Privacy Policy: Player Data Protection & Confidentiality
Learn how CV666 collects, processes, encrypts, and protects your personal information, mobile wallet details, and gaming history in full compliance with international standards.
- Minimal data collection limited to account setup, MFS verification, and fraud prevention.
- All personal identity and transaction data encrypted with AES-256 ciphers at rest.
- Strict non-disclosure policy: player data is never sold, leased, or distributed to advertisers.
- Full user rights to access, review, modify, or request deletion of stored personal information.
Information We Collect and Why We Need It
To provide a secure, seamless online casino experience, CV666 collects specific categories of user information during account registration, payment processing, and customer support interactions.
We operate under a strict principle of data minimization—we only collect data that is directly required to verify your eligibility, execute financial transactions via bKash and Nagad, prevent fraudulent multi-accounting, and comply with international gaming regulations.
Account Registration Data
When creating an account, you provide your active 11-digit Bangladeshi mobile telephone number, account username, and password. This data is used to authenticate your login sessions and secure your account.
Financial and Transaction Records
We record deposit and withdrawal timestamps, transaction amounts, payment methods (e.g., bKash, Nagad), and 10-digit TrxID verification codes to reconcile balances and process payouts.
Technical and Device Information
Our servers collect anonymized technical telemetry, including IP address, device model, operating system version, browser type, and connection latency, to optimize mobile performance and detect unauthorized login attempts.
How We Protect and Store Your Personal Data
Protecting player confidentiality is a core institutional priority. All personal and financial data stored by CV666 is protected by advanced cryptographic and physical security controls within secure tier-4 datacenters.
Data at rest is encrypted using 256-bit AES algorithms, and internal access is restricted strictly to authorized compliance and finance personnel through role-based access control (RBAC) protocols and multi-factor authentication (MFA). Our databases are audited continuously to identify and remediate potential security vulnerabilities.
Strict Non-Disclosure Policy
CV666 does not sell, rent, monetize, or disclose your personal information or gaming habits to third-party advertisers, data brokers, or commercial marketing agencies.
Authorized Service Providers
Data is shared only with vetted technical infrastructure partners—such as SMS notification gateways and game server hosts—strictly as necessary to deliver platform services.
Cookies, Telemetry & Mobile Analytics
Like most modern web platforms, CV666 utilizes session cookies and lightweight telemetry tags to enhance your user experience, remember your language preferences, and maintain secure login states across page navigation.
Cookies are small text files stored locally on your device. They cannot access your private files or execute code. You can easily manage or disable cookies through your browser settings, although certain platform features (such as persistent login) may require active session cookies to function smoothly.
Essential Security Cookies
These cookies authenticate your login session, prevent cross-site request forgery (CSRF), and ensure your cashier transactions remain secure.
Performance Analytics
We use aggregate, non-personally identifiable telemetry to identify slow-loading games, network bottlenecks, and server latency spikes on Bangladeshi mobile networks.
Your Data Rights and Account Control
CV666 believes that every player has the right to understand, manage, and control how their personal information is utilized. Under our corporate privacy policy, you possess comprehensive data rights:
- **Right to Access:** You may request a complete summary of all personal data held in association with your player account. - **Right to Rectification:** You have the right to update or correct any inaccurate personal details or outdated contact information. - **Right to Erasure (Right to Be Forgotten):** Upon account closure and completion of mandatory regulatory retention windows, you may request the deletion of your personal data from active marketing databases. - **Right to Restrict Marketing:** You may opt out of SMS or Telegram promotional messages at any time directly through your account preferences.
Data Retention Requirements
In accordance with international anti-money laundering (AML) licensing obligations, basic financial transaction records must be retained in encrypted archives for a legally mandated period following account closure.
Submitting Data Requests
To exercise any of your data rights, simply contact our Data Protection Officer via live chat or email support with your registered mobile number.
| Data Category | Specific Information Collected | Primary Purpose | Retention Duration |
|---|---|---|---|
| Identity & Contact | Mobile phone number, username, password | Account authentication & security alerts | Active account lifespan + 5 years (AML) |
| Financial Telemetry | Deposit/withdrawal amounts, MFS wallet, TrxID | Processing BDT cashouts & balance reconciliation | 7 years (regulatory audit standards) |
| Technical Data | IP address, device model, OS, browser | Fraud prevention & mobile performance tuning | 90 days rolling log cycle |
| Communications | Live chat logs, support tickets, email records | Customer service quality assurance & dispute resolution | 2 years from ticket resolution date |
| KYC Documents | National ID (NID), passport (when requested) | Identity and age verification (21+ enforcement) | Duration of account + legal compliance window |
Frequently Asked Questions
Related Guides in Trust & Governance
