cvy6 Privacy Policy

Who We Are

cvy6 is an online casino and sports betting platform operating at cvy6.io, serving players in Bangladesh. For the purposes of this Privacy Policy, cvy6 acts as the data controller in respect of the personal data collected from players who register and use the platform.

As data controller, cvy6 determines the purposes and means by which personal data is collected and processed. If you have any questions about how your personal data is handled, or wish to exercise any of your rights described in this policy, you may contact our data privacy team at [email protected].

cvy6 is committed to processing personal data responsibly, transparently, and in accordance with applicable data protection principles. This policy reflects our obligations to all players, with particular sensitivity to the Bangladesh market context, including the use of mobile payment platforms such as bKash, Nagad, and Rocket.

Data We Collect

cvy6 collects personal data from you through several channels during the course of your relationship with the platform. The categories of data we collect, and the circumstances in which we collect them, are as follows:

Data You Provide Directly

When you register an account, you provide identity data (full name, date of birth), contact data (mobile number, email address), and optionally your city or district of residence. During the KYC verification process, you may be required to upload copies of identity documents such as your National Identity Card (NID) or passport. When contacting our support team, the content of those communications is also collected.

Data Collected During Platform Use

As you use the cvy6 platform, we automatically collect technical data including your IP address, device type, browser version, and session timestamps. We also collect usage data relating to your activity on the platform — including which games you play, bet amounts, session durations, and your deposit and withdrawal history. This data is used for security purposes, responsible gaming monitoring, and platform improvement.

Data from Payment Processors

When you make a deposit or request a withdrawal, our payment processing partners (including mobile wallet operators such as bKash, Nagad, Rocket, and Upay, and card processors) transmit transaction confirmation data to cvy6. This includes transaction reference numbers and partial payment identifiers necessary to reconcile your account balance. cvy6 does not receive or store full card numbers or mobile banking PINs.

Data from Identity Verification Providers

Where cvy6 uses a third-party identity verification service to support the KYC process, that provider may return a verification status result and confidence score to cvy6. cvy6 retains the verification outcome alongside the documents you submitted, in accordance with the data retention periods described in Section 7.

How We Use Your Data

cvy6 uses personal data for the following clearly defined purposes. We do not use your data for any purpose incompatible with those listed below without first obtaining your explicit consent:

• Account creation and management: To establish and maintain your registered account, authenticate your identity at login, and manage your account preferences.
• Age and identity verification: To confirm that you meet the minimum age requirement of 21 years, and to verify your identity as required by responsible gaming and anti-fraud standards.
• Transaction processing: To process your deposits and withdrawals accurately via your chosen payment method, and to maintain an accurate ledger of your account balance and transaction history.
• Fraud prevention and platform security: To detect and prevent fraudulent activity, money laundering, account takeovers, bot activity, and abuse of promotional offers.
• Responsible gaming monitoring: To identify patterns of behaviour that may indicate problem gambling and to enable the delivery of responsible gaming interventions including deposit limit enforcement, cooling-off periods, and self-exclusion.
• Customer support: To investigate and resolve queries, complaints, and disputes submitted through our support channels.
• Platform improvement: To analyse aggregated usage data in order to improve the functionality, layout, and content of the cvy6 platform.
• Communications: To send you transaction notifications, security alerts, and where you have opted in, promotional communications relating to cvy6 offers relevant to the Bangladesh market.
• Legal compliance: To fulfil any legal or regulatory obligations applicable to the operation of the cvy6 platform.

