cv6y Privacy Policy

1 Introduction

cv6y is committed to protecting the privacy and personal data of every player who accesses the platform. This Policy has been drafted to provide full transparency about our data practices and to help you make informed decisions about the information you share with us.

This Policy applies to all personal data collected through the cv6y website, mobile-optimised browser interface, customer support channels, and any other touchpoint through which you interact with the cv6y platform. It should be read alongside the cv6y Terms & Conditions and Responsible Gaming Policy, which together form the complete agreement governing your use of the platform.

We review and update this Policy periodically to reflect changes in our data practices, applicable legal requirements, or the services we offer. The effective date at the top of this document indicates when the current version entered into force. Continued use of the cv6y platform after an updated Policy is published constitutes your acceptance of the revised terms.

2 Data Controller

For the purposes of this Privacy Policy, cv6y acts as the data controller in respect of personal data collected from players accessing the platform. As data controller, cv6y determines the purposes and means by which your personal data is processed.

All data protection enquiries, access requests, correction requests, or complaints regarding cv6y's data handling practices should be directed to our support team. Contact details are provided in Section 17 of this Policy.

3 Information We Collect

cv6y collects personal data in the following categories. We collect only information that is necessary, proportionate, and relevant to the purposes described in this Policy.

3.1 Identity and Registration Data

When you create a Player Account with cv6y, we collect the following registration information:

• Full legal name as it appears on your government-issued identification document
• Date of birth (used to verify that you meet the 21+ age requirement)
• Residential address in Bangladesh (city, district, and postal code)
• Email address (used for account communications and support)
• Mobile telephone number registered in Bangladesh
• Username and hashed password credential

3.2 Identity Verification (KYC) Data

To comply with our anti-money laundering obligations and to protect the integrity of the platform, we may collect the following identity verification documents:

• Copy of a government-issued photo ID (National ID card, passport, or driving licence)
• Proof of residential address (utility bill, bank statement, or official correspondence dated within the last three months)
• Proof of payment method ownership (screenshot or confirmation of the bKash, Nagad, Rocket, or Upay account registered in your name)
• Additional documentation as required by our compliance team in specific circumstances

3.3 Financial Transaction Data

When you make deposits or withdrawals, we collect and retain the following financial data:

• Mobile wallet number or bank account identifier associated with each transaction
• Transaction amounts in BDT, timestamps, and transaction reference numbers
• Deposit and withdrawal history across the lifetime of your Player Account
• Bonus credit and wagering activity records

3.4 Gaming and Betting Activity Data

• Game session logs including titles played, bet amounts, outcomes, and session durations
• Sports betting slip history including markets selected, stake amounts, and settlement results
• Responsible gaming tool settings (deposit limits, session alerts, cool-off periods) and any changes made to those settings

3.5 Technical and Device Data

• IP address at the time of login and during active sessions
• Device type, operating system, and browser version
• Session start and end timestamps
• Geolocation data (country and city level, derived from IP address)
• Cookie identifiers and session tokens (see Section 10 for full cookie details)

3.6 Customer Support Communications

• The content of emails, live chat transcripts, and any other communications you send to our support team
• Complaint records, including the nature of the complaint and its resolution
• Call recordings where telephone support is offered (Bangladesh Standard Time, UTC+6)

4 How We Collect Your Data

cv6y collects personal data through the following channels:

• Directly from you: When you register an account, complete the KYC process, make a financial transaction, contact our support team, or respond to a survey or promotion.
• Automatically: Through cookies, session tokens, server logs, and similar technologies that record your interactions with the cv6y platform (see Section 10).
• From payment processors: When you initiate a deposit or withdrawal via bKash, Nagad, Rocket, Upay, or a partner bank, those providers transmit transaction confirmation data to our system to reconcile your account balance.
• From identity verification providers: Where we engage a third-party KYC service to validate the documents you submit, that provider shares the outcome (pass, fail, or pending) and any flags raised during the process with cv6y.
• From game providers: Game studios including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Ezugi, and Spribe transmit game round result data and session logs to cv6y for the purpose of settling bets, calculating balances, and maintaining fair-play records.

5 Legal Basis for Processing

cv6y processes your personal data on the following legal grounds:

Processing Activity	Legal Basis
Account registration and management	Performance of a contract (your Player Account agreement with cv6y)
Processing deposits and withdrawals	Performance of a contract
Identity verification (KYC)	Legal obligation and legitimate interests (fraud prevention)
Responsible gaming monitoring	Legal obligation and legitimate interests (player welfare)
Customer support and complaint handling	Performance of a contract and legitimate interests
Fraud detection and security monitoring	Legitimate interests and legal obligation
Platform analytics and improvement	Legitimate interests
Marketing communications (where opted in)	Consent (freely given, specific, and withdrawable)
Legal record-keeping and audit trails	Legal obligation

6 How We Use Your Data

cv6y uses the personal data we collect for the following purposes:

6.1 Account Administration

To create and maintain your Player Account, authenticate your identity on each login, enforce single-account policies, apply responsible gaming settings, and communicate essential account-related information to you by email or SMS.

