Privacy Policy — How cv3666 Collects, Uses, and Protects Your Data

1 Data Controller

cv3666 acts as the data controller for all personal information collected through the Platform at cv3666.bet. As data controller, cv3666 determines the purposes and means by which your personal data is processed. If you have any questions about this Policy or wish to exercise any of your data rights, you may contact our Data Protection team directly at support@cv3666.bet.

Where cv3666 engages third-party service providers who process data on our behalf (for example, payment processors, fraud detection providers, or identity verification services), those providers act as data processors and are bound by contractual obligations that restrict their use of your data to the purposes for which it was shared.

2 Information We Collect

cv3666 collects personal information in several ways, depending on how you interact with the Platform. The categories of data we may collect include:

• Registration data: Full legal name, date of birth, residential address, email address, and mobile number provided when you create your account.
• Identity verification documents: Copies of government-issued photo ID (such as your National Identity Card or passport), proof of address, and selfie photographs submitted during KYC verification.
• Financial data: Payment method details including bKash wallet number, Nagad account number, Rocket account, Upay ID, or bank account information (account name and number only — we do not store full card numbers or mobile banking PINs).
• Transaction records: A history of all deposits, withdrawals, wagers placed, games played, bonuses claimed, and account adjustments associated with your account.
• Technical data: IP address, device type, browser type and version, operating system, screen resolution, time zone, session duration, pages visited, and referral source collected automatically when you access the Platform.
• Communication records: The content of emails, live chat transcripts, or support tickets you exchange with the cv3666 support team.
• Marketing preferences: Your stated preferences regarding promotional communications, including opt-in or opt-out status for email and SMS notifications.

We do not intentionally collect sensitive personal information beyond what is necessary for age and identity verification. We do not collect biometric data, health information, or political opinions.

3 How We Use Your Information

cv3666 processes your personal data for the following purposes, each supported by a lawful basis:

• Account management: To create, maintain, and administer your cv3666 account, including processing login authentication and account preferences. Lawful basis: contractual necessity.
• Payment processing: To facilitate deposits and withdrawals through bKash, Nagad, Rocket, Upay, and partner banks. Lawful basis: contractual necessity.
• Identity and age verification: To confirm that you are at least 21 years of age and that the identity you have registered under is genuine, in compliance with our responsible gaming obligations. Lawful basis: legal obligation and legitimate interests.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeover, bonus abuse, and other prohibited conduct. Lawful basis: legitimate interests and legal obligation.
• Customer support: To respond to your queries, complaints, and requests. Lawful basis: contractual necessity and legitimate interests.
• Platform improvement: To analyse usage patterns, game performance, and user behaviour in aggregate form in order to improve the Platform's features, reliability, and user experience. Lawful basis: legitimate interests.
• Promotional communications: To send you information about cv3666 offers, seasonal bonuses (such as Eid promotions, BPL special offers, or Pohela Boishakh campaigns), and platform updates — but only where you have consented or where we have a legitimate interest and you have not opted out. Lawful basis: consent or legitimate interests.
• Legal compliance: To meet obligations under applicable law, including responding to court orders, regulatory inquiries, or requests from law enforcement authorities. Lawful basis: legal obligation.

4 Cookies and Tracking Technologies

cv3666 uses cookies and similar tracking technologies (including local storage, session tokens, and pixel tags) to operate and improve the Platform. Cookies are small text files placed on your device when you visit cv3666.bet. They serve several functions:

• Essential cookies: Required for the Platform to function correctly. These include session authentication tokens that keep you logged in, security tokens that prevent cross-site request forgery, and cookies that remember your language and display preferences. These cannot be disabled without breaking Platform functionality.
• Analytics cookies: Used to collect anonymised data about how players navigate the Platform — which pages are visited most, where users drop off, and which features are used. This data is used in aggregate form to improve the cv3666 experience and is never linked to an individual player's identity.
• Functionality cookies: Remember your in-session preferences such as selected payment method or game category filter, so you do not need to re-enter them each time.

By continuing to use cv3666.bet, you consent to the placement of non-essential cookies on your device. You may manage or delete cookies at any time through your browser settings. Note that disabling essential cookies will impair your ability to log in and use the Platform.

5 Data Sharing and Third-Party Disclosure

cv3666 does not sell your personal data. We share your information with third parties only in the following circumstances:

• Payment processors: We share the minimum information required to process your deposit or withdrawal with our payment partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank. These processors are bound by their own privacy policies and applicable financial regulation.
• Identity verification providers: We may use accredited third-party KYC and document verification services to cross-check your identity documents during the verification process. These providers process your data solely for verification purposes.
• Game providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a pseudonymous player identifier and wager data in order to serve games and settle bet outcomes. They do not receive your full name, contact details, or payment information.
• Fraud and security providers: We may share technical data (such as IP address and device fingerprint) with fraud detection services to protect the Platform and its players from abuse.
• Legal and regulatory authorities: We will disclose your information when required to do so by applicable law, court order, or a lawful request from a competent authority. We will notify you of such requests where we are legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the successor entity, subject to the same protections described in this Policy.

