cv666 Privacy Policy — Your Data, Protected

1 Who We Are

This Privacy Policy is issued by cv666 ("cv666", "we", "us", "our"), the operator of the online gaming platform accessible at https://cv666.vin. cv666 operates as Pakistan's premier online gaming destination, providing sports betting, live casino games, slot games, fishing arcade titles, and associated promotional and account management services to registered players across Pakistan, including those located in Karachi, Lahore, Faisalabad, Islamabad, and Rawalpindi.

For the purposes of data protection law and this Privacy Policy, cv666 acts as the data controller in respect of personal data collected from Pakistani players who register for and use the cv666 platform. This means cv666 determines the purposes for which your personal data is processed and the means by which that processing is conducted.

2 Data We Collect

cv666 collects personal data that is necessary and proportionate to the provision of our gaming services, fulfilment of legal and regulatory obligations, and maintenance of the security and integrity of the platform. The categories of personal data we collect include the following:

cv666 does not collect sensitive personal data such as biometric identifiers, medical history, religious beliefs, or political opinions as part of standard account operations. Where any such information is incidentally disclosed in the course of a customer support interaction, it will not be recorded or used beyond the immediate support context.

3 How We Collect Your Data

cv666 collects personal data through the following mechanisms, each of which is disclosed to Pakistani players at the relevant point of data capture:

• Direct provision by you: When you complete the cv666 registration form, submit payment details through the Cashier, contact the support team, respond to a survey or promotion, or update your account settings, you directly provide personal data to cv666.
• Automated technical collection: When you access the cv666 platform through any device or browser, certain technical data — including your IP address, device identifiers, login timestamps, and session activity — is automatically collected by cv666's server infrastructure. This data is collected for security, fraud detection, and platform performance monitoring purposes.
• Cookies and similar tracking technologies: The cv666 platform uses cookies and similar technologies to maintain session continuity, remember your preferences, and analyse aggregate platform usage. Full details of the cookies used by cv666 and how you can manage them are set out in Section 8 of this Privacy Policy.
• Third-party payment processors: When you make a deposit or withdrawal via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, or USDT, cv666 receives confirmation and reference data from the relevant payment processor necessary to credit or debit your cv666 wallet. cv666 does not receive or store your full mobile banking PIN, internet banking password, or complete financial account credentials.
• Identity and age verification services: Where cv666 is required to verify your identity or age, verification reference data may be received from authorised identity verification service providers engaged by cv666 for this purpose.

4 Why We Use Your Data — Purposes of Processing

cv666 processes personal data for the following specific, documented purposes. We do not process personal data in ways that are incompatible with the purposes described below without first obtaining your explicit consent or establishing an alternative lawful basis for such processing.

• Account creation and management: To establish, maintain, and administer your cv666 player account, including verifying your eligibility to register, authenticating your identity at login, maintaining your PKR wallet, and processing your account settings preferences.
• Payment processing: To process your deposit and withdrawal requests, reconcile your PKR wallet balance, detect and prevent payment fraud, and maintain financial transaction records as required by applicable compliance standards.
• Delivery of gaming services: To provide you with access to the full cv666 gaming product range — sports betting markets, live casino tables, slot games, fishing arcade titles, and associated features — and to personalise your gaming experience based on your activity history where you have consented to this.
• Customer support: To respond to your enquiries, complaints, and support requests, to investigate account issues, and to maintain records of our support interactions for quality and training purposes.
• Responsible gaming: To monitor your gaming behaviour in aggregate for indicators of potentially problematic gambling patterns, to enforce self-exclusion and deposit limit settings you have applied, and to comply with cv666's responsible gaming obligations.
• Fraud and abuse prevention: To detect and prevent multi-accounting, bonus abuse, money laundering, payment fraud, and any other activity that constitutes a violation of the cv666 Terms & Conditions or applicable law.
• Legal compliance: To comply with applicable anti-money laundering requirements, know-your-customer obligations, data protection law requirements, and any other legal or regulatory obligations applicable to cv666's operations.
• Marketing communications: Where you have provided explicit consent, to send you promotional communications regarding cv666 bonuses, new game launches, PSL seasonal promotions, and other offers that may be of interest to you. You may withdraw this consent at any time.
• Platform improvement: To analyse aggregate, anonymised usage patterns and technical performance data to improve the cv666 platform, identify popular games and features, and inform product development decisions.

