Privacy Policy

This Privacy Policy ("Policy") describes how cv656 ("Platform", "We", "Us") collects, uses, stores, and protects personal data relating to registered players and visitors ("You", "User") of the cv656 platform available at https://cv656.org. By registering an account or using the platform in any way, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.

This Policy is supplemented by the cv656 Terms & Conditions, which are incorporated herein by reference. In the event of any conflict between this Policy and the Terms & Conditions, the Terms & Conditions shall prevail with respect to account use, and this Policy shall prevail with respect to data protection matters.

cv656 is the data controller for personal data collected through the cv656 platform. As data controller, cv656 determines the purposes and means of processing your personal data. cv656 is responsible for ensuring that all data processing activities conducted through the platform comply with applicable data protection principles, including purpose limitation, data minimisation, and storage limitation.

cv656 operates the platform for players across Bangladesh, including those in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, and all other cities and regions of the country. All data relating to Bangladesh-based players is handled in accordance with applicable data protection standards and is used solely for the purposes described in this Policy.

cv656 collects personal data from you in three ways: directly from you when you register or interact with the platform, automatically when you use the platform, and occasionally from third-party sources such as identity verification providers.

Data You Provide Directly

When you register a cv656 account, complete your profile, submit a KYC verification document, make a deposit or withdrawal request, or contact our support team, you provide us with personal data that may include:

• Full name and date of birth, used for identity verification and age eligibility confirmation.
• Mobile phone number, used as your account identifier, for two-factor authentication, and for support communications.
• Government-issued identification documents (e.g., National ID card, passport) submitted as part of the KYC process to verify your identity and confirm your age.
• Support communications, including messages sent to us via the support email channel, which are retained to maintain a record of interactions and to improve our service quality.

Data Collected Automatically

When you access and use the cv656 platform, our systems automatically record certain technical and usage data. This data does not by itself identify you personally but may be combined with other data we hold to do so. Automatically collected data includes:

• IP address and approximate geolocation data derived from it, used to verify that you are accessing the platform from an eligible location and to detect suspicious access patterns.
• Device information including device type (mobile, tablet), operating system version, browser type and version, and screen resolution — used to optimise the platform display for your device.
• Session activity logs including pages visited, games launched, bets placed, session start and end times — used for fraud prevention, responsible gaming monitoring, and platform improvement.

Data From Third Parties

cv656 may receive personal data about you from third-party sources in limited circumstances, including:

• Identity verification service providers: cv656 uses third-party KYC service providers to confirm the identity and age of users where required. These providers may supply us with the result of their verification check and relevant data points used in that verification.
• Payment processors: when you make a deposit or request a withdrawal via bKash, Nagad, Rocket, Upay, or a linked bank account, the payment service provider confirms the transaction reference and status to cv656. cv656 does not receive or store full payment credential data — only confirmation of the transaction.
• Fraud and risk screening partners: in order to protect the platform against fraudulent activity, cv656 may share limited data with specialist fraud prevention partners who supply a risk score or flag based on known fraud patterns. This processing is necessary to protect the legitimate interests of the platform and all genuine players.
• cv656 does not purchase marketing lists or obtain personal data from data brokers for advertising or profiling purposes.

cv656 uses the personal data we collect for the following specific purposes. We process data only to the extent necessary for each stated purpose and do not use personal data in ways that are incompatible with the purpose for which it was originally collected:

• Account creation and management: to register your player account, verify your identity and age, maintain your account settings, and manage your session activity on the platform.
• Payment processing: to process deposits and withdrawals in BDT, verify payment method ownership, and maintain an accurate transaction record for your account.
• Responsible gaming compliance: to monitor gameplay patterns, identify signs of potential problem gambling, and enforce any responsible gaming tools you have activated such as deposit limits, session reminders, or self-exclusion.
• Fraud prevention and security: to detect, investigate and prevent fraudulent transactions, unauthorised account access, money laundering, and other prohibited activities, and to protect the security and integrity of the cv656 platform.
• Legal and regulatory compliance: to comply with applicable laws, regulations, and lawful requests from competent authorities, including anti-money laundering obligations and age verification requirements.
• Customer support: to respond to your support enquiries, investigate complaints, and maintain a record of interactions to improve the quality of our support service.
• Platform improvement: to analyse aggregated, anonymised usage data to identify trends, improve game selection, optimise page performance, and enhance the overall player experience on the platform.

