Privacy Policy — cv664

1 About This Policy

This Privacy Policy ("Policy") describes how cv664 ("we", "us", "our") collects, uses, stores, shares, and protects personal information when you use our online casino and sports betting platform at https://cv664.io ("the Platform"). It applies to all registered players, visitors to the Platform, and any individual who contacts cv664 for support or other purposes.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming page, which together govern your use of the cv664 platform. Where there is any conflict between this Policy and our Terms & Conditions on a data-related matter, this Policy takes precedence.

2 Who We Are

For the purposes of this Policy, the data controller responsible for the personal data of cv664 players is the operator of the cv664 platform. cv664 operates the Platform at https://cv664.io and is responsible for deciding how and why your personal data is processed.

If you have any questions about this Policy, wish to exercise any of your data rights, or want to raise a concern about how your data has been handled, you can contact our Data Privacy team using the contact details set out in Section 14 of this Policy. We aim to respond to all privacy-related enquiries within 30 days.

3 Data We Collect

cv664 collects personal data from you in three primary ways: directly from you when you register, use the Platform, or contact us; automatically when you use the Platform (via cookies and similar tracking technologies); and from third-party sources such as identity verification providers and payment processors.

Data You Provide Directly

• Registration data: Full legal name, date of birth, email address, Bangladeshi mobile number, and a chosen password when you create your cv664 account.
• Verification documents: Copies of your National Identity Card (NID), passport, or driving licence submitted as part of the KYC process.
• Financial information: Details of the payment method you use to deposit and withdraw, including mobile banking account numbers (bKash, Nagad, Rocket, Upay) and card details (Visa, Mastercard) where applicable. Full card numbers are not stored by cv664 — they are processed directly by our PCI-DSS compliant payment partners.
• Support communications: Any information you share with us when contacting our support team via live chat, email, or WhatsApp.
• Responsible gaming preferences: Settings you apply to your account such as deposit limits, loss limits, session time limits, and self-exclusion requests.

Data Collected Automatically

• Technical data: Your IP address, browser type and version, device type, operating system, screen resolution, and connection data collected automatically when you visit or use the Platform.
• Usage data: Pages visited, time spent on the Platform, games played, bets placed, features used, clicks, and navigation paths through the Platform.
• Session data: Login and logout timestamps, session duration, and inactivity periods.
• Cookie data: Information stored in cookies and similar local storage technologies on your device. See Section 7 for full details on our cookie practices.

Data from Third Parties

• Identity verification providers: Results and risk scores from third-party KYC and age verification services that we use to confirm your identity and age.
• Payment processors: Transaction confirmation data, payment status updates, and fraud screening results from our payment partners including bKash, Nagad, Rocket, Upay, and card processing networks.
• Fraud and risk databases: Information from industry-standard fraud prevention databases that help us identify accounts associated with known fraudulent activity.

4 How We Use Your Data

cv664 uses the personal data we collect for the following specific purposes. We do not use your data for any purpose not listed here without first obtaining your consent or informing you of the new purpose.

• Account creation and management: To register your account, maintain it in good standing, enable login, and apply your account settings and preferences.
• Identity and age verification: To verify that you are who you say you are and that you are at least 21 years of age, as required by our platform rules and responsible gaming commitments.
• Processing deposits and withdrawals: To initiate, confirm, and record financial transactions on your cv664 account, including deposits via bKash, Nagad, Rocket, and Upay and withdrawals to your registered payment method.
• Delivering gaming services: To provide access to sports betting (cricket, football, kabaddi), live casino games, slots, and all other products available on the Platform.
• Customer support: To respond to your enquiries, resolve disputes, investigate complaints, and maintain records of support interactions for quality and compliance purposes.
• Fraud and money laundering prevention: To detect, investigate, and prevent fraudulent transactions, account abuse, money laundering, and other criminal activity on the Platform.
• Responsible gaming: To monitor account activity for signs of problem gambling behaviour, apply any responsible gaming tools you have set, and reach out proactively where our safeguarding obligations require it.
• Legal and regulatory compliance: To meet our obligations under applicable laws and regulations, including maintaining accurate financial records, cooperating with law enforcement where required, and responding to legal processes.
• Platform improvement: To analyse aggregated, anonymised usage data to understand how players use the Platform and to improve our products, features, and user experience.
• Marketing and promotions: To send you promotional offers, bonus notifications, and information about new games or features — but only where you have given your consent to receive such communications. You can withdraw this consent at any time.

