Privacy Policy cv666 — Your Personal Data Protection

1 Introduction & Scope of Privacy Policy

Cv666 ("we", "the platform", or "cv666.sx") is committed to protecting the privacy and security of the personal information of every individual who interacts with our platform. This Privacy Policy applies to all users, visitors, and members who access the cv666.sx website, the cv666 mobile app for Android and iOS, and any services or features provided by cv666.

This document has been prepared to meet transparency requirements under the Malaysia Personal Data Protection Act (PDPA) and international data protection best practices. We believe you have the right to know exactly how your personal data is managed — free of confusing technical jargon and hidden conditions.

This Privacy Policy should be read together with the cv666 Terms and Conditions, which together form the entire agreement between you and the platform. In the event of any conflict between the two documents on privacy matters, the provisions of this Privacy Policy shall prevail.

2 Personal Information We Collect

Cv666 only collects information necessary to provide you with a safe, fair, and high-quality service. Data collection is divided into two main categories: information you provide directly and information collected automatically while you use the platform.

A. Information You Provide Directly:

• Registration Information: Full name, date of birth, email address, mobile number, username, and password created when registering your account.
• KYC Verification Documents: Copies of official identity documents such as MyKad or passport, a selfie for biometric verification, and a bank statement for payment method verification.
• Financial Information: Bank account details and digital wallet account numbers — such as Touch 'n Go eWallet and GrabPay — used for deposits and fund withdrawals.
• Your Communications: The content of messages you send to the cv666 customer support team via Live Chat, email, or any other official communication channel.

B. Information Collected Automatically:

• Device & Technical Data: IP address, browser type, device operating system, screen resolution, device model, and unique device identifiers.
• Platform Usage Data: Pages visited, session duration, games played, total bets placed, win and loss records, and interactions with platform features.
• Cookie & Tracking Data: Information collected through cookies, web beacons, and similar tracking technologies to enhance user experience and platform security.
• Location Data: General location information based on IP address for legal compliance and fraud prevention purposes. cv666 does not collect precise GPS coordinates.

3 How We Use Your Information

Cv666 uses collected personal information solely for lawful and necessary purposes in operating a safe and responsible online gaming platform. Every use of data has a clear justification and does not exceed the scope stated here.

• Account Management: Create, verify, and maintain your account, including secure login processes and personal settings management.
• Transaction Processing: Process deposits and withdrawals quickly and securely, while maintaining accurate transaction records for your reference and audit requirements.
• KYC Identity Verification: Ensuring every cv666 platform user is a real individual, at least 18 years of age, and using their own identity.
• Security & Fraud Prevention: Identify and prevent fraudulent activity, money laundering, unauthorized access, and platform abuse.
• Service Improvement: Analyze usage patterns to improve platform features, streamline user experience, and develop better new products.
• Service Communications: Send important notifications related to your account, security updates, transaction confirmations, and essential service alerts.
• Marketing Communications (with consent): Send promotional information, bonus offers, and new game content only to users who have given explicit consent.
• Legal Compliance: Meet legal obligations, comply with court orders or directives from lawful authorities, and manage legal claims where necessary.

4 Information Sharing & Disclosure

Cv666 understands that your trust depends on control over your personal information. We do not sell, rent, or disclose your personal information to third parties without your consent, except in the limited circumstances set out below.

Authorised Third Parties (with legitimate business requirements):

• Payment Processors: Financial institutions and payment processors authorized to facilitate deposit and withdrawal transactions. They only receive the minimum information required to process each transaction.
• Game Software Providers: Game development partners providing slot titles, live casino, and other games on the cv666 platform. Data shared is limited to the game session information required.
• Identity Verification Services: Third-party KYC service providers integrated with our platform to verify your identity documents securely and efficiently.
• Cloud Services & Infrastructure: Cloud service providers that host cv666 platform data. All providers are bound by strict data protection agreements.

Legally Mandated Disclosure:

Cv666 may disclose your personal information without prior consent when required by law, court order, subpoena, or a legitimate request from government authorities including law enforcement agencies. In such circumstances, cv666 will endeavour to notify you in advance unless prohibited from doing so by court order or law.

5 Data Security & Technical Protection

The security of your data is a responsibility cv666 takes extremely seriously. We continuously invest in the latest cybersecurity infrastructure to ensure your personal data remains protected against both external and internal threats.