cv656 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: processing required to create and manage your account, process transactions, and deliver the platform services you have requested — without this processing, cv656 cannot provide you with access to the platform.
• Legal obligation: processing required to comply with applicable laws, including anti-money laundering regulations, age verification requirements, and lawful requests from regulatory or law enforcement authorities.
• Legitimate interests: processing for fraud prevention, platform security, responsible gaming monitoring, and platform improvement — where cv656's legitimate interest in protecting the platform and its users is not overridden by your rights and interests.
• Consent: where cv656 sends you optional promotional communications about bonuses, new games, or special offers, this is done on the basis of your consent provided at registration or subsequently updated in your account settings. You may withdraw this consent at any time by contacting support.

cv656 does not sell your personal data. We share personal data with third parties only in the limited circumstances described in this section. In all cases, data sharing is governed by data processing agreements that require recipients to protect your data in a manner consistent with this Policy.

Service Providers

cv656 engages third-party service providers who process personal data on our behalf as data processors. These providers are contractually bound to process data only on cv656's documented instructions and to maintain appropriate technical and organisational security measures. Categories of service provider include:

• KYC and identity verification providers — to validate player identity and confirm age eligibility as required by our platform policies.
• Payment processing partners including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard — to facilitate deposits and withdrawals in BDT.
• Fraud detection and risk management providers — to identify and prevent fraudulent activity on the platform.
• Cloud infrastructure and hosting providers — to host the platform, store player data securely, and maintain platform availability.

Legal and Regulatory Disclosures

cv656 may disclose personal data to competent authorities, regulators, or law enforcement agencies where required to do so by applicable law, court order, or lawful governmental request. In such cases, cv656 will disclose only the minimum data necessary to comply with the legal obligation and will, where permitted by law, notify the affected player of the disclosure.

cv656 handles all financial transaction data with heightened security. When you make a deposit via bKash, Nagad, Rocket, Upay, or a bank transfer, the transaction is routed through the payment provider's own secure infrastructure. cv656 receives only the transaction confirmation reference and the credited amount — we do not receive, transmit, or store your bKash PIN, Nagad mPIN, bank account password, card number, or any other payment credential.

Transaction records — including deposit amounts, withdrawal requests, and the associated payment method type — are retained on the cv656 platform as part of your account history. These records are used to resolve disputes, comply with financial record-keeping obligations, and support responsible gaming monitoring. Your transaction history is accessible to you at all times through your account dashboard.

cv656 complies with all applicable anti-money laundering obligations. This includes monitoring transaction patterns for signs of suspicious financial activity and reporting such activity to competent authorities where required by law. Financial data held for AML compliance purposes is retained for the legally mandated minimum period and handled with strict access controls.

cv656 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law. The following retention periods apply:

• Active account data: retained for the duration of your account's active life plus a period of up to 5 years following account closure, to allow for dispute resolution, legal proceedings, and regulatory enquiry.
• Financial transaction records: retained for a minimum of 5 years following the date of the transaction in order to satisfy anti-money laundering record-keeping obligations.
• Support communications: retained for up to 3 years from the date of the interaction, to maintain a record of the support history and to support quality assurance and training processes.