5 Legal Basis for Data Processing

cv666 processes personal data only where a lawful basis for that processing exists. The primary legal bases on which cv666 relies for the processing activities described in this Privacy Policy are as follows:

• Contractual necessity: Processing that is necessary to fulfil our contractual obligations to you under the cv666 Terms & Conditions — including account management, payment processing, and delivery of gaming services — is conducted on the basis that such processing is necessary for the performance of the contract between cv666 and you.
• Legitimate interests: Processing conducted for fraud prevention, security monitoring, platform improvement based on anonymised data, and certain customer support activities is conducted on the basis of cv666's legitimate interests in operating a secure, fair, and commercially viable gaming platform. We ensure that our legitimate interests are proportionate and do not override your fundamental privacy rights.
• Legal obligation: Processing conducted to comply with anti-money laundering laws, know-your-customer requirements, age verification obligations, and other applicable regulatory obligations is conducted on the basis that such processing is required by law.
• Consent: Processing for marketing communications, personalisation of the gaming experience beyond what is strictly necessary, and any other processing purpose not covered by the bases above is conducted on the basis of your explicit consent. You may withdraw consent at any time without this affecting the lawfulness of processing conducted before withdrawal.

6 Data Sharing & Disclosure

cv666 does not sell, rent, or otherwise commercially transfer the personal data of Pakistani players to any third party. Data sharing occurs only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose:

• Payment processors: Necessary transaction reference data is shared with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, or the applicable cryptocurrency network solely to process your deposit or withdrawal request. cv666 does not transfer your full payment account credentials to any processor beyond what is required for transaction authorisation.
• Identity and age verification providers: Where identity verification is required, reference data necessary to complete verification may be shared with authorised third-party verification service providers engaged under strict data processing agreements with cv666.
• Game and platform technology providers: Operational data necessary for the delivery of specific game products may be shared with cv666's licensed game technology providers in accordance with data processing agreements. These providers are not permitted to use such data for any purpose other than delivery of the contracted game service.
• Legal and regulatory disclosure: Where cv666 is required by law, court order, or competent regulatory authority to disclose personal data, such disclosure will be made in accordance with applicable legal requirements. cv666 will, where legally permissible, notify the affected player of any such disclosure requirement before complying with it.
• Anti-fraud and compliance networks: In cases of suspected fraud, money laundering, or serious Terms violations, cv666 may share relevant data with anti-fraud networks or gaming industry integrity bodies operating under appropriate data protection frameworks.

7 Payment Data & KYC Verification

As an online gaming platform serving Pakistani players, cv666 is subject to international gaming compliance standards that require us to conduct Know Your Customer (KYC) verification on player accounts at specified thresholds. This section explains how payment data and KYC documentation are handled.

When you make a deposit via JazzCash or EasyPaisa, the reference number and confirmation status of the transaction are received by cv666. We do not receive or store your full JazzCash or EasyPaisa PIN, your mobile banking login credentials, or your complete bank account number. For bank transfer deposits (HBL, UBL, Meezan Bank), we receive the transaction reference and the name of the account from which the transfer was initiated for reconciliation purposes.

KYC verification is conducted at the following points in the player account lifecycle:

• Before processing the first withdrawal from your cv666 account, regardless of the amount.
• When cumulative deposits or withdrawals exceed the thresholds set by cv666's compliance framework.
• Where cv666's automated systems or manual review identify unusual transaction patterns requiring additional verification.
• Upon request as part of a routine account audit or in connection with a bonus abuse investigation.

KYC documents submitted by Pakistani players (including CNIC copies, passport images, or bank statements) are stored in a segregated, access-controlled document management system separate from the main player database. Access to KYC documentation is restricted to cv666's compliance and verification team. KYC documents are retained for the period required by applicable compliance standards and are then securely destroyed.

