cvc6 Privacy Policy

1.1 Data Controller. cvc6 is the data controller responsible for the personal information collected through the cvc6 platform at cvc6.io. As data controller, cvc6 determines the purposes and means by which your personal data is processed. All data processing activities described in this Privacy Policy are carried out by or on behalf of cvc6.

1.2 Platform Overview. cvc6 is an online casino and sports betting platform designed specifically for the Bangladesh market. The platform offers live casino games, RNG slots, crash games, fishing games, and a sportsbook covering cricket (BPL, IPL, T20 World Cup, Bangladesh Tigers), football, kabaddi, and other sports. All player accounts are denominated in Bangladeshi Taka (BDT / ৳).

1.3 Contact Details. If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data cvc6 holds about you, please contact our support team at: [email protected]. Our support team operates 24 hours a day, seven days a week, and all privacy-related communications are handled in English.

2.1 Categories of Personal Data. cvc6 collects the following categories of personal data from Players and, where applicable, from third-party sources:

2.2 Sensitive Data. cvc6 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data beyond what is strictly necessary for responsible gaming compliance (for example, recording a self-exclusion request or a deposit limit change initiated by a Player).

2.3 Voluntary Submission. Some data is provided voluntarily by Players — for example, when contacting support or submitting a responsible gaming request. Failure to provide certain mandatory data categories (such as identity and contact data) will prevent cvc6 from opening or maintaining a Player account.

cvc6 collects personal data through the following channels:

• Direct interactions: Data you provide when registering a cvc6 account, completing identity verification, making deposits or withdrawals, contacting our support team, or participating in promotions.
• Automated technologies: Data collected automatically when you access the cvc6 platform, including cookies, server logs, and session tracking technologies that record your IP address, device identifiers, and browsing behaviour within cvc6.
• Payment providers: Transaction confirmation data received from Bangladeshi payment providers including bKash, Nagad, Rocket, Upay, DBBL, City Bank, and BRAC Bank when you initiate a deposit or withdrawal.
• Identity verification partners: Where cvc6 uses third-party KYC services to verify the identity and age of a Player, those partners may supply verification status and document authenticity data to cvc6.
• Fraud prevention tools: Risk scoring and fraud detection services that process technical data to identify suspicious account activity or payment anomalies.
• Publicly available sources: In limited circumstances, cvc6 may verify identity or contact information against publicly available databases as part of its fraud prevention or compliance obligations.

4.1 Account Management. cvc6 uses identity and contact data to create, maintain, verify, and administer Player accounts. This includes processing cvc6 login credentials, communicating account status changes, and delivering account-related notifications to Players in Bangladesh.

4.2 Payment Processing. Financial data is used to process deposits and withdrawals via the supported Bangladeshi payment channels, to verify that payment accounts are registered in the Player's own name, and to maintain accurate financial records of all transactions denominated in BDT.

4.3 Identity Verification and KYC. cvc6 is required to verify the identity and age of all Players as part of its commitment to preventing underage gambling (21+ policy) and ensuring the integrity of its platform. Identity data and supporting documents are processed for this purpose.

4.4 Fraud Prevention and Security. Technical and usage data are processed to detect, investigate, and prevent fraudulent activity, collusion, multi-accounting, money laundering, and unauthorised access to Player accounts. This is a legitimate and necessary processing activity that protects both cvc6 and its Players.

4.5 Responsible Gaming. Usage data and Player-initiated requests are processed to administer responsible gaming tools including deposit limits, loss limits, session reminders, cooling-off periods, and self-exclusion. cvc6 also monitors usage patterns to proactively identify Players who may be exhibiting signs of problem gambling and to offer appropriate support.

4.6 Marketing and Promotions. Where a Player has opted in to receiving marketing communications, cvc6 uses contact and marketing data to send promotional offers, bonus notifications, and updates about new games and features. Players may opt out of marketing communications at any time by contacting [email protected].

4.7 Customer Support. Communications data is used to handle, track, and resolve Player support queries, complaints, and disputes. Support records are retained to maintain service quality and provide continuity of support.

