cv6yy Privacy
Policy

1. Who We Are

This Privacy Policy is issued by cv6yy ("cv6yy", "we", "us", "our"), the operator of the online betting and casino platform accessible at cv6yy.io. cv6yy is Bangladesh's premier destination for sports betting, live casino games, slots, and other online gaming entertainment, serving registered players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, and beyond.

cv6yy acts as the data controller in respect of all personal information collected through the cv6yy.io platform. Any questions relating to this Privacy Policy or to the processing of your personal data should be directed to our support team at [email protected].

2. Personal Data We Collect

cv6yy collects the following categories of personal data from users of the platform:

2.1 Registration and Identity Data

• Full legal name
• Date of birth (used to verify the 21+ age eligibility requirement)
• Mobile phone number and email address
• Username and encrypted password credentials
• Residential address (including city and district within Bangladesh)
• Government-issued identification document details (National ID, passport, or driving licence), collected during KYC verification

2.2 Financial and Transaction Data

• Deposit and withdrawal amounts and dates
• Payment method identifiers (e.g., bKash mobile number, Nagad account reference, bank account details) — note that full payment card numbers are never stored on cv6yy servers
• Transaction history and account balance records
• Details of any bonus credits, free bets, or promotional incentives applied to the account

2.3 Gaming Activity Data

• Betting and wagering history across all product categories (sports, casino, slots, crash games)
• Game session timestamps, duration, and frequency data
• Responsible gaming settings applied to the account (deposit limits, session limits, self-exclusion status)

2.4 Technical and Device Data

• IP address and approximate geolocation at the time of access
• Device type, operating system, and browser version
• Cookie identifiers and session tokens
• Platform access logs including login timestamps and duration

2.5 Communications Data

• Content of support enquiries, live chat transcripts, and email correspondence submitted to cv6yy
• Survey responses and feedback submitted voluntarily by players
• Records of marketing communication preferences and opt-in/opt-out history

The table below summarises the primary data categories and the principal reason each category is collected:

Data Category	Primary Purpose
Registration & Identity	Account creation, age verification, KYC compliance
Financial & Transaction	Payment processing, fraud prevention, AML compliance
Gaming Activity	Service delivery, responsible gaming monitoring, dispute resolution
Technical & Device	Platform security, fraud detection, performance optimisation
Communications	Customer support, service improvement, marketing (where consented)

3. How We Collect Your Data

cv6yy collects personal data through the following means:

• Directly from you — when you register an account, complete identity verification, make a deposit or withdrawal, contact customer support, or respond to a survey.
• Automatically through the platform — when you access cv6yy.io, technical data including your IP address, device identifiers, and browsing behaviour within the platform is collected automatically via cookies and server logs.
• From payment service providers — when you initiate a deposit or withdrawal via bKash, Nagad, Rocket, Upay, or a partner bank, transaction confirmation data is shared with cv6yy by the relevant payment processor to reconcile your account.
• From identity verification partners — during KYC processes, cv6yy may engage trusted third-party identity verification services to cross-reference documentation supplied by you.
• From fraud prevention and analytics services — aggregated or anonymised data may be received from fraud prevention partners to protect the platform and its users.

4. How We Use Your Personal Data

cv6yy uses the personal data it collects for the following purposes:

• To create, verify, and manage your cv6yy account, including enforcing the 21+ age eligibility requirement.
• To process deposits and withdrawals via your chosen payment method (bKash, Nagad, Rocket, Upay, Visa, Mastercard, or partner Bangladeshi bank).
• To deliver the gaming and betting services available on the cv6yy platform, including settlement of wagers and distribution of winnings.
• To conduct KYC verification and meet anti-money laundering obligations applicable to our operations.
• To detect, investigate, and prevent fraud, collusion, bonus abuse, and other prohibited conduct as defined in the cv6yy Terms & Conditions.
• To provide responsive customer support and to resolve account-related disputes or enquiries.
• To monitor gaming patterns for responsible gaming purposes, to enforce player-requested limits, and to identify players who may benefit from intervention resources.
• To send transactional communications including account confirmations, deposit receipts, withdrawal notifications, and security alerts.
• To send promotional communications, bonus offers, and platform news — only where you have provided explicit consent to receive such communications, and only to the extent permitted by applicable law.
• To improve the performance, security, and functionality of the cv6yy platform through anonymised analytics.

5. Legal Basis for Processing

cv6yy relies on the following legal bases when processing your personal data:

• Contractual necessity — processing required to perform our obligations under the agreement formed when you register and use the cv6yy platform (account management, payment processing, game delivery).
• Legal obligation — processing required to comply with applicable legal and regulatory requirements, including KYC, anti-money laundering, and responsible gaming obligations.
• Legitimate interests — processing for fraud prevention, platform security, internal analytics, and responsible gaming monitoring, where these interests are not overridden by your data protection rights.
• Consent — processing for direct marketing communications, where you have provided a clear and specific opt-in consent. You may withdraw this consent at any time by contacting support or updating your account notification preferences.

6. Data Sharing and Disclosure

cv6yy does not sell, rent, or trade your personal data to third parties. However, in order to operate the platform effectively and comply with legal obligations, cv6yy may share personal data with the following categories of recipients:

• Payment service providers — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard, for the purpose of processing your financial transactions.
• Identity verification and KYC partners — third-party services engaged to verify your identity documents as part of the account verification process.
• Fraud prevention and security services — specialist providers engaged to protect the platform and its users from fraudulent activity and cyber threats.
• Game content providers — Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and Hacksaw Gaming may receive session identifiers necessary to deliver their game content within the cv6yy platform. These providers do not receive your full personal profile.
• Legal and regulatory authorities — where required by applicable law, court order, or valid regulatory request, cv6yy will disclose personal data to the appropriate authorities.
• Professional advisers — legal, accounting, and auditing firms engaged by cv6yy, subject to confidentiality obligations.

