Cv666 Privacy Policy – Data Protection Our Malaysian Members

1Introduction & Scope of Privacy Policy

This Privacy Policy is issued by cv666 and applies to all registered members, website visitors, and any individual who interacts with the cv666 platform in any capacity. This document transparently explains how cv666 collects, processes, stores, protects, and in certain circumstances shares your personal data, in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

By registering a cv666 account, using our platform, or simply browsing the cv666 website, you acknowledge that you have read and understood this Privacy Policy. We encourage you to read this document in full and carefully. If you do not agree with any part of this Privacy Policy, please discontinue your use of the cv666 platform.

2Personal Data Collected by cv666

Cv666 collects your personal data through two main channels — information you provide directly, and data collected automatically while you use our platform.

Data you provide directly:

• Account registration details — full name, date of birth, a valid Malaysian phone number, email address, and your preferred username.
• Identity verification documents — a copy of your MyKad or passport may be requested for account verification purposes or when processing withdrawals above certain limits.
• Payment method details — your e-wallet information (Touch 'n Go, GrabPay, Boost, ShopeePay) or FPX banking account details (Maybank2u, CIMB Clicks) registered for deposits and withdrawals in Ringgit Malaysia (MYR).
• Communications with the support team — chat session records, emails, and any other information you share when contacting cv666.

Automatically collected data:

• Technical data — IP address, web browser type and version, device operating system, screen resolution, and time zone.
• Usage data — pages visited, time spent on each page, navigation flow, links clicked, and platform features used.
• Gaming and betting data — a complete record of all gaming and wagering activity, including bets placed, outcomes, wins, losses, and transaction history.
• Cookie data — session information and preference cookies to ensure a smoother, more consistent user experience.

3How We Use Your Personal Data

Cv666 uses the personal data collected solely for legitimate, stated purposes. We do not use your data for anything beyond what is listed here without obtaining your fresh consent:

• Account management and administration — to create, verify, maintain, and close your cv666 account when required.
• Financial transaction processing — to process deposits, withdrawals, and all financial transactions in Malaysian Ringgit (RM) via your chosen e-wallet or FPX method.
• Customer support and service — to handle enquiries, complaints, and support requests you submit to our cv666 Malay-language support team, available 24/7.
• Security and fraud prevention — to detect and prevent fraudulent activity, multi-account usage, bonus abuse, money laundering, and any conduct that violates cv666's Terms & Conditions.
• Legal compliance — to fulfil legal obligations applicable to cv666 under Malaysian law, including reporting requirements to the relevant authorities where necessary.
• Platform improvements — to analyse usage patterns on an aggregated and anonymised basis, in order to understand how users interact with the cv666 platform and make meaningful improvements.
• Service communications — to send important notifications relating to your account, transactions, security updates, and changes to terms that you need to be aware of.
• Marketing and promotions (with consent) — to send you information about cv666's latest promotions, bonuses, and offers, but only where you have given your consent to receive marketing communications.

If cv666 intends to use your data for any new purpose not described here, we will obtain your consent before any such processing takes place. You have the right to withdraw your consent at any time, without affecting the validity of any processing that has already occurred.

4Sharing Data with Third Parties

Cv666 does not sell, rent, or disclose members' personal data to any third party for their own commercial purposes. However, in the course of operating the platform, cv666 may need to share your data with the following limited categories of parties, and only for the specific purposes stated:

• Payment service providers — e-wallet providers (Touch 'n Go, GrabPay, Boost, ShopeePay) and FPX service providers (Maybank, CIMB) receive only the minimum data necessary to process your payment. They are bound by data protection agreements and Malaysian financial regulations.
• Technology service providers — companies that provide technical infrastructure, server hosting, and other auxiliary services may process your data as data processors on behalf of cv666. All such providers are bound by strict data processing agreements.
• Relevant authorities — cv666 may be required to disclose certain data to Malaysian authorities where mandated by law, court order, or lawful directive from a regulatory authority. In such circumstances, cv666 will disclose only the minimum data necessary and will endeavour to notify you where legally permitted.
• Gaming service providers — third-party game software providers that supply casino games and Sports Betting on the cv666 platform may receive certain data necessary to ensure game integrity and prevent fraud. Data shared is strictly limited and subject to confidentiality agreements.

5Data Storage & Security Measures

Your personal data is stored on servers protected by multiple layers of physical and digital security measures. cv666 employs several layers of protection to keep your data safe from unauthorised access, loss, alteration, or unintentional disclosure:

• Static data encryption (data at rest) using AES-256 standards across all files and databases containing members' personal information.
• Data in transit is encrypted using TLS 1.3 with 256-bit SSL certificates that are updated on a regular basis.
• Role-based access control (RBAC) ensuring that only authorised personnel can access specific data based on their job responsibilities.
• Intrusion detection systems (IDS) and intrusion prevention systems (IPS) that monitor network traffic in real time.
• Regular security audits conducted by our internal security team, supplemented by independent assessments from qualified third-party experts.
• Rigorous patch management procedures to ensure all systems are kept up to date with the latest security patches at all times.

