1. Home
  2. Privacy Policy
🔒 Official Privacy Document

Cv666 Privacy Policy – Data Protection & Player Privacy in Malaysia

Your privacy is our priority. This document transparently explains how cv666 collects, uses, stores and protects your personal information in accordance with Personal Data Protection Act 2010 (PDPA) Malaysia. Please read this carefully before using the cv666 platform.

Updated: 1 January 2026 Malay (ms-MY) PDPA 2010 Compliance
 Document Contents
12 Sections of Privacy Policy
Types of Data Collected
Purpose of Data Use
Your Rights as a Player
Cookie & Tracking Policy
Data Security & Storage
By using the cv666 platform, you agree to this Privacy Policy in its entirety.
0
SSL Encryption Bits
0
Data Sold to Third Parties
0
Year of Malaysia's PDPA
0
Security Monitoring Hours
0
Data Request Processing Days

Cv666's Privacy Commitment to Malaysian Players

Six core principles that shape our approach to protecting every member's personal data.

Industry-Grade Encryption
All personal data and financial transaction information on cv666 is protected by 256-bit SSL encryption technology — the same standard used by Malaysia's leading banking institutions. Whether you deposit via Touch 'n Go or GrabPay, every piece of information is transmitted through a fully secure channel.
Full PDPA 2010 Compliance
cv666 operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). This means every collection, processing and use of your personal data is carried out in accordance with applicable Malaysian law — your rights as a data subject are protected at all times.
No Sale of Data to Third Parties
cv666 has never sold, rented or commercialised players' personal data to any third party for marketing or advertising purposes, and never will. Your information belongs to you — we use it only for the purposes you have consented to and those stated in this Privacy Policy.
Your Data, Your Control
As a cv666 member, you have the full right to access, correct, download or request the deletion of your personal data at any time. The process can be initiated through your account settings or by contacting the cv666 privacy team at support@cv666.express — requests will be processed within 30 days.
Data Minimisation Principle
cv666 collects only the data genuinely required for the stated purposes. We do not gather excessive or irrelevant information. Every piece of data we request during registration or the KYC process has a clearly defined purpose, which is explained to you before collection takes place.
Data Breach Notification
In the event of any security breach involving your personal data, cv666 is committed to notifying you within the timeframe stipulated by Malaysia's PDPA. We will also notify the relevant authorities and take immediate remedial action to protect your interests.
Contents
1. Introduction

Welcome to the Privacy Policy cv666. The cv666 platform operates at https://cv666.express and provides online entertainment services including Sports Betting, Live Casino, lottery, slots and virtual sports, exclusively for Malaysian players. As a responsible platform operator, cv666 takes the privacy and security of every member's personal data seriously.

This Privacy Policy clearly and transparently explains how cv666 handles the personal information you share with us when you use the platform, register an account, make deposits via Touch 'n Go, GrabPay, DuitNow or FPX, place bets on Malaysia Super League or EPL football matches, and in all other interactions with cv666 services.

By registering a cv666 account or continuing to use this platform after the effective date of this Privacy Policy, you confirm that you have read, understood and agreed to all terms set out in this document. If you do not agree with any aspect of this Privacy Policy, you are entitled to stop using the cv666 platform.

This Privacy Policy forms part of the cv666 Terms & Conditions and is to be read in conjunction with them. Any conflict between the two documents shall be resolved in favour of the interpretation that best protects the interests of the user.
2. Personal Data Collected by cv666

cv666 collects your personal data through various channels whenever you interact with our platform. Below is a full breakdown of the data categories we collect:

Data Categories Example Information How It Is Collected
Identity Data Full name, MyKad/Passport number, date of birth, gender RegistrationKYC
Contact Data Email address, phone number, residential address RegistrationProfile
Financial Data Deposit records, withdrawal records, MYR transaction history Transactions
Gaming Data Betting history, game types played, session times Platform Activity
Technical Data IP address, device type, web browser, operating system AutomaticCookies
Communication Data Live chat records, support emails, player feedback Customer Support
Verification Data MyKad copy, bank statements, proof of address KYC

Cv666 does not collect sensitive data such as health information, religious beliefs or political views unless there is a specific legal requirement to do so. Any request for additional data beyond the above list will be accompanied by a clear explanation of its purpose beforehand.