When the applicable retention period expires, cv656 will securely delete or anonymise your personal data in a manner that prevents reconstruction or re-identification. Where anonymisation is used instead of deletion, the anonymised data may be retained indefinitely for aggregate analytics purposes, as it no longer constitutes personal data.

cv656 implements a layered approach to data security, applying both technical and organisational measures appropriate to the sensitivity of the personal data we process. Our security framework includes:

• 256-bit SSL/TLS encryption on all data in transit between your device and the cv656 platform, ensuring that your login credentials, personal data, and payment information cannot be intercepted in transit.
• Encryption of sensitive data at rest, including stored KYC documents and identity records, using industry-standard encryption algorithms.
• Strict access controls ensuring that personal data is accessible only to cv656 staff and authorised service providers who need it to perform their specific role, operating on a least-privilege basis.
• Continuous monitoring for suspicious access patterns, unusual account activity, and potential data breach indicators, with incident response procedures in place to address any identified security event promptly.

While cv656 applies all reasonable technical and organisational measures to protect your personal data, no data transmission or storage system can be guaranteed to be 100% secure. In the unlikely event of a data breach that is likely to result in a risk to your rights or freedoms, cv656 will notify affected players without undue delay.

As a user of the cv656 platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact the cv656 support team. We will respond to all valid rights requests within a reasonable timeframe and at no charge:

• 👁️
  Right of Access: You have the right to request a copy of the personal data cv656 holds about you, together with information about how that data is being used and with whom it has been shared.
• ✏️
  Right to Rectification: You have the right to request correction of any personal data cv656 holds about you that is inaccurate, incomplete, or out of date.
• 🗑️
  Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent, or where you object to processing and there is no overriding legitimate interest. Note that this right is subject to legal retention obligations — cv656 may be required to retain certain data for a defined period regardless of an erasure request.
• ⛔
  Right to Restrict Processing: You have the right to request that cv656 restricts the processing of your personal data in certain circumstances, such as while the accuracy of data you have contested is under review.
• 📦
  Right to Data Portability: Where processing is based on your consent or on a contract, you have the right to receive a copy of the personal data you provided to cv656 in a structured, commonly used, machine-readable format.
• ↩️
  Right to Withdraw Consent: Where cv656 processes your data on the basis of your consent (for example, for promotional communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

The cv656 platform uses cookies and similar tracking technologies to deliver a functional and personalised experience. A cookie is a small text file placed on your device when you access a website. Cookies are used by cv656 for the following purposes:

Essential Cookies

Essential cookies are strictly necessary for the platform to function. They maintain your session state (so you remain logged in while navigating the platform), remember your language preference, and ensure the security of your session. Essential cookies cannot be disabled without breaking core platform functionality.

Analytics Cookies

cv656 uses analytics cookies to collect aggregated, anonymised information about how players use the platform — including which pages are visited most frequently, how long players spend on each section, and what device types are most common. This data is used solely to improve platform performance and the player experience. Analytics cookies do not identify you personally.

Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to view, block, or delete cookies at any time. Please note that blocking essential cookies will prevent you from using core platform features including login. Instructions for managing cookies in the most common mobile browsers are available in the help documentation for your device's browser application.

The cv656 platform is intended exclusively for adults aged 21 years and above. cv656 does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as part of the registration and KYC process to confirm that all registered players meet the minimum age requirement.

If cv656 becomes aware that personal data has been collected from an individual who has misrepresented their age and is under 21, cv656 will immediately close the relevant account, delete the associated personal data to the extent permitted by applicable law, and void any transactions conducted through that account. If you believe that a minor may have registered an account on the cv656 platform, please notify us immediately at [email protected].

cv656 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or platform features. When material changes are made to this Policy, cv656 will notify registered players by displaying a notice on the platform or by sending a notification to the mobile number associated with your account. The updated Policy will state its effective date at the top of the document.

Your continued use of the cv656 platform following the publication of an updated Privacy Policy constitutes your acceptance of the updated Policy. It is your responsibility to review this page periodically so that you remain informed of the current version. If you do not agree to any update, you should discontinue use of the platform and may request account closure by contacting support.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data cv656 holds about you, please contact our support team. All data protection enquiries are handled with strict confidentiality and are escalated to a senior member of the cv656 team where required.

Support contact: [email protected] (plain text only — not a clickable link). Our support team is available 24/7 in English and Bangla. We aim to respond to all data protection enquiries within 2 business days during Bangladesh Standard Time (BST, UTC+6) business hours.