6.2 Payment Processing

To process deposit credits and withdrawal payments in BDT via Approved Payment Methods, to maintain accurate transaction records, to reconcile your real-money balance, and to investigate any disputed or delayed transactions on your behalf.

6.3 Regulatory Compliance and Fraud Prevention

To carry out mandatory KYC checks, to screen transactions against anti-money laundering requirements, to detect and investigate suspicious activity, multiple-account registration attempts, bonus abuse, or any other conduct that violates the cv6y Terms & Conditions or applicable law.

6.4 Customer Support

To respond to your support enquiries, resolve complaints, provide account assistance, and maintain records of interactions for quality assurance and staff training purposes.

6.5 Platform Improvement

To analyse aggregated, anonymised usage patterns across the platform, identify technical issues, optimise game performance, improve the user interface, and develop new features that better serve players across Bangladesh — from Dhaka to Chittagong, Sylhet, Khulna, and beyond.

6.6 Responsible Gaming

To monitor gaming patterns that may indicate problematic behaviour, to enforce deposit limits and cool-off periods you have set, to communicate welfare resources where appropriate, and to honour self-exclusion requests promptly and completely.

6.7 Marketing and Promotions

Where you have provided explicit consent, to send you information about cv6y bonuses, seasonal promotions (such as Eid, Pohela Boishakh, or BPL-related offers), and platform updates. You may withdraw consent at any time by contacting [email protected] or using the unsubscribe option in any marketing email.

7 Third-Party Disclosure

cv6y does not sell, rent, or trade your personal data to any third party. We may share your data with the following categories of trusted recipients only to the extent necessary for the purposes described in this Policy:

7.1 Payment Processors

bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank receive only the transaction-level data necessary to process your deposit or withdrawal request. These providers operate under their own privacy policies and are independently regulated as financial service providers in Bangladesh.

7.2 Game Providers

Game studios (including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Ezugi, and Spribe) receive a pseudonymous player identifier and session data necessary to run the game and return a result. Your full name, mobile number, and payment details are never transmitted to game providers.

7.3 Identity Verification Services

Where we engage a third-party KYC provider to assist with identity document verification, we transmit copies of the documents you submit along with your name and date of birth. These providers are contractually bound to process your data exclusively for the verification purpose and to delete it upon completion.

7.4 Legal and Regulatory Authorities

cv6y may disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required to do so by applicable law, a valid court order, or in connection with the investigation of suspected fraud, money laundering, or other criminal activity.

7.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of cv6y's business, personal data held about players may be transferred to the acquiring entity. We will notify players via email and a notice on the cv6y website if such a transfer occurs and will ensure that the receiving entity is bound by data protection obligations at least equivalent to those in this Policy.

8 International Data Transfers

The cv6y platform is operated for players based in Bangladesh. Some of the third-party service providers listed in Section 7 — particularly game providers and technology infrastructure partners — may be located outside Bangladesh and may process your data on servers in other jurisdictions.

Where personal data is transferred internationally, cv6y ensures that appropriate safeguards are in place, including:

• Contractual clauses that require receiving parties to protect your data to a standard at least equivalent to this Policy
• Transfers only to providers that operate under recognised data protection frameworks
• Pseudonymisation of data wherever full personal identifiers are not required by the receiving service

If you have questions about specific international transfer arrangements, you may contact us at [email protected] and we will provide relevant information where it is within our ability to do so.

9 Data Retention

cv6y retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any legal obligations requiring longer retention. The following retention periods apply as a general guide:

Data Category	Retention Period
Account registration data	Duration of account plus 5 years after closure
KYC documents	5 years from submission or account closure (whichever is later)
Financial transaction records	7 years from transaction date (financial record-keeping requirement)
Gaming and betting activity logs	5 years from session date
Customer support communications	3 years from last interaction
Technical / device logs	12 months from generation
Marketing consent records	Until consent is withdrawn, plus 2 years thereafter
Self-exclusion records	Permanently retained to prevent re-registration during exclusion period

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

10 Cookies & Tracking Technologies

10.1 What Are Cookies

Cookies are small text files placed on your device by the cv6y platform when you visit or log in. They allow the platform to recognise your browser across page requests within a session and, in some cases, across multiple sessions, depending on cookie type.

10.2 Types of Cookies We Use

• Strictly Necessary Cookies: These are required for the platform to function correctly. They maintain your login session, store your language and responsible gaming preferences, and protect against cross-site request forgery. They cannot be disabled without breaking core platform functionality.
• Analytical / Performance Cookies: These cookies collect anonymised data about how players navigate the platform — which pages are visited most, where users encounter errors, and how long sessions typically last. This data is used exclusively to improve the cv6y platform and is never linked to your individual identity.
• Functional Cookies: These cookies remember choices you have made — such as your preferred game category or display settings — so that they persist across sessions without you needing to re-configure them each time.

