cvk66 Privacy Policy

cvk66 collects personal data through several channels: account registration, identity verification, payment processing, platform usage, and communications with our support team. The categories of data we collect are described below.

1.1 Registration Data

When you create a cvk66 account, we collect the information you submit in the registration form. This includes your legal full name, date of birth, residential address (including city, district, and postal code), email address, and mobile phone number. This data is necessary to create and manage your account in accordance with our Terms & Conditions.

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) compliance obligations and to prevent fraud and underage access, we may collect copies of government-issued identity documents (National ID card, passport, or driving licence), proof of address documents (utility bills, bank statements), and proof of payment method ownership (for example, a screenshot of your bKash or Nagad wallet confirming your registered mobile number). These documents are processed in a secure environment and retained only as long as required under applicable law or our contractual obligations.

1.3 Financial Data

When you make deposits or withdrawals, we record transaction details including the payment method used (bKash, Nagad, Rocket, Upay, Visa, Mastercard, or USDT), transaction reference numbers, amounts in Bangladeshi Taka (৳), timestamps, and whether the transaction was successful, pending, or declined. cvk66 does not store full card numbers or mobile banking PINs — these are handled directly by your payment provider.

1.4 Usage & Technical Data

When you browse or interact with the cvk66 platform, we automatically collect certain technical data including your IP address, device type and operating system, browser type and version, session start and end times, pages and games visited, bet history and game play logs, and referring URLs. This data helps us maintain platform security, detect fraudulent activity, and improve the user experience.

1.5 Communications Data

If you contact cvk66 customer support via live chat, email, or WhatsApp, we retain a record of those communications including the date, channel, content of the messages, and the resolution provided. This record allows us to maintain quality of service and resolve any follow-up queries effectively.

cvk66 processes personal data for specific, documented purposes. We do not use data for purposes that are incompatible with those disclosed at the time of collection. The table below summarises the primary purposes, the data categories involved, and the lawful basis for each processing activity.

Where processing is based on your consent — for example, receiving personalised promotional emails — you may withdraw that consent at any time by updating your communication preferences in the account settings panel, or by contacting our support team. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.

3.1 What Are Cookies

Cookies are small text files placed on your device when you visit the cvk66 website. They allow the platform to recognise your device across sessions, remember your preferences, and collect usage analytics. Cookies do not contain your password or payment information.

3.2 Types of Cookies We Use

• Strictly Necessary Cookies: These are essential for the platform to function. They manage your session state, keep you logged in during a visit, and protect against cross-site request forgery. You cannot opt out of these cookies without disabling the platform entirely.
• Functional Cookies: These remember your preferences such as language settings, preferred deposit method, and display options. They improve your experience but are not required for core functionality.
• Analytics Cookies: cvk66 uses aggregated, anonymised analytics to understand how users navigate the platform — which pages are visited most, where users drop off, and how long sessions last. This data does not identify you personally and is used solely to improve platform design.
• Security Cookies: These assist our fraud detection systems in identifying suspicious behaviour patterns, such as multiple failed login attempts or unusual transaction sequences from a single IP address.

3.3 Managing Cookies

You may manage or disable cookies at any time through your web browser settings. Most modern browsers (Chrome, Firefox, Edge, Safari) provide granular cookie management options. Please note that disabling certain cookie categories — particularly strictly necessary cookies — may impair your ability to use the cvk66 platform or cause certain features to behave unexpectedly.

3.4 Third-Party Tracking

Some features of the cvk66 platform are powered by third-party service providers — for example, game studios such as Pragmatic Play and Evolution Gaming, or payment gateways such as bKash and Nagad. These providers may set their own cookies or tracking technologies when you interact with their integrated components. cvk66 does not control these third-party trackers; please review the respective privacy policies of these providers if you have concerns about their data practices.

cvk66 does not sell or rent your personal data to any third party for their own marketing or commercial purposes. We may share your data only in the circumstances described below, and only to the extent strictly necessary.

4.1 Service Providers and Data Processors

cvk66 works with a number of carefully selected third-party service providers who process data on our behalf under binding data processing agreements. These partners include: payment gateway operators (bKash, Nagad, Rocket, Upay, Visa, Mastercard, and USDT processing services); game content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi); identity verification and KYC service providers; customer support platform operators; and cloud hosting and infrastructure providers. Each of these partners is contractually restricted from using your data for any purpose other than the specific service they provide to cvk66.

4.2 Legal and Regulatory Obligations

cvk66 may disclose personal data to law enforcement agencies, regulatory authorities, tax authorities, or other government bodies where we are legally required to do so. This includes disclosures required under anti-money laundering (AML) regulations, fraud reporting obligations, or court orders. Where legally permitted, cvk66 will attempt to notify you of any such disclosure request before complying.

4.3 Business Transfers

In the event of a merger, acquisition, asset sale, or restructuring involving the cvk66 business, personal data held by cvk66 may be transferred to the acquiring entity as part of the transaction. In such circumstances, cvk66 will take reasonable steps to ensure that your data continues to be protected under terms no less protective than this Privacy Policy, and you will be notified of any material changes to how your data is handled as a result of the transfer.

4.4 Aggregate and Anonymised Data

cvk66 may share aggregated, anonymised statistical data with third parties for industry analysis, platform benchmarking, or marketing research. This data cannot be used to identify any individual member and is not considered personal data for the purposes of this Privacy Policy.

cvk66 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The retention periods below represent our standard data lifecycle schedules.

