At cv666, your personal data is handled with the same seriousness we apply to platform security. This policy explains what we collect, why we collect it, and exactly how it is used and protected.
Your Privacy at a Glance
We collect only the personal data that is strictly necessary to operate your account, process your transactions, and comply with applicable regulatory requirements.
cv666 does not sell, rent, or trade your personal data with third-party advertisers or data brokers. Your information is not a commodity on our platform.
All data transmitted between your device and cv666's servers is encrypted to banking-grade standards. No personal or financial data travels in plain text.
You have the right to access, correct, and request deletion of your personal data. We honour these rights subject only to our legal retention obligations.
Your data is not kept indefinitely. Retention periods are defined per data category, aligned with regulatory obligations and operational necessity — then securely deleted.
Cookies are used only for session management, platform functionality, and aggregate analytics. We do not use cross-site tracking cookies or invasive behavioural profiling.
This Privacy Policy ("Policy") describes how cv666 ("cv666", "we", "us", "our") collects, uses, stores, discloses, and protects the personal data of individuals ("User", "you", "your") who access or use the cv666 online gaming platform accessible at cv666.casa (the "Platform"), including all associated services, features, and digital touchpoints.
cv666 is committed to protecting the privacy of all Users in accordance with applicable international data protection standards and best practices. This Policy is designed to give you a clear and transparent understanding of our data practices so that you can make informed decisions about your personal information.
This Policy should be read together with our Terms & Conditions and our Responsible Gambling Policy. By registering an account or using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.
For the purposes of this Privacy Policy, the following terms shall have the meanings assigned below:
cv666 collects personal data through several channels: directly from you during registration and use of the Platform, automatically through your interaction with the Platform's technical systems, and from third-party service providers where permitted and necessary for platform operations.
| Data Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality, MyKad / passport number | Registration & KYC verification |
| Contact Data | Email address, mobile number, residential address (including city: KL, Penang, JB etc.) | Registration & account updates |
| Financial Data | Payment method details (e-wallet IDs, bank account references), transaction history, deposit and withdrawal amounts in MYR | Deposits, withdrawals, KYC |
| KYC Documents | Copies of identity documents, utility bills, bank statement headers | KYC verification process |
| Account Credentials | Username, hashed password (never stored in plain text) | Registration |
| Communication Data | Support chat transcripts, email correspondence, dispute submissions | Support interactions |
cv666 processes your personal data for specific, clearly defined purposes. We do not use your data in ways inconsistent with the purposes disclosed in this Policy. The primary purposes for which your data is used are as follows:
cv666 processes your personal data on one or more of the following lawful bases, depending on the nature of the processing activity:
| Processing Purpose | Legal Basis |
|---|---|
| Account creation, KYC, and transaction processing | Performance of contract (necessary to provide the Platform service) |
| AML compliance, regulatory reporting, fraud detection | Legal obligation |
| Responsible gambling monitoring and intervention | Legitimate interests (player welfare) and legal obligation |
| Platform analytics and performance improvement | Legitimate interests (improving product quality) |
| Direct marketing communications | Consent (opt-in only; may be withdrawn at any time) |
| Customer support and dispute resolution | Performance of contract and legitimate interests |
cv666 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. Data sharing is limited to the following categories of recipients, each bound by strict confidentiality and data processing obligations:
To facilitate deposits and withdrawals, we share the minimum necessary financial data with Malaysian payment service providers including Touch 'n Go eWallet, DuitNow, FPX participating banks, Boost, GrabPay, and others as applicable. Each payment processor operates under its own privacy policy and is independently regulated.
KYC data may be shared with regulated third-party identity verification service providers for the purpose of fulfilling our verification obligations. Such providers are contractually bound as Data Processors and may only use the data for the specific verification purpose.
Technical session data (session tokens, game round references, wager amounts) is necessarily shared with the licensed game studios providing content on the Platform. This data is used solely for the purpose of game operation and result reconciliation. Game studios do not receive your identity or payment data.
cv666 may be required to disclose personal data to applicable gaming regulators, financial intelligence units, or law enforcement agencies in response to legally mandated requests. We will disclose only what is required and will inform you of such disclosure where legally permissible.
