cva666 Privacy Policy
We take your privacy seriously. This policy explains exactly what personal data cva666 collects, why we collect it, how we use it, and the rights you hold as a player.
Introduction & Scope
This Privacy Policy ("Policy") describes how cva666 ("we", "us", "our", "the Platform") collects, processes, stores, and protects the personal data of individuals ("you", "Player", "User") who access or use the cva666 website at cva666.app, including all features, games, sports betting markets, payment services, and customer support channels.
By registering an account or using the cva666 platform in any capacity, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with the practices described in this Policy, you must not use the platform.
cva666 is committed to handling your personal data with care, transparency, and respect. We collect only the data we need, we store it securely, and we do not sell it to third parties for commercial advertising purposes. This Policy is published in English and applies to all players accessing cva666 from Bangladesh — including players located in Dhaka, Chittagong, Sylhet, Rajshahi, Khulna, Barisal, Rangpur, Mymensingh, and Cox's Bazar — as well as players in any other jurisdiction.
Our Privacy Commitments
A plain-English summary of how cva666 handles your data — not a replacement for reading the full policy below
All data transmitted between your device and the cva666 platform is protected by industry-standard SSL/TLS encryption. Your login credentials, payment details, and personal information are never sent in plain text over any network connection.
cva666 does not sell, rent, or trade your personal information to third-party advertisers or data brokers. Your data is shared only with carefully selected service providers who assist us in operating the platform, and strictly on a need-to-know basis.
Every piece of personal data collected by cva666 serves a defined purpose: account management, identity verification, payment processing, fraud prevention, or regulatory compliance. We do not collect data speculatively or without a clear reason.
This Policy provides a complete account of every category of personal data that cva666 collects, the legal basis for collecting it, and how long we retain it. There are no hidden data collection practices at cva666.
As a cva666 player, you have the right to access, correct, and in certain circumstances request the deletion of your personal data. You can exercise these rights at any time by contacting our support team at [email protected].
cva666 stores personal data on secure, access-controlled servers. Retention periods are defined per data category and are no longer than strictly necessary. Data that is no longer required is securely deleted or anonymised in accordance with this Policy.
Full Privacy Policy
cva666 is the data controller responsible for the personal data described in this Policy. For all data-related enquiries, requests, or complaints, you may contact us at [email protected]. We aim to respond to all data-related requests within 30 calendar days of receipt.
cva666 collects personal data in the following categories:
- Registration Data: Full name, date of birth, email address, mobile phone number, and residential address provided when you create an Account.
- Identity Verification Data: Copies of government-issued photo identification (National ID card, passport, or driving licence), proof of address, and payment method ownership documentation collected as part of our KYC process.
- Financial Data: Deposit and withdrawal transaction records, payment method identifiers (bKash number, Nagad number, Rocket number, masked card numbers), transaction amounts in BDT, and transaction timestamps.
- Gaming & Betting Activity Data: Records of all wagers placed, games played, betting markets accessed, stakes, outcomes, and account balance history.
- Device & Technical Data: IP address, device type, browser type and version, operating system, session duration, pages viewed, and clickstream data collected automatically when you access the platform.
- Communications Data: Records of correspondence between you and cva666 support, including emails, chat transcripts, and any documents you submit.
- Preference Data: Game preferences, language settings, notification preferences, and responsible gaming tool settings (e.g., deposit limits, session reminders).
cva666 collects personal data through the following means:
- Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or update your account settings.
- Automatically: Through cookies, web beacons, and server logs when you browse and interact with the cva666 platform. See Section 8 (Cookies) for full details.
- From third-party payment processors: Transaction confirmation data from bKash, Nagad, Rocket, Upay, Visa, and Mastercard payment networks necessary to verify and reconcile deposits and withdrawals.
- From identity verification partners: Where cva666 uses third-party KYC or fraud-prevention services to validate identity documents, those partners may return a verification result and associated data to cva666.
cva666 processes your personal data for the following purposes, each supported by a defined legal basis:
- Account creation and management — necessary for performance of the contract between you and cva666.
- Age and identity verification — necessary to comply with our legal obligations and to protect minors from accessing gambling services. Players must be 21 years of age or older.
- Processing deposits and withdrawals — necessary for performance of the contract, enabling you to fund your account and receive winnings via bKash, Nagad, Rocket, and other supported methods.
- Fraud prevention and security monitoring — legitimate interest in protecting the platform and its players from fraudulent activity, account takeover, and financial crime.
- Responsible gaming compliance — legal and ethical obligation to monitor gaming patterns and enforce deposit limits, self-exclusion, and cooling-off periods where applicable.
- Customer support — necessary for performance of the contract, enabling cva666 to respond to and resolve player enquiries and complaints.
- Marketing communications — with your consent, to send you information about promotions, bonuses, and platform updates. You may withdraw consent at any time by emailing [email protected] or adjusting your account notification preferences.
- Platform improvement and analytics — legitimate interest in understanding how players use the platform in order to improve functionality, performance, and user experience.
- Legal and regulatory compliance — to comply with applicable laws, respond to lawful requests from authorities, and enforce our Terms & Conditions.
cva666 does not sell your personal data. We may share your data with the following categories of third parties, strictly for the purposes outlined in this Policy:
- Payment service providers (bKash, Nagad, Rocket, Upay, Visa, Mastercard) — to process deposits and withdrawals on your behalf.
