Privacy Policy — cve666 Platform

1. Introduction

cve666 ("we", "us", "our") operates the online casino and sports betting platform accessible at https://cve666.app (the "Platform"). We understand that the privacy of our players is of critical importance, and we take our obligations as a data handler seriously.

This Privacy Policy sets out in clear, formal terms how cve666 collects, processes, stores, shares, and protects personal data relating to individuals who register for or use the Platform ("you", "Player", "User"). It also describes the rights you hold in relation to your personal data and how you may exercise them.

By registering an account on cve666 or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described herein, you should discontinue use of the Platform and may request account closure by contacting our support team.

2. Data Controller

cve666 acts as the data controller in respect of personal data collected through the Platform. As data controller, cve666 determines the purposes for which and the means by which personal data is processed.

All data-related enquiries, requests to exercise data rights, and complaints regarding data handling should be directed to the cve666 Data Protection contact. You may reach us at [email protected] (plain text — not a clickable link). We aim to respond to all data-related requests within thirty (30) calendar days of receipt.

3. Categories of Personal Data We Collect

cve666 collects the following categories of personal data from Players:

cve666 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information unless specifically required by applicable law or regulatory instruction.

4. How We Collect Your Data

cve666 collects personal data through the following channels:

• Direct interactions: Data you provide when registering an account, completing identity verification, making deposits or withdrawals, contacting support, or responding to surveys and promotions.
• Automated technologies: Technical and usage data collected automatically when you access or interact with the Platform, including through cookies, server logs, and session tracking tools.
• Third-party payment providers: Transaction confirmation data received from payment processors such as bKash, Nagad, Rocket, Upay, Visa, and Mastercard when you initiate a deposit or withdrawal.
• Identity verification partners: Where cve666 engages a third-party KYC provider to verify your identity documents, that provider may share verification outcomes and data flags with us.
• Fraud prevention services: Risk and fraud signals shared by third-party fraud detection tools that cve666 uses to protect the integrity of the Platform.

5. Purpose and Legal Basis for Processing

cve666 processes personal data only where it has a lawful basis to do so. The following table sets out the primary purposes for which we process data and the corresponding legal basis:

• Contract performance: Processing necessary to register your account, provide access to games and betting markets, process deposits and withdrawals, and fulfil our obligations to you as a Platform operator.
• Legal obligation: Processing required to comply with anti-money-laundering (AML) regulations, know-your-customer (KYC) requirements, fraud prevention obligations, and record-keeping requirements imposed by our licensing authority.
• Legitimate interests: Processing carried out for the purpose of fraud prevention, platform security, responsible gaming monitoring, service improvement, and internal analytics — where those interests are not overridden by your rights and freedoms.
• Consent: Processing for direct marketing communications and non-essential cookies, which cve666 undertakes only where you have provided explicit, freely given consent. You may withdraw consent at any time without detriment to your account.

cve666 does not engage in automated decision-making that produces legal or similarly significant effects without human oversight. Where profiling is used for responsible gaming monitoring, the outcome may affect account limits or trigger a welfare contact — any such outcome can be reviewed by a member of our support team upon request.

6. Sharing Your Personal Data

cve666 does not sell, rent, or trade your personal data to any third party for commercial purposes. We share personal data only in the following limited and controlled circumstances:

• Payment processors: Transaction data is shared with bKash, Nagad, Rocket, Upay, Visa, Mastercard, and bank transfer partners solely for the purpose of processing deposits and withdrawals. These providers operate under their own privacy policies and applicable financial regulations.
• Identity verification providers: Identity and document data may be shared with KYC service providers engaged by cve666 to fulfil regulatory verification obligations. These providers are contractually bound to process data only for the stated purpose.
• Game software providers: Gameplay session data (such as stake amounts and outcomes) may be accessible to game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi for the purpose of game delivery, fairness auditing, and dispute resolution. These providers do not receive your full identity or payment data.
• Fraud and security services: Technical and usage data may be shared with fraud prevention and cybersecurity service providers to protect the Platform and its users from malicious activity.
• Legal and regulatory authorities: cve666 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, legal process, or in connection with investigations into fraud, money laundering, or other unlawful activity.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of the cve666 business, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and given the opportunity to close your account if you do not consent.

7. Data Retention

cve666 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your active account relationship and for a minimum of five (5) years following account closure, in order to comply with anti-money-laundering record-keeping requirements.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of each transaction, consistent with financial compliance obligations.
• Support and communications records: Retained for a minimum of three (3) years from the date of the interaction, for dispute resolution and quality assurance purposes.
• Technical and usage logs: Typically retained for up to twelve (12) months, after which they are anonymised or deleted.
• Marketing consent records: Retained for the duration of your account and for a reasonable period following any withdrawal of consent, as evidence of your original consent.