4.8 Platform Improvement. Aggregated and anonymised usage data is analysed to improve the performance, design, and content of the cvc6 platform, including game selection, interface usability, and the relevance of promotional content for Bangladeshi Players.

cvc6 processes personal data on the following legal bases:

• Contractual necessity: Processing is necessary to perform the contract between cvc6 and the Player — specifically, to operate the Player's account, process payments, and deliver gaming services.
• Legitimate interests: Processing is necessary for the legitimate interests of cvc6 in operating a secure, fair, and commercially viable platform — including fraud prevention, platform security, and business analytics — where those interests are not overridden by the Player's fundamental rights.
• Legal obligation: Processing is necessary to comply with applicable legal obligations, including age verification, anti-money laundering (AML) requirements, and responsible gaming mandates.
• Consent: For optional data processing activities such as marketing communications, cvc6 relies on the Player's freely given, specific, and informed consent. Consent may be withdrawn at any time without affecting the Player's ability to use the cvc6 platform.

6.1 Service Providers. cvc6 shares personal data with carefully selected third-party service providers who assist in operating the cvc6 platform. These include payment processing partners (bKash, Nagad, Rocket, Upay, DBBL), identity verification providers, fraud detection services, cloud hosting providers, and customer support software vendors. All service providers are contractually required to process data only on cvc6's instructions and to maintain appropriate security measures.

6.2 Game Providers. Game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive limited technical data (such as session tokens and game round identifiers) that is necessary for the delivery of their games within the cvc6 platform. These providers do not receive full Player identity profiles.

6.3 Legal Compliance. cvc6 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, court order, or legal process. cvc6 will, where permitted by law, notify the affected Player of any such disclosure request.

6.4 Business Transfers. In the event of a merger, acquisition, or sale of all or part of the cvc6 business, Player personal data may be transferred to the acquiring entity as part of that transaction. Players will be notified of any material change in the data controller's identity resulting from such a transaction.

6.5 No Sale of Data. cvc6 does not sell, rent, or trade Player personal data to third parties for their own independent marketing or commercial purposes. Data sharing is limited to the purposes described in this Privacy Policy.

7.1 Cross-Border Processing. As an online platform serving Players in Bangladesh, cvc6 may process or store personal data on servers or infrastructure located outside Bangladesh. Where personal data is transferred internationally, cvc6 takes reasonable steps to ensure that appropriate data protection safeguards are in place, including contractual data protection clauses with service providers.

7.2 Bangladeshi Players. The cvc6 platform is operated specifically for Players located in Bangladesh. All customer-facing communications, support, and account management are conducted in English, and payment processing is denominated in BDT via Bangladeshi payment channels including bKash and Nagad.

8.1 Retention Periods. cvc6 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, as described in this Privacy Policy, and for as long as required or permitted by applicable law.

• Active account data: Retained for the duration of the Player's registered account with cvc6, plus a period of up to 5 years following account closure to satisfy legal and compliance obligations.
• Financial transaction records: Retained for a minimum of 5 years from the date of each transaction to comply with financial record-keeping requirements.
• Identity verification documents: Retained for the duration of the account plus 5 years following account closure.
• Support communications: Retained for 3 years from the date of the last interaction or the resolution of a dispute, whichever is later.
• Marketing consent records: Retained for the duration of the Player's consent and for 1 year following withdrawal of consent.

8.2 Secure Deletion. Upon expiry of the applicable retention period, cvc6 will securely delete or anonymise personal data in accordance with its internal data disposal procedures so that it can no longer be associated with an identifiable individual.

As a Player whose personal data is processed by cvc6, you hold the following rights with respect to your personal information. To exercise any of these rights, please contact cvc6 support at [email protected]. cvc6 will respond to all valid requests within a reasonable timeframe, typically within 30 days.

• Right of access: You have the right to request a copy of the personal data that cvc6 holds about you, together with information about how that data is processed.
• Right to rectification: You have the right to request correction of any personal data held by cvc6 that is inaccurate or incomplete. Where changes affect your account registration details, supporting documentation may be required.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw your consent and there is no other lawful basis for processing. Note that cvc6 may be required to retain certain data to comply with legal obligations even following an erasure request.
• Right to restrict processing: You may request that cvc6 restrict the processing of your personal data in certain circumstances, for example while a data accuracy dispute is under investigation.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you may request that cvc6 provide your personal data to you in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes. You may also object to processing based on cvc6's legitimate interests where you believe your fundamental rights override those interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

10.1 Use of Cookies. The cvc6 platform uses cookies and similar tracking technologies to operate and improve the platform, manage Player sessions, and analyse usage patterns. Cookies are small text files stored on your device when you access cvc6. They do not contain executable code and cannot access other data stored on your device.

