cv880 Privacy Policy — How We Handle Your Personal Data

1. Information We Collect

cv880 collects personal data through several channels: directly from you when you register or interact with the platform, automatically through your use of cv880.app, and from trusted third-party sources as part of our verification and fraud-prevention processes. The categories of personal data we collect are described below.

1.1 Information You Provide Directly

• Registration data: Full legal name, date of birth, residential address, mobile number, and email address provided when creating your cv880 account;
• Identity verification documents: Copies of your Bangladesh National Identity Card (NID), passport, or other government-issued documents submitted during KYC;
• Payment information: Mobile wallet identifiers (bKash, Nagad, Rocket, Upay) and bank account details used for deposits and withdrawals — note that cv880 does not store full card numbers; card payments are tokenised via our payment processor;
• Communications: Records of your correspondence with cv880 support, including chat transcripts, emails, and feedback submissions;
• Responsible gaming declarations: Self-reported information regarding deposit limits, session restrictions, or self-exclusion requests.

1.2 Information Collected Automatically

• Device and browser data: IP address, device type, operating system, browser type and version, screen resolution, and language preferences;
• Usage data: Pages visited on cv880.app, time and duration of visits, games played, wagers placed, betting history, and navigation paths;
• Session data: Login timestamps, session duration, actions taken during each session, and logout events;
• Cookies and local storage: As described in Section 4 of this Policy.

1.3 Information from Third Parties

• Identity verification providers: Results of automated document checks and database cross-references used to confirm your identity and age;
• Payment processors: Transaction status confirmations, fraud flags, and chargeback notices from bKash, Nagad, Rocket, Upay, and card-processing partners;
• Fraud prevention services: Risk scores and device fingerprint analysis from third-party fraud-detection platforms used to protect all cv880 players.

2. How We Use Your Data

cv880 processes your personal data only for the specific, legitimate purposes set out in the table below. We do not use your data for purposes incompatible with those for which it was originally collected without first obtaining your consent or establishing a new lawful basis for processing.

2.1 Marketing Communications

cv880 will only send you promotional emails or SMS notifications if you have explicitly opted in to receiving such communications during registration or through your account settings. You may withdraw this consent at any time by updating your notification preferences in your account dashboard or by contacting support at [email protected]. Opting out of marketing communications does not affect the delivery of transactional messages related to your account (such as deposit confirmations, withdrawal notices, and security alerts).

2.2 Automated Decision-Making

cv880 uses automated systems for certain decisions, including real-time fraud screening of deposit and withdrawal requests and the automatic application of responsible gaming thresholds where player-set limits have been reached. Where an automated decision significantly affects your account — such as a transaction block or an account flag — you have the right to request human review of that decision by contacting our support team.

3. Data Sharing & Third Parties

cv880 does not sell, rent, or disclose your personal data to unrelated third parties for their own commercial purposes. Data is shared only in the specific, limited circumstances described below, and always subject to appropriate contractual safeguards.

3.1 Service Providers and Data Processors

cv880 engages third-party service providers who process personal data on our behalf and under our instruction. These include:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard network partners — solely for the purpose of executing your financial transactions;
• Identity verification providers: KYC and document authentication services used to verify your identity and confirm your eligibility;
• Game content providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive limited session data necessary to deliver their game content within the cv880 platform;
• IT infrastructure and cloud hosting: Server and database hosting providers whose facilities store cv880 platform data under strict security standards;
• Fraud and risk management platforms: Services that analyse device and behavioural signals to protect cv880 players from fraud and account takeover.

All service providers are contractually required to process your data only for the specified purpose, maintain appropriate security standards, and return or destroy data upon termination of the relationship.

3.2 Legal and Regulatory Disclosures

cv880 may be required to disclose personal data to competent authorities, courts, or regulatory bodies where required by applicable law, a court order, or a lawful government request. In such cases, cv880 will disclose only the minimum data necessary to comply and will, where legally permissible, notify the affected player of the disclosure.