All third-party data processors engaged by cv3666 are required to process your data only for the specified purposes and in accordance with our documented instructions. They may not use your data for their own commercial purposes without your separate consent.

6 Data Retention

cv3666 retains your personal data for as long as your account is active and for a period thereafter as required to fulfil our legal and regulatory obligations. The general retention schedule is as follows:

After the applicable retention period, your personal data is securely deleted or anonymised so that it can no longer be linked to your identity. Where anonymised data is retained for statistical or analytical purposes, it is no longer considered personal data under applicable privacy law.

7 Your Data Rights

As a cv3666 player, you have the following rights with respect to your personal data. To exercise any of these rights, please contact support@cv3666.bet with the subject line "Data Rights Request" and a description of your request. We will respond within 30 days.

• Right of Access: You may request a copy of all personal data cv3666 holds about you, free of charge, once per calendar year. Additional requests may be subject to a reasonable administrative fee.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. You may update most account details directly through the account settings page.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where cv3666 no longer has a legitimate purpose or legal obligation to retain it. Note that certain data (such as transaction records) must be retained for regulatory compliance purposes even after account closure.
• Right to Restriction of Processing: You may request that cv3666 limit how your data is used in certain circumstances, for example while a rectification request is being resolved.
• Right to Data Portability: You may request your personal data in a commonly used, machine-readable format (such as CSV or JSON) so that you can transfer it to another service provider.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time by clicking the unsubscribe link in any promotional email or by contacting support.
• Right to Withdraw Consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Please note that exercising some of these rights may affect your ability to continue using the Platform. For example, a request to delete all personal data would necessitate closure of your cv3666 account, as we cannot operate an account without a minimum set of identity data.

8 Children and Minors

cv3666 is strictly an adults-only platform. We do not knowingly collect personal data from any individual under the age of 21. 21+ If we become aware that a registered account belongs to a person under 21, we will close the account immediately, return any real-money deposits to the original payment source (provided no fraudulent activity is involved), and securely delete the associated personal data as soon as our legal retention obligations permit.

If you believe a minor has accessed or registered on cv3666 using your identity or device, please contact support@cv3666.bet immediately. We will investigate the matter and take appropriate action. We also strongly recommend activating parental control software on any device shared with minors.

9 Security Measures

cv3666 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and cv3666 servers;
• At-rest encryption for all databases containing personally identifiable information;
• Role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent required for their specific role;
• Regular internal security audits and vulnerability assessments;
• Two-factor authentication options available to all registered players for enhanced account security;
• Automated anomaly detection systems that flag unusual login patterns or transaction behaviour for manual review.

While we take all reasonable steps to protect your data, no online system is completely immune from security risks. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, cv3666 will notify affected players without undue delay via the email address registered on their account and will take all necessary steps to contain and remediate the breach.

10 International Data Transfers

cv3666 may transfer your personal data to servers or service providers located outside Bangladesh. Where such transfers occur, we ensure that appropriate safeguards are in place to protect your data to the same standard as described in this Policy. These safeguards may include standard contractual clauses, data processing agreements, or transfers to countries that have been deemed to provide an adequate level of data protection.

In particular, game data processed by third-party studios such as Pragmatic Play, Evolution Gaming, NetEnt, and Microgaming may be routed through servers in their respective countries of operation. In each case, cv3666 has entered into data processing agreements with these providers that bind them to confidentiality and data protection obligations consistent with this Policy.

11 Changes to This Privacy Policy

cv3666 reserves the right to update or amend this Privacy Policy at any time. When we make a material change — that is, a change that meaningfully affects how we collect, use, or share your personal data — we will notify you by posting the updated Policy on cv3666.bet with a revised "Last updated" date at the top, and, where the change is significant, by sending a notice to your registered email address at least 14 days before the change takes effect.

Your continued use of the Platform following the effective date of any update constitutes your acceptance of the revised Policy. If you do not agree with the updated Policy, you must cease using the Platform and request account closure before the effective date.

We encourage you to review this Policy periodically to stay informed about how cv3666 is protecting your information. The most current version is always available at cv3666.bet/privacy-policy.

12 Contact and Complaints

If you have any questions, concerns, or complaints about this Privacy Policy or the way cv3666 handles your personal data, please contact our Data Protection team at support@cv3666.bet. Please include "Privacy Policy" or "Data Rights Request" in the subject line so your message is routed to the correct team. We aim to acknowledge all privacy-related enquiries within 48 hours and to resolve them fully within 30 days.

If you are not satisfied with our response, you have the right to escalate your complaint to the relevant data protection authority or competent court in your jurisdiction. cv3666 will cooperate fully with any such authority in the investigation of your complaint.