cv6y Privacy Policy — How We Handle Your Personal Data
At cv6y, protecting the personal information of our players is a fundamental part of how we operate. This Privacy Policy explains what data we collect, why we collect it, how it is stored and used, and the rights you hold as a Bangladesh-based player on our platform.
Our Core Privacy Commitments
SSL Encryption
All data transmitted between your browser and the cv6y platform is protected by industry-standard SSL/TLS encryption. Your personal details and financial information travel over a secure, encrypted channel at all times.
No Sale of Personal Data
cv6y does not sell, rent, or trade your personal information to any third party for their own marketing purposes. Data shared with service providers is strictly limited to what those providers need to deliver their service to you on behalf of cv6y.
KYC Data Protection
Identity documents submitted for KYC verification — including National ID cards, passports, and proof of address — are stored in encrypted form and accessed only by authorised compliance personnel. They are never shared beyond what is required for regulatory verification.
Purpose Limitation
Every piece of data cv6y collects is collected for a specific, clearly stated purpose. We do not repurpose personal data beyond the original intent of collection without notifying you and, where required, obtaining your consent.
Transparent Cookie Use
cv6y uses cookies to deliver a functional, personalised experience. Our Cookie Policy (within this document) details every category of cookie we use, why we use it, and how you can manage your preferences.
Defined Retention Periods
cv6y does not hold your personal data indefinitely. We apply defined retention schedules to every data category and securely delete or anonymise data once it is no longer needed for the purpose for which it was collected.
Data We Collect
cv6y collects personal data from players through several channels: directly from you during registration and account management; automatically through your use of the platform; and in limited cases from third-party verification services engaged by cv6y for KYC and fraud prevention purposes. We collect only the minimum data necessary to deliver our services safely and in compliance with our operational obligations.
| Data Category | Examples | Collection Method |
|---|---|---|
| Identity Data | Full legal name, date of birth, National ID (NID) number, passport number | Provided by player at registration or during KYC verification |
| Contact Data | Email address, mobile phone number, residential address (city, district) | Provided by player at registration or in account settings |
| Financial Data | bKash account number, Nagad number, Rocket number, bank account details, transaction history, deposit/withdrawal amounts in Bangladeshi Taka | Provided by player during deposit/withdrawal; generated automatically by platform transactions |
| Technical Data | IP address, device type, browser type and version, operating system, session timestamps, login history | Collected automatically when you access the cv6y platform |
| Usage Data | Pages visited, games played, bet amounts, bet outcomes, bonus activity, search queries within the platform | Collected automatically through platform analytics |
| Communications Data | Support ticket content, live chat transcripts, email correspondence with cv6y | Generated when you contact cv6y support at [email protected] |
| Verification Documents | Scanned NID card, passport bio page, utility bill for address verification, bKash account screenshot | Submitted by player during KYC verification process |
Sensitive Data Note: cv6y does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is inherently present in a government-issued identity document submitted for age and identity verification. Such documents are used only for the stated KYC purpose and stored with enhanced access controls.
Players under the age of 18 are not permitted to use cv6y. If cv6y discovers that personal data has been collected from a minor, the account will be immediately closed, all data relating to that individual will be deleted, and any funds held will be returned to the payment source used for the original deposit, subject to verification of the payment method owner.
How We Use Your Data
cv6y processes personal data only when there is a valid legal basis for doing so. The legal bases we rely on are: performance of a contract (i.e., delivering the betting and casino services you have registered for), compliance with legal obligations (KYC, anti-money laundering), legitimate interests (fraud prevention, platform security), and consent (marketing communications, where applicable).
- Account creation and management: We use your identity and contact data to create and maintain your cv6y player account, verify your age (18+ requirement), communicate account-related notifications, and process your login sessions.
- Processing deposits and withdrawals: Your financial data is used to facilitate Bangladeshi Taka transactions via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard. We retain transaction records for audit and dispute resolution purposes.
- KYC and identity verification: Identity and document data is processed to verify that you are who you say you are, that you are at least 18 years old, and that your payment methods are registered in your own name. This is a legal obligation we are required to fulfil as an operator.
- Fraud prevention and security: Technical data — including IP addresses, device fingerprints, and login patterns — is analysed by our fraud detection systems to identify suspicious activity such as duplicate accounts, account takeovers, and unusual betting patterns.
- Responsible gaming: Usage data is monitored to identify players who may be showing signs of problematic gambling behaviour. Where such signs are identified, cv6y may reach out to the player with responsible gaming information or apply account-level safeguards.
- Customer support: Communications data is used to respond to your support queries, resolve disputes, and improve our service quality.
- Platform improvement and analytics: Aggregated and anonymised usage data is used to understand how players interact with the cv6y platform and to improve game offerings, interface design, and promotional relevance.
