cv663 Privacy Policy

cv663 ("the Platform", "we", "our", or "us") is committed to protecting the privacy and personal data of every individual who accesses, registers with, or uses the cv663 online casino and sports betting platform, accessible at cv663.io. This Privacy Policy constitutes the complete and binding description of how cv663 collects, processes, stores, shares, and protects personal data in connection with the operation of the Platform.

This Policy applies to all users of the cv663 Platform, including visitors who browse without registering, registered account holders, and any individual who contacts cv663 via the support email or any other communication channel. By accessing or using the cv663 Platform in any capacity, you acknowledge that you have read, understood, and agreed to the data practices described in this Policy.

This Privacy Policy should be read in conjunction with the cv663 Terms & Conditions and Responsible Gaming Policy. Where this Policy refers to "personal data", it means any information that identifies or could reasonably be used to identify you as an individual, whether alone or in combination with other data held by cv663.

cv663 collects personal data across several categories, depending on how you interact with the Platform. The following table summarises the categories of personal data we may collect and retain:

cv663 does not knowingly collect sensitive personal data categories such as biometric data, medical or health information, racial or ethnic origin data, or political opinions, and we ask that you do not submit such data through any channel on the Platform.

cv663 collects personal data through the following channels and mechanisms:

• Direct submission: Data you voluntarily provide when registering an account, completing the KYC process, making a deposit or withdrawal request, submitting a support enquiry, or updating your account profile.
• Automated technical collection: Technical and usage data collected automatically each time you access the cv663 Platform, via server logs, session tracking, and standard web analytics mechanisms.
• Cookies and similar technologies: cv663 uses first-party cookies and similar session identifiers to maintain your login state, store user preferences, and gather aggregated analytics data on Platform usage patterns. See Section 7 for full details.
• Payment processors: When you deposit or withdraw using bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, or BRAC Bank, the relevant payment provider may pass transaction reference data to cv663 to confirm payment status and reconcile your account balance.
• KYC and identity verification providers: In some circumstances, cv663 engages third-party identity verification services to cross-reference the documents you submit against publicly available records for the purpose of age and identity confirmation.
• Fraud prevention services: cv663 may receive risk signals or device fingerprint summaries from third-party fraud detection partners to help identify suspicious account activity or payment fraud.

cv663 processes your personal data only where a valid legal basis exists for doing so. The primary legal bases on which we rely are as follows:

• Contractual necessity: Processing is required to perform the contract between you and cv663 — specifically, to register your account, process deposits and withdrawals in BDT, verify your identity, and provide access to games and betting markets.
• Legal obligation: Processing is necessary for cv663 to comply with applicable legal obligations, including anti-money laundering (AML) requirements, Know Your Customer (KYC) rules, and financial record-keeping obligations.
• Legitimate interests: Processing is carried out in pursuit of cv663's legitimate business interests — including fraud detection, platform security, responsible gaming monitoring, and aggregate product analytics — where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where cv663 processes your data for marketing communications (email or SMS), we do so only on the basis of your freely given, specific, and informed consent. You may withdraw this consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

The personal data cv663 collects is used exclusively for the following purposes:

• Account registration and management: Creating and maintaining your cv663 player account, authenticating your identity at login, and enabling account management features such as password resets and profile updates.
• Age and identity verification (KYC): Confirming that you are at least 21 years of age and that the identity information provided is accurate and genuine, in compliance with responsible gaming and anti-fraud obligations.
• Payment processing: Facilitating BDT deposits and withdrawals via your chosen payment method (bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, or BRAC Bank), reconciling transactions, and maintaining accurate financial records.
• Platform delivery: Providing access to cv663's full range of products including live casino tables, slots, cricket betting, Dragon Gate, and the cv663 Loyalty Program.
• Responsible gaming: Monitoring account activity for indicators of problem gambling, enforcing self-exclusion requests and deposit limits, and providing responsible gaming tools to players who request them.
• Fraud and security: Detecting and preventing fraudulent transactions, account takeovers, bonus abuse, money laundering, and other prohibited conduct as described in the Terms & Conditions.
• Customer support: Responding to your support enquiries, resolving account disputes, and communicating important platform updates or policy changes.
• Legal compliance: Fulfilling cv663's obligations under applicable law, including responding to lawful requests from competent authorities and maintaining records required by financial regulation.
• Marketing (consent-based only): Sending you promotional offers, bonus notifications, and seasonal promotions (e.g., Eid, BPL, T20 World Cup offers) where you have explicitly opted in to receive such communications.
• Platform improvement: Analysing aggregated, anonymised usage data to understand how players interact with cv663 and to improve game selection, interface design, and overall platform performance.

cv663 does not sell, rent, or trade your personal data to any third party for commercial purposes. Personal data is shared only in the limited circumstances described below, and always subject to contractual data protection obligations that require recipients to handle your data securely and in accordance with applicable law.

