cv66as Privacy Policy — How We Protect Your Personal Data

1. How We Use Your Personal Data

1.1 cv66as uses your personal data for the following purposes:

• To create and manage your cv66as account and verify your identity and age eligibility (21+).
• To process deposits and withdrawals via bKash, Nagad, Rocket, and Upay, and to maintain accurate financial records of all transactions.
• To operate, maintain, and improve the cv66as platform, including game delivery, sports betting markets, and customer support services.
• To detect, investigate, and prevent fraudulent activity, money laundering, underage gambling, and other prohibited conduct.
• To send transactional communications, including OTP verification codes, deposit confirmations, withdrawal notifications, and account security alerts, to your registered mobile number.
• To fulfil our responsible gaming obligations, including monitoring gaming activity for signs of problem gambling and facilitating the use of responsible gaming tools such as deposit limits, session reminders, and self-exclusion.
• To comply with applicable legal and regulatory obligations, including record-keeping requirements and responses to lawful requests from competent authorities.

1.2 cv66as will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent.

2. Legal Basis for Processing

2.1 cv66as processes your personal data on the following legal bases:

• Contractual necessity: Processing required to deliver the services you have registered for, including account management, game access, and payment processing.
• Legitimate interests: Processing carried out to prevent fraud, maintain platform security, and improve service quality, where those interests are not overridden by your privacy rights.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering obligations and record-keeping requirements.
• Consent: Where you have provided explicit consent, such as opting into promotional communications beyond standard transactional messages.

2.2 Where processing is based on consent, you have the right to withdraw that consent at any time by contacting [email protected]. Withdrawal of consent will not affect the lawfulness of processing carried out prior to withdrawal.

3. Sharing Your Personal Data

3.1 cv66as does not sell, rent, or share your personal data with third parties for their own independent commercial or marketing purposes. Personal data may be shared with the following categories of third party solely to the extent necessary to operate the Platform:

• Payment processors: bKash, Nagad, Rocket, and Upay receive transaction-level data necessary to complete deposits and withdrawals on your behalf.
• Identity verification providers: Third-party verification services receive the identity documents you submit during the KYC process for the purpose of age and identity verification only.
• Game studio providers: Evolution Gaming, Pragmatic Play, Ezugi, Spribe, NetEnt, Microgaming, and other game providers receive the minimum player and session data required to deliver their games within the cv66as platform.
• IT and infrastructure providers: Hosting, content delivery, and cybersecurity partners who process data on our behalf under strict data processing agreements that prohibit independent use of your data.
• Legal and regulatory authorities: Where cv66as is required to disclose personal data in response to a lawful request from a competent authority, court order, or in connection with legal proceedings.

3.2 All third-party service providers engaged by cv66as are required to implement appropriate technical and organisational measures to protect personal data and are prohibited from using that data for any purpose other than providing the contracted service to cv66as.

4. Cookies and Tracking Technologies

4.1 cv66as uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small data files stored on your device when you visit cv66as. They help us remember your session, maintain your login state, and gather anonymised analytics on Platform usage patterns.

4.2 The following categories of cookies are used on the cv66as platform:

• Strictly necessary cookies: Required for the Platform to function. These cannot be disabled as they are essential for session management, login, and security.
• Functional cookies: Remember your preferences such as language and display settings to improve your experience on return visits.
• Analytics cookies: Collect anonymised data about how players navigate the Platform, which pages are visited most frequently, and where technical errors occur. This data is used to improve Platform performance.

4.3 You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the cv66as platform.

5. Data Retention

5.1 cv66as retains personal data for as long as is necessary for the purposes described in this Privacy Policy or as required by applicable law. The following retention periods apply as a general guide:

• Account and registration data: Retained for the duration of the account relationship and for a minimum of five years following account closure.
• Transaction records: Retained for a minimum of five years following the date of the transaction to meet financial record-keeping obligations.
• Identity verification documents: Retained for the period required to complete verification and for a minimum of three years thereafter.
• Support communications: Retained for a minimum of two years following the resolution of the relevant support interaction.
• Gaming activity logs: Retained for the duration of the account relationship and for a minimum of two years following account closure, or longer where required for dispute resolution or regulatory compliance.

