cv67 Privacy Policy

cv67 ("cv67", "we", "us", "our") is an online casino and sports betting platform operating at https://cv67.io and serving players based in Bangladesh. We understand that the privacy of our players is of paramount importance, and we are committed to handling all personal data entrusted to us with the highest level of care, integrity, and transparency.

This Privacy Policy describes the types of personal information we collect from players and visitors to the cv67 platform, the purposes for which that information is used, the circumstances under which it may be shared with third parties, and the rights available to you in respect of your personal data.

This policy applies to all personal data collected through your use of the cv67 website, account registration, deposit and withdrawal transactions, gameplay activity, customer support interactions, and any other engagement with cv67's services. It does not apply to the data practices of any third-party websites linked from or to the cv67 platform.

For the purposes of this Privacy Policy, cv67 acts as the data controller in respect of all personal data collected from players and visitors using the cv67 platform. As data controller, cv67 determines the purposes and means by which personal data is processed.

All questions, requests, and complaints relating to the handling of personal data by cv67 should be addressed to our support team using the contact details provided in Section 14 of this policy. We aim to acknowledge all data-related enquiries within 5 business days and to resolve them within 30 calendar days, or within the timeframe required by applicable law.

cv67 collects personal data across several categories depending on how you interact with the platform. The table below sets out the main categories of data collected and specific examples within each category.

cv67 does not intentionally collect special category personal data (such as health data, religious beliefs, or political opinions). If you voluntarily disclose such data in the course of a support interaction or responsible gaming request, it will be treated with the highest level of confidentiality and used solely to address your specific request.

cv67 collects personal data through the following channels and mechanisms:

• Direct registration: When you create a cv67 account, you provide identity and contact data directly through the registration form.
• Deposits and withdrawals: When you deposit or withdraw funds using bKash, Nagad, Rocket, Upay, or card payment methods, financial data is exchanged with and collected by cv67's payment processing partners.
• Identity verification (KYC): When you submit documents in response to a verification request, cv67 collects the personal data contained within those documents.
• Gameplay activity: As you use the cv67 platform to place bets, play slot games, participate in fishing games, or engage with the live casino, gameplay data is automatically recorded to your account.
• Automated technical collection: cv67's servers and analytics systems automatically collect technical data including IP addresses, device identifiers, and session logs each time you access the platform.
• Cookies and similar technologies: cv67 uses cookies and browser storage mechanisms to maintain your session, remember your preferences, and analyse platform usage patterns. See Section 8 for full details.
• Customer support interactions: When you contact cv67 via live chat or email, the content of those communications is collected and stored.

cv67 uses personal data for the following purposes, each of which is matched to a legal basis for processing as described in Section 6:

• Creating and managing your cv67 account, including verifying your identity and age (21+ requirement).
• Processing deposits and withdrawals through bKash, Nagad, Rocket, Upay, Visa, Mastercard, and bank transfer channels.
• Complying with anti-money laundering (AML) and Know Your Customer (KYC) obligations.
• Detecting, investigating, and preventing fraudulent activity, multi-accounting, collusion, and other forms of prohibited conduct as defined in the cv67 Terms & Conditions.
• Administering bonuses, promotional offers, and loyalty rewards, and verifying eligibility for those offers.
• Monitoring gameplay and account activity for responsible gaming purposes, including identifying patterns consistent with problem gambling behaviour.
• Communicating with you about your account, including transaction confirmations, security alerts, and policy updates.
• Responding to customer support enquiries, resolving disputes, and improving the quality of our support service.
• Analysing anonymised platform usage data to improve the cv67 user experience, game offering, and platform performance.
• Complying with any legal obligation, court order, or regulatory directive applicable to cv67's operations.

cv67 processes personal data only where a valid legal basis exists. The primary legal bases relied upon are as follows:

• Contractual necessity: Processing required to fulfil the contract between you and cv67 — including account creation, payment processing, and the delivery of gaming services.
• Legal obligation: Processing required to comply with applicable law, including AML legislation, KYC requirements, and financial record-keeping obligations.
• Legitimate interests: Processing carried out in the legitimate interests of cv67 or third parties, such as fraud detection, security monitoring, and platform analytics, where those interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, and informed consent — primarily in the context of optional marketing communications. You may withdraw consent at any time.

cv67 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. Personal data may be shared with third parties only in the following limited circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and City Bank receive the minimum personal and financial data necessary to process your deposit or withdrawal transaction securely.
• Identity verification providers: Third-party KYC service providers may process your identity documents to assist cv67 in verifying your age and identity. These providers are contractually bound to process data only on cv67's instructions.
• Fraud prevention and security partners: Specialised fraud detection platforms may receive technical data (IP addresses, device fingerprints, behavioural patterns) to help identify and prevent fraudulent activity on the cv67 platform.
• Game studio providers: Licensed game providers including Pragmatic Play, NetEnt, Microgaming, Spribe, Evolution Gaming, and Ezugi may receive session and gameplay data necessary to deliver their games to your account and to maintain game integrity.
• Regulatory authorities and law enforcement: cv67 may disclose personal data to government bodies, regulatory authorities, or law enforcement agencies where required to do so by applicable law, court order, or regulatory directive.
• Professional advisers: Legal advisers, auditors, and compliance consultants engaged by cv67 may have access to personal data on a strictly need-to-know basis, subject to confidentiality obligations.

