cvv6 Privacy Policy — How We Handle Your Personal Data

1. Introduction

cvv6 is committed to protecting the privacy and security of all personal data entrusted to us by our players. This Privacy Policy applies to all personal data collected through the cvv6.io website, its associated mobile-optimised web interface, and all communications between you and cvv6 including emails, Live Chat, and WhatsApp interactions.

We take our data protection obligations seriously. All personal data held by cvv6 is processed lawfully, fairly, and transparently. We collect only what is necessary, store it securely, share it only when required, and make it straightforward for you to exercise your privacy rights at any time.

This policy applies to all registered players on the cvv6 platform in Bangladesh and to any visitor who browses cvv6.io without registering an account. If you have any questions about how we handle your data, please contact us at [email protected].

2. Personal Data We Collect

cvv6 collects personal data through several channels: directly from you during registration and account use, automatically through your use of the platform, and from third parties such as payment providers and identity verification services. The categories of data we collect are as follows:

2.1 Registration & Identity Data

When you create a cvv6 account, we collect the information required to establish and verify your identity:

• Full legal name (as it appears on your government-issued identification)
• Date of birth (to verify you meet the 21+ age requirement)
• Email address
• Mobile phone number (Bangladesh format)
• Residential address in Bangladesh
• Username and encrypted password

2.2 Identity Verification (KYC) Documents

As part of our mandatory Know Your Customer (KYC) process, we may collect copies or images of the following documents:

• National Identity Card (NID), passport, or Bangladesh driving licence
• Proof of residential address (utility bill or bank statement dated within three months)
• Proof of payment method ownership (e.g., bKash, Nagad, Rocket, or Upay account confirmation)
• Source of funds documentation where our compliance team determines this is necessary

2.3 Financial & Transaction Data

• Deposit and withdrawal amounts, dates, and payment method references
• Mobile banking transaction IDs from bKash, Nagad, Rocket, and Upay
• Account balance history and wagering activity records
• Bonus and promotion redemption history

2.4 Technical & Usage Data

When you access cvv6.io, we automatically collect certain technical information about your device and usage patterns:

• IP address and approximate geographic location (country and city level)
• Device type, operating system, and browser version
• Pages visited, features used, and time spent on the platform
• Session start and end times
• Referring URL (the page you visited before arriving at cvv6.io)
• Crash reports and error logs generated during your session

2.5 Communications Data

• Records of all customer support interactions via Live Chat, email, and WhatsApp
• Feedback, complaints, and dispute correspondence
• Records of any marketing communications you have opted into or opted out of

3. How We Use Your Personal Data

cvv6 uses your personal data for the following specific purposes. We do not use your data for any purpose not listed here without first obtaining your explicit consent.

Purpose	Data Used
Account registration and management	Identity data, contact data
Identity verification (KYC compliance)	Identity data, KYC documents
Processing deposits and withdrawals	Financial data, identity data
Fraud detection and prevention	Technical data, financial data, identity data
Anti-money laundering (AML) monitoring	Financial data, identity data, KYC documents
Customer support and dispute resolution	Communications data, identity data, financial data
Responsible gaming monitoring	Usage data, financial data
Platform improvement and analytics	Technical data, usage data (aggregated and anonymised)
Marketing communications (where opted in)	Contact data, usage data
Legal and regulatory compliance	All categories as required by law

4. Legal Basis for Processing

cvv6 processes your personal data on the following legal bases, depending on the nature of the processing activity:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions you agreed to when registering your cvv6 account — including account management, payment processing, and game provision.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering regulations, identity verification requirements, and tax reporting obligations.
• Legitimate interests: Processing necessary for our legitimate business interests, including fraud prevention, platform security, and responsible gaming monitoring, where those interests are not overridden by your rights.
• Consent: Processing based on your specific, informed, and freely given consent — primarily for marketing communications. You may withdraw consent at any time without penalty.