Your personal data is retained for as long as your account remains active, and for the period required after account closure to fulfil legal obligations, resolve outstanding disputes, and enforce our agreements. Once the required retention period has ended, data is securely deleted using methods that ensure it cannot be recovered.

6Cookies & Tracking Technologies

Cv666 uses cookies and similar tracking technologies to enhance user experience, ensure proper platform functionality, and analyse platform usage on an aggregated basis. Below are the types of cookies we use:

• Essential cookies — Required for core platform functions such as login authentication and session management. Without these cookies, cv666 cannot function properly. These cookies cannot be disabled.
• Preference cookies — Stores your preferences such as language selection, display settings, and game choices to deliver a more personalised experience each time you return.
• Analytics cookies — Collecting information about how you use the cv666 platform — pages visited, time spent, and errors encountered — to help us understand and improve the user experience. This data is processed in aggregate and anonymised form.
• Security cookies — Helps detect and prevent fraudulent activity, bot attacks, and platform abuse by identifying suspicious behavioural patterns.

You can manage your cookie preferences through your web browser settings. However, disabling certain cookies may affect the functionality of the cv666 platform. For more information on how to manage cookies in your browser, please refer to your browser's help documentation.

7Your Rights Under Malaysia's PDPA 2010

As a cv666 member and data subject under Malaysia's Personal Data Protection Act 2010, you have the following rights, which cv666 is committed to respecting and upholding in full:

• Right to access — You have the right to request and receive a copy of all personal data cv666 holds about you. Requests will be processed within 14 working days.
• Right to Rectification — If your personal data held by cv666 is inaccurate or out of date, you have the right to request a correction. You can update most of your profile information directly through your account settings.
• Right to Erasure — You may request the deletion of your personal data once your account is closed, provided there are no legal obligations requiring us to retain it for a specified period.
• Right to Object — You may object to the processing of your data for direct marketing purposes at any time, easily managed through the communication settings in your account.
• Right to restrict processing — In certain circumstances provided for under PDPA 2010, you may request that cv666 restrict the way your data is used.
• Right to Data Portability — You may request a copy of the data you have provided to cv666 in a readily readable and portable format.

To submit any request relating to your personal data rights, please contact the cv666 support team through the official channels available within the platform. We will process your request within the stated timeframes and keep you informed of the action taken.

8Data of Children & Minors

Cv666 is an exclusive platform for individuals aged 18 and above. We do not knowingly collect or process personal data from anyone under the age of 18. If you are a parent or guardian and believe your underage child has registered or used the cv666 platform, please contact our support team immediately.

Once we have confirmed that the collected data belongs to a minor, cv666 will take immediate steps to delete that data and close the account in question. We take this matter extremely seriously and are committed to ensuring that our platform remains inaccessible to minors under any circumstances.

9Data Breach Response Procedure

While cv666 takes all reasonable precautions to protect your personal data, no security system can guarantee 100% protection against every threat. In the unlikely event of a data breach that may affect your rights and freedoms, cv666 has a detailed incident response procedure in place:

• The cv666 security team will detect, assess, and contain any breach as quickly as possible once it has been identified.
• A risk assessment will be conducted to determine whether the breach is likely to adversely affect the rights and freedoms of the individuals whose data is involved.
• If the assessment identifies a high risk to the individuals affected, cv666 will notify the relevant data subjects directly and without delay, including details of the nature of the breach, the data involved, and the protective measures that have been and are being taken.
• Reports to the relevant authorities in Malaysia will be made in accordance with applicable legal requirements.

10Changes to This Privacy Policy

Cv666 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our privacy practices, evolving legal requirements, or changes in how we handle personal data. Each updated version will state its effective date at the top of the document.

For material and significant changes, cv666 will notify members via in-platform notifications or an email sent to your registered address at least 14 days before the changes take effect. This gives you sufficient time to review the changes and make an informed decision about whether you wish to continue using the cv666 platform.

Your continued use of the cv666 platform after an updated Privacy Policy takes effect will be considered your acceptance of those changes. We encourage you to review this page periodically to stay informed about how we protect your personal data.

11Contact Us About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how cv666 handles your personal data, our Malay-language support team is available 24 hours a day, 7 days a week through the official support channels available within the cv666 platform.

We are committed to responding to all privacy-related enquiries within 3 business days. For formal requests relating to PDPA rights — such as data access, correction, or deletion requests — response timelines are as stated in the Your Rights section above. All privacy-related communications are confidential and accessible only to authorised personnel.

Cv666 values every piece of feedback and every concern you share with us. Input from our members helps us continually improve our privacy practices and ensures that cv666 remains a platform members can fully trust with their personal data.