Data Protection

cv66l Privacy Policy

At cv66l, your privacy is a fundamental commitment, not an afterthought. This Policy explains exactly what personal data we collect, why we collect it, how it is stored and protected, and what rights you hold over your information as a player on our platform.

Effective: 1 January 2026 Language: English Jurisdiction: Bangladesh SSL-Secured Platform

Last updated: 1 January 2026. This Privacy Policy supersedes all prior versions. Continued use of cv66l constitutes acceptance of the current Policy.

Encrypted Data Storage

All personal data stored by cv66l is protected using AES-256 encryption at rest and TLS 1.3 encryption in transit. Your account credentials, payment details, and identity documents are never stored in plain text.

No Sale of Personal Data

cv66l does not sell, rent, or trade your personal information to third-party marketers under any circumstances. Data is shared only with essential service providers bound by strict confidentiality agreements.

You Control Your Data

You have the right to access, correct, export, or request deletion of your personal data at any time by contacting our support team. Marketing preferences can be updated directly from your cv66l account settings.

Transparent Cookie Use

We use cookies strictly for session management, fraud prevention, and platform performance analysis. We do not use third-party advertising cookies or cross-site tracking scripts on the cv66l platform.

KYC Compliance

Identity documents collected during KYC verification are handled according to strict data minimisation principles. Documents are used solely for identity verification and are not retained beyond their stated purpose.

Opt-Out at Any Time

Marketing emails, SMS notifications, and promotional communications from cv66l can be unsubscribed at any time via the link in any email or by contacting [email protected]. Operational account communications cannot be opted out of while your account is active.

Section 1

Information We Collect

cv66l collects personal information from you through several channels: directly when you register an account or complete KYC verification, automatically as you interact with the Platform, and from trusted third-party service providers where necessary for fraud prevention and payment processing. We collect only the data that is genuinely necessary for the purposes described in this Policy — we do not collect personal information speculatively.

Registration and account data: When you create a cv66l account, we collect your full legal name, date of birth, residential address (including city — Dhaka, Chittagong, Sylhet, Khulna, or elsewhere in Bangladesh), email address, and mobile phone number. This information is essential to establish and maintain your account, verify your identity, and communicate with you about your account activity.

Identity verification (KYC) documents: To comply with applicable anti-money laundering (AML) principles and to enforce our minimum age requirement of 18+, we may collect copies of government-issued photo identity documents (National Identity Card, Bangladesh Passport, or Driving Licence), proof of residential address (utility bills or bank statements dated within three months), and source-of-funds documentation where required for large transaction volumes.

Financial and transaction data: We record details of all deposits and withdrawals processed through your cv66l account, including transaction amounts in Bangladeshi Taka (৳ BDT), timestamps, and the payment method used (bKash, Nagad, Rocket, Upay, bank transfer, Visa, or Mastercard). We do not store full card numbers or mobile wallet PINs — payment processing is handled by our PCI-DSS-compliant payment partners.

Behavioural and gameplay data: We automatically collect data about how you interact with the cv66l Platform. This includes pages visited, games played, bet amounts and outcomes, session duration, login timestamps, device type, operating system, browser version, and IP address. This data is used for platform security, responsible gaming monitoring, and product improvement purposes.

                Data Minimisation Principle: cv66l is committed to collecting the minimum amount of personal data necessary for each stated purpose. We periodically review our data collection practices and remove data points that are no longer necessary for operational, legal, or compliance purposes.
              