5. Data Sharing With Third Parties

cvv6 does not sell, rent, or trade your personal data. We share personal data with third parties only in the following limited circumstances, and only to the extent necessary for each stated purpose:

5.1 Payment Service Providers

We share transaction-related data with your chosen mobile banking provider (bKash, Nagad, Rocket, or Upay) solely to process your deposit or withdrawal request. These providers are bound by their own privacy policies and applicable financial regulations.

5.2 Identity Verification Services

We may use third-party KYC verification services to assist with document authentication and identity checks. These providers process your identity documents on our behalf under strict data processing agreements and are not permitted to use your data for any purpose other than verification.

5.3 Game Technology Providers

Game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session data necessary for game integrity and RTP auditing purposes. These providers do not receive your personally identifiable registration information.

5.4 Legal and Regulatory Authorities

cvv6 will disclose personal data to law enforcement agencies, regulatory bodies, or courts when required to do so by a valid legal obligation, court order, or when we reasonably believe disclosure is necessary to prevent fraud, money laundering, or harm to individuals.

5.5 Business Transfers

In the event of a merger, acquisition, or sale of cvv6 or a substantial part of its assets, your personal data may be transferred to the successor entity. We will notify you of any such transfer via your registered email address in advance.

6. Cookies & Tracking Technologies

cvv6 uses cookies and similar tracking technologies on cvv6.io to ensure the platform functions correctly, to recognise returning users, and to improve your experience. The categories of cookies we use are:

• Essential cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during your visit. These cannot be disabled without preventing platform use.
• Functional cookies: Remember your preferences such as language settings, game display preferences, and responsible gaming limits you have set.
• Analytical cookies: Collect anonymised data about how visitors use cvv6.io — for example, which pages are visited most frequently and where users encounter errors. This data is used solely to improve the platform.
• Security cookies: Help us detect and prevent fraudulent activity, bot access, and account takeover attempts.

You can manage cookie preferences through your browser settings. Please note that disabling essential cookies will prevent you from using the cvv6 platform. We do not use third-party advertising cookies or behavioural profiling cookies.

7. Data Retention

cvv6 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, subject to the following minimum retention periods required by law and our operational needs:

• Account and identity data: Retained for a minimum of five (5) years following account closure, in compliance with anti-money laundering (AML) record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• KYC documents: Retained for a minimum of five (5) years following account closure.
• Customer support communications: Retained for three (3) years from the date of the interaction, unless related to an unresolved dispute.
• Technical and usage data: Retained in anonymised or aggregated form for up to two (2) years for platform analytics purposes.
• Marketing preference records: Retained for as long as your account is active, and for one (1) year following account closure, to evidence consent and opt-out history.

Following the expiry of the applicable retention period, your personal data is securely deleted or anonymised in a manner that makes re-identification impossible.

8. Data Security

cvv6 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure:

• Encryption in transit: All data transmitted between your device and cvv6.io is encrypted using 256-bit SSL/TLS technology. Our site enforces HTTPS exclusively.
• Encryption at rest: Sensitive personal data including KYC documents and payment references are stored in encrypted form on our servers.
• Access controls: Access to personal data within cvv6 is restricted on a strict need-to-know basis. Staff who do not require access to your personal data to perform their role cannot access it.
• Two-factor authentication (2FA): Available for all player accounts and mandatory for our internal administrative staff.
• Security monitoring: Our systems are monitored continuously for suspicious activity, intrusion attempts, and anomalous data access patterns.
• Regular security assessments: cvv6 conducts periodic security reviews and vulnerability assessments of its platform infrastructure.

While we take every reasonable precaution to protect your data, no internet-based system can be guaranteed 100% secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, cvv6 will notify affected users promptly and take immediate remedial action.

9. Your Data Rights

As a cvv6 player, you have the following rights with respect to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request" and your registered account email address.