Upon expiry of the applicable retention period, data is either permanently deleted from our systems or irreversibly anonymised such that it can no longer be linked to an identifiable individual. Where data deletion is requested by a member before the end of the retention period (see Section 7 — Your Rights), cvk66 will comply unless a legal obligation requires continued retention, in which case the member will be informed of the reason for the delay.

cvk66 implements a multi-layered security architecture to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Our security measures include both technical and organisational controls, which are reviewed and updated regularly.

6.1 Technical Safeguards

• Transport Encryption: All communications between your browser and the cvk66 platform are encrypted using TLS 1.2 or higher. Our SSL certificate is maintained and renewed to prevent any lapse in encrypted connectivity.
• Data-at-Rest Encryption: Sensitive personal data stored in our databases is encrypted using AES-256, an industry-standard symmetric encryption algorithm.
• Password Security: Member passwords are never stored in plain text. They are hashed using a strong one-way cryptographic function (bcrypt with an appropriate work factor) so that even in the unlikely event of a database exposure, your password cannot be recovered.
• Access Controls: Access to personal data within cvk66's systems is governed by role-based access control (RBAC). Only personnel whose job function requires access to specific data categories are granted that access, and all access events are logged and auditable.
• Intrusion Detection: cvk66 operates 24/7 security monitoring systems that detect and alert on anomalous access patterns, brute-force attempts, and other threat indicators.

6.2 Organisational Safeguards

• All cvk66 staff with access to personal data are required to undergo data privacy training and are bound by confidentiality obligations in their contracts.
• Third-party data processors are subject to rigorous due diligence before onboarding and are required to demonstrate appropriate security standards before any data is shared with them.
• cvk66 conducts periodic internal security reviews and vulnerability assessments to identify and remediate potential weaknesses in our data handling infrastructure.

6.3 Data Breach Response

In the event of a data breach that is likely to result in a risk to the rights and freedoms of affected members, cvk66 will take immediate steps to contain the breach, assess its scope, and notify affected individuals as promptly as practicable. Notifications will be sent to the email address registered on your account and will include a description of the nature of the breach, the data categories affected, the likely consequences, and the steps cvk66 is taking in response.

As a cvk66 member, you hold meaningful rights in relation to your personal data. cvk66 is committed to honouring these rights promptly and without unnecessary difficulty. To exercise any of the rights described below, please contact our support team via live chat or email at [email protected].

7.1 Right of Access

You have the right to request a copy of the personal data that cvk66 holds about you. Upon verification of your identity, we will provide a structured summary of your data within a reasonable timeframe. This is sometimes referred to as a Subject Access Request (SAR).

7.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For straightforward corrections such as an address update, you may be able to make changes directly via your account profile. For corrections to identity documents or other verified records, please contact support.

7.3 Right to Erasure

Also known as the "right to be forgotten", this right allows you to request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where the data has been unlawfully processed. Please note that cvk66 may be required to retain certain data categories (particularly financial and KYC records) beyond your erasure request in order to comply with legal obligations, as outlined in Section 5.

7.4 Right to Restriction of Processing

You may request that cvk66 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested, or where you have objected to processing and a determination is pending. During a restriction period, cvk66 will continue to store your data but will not actively process it for other purposes.

7.5 Right to Data Portability

Where processing is based on your consent or a contract, and is carried out by automated means, you have the right to receive a structured, commonly used, machine-readable copy of the personal data you have provided to cvk66 (for example, your account registration data). You may also request that this data be transmitted directly to another service provider where technically feasible.

7.6 Right to Object

You have the right to object to the processing of your personal data where that processing is based on cvk66's legitimate interests, including profiling for marketing purposes. Upon receiving a valid objection, cvk66 will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

7.7 Right to Withdraw Consent

Where processing activities are based on your consent — such as receiving personalised promotional communications — you may withdraw that consent at any time without detriment to your account standing or your access to core platform services. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to the withdrawal.

8.1 Data Controller

cvk66 acts as the data controller in respect of the personal data collected and processed through the platform. As data controller, cvk66 determines the purposes and means of processing and is responsible for ensuring that processing activities comply with applicable data protection obligations. For all privacy-related enquiries, please contact us using the details below:

• Email: [email protected] (Subject: "Privacy Enquiry")
• Live Chat: Available 24/7 on the cvk66 platform
• WhatsApp: +880 1700 000 000 (available 08:00–00:00 BST)

8.2 Updates to This Privacy Policy

cvk66 reserves the right to update, revise, or replace this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform functionality. Where changes are material — meaning they significantly affect how your data is collected, used, or shared — cvk66 will notify registered members via the email address on file and/or via a prominent in-platform notification, at least 7 days before the updated policy takes effect.

The "Effective Date" shown at the top of this document will be updated to reflect the date on which the most recent version came into force. We encourage you to review this Privacy Policy periodically to stay informed of how cvk66 protects your personal data. Your continued use of the platform after the effective date of any revision constitutes your acceptance of the updated terms.

If you disagree with any changes to this Privacy Policy, you have the right to close your account in accordance with Section 7.1 of our Terms & Conditions and to request deletion of your personal data as described in Section 7.3 above, subject to any legally mandated retention obligations.

8.3 Minors and 18+ Policy

cvk66 is strictly an 18+ platform. We do not knowingly collect or retain personal data from individuals under the age of 18. If you are a parent or guardian and you believe that a minor has registered with cvk66 or provided us with personal data without your consent, please contact us immediately at [email protected]. We will take prompt steps to verify the claim and delete any relevant data upon confirmation.