cv6 Privacy Policy

1 Introduction

cv6 ("we", "us", "the Platform") is committed to protecting the privacy and personal data of every player who accesses or uses cv6.today. This Privacy Policy sets out in clear terms what personal data we collect, why we collect it, how we process and store it, who we share it with, and what rights you hold as a data subject.

This Policy applies to all personal data processed in connection with your use of the cv6 website, mobile-optimised site, and any associated services — including sports betting, live casino, slots, card games such as Callbreak Quick, and arcade games such as Fishing. It applies to all players regardless of their location, with particular relevance to players accessing the Platform from Bangladesh.

By registering an Account on cv6 or continuing to use the Platform after this Policy has been published or updated, you acknowledge that you have read and understood this Privacy Policy. This Policy should be read alongside our Terms & Conditions and Responsible Gaming page.

2 Data Controller

For the purposes of applicable data protection law, cv6 acts as the data controller in respect of personal data collected through the Platform. As data controller, cv6 determines the purposes and means of processing your personal data and is responsible for ensuring that processing is conducted lawfully, fairly, and transparently.

All data-related enquiries, access requests, deletion requests, and complaints should be directed to the cv6 data protection contact at: [email protected]. Please include "Privacy Request" in the subject line of your email so that your enquiry is routed to the appropriate team member without delay.

3 Data We Collect

cv6 collects the following categories of personal data in the course of operating the Platform:

cv6 does not collect or process sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, except where expressly required by a legal obligation and only to the minimum extent necessary.

4 How We Collect Data

4.1 Direct Collection

The majority of personal data cv6 holds is provided directly by you during the registration process, when completing KYC verification, when making a deposit or withdrawal, when contacting our support team, or when responding to a promotional offer. You are under no obligation to provide data beyond what is strictly required, but failure to provide mandatory information may prevent us from opening or maintaining your Account.

4.2 Automated Collection

When you visit cv6.today, our servers automatically collect technical data including your IP address, the type of browser you are using, your device's operating system, and the pages you navigate to on the Platform. This data is collected using server logs, cookies, and similar tracking technologies as described in Section 8 below.

4.3 Third-Party Sources

In certain circumstances, cv6 may receive personal data about you from third-party sources, including:

• Identity verification and KYC service providers who validate the documents you submit;
• Payment processors such as bKash, Nagad, Rocket, and Upay, who confirm transaction status;
• Fraud prevention and anti-money-laundering databases that flag high-risk indicators;
• Marketing partners where you have given those partners prior consent to share your data with us.

In all cases, cv6 ensures that third-party data sources operate under appropriate data-sharing agreements and that the transfer of your data to cv6 has a lawful basis.

5 Legal Basis for Processing

cv6 processes personal data only where a valid legal basis exists. The legal bases we rely upon are as follows:

• Contractual necessity: Processing required to fulfil our obligations under the Account agreement with you — including operating your Account, processing bets, and handling deposits and withdrawals.
• Legal obligation: Processing required to comply with applicable law, including anti-money-laundering regulations, age-verification requirements, and tax reporting obligations.
• Legitimate interests: Processing necessary for cv6's legitimate business interests, including fraud prevention, platform security, product improvement, and responsible gaming monitoring, where those interests are not overridden by your rights and freedoms.
• Consent: Where you have given your express consent to a specific type of processing, such as receiving promotional communications or participating in a loyalty programme. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6 How We Use Your Data

cv6 uses personal data for the following purposes:

• To create, verify, and manage your player Account;
• To process deposits and withdrawals in Bangladeshi Taka via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and bank transfer;
• To verify your identity and age in compliance with KYC obligations;
• To detect, investigate, and prevent fraudulent activity, money laundering, and other prohibited conduct;
• To provide customer support and respond to your enquiries;
• To monitor betting and gaming patterns as part of our responsible gaming obligations;
• To send you transactional communications — such as deposit confirmations, withdrawal notifications, and security alerts — that are necessary for the operation of your Account;
• To send you marketing communications about promotions, bonuses, and new games, where you have opted in to receive such communications;
• To improve the design, functionality, and content of the Platform;
• To enforce our Terms & Conditions and other applicable policies;
• To comply with our legal and regulatory obligations.

cv6 does not use your personal data for automated decision-making that produces legal or similarly significant effects without human oversight, except where expressly required by applicable law.

7 Data Sharing

7.1 Service Partners

cv6 shares personal data with a limited number of trusted third-party service providers who process data on our behalf and under our instruction. These include KYC and identity verification providers, payment gateway operators, customer support software providers, and fraud prevention services. All such providers are bound by data processing agreements that require them to maintain appropriate security standards and to process data only for the purposes specified by cv6.

7.2 Payment Processors

To process deposits and withdrawals, cv6 shares the minimum necessary financial and identity data with payment processors including bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and City Bank. These entities operate under their own privacy policies and are subject to applicable financial regulatory requirements.

7.3 Game Providers

Game content on the cv6 Platform is provided by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. Technical session data (such as Player ID and game round identifiers) is shared with these providers solely for the purpose of game operation and result verification. These providers do not receive full identity or financial data.