Data Categories Summary

Identity Data Required

Contact Data Required

KYC Documents Conditional

Financial Data Required

Gameplay Data Automatic

Device & IP Data Automatic

Marketing Preferences Optional

Section 2

How We Use Your Data

cv66l processes your personal data only for legitimate, clearly defined purposes. The table below sets out the primary purposes for which we use your data, the legal basis for each processing activity, and whether you have a right to object:

Processing Purpose	Legal Basis	Can You Object?
Account creation and management	Contractual necessity	No — required for service
Identity verification (KYC / AML)	Legal obligation	No — legally mandated
Processing deposits and withdrawals	Contractual necessity	No — required for service
Fraud detection and prevention	Legitimate interest	Limited — see Section 6
Responsible gaming monitoring	Legitimate interest / Legal obligation	No — player protection
Platform analytics and improvement	Legitimate interest	Yes — contact support
Promotional and marketing communications	Consent	Yes — opt out at any time
Personalised bonus and game recommendations	Consent	Yes — opt out at any time
Customer support communications	Contractual necessity	No — required for service
Legal dispute resolution and compliance reporting	Legal obligation	No — legally mandated

cv66l does not use your personal data for automated decision-making that produces significant legal effects, with the exception of automated fraud screening applied to transactions above defined risk thresholds. Where automated screening flags a transaction, a human member of our Trust & Safety team reviews the decision before any account action is taken.

            Marketing Communications: If you have opted in to receive promotional communications from cv66l, you may receive emails or SMS messages about new games, seasonal promotions (such as Eid special bonuses or Pohela Boishakh offers), BPL cricket betting markets, and VIP loyalty programme updates. You can withdraw your marketing consent at any time without affecting your ability to use the Platform.
          

Section 3

Data Sharing & Third Parties

cv66l does not sell or rent your personal data to any third party. We share data only where it is strictly necessary for the delivery of our services or where we are required to do so by law. The following categories of third parties may receive limited personal data from cv66l in the course of operating the Platform:

Payment processing partners: bKash, Nagad, Rocket, Upay, and our card processing partners receive transaction-specific data necessary to process your deposits and withdrawals. These partners are contractually bound to process your data solely for payment execution purposes and are subject to their own regulatory obligations regarding data security.
Identity verification providers: Our KYC and AML compliance partners receive copies of identity documents and may cross-reference your data against sanctions lists and politically exposed persons (PEP) databases. These providers operate under strict data processing agreements and are prohibited from retaining your documents beyond the verification period.
Game software providers: Live casino and RNG game providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may receive your account identifier and gameplay session data necessary to deliver the game experience and audit game fairness. They do not receive your full identity data, payment details, or contact information.
Platform analytics providers: Aggregated, anonymised usage data may be shared with analytics service providers to help us understand Platform performance and improve the user experience. This data cannot be used to identify individual players.
Legal and regulatory authorities: cv66l may be required to disclose personal data to law enforcement, financial intelligence units, or other government authorities in response to lawful requests. We will notify you of such disclosures where we are legally permitted to do so.

All third-party data processors engaged by cv66l are bound by data processing agreements that require them to implement appropriate technical and organisational security measures, process data only as instructed by cv66l, and delete or return data upon termination of the service relationship.

Third-Party Data Recipients

Payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard)

KYC & AML verification providers

Licensed game software suppliers

Anonymised analytics platforms

Regulatory & law enforcement (when legally required)

                Never shared: Your data is never sold to advertisers, data brokers, or marketing agencies.
              

Section 4

Cookies & Tracking Technologies

cv66l uses cookies and similar tracking technologies (such as local storage tokens and session identifiers) to ensure the Platform functions correctly, to protect your account from unauthorised access, and to understand how players navigate and use our services. We do not use cross-site advertising tracking technologies or third-party retargeting pixels.

The following categories of cookies are used on the cv66l Platform:

Cookie Category	Purpose	Retention	Can Be Disabled?
Strictly Necessary	Session management, login authentication, security tokens, CSRF protection	Session / up to 24 hours	No — Platform cannot function without these
Functional	Remembering user preferences such as language, odds format, and display settings	Up to 12 months	Yes — may affect user experience
Analytics	Aggregated page-view and feature-usage statistics used to improve the Platform	Up to 24 months	Yes — opt out via account settings
Fraud Prevention	Device fingerprinting and behaviour analysis to detect multi-accounting and bot activity	Up to 6 months	No — required for Platform security

You can manage cookie preferences for functional and analytics categories through the Privacy Settings section of your cv66l account. Please note that disabling functional cookies may result in some Platform preferences not being saved between sessions. Disabling strictly necessary or fraud-prevention cookies is not possible without preventing access to the Platform entirely, as these are required for secure operation.

