh-resident users in mind, and this Policy reflects applicable data protection standards relevant to that context.

2. Data Controller

For the purposes of this Privacy Policy, cv667 acts as the data controller in respect of all personal data collected from players and platform users. As data controller, cv667 determines the purposes for which and the means by which personal data is processed.

If you have any questions about the handling of your personal data, wish to exercise any of your privacy rights, or wish to lodge a complaint about our data practices, you may contact the cv667 Data & Privacy team using the contact details set out in Section 15 of this Policy.

Contact for Privacy Matters:

• Email: [email protected] (mark your subject line "Privacy Request")
• Live Chat: Available 24/7 from your account dashboard — average response: 2–5 minutes
• Operating Hours: Bangladesh Standard Time (BST, UTC+6), every day of the year

3. Data We Collect

cv667 collects personal data in the following categories. We collect only information that is necessary and proportionate to the purpose for which it is collected.

3.1 Registration Data

• Full legal name
• Date of birth (for age verification — players must be 21 or older)
• Mobile phone number (used as the primary account identifier)
• Preferred username
• District or city of residence (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh)

3.2 Identity Verification (KYC) Data

• National Identity Card (NID) number and scan/photograph
• Passport number and scan (where provided as an alternative to NID)
• Birth certificate (where required for age verification)
• Selfie or live photograph (where required for facial comparison against identity document)

3.3 Financial & Payment Data

• Mobile wallet number (bKash, Nagad, Rocket, or Upay number registered in your name)
• Transaction reference numbers for deposits and withdrawals
• Transaction amounts and timestamps
• Account balance history (maintained for auditing and responsible gaming monitoring purposes)

3.4 Account Activity Data

• Game session logs (game title, session start/end time, wager amounts, outcomes)
• Sports betting history (markets, stakes, odds, settlement outcomes)
• Bonus and promotion redemption records
• Login timestamps and session duration records
• Responsible gaming tool settings (deposit limits, session reminders, self-exclusion status)

3.5 Technical & Device Data

• IP address at time of login and registration
• Device type, operating system, and browser version
• Cookie identifiers and session tokens (see Section 11)
• Platform interaction logs (page views, feature usage, error reports)

3.6 Communication Data

• Content and metadata of live chat conversations with our support team
• Email correspondence sent to or received from [email protected]
• Records of complaints formally submitted through the complaints process
• Records of your communication preferences and opt-in/opt-out history for marketing communications

4. How We Collect Data

cv667 collects personal data through the following channels:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or update your account settings.
• Automatically: Through the platform's standard technical operation — including server logs, session cookies, and device fingerprinting — when you browse or use the cv667 website.
• From payment processors: Transaction confirmation data from bKash, Nagad, Rocket, and Upay is automatically shared with cv667 upon completion of a payment to confirm deposit or withdrawal status.
• From game providers: Game session data (session duration, wager amounts, game outcomes) is passed to cv667 by third-party game providers including Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe for the purpose of account crediting, responsible gaming monitoring, and auditing.
• From identity verification services: Where we use a third-party identity verification provider to assist with KYC processing, that provider may return a verification result and a confidence score to cv667. The provider does not store your document images on our behalf beyond the period needed for verification.

5. How We Use Your Data

cv667 uses the personal data it collects for the following specific purposes:

• Account creation and management: To register your account, authenticate your logins, maintain your account balance, and enable you to use all platform features.
• Age and identity verification: To confirm that you are at least 21 years of age and that your identity matches the registration details provided, as required by our Terms & Conditions.
• Payment processing: To process your deposits and withdrawals via your registered mobile wallet, verify that payment methods are registered in your name, and maintain accurate financial records.
• Customer support: To respond to your queries, resolve complaints, and maintain records of support interactions for quality assurance.
• Responsible gaming: To monitor your account activity for signs of problem gambling behaviour, enforce deposit limits and self-exclusion settings you have activated, and fulfil our obligations under our Responsible Gaming policy.
• Fraud prevention and security: To detect and investigate suspected fraud, money laundering, multi-accounting, and other prohibited activities, and to protect the security of player accounts and the platform as a whole.
• Legal and compliance obligations: To maintain records required for financial auditing, dispute resolution, and any other obligations that may apply.
• Platform improvement: To analyse aggregated, anonymised usage data and identify opportunities to improve platform performance, game selection, and user experience.
• Marketing communications (opt-in only): To send promotional offers, bonus notifications, and seasonal campaign messages (such as Eid or BPL season promotions) to players who have explicitly opted in to receive such communications.

