cv678 Privacy Policy

1. Information We Collect

cv678 collects personal data from players through several channels: directly during account registration and subsequent profile updates, automatically as you interact with the platform, and occasionally from third-party verification partners as part of our identity and fraud checks. We collect only the data that is necessary for the specific purposes described in this Privacy Policy, and we do not collect data speculatively or in excess of what our operations require.

The categories of personal data cv678 may collect are set out in the table below, along with the primary source of that data and the principal reason for its collection.

cv678 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health data, except where expressly required by a specific responsible gaming process (for example, if a player voluntarily discloses a gambling-related health concern when requesting self-exclusion). Such sensitive disclosures are treated with additional care and are not used for any commercial purpose.

2. How We Use Your Data

cv678 processes personal data only for clearly defined, legitimate purposes. We do not use your data in ways that are incompatible with the purpose for which it was originally collected. The table below sets out the primary purposes for which cv678 uses your personal data, together with the legal basis that justifies each processing activity.

cv678 will never sell your personal data to third-party advertisers, data brokers, or marketing networks. Where cv678 uses your data for direct marketing purposes (e.g., emailing you about a relevant cricket season promotion or a new slots release), this is done only on the basis of your prior consent, and you may withdraw that consent at any time by contacting [email protected] or adjusting your notification settings within your account profile.

3. Data Sharing & Disclosure

cv678 does not sell, rent, or trade your personal data to any third party for commercial purposes. However, in the course of operating a compliant and secure platform, cv678 may share limited personal data with certain categories of trusted third parties, as described below. All third-party data processors engaged by cv678 are contractually required to process personal data only on cv678's instructions, to apply appropriate security measures, and to comply with applicable data protection standards.

• Payment Processors: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank, cv678 shares the minimum necessary transaction data with the relevant payment service providers. These providers process payment data in accordance with their own privacy policies and applicable financial regulations.
• Identity Verification Partners: cv678 may engage third-party KYC and identity verification services to validate player-provided documents. These partners receive only the data necessary to complete the verification task and are prohibited from using that data for any independent purpose.
• Fraud Prevention Services: cv678 uses industry-standard fraud detection tools that may process IP addresses, device fingerprints, and transaction patterns to identify suspicious activity. Data shared with these services is used exclusively for fraud prevention purposes.
• Game Technology Providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session data as part of normal game operation and technical support. These providers do not receive personally identifiable information unless strictly necessary for dispute resolution.
• Legal and Regulatory Authorities: cv678 may disclose personal data to regulatory bodies, law enforcement agencies, financial intelligence units, or courts where required by applicable law or in response to a valid legal order. cv678 will only disclose the minimum data required to satisfy the legal obligation.
• Corporate Transactions: In the event of a merger, acquisition, or sale of all or part of cv678's business, player data may be transferred to the acquiring entity. Players will be notified in advance of any such transfer and of any changes to the privacy terms that result from it.

4. Cookies & Tracking Technologies

cv678 uses cookies and similar tracking technologies (including web beacons and local storage objects) to operate core platform functionality, maintain your authenticated session, remember your preferences, and gather aggregated analytics data that helps us improve the platform experience for all players. Cookies do not directly identify you by name; they identify your browser or device and are linked to your cv678 account where you are logged in.

The categories of cookies used on the cv678 platform are as follows:

You may manage your cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies; however, disabling strictly necessary or fraud detection cookies will impair your ability to use the cv678 platform, including logging in and processing payments. cv678 does not use third-party advertising cookies or cross-site tracking pixels.

5. Data Retention

cv678 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The retention periods applied by cv678 are set out below. Where a legal obligation requires a minimum retention period, cv678 will not delete data before that period expires, even at the request of the player.

• Active Account Data: Personal data associated with an active cv678 account is retained for the duration of the account's existence plus a minimum of five (5) years following permanent account closure, in compliance with anti-money laundering record-keeping requirements.
• Transaction Records: Records of all financial transactions, including deposits, withdrawals, and bonus credits, are retained for a minimum of seven (7) years from the date of each transaction, in accordance with financial record-keeping standards.
• KYC and Verification Documents: Identity documents submitted during the KYC process are retained for a minimum of five (5) years following account closure, or longer where required by applicable regulatory obligations.
• Customer Support Records: Records of live chat sessions, email correspondence, and dispute cases are retained for three (3) years from the date of the most recent interaction, to support ongoing dispute resolution and quality assurance.
• Marketing Consent Records: Records of your marketing consent status (including the date and method of opt-in and any subsequent opt-out) are retained for five (5) years to demonstrate compliance with consent obligations.
• Anonymised Analytics Data: Aggregated and anonymised platform usage statistics that contain no personally identifiable information may be retained indefinitely for internal research and product development purposes.

When personal data is no longer required and no legal retention obligation applies, cv678 will securely delete or irreversibly anonymise that data. Deletion is carried out using industry-standard data destruction methods to ensure that deleted data cannot be recovered or reconstructed.

6. Data Security

cv678 takes the security of your personal data seriously and maintains a comprehensive set of technical and organisational measures designed to protect your data against unauthorised access, disclosure, alteration, loss, or destruction. While no online platform can guarantee absolute security against all possible threats, cv678 applies the following protections as standard across the platform:

• Penetration Testing: cv678's platform undergoes regular security assessments including penetration testing to identify and remediate potential vulnerabilities before they can be exploited.
• Incident Response: cv678 maintains a documented data breach response procedure. In the event of a confirmed data breach affecting your personal data, cv678 will notify affected players promptly and take all necessary steps to contain the breach and prevent recurrence.
• Secure Development Practices: cv678's platform development follows secure coding standards. All code changes undergo security review before deployment to the production environment.
• Player-Side Security: Players share responsibility for the security of their account. cv678 strongly recommends using a strong, unique password for your cv678 account and never sharing your login credentials with any other person.

7. Your Privacy Rights

cv678 respects your rights over your personal data. As a player on the cv678 platform, you have the following rights with respect to your personal data. To exercise any of these rights, please contact the cv678 Data Protection team at [email protected]. cv678 will respond to all valid requests within 30 calendar days of receipt. In some cases — for example, where a request is complex or where there are multiple concurrent requests — cv678 may extend this period by a further 30 days, in which case you will be notified of the extension and the reason for it.

8. Updates to This Policy

cv678 may update this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable law, or improvements to our platform. The effective date shown at the top of this document will always reflect the date on which the current version came into force. Where a change to this Privacy Policy is material — meaning it significantly affects how your personal data is used or your rights over it — cv678 will notify you by email to your registered address at least 14 days before the change takes effect.

Your continued use of the cv678 platform after a revised Privacy Policy takes effect constitutes your acknowledgment of the revised terms. If you do not agree with any change to this Privacy Policy, you must stop using the cv678 platform and request account closure by contacting [email protected] before the revised policy takes effect.

Previous versions of this Privacy Policy are available on request by contacting [email protected]. cv678 maintains an archive of all previous privacy policy versions for a minimum of five years from the date each version was superseded.