All third-party service providers who receive personal data from cv67 are required to implement appropriate technical and organisational security measures and to process personal data only in accordance with cv67's documented instructions.

cv67 uses cookies and similar web technologies — including browser local storage and session storage — to operate the platform effectively and improve the player experience. The categories of cookies used by cv67 are as follows:

• Strictly necessary cookies: These are essential for the platform to function. They maintain your login session, remember your language and currency preferences, and enable core platform features. These cookies cannot be disabled.
• Performance and analytics cookies: These cookies collect anonymised information about how players interact with the cv67 platform — such as which pages are visited most frequently and whether error messages are received. This data is used to improve platform performance.
• Functional cookies: These allow the platform to remember choices you have made (such as your preferred deposit method or game lobby layout) to provide a more personalised experience.
• Security cookies: Used to detect fraudulent activity, unauthorised login attempts, and multi-accounting behaviour by tracking device fingerprints and session characteristics.

Most web browsers allow you to control cookie settings through the browser's preferences menu. Disabling strictly necessary cookies may impair the functionality of the cv67 platform and prevent you from logging in or completing transactions. Disabling performance or functional cookies will not prevent you from using the platform but may reduce the quality of your experience.

cv67 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, and compliance obligations. The following general retention periods apply:

When the applicable retention period expires and no legitimate reason exists to retain the data further, cv67 will securely delete or anonymise the personal data in question. Anonymised data — which cannot be re-linked to any individual — may be retained indefinitely for statistical and analytical purposes.

cv67 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption on all data transmissions between your browser or mobile device and the cv67 platform.
• Encrypted storage of all passwords using industry-standard hashing algorithms. cv67 staff cannot view your password in plain text.
• Two-step verification (2SV) available on all accounts, with mandatory 2SV for high-value withdrawal requests.
• Real-time fraud detection systems that monitor login activity, device fingerprints, IP addresses, and transaction patterns for anomalous behaviour.
• Role-based access controls ensuring that cv67 staff can only access the personal data necessary for their specific job function.
• Regular internal security audits and vulnerability assessments of the cv67 platform infrastructure.
• Physical and logical access controls on servers and data storage systems.
• Incident response procedures that enable cv67 to detect, contain, and notify affected players of any confirmed data breach within a reasonable timeframe.

Despite the measures described above, no data transmission over the internet and no data storage system can be guaranteed to be 100% secure. You are also responsible for maintaining the security of your own account credentials and the device you use to access cv67. If you suspect your account has been compromised, contact our support team immediately at [email protected].

As a cv67 player, you hold the following rights in respect of your personal data. To exercise any of these rights, contact the cv67 support team at [email protected] with the subject line "Data Rights Request" and your registered username.

• Right of access: You may request a copy of the personal data cv67 holds about you, including the categories of data held, the purposes of processing, and any third parties with whom it has been shared.
• Right to rectification: If any personal data cv67 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update certain information directly within your account settings.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose it was collected, where you have withdrawn consent, or where there is no legitimate legal basis for continued processing. Note that certain data may be retained where required by legal obligation (e.g., AML compliance records).
• Right to object: You may object to the processing of your personal data where cv67 relies on legitimate interests as the legal basis. You may also object at any time to the use of your data for marketing purposes.
• Right to restrict processing: In certain circumstances, you may request that cv67 restrict the processing of your data — for example, while an accuracy dispute is being resolved.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

The cv67 platform is strictly intended for adults aged 21 and above. cv67 does not knowingly collect, process, or store personal data belonging to any individual under the age of 21. Age verification is a mandatory step in the cv67 account registration and withdrawal process.

If cv67 becomes aware that personal data has been collected from an individual under the age of 21 without appropriate parental or guardian consent, that data will be deleted immediately and the associated account will be permanently closed. Any funds held in such an account will be returned to the verified payment method used for deposit, after investigation.

cv67 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, operational requirements, or applicable law. When material changes are made to this policy, cv67 will notify active players by one or more of the following methods:

• Posting a prominent notice on the cv67 homepage or within the player account dashboard.
• Sending an email notification to the address registered on your cv67 account.
• Displaying an in-platform notification the next time you log in to your account.

The updated Privacy Policy will display the revised effective date at the top of the document. Your continued use of the cv67 platform after the effective date of a revised policy constitutes your acceptance of the updated terms. If you do not agree with any material change to this Privacy Policy, you should cease using the cv67 platform and may request account closure by contacting [email protected].

We encourage all players to review this Privacy Policy periodically to stay informed about how cv67 collects, uses, and protects your personal data. The most current version of this policy is always available at https://cv67.io/privacy-policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way cv67 handles your personal data, please contact our support team using the details below. All privacy-related enquiries are handled by our dedicated compliance and support staff.

cv67 is committed to resolving all data privacy concerns fairly and promptly. If you are not satisfied with our response, you retain the right to escalate the matter through any applicable legal or regulatory channels available to you under the laws of Bangladesh.