- Marketing communications: Where you have consented, we may use your email address or mobile number to send you promotional offers, seasonal bonus notifications (for example, Eid or Pohela Boishakh promotions), and BPL / IPL cricket betting alerts. You may withdraw this consent at any time by contacting [email protected].
No Automated Decision-Making: cv6y does not make solely automated decisions that produce legal or similarly significant effects on individual players without human review. Where automated systems flag an account for investigation, a trained compliance team member conducts a manual review before any material action (such as account suspension) is taken.
Data Sharing & Third Parties
cv6y does not sell your personal data. We share personal data with third parties only in the limited circumstances described below, and only to the extent necessary for each stated purpose. All third-party service providers engaged by cv6y are subject to data processing agreements that require them to protect your information and use it only for the specified purpose.
- Payment processors: To process deposits and withdrawals, we share the minimum necessary financial data with payment partners including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard. These providers operate under their own privacy policies and are bound by their respective financial regulatory obligations.
- KYC and identity verification providers: We may use third-party identity verification platforms to cross-check documents you submit during the KYC process. These providers process your identity documents solely for verification purposes and are contractually prohibited from retaining or repurposing your data.
- Game providers: When you play a game powered by a third-party provider (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi), limited technical and gameplay data is shared with that provider to facilitate the game session. These providers do not receive your financial or identity data.
- Fraud and security services: We use specialist fraud detection platforms that process technical data (IP addresses, device data, session patterns) to identify and prevent fraudulent activity on the cv6y platform.
- Legal and regulatory authorities: cv6y may disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory bodies where we are legally compelled to do so — for example, in connection with an anti-money laundering investigation or court order. We will notify the affected player of such disclosure where we are legally permitted to do so.
- Business transfers: In the event of a merger, acquisition, or sale of all or part of cv6y's business operations, player personal data may be transferred to the acquiring entity as part of the transaction. Players will be notified of any such transfer and the new entity's privacy policy will be provided.
International Data Transfers: cv6y operates on an offshore basis. Some of the third-party service providers listed above may be located outside Bangladesh and may process your data in jurisdictions with different data protection standards. Where data is transferred internationally, cv6y applies contractual safeguards to ensure your data receives a level of protection consistent with this Privacy Policy.
Cookies & Tracking
cv6y uses cookies and similar tracking technologies (including local storage, session storage, and pixel tags) to operate the platform, remember your preferences, understand how you use our services, and deliver a personalised experience. By continuing to use the cv6y platform, you consent to the use of cookies in accordance with this section.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Essential for platform operation — login session management, security tokens, bet slip state, and payment flow continuity. Cannot be disabled without breaking core platform functionality. | Session / up to 24 hours |
| Functional | Remembers your language preference (English), display settings, and recently viewed games to personalise your platform experience. | Up to 90 days |
| Analytics | Collects anonymised data about pages visited, navigation paths, and feature usage to help cv6y understand player behaviour and improve the platform. No personally identifiable information is included in analytics data. | Up to 12 months |
| Fraud Prevention | Device fingerprinting and session integrity tokens used to detect and prevent unauthorised access, duplicate account creation, and automated bot activity. | Up to 30 days |
| Marketing | Used only where consent has been given. Tracks which promotional content you interact with to deliver more relevant bonus offers and event-based promotions (e.g., BPL season offers). May be disabled by contacting [email protected]. | Up to 180 days |
Most web browsers allow you to control cookies through the browser settings. You can configure your browser to reject cookies, clear existing cookies, or alert you before a cookie is stored. Note that disabling strictly necessary cookies will prevent you from logging in and using core cv6y platform features. Analytics and marketing cookies can be disabled without affecting your ability to bet or play games.
cv6y does not use cookies to collect sensitive personal data, to track your activity across unrelated third-party websites, or to build advertising profiles for sale to external advertisers.
Data Security
cv6y implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. While no system can guarantee absolute security, cv6y's security posture reflects industry best practice for online betting platforms operating in the Bangladesh market and beyond.
- SSL/TLS encryption: All data in transit between your browser or mobile device and the cv6y servers is encrypted using TLS 1.2 or higher. This protects your login credentials, payment information, and personal data from interception during transmission.
- Encryption at rest: Sensitive data stored in cv6y's databases — including identity documents, financial records, and KYC files — is encrypted at rest using AES-256 encryption.
- Access controls: Access to personal data within cv6y's internal systems is restricted on a need-to-know basis. Staff members who do not have a legitimate operational reason to access your data cannot view it. Access logs are maintained and reviewed regularly.
- Two-factor authentication (2FA): cv6y strongly recommends — and may in some circumstances require — players to enable 2FA on their accounts to add an additional layer of protection beyond the password.