Legal Bases for Processing

cvy6 processes personal data on the basis of one or more of the following legal grounds, depending on the nature of the processing activity:

• Contractual necessity: Processing is necessary to perform the contract between you and cvy6 — specifically, to deliver the online casino and sports betting services you have registered to use, and to process your financial transactions.
• Legal obligation: Processing is required to comply with applicable legal and regulatory obligations, including age verification, KYC/AML requirements, and record-keeping obligations.
• Legitimate interests: Processing is necessary for the legitimate interests of cvy6, including fraud prevention, platform security, responsible gaming monitoring, and platform improvement — provided those interests are not overridden by your rights and interests.
• Consent: Where cvy6 sends you optional promotional communications, or deploys non-essential cookies, this is done on the basis of your consent. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Data Sharing & Third Parties

cvy6 does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial or marketing purposes. Data is shared with carefully selected third-party service providers only to the extent necessary for them to deliver services that support the operation of the cvy6 platform. Categories of recipients include:

• Payment processors: Mobile wallet operators (bKash, Nagad, Rocket, Upay) and card payment networks (Visa, Mastercard) receive the minimum data necessary to process your deposits and withdrawals securely.
• Identity verification providers: Where a third-party KYC service is engaged, identity documents and personal details submitted for verification purposes are transmitted to that provider under a data processing agreement that restricts their use to the verification service only.
• Game providers: Casino game providers including Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe receive session data necessary to deliver game content and calculate results. No financial account data is passed to game providers.
• Cloud infrastructure and hosting providers: The servers and infrastructure used to operate the cvy6 platform are provided by third-party cloud providers. These providers act as data processors under contractual agreements and do not have independent access to your data for their own purposes.
• Legal and regulatory authorities: cvy6 will disclose personal data to law enforcement, regulatory bodies, or courts where required to do so by law, or where disclosure is necessary to protect the rights, property, or safety of cvy6, its players, or the public.

All third-party data processors engaged by cvy6 are required to handle personal data in accordance with applicable data protection standards and are bound by contractual obligations restricting the use of data to the specific purposes for which it was shared.

Cookies & Tracking Technologies

cvy6 uses cookies and similar tracking technologies on the platform. A cookie is a small text file stored on your device when you visit a website. The types of cookies used by cvy6 are as follows:

Essential Cookies

These cookies are strictly necessary for the platform to function. They maintain your authenticated session after login, remember your account preferences, and ensure that security tokens are correctly validated. Essential cookies cannot be disabled without breaking core platform functionality.

Analytical Cookies

These cookies allow cvy6 to understand how players navigate and interact with the platform — for example, which game categories are visited most frequently, how long sessions last, and where players encounter errors. This data is used in aggregated, anonymised form to improve the platform experience. Analytical cookies do not identify you personally.

No Cross-Site Advertising Cookies

cvy6 does not deploy advertising tracking cookies or participate in cross-site behavioural advertising networks. You will not be tracked across third-party websites based on your use of the cvy6 platform.

Managing Cookies

You can manage or disable cookies at any time through your browser's settings. Note that disabling essential cookies may prevent you from logging in or using core platform features. Instructions for managing cookies are available in the help documentation for your specific browser.

Data Retention

cvy6 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention principles apply:

• Account data: Personal data associated with an active account is retained for the duration of the account's existence and for a period of at least five (5) years following account closure, to meet anti-money laundering record-keeping requirements.
• Transaction records: Deposit and withdrawal transaction records are retained for a minimum of five (5) years from the date of the transaction, in accordance with financial record-keeping obligations.
• KYC documents: Identity verification documents submitted during the KYC process are retained for the period required by applicable regulations — typically five (5) years from the date of submission or account closure, whichever is later.
• Support communications: Customer support records, including live chat transcripts and email correspondence, are retained for up to two (2) years from the date of the interaction, unless the matter involves an unresolved dispute that requires longer retention.
• Marketing preferences: Opt-in records for promotional communications are retained for the life of the account and for one (1) year following withdrawal of consent, as evidence of the basis on which marketing was sent.

When data is no longer required for any of the above purposes, it is securely deleted or anonymised in accordance with cvy6's internal data lifecycle management procedures.