• Right of access: You have the right to request a copy of all personal data cvv6 holds about you, along with information about how it is being used.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. You can update many details directly in your account settings.
• Right to erasure: You have the right to request deletion of your personal data in certain circumstances — for example, where it is no longer necessary for the purpose it was collected. This right is subject to our legal retention obligations; we cannot delete data we are legally required to retain.
• Right to restriction of processing: You have the right to ask us to pause processing of your data in certain circumstances, for example while we investigate a data accuracy dispute.
• Right to data portability: You have the right to receive a copy of personal data you have provided to cvv6 in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to our processing of your data where we rely on legitimate interests as the legal basis. You also have an absolute right to object to processing for direct marketing purposes at any time.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

cvv6 will respond to all verified data rights requests within thirty (30) calendar days of receipt. In complex cases, we may extend this period by up to a further thirty (30) days and will notify you accordingly. We will not charge a fee for handling data rights requests unless a request is manifestly unfounded or excessive.

10. Children & Minors

cvv6 is an adult-only gambling platform. We do not knowingly collect or process personal data belonging to any person under the age of 21. Our registration process includes mandatory age verification steps, and our KYC process is designed to detect and reject underage applicants.

If you believe that a person under the age of 21 has registered an account on cvv6, or that we have inadvertently collected personal data from a minor, please contact us immediately at [email protected]. We will investigate the matter promptly and, where confirmed, will close the account and permanently delete all associated personal data without delay.

Parents and guardians are encouraged to use parental control software to prevent minors from accessing gambling websites. cvv6 supports the use of filtering tools as part of our commitment to keeping the platform adult-only.

11. Third-Party Links

The cvv6 platform does not contain links to third-party websites. In the event that any third-party content, game provider interface, or payment gateway redirect is present within the platform, please be aware that those third parties operate their own privacy policies which are entirely independent of this Privacy Policy. cvv6 is not responsible for the privacy practices of any third-party operator, payment provider, or game studio. We encourage you to review the privacy policy of any third-party service you interact with.

12. Marketing Communications

cvv6 may send you promotional and marketing communications by email, SMS, or WhatsApp, but only if you have explicitly opted in to receive them during registration or at a later stage via your account settings. Marketing communications may include information about new games, upcoming promotions, seasonal bonuses tied to events such as BPL, IPL, Eid, and Pohela Boishakh, and platform updates.

You may opt out of marketing communications at any time by:

• Updating your communication preferences in your cvv6 account settings
• Clicking the unsubscribe link included in any marketing email
• Contacting our support team at [email protected] and requesting removal from all marketing lists

Opting out of marketing communications will not affect your ability to use the cvv6 platform or receive essential account and transactional notifications, such as deposit confirmations, withdrawal updates, KYC request emails, and security alerts. These service communications are not marketing and cannot be opted out of while your account remains active.

13. Changes to This Privacy Policy

cvv6 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform functionality. When we make material changes, we will post a prominent notice on the cvv6.io homepage and, where we hold a current email address for you, send a notification to your registered email address at least seven (7) days before the changes take effect.

The date of the most recent revision is always displayed at the top of this page. We encourage you to review this Privacy Policy periodically. Your continued use of the cvv6 platform following the effective date of a revised Privacy Policy constitutes your acknowledgement of the changes. If you do not agree to the revised policy, please stop using the platform and contact us to request account closure.

14. Contact & Complaints

If you have any questions, concerns, or complaints about this Privacy Policy or the way in which cvv6 handles your personal data, please contact our Privacy team using any of the following channels:

• Email: [email protected] — please use the subject line "Privacy Query" or "Data Rights Request"
• Live Chat: Available 24/7 via the cvv6 platform
• WhatsApp: +880 1800 000 000 (plain text — not a clickable link)

We will acknowledge receipt of all privacy-related complaints within 48 hours and will provide a full written response within thirty (30) calendar days. Where a complaint relates to a data breach or urgent security matter, please mark it as urgent and we will prioritise our response accordingly.