- Penetration testing and vulnerability management: cv6y's platform undergoes periodic security assessments to identify and remediate vulnerabilities before they can be exploited.
- Incident response: In the event of a data breach that poses a risk to the rights and freedoms of players, cv6y will notify affected players via their registered email address as soon as reasonably practicable after the breach is confirmed, providing details of what data was affected, the likely impact, and the steps taken to mitigate harm.
Your Role in Security: cv6y's security measures protect data on our end, but account security also depends on you. Use a strong, unique password for your cv6y account. Never share your login credentials with anyone. If you suspect your account has been accessed by an unauthorised person, contact [email protected] immediately so we can take protective action.
Data Retention
cv6y retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, to comply with legal and regulatory obligations, and to resolve any disputes that may arise. Once a retention period expires and there is no ongoing legal basis for retention, personal data is securely deleted or anonymised.
| Data Type | Retention Period | Reason |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years after closure | Anti-money laundering obligations; dispute resolution; re-registration prevention for excluded players |
| Financial Transaction Records | 7 years from transaction date | Financial audit requirements; chargebacks; AML reporting obligations |
| KYC Verification Documents | Duration of account + 5 years after closure | Regulatory compliance; re-verification prevention |
| Betting & Gaming History | Duration of account + 3 years after closure | Dispute resolution; responsible gaming monitoring; fraud investigation |
| Support Communications | 3 years from last interaction | Quality assurance; dispute evidence; training |
| Marketing Consent Records | Until consent is withdrawn + 1 year | Proof of consent basis for marketing communications |
| Analytics Data (anonymised) | Up to 24 months in identifiable form; indefinitely in anonymised aggregate form | Platform improvement; no personal data retained beyond 24 months |
If you close your cv6y account voluntarily, your active profile will be deactivated immediately. However, the underlying personal data will be retained for the periods set out in the table above to meet our legal obligations. Data that is no longer required is either permanently deleted from our systems or irreversibly anonymised so that it can no longer be linked to you as an individual.
Your Privacy Rights
As a cv6y player, you hold a set of rights in relation to your personal data. These rights are outlined below. To exercise any of these rights, contact our support team at [email protected] with the subject line "Privacy Rights Request" and include your registered account username and a description of the right you wish to exercise. cv6y will respond within 30 days of receiving a valid request.
You may request a copy of the personal data cv6y holds about you, along with information about how it is processed and the legal basis for processing.
If any personal data cv6y holds about you is inaccurate or incomplete, you may request that we correct or update it. For KYC-verified data, updated supporting documents may be required.
You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to cv6y's legal obligations to retain certain data (see Data Retention section).
You may request that cv6y restricts processing of your personal data — for example, while the accuracy of data is being contested or while a complaint about its use is pending investigation.
You may request that cv6y provides your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider of your choice.
You may object to cv6y processing your personal data for direct marketing purposes at any time. Where processing is based on legitimate interests, you may also object if you believe your individual rights and freedoms outweigh those interests.
Identity Verification for Rights Requests: To protect your privacy, cv6y may ask you to verify your identity before processing a rights request. This is to prevent unauthorised individuals from obtaining your personal data or deleting information that belongs to you. The verification step typically involves confirming your registered email address and answering a security question linked to your account.
Policy Updates & Contact
cv6y reserves the right to update this Privacy Policy at any time. When material changes are made — for example, changes to the types of data we collect, how we use it, or who we share it with — we will notify active players via the registered email address on file. The updated Privacy Policy will take effect on the date published on this page.
Minor or administrative updates (such as correcting a typographical error or clarifying existing language without changing its substance) may be made without notification. The "Last Updated" date at the top of this section will always reflect the date of the most recent revision, regardless of whether a notification was sent.
It is your responsibility to periodically review this Privacy Policy. By continuing to use cv6y after an updated Privacy Policy has been published, you accept the revised terms. If you do not agree with an update, you must stop using the platform and request account closure by contacting [email protected].
Contact Us About Privacy: For any questions, concerns, or requests relating to this Privacy Policy or the personal data cv6y holds about you, please contact our support team at [email protected] with the subject line "Privacy Enquiry". We aim to acknowledge all privacy-related correspondence within 2 business days and to provide a substantive response within 30 days of receiving a valid, verifiable request.
cv6y operates as an offshore platform accessible to players in Bangladesh. We are committed to handling your personal data responsibly and transparently. This Privacy Policy reflects that commitment and will be updated over time to remain aligned with evolving best practices and the expectations of our player community across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and beyond.
Your Data Is Safe at cv6y
We take privacy seriously so you can focus on what matters — enjoying cricket betting, live casino, and slots on Bangladesh's trusted platform. Browse our games, check the FAQ, or log in to your account. 18+ only.