Data Security

cvy6 implements a layered security framework to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Key security measures include:

• TLS/SSL encryption in transit: All data exchanged between your browser or device and the cvy6 platform is encrypted using Transport Layer Security (TLS). Connections are enforced over HTTPS; plain HTTP connections are rejected.
• AES-256 encryption at rest: Sensitive personal data stored on cvy6 servers — including identity documents and financial records — is encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data within cvy6's internal systems is restricted on a strict need-to-know basis. Staff access is authenticated, role-based, and subject to audit logging.
• Vulnerability management: cvy6's technical infrastructure is subject to regular security assessments. Known vulnerabilities are patched on a priority basis in accordance with severity ratings.
• Incident response: cvy6 maintains a data breach response procedure. In the event of a confirmed breach that poses a risk to players, affected individuals will be notified in a timely manner with details of the nature of the breach and the steps being taken to address it.

While cvy6 takes all reasonable technical and organisational measures to protect your data, no digital platform can guarantee absolute security. You are responsible for maintaining the security of your own account credentials and for notifying cvy6 immediately if you believe your account has been compromised.

Your Rights

As a cvy6 player, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, contact our data privacy team at [email protected] with a clear description of your request. We will respond within a reasonable timeframe, and in any case within 30 days of receiving a valid request:

• Right of Access: You have the right to request a copy of the personal data cvy6 holds about you, along with information about the purposes for which it is processed.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update certain account details directly through your account settings panel.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where you object to its processing. Note that deletion requests may be subject to legal retention obligations that require cvy6 to retain certain records regardless of the request.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you may request a copy of your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests. Where you object, cvy6 will cease processing unless there are compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (for example, receipt of promotional communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
• Right to Restrict Processing: In certain circumstances — for example, while the accuracy of data is being disputed — you may request that processing of your personal data be temporarily restricted.

Children & Minors

The cvy6 platform is strictly intended for adults aged 21 years and above. cvy6 does not knowingly collect personal data from any person below this age threshold. The collection of personal data from individuals under 21 is not authorised by this Privacy Policy and is contrary to cvy6's terms of service.

Age verification is a mandatory step in the cvy6 onboarding and KYC process. Where cvy6 has reason to believe that an account has been registered by or on behalf of a person under 21, that account will be immediately suspended pending investigation. Any personal data associated with an account found to belong to a minor will be securely deleted upon confirmation, and any associated funds will be handled in accordance with the Terms & Conditions governing underage account closure.

If you have reason to believe that a person under the age of 21 has registered an account with cvy6, please notify us immediately at [email protected] so that we can investigate and take appropriate action without delay.

International Data Transfers

The cvy6 platform serves players in Bangladesh and its primary operational focus is the Bangladesh market. However, certain third-party service providers — including cloud infrastructure providers, game providers, and identity verification services — may be located in or operate infrastructure in jurisdictions outside Bangladesh.

Where personal data is transferred to a third-party processor located outside Bangladesh, cvy6 takes appropriate steps to ensure that such transfers are subject to adequate safeguards. These safeguards may include contractual clauses that impose data protection obligations on the recipient, or the selection of processors who operate under data protection frameworks that provide an equivalent level of protection to those applicable in Bangladesh.

By using the cvy6 platform and agreeing to this Privacy Policy, you acknowledge that your personal data may be processed in jurisdictions outside your country of residence. cvy6 will always seek to minimise the extent of such transfers and to ensure that your data is protected regardless of where it is processed.

Changes to This Privacy Policy

cvy6 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to our platform. When a material change is made, cvy6 will notify registered players via email to the address associated with their account and/or by displaying a prominent notice on the platform upon login.

The effective date at the top of this document reflects when the current version was last updated. Continued use of the cvy6 platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you should discontinue use of the platform and contact our support team to close your account and arrange the withdrawal of any remaining balance.

cvy6 recommends that all players review this Privacy Policy periodically to remain informed about how their personal data is being handled. Previous versions of this policy are available upon request by contacting [email protected].

Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how cvy6 is handling your personal data, please reach out to our team through the following channel:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 via the live chat feature within the cvy6 platform.
• Response Time: Privacy-related email inquiries are handled within 5 business days. Urgent matters such as suspected data breaches or unauthorised account access are prioritised and actioned as quickly as possible.

All privacy correspondence should be submitted in English. Please include your registered account username and a clear description of your request or concern to help our team respond efficiently. cvy6 operates on Bangladesh Standard Time (BST, UTC+6).