3. Purposes for Using Personal Data

cv666 using personal data collected solely for the legitimate purposes disclosed to you. The primary purposes for which we use your data are as follows:

  • Account Management: Registering your account, verifying your identity, enabling secure login, and managing your user profile on the cv666 platform
  • Transaction Processing: Processing deposits and withdrawals in Malaysian Ringgit (RM) securely and accurately via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow and FPX
  • Service Delivery: Enabling you to access all features of the cv666 platform, including Sports Betting, Live Casino, lottery, slots and virtual sports
  • Security & Fraud Prevention: Identifying and preventing fraudulent activity, money laundering, unauthorised access and misuse of the cv666 platform
  • Legal Compliance: To fulfil KYC (Know Your Customer), PDPA 2010 and other applicable legal compliance obligations in Malaysia
  • Customer Support: Responding to enquiries, resolving technical and financial issues, and delivering support in Bahasa Melayu via live chat and email
  • Platform Enhancement: Analysing aggregated usage patterns (not individual behaviour) to improve cv666's performance, user interface, and new features
  • Marketing Communications: Sending you information about cv666 promotions, bonuses and the latest offers — you may opt out of marketing communications at any time
  • Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and provide appropriate support to players who need assistance
cv666 will not use your data for any purpose beyond those stated above without first obtaining your additional consent.
4. Legal Basis for Data Processing

Under Malaysia's Personal Data Protection Act 2010 (PDPA), cv666 processing your personal data only on a valid legal basis. Those bases are as follows:

  • Consent: You provide explicit consent when registering a cv666 account, including consent for the collection and processing of your data for the stated purposes. You have the right to withdraw this consent at any time, although doing so may affect your ability to use certain cv666 services.
  • Contract Execution: Certain processing is necessary for cv666 to fulfil its contractual obligations to you — such as processing deposits and withdrawals, crediting winnings, and managing your account.
  • Legitimate Interest: cv666 has a legitimate business interest in processing data for platform security, fraud prevention, and service improvement purposes — provided those interests do not override your fundamental rights and freedoms.
  • Legal Obligations: Certain data processing — particularly in relation to KYC and anti-money laundering — is mandatory under Malaysian law and cannot be avoided without cv666 breaching its compliance obligations.
5. Sharing Data with Third Parties

cv666 does not sell or rent players' personal data to any third party for commercial purposes. However, there are limited circumstances in which cv666 may share your personal data with certain parties:

  • Payment Service Providers: Digital wallet and online banking providers such as Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow and FPX banks that process your financial transactions — only the data necessary to complete the transaction will be shared.
  • Game Software Providers: Third-party software companies that provide casino games, slots, and Virtual Sports for the cv666 platform — data is shared only to the extent necessary to deliver those games properly.
  • Legal Authority: Law enforcement agencies, courts, or Malaysian regulatory bodies issuing a legally valid request or order — cv666 will comply with such requests upon verification of their legitimacy.
  • Technical Service Providers: Companies that provide technical services to cv666, such as server hosting, analytics and security infrastructure — they are bound by strict confidentiality agreements and may only use data for the purposes specified.
  • Business Transfer: Should cv666 be involved in a merger, acquisition, or sale of business assets, player data may be transferred to the new entity — you will be notified in advance and given the option to opt out if applicable.
In all data-sharing situations, cv666 ensures that the receiving party is bound by confidentiality and data protection obligations equivalent to or exceeding the standards we ourselves uphold.
6. Data Security

cv666 invests heavily in security infrastructure to ensure that players' personal data is always protected against unauthorised access, loss, misuse and destruction. The security measures we have in place include:

  • 256-bit SSL Encryption: All communications between your device and cv666's servers are encrypted using the latest Transport Layer Security (TLS) protocol — including all data transmitted during login, deposits, and withdrawals.
  • Layered Access Control: Access to players' personal data within cv666's internal systems is restricted on a need-to-know basis — only staff who require access to perform their specific job functions are permitted.
  • Continuous Monitoring: cv666's cybersecurity monitoring system operates 24 hours a day, 7 days a week to detect and respond to any threats or suspicious activity in real time.
  • Regular Security Audits: cv666's security infrastructure and data handling practices are audited regularly by independent cybersecurity specialists to identify and address any vulnerabilities.
  • Secure Data Backup: Critical data is regularly backed up to separate server locations secured to the same strict standard as our primary servers.
  • Staff Training: All cv666 staff who handle players' personal data undergo ongoing training on data security best practices and PDPA obligations.

While cv666 takes all reasonable steps to protect your data, no security system can guarantee 100% absolute protection against every cyber threat. You also play an important role in keeping your account secure by using a strong password and not sharing it with anyone.

