cvk66 Privacy Policy

cvk66 is an online betting and casino platform operating as an offshore service accessible to players in Bangladesh and other permitted jurisdictions. The platform offers sports betting (including live cricket markets), online casino games, and slot machine entertainment.

For the purposes of this Privacy Policy, cvk66 acts as the data controller in respect of personal data collected from registered players and visitors to the platform. As data controller, cvk66 determines the purposes for which personal data is collected and the means by which it is processed.

All enquiries relating to your personal data — including access requests, correction requests, deletion requests, and complaints — should be directed to the cvk66 support team using the contact details provided in Section 13 of this policy. We endeavour to respond to all data-related correspondence within 5 business days of receipt.

cvk66 collects personal data through several channels: directly from you during registration and account management, automatically through your use of the platform, and in limited circumstances from third-party service providers involved in identity verification or payment processing. The categories of data we collect are set out in the table below.

cvk66 does not collect special category data (such as health data, racial or ethnic origin data, religious beliefs data, or biometric data) unless specifically required for responsible gaming risk assessments, and only then with your explicit consent or where processing is required by applicable law.

cvk66 uses the personal data it collects only for legitimate, documented purposes. The primary purposes for which we process personal data are as follows:

• Account Management: Creating and maintaining your cvk66 account, verifying your identity at registration and during ongoing KYC reviews, processing password resets, and managing account status changes including suspension and closure.
• Payment Processing: Facilitating deposits to and withdrawals from your account wallet via bKash, Nagad, Rocket, Upay, Visa, and Mastercard. This includes communicating with payment processors to confirm transaction status and resolve payment disputes.
• Platform Delivery: Providing access to betting markets, casino games, slot machines, live dealer studios, and all other features of the cvk66 platform. Usage data is used to optimise platform performance and personalise your experience.
• Fraud Prevention and Security: Monitoring account activity to detect and prevent fraud, money laundering, bonus abuse, prohibited conduct, and unauthorised account access. This includes automated risk-scoring systems that flag unusual patterns for human review.
• Responsible Gaming Compliance: Monitoring your betting behaviour against the deposit limits, wagering limits, and self-exclusion status you have set, and intervening proactively where indicators of problem gambling are identified.
• Legal and Regulatory Compliance: Complying with applicable anti-money-laundering obligations, responding to lawful requests from competent authorities, maintaining records as required by applicable law, and enforcing our Terms & Conditions.
• Customer Support: Responding to your enquiries, resolving disputes, and providing technical assistance via live chat, email, and WhatsApp.
• Promotional Communications: Sending you information about bonuses, promotions, and platform updates where you have opted in to receive marketing communications. You may opt out at any time through your account notification settings or by contacting support.
• Platform Improvement: Analysing aggregate, anonymised usage data to identify areas for improvement in platform design, game offerings, and user experience. This analysis is conducted on data sets from which individual identifiers have been removed.

Every processing activity conducted by cvk66 is carried out on one or more of the following legal bases. Where multiple legal bases apply to the same processing activity, all applicable bases are listed.

• Contractual Necessity: Processing that is required in order to fulfil our obligations under the Terms & Conditions agreement between you and cvk66 — including account creation, payment processing, and platform delivery.
• Legal Obligation: Processing required for cvk66 to comply with applicable legal and regulatory obligations, including anti-money-laundering record-keeping, responses to lawful authority requests, and age verification requirements.
• Legitimate Interests: Processing carried out for cvk66's legitimate business interests, including fraud prevention, security monitoring, responsible gaming compliance, and platform improvement — provided that such interests are not overridden by your fundamental rights and freedoms. We conduct a balancing assessment before relying on this basis.
• Consent: Processing for which you have given explicit, informed, and freely withdrawable consent — primarily for the receipt of marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

cvk66 does not sell, rent, or trade your personal data. We share personal data only in the limited circumstances described below, and only to the extent necessary for the relevant purpose.

• Payment Processors: Your financial data is shared with the relevant payment provider (bKash, Nagad, Rocket, Upay, Visa/Mastercard networks) solely to process your transaction. Each payment provider operates under its own privacy terms and is subject to applicable financial regulation.
• Identity Verification Providers: Where third-party KYC or identity verification services are used to validate your identity documents, your identity data and document copies are shared with those providers. All KYC providers are bound by strict data processing agreements.
• Game Content Providers: When you play games developed by certified providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, or Spribe, your session data (but not your full identity data) is shared with the relevant provider for the purpose of game delivery, fairness certification, and technical support.
• IT Infrastructure and Security Partners: Cloud hosting providers, content delivery networks, and cybersecurity service providers may process technical data as part of platform operations. All such providers are selected for their compliance with recognised data security standards.
• Law Enforcement and Regulatory Authorities: cvk66 will disclose personal data to competent authorities where required to do so by applicable law, pursuant to a valid legal order, or where disclosure is necessary to prevent serious harm. We will notify you of such disclosure where legally permissible to do so.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of the cvk66 business, personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material change to the data processing arrangements that results from it.

cvk66 uses cookies and similar tracking technologies to operate the platform, maintain session integrity, prevent fraud, and analyse usage patterns. The categories of cookies used on the platform are as follows:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They maintain your login session, remember your language and display preferences, and provide security protections including CSRF tokens. These cookies cannot be disabled without materially impairing platform functionality.
• Functional Cookies: These cookies remember choices you have made — such as your preferred deposit method or responsible gaming settings — to provide a more personalised experience. Disabling these cookies may mean your preferences are not retained between sessions.
• Analytical Cookies: These cookies collect aggregated, anonymised data about how users interact with the platform, including which pages are visited most frequently and where users encounter errors. This information is used solely to improve platform performance and user experience.
• Security Cookies: These cookies support the platform's fraud detection systems by creating a consistent device fingerprint that allows our security systems to identify and flag unusual account activity. They do not contain your personal details in readable form.

cvk66 does not use third-party advertising cookies or tracking pixels for the purpose of serving behavioural advertising to users on other websites. The cookies we deploy are limited to those that serve a direct operational, security, or analytical function within the cvk66 platform itself.