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and BRAC Bank receive only the transaction reference data necessary to execute your deposit or withdrawal. These providers operate under their own privacy policies and regulatory frameworks.
• KYC and identity verification providers: Third-party verification services receive copies of the identity documents you submit solely for the purpose of confirming your age and identity. These providers are contractually prohibited from using your data for any other purpose.
• Game studio providers: Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, Spribe, and other certified game studios may receive anonymised session identifiers to facilitate game delivery. These providers do not receive your full identity or payment data.
• Fraud detection and security partners: Specialist fraud prevention services may receive technical data (IP addresses, device fingerprints, transaction patterns) to identify suspicious activity. These partners are bound by strict confidentiality agreements.
• Legal and regulatory authorities: cv663 may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required to do so by applicable law, court order, or regulatory instruction, without prior notice to you where legally required.
• Business transfers: In the event of a merger, acquisition, or transfer of substantially all of cv663's assets, personal data held by cv663 may be transferred to the acquiring entity, subject to equivalent data protection commitments.

cv663 uses cookies and similar session-tracking technologies to operate the Platform effectively, maintain your login session, remember your preferences, and gather aggregated analytics on how the Platform is used. The following categories of cookies are used on cv663.io:

• Strictly necessary cookies: These cookies are essential for the Platform to function. They maintain your authenticated session, remember your language preference, and enable core features such as account access and balance display. These cookies cannot be disabled without affecting Platform functionality.
• Functional cookies: These cookies remember choices you make — such as your preferred game lobby layout or notification settings — to provide a more personalised experience. They do not track your activity across other websites.
• Analytics cookies: cv663 uses first-party analytics tools to collect aggregated, anonymised data on page visits, session duration, feature usage, and navigation paths. This data is used to improve the Platform and is not linked to your individual identity.
• Security cookies: Short-lived cookies used to support fraud detection and prevent cross-site request forgery (CSRF) attacks on your account.

cv663 does not use third-party advertising cookies or behavioural targeting cookies. No data collected via cookies on cv663.io is shared with advertising networks or social media platforms for the purpose of serving you targeted advertisements on other websites.

cv663 applies a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include but are not limited to:

• 256-bit SSL/TLS encryption: All data transmitted between your device and cv663 servers is encrypted using industry-standard SSL/TLS protocols, indicated by the padlock icon and HTTPS prefix in your browser address bar.
• Password hashing: Account passwords are stored using bcrypt hashing with a unique salt per user. cv663 staff cannot access your password in plaintext form under any circumstances.
• Access controls: Access to personal data within cv663's internal systems is restricted to authorised personnel who require it for their specific operational role. All internal data access is logged and audited.
• Two-factor authentication (2FA): cv663 supports and encourages the use of two-factor authentication on player accounts to provide an additional layer of protection against unauthorised login attempts.
• Infrastructure security: cv663's servers are hosted in secured data centres with physical access controls, network-level firewalls, intrusion detection systems, and regular vulnerability scanning.
• Incident response: cv663 maintains a data breach response procedure. In the event of a security incident that poses a significant risk to your personal data, cv663 will notify affected users within a reasonable timeframe consistent with applicable obligations.

While cv663 applies robust security measures, no internet-based platform can guarantee absolute security. You are responsible for keeping your account credentials confidential and for notifying cv663 support immediately if you suspect unauthorised access to your account.

cv663 retains your personal data only for as long as is necessary to fulfil the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by applicable law. The following general retention periods apply:

Upon expiry of the applicable retention period, cv663 will securely delete or anonymise your personal data so that it can no longer be linked back to you as an individual. Anonymised and aggregated data that cannot identify you may be retained indefinitely for statistical and analytical purposes.

As a player on the cv663 Platform, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact the cv663 support team at the email address listed in Section 14. cv663 will respond to verified requests within 30 calendar days.