6. Legal Basis for Processing

cv667 processes personal data on the following legal bases:

Where cv667 relies on legitimate interests as the legal basis for processing, we have assessed that those interests are not overridden by your privacy rights and interests. You may object to processing based on legitimate interests at any time by contacting us — see Section 10 for details of your rights.

Where we rely on your consent for processing (specifically, for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

7. Data Sharing & Disclosure

cv667 does not sell, rent, or trade personal data. We share personal data with third parties only in the following limited circumstances:

• Game providers: Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, Spribe, and other integrated game providers receive the minimum session data necessary to operate their games within the cv667 platform and to return game results to us. These providers operate under data processing agreements with cv667 and are not permitted to use your data for any purpose other than game delivery.
• Payment processors: bKash, Nagad, Rocket, and Upay receive your mobile wallet number and transaction data solely for the purpose of processing your requested deposit or withdrawal. cv667 does not transmit any additional personal data to these providers beyond what is required for payment execution.
• Identity verification services: Where a third-party KYC provider is used to assist with document verification, your identity document image and a facial comparison photograph may be shared with that provider for the sole purpose of verification. The provider is contractually prohibited from retaining or reusing your data.
• Professional advisers: cv667's legal advisers, auditors, and accountants may have access to personal data where strictly necessary to perform their professional services. All such advisers are bound by confidentiality obligations.
• Law enforcement and regulatory authorities: cv667 will disclose personal data to law enforcement agencies, government authorities, or courts where required to do so by applicable law, by court order, or in connection with the investigation of suspected fraud, money laundering, or other serious criminal offences.
• Business successors: In the event of a merger, acquisition, or sale of all or substantially all of cv667's assets, personal data held by cv667 may be transferred to the successor entity. Players will be notified of any such transfer and given the opportunity to close their account if they do not wish their data to be transferred.

8. Data Retention

cv667 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or for the minimum period required by applicable legal or compliance obligations. The following retention periods apply:

When a retention period expires, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.

9. Security Measures

cv667 takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, accidental loss, disclosure, destruction, or alteration.

Technical Safeguards:

• 256-bit SSL/TLS encryption on all data transmitted between your device and our platform.
• One-way cryptographic hashing for all account passwords. Passwords are never stored or transmitted in plaintext.
• Encrypted data storage for all sensitive personal and financial data held on our servers.
• Access controls ensuring that only authorised cv667 personnel can access personal data, and only to the extent required by their specific role.
• Automated fraud detection systems that monitor login and payment activity for signs of unauthorised access or suspicious behaviour.
• Regular security assessments of platform infrastructure and third-party integrations.

Organisational Safeguards:

• All cv667 staff who handle personal data receive data protection training and are bound by confidentiality obligations.
• Access to production systems and player data is restricted on a strict need-to-know basis.
• Third-party service providers who process personal data on our behalf are required to maintain equivalent security standards under the terms of their data processing agreements with cv667.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, cv667 will notify affected players without undue delay and will take all reasonable steps to contain the breach and mitigate its impact.

10. Your Privacy Rights

cv667 is committed to respecting your privacy rights. You have the following rights in respect of your personal data held by cv667:

• Right of Access: You have the right to request a copy of the personal data cv667 holds about you. We will respond to access requests within 30 days of receipt.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You can update most account details yourself via the account dashboard; for KYC data corrections, please contact support.
• Right to Erasure: You have the right to request that cv667 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. Note that this right is subject to our legal obligation to retain certain data (particularly financial records) for minimum statutory periods.
• Right to Restriction of Processing: You have the right to request that cv667 restrict the processing of your personal data in certain circumstances — for example, while a dispute about data accuracy is being resolved.
• Right to Data Portability: You have the right to receive a structured, machine-readable copy of personal data you have provided to cv667, where that processing is based on consent or contractual necessity.
• Right to Object: You have the right to object to processing based on cv667's legitimate interests. Where you object, cv667 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time via the account dashboard or by contacting support. Withdrawal does not affect the lawfulness of processing before withdrawal.

To exercise any of the above rights, please contact cv667 at [email protected] with the subject line "Privacy Request", providing your account username and a description of your request. We will verify your identity before processing the request and will respond within 30 days. Complex requests may require up to 60 days; we will notify you if this is the case.