Where data is no longer required, cve666 will securely delete or irreversibly anonymise it in accordance with our internal data lifecycle procedures.

8. Security Measures

cve666 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include:

• SSL/TLS encryption: All data transmitted between your device and the cve666 Platform is encrypted using Secure Sockets Layer (SSL) / Transport Layer Security (TLS) protocols.
• Access controls: Access to personal data within cve666's systems is restricted on a strict need-to-know basis. Staff with access to personal data are subject to confidentiality obligations.
• Secure data storage: Personal data is stored on secure servers protected by firewalls, intrusion detection systems, and regular security audits.
• Password hashing: Account passwords are stored using industry-standard one-way hashing algorithms. cve666 staff cannot view your password in plain text at any time.
• Fraud monitoring: Automated and manual monitoring systems are in place to detect unusual account activity, including suspicious login attempts and transaction patterns.

While cve666 takes all reasonable steps to protect your personal data, no system connected to the internet is entirely immune from risk. Players are strongly encouraged to use a strong, unique password for their cve666 account and to notify us immediately if they suspect unauthorised access.

9. Cookies & Tracking Technologies

cve666 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit the Platform. The following categories of cookies are used:

• Strictly necessary cookies: Required for the Platform to function. These include session management cookies that keep you logged in during your visit. They cannot be disabled without preventing core Platform functions from working.
• Performance and analytics cookies: Used to collect anonymised information about how Players use the Platform, such as which pages are visited most frequently and how long sessions last. This data helps cve666 improve the user experience.
• Functional cookies: Store your preferences such as language settings and game display options so that you do not have to reconfigure them on each visit.
• Marketing and targeting cookies: Used, with your consent, to track browsing activity across visits and deliver promotional content that is relevant to your interests. These cookies are only activated where you have provided consent.

You may manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. Withdrawing consent for marketing cookies will not affect your ability to use core Platform features.

10. Your Data Rights

Subject to applicable law, you hold the following rights in relation to the personal data that cve666 holds about you:

• Right of access: You may request a copy of the personal data cve666 holds about you, together with information about how it is processed.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data held in your account.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to cve666's legal retention obligations.
• Right to restrict processing: You may request that cve666 limit the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to its processing.
• Right to data portability: Where processing is based on your consent or contract performance, you may request that cve666 provide your personal data in a structured, machine-readable format.
• Right to object: You may object at any time to processing based on cve666's legitimate interests, including profiling for responsible gaming purposes. You also have an unconditional right to object to direct marketing at any time.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of the above rights, please contact us at [email protected] (plain text — not a clickable link). We will respond within thirty (30) calendar days. In certain circumstances, we may need to verify your identity before fulfilling a request.

11. Minors and Age Verification

cve666 is an adults-only Platform. We do not knowingly collect personal data from individuals under the age of 18. Age verification is a mandatory step in the account registration and KYC process, and we take reasonable technical and procedural measures to prevent access by minors.

If cve666 becomes aware that personal data has been collected from a person under the age of 18, that account will be immediately suspended, all associated funds will be handled in accordance with applicable regulatory guidance, and the personal data will be securely deleted to the extent permitted by law.

Parents or guardians who believe that a minor has created a cve666 account should contact us immediately at [email protected] so that prompt action can be taken.

12. International Data Transfers

cve666 operates as an internationally licensed offshore platform. As a result, personal data collected on the Platform may be transferred to, stored in, or processed in countries outside of Bangladesh. These countries may have data protection laws that differ from those applicable in Bangladesh.

Where personal data is transferred internationally, cve666 takes appropriate safeguards to ensure that it continues to be protected to a standard consistent with this Privacy Policy. Such safeguards include contractual data protection clauses with receiving parties and engagement of service providers operating under recognised data protection frameworks.

By using the Platform, you acknowledge and agree to the transfer of your personal data in the circumstances described above.

13. Changes to This Privacy Policy

cve666 reserves the right to update or revise this Privacy Policy at any time. Any material changes — such as changes to the categories of data collected, new sharing arrangements, or changes to your rights — will be communicated to registered Players via email or an in-platform notification prior to the change taking effect.

The updated Privacy Policy will be published on this page with a revised "Effective Date". Your continued use of the Platform following the publication of any revised Privacy Policy constitutes your acceptance of the changes. If you do not agree with the revised policy, you should cease using the Platform and may request account closure.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which cve666 handles your personal data, please contact our support team. We are available 24 hours a day, 7 days a week via live chat on the Platform, or by email at [email protected] (plain text — not a clickable link).

We take all data-related enquiries seriously and aim to resolve them promptly, fairly, and transparently. If you are not satisfied with our response, you may escalate the matter through the dispute resolution process outlined in our Terms & Conditions, available at Terms & Conditions.

This Privacy Policy is written in English. In the event of any translation being made available for convenience, the English-language version shall prevail in all cases of inconsistency or ambiguity.