            No Third-Party Advertising Cookies: cv66l does not permit advertising networks, social media platforms, or data brokers to place tracking cookies on the Platform. Any cookies present on cv66l.app originate solely from cv66l or from our essential service providers listed in Section 3.
          

Section 5

Data Retention & Storage

cv66l retains your personal data for as long as your account remains active and for a defined period thereafter, in accordance with our legal and compliance obligations. We do not retain personal data longer than is necessary for the purposes for which it was collected.

Active accounts: While your cv66l account is open and active, we retain all account, identity, financial, and gameplay data necessary to provide the service, resolve disputes, and comply with AML record-keeping obligations.

Closed accounts: Following the closure of your account — whether at your request or due to a Terms violation — cv66l retains your core account and transaction records for a minimum of five (5) years from the date of account closure. This retention period reflects our obligations under applicable anti-money laundering principles and our legitimate interest in resolving any post-closure disputes or legal claims.

KYC documents: Identity documents submitted for verification purposes are retained for the duration of the account relationship plus five (5) years following account closure. After this period, documents are securely deleted using industry-standard data destruction processes.

Marketing data: If you have opted in to marketing communications, we retain your marketing preferences and associated contact data for the duration of your consent, plus a short period thereafter to honour any pending unsubscribe requests. If your account is closed, marketing data is deleted within 90 days unless retention is required by law.

Anonymised data: Aggregated, anonymised gameplay and analytics data that cannot be used to identify individual players may be retained indefinitely for statistical and platform-improvement purposes.

                Data Storage Location: cv66l's primary data infrastructure is hosted on secure cloud servers with data centres operating under ISO 27001-equivalent security standards. Data is backed up in geographically redundant locations. Personal data of Bangladesh-resident players is not transferred to jurisdictions with materially lower data protection standards without appropriate safeguards in place.
              

Retention Periods at a Glance

Active account dataWhile active

Transaction records5 years post-closure

KYC documents5 years post-closure

Marketing preferencesUntil consent withdrawn

Session cookiesUp to 24 hours

Analytics cookiesUp to 24 months

Anonymised analyticsIndefinite

Section 6

Your Privacy Rights

cv66l respects your right to understand and control how your personal data is used. As a player on our Platform, you hold the following privacy rights, which you may exercise at any time by contacting our data protection team at [email protected]:

Right of access: You have the right to request a copy of all personal data cv66l holds about you. We will provide this in a structured, commonly used, machine-readable format within 30 days of your verified request.
Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. Account details such as email address and phone number can be updated directly in your account settings; changes to identity data (name, date of birth) require KYC re-verification.
Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected and where no overriding legal obligation requires its retention. Note that AML record-keeping obligations mean that transaction history and identity data cannot be deleted within the five-year post-closure retention period.
Right to restriction of processing: In certain circumstances (for example, where you contest the accuracy of data we hold), you may request that we restrict processing of your data pending resolution of your query.
Right to data portability: You may request a structured export of your account data, including your account profile, transaction history, and gameplay records, in JSON or CSV format.
Right to object: You may object to processing activities based on our legitimate interest, including analytics and personalised game recommendations. Objections are reviewed individually and actioned where your interests override our legitimate interest.
Right to withdraw consent: Where processing is based on your consent (such as marketing communications), you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

All privacy rights requests are reviewed by cv66l's data protection team and responded to within 30 days. Where a request is complex or numerous, this period may be extended by a further 60 days, with notification provided to you within the initial 30-day window. There is no fee for making a reasonable privacy rights request.