5.2 Following the expiry of the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be associated with an identifiable individual.

6. Data Security

6.1 cv66as implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and the cv66as platform.
• Encrypted storage of sensitive account data at rest, using industry-standard encryption protocols.
• OTP-based two-factor authentication available to all players to provide an additional layer of account access security.
• Access controls that restrict internal access to personal data to only those employees and contractors whose roles require it.
• Regular security assessments and penetration testing conducted by independent third-party security specialists.
• Automated fraud monitoring and anomaly detection systems that flag unusual account activity for review.

6.2 While cv66as takes all reasonable steps to protect your personal data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your login credentials and for notifying cv66as immediately at [email protected] if you suspect any unauthorised access to your account.

7. Your Privacy Rights

7.1 As a cv66as player, you have the following rights in relation to the personal data we hold about you:

• Right of access: You may request a copy of the personal data cv66as holds about you. We will respond to such requests within 30 calendar days.
• Right of rectification: You may request that we correct any inaccurate or incomplete personal data held about you. For account details such as your registered mobile number, you may update certain information directly within your account settings.
• Right to erasure: In certain circumstances, you may request that cv66as delete your personal data. This right is subject to limitations where we are required to retain data to comply with legal obligations or to resolve outstanding disputes.
• Right to restriction of processing: You may request that we restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to a particular processing activity.
• Right to object: You may object to the processing of your personal data where that processing is based on legitimate interests. cv66as will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

7.2 To exercise any of the rights listed above, please contact cv66as at [email protected]. Please include your registered mobile number and sufficient information to identify your account. cv66as will respond to all privacy rights requests within 30 calendar days. In complex cases, this period may be extended by a further 30 days, in which case we will notify you of the extension within the initial 30-day window.

8. Responsible Gaming and Data

8.1 cv66as monitors gaming activity data as part of its responsible gaming programme. Patterns in your betting behaviour — such as rapid increases in deposit frequency, extended session durations, or repeated use of the maximum deposit limit — may trigger a responsible gaming review. Where such a review is initiated, a member of our responsible gaming team may make contact via your registered mobile number.

8.2 Where a player activates a self-exclusion, cv66as retains sufficient data to enforce that self-exclusion for its full duration and to prevent re-registration by the same individual. This retention is in the player's own interest and cv66as will not process this data for any other purpose during the self-exclusion period.

8.3 Players are reminded that the Platform is available to adults aged 21 and above only. Any data submitted during a registration attempt by an individual who is subsequently found to be under 21 will be securely deleted following the completion of the age verification investigation and account closure.

9. Children's Privacy

9.1 cv66as does not knowingly collect personal data from individuals under the age of 21. The Platform is strictly intended for adults aged 21 and above. If cv66as becomes aware that personal data has been collected from a person under 21 without appropriate consent, that data will be deleted as promptly as possible and the associated account will be closed.

9.2 If you believe that a minor may have registered an account on cv66as, please contact us immediately at [email protected] so that the matter can be investigated and resolved without delay.

10. Changes to This Privacy Policy

10.1 cv66as may revise this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or the services we offer. The date at the top of this page reflects the most recent revision date.

10.2 Where changes are material — meaning they significantly affect how we collect or use your personal data — cv66as will notify registered players via their registered mobile number at least 14 days before the changes take effect. For non-material clarifications or formatting corrections, the updated policy will simply be published on this page without advance notice.

10.3 Continued use of the cv66as platform after any revision to this Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any revision, you should cease using the Platform and contact us to request account closure.

11. Contact Us

11.1 For any questions, concerns, or requests relating to this Privacy Policy or the personal data cv66as holds about you, please contact our privacy team at [email protected]. Please include your full name, registered mobile number, and a clear description of your query or request so that we can assist you as efficiently as possible.

11.2 cv66as aims to resolve all privacy-related enquiries within 10 Working Days of receipt. For formal data rights requests (access, rectification, erasure, restriction, or objection), the response period is up to 30 calendar days as described in Section 7.