5 Legal Bases for Processing

Every instance of personal data processing at cv664 is carried out under one of the following recognised legal bases:

• Contractual necessity: Processing that is required to perform our contract with you — i.e., to operate your cv664 account, process your bets and transactions, and deliver the services you have signed up for.
• Legal obligation: Processing that is required for cv664 to comply with applicable laws — including anti-money laundering regulations, Know Your Customer requirements, and financial record-keeping obligations.
• Legitimate interests: Processing carried out for purposes that are in our legitimate business interests and that do not override your rights — such as fraud prevention, platform security, and improving our services through analytics. We conduct a balancing test before relying on legitimate interests to ensure your interests are not prejudiced.
• Consent: Processing carried out with your explicit agreement — most notably the sending of marketing emails and SMS messages, and the placement of non-essential cookies on your device. Where we rely on consent, you have the right to withdraw it at any time without affecting the lawfulness of processing that took place before withdrawal.

6 Sharing Your Data

cv664 does not sell, rent, or trade your personal data. We share your data only in the following limited and defined circumstances:

Service Providers

We share data with carefully selected third-party service providers who process data on our behalf to help us deliver the Platform. These providers include: payment processors (bKash, Nagad, Rocket, Upay, Visa network, Mastercard network); identity and age verification providers; game content studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi); cloud hosting and infrastructure providers; fraud detection and risk management platforms; and customer support tooling providers. All service providers are contractually required to process data only on cv664's instructions and to maintain appropriate security measures.

Legal and Regulatory Disclosure

We may disclose your personal data to law enforcement agencies, regulatory bodies, courts, or other public authorities where we are legally required to do so, where disclosure is necessary to prevent or detect crime, or where we are responding to a valid legal process such as a court order or statutory request.

Business Transfers

In the event that cv664 is involved in a merger, acquisition, or sale of all or substantially all of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify registered players of any such transfer and of any changes to this Policy that may result from it before the transfer takes effect.

7 Cookies and Tracking

cv664 uses cookies and similar tracking technologies on the Platform. Cookies are small text files placed on your device that help us keep your session active, remember your preferences, and understand how you use the Platform.

Types of Cookies We Use

• Strictly necessary cookies: Essential to the operation of the Platform. They enable core functions such as login session management, security tokens, and load balancing. These cookies cannot be disabled without impairing the functionality of the Platform.
• Functional cookies: Remember your preferences and settings, such as your selected language, notification preferences, and responsible gaming settings, so you do not have to re-enter them each time you visit.
• Analytics cookies: Collect anonymised information about how you use the Platform — which pages you visit, how long you spend on them, and what actions you take. This data is used in aggregate to improve the Platform. We use privacy-respecting analytics solutions that do not share individual-level data with third parties.
• Security cookies: Used to detect and prevent fraudulent activity, bot traffic, and other security threats. These cookies analyse behavioural patterns to identify anomalous account activity.

Managing Cookies

You can control non-essential cookies through your browser settings. Most modern browsers allow you to block, delete, or receive alerts about cookies. Please note that blocking strictly necessary cookies will prevent you from logging in to your cv664 account and may impair other core platform functions. Detailed instructions for managing cookies in popular browsers (Chrome, Firefox, Safari, Edge) are available in those browsers' help documentation.

8 Data Retention

cv664 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and identity data: Retained for the duration of your active account plus a minimum of five years following account closure, to satisfy anti-money laundering and financial record-keeping obligations.
• Transaction and financial data: Retained for a minimum of seven years following the date of each transaction, in accordance with standard financial regulatory requirements.
• Support and communications data: Retained for up to three years following the resolution of the relevant support interaction or complaint, to enable quality assurance and to handle any escalated disputes or regulatory enquiries.
• Technical and usage data: Retained in identifiable form for up to 24 months, after which it is anonymised for aggregated statistical analysis.
• Marketing preference records: Retained until you withdraw your consent or close your account, plus a reasonable period thereafter to demonstrate compliance with your consent choices.

When data reaches the end of its defined retention period, it is securely deleted or irreversibly anonymised. Anonymised data that can no longer be linked to an individual is not subject to this Policy and may be retained indefinitely for statistical purposes.

9 Data Security

cv664 takes the security of your personal data seriously and implements a multi-layered security framework to protect it against unauthorised access, disclosure, alteration, or destruction.