3.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of cv880's business, personal data held by cv880 may be transferred to the acquiring entity as part of that transaction. Affected players will be notified of any such transfer and any material changes to the data controller's identity prior to the transfer taking effect.

4. Cookies & Tracking Technologies

4.1 What Are Cookies?

Cookies are small text files placed on your device by cv880.app when you visit the platform. They allow cv880 to recognise your browser, remember your preferences, maintain your session, and gather analytics about how the platform is used. Similar technologies such as web beacons, pixel tags, and local storage objects may be used for comparable purposes.

4.2 Types of Cookies cv880 Uses

4.3 Managing Cookies

You may control or disable non-essential cookies through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to log in and use cv880. Disabling functional cookies may cause your preferences to reset between sessions. Full instructions for managing cookies in major browsers (Chrome, Firefox, Safari, Edge) are available in each browser's help documentation.

5. Data Security & Storage

cv880 takes data security seriously and implements a layered, defence-in-depth approach to protecting your personal information. Our technical and organisational security measures include:

• Encryption in transit: All data exchanged between your device and cv880.app is encrypted using TLS 1.3 with 256-bit cipher suites. Our SSL certificate is maintained and renewed on a continuous basis;
• Encryption at rest: Personal data stored in cv880's databases is encrypted at rest using AES-256 encryption, including payment records, identity documents, and KYC files;
• Access controls: Access to systems containing personal data is restricted to authorised cv880 personnel via role-based access controls. All access events are logged and reviewed on a regular basis;
• Penetration testing: cv880 engages independent security firms to conduct regular penetration tests and vulnerability assessments of the platform infrastructure;
• Incident response: cv880 maintains a documented data breach response plan. In the event of a confirmed breach that poses a risk to your rights and freedoms, affected players will be notified promptly with details of the incident and the steps cv880 is taking to remediate it.

6. Your Privacy Rights

As a cv880 player, you hold the following rights in relation to the personal data we hold about you. These rights may be subject to certain legal limitations where cv880 is required to retain data to comply with anti-money laundering regulations, responsible gaming obligations, or other applicable legal requirements.

• Right of Access: You may request a copy of all personal data cv880 holds about you, including the purposes for which it is processed and the categories of recipients with whom it has been shared;
• Right to Rectification: If any personal data cv880 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay;
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent and there is no other lawful basis for processing, or where the data has been unlawfully processed. This right does not apply where retention is required by law;
• Right to Restriction: You may request that cv880 restrict the processing of your personal data in certain circumstances, such as while the accuracy of the data is being contested or while an objection to processing is under review;
• Right to Object: You have the right to object to processing carried out on the basis of cv880's legitimate interests, including profiling for fraud prevention and responsible gaming monitoring, where you believe such processing is disproportionate to your circumstances;
• Right to Withdraw Consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred before withdrawal.

To exercise any of the rights listed above, please contact cv880's support team at [email protected] with your full name, registered email address, and a description of the request. cv880 will respond within 30 days of receiving a valid, verifiable request. In cases of complex or high-volume requests, this period may be extended by an additional 60 days with prior notice to you.

7. Data Retention

cv880 retains personal data for no longer than is necessary for the purpose for which it was collected, unless a longer retention period is required or permitted by applicable law. Our standard retention schedules are as follows:

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in a manner that prevents re-identification. Where data is anonymised rather than deleted, it may be retained indefinitely for aggregated statistical purposes.

8. Policy Updates & Contact

8.1 Changes to This Policy

cv880 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — meaning they significantly affect the way cv880 processes your personal data or alter your rights — registered players will be notified via the email address associated with their account at least 14 days before the changes take effect. For non-material changes (such as corrections of typographical errors or clarifications that do not affect the substance of the Policy), the updated Policy will be published on this page with a revised effective date.

Your continued use of cv880 after the effective date of any revised Policy constitutes your acceptance of the updated terms. We encourage you to review this page periodically so you remain informed about how cv880 protects your data.

8.2 Contacting cv880 About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or the way cv880 handles your personal data, please contact our team. All privacy-related enquiries are handled by cv880's data protection function and will receive a response within 5 business days.

Contact us at: [email protected]