7. Data Retention Period

cv666 does not retain your personal data for longer than is necessary for the purposes stated in this Privacy Policy, or to fulfil applicable legal obligations. The following are retention period guidelines for key data categories:

📝
Active Account Data
For as long as your account remains active on the cv666 platform. Identity data and contact information are retained throughout the duration of your membership to ensure continued and secure service.
💳
Financial Transaction Records
A minimum of 7 years from the date of the transaction, in accordance with Malaysia's accounting and anti-money laundering legal requirements.
🎮
Game & Betting History
A minimum of 5 years from the date of the bet or game, for the purposes of dispute resolution and game fairness audits.
🔍
KYC Documents
A minimum of 5 years after account closure or after the final resolution of any investigation related to that account.
💬
Customer Support Records
2 years after the resolution of a support case, for reference and the continuous improvement of cv666's service quality.
🍪
Cookie & Analytics Data
Depending on the type of cookie — ranging from a single session (session cookies) to a maximum of 2 years (preference and analytics cookies).
Once the specified retention period has elapsed, your personal data will be securely deleted or anonymised so that it can no longer be linked to your identity.
8. Your Rights as a Data Subject

Under Malaysia's PDPA 2010, cv666 recognises and respects the following rights you hold in relation to your personal data:

Right of Access
You may request a copy of the personal data cv666 holds about you at any time. Requests will be processed within 30 days.
Right to Rectification
You have the right to request correction of any personal data that is inaccurate or incomplete, either through your account settings or by contacting cv666 support.
Right to Erasure
You may request the deletion of your personal data. This right is subject to legal retention obligations that may prevent complete erasure.
Right to Object
You have the right to object to the processing of your personal data for specific purposes such as direct marketing — cv666 will act on such requests immediately.
Right to Data Portability
You may request your personal data in a machine-readable format (such as JSON or CSV) for transfer to another party should you wish to do so.
Right to Restrict Processing
You may request that cv666 restrict the processing of your data in certain circumstances — for example, while you are disputing the accuracy of that data.

To exercise any of the rights above, please contact the cv666 privacy team at support@cv666.express by stating the right you wish to exercise and providing the information needed to verify your identity. All requests will be acknowledged within 5 business days and resolved within 30 days.

9. Cookie Policy

cv666 uses cookies and similar tracking technologies to enhance your experience on the platform. Below are the types of cookies we use:

Essential Cookies Required
These cookies are essential for the basic functions of the cv666 platform — including login authentication, session security, and the processing of deposit and withdrawal transactions. Without them, the cv666 platform cannot function properly. These cookies cannot be disabled.
Analytics Cookies Options
These cookies help cv666 understand how players use the platform — the most visited pages, time spent and navigation patterns. This data is collected in aggregate and used solely to improve the user experience on cv666. You may opt out.
Preference Cookies Options
These cookies store your preferences on the cv666 platform — such as your selected language, display settings and favourite game choices — so you do not have to reconfigure them each time you log in. They can be disabled, but doing so may affect your experience.

You can manage or delete cookies at any time through your web browser settings. Please note that deleting essential cookies may affect the functionality of the cv666 platform. Any new cookies set by your browser after deletion will replace the previous ones.

10. Cross-Border Data Transfers

In the course of its operations, cv666 may need to transfer players' personal data to servers or service providers located outside Malaysia. This includes third-party game software providers and cloud hosting infrastructure that may operate from international locations.

In all cases of cross-border data transfers, cv666 ensures that:

  • The receiving country or territory maintains a level of data protection equivalent to that of Malaysia, or
  • A suitable data transfer agreement has been executed with the receiving party, contractually obligating them to protect data in accordance with the standards cv666 adheres to, or
  • The transfer is necessary for the performance of a contract between you and cv666, or for an important public interest purpose
cv666 will not transfer your personal data to any country that does not provide an adequate level of data protection without first obtaining your explicit consent or putting appropriate contractual safeguards in place.
11. Children & Privacy

Platform cv666 is not suitable for, and is not permitted to be used by, individuals under the age of 18. cv666 does not knowingly collect personal data from minors. Should we discover that we have inadvertently collected data from someone under 18 years of age, we will take immediate steps to delete that data and close the associated account.

If you as a parent or guardian believe that your child under the age of 18 has registered an account or provided information to cv666, please contact us immediately at support@cv666.express so that we can take the appropriate action without delay.

cv666 applies age verification procedures at registration and during the KYC process to ensure all members meet the minimum age requirement of 18 years. Any registration attempts by minors will be reported to the relevant authorities where necessary.
12. Contact Us & Privacy Policy Changes

cv666 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data handling practices, new legal requirements, or improvements to the platform's services. Any material changes will be communicated to you via an in-platform notification or by email to your registered address.

Your continued use of the cv666 platform after any updates to this Privacy Policy are published will be taken as your acceptance of the revised version. We encourage you to review this page periodically to stay informed about how cv666 protects your information.

For any enquiries, concerns, or requests relating to this Privacy Policy or the handling of your personal data by cv666, please contact our Privacy Officer at:

  • Email: support@cv666.express (please include "Privacy Request" in the email subject line)
  • Live Chat: Available 24 hours a day via the cv666 platform
  • Response Time: Acknowledgement within 5 business days, resolution within 30 days
If you are not satisfied with how cv666 has handled your privacy complaint, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia or the relevant data protection authority under the provisions of PDPA 2010.