8 Cookies & Tracking Technologies

The cv666 platform uses cookies and similar browser-based storage technologies to provide you with a functional, personalised, and secure gaming experience. This section explains the types of cookies used and how you can manage your cookie preferences.

cv666 uses the following categories of cookies:

• Strictly necessary cookies: These cookies are essential for the basic functioning of the cv666 platform. They maintain your login session, preserve your cart or bet slip state, and enable security features such as CSRF protection. You cannot opt out of strictly necessary cookies without losing core platform functionality.
• Functional cookies: These cookies remember your preferences — such as your preferred game lobby display, language settings, and whether the responsible gaming banner has been acknowledged — so you do not need to reset them on each visit. They do not track your activity across other websites.
• Analytics cookies: With your consent, cv666 uses anonymised analytics cookies to understand how Pakistani players navigate the platform in aggregate — which game categories are most visited, how long sessions typically last, and where players commonly exit the platform. This data informs product improvements and is never linked to individual identifiable players.
• Session security cookies: Cookies used to maintain your authenticated session, generate OTP verification tokens, and detect suspicious login activity patterns are deployed as part of cv666's security infrastructure.

You may manage your cookie preferences through your browser settings. Most modern browsers — including Chrome on Android (the most common browser among Pakistani mobile users) and Safari on iOS — allow you to view, delete, and block cookies through the browser's privacy settings. Note that blocking strictly necessary cookies will impair or prevent your ability to use the cv666 platform.

9 Data Retention

cv666 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law and compliance standards. The following retention periods apply to the principal categories of personal data held by cv666:

Upon expiry of the applicable retention period, personal data is securely and irreversibly deleted or anonymised in accordance with cv666's data destruction procedures. Anonymised aggregate data may be retained indefinitely for platform analytics purposes as it no longer constitutes personal data.

10 Data Security

cv666 implements a comprehensive suite of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include but are not limited to the following:

• SSL 256-bit encryption on all data transmission between player devices and cv666 servers, ensuring that login credentials, personal data, and payment information are never transmitted in readable form.
• Encrypted at-rest storage for all personal data held in cv666's database infrastructure, ensuring that even in the event of unauthorised physical access to storage systems, data remains inaccessible without the applicable decryption keys.
• Role-based access controls ensuring that only authorised cv666 personnel with a legitimate operational need can access any category of player personal data, with all such access logged and subject to periodic audit.
• Multi-factor authentication for all administrative access to cv666's data processing systems, preventing unauthorised access even where administrative credentials are compromised.
• Intrusion detection systems and ongoing security monitoring designed to detect and respond to anomalous access patterns or potential security incidents in real time.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists to identify and remediate potential weaknesses in cv666's data processing infrastructure.
• Staff training and data handling protocols ensuring that all cv666 personnel who may access personal data in the course of their duties understand and comply with data protection obligations and cv666's internal security policies.

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, cv666 will notify affected individuals promptly and take all reasonable steps to mitigate the impact of the breach. Players should notify cv666 immediately if they suspect unauthorised access to their account through the live chat or email support channels.

11 Your Privacy Rights

Every Pakistani player who holds or has held a cv666 account is entitled to exercise the following data subject rights in respect of their personal data. Requests to exercise any of these rights should be submitted to cv666's support team via live chat or email to [email protected], accompanied by sufficient identifying information to verify your identity before the request is processed.

• Right of Access: You have the right to request confirmation of whether cv666 processes personal data about you, and if so, to receive a copy of that data and information about how it is processed. cv666 will respond to access requests within 30 calendar days of receipt.
• Right to Rectification: If any personal data held by cv666 about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update certain account details — such as your email address or city of residence — directly through your cv666 account settings.
• Right to Erasure ("Right to Be Forgotten"): In certain circumstances — including where the data is no longer necessary for the purpose for which it was collected, or where you withdraw consent on which processing was based — you may request that cv666 delete your personal data. This right is subject to limitations where retention is required by applicable law or legitimate interests.
• Right to Restriction of Processing: In certain circumstances, you may request that cv666 restrict the processing of your personal data while a complaint or objection is being resolved, rather than requesting outright deletion.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is conducted by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format, and to request that it be transmitted directly to another controller where technically feasible.
• Right to Object: You have the right to object to processing of your personal data that is conducted on the basis of legitimate interests. Upon receipt of an objection, cv666 will cease the relevant processing unless it can demonstrate compelling legitimate grounds that override your interests, or unless the processing is necessary for legal claims.
• Right to Withdraw Marketing Consent: Where you have previously consented to receive marketing communications from cv666, you may withdraw that consent at any time. Withdrawal of marketing consent does not affect the lawfulness of prior processing and does not prevent cv666 from sending service communications necessary for account management.