• Right of access: You have the right to request a copy of all personal data cv663 holds about you, along with information about how it is processed and for what purposes.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data held by cv663. You may also update many account details directly through the account settings area of the Platform.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where you object to processing on grounds of legitimate interest. This right is subject to cv663's legal retention obligations — we may not be able to delete all data immediately where retention is required by law.
• Right to restriction of processing: In certain circumstances you may request that cv663 restricts processing of your data — for example, while a dispute about its accuracy is being resolved.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you may request a structured, machine-readable copy of the personal data you have directly provided to cv663.
• Right to object: You have the right to object to processing based on cv663's legitimate interests. cv663 will cease that processing unless it can demonstrate compelling legitimate grounds that override your interests or where processing is necessary for legal claims.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time by contacting support or using the unsubscribe mechanism in any marketing communication.

The cv663 Platform is strictly intended for adults aged 21 years and above. cv663 does not knowingly collect personal data from individuals under the age of 21. Registration, account creation, and participation in any gaming or betting activity on the Platform by anyone under 21 is prohibited.

If cv663 becomes aware or has reasonable grounds to suspect that a registered account holder is under the age of 21, we will immediately suspend the account, conduct an age verification review, and — if the suspicion is confirmed — permanently close the account. Any account balance, including winnings, accrued by an underage player will be forfeited in its entirety in accordance with the cv663 Terms & Conditions.

If you are a parent or guardian and believe that a minor in your care has registered an account on cv663.io, please contact the support team immediately at the email address provided in Section 14. cv663 will investigate and act on any such report as a matter of urgent priority.

cv663 may send you promotional communications, bonus notifications, and information about seasonal offers — including those tied to Bangladeshi cultural and sporting events such as Eid, Pohela Boishakh, BPL, IPL, and T20 World Cup tournaments — where you have given explicit, informed consent to receive such communications.

• Opt-in only: Marketing communications are sent only to players who have actively opted in during registration or via their account settings. cv663 does not send unsolicited marketing messages to players who have not consented.
• Opt-out at any time: You may withdraw your consent to receive marketing communications at any time by clicking the unsubscribe link in any marketing email, by updating your notification preferences in your account settings, or by contacting the cv663 support team directly.
• No third-party marketing: cv663 does not share your contact details with any third-party advertiser, affiliate network, or marketing partner for the purpose of sending you their own promotional communications.
• Transactional communications: Certain non-marketing communications — such as deposit confirmations, withdrawal notifications, password reset emails, KYC status updates, and important policy change notices — are sent regardless of your marketing preference settings, as they are necessary for the operation of your account.

Withdrawing your consent to marketing communications will not affect the quality, availability, or terms of the cv663 Platform services available to you. Your account will remain fully active and operational whether or not you choose to receive promotional messages.

cv663 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, platform functionality, or our internal data practices. All amendments will be published on this page at cv663.io/privacy-policy with an updated "Last Updated" date clearly displayed at the top of the document.

Where a change is material — meaning it significantly affects how we process your personal data or reduces your rights under this Policy — cv663 will provide advance notice via the email address registered to your account at least 14 calendar days before the change takes effect. Your continued use of the cv663 Platform following the effective date of any revision constitutes your acceptance of the updated Privacy Policy.

If you do not agree with any amendment to this Privacy Policy, you should cease using the Platform and contact the cv663 support team to request account closure and the exercise of any applicable data rights described in Section 10.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which cv663 processes your personal data, please contact our dedicated privacy and support team. We are available 24 hours a day, 7 days a week, including Bangladeshi public holidays, and aim to respond to all written privacy enquiries within 24 hours (Bangladesh Standard Time, UTC+6).

• Support email: [email protected] (plain text — not a clickable link)
• Subject line for data rights requests: "Data Rights Request — [Your Account Username]"
• Subject line for privacy concerns: "Privacy Concern — [Brief Description]"
• Response time: cv663 aims to acknowledge all privacy-related enquiries within 24 hours and to provide a substantive response within 30 calendar days.
• Language: All privacy-related correspondence must be submitted in English to ensure accurate and timely processing of your request.

cv663 is committed to resolving all privacy concerns fairly and transparently. If you are not satisfied with the outcome of your enquiry, you retain the right to escalate your complaint through any applicable dispute resolution mechanism or competent authority available in your jurisdiction.