7.4 Legal Disclosure

cv6 may disclose personal data to law enforcement agencies, regulatory authorities, or courts where required to do so by applicable law, court order, or where we believe disclosure is necessary to protect the rights, property, or safety of cv6, its players, or the public.

7.5 No Sale of Data

cv6 does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial or marketing purposes. Any data sharing arrangement is strictly limited to what is necessary for the operation of the Platform and the provision of services to you.

8 Cookies & Tracking

cv6 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device when you visit a website. The types of cookies cv6 uses are as follows:

• Essential Cookies: Required for the Platform to function — including maintaining your login session, remembering your language preference, and ensuring secure navigation. These cookies cannot be disabled without impairing platform functionality.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players navigate and interact with the Platform. This data helps cv6 identify usability issues and improve the overall experience.
• Fraud Prevention Cookies: Used to detect and prevent fraudulent account activity by monitoring for suspicious patterns across sessions.
• Preference Cookies: Used to remember your settings and preferences, such as your preferred deposit method or notification settings, so that you do not need to reconfigure them on each visit.

You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not affect your ability to use the core features of cv6, but may reduce the personalisation of your experience.

9 Data Retention

cv6 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Specific retention periods are as follows:

• Active Account Data: Retained for the duration of your Account relationship with cv6 and for a minimum of five (5) years following Account closure, in compliance with anti-money-laundering record-keeping requirements.
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction.
• KYC Documents: Retained for a minimum of five (5) years following Account closure or the completion of the relevant verification process, whichever is later.
• Support Communications: Retained for up to three (3) years from the date of the communication, or longer if related to an unresolved dispute.
• Marketing Consent Records: Retained for the duration of your consent and for one (1) year following withdrawal of consent as evidence of the consent record.

Following the expiry of applicable retention periods, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual.

10 Your Rights

Subject to applicable law, you hold the following rights in respect of the personal data cv6 processes about you:

• Right of Access: You may request a copy of the personal data cv6 holds about you, together with information about how it is processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held by cv6.
• Right to Erasure: You may request deletion of your personal data where cv6 has no legal obligation to retain it.
• Right to Restriction: You may request that cv6 restricts the processing of your data in certain circumstances — for example, while the accuracy of the data is being contested.
• Right to Data Portability: Where processing is based on your consent or on a contract, you may request a machine-readable copy of the data you have provided to cv6.
• Right to Object: You may object to processing carried out on the basis of cv6's legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact cv6 at [email protected] with the subject line "Privacy Request — [Right Type]". cv6 will acknowledge your request promptly and respond within a reasonable timeframe. We may need to verify your identity before processing your request.

11 International Transfers

cv6 operates internationally and some of the service providers and data processors we use may be located outside Bangladesh. Where personal data is transferred to a country that does not provide an equivalent level of data protection to Bangladesh, cv6 implements appropriate safeguards — such as standard contractual clauses or equivalent contractual protections — to ensure that your data continues to be handled securely and in accordance with this Privacy Policy.

By using the cv6 Platform, you acknowledge that your personal data may be processed in countries outside Bangladesh. cv6 takes all reasonable steps to ensure such transfers are conducted lawfully and securely.

12 Children's Privacy

cv6 is strictly an 18+ platform. We do not knowingly collect or process personal data from any individual under the age of 18. If you are under 18, you must not use this Platform or submit any personal data to cv6.

If cv6 discovers or has reason to believe that personal data has been collected from an individual under 18, that Account will be immediately suspended, all associated data will be deleted, and any deposited funds will be returned to the payment source. If you believe a minor has registered an Account on cv6, please notify us immediately at [email protected].

13 Security Measures

cv6 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and cv6 servers;
• Encryption of sensitive data at rest, including payment details and identity documents;
• Role-based access controls that limit internal access to personal data on a strict need-to-know basis;
• Regular security audits and penetration testing of the Platform and underlying infrastructure;
• Two-factor authentication options for player Accounts to reduce the risk of unauthorised access;
• Incident response procedures for managing and reporting data breaches in a timely manner.

While cv6 takes all reasonable precautions, no internet-based platform can guarantee absolute security. You are responsible for keeping your own Account credentials confidential and for notifying cv6 promptly if you suspect any breach of your Account security.

14 Third-Party Links

The cv6 Platform may contain references to or integrations with third-party services — such as game providers and payment gateways — that operate under their own privacy policies. cv6 is not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of cv6.

15 Policy Changes

cv6 reserves the right to update or amend this Privacy Policy at any time. Material changes will be communicated to registered players via the email address on record or via a prominent notice on the Platform prior to the changes taking effect. The current effective version of this Policy is always accessible at cv6.today/privacy-policy.

Your continued use of the Platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the revised terms. If you do not agree with any material change, you should stop using the Platform and may request Account closure in accordance with our Terms & Conditions.

16 Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the personal data cv6 holds about you, please contact our data protection team:

cv6 is committed to resolving all privacy-related enquiries fairly and promptly. If you are not satisfied with our response, you may have the right to lodge a complaint with an appropriate data protection supervisory authority.