- Identity verification and KYC providers — to validate identity documents and confirm age eligibility as required.
- IT infrastructure and hosting providers — who provide the servers, databases, and cloud services on which the cva666 platform operates. These providers process data only on our instruction and are bound by strict data processing agreements.
- Game software providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) — who may receive session tokens or anonymised player identifiers in order to deliver their games. These providers are not given access to your full personal profile.
- Fraud prevention and security services — who help cva666 detect and prevent fraudulent transactions, account takeovers, and bonus abuse.
- Law enforcement and regulatory authorities — where cva666 is required by law, court order, or regulatory direction to disclose player data.
All third parties with whom cva666 shares personal data are required to maintain appropriate technical and organisational security measures and are prohibited from using your data for any purpose beyond the specific service they provide to us.
cva666 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to any overriding legal or regulatory obligations that require longer retention periods.
- Account and identity data: Retained for the duration of your account and for a minimum of 5 years following account closure, in order to comply with anti-money laundering and record-keeping obligations.
- Financial transaction data: Retained for a minimum of 5 years from the date of each transaction.
- Gaming activity data: Retained for the duration of your account and for 2 years following account closure.
- Communications data: Retained for up to 3 years from the date of the last communication, or longer where a dispute or legal claim is pending.
- Device and technical data (logs): Retained for up to 12 months in rolling logs.
- Marketing consent records: Retained until you withdraw consent, plus 1 year thereafter as evidence of the consent lifecycle.
When data is no longer required, cva666 securely deletes or anonymises it so that it can no longer be linked to an identifiable individual.
cva666 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:
- SSL/TLS encryption for all data in transit between your browser or app and cva666 servers.
- Encryption at rest for sensitive data stored in our databases, including identity documents and financial records.
- Role-based access controls limiting staff access to personal data on a strict need-to-know basis.
- Regular security audits and vulnerability assessments of the platform infrastructure.
- Two-factor authentication options available to players for account login security.
- Monitoring systems that detect and alert on suspicious access patterns in real time.
While cva666 takes all reasonable steps to protect your data, no online system is completely immune to security risk. You are responsible for keeping your account credentials confidential and for notifying us immediately at [email protected] if you suspect any unauthorised access to your account.
cva666 uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyse usage patterns. The categories of cookies used are:
- Strictly necessary cookies: Required for core platform functionality including session management, login state, and security. These cannot be disabled without disrupting platform use.
- Functional cookies: Used to remember your preferences such as language settings, notification choices, and responsible gaming configurations.
- Analytical cookies: Used to collect anonymised data about how players navigate the platform, which pages are visited, and where errors occur. This data helps cva666 improve the user experience.
- Security cookies: Used to detect and prevent fraudulent sessions, account takeovers, and automated bot activity.
cva666 does not use third-party advertising cookies or retargeting pixels. You may manage your cookie preferences through your browser settings, though disabling strictly necessary cookies will affect platform functionality.
As a player on cva666, you hold the following rights with respect to your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request":
You have the right to request a copy of the personal data cva666 holds about you and to receive information about how it is processed.
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay.
In certain circumstances, you may request that cva666 delete your personal data. This right is subject to any overriding legal retention obligations we are required to fulfil.
You may ask cva666 to restrict the processing of your data in specific situations — for example, while a dispute about data accuracy is being resolved.
Where processing is based on your consent or on contractual necessity, you may request your personal data in a structured, machine-readable format for transfer to another service.
You have the right to object to the processing of your personal data where cva666 relies on legitimate interest as the legal basis. You may also withdraw marketing consent at any time.
The cva666 platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that a registered account belongs to a person under 21, that account will be immediately suspended, all balances will be voided, and all associated personal data will be deleted in accordance with our retention policy. If you believe a minor has registered on cva666, please notify us immediately at [email protected].
Some of the third-party service providers used by cva666 — including game software providers such as Pragmatic Play, Evolution Gaming, and Spribe — may be located outside Bangladesh. Where personal data is transferred internationally, cva666 ensures that appropriate safeguards are in place, including contractual data processing agreements that require the recipient to maintain data protection standards consistent with this Policy. cva666 does not transfer personal data to any country without first assessing and mitigating the associated risks.
cva666 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will notify registered players by email or via a prominent notice on the platform prior to the change taking effect. The "Last updated" date at the top of this Policy will always reflect the most recent revision. Your continued use of the cva666 platform after any update constitutes your acceptance of the revised Policy. We encourage you to review this page periodically.
If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by cva666, please contact our data team using the details below. We will acknowledge your request within 5 business days and provide a full response within 30 calendar days.
- Email: [email protected] (plain text — not a clickable link)
- Subject line to use: "Privacy Enquiry" or "Data Rights Request"
- Response time: Within 30 calendar days of receipt
- Operating hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)
Questions About Your Privacy?
Our support team is available around the clock to address any data or privacy concerns. You can also explore our FAQ for quick answers, or head back to the homepage to start playing.
Browse the FAQ Read Terms & Conditions