Why Your Privacy Matters to cv666

When you choose cv666 as your online entertainment platform, you trust us not only to deliver an enjoyable gaming experience — but also to handle your personal information with care and responsibility. That trust is something we take seriously. At cv666, privacy is not simply a legal obligation to fulfil — it is a core value that shapes how we operate every day.

Consider a typical scenario: you deposit via Touch 'n Go eWallet to place a bet on this weekend's Liga Super Malaysia football match. In what seems like a straightforward process, information such as your phone number, MYR transaction records, betting patterns, and device details are all involved. cv666 treats every piece of this information as a trust placed in us — not merely data to be exploited for commercial gain.

This transparent and comprehensive Privacy Policy is part of cv666's commitment to Malaysian players. We recognise that many Malaysian players have not always had clear visibility into how their data is handled by online entertainment platforms. We want to change that norm by setting a higher standard — one where every player knows exactly what happens to their information, what it is used for, how long it is retained, and who can access it.

Compliance cv666 Our commitment to the Personal Data Protection Act 2010 (PDPA) goes beyond paper compliance. We invest in ongoing staff training, regular independent security audits, and the latest security technologies to ensure that our PDPA compliance is meaningful in day-to-day practice. The 256-bit SSL encryption that protects every one of your transactions is one clear example of this commitment.

One aspect we take particular pride in is our "data minimisation" approach. cv666 only requesting information that is genuinely necessary to deliver the services you want. We do not collect excessive personal data, we do not track you outside the cv666 platform for advertising purposes, and we do not sell user profiles to third-party advertisers. This sets us apart from many other online platforms that routinely treat user data as a commercial asset.

For players who are active on cv666 — whether enjoying Live Casino every evening, placing bets on badminton matches, or purchasing weekly 4D lottery tickets — our platform retains your gaming history and transaction records for legitimate purposes such as dispute resolution, game fairness audits, and responsible gaming support. This data will not be used to unfairly influence the odds offered to you or for any purpose that works against your interests as a player.

Finally, we want to reaffirm that your privacy rights at cv666 are real, enforceable rights. If you want to know what data we hold about you, wish to correct inaccurate information, or would like to fully delete your account and all associated data — our team at support@cv666.express is ready to help. We are committed to processing your requests within the stipulated timeframe and with the utmost respect and professionalism. Your trust is our most valuable asset, and we will continue to work every day to deserve it.

FAQ – cv666 Privacy Policy

Answers to the most frequently asked questions about privacy and data protection at cv666.

No. cv666 has never sold, rented, or commercialised your personal data to any third party for marketing, advertising, or any other commercial purpose — and never will. Your data is shared only in the limited situations set out in our Privacy Policy — such as with payment providers (Touch 'n Go, GrabPay, DuitNow, etc.) to process your transactions, or with legal authorities in response to a valid request. In all such cases, only the minimum data necessary is shared.

You may exercise your right to data deletion by emailing support@cv666.express with the subject line "Data Deletion Request". Please include your full name and the email address registered to your cv666 account. We will verify your identity and process the request within 30 days. Please note that some data may not be fully deletable where a legal obligation to retain it exists — such as financial transaction records, which must be kept for a minimum of 7 years under Malaysian law. In such cases, we will inform you of what data must still be retained and the reasons for doing so.

When you register a cv666 account, we collect the basic information needed to create and manage your account — including your full name, email address, phone number, date of birth, and preferred password. Additional information such as a MyKad copy or other identity verification documents is only required during the KYC process, which applies when you wish to make withdrawals above a certain limit or when our system flags the need for further verification. We do not request unnecessary information during initial registration.

Yes. You may unsubscribe from all cv666 marketing communications at any time in one of two ways — either by clicking the "Unsubscribe" link found at the bottom of any marketing email we send, or by updating your communication preferences in your cv666 account settings. Unsubscribe requests will be processed within 5 business days. Please note that opting out of marketing does not mean you will stop receiving important operational communications such as transaction confirmations, account security notifications, and updates relating to changes in cv666's terms or policies.

When you close your cv666 account, we will delete or deactivate your personal data from our active systems within a reasonable timeframe. However, certain data may need to be retained in our archival records for a specified period in accordance with legal obligations — for example, financial transaction records are kept for a minimum of 7 years, and KYC documents are retained for a minimum of 5 years after account closure. This data is secured to the same strict standard as active account data and may only be accessed for purposes permitted by law. Once the mandatory retention period expires, the data will be permanently deleted or fully anonymised.
View All FAQs →
🔒

Your Data Is Safe with cv666

Join over 500,000 Malaysian players who have entrusted their privacy to cv666. Our platform is built on a foundation of security, transparency, and PDPA compliance — so you can play with peace of mind, free from concerns about the safety of your personal data.

Register a Free Account Log In

 256-bit SSL Encryption · PDPA 2010 Compliance · 24-Hour Support in Bahasa Malaysia

Bahasa Melayu