How to Submit a Request: Email [email protected] with the subject line "Privacy Rights Request" and include your registered account username and a brief description of your request. For identity verification purposes, we may ask you to confirm your registered email address or provide the last four digits of your registered mobile number before processing the request.

Section 7

Data Security Measures

cv66l invests significantly in the technical and organisational security measures that protect your personal data from unauthorised access, disclosure, alteration, or destruction. Our security programme is reviewed and updated on a regular basis to address emerging threats and evolving best practices.

Key technical security measures in place on the cv66l Platform include:

TLS 1.3 encryption: All data transmitted between your device and the cv66l Platform is encrypted using TLS 1.3, the current industry-leading transport security standard. You can verify this by checking for the padlock icon and "https://" prefix in your browser's address bar.
AES-256 encryption at rest: Personal data, financial records, and identity documents stored on cv66l's servers are encrypted using AES-256, a standard used by financial institutions worldwide.
Multi-factor authentication (MFA): Players are encouraged to enable MFA on their cv66l accounts. MFA adds an additional verification step (such as a one-time passcode sent to your registered mobile number) before granting access to your account from an unrecognised device.
Rate limiting and brute-force protection: Login attempts are rate-limited and monitored. Repeated failed login attempts trigger automatic account lockout and an alert to your registered email address.
Fraud detection systems: cv66l employs real-time transaction monitoring and device-fingerprinting technology to detect and block suspicious activity, including multi-accounting, bot usage, and payment fraud.
Access controls: Internal access to personal data is restricted on a strict need-to-know basis. cv66l staff do not have access to your password (which is hashed and salted) or full payment card details.

In the event of a personal data breach that poses a risk to your rights and interests, cv66l will notify affected players without undue delay and, where required by applicable law, report the breach to relevant authorities. Notifications will be sent to your registered email address and will include a description of the breach, the data affected, and the steps cv66l is taking in response.

Security Certifications

SSL / TLS 1.3 in transit
AES-256 at rest
PCI-DSS compliant payments
ISO 27001-aligned hosting
Fair-play certified RNG

Report a Security Concern

If you believe your cv66l account has been compromised, contact our security team immediately at [email protected]. Include "Security Alert" in the subject line for priority handling.

Section 8

Policy Updates & Contact

cv66l reserves the right to update or amend this Privacy Policy at any time. When we make material changes — such as introducing a new category of data processing, changing our data retention periods, or engaging a new category of third-party processor — we will update the "Last Updated" date at the top of this page and notify registered players via email at least 14 days before the changes take effect .

Minor updates — such as clarifications, corrections, or formatting changes that do not affect the substance of our data processing activities — may be made without advance notice. We recommend reviewing this Privacy Policy periodically to stay informed about how cv66l protects your data.

Your continued use of the cv66l Platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with the updated Policy, you should cease use of the Platform and contact us to request account closure and data deletion where applicable under Section 6.

For any questions, concerns, or requests relating to this Privacy Policy or to the way cv66l handles your personal data, please contact our data protection team using the details below. We are committed to responding to all privacy-related enquiries within 5 business days (Bangladesh Standard Time, UTC+6).

Data Protection Contact:
Email: [email protected]
Subject line: "Privacy Policy Enquiry"
Response time: Within 5 business days (BST, UTC+6)
Support hours: 24/7 Live Chat & Email

cv66l treats all privacy-related enquiries with the highest priority. Whether you have a question about how your data is used, wish to exercise a privacy right, or want to report a potential data breach, our team is available around the clock to assist you.

Ready to Play?

Join cv66l — Bangladesh's Trusted VIP Casino

Now that you understand how we protect your data, experience the cv66l difference for yourself. From live cricket betting to premium slots and VIP table games — all backed by our industry-leading security and a 24/7 support team.

18+ only. Please gamble responsibly. SSL-secured platform.