10.3 Cookies We Do Not Use

10.4 Managing Cookies

You may configure your browser to refuse all or certain types of cookies. Please note that disabling strictly necessary cookies will prevent you from logging into your cv6y account. Instructions for managing cookies in the most common browsers are available in each browser's help documentation.

11 Your Rights Over Your Personal Data

Subject to applicable law and certain limited exceptions, you hold the following rights in relation to personal data that cv6y holds about you:

• Right of Access: You may request a copy of the personal data we hold about you. We will provide this within 30 days of a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You may also update basic account details directly through your account settings.
• Right to Erasure: You may request that we delete your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations (see Section 9). Note that financial transaction records and KYC data may not be erasable within their mandatory retention windows.
• Right to Restriction: You may request that we restrict processing of your data while a correction or objection request is being considered.
• Right to Data Portability: Where processing is based on your consent or a contract with you, you may request that we provide your personal data in a structured, machine-readable format.
• Right to Object: You may object to processing of your data for direct marketing purposes at any time. You may also object to processing based on our legitimate interests, though we may be entitled to continue processing where we can demonstrate compelling grounds.
• Right to Withdraw Consent: Where processing is based on your consent (for example, marketing emails), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact [email protected] with the subject line "Data Rights Request". We may ask you to verify your identity before processing the request to protect against unauthorised access to your data.

12 Children's Privacy

The cv6y platform is strictly for adults aged 21 and above. We do not knowingly collect personal data from any individual under the age of 21. If we become aware that personal data has been provided by or on behalf of a person under 21, we will immediately close the associated account, delete the data collected, and — where applicable — report the matter to relevant authorities.

13 Security of Your Personal Data

cv6y implements a layered security architecture to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Key security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the cv6y platform is encrypted using industry-standard TLS protocols, making it unreadable to any third party intercepting network traffic.
• OTP-Based Authentication: Logins from unrecognised devices trigger a one-time password sent to your registered mobile number, preventing unauthorised access even where login credentials have been compromised.
• Role-Based Access Controls: Access to player personal data within cv6y's internal systems is restricted on a strict need-to-know basis. Support agents, compliance staff, and technical teams are granted access only to the data necessary for their specific function.
• Regular Security Audits: cv6y engages independent security professionals to conduct periodic penetration testing and vulnerability assessments of the platform infrastructure.
• Incident Response: In the event of a confirmed data breach that poses a risk to your rights, cv6y will notify affected players without undue delay and will take immediate remedial steps to contain the breach and prevent recurrence.

Despite these measures, no online platform can guarantee absolute security. You are encouraged to use a strong, unique password for your cv6y account and to report any suspicious activity to [email protected] immediately.

14 Third-Party Links

The cv6y platform does not include links to external third-party websites. All navigation within the platform remains within the cv6y.io domain. If you encounter any link on the platform that appears to lead outside cv6y.io, please report it to our support team immediately, as it may indicate a security concern.

This Policy applies exclusively to the cv6y platform. cv6y accepts no responsibility for the privacy practices of any third-party service provider operating under their own independent privacy policies, including payment processors and game providers.

15 Marketing Communications

cv6y may send you promotional communications about bonuses, new games, seasonal offers, and platform updates where you have given explicit consent to receive such communications at the time of registration or through your account settings.

Marketing communications are sent by email to the address registered on your Player Account. We may also send SMS notifications to your registered mobile number where you have specifically opted in to SMS marketing.

You may withdraw your marketing consent at any time by:

• Clicking the "Unsubscribe" link in any marketing email sent by cv6y
• Updating your communication preferences in your Player Account settings
• Contacting [email protected] with the subject line "Unsubscribe from Marketing"

Withdrawal of marketing consent does not affect your ability to receive transactional communications relating to your account (such as deposit confirmations, withdrawal notifications, KYC requests, or security alerts), which are sent on the basis of your contract with cv6y and cannot be unsubscribed from while your account remains active.

16 Changes to This Privacy Policy

cv6y reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or the services we offer. When we make material changes to this Policy, we will notify registered players by email to the address on their Player Account and will post a prominent notice on the cv6y platform for a minimum of 30 days prior to the change taking effect.

Non-material changes — such as typographical corrections, formatting updates, or clarifications that do not alter the substance of our data practices — may be made without prior notice. The "Effective Date" at the top of this Policy will always reflect the date on which the current version entered into force.

We encourage you to review this Policy periodically to remain informed about how cv6y protects your personal data. Your continued use of the cv6y platform following the publication of an updated Policy constitutes your acceptance of the revised terms.

17 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way cv6y processes your personal data, please contact our Data Protection team using the details below. All privacy communications should be directed to:

We are committed to working with you to resolve any privacy concern fairly and transparently. If you are not satisfied with our response, you retain the right to escalate your complaint to the appropriate data protection authority in your jurisdiction.