11. Cookies & Tracking

cv667 uses cookies and similar tracking technologies to operate the platform, maintain your session, and improve your experience. The following categories of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They include session authentication tokens, security cookies, and load-balancing identifiers. These cookies cannot be disabled without affecting your ability to use the platform.
• Functional Cookies: These cookies remember your preferences and settings — such as your preferred game lobby view or language settings — to provide a more personalised experience.
• Analytical Cookies: These cookies collect anonymised data about how players use the platform — such as which pages are visited most often and where errors occur — to help us improve the platform's performance and usability. Individual users are not identifiable from analytical cookie data.
• Session Integrity Cookies: Short-lived cookies used to maintain the integrity of your current play session and prevent cross-site request forgery (CSRF) attacks.

cv667 does not use third-party advertising cookies or behavioural tracking cookies that profile you across external websites. The only third-party scripts that may set cookies on the cv667 platform are those belonging to our integrated game providers, which operate exclusively within the game interface for the purpose of game session management.

You may manage cookie preferences through your browser settings. Please be aware that disabling strictly necessary cookies will impair your ability to log in and use the platform.

12. Protection of Minors

cv667 is strictly an adult platform. We do not knowingly collect personal data from any person under the age of 21. Our registration process includes date-of-birth verification, and we require players to confirm that they meet the minimum age requirement at the point of registration.

Where cv667 has reasonable cause to suspect that a registered account is held by a person under the age of 21, the account will be immediately suspended pending age verification. If age verification confirms that the account holder is underage, the account will be permanently closed, all wagers placed during the period of underage use will be voided, and any deposited funds will be returned to the originating mobile wallet.

If you believe that a minor is accessing the cv667 platform, please contact us immediately at [email protected]. cv667 takes the protection of minors with the utmost seriousness and will act promptly on any credible report of underage access.

13. Third-Party Services

The cv667 platform integrates with a number of third-party service providers to deliver its full range of features. Each of these providers operates under its own privacy policy and data handling standards. cv667 is not responsible for the privacy practices of third-party providers, but we do require all integrated providers to meet minimum data security standards as a condition of integration.

The following categories of third-party services are integrated with the cv667 platform:

• Game Providers: Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe deliver their game content directly within the cv667 platform. These providers receive only the session data required to operate their games and return results.
• Mobile Payment Services: bKash, Nagad, Rocket, and Upay process deposit and withdrawal transactions. These providers receive your registered mobile wallet number and transaction amount. Their handling of that data is governed by their own terms and privacy policies.
• Identity Verification: Where a third-party KYC provider is engaged to assist with document verification, it receives identity document images and facial photographs solely for the purpose of verification. Retention by the KYC provider is limited to the minimum period necessary for the verification task.
• Content Delivery Networks (CDN): Static assets such as game thumbnails, platform graphics, and interface components may be served via CDN infrastructure. CDN providers do not receive personal player data beyond standard server log entries (IP address and request metadata).

Links to third-party websites or services that may appear in promotional content on the cv667 platform are provided for reference only. cv667 does not endorse the privacy practices of any external website and encourages users to review the privacy policy of any third-party service they choose to access.

14. Changes to This Policy

cv667 reserves the right to update or amend this Privacy Policy at any time. Changes may be made to reflect updates to our services, changes in applicable law, or improvements to our data handling practices. The effective date at the top of this Policy will be updated whenever a substantive change is made.

Where a change is material — meaning it significantly alters the way we collect, use, or share your personal data — cv667 will notify registered players via a notice displayed on the platform dashboard and, where we hold a valid email address or mobile number for your account, via a direct notification to that contact point. The notification will be issued at least 14 days before the change takes effect, giving you time to review the updated Policy and, if you do not agree, to close your account before the change applies to you.

Minor changes — such as corrections of typographical errors, clarifications that do not alter the substance of any provision, or updates to contact details — may be made without advance notice, though the effective date will always be updated to reflect the most recent revision.

Your continued use of the cv667 platform after the effective date of any update to this Policy constitutes your acceptance of the revised terms. We encourage you to review this Policy periodically to stay informed about how we protect your personal data.

15. Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or have a concern about how cv667 has handled your personal data, please contact us using the details below:

• Privacy & Data Queries: [email protected] — use subject line "Privacy Request"
• Live Chat Support: Available 24/7 from your account dashboard — average response time 2–5 minutes
• Response Commitment: We will acknowledge your request within 48 hours and provide a full response within 30 days (Bangladesh Standard Time, UTC+6)

cv667 is committed to resolving all privacy-related queries and complaints promptly and fairly. If you submit a complaint, we will investigate it thoroughly and communicate our findings and any remedial action taken to you in writing.

If you are not satisfied with cv667's response to your complaint, you retain the right to escalate the matter through any applicable legal channels available to you as a resident of Bangladesh.