cv677 Privacy Policy

Introduction

This Privacy Policy ("Policy") describes how cv677 ("the Platform", "we", "us", "our") collects, uses, stores, and protects the personal data of individuals ("you", "the User") who access or use the cv677 website and associated services available at cv677.io, including sports betting, live casino, slots, and all related products.

cv677 operates as an offshore betting and gaming platform serving players in Bangladesh. We are committed to handling your personal information with the highest standards of security, transparency, and respect for your privacy rights. This Policy has been prepared in accordance with internationally recognised data protection principles and applies to all users of the platform regardless of their location within Bangladesh, including players from Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar.

This Policy should be read alongside the cv677 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. Capitalised terms not defined in this Policy carry the meanings given to them in the Terms & Conditions.

Personal Data We Collect

cv677 collects personal data in the following categories. We collect only what is necessary for the purposes described in this Policy and do not retain data beyond the periods set out in Section 9.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data (beyond responsible gaming indicators), or biometric data unless explicitly required for a specific legal compliance purpose and only with your prior explicit consent.

How We Collect Your Data

cv677 collects personal data through the following channels:

• Direct Submission: Data you provide when registering an account, completing identity verification, making a deposit or withdrawal request, contacting customer support, or participating in promotions.
• Automated Collection: Technical and usage data collected automatically when you interact with the platform, including via cookies, server logs, and analytics tools. See Section 7 for full cookie details.
• Third-Party Sources: Identity and fraud-screening data received from payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard), identity verification service providers, and, where applicable, public anti-fraud databases and regulatory watchlists.
• Device Fingerprinting: Technical identifiers derived from your device hardware and software configuration, used solely for fraud prevention and the detection of duplicate accounts.

How We Use Your Personal Data

cv677 uses personal data collected from Bangladesh players for the following purposes:

• Account Management: Creating, maintaining, and securing your cv677 account; verifying your identity and age (21+ requirement); resetting credentials; and managing account preferences.
• Service Delivery: Processing bets, settling winnings, managing casino game sessions, and providing access to all platform features and products.
• Payment Processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and bank transfer; verifying payment method ownership; and detecting fraudulent transactions.
• Legal Compliance: Meeting anti-money-laundering (AML) obligations, know-your-customer (KYC) requirements, and any reporting obligations imposed by applicable law.
• Responsible Gaming: Monitoring betting patterns that may indicate problem gambling; administering self-exclusion and deposit limit requests; and responding to responsible gaming support requests.
• Customer Support: Responding to enquiries, resolving disputes, investigating complaints, and maintaining records of support interactions.
• Platform Security: Detecting and preventing fraud, abuse, unauthorised access, and prohibited conduct as defined in the Terms & Conditions.
• Service Improvement: Analysing aggregated usage data to improve platform performance, game availability, and the overall user experience for Bangladeshi players.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to users who have opted in to receive such communications. You may opt out at any time by contacting [email protected].

cv677 will not use your personal data for any purpose materially different from those listed above without first obtaining your explicit consent or being required to do so by law.

Legal Basis for Processing

Every instance of personal data processing at cv677 rests on one of the following lawful bases:

• Contractual Necessity: Processing required to perform our contract with you — principally, operating your account, processing bets, and handling payments.
• Legal Obligation: Processing required to comply with AML regulations, KYC requirements, fraud reporting obligations, or any order from a competent authority.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and analytics — where our legitimate interests do not override your fundamental rights and freedoms.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided clear, informed, and freely given consent. You may withdraw consent at any time without penalty.

Sharing Your Personal Data

cv677 does not sell, rent, or trade your personal information. We share personal data only in the following limited circumstances:

• Payment Processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partner banks receive the minimum financial data necessary to process your transactions. Each processor is contractually bound to handle your data securely and solely for payment purposes.
• Identity Verification Providers: Third-party KYC service providers receive identity documents and biographic data solely for the purpose of verifying your identity and age in accordance with our compliance obligations.
• Fraud Prevention Services: We may share technical identifiers (IP addresses, device fingerprints, transaction patterns) with fraud detection partners to prevent financial crime and platform abuse.
• Legal and Regulatory Authorities: cv677 will disclose personal data to competent authorities, courts, or regulators where required to do so by law, court order, or to protect the rights and safety of the platform or other users.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of our business, user data may be transferred to the acquiring entity, subject to equivalent data protection commitments.

All third parties with whom cv677 shares personal data are required to implement appropriate technical and organisational security measures and are prohibited from using your data for any purpose other than the specific purpose for which it was shared.

Cookies & Tracking Technologies

cv677 uses cookies and similar tracking technologies to operate the platform, maintain your session, prevent fraud, and improve your experience. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the platform to function. These cannot be disabled as they are required for session management, account authentication, and security. No consent is required for these cookies.
• Functional Cookies: Remember your preferences (e.g., language, game display settings) to personalise your experience. These are enabled by default but you may disable them without affecting core platform functionality.
• Analytics Cookies: Collect aggregated, anonymised data about how users interact with the platform, used solely to improve performance and identify technical issues. These require your consent.
• Marketing Cookies: Used to deliver relevant promotional content to users who have opted in to receive communications. These require your explicit consent and can be withdrawn at any time.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the cv677 platform. Full cookie controls are available in your account settings under "Privacy Preferences".