Technical Measures

• All data in transit between your device and cv664's servers is encrypted using TLS 1.2 or higher (SSL encryption). Our platform's HTTPS connection is verified by a trusted Certificate Authority.
• Passwords are stored as salted cryptographic hashes — plain-text passwords are never stored or accessible to cv664 staff.
• Financial data is processed through PCI-DSS compliant payment infrastructure. Full card numbers are handled exclusively by our certified payment partners and are never stored on cv664's systems.
• Access to production systems and databases is restricted by role-based access controls (RBAC). Staff members can only access the data necessary to perform their specific job functions.
• cv664's infrastructure is hosted in secured data centres with physical access controls, redundant systems, and 24/7 monitoring.

Organisational Measures

• All cv664 staff who handle personal data receive regular data protection training.
• Third-party service providers with access to player data are subject to data processing agreements that impose binding security and confidentiality obligations.
• cv664 conducts periodic internal security reviews and works with external security professionals to identify and remediate vulnerabilities.

10 Your Privacy Rights

As a cv664 player, you have the following rights over your personal data. To exercise any of these rights, please contact our support team via live chat or at [email protected] (plain text — not a clickable link). We will respond within 30 days and will not charge a fee for processing legitimate requests.

• Right of access: You have the right to request a copy of the personal data cv664 holds about you, along with information about how it is being used.
• Right to rectification: You have the right to request that inaccurate or incomplete personal data held about you be corrected or updated. You can update many of your account details directly from your account settings.
• Right to erasure ("right to be forgotten"): You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where it has been processed unlawfully. Note that this right is subject to our legal obligations — we may be required to retain certain data by law (see Section 8).
• Right to restriction of processing: You have the right to request that cv664 restrict the processing of your personal data in certain circumstances, for example while a dispute is being resolved.
• Right to data portability: Where processing is based on your consent or contractual necessity, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling for direct marketing purposes. Where you object to marketing communications, your preferences will be updated immediately.
• Right to withdraw consent: Where processing is based on consent (e.g., marketing communications, non-essential cookies), you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

11 Children and Minors

cv664 is an adults-only platform. Access to and use of the Platform is strictly limited to individuals who are 21 years of age or older. cv664 does not knowingly collect, store, or process the personal data of anyone under the age of 21.

If cv664 discovers or is notified that personal data has been collected from a person under the age of 21, the relevant account will be immediately closed, all associated personal data will be deleted (subject to any mandatory legal retention obligations), and any funds held in the account will be handled in accordance with our Terms & Conditions regarding underage account closure.

If you are a parent or guardian and you believe that your child has registered on cv664, please contact our support team immediately at [email protected] (plain text). We will investigate and take appropriate action as quickly as possible.

12 International Data Transfers

cv664 is a platform serving the Bangladesh market. Some of our third-party service providers — including game studios, cloud infrastructure providers, and identity verification services — may be based outside Bangladesh, which means that your personal data may be processed in countries other than Bangladesh.

Where personal data is transferred internationally, cv664 takes steps to ensure that it receives adequate protection, including by putting in place contractual protections with the receiving party, requiring that they maintain security standards equivalent to those we apply ourselves, and limiting the data transferred to only what is strictly necessary for the relevant service to be performed.

By using cv664 and providing your personal data, you acknowledge that your data may be transferred to and processed in countries outside Bangladesh where data protection laws may differ from those in Bangladesh. We will always handle such transfers in accordance with this Policy.

13 Changes to This Policy

cv664 reserves the right to update or amend this Privacy Policy at any time. When we make material changes — meaning changes that significantly affect how we collect, use, or share your personal data — we will notify you in advance by sending an email to your registered address and by displaying a prominent notice on the Platform before the changes take effect.

Non-material changes (such as corrections of typographical errors, improvements to clarity, or updates to contact information) may be made without prior individual notification. The version date at the top of this Policy will always reflect when it was last revised. We encourage you to review this Policy periodically.

Your continued use of cv664 after any revised Privacy Policy has taken effect constitutes your acceptance of the updated Policy. If you do not agree with any updated provision, please stop using the Platform and contact us to close your account.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data cv664 holds about you, please contact us using any of the following methods. All contact details below are plain text — none are clickable links:

• Live Chat: Available 24/7 directly from the cv664 Platform — the fastest route for privacy-related queries and data subject access requests.
• Email: [email protected] — please use the subject line "Privacy Request" or "Data Subject Request" to ensure your message is routed to the correct team. Allow up to 30 days for a full response.
• WhatsApp: +880 1700 000000 — available during Bangladesh Standard Time (UTC+6) business hours for less complex privacy queries.