You may manage your cookie preferences through your browser settings. Most browsers allow you to block or delete cookies; however, please note that blocking strictly necessary cookies will prevent you from using the platform. For detailed guidance on managing cookies in your specific browser, please refer to your browser's official help documentation.

cvk66 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security framework includes:

• Encryption in Transit: All data transmitted between your device and the cvk66 platform is encrypted using TLS 1.2 or higher. This applies to all platform pages, API calls, and data exchange with payment partners.
• Encryption at Rest: Personal data stored in cvk66 databases — including identity data, financial data, and KYC documentation — is encrypted at rest using AES-256 or equivalent industry-standard encryption.
• Access Controls: Access to personal data within cvk66 is governed by a role-based access control (RBAC) framework. Personnel are granted access only to the categories of data necessary for their specific job function. All internal access is logged and subject to periodic review.
• Intrusion Detection: The platform operates continuous security monitoring systems designed to detect and respond to potential intrusions, suspicious access patterns, and anomalous data transactions.
• Security Testing: cvk66 conducts periodic vulnerability assessments and penetration testing exercises to identify and remediate security weaknesses before they can be exploited.
• Incident Response: In the event of a data breach that may affect your personal data, cvk66 has an incident response procedure in place to contain the breach, assess the risk of harm, and notify affected individuals as promptly as practicable.

cvk66 retains personal data for only as long as is necessary to fulfil the purpose for which it was collected, or to comply with applicable legal and regulatory retention obligations. The table below sets out our standard retention periods for each major category of personal data.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with cvk66's data destruction procedures. Anonymised data (from which all individual identifiers have been irreversibly removed) may be retained indefinitely for aggregate statistical and analytical purposes without further notice to you.

As a player on the cvk66 platform, you hold the following rights in respect of your personal data. These rights may be subject to limitations where applicable legal obligations, fraud prevention requirements, or the rights of third parties make it impractical or unlawful to comply in full. Where we are unable to fulfil a request in its entirety, we will explain the reason in writing.

To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Data Rights Request ". We will acknowledge your request within 3 business days and provide a substantive response within 30 days. We may ask you to verify your identity before processing your request to protect against unauthorised access to your data.

The cvk66 platform is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the cvk66 registration and KYC process, and accounts found to belong to individuals under 21 will be immediately suspended and all funds held pending investigation and return.

Parents and guardians in Bangladesh who are concerned about a minor accessing online betting and gaming platforms are encouraged to use parental control software and network-level filtering tools to restrict access to gambling-related websites. cvk66 supports responsible access controls and cooperates fully with verified requests from parents or guardians regarding accounts held by minors.

cvk66 operates as an offshore platform, and as a result, personal data collected from players in Bangladesh may be processed and stored on servers located outside Bangladesh. This includes transfers to data centres operated by cvk66's cloud infrastructure partners in jurisdictions where those facilities are located.

Where personal data is transferred outside your home jurisdiction, cvk66 ensures that appropriate safeguards are in place to protect that data to a standard at least equivalent to the protections described in this Privacy Policy. Safeguards used for international transfers include:

• Contractual clauses requiring data processors to implement security measures equivalent to those described in this policy
• Transfer only to jurisdictions or processors that maintain recognised data protection certifications or standards
• Encryption of all transferred data in transit using TLS 1.2 or higher
• Restrictions on onward transfer by data processors without prior written authorisation from cvk66

By using the cvk66 platform, you acknowledge that your personal data may be transferred internationally as described above, and you consent to such transfers on the basis that appropriate safeguards are maintained at all times.

cvk66 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, business practices, or platform functionality. When we make material changes to this policy, we will notify registered users by email (to the address on file for your account) and by posting a prominent notice on the platform for a period of at least 30 days following the change.

The "Last updated" date at the top of this policy indicates when the most recent revision was made. We encourage you to review this policy periodically so that you remain informed about how cvk66 processes your personal data. Continued use of the platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way cvk66 processes your personal data, please contact our dedicated privacy support team using any of the following channels. All privacy-related communications are handled by our data protection team and are treated with strict confidentiality.

• Email: [email protected] — use the subject line "Privacy Enquiry" to ensure your message is routed to the correct team
• Live Chat: Available 24/7 directly through the cvk66 platform after logging in to your account
• WhatsApp: Contact details visible within the platform after login
• Support Hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)

We aim to acknowledge all privacy-related enquiries within 3 business days and to provide a full substantive response within 30 days of receipt. Where your request is complex or where you have made multiple simultaneous requests, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it within the initial 30-day window.