Data Security

cv677 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security infrastructure includes:

• Transport Encryption: All data transmitted between your browser or device and cv677 servers is encrypted using TLS 1.2 or higher (256-bit SSL).
• Encryption at Rest: Sensitive stored data, including financial records and identity documents, is encrypted using AES-256 encryption.
• Access Controls: Access to personal data is restricted to authorised cv677 personnel on a strict need-to-know basis, enforced through role-based access control and multi-factor authentication.
• Intrusion Detection: Automated monitoring systems scan for unusual access patterns, brute-force attempts, and other indicators of compromise on a continuous basis.
• Security Audits: cv677 conducts regular internal and third-party security audits to identify and remediate vulnerabilities in our systems and processes.
• Incident Response: In the event of a confirmed data breach that poses a risk to your rights and freedoms, cv677 will notify affected users without undue delay and take all reasonable steps to contain and remediate the incident.

While cv677 takes all reasonable steps to protect your data, no system is entirely immune to security risk. You are responsible for maintaining the security of your account credentials and should contact [email protected] immediately if you suspect any unauthorised activity on your account.

Data Retention

cv677 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

• Active Account Data: Retained for the duration of your account relationship with cv677 plus a minimum of five (5) years following account closure, in accordance with standard financial record-keeping requirements.
• Identity Verification Documents: Retained for a minimum of five (5) years from the date of verification, in compliance with AML obligations.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required for financial compliance and dispute resolution.
• Support Correspondence: Retained for three (3) years from the date of the last interaction, to support dispute resolution and quality improvement.
• Marketing Preferences: Retained until you withdraw your consent or request deletion, whichever is earlier.
• Technical/Usage Data: Retained in anonymised or aggregated form for analytics purposes for up to 24 months after collection.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Following a verified account closure request, active account data is deleted or anonymised within 90 days, subject to the retention periods listed above where legal obligations apply.

Your Data Rights

As a user of the cv677 platform, you have the following rights in respect of your personal data. To exercise any of these rights, please contact [email protected] with your account details and a description of your request. cv677 will respond within 30 days of receiving a verified request.

• Right of Access: You may request a copy of all personal data cv677 holds about you, along with information about how it is used and with whom it is shared.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data. For basic account details (name, email, mobile number), corrections can also be made directly through your account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where processing is unlawful. This right is subject to overriding legal retention obligations.
• Right to Restrict Processing: You may request that cv677 temporarily suspend processing of your personal data while a rectification or objection request is pending.
• Right to Data Portability: You may request your personal data in a structured, commonly used, machine-readable format for transfer to another service provider.
• Right to Object: You may object to processing based on legitimate interests, including profiling for marketing purposes. cv677 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

Children's Privacy

The cv677 platform is strictly for adults aged 21 years and above. We do not knowingly collect, use, or store personal data from individuals under the age of 21. If we become aware that an account has been registered by or on behalf of a person under 21, we will immediately suspend that account, delete all associated personal data, and refund any deposits made (net of any winnings, which will be voided).

If you believe that a minor may have accessed the cv677 platform using your account or device, please contact [email protected] immediately and change your account password. cv677 takes underage gambling extremely seriously and cooperates fully with any investigation into suspected underage access.

International Data Transfers

cv677 operates as an offshore platform. Your personal data may be processed and stored on servers located outside Bangladesh. Where data is transferred internationally, cv677 ensures that appropriate safeguards are in place to protect your data to the same standard as described in this Policy.

Safeguards for international transfers may include contractual clauses that impose equivalent data protection obligations on the receiving party, or transfers to jurisdictions that provide an adequate level of data protection as determined by internationally recognised standards.

By using the cv677 platform, you acknowledge and consent to the transfer of your personal data to servers and processing facilities located outside Bangladesh for the purposes described in this Policy.

Changes to This Privacy Policy

cv677 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform services. The date of the most recent revision is displayed at the top of this document.

Where changes are material — meaning they significantly affect how we process your personal data or reduce your rights — cv677 will provide at least 14 days' prior notice by email to all registered account holders. For minor or administrative changes, the updated Policy will be published on this page with an updated effective date, and your continued use of the platform following publication will constitute your acceptance of the revised Policy.

We encourage you to review this Policy periodically to stay informed about how cv677 protects your information.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or cv677's data protection practices, please contact our data protection team using the details below. All communications relating to data privacy are handled with strict confidentiality.

• Email: [email protected] (plain text only — not a clickable link)
• Subject Line: Please use "Privacy Request — [Your Account Username]" for all data rights requests to ensure prompt routing.
• Support Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)
• Response Commitment: All privacy-related enquiries acknowledged within 24 hours; substantive responses provided within 30 days.

For general account or betting support queries unrelated to data privacy, please contact the standard support team at [email protected] with a descriptive subject line.