Lawyers, auditors, and other professional advisers engaged by cv666 may access personal data on a need-to-know basis in the course of providing professional services. All such advisers are bound by confidentiality obligations.
cv666 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable regulatory and legal obligations. The following retention guidelines apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years post-closure | Regulatory & AML obligation |
| Financial Transaction Records | 7 years post-transaction | Financial record-keeping requirements |
| KYC Documents | 5 years post-account closure | AML compliance |
| Support Communication Logs | 3 years from last interaction | Dispute resolution and legal defence |
| Platform Usage & Analytics Data | 24 months (aggregated, anonymised) | Legitimate interests |
| Marketing Consent Records | Duration of consent + 2 years | Evidence of lawful marketing basis |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.
The cv666 Platform uses cookies and similar technologies to support its operation and improve user experience. We use only the categories of cookies described below:
These cookies are strictly necessary for the Platform to function. They maintain your login session, remember your language and currency preferences (MYR), and ensure secure connections. Essential cookies cannot be disabled without breaking core Platform functionality.
Functional cookies remember your Platform preferences, such as table game settings or notification preferences, to provide a more personalised experience during your session.
Aggregated, anonymised analytics cookies help us understand how Users navigate the Platform — which pages are most visited, where users encounter errors, and which features are most used. This data is used exclusively for internal Platform improvement purposes. We do not share analytics data with third-party advertising networks.
You may manage your cookie preferences through your browser settings at any time. Note that disabling essential cookies will impair Platform functionality.
cv666 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These include:
While cv666 takes all reasonable measures to protect your data, no system is entirely immune to security risks. Users are reminded to maintain strong, unique passwords for their cv666 Account and to contact support immediately if they suspect unauthorised access.
Subject to applicable law and our legitimate processing and retention obligations, you have the following rights with respect to your personal data held by cv666:
You may request a copy of the personal data we hold about you, including details of how it is processed and with whom it has been shared.
You may request that we correct any inaccurate or incomplete personal data we hold about you.
You may request deletion of your personal data where it is no longer necessary for the purposes it was collected, subject to our legal retention obligations.
You may request that we limit how we use your data in certain circumstances, such as while you contest the accuracy of the data.
Where processing is based on consent or contract, you may request your data in a structured, machine-readable format for transfer to another service provider.
You may object to processing based on legitimate interests, or withdraw consent for marketing communications at any time without penalty.
To exercise any of these rights, please contact our Data Protection team via the channels listed in Section 15. We will respond to valid requests within 30 days of receipt, or inform you if an extension is required.
In the course of providing the Platform, your personal data may be processed by cv666 or its Data Processors in jurisdictions outside of Malaysia. Where such international transfers occur, cv666 ensures that:
cv666 does not permit international transfers of personal data to recipients in jurisdictions with materially weaker data protection standards without implementing compensating safeguards as described above.
The cv666 Platform may reference third-party services such as payment processors and game content providers in the course of delivering its services to you. Each such third party operates under its own privacy policy and data practices, which are independent of this Policy. cv666 is not responsible for the privacy practices of third-party service providers, though we contractually require them to handle data shared with them in a manner consistent with our standards.
We recommend that you review the privacy notices of any third-party services you interact with in connection with your cv666 Account, particularly your chosen Malaysian payment service provider (e.g., Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank).
The cv666 Platform is strictly for individuals aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If cv666 becomes aware that personal data has been collected from a person under 21 — whether through inaccurate registration or otherwise — the relevant Account will be immediately suspended and any collected data will be permanently deleted.
Parents and guardians are encouraged to use appropriate parental control software to prevent access to online gambling platforms by minors. If you believe a minor has created an account on cv666, please contact our support team immediately.
cv666 reserves the right to update or revise this Privacy Policy at any time. Where material changes are made, we will notify registered Users via email and/or a prominent notice on the Platform at least 7 days before the changes take effect, unless earlier implementation is required for legal, regulatory, or security reasons.
The "Last Updated" date at the top of this Policy reflects the most recent revision. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not agree with the amended Policy, you must cease use of the Platform and may request Account closure.
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by cv666, please contact us through the following channels. All data protection enquiries will be handled by our designated privacy team.
When submitting a data access, rectification, or deletion request, please provide sufficient information for us to verify your identity before processing the request. This is necessary to protect your data from unauthorised access by third parties.
Our support team handles all privacy and data requests 24/7. You can also review our full Terms & Conditions or learn about responsible gambling tools.