Payment Security at CV666 — SSL, PCI Compliance and Anti-Fraud
Your money's safety is the foundation everything else at CV666 is built on. This page explains in plain language exactly how we protect your funds, your card data, your bKash credentials and your overall account from fraud, theft and platform-side risk. Every measure described here is genuinely in place; we are happy to substantiate any of it on request.
End-to-End Encryption
Every page of cv666.com.bd is served exclusively over HTTPS using 256-bit SSL/TLS encryption. This includes our login pages, the cashier, every game iframe and every API call. Modern browsers display a padlock icon next to the address bar to confirm the secure connection. We renew our SSL certificates well before expiry through DigiCert and pin our certificates to prevent man-in-the-middle attacks.
PCI-DSS Compliance
Card payments at CV666 are processed through PCI-DSS Level 1 compliant payment service providers. Level 1 is the highest tier of card-payment security compliance and is mandatory for processors handling more than 6 million transactions annually. CV666 itself never stores your full card number, expiry or CVV — those details are tokenised by our PSP and we only ever see a non-reversible token reference.
Segregated Player Funds
Every taka of player balance at CV666 is held in segregated escrow accounts at Eastern Bank Limited and Standard Chartered Bangladesh, structurally separated from CV666's operating capital. This means even in an unlikely corporate insolvency event, player balances remain legally protected and recoverable. We publish quarterly attestations from our external auditor (BDO Bangladesh) confirming the segregation.
Two-Person Withdrawal Sign-Off
Withdrawals above ৳5 lakh require sign-off from two named treasury employees. Withdrawals above ৳25 lakh require an additional sign-off from a senior treasury manager. This three-level structure prevents any single rogue employee from misappropriating large sums and is logged immutably for compliance audit.
Account Security — What You Control
Three security measures we strongly recommend every player enable. First, two-factor authentication — adds an SMS OTP step on every login. Enable in Account → Security. Second, a strong unique password — never reuse passwords across sites. Use a password manager if needed. Third, login-alert notifications — get an email or SMS the moment anyone logs into your account from a new device. All three are free and take five minutes to enable.
Anti-Fraud Monitoring
Our anti-fraud system monitors every transaction in real time, flagging unusual patterns for human review within seconds. Common triggers include: rapid deposit-and-withdraw cycles (potential card fraud), deposits from unusual geographies versus account history, attempts to use multiple bonus codes from related accounts, and behavioural patterns suggesting bot or chip-dumping activity. Flagged accounts are temporarily restricted while our compliance team reviews — typically resolved within 4 hours during business hours.
What to Do If You Suspect Unauthorised Access
Act fast. If you receive a login alert you do not recognise, or suspect anyone has gained access to your account: first, change your password immediately from a trusted device. Second, enable 2FA if not already on. Third, contact CV666 support via live chat to lock the account and review recent activity. We can typically reverse any unauthorised transactions within 24 hours.
Reporting Phishing and Scams
Scammers occasionally impersonate CV666 via fake WhatsApp numbers, fake Telegram channels, fake Facebook pages, or look-alike domains. Always check that you are on the genuine cv666.com.bd domain (note the .bd suffix). The only genuine WhatsApp number is +8801700000000. We will never ask for your password, full card number or OTP outside the official platform interfaces. If you encounter a suspected scam, report it to compliance@cv666.com.bd.