Technical security measures implemented by cv666:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and cv666 servers is encrypted using TLS 1.3 protocol — the highest encryption standard available today.
• Data-at-Rest Encryption: Data stored in the cv666 database is also encrypted using AES-256, meaning that even in the event of a security breach, your data cannot be read without the encryption key.
• Two-Factor Authentication (2FA): cv666 users can and are encouraged to enable 2FA to add an extra layer of security to their accounts.
• 24/7 Monitoring: The cv666 cybersecurity team continuously monitors systems to detect and respond to any threats or suspicious activity in real time.
• Internal Access Controls: Only authorised cv666 staff with a legitimate business need may access users' personal data, with all access logged and audited.
• Regular Penetration Testing: cv666 conducts regular security testing, including independent penetration testing, to identify and address any system vulnerabilities.

While cv666 takes all reasonable steps to protect your data, no security system can be guaranteed 100% secure. In the event of a security breach involving your personal data, cv666 is committed to notifying you within 72 hours of the breach being identified, in line with best data protection practices.

6 Cookies, Analytics & Tracking Technologies

Cv666 uses cookies and similar tracking technologies to enhance platform functionality, personalise the user experience, and maintain session security. Cookies are small text files stored in your browser or device when you visit the cv666 platform.

Types of Cookies Used by cv666:

• Essential Cookies: Required for core platform operations including login session management, security, and basic website functionality. These cookies cannot be disabled without disrupting platform use.
• Functional Cookies: Store your personal preferences such as preferred language, display settings, and account configurations for a smoother, more personalized experience.
• Analytics Cookies: Collect statistical information on how users interact with the cv666 platform to help us understand usage patterns and improve the overall experience.
• Security Cookies: Help detect and prevent unauthorized access, fraud, and security threats by identifying suspicious activity patterns.

You can manage your cookie settings through your browser at any time. However, disabling certain cookies may affect the functionality and performance of the cv666 platform. Third-party cookies unrelated to platform operations are not used by cv666.

7 Data Retention & Deletion Period

Cv666 only retains your personal information for as long as necessary to fulfil the purpose of data collection and to meet applicable legal requirements. This data minimisation principle means we do not store data longer than required.

Cv666's general data retention policy is as follows: active account data is retained for the lifetime of the account and for up to seven years after account closure to meet financial audit and legal compliance requirements. Financial transaction records are kept for a minimum of seven years in accordance with Malaysia's accounting legislation. Customer support communications are retained for three years to enable effective dispute resolution should any dispute arise at a later date.

Upon expiry of the retention period, cv666 will securely delete or anonymise your personal data using verified deletion methods, ensuring it cannot be recovered or accessed again by any party. You may also request early deletion of your data, subject to any legally mandated retention obligations still in effect.

8 Your Rights as a Data Subject

Under the Personal Data Protection Act and the privacy principles practised by cv666, you hold the following rights regarding your personal information. cv666 is committed to facilitating the exercise of these rights promptly and without undue charge.

To exercise any of the above rights, contact the cv666 Data Protection Officer via live chat on the platform or our official email. cv666 will respond to your request within thirty (30) calendar days. In complex cases, this period may be extended to sixty (60) days with prior notice to you.

9 Children's Privacy & Protection of Young Users

The cv666 platform is an online gaming service exclusively dedicated to individuals aged 18 and above. cv666 does not knowingly collect, process, or store any personal information from individuals under the age of 18.

All new account applicants are required to confirm they are at least 18 years of age upon registration, and our KYC verification process is designed to detect and reject any registration attempts by underage individuals. Should cv666 discover that a child's personal information has been collected without valid parental or guardian consent, we will promptly delete that information and close the account in question.

10 Privacy Policy Amendments

Cv666 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our business practices, new legal requirements, or improvements in how we protect your data. Each amendment will take effect as soon as the updated version is published on the cv666 platform.

For significant amendments that materially affect your privacy rights, cv666 will notify you via in-platform notification and your registered email at least seven (7) days before the amendment takes effect. The "Last Updated" date at the top of this document will always reflect the date of the latest version of the Privacy Policy.

Continued use of the cv666 platform after an amendment's effective date constitutes your acceptance of the updated Privacy Policy. If you disagree with any amendment, you have the right to close your account and request deletion of your data before the amendment takes effect.

11 Contact Us & Data Protection Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or how cv666 manages your personal data, we encourage you to contact us through the following official channels. The cv666 Data Protection Officer team is available to assist you 24 hours a day, seven days a week.

Cv666 is committed to responding to all privacy-related enquiries in a timely and fully transparent manner. Complaints that cannot be resolved internally may be referred to the relevant data protection authority in Malaysia. We value your trust and will always strive to maintain the highest privacy standards across all aspects of cv666 platform operations.