10.2 Types of Cookies Used. cvc6 uses the following categories of cookies:

• Strictly necessary cookies: Essential for the cvc6 platform to function. These include session management cookies that maintain your cvc6 login state, security tokens, and load-balancing cookies. These cannot be disabled without impairing platform functionality.
• Functional cookies: Used to remember your preferences within the cvc6 platform, such as language settings (English) and game display preferences.
• Analytical cookies: Used to collect aggregated information about how Players use the cvc6 platform, including which games are most popular, how long sessions last, and which pages are visited. This data is used in anonymised form to improve the platform.
• Marketing cookies: Used only where a Player has consented to receive targeted promotional content. These cookies help cvc6 deliver relevant bonus offers and game recommendations based on usage history.

10.3 Managing Cookies. Players may manage or disable non-essential cookies through their browser settings. Disabling strictly necessary cookies will affect the functionality of the cvc6 platform, including the ability to maintain a cvc6 login session. Instructions for managing cookies are available in the help documentation of all major browsers.

11.1 Age Restriction. The cvc6 platform is strictly restricted to individuals aged 21 years or older. cvc6 does not knowingly collect personal data from individuals under the age of 21. If cvc6 discovers or has reasonable grounds to believe that a registered Player is under the age of 21, the account will be suspended immediately, identity verification will be requested, and any funds associated with an underage account will be forfeited in accordance with cvc6's Terms & Conditions.

11.2 Parental Awareness. If you are a parent or guardian and believe that an individual under the age of 21 in your care has registered a cvc6 account or provided personal data to cvc6, please contact [email protected] immediately. cvc6 will investigate and take appropriate action, including account closure and data deletion where applicable.

12.1 Technical Safeguards. cvc6 employs industry-standard technical security measures to protect Player personal data against unauthorised access, disclosure, alteration, or destruction. These measures include SSL/TLS encryption for all data transmitted between a Player's device and the cvc6 platform, encrypted storage of sensitive account data, firewalled server infrastructure, and intrusion detection systems.

12.2 Organisational Safeguards. Access to Player personal data within the cvc6 organisation is restricted on a strict need-to-know basis. Staff with access to personal data are trained in data protection obligations and are bound by confidentiality obligations. Access logs are maintained and reviewed regularly.

12.3 Data Breach Response. In the event of a personal data breach that poses a risk to the rights and freedoms of Players, cvc6 will take immediate steps to contain the breach, assess its scope, and notify affected Players without undue delay. cvc6 will provide clear guidance on protective steps Players should take following any such notification.

12.4 Player Responsibility. Players are responsible for maintaining the security of their own cvc6 login credentials. cvc6 recommends using a strong, unique password for your cvc6 account and not sharing your login details with any third party. If you suspect your account has been compromised, contact [email protected] immediately.

13.1 Right to Amend. cvc6 reserves the right to update or amend this Privacy Policy at any time to reflect changes in data processing practices, legal requirements, or platform operations. Where changes are material, cvc6 will provide advance notice to Players via email or a prominent notice on the cvc6 platform prior to the changes taking effect.

13.2 Effective Date. The "Last Updated" date at the top of this Privacy Policy indicates when the most recent revision took effect. Players are encouraged to review this Privacy Policy periodically to remain informed of how cvc6 protects their personal data.

13.3 Continued Use. A Player's continued use of the cvc6 platform following the posting of a revised Privacy Policy constitutes acceptance of the updated terms. Players who do not accept an amended Privacy Policy should discontinue use of the cvc6 platform and may request account closure by contacting [email protected].

14.1 Privacy Enquiries. For any questions, requests, or concerns relating to this Privacy Policy or the personal data cvc6 processes, please contact the cvc6 support team:

• Email: [email protected]
• Support Hours: 24 hours a day, 7 days a week, including Eid, Victory Day (December 16), Independence Day (March 26), and Pohela Boishakh
• Response Time: Privacy-related requests will receive an initial response within 5 business days and a full resolution within 30 days where possible
• Language: All privacy communications are handled in English

14.2 Complaints. If you are not satisfied with how cvc6 has handled a privacy concern or data request, you have the right to submit a complaint. cvc6 takes all privacy complaints seriously and will conduct a thorough internal review. Details of the outcome of any complaint review will be communicated to the complainant in writing via email.

14.3 Relationship to Terms & Conditions. This Privacy Policy forms part of the overall legal framework governing your use of the cvc6 platform and should be read in conjunction with the cvc6 Terms & Conditions and the cvc6 Responsible Gaming Policy.