12 Children & Minors

The cv666 platform is strictly intended for use by adults aged 21 years and above. cv666 does not knowingly collect personal data from individuals under the age of 21. If cv666 becomes aware that personal data has been collected from an individual who is under the age of 21, all such data will be immediately deleted and the associated account will be permanently closed.

Parents and guardians are strongly encouraged to implement appropriate parental control software and to monitor their children's use of internet-connected devices to prevent unauthorised access to gambling platforms. cv666 accepts no liability for the consequences of a minor accessing the platform as a result of the account holder's failure to maintain the security of their login credentials.

13 Responsible Gaming & Your Data

cv666's responsible gaming framework necessarily involves the collection and monitoring of certain gaming activity data to identify players who may be experiencing gambling-related difficulties and to enforce self-exclusion arrangements that players have put in place. This section explains how personal data intersects with cv666's responsible gaming obligations.

Where a player sets a deposit limit, loss limit, or self-exclusion through their cv666 account, the relevant settings are recorded and enforced at a platform level. This responsible gaming data is retained for a period of 5 years after account closure — longer than most other data categories — specifically to prevent players who have self-excluded from being able to create new accounts during an active exclusion period, and to protect the integrity of the self-exclusion programme.

cv666's responsible gaming monitoring system analyses gaming activity data in aggregate to identify patterns that may be indicative of problematic gambling behaviour — such as significantly extended session durations, rapid increase in stake levels, or a marked change in deposit frequency. Where such patterns are identified, the cv666 responsible gaming team may reach out to the affected player through their registered contact details to share information about responsible gaming resources and available support tools. This processing is conducted as part of cv666's duty of care to its players and on the basis of legitimate interests in player welfare.

14 Cross-Border Data Transfers

As an international online gaming platform serving Pakistani players, cv666's data processing infrastructure operates across multiple jurisdictions. Personal data collected from Pakistani players may be transferred to, stored in, and processed in countries outside Pakistan in connection with the provision of the cv666 service.

Where such cross-border data transfers occur, cv666 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that described in this Privacy Policy and consistent with internationally recognised data protection principles. Such safeguards may include standard contractual clauses incorporated into our agreements with data processors located outside Pakistan, or reliance on the data protection framework of the destination jurisdiction where it provides adequate protection.

In particular, personal data may be processed in connection with cv666's game platform technology providers, payment system integration partners, and security infrastructure providers, some of which may operate from servers located in jurisdictions other than Pakistan. All such processing is conducted under contractual data protection obligations that prohibit the use of cv666 player data for any purpose other than the contracted service delivery.

15 Changes to This Privacy Policy

cv666 reviews and updates this Privacy Policy periodically to reflect changes in applicable law, cv666's data processing activities, or best practice in the online gaming industry. The "Last Updated" date at the top of this document indicates when the most recent revision was made.

Where a change to this Privacy Policy is material — meaning it significantly affects how we collect, use, or share your personal data — cv666 will provide notice to registered Pakistani players via the email address associated with their account, or through a prominent in-platform notification, before the change takes effect. We will give you a reasonable opportunity to review material changes before they apply to your account.

For non-material changes — such as typographical corrections, clarifications of existing provisions, or updates to contact information — no advance notice will be provided, and the revised policy will take effect upon publication at cv666.vin/privacy-policy. Your continued use of the cv666 platform following publication of any revised Privacy Policy constitutes your acknowledgement of the updated terms.

16 Contact & Data Requests

If you have any questions, concerns, or requests relating to this Privacy Policy or cv666's handling of your personal data, you are encouraged to contact cv666's dedicated data and privacy support channel using the following details:

• Live Chat Support: Available 24 hours a day, 7 days a week through the cv666 platform. When raising a privacy-related matter via live chat, please indicate at the outset that your query relates to data privacy so that it can be directed to the appropriate team member.
• Email: [email protected] — for data subject access requests, deletion requests, data portability requests, and formal privacy complaints. Please include "Privacy Request" in the subject line of your email and provide your registered mobile number or email address for identity verification purposes.

cv666 aims to acknowledge all privacy-related correspondence within 5 business days and to provide a substantive response within 30 calendar days. For complex requests — such as a comprehensive data subject access request requiring the retrieval and compilation of data from multiple platform systems — cv666 may extend this response period by up to an additional 60 days, in which case we will notify you of the extension and its reason within the initial 30-day period.

This Privacy Policy was last reviewed and updated in January 2026. cv666 — Pakistan's Premier Online Gaming Platform.