All third parties with whom cv6yy shares personal data are required by contract to process that data only for the specified purpose and to maintain appropriate security standards consistent with those applied by cv6yy.

7. Cookies and Tracking Technologies

cv6yy uses cookies and similar tracking technologies to deliver a functional, secure, and personalised platform experience. The types of cookies used on cv6yy.io include:

• Essential cookies — required for the platform to function correctly, including maintaining your login session and remembering security preferences. These cannot be disabled without impacting your ability to use the platform.
• Performance and analytics cookies — used to collect anonymised information about how players navigate and interact with the cv6yy platform, enabling us to identify areas for improvement.
• Functional cookies — used to remember your account preferences such as language settings and responsible gaming limits that you have configured.
• Security cookies — used to detect fraudulent behaviour, prevent unauthorised access attempts, and protect the integrity of player accounts.

You may adjust your browser settings to restrict or block cookies. Please note that disabling essential cookies may prevent you from accessing certain features of the cv6yy platform. cv6yy does not use third-party advertising or retargeting cookies.

8. Data Security

cv6yy implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and cv6yy.io.
• Encrypted storage of passwords using industry-standard hashing algorithms; plaintext passwords are never stored.
• Role-based internal access controls, ensuring that only authorised personnel can access personal data, and only to the extent required for their specific operational function.
• Regular third-party security audits and penetration testing of the cv6yy platform infrastructure.
• Real-time intrusion detection and automated alerting systems monitoring for anomalous activity.
• Documented data breach response procedures, including notification protocols in the event of a security incident affecting player data.

While cv6yy applies rigorous security practices, no digital platform can guarantee absolute immunity from security incidents. If you suspect that your cv6yy account has been compromised, contact support immediately at [email protected].

9. Data Retention

cv6yy retains personal data for as long as is necessary to fulfil the purpose for which it was collected, subject to any applicable legal retention obligations. The following general retention principles apply:

• Active account data — retained for the full duration of your registration with cv6yy and for a period thereafter as required by applicable law or for the resolution of outstanding disputes.
• Transaction and financial records — retained for a minimum of seven (7) years following the date of the transaction in accordance with standard financial record-keeping requirements.
• KYC and identity documents — retained for the period required under applicable anti-money laundering legislation, typically a minimum of five (5) years following account closure.
• Support communications — retained for a period sufficient to resolve any related dispute or complaint and for internal quality assurance purposes.
• Marketing consent records — retained for as long as is necessary to demonstrate compliance with your consent choices.

At the end of the applicable retention period, personal data is either securely deleted or irreversibly anonymised so that it can no longer be associated with any identifiable individual.

10. Your Data Rights

As a cv6yy player, you hold the following rights in relation to your personal data:

• Right of access — you may request a copy of all personal data cv6yy holds about you.
• Right to rectification — you may request correction of any inaccurate or incomplete personal data.
• Right to erasure — you may request deletion of your personal data, subject to legal retention obligations that require cv6yy to retain certain records.
• Right to restriction — you may request that cv6yy restrict the processing of your personal data in certain circumstances, such as while an accuracy dispute is being resolved.
• Right to data portability — where technically feasible and legally applicable, you may request a structured copy of personal data you have provided to cv6yy.
• Right to object — you may object to processing carried out on the basis of legitimate interests, including profiling for direct marketing purposes.
• Right to withdraw consent — where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of the above rights, please contact the cv6yy data team at [email protected] with the subject line "Data Rights Request". cv6yy will respond to all valid requests within a reasonable timeframe. We may require you to verify your identity before processing your request.

11. Children and Minors

The cv6yy platform is strictly intended for adults aged 21 years and above. cv6yy does not knowingly collect, store, or process personal data relating to individuals under the age of 21. If cv6yy becomes aware that personal data belonging to an underage individual has been collected, that data will be deleted immediately and the associated account will be closed.

If you believe that a minor has registered on the cv6yy platform or that their data has been inadvertently collected, please notify us immediately at [email protected]. For guidance on protecting minors from gambling-related harm, please visit our Responsible Gaming page.

12. Third-Party Links

The cv6yy platform may contain references to third-party game content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, Hacksaw Gaming) and payment partners (bKash, Nagad, Rocket, Upay, and partner banks). While these providers are carefully selected, cv6yy is not responsible for the privacy practices of third-party systems that operate independently of the cv6yy platform. Any interactions you have directly with third-party platforms are governed by their own respective privacy policies.

13. Updates to This Privacy Policy

cv6yy reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, operational requirements, or applicable legal obligations. When material changes are made, the revised Privacy Policy will be published at cv6yy.io/privacy-policy and the "Last Updated" date at the top of this page will be amended accordingly.

Where changes are significant, cv6yy will make reasonable efforts to notify registered players via email or a platform notification prior to the changes taking effect. Your continued use of the cv6yy platform after the revised Privacy Policy is published constitutes your acknowledgement of the updated terms. If you do not accept the revised Privacy Policy, you must close your account and discontinue use of the platform.

14. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data by cv6yy, please contact our support and data team. Our team operates 24 hours a day, 7 days a week, on Bangladesh Standard Time (BST, UTC+6).

Support and data enquiries email: [email protected]

When submitting a data-related enquiry, please use the subject line "Privacy / Data Enquiry" to ensure prompt routing. For general account and platform questions, you may also consult our FAQ page or review the full cv6yy Terms & Conditions.