Privacy Policy for cv334

Introduction

This Privacy Policy ("Policy") describes the data practices of cv334, the online betting and casino platform available at https://cv334.io ("Platform"). It applies to all registered players, visitors, and users of the Platform, regardless of the device or method through which they access our services.

cv334 is committed to protecting the privacy and security of every person who interacts with our Platform. We recognise that the personal data you share with us — including your identity, financial information, and usage behaviour — is sensitive and deserves to be handled with care, transparency, and strict security controls.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which are incorporated by reference into the overall agreement that governs your use of cv334. By creating an account on, or otherwise using, the cv334 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.

Definitions

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

• "Personal Data" — any information that identifies or could reasonably be used to identify a living individual, including but not limited to name, mobile number, email address, date of birth, payment account details, and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, deletion, or anonymisation.
• "Data Controller" — cv334, the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" — any third party that processes Personal Data on behalf of cv334, such as payment service providers or identity verification partners.
• "Cookies" — small text files placed on your device by the cv334 Platform to support functionality, remember preferences, and collect analytics data.
• "KYC" — Know Your Customer; the identity and age verification process required for regulated financial and gaming services.
• "BST" — Bangladesh Standard Time, UTC+6, the reference timezone used across the cv334 Platform.

Data We Collect

cv334 collects the following categories of personal and non-personal data in connection with the operation of the Platform and the delivery of our services:

3.1 Identity and Registration Data

• Full legal name (first name and surname)
• Date of birth (for age verification purposes — players must be 21 or older)
• Gender (where voluntarily provided)
• Nationality or country of residence
• Government-issued identification document number (National ID, passport, or driving licence) where KYC verification is requested

3.2 Contact Data

• Mobile phone number (primary contact method, used for account authentication and support)
• Email address (used for account communications, promotional messages where consent is given, and security alerts)
• Physical address (collected for enhanced KYC purposes where required)

3.3 Financial and Payment Data

• bKash account number associated with your registered mobile wallet
• Nagad account number associated with your registered mobile wallet
• Rocket (Dutch-Bangla Bank) account number where used for transactions
• Upay account details where used for deposits
• Transaction history: deposit amounts, withdrawal amounts, dates, reference numbers, and payment statuses

3.4 Gaming and Betting Activity Data

• Bet and wager history including game type, stake, odds, outcome, and settlement details
• Session duration, login and logout timestamps in BST
• Bonus and promotion usage history
• Responsible gaming settings you have configured (deposit limits, cooling-off periods, self-exclusion status)

3.5 Technical and Device Data

• IP address at the time of each login and session
• Device type, operating system version, and browser type and version
• Mobile device model and unique device identifier (where applicable)
• Geolocation data derived from IP address (country and city level only; precise GPS location is not collected)
• Referring URL (the page from which you arrived at cv334)

How We Collect Your Data

cv334 collects your personal data through the following channels and mechanisms:

4.1 Directly From You

The majority of the personal data we hold is provided directly by you during the account registration process, during KYC verification, when you make deposits or request withdrawals, when you contact our support team, and when you respond to promotional communications or surveys.

4.2 Automatically Through Platform Usage

When you access and use the cv334 Platform, we automatically collect technical and behavioural data including your IP address, device information, session timestamps, and in-platform activity through server logs, cookies, and similar tracking technologies. This collection occurs regardless of whether you are logged into an account.

4.3 From Third-Party Service Providers

We may receive data about you from third parties who support the operation of the Platform, including:

• Payment processors (bKash, Nagad, Rocket, Upay) who confirm transaction statuses and account ownership
• Identity verification providers who return the results of document verification checks
• Fraud prevention and anti-money laundering screening services
• Analytics providers who aggregate and report on Platform usage patterns

How We Use Your Data

cv334 uses your personal data for the following specific purposes. We do not use your data for any purpose that is incompatible with the purposes listed below without first obtaining your consent or establishing a separate legal basis.

Legal Basis for Processing

cv334 processes your personal data only where a valid legal basis exists. The legal bases we rely upon are as follows:

• Contractual Necessity: Processing that is necessary to perform the contract between cv334 and you as a registered player, including account creation, payment processing, and game delivery.
• Legal Obligation: Processing required to comply with applicable laws, including age verification requirements, anti-money laundering obligations, and responsible gaming regulations.
• Legitimate Interests: Processing undertaken to pursue the legitimate business interests of cv334, such as fraud prevention, platform security, network monitoring, and general service improvement — provided that those interests are not overridden by your fundamental rights and privacy interests.
• Consent: Processing for purposes beyond those listed above, such as sending you promotional communications, personalising offers based on your gaming history, or sharing anonymised data with research partners — where we rely on consent, you may withdraw it at any time by contacting us at [email protected].

Data Sharing and Disclosure

cv334 does not sell or rent your personal data to third parties. We share your data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

7.1 Payment Service Providers

When you make a deposit or request a withdrawal, we share the minimum necessary personal and payment account data with the relevant mobile wallet provider (bKash, Nagad, Rocket, or Upay) to process the transaction. These providers operate under their own privacy policies and are bound by applicable financial services regulations in Bangladesh.

7.2 Identity Verification Providers

Where KYC verification is required, we may share your identity documents and personal details with third-party verification service providers for the purpose of confirming your identity, age, and — where required — source of funds. These providers are contractually bound to use your data solely for verification purposes.

7.3 Fraud and Security Service Providers

cv334 works with third-party fraud prevention and cybersecurity service providers who may process your technical and behavioural data to identify suspicious activity, prevent unauthorised account access, and detect financial crime. Data shared with these providers is used solely for protective purposes.

7.4 Game Content Providers

Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive session tokens and anonymised player identifiers necessary to deliver their gaming content through the cv334 Platform. These providers do not receive your full personal profile or payment data.

7.5 Legal and Regulatory Disclosure

cv334 may disclose your personal data to law enforcement agencies, regulatory bodies, courts, or other public authorities where required to do so by applicable law, court order, or regulatory request. We will, where permitted by law, notify you of any such disclosure.

Cookies and Tracking Technologies

The cv334 Platform uses cookies and similar tracking technologies to support platform functionality, remember your preferences, and collect aggregated analytics data about how players interact with the site. The categories of cookies we use are as follows:

• Essential Cookies: These are strictly necessary for the Platform to function. They manage your login session, maintain your cart and game state, and support security features. These cookies cannot be disabled without preventing access to core Platform features.
• Functional Cookies: These cookies remember your preferences such as display language, time zone display settings, and responsible gaming notification preferences, allowing the Platform to deliver a more personalised experience.
• Analytics Cookies: We use anonymised analytics cookies to understand how visitors navigate the Platform, which pages receive the most visits, and where technical issues occur. This data is collected in aggregated form and does not identify individual players.
• Security Cookies: These cookies support fraud detection functions, helping us identify unusual login patterns, simultaneous session attempts from different locations, and other indicators of unauthorised account access.

Most web browsers allow you to manage cookie preferences through the browser settings menu. You may disable non-essential cookies at any time; however, disabling essential or security cookies may impair your ability to access certain features of the cv334 Platform.

Data Retention

cv334 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, or for such longer period as is required or permitted by applicable law. Our general retention periods are as follows:

• Active Account Data: Retained for the full duration of your registered account and for a period of five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction to support financial audit trails and regulatory compliance obligations.
• KYC and Identity Verification Documents: Retained for five (5) years following the completion of the verification process or account closure, whichever is later.
• Customer Support Communications: Retained for three (3) years from the date of the interaction, or longer where the communication relates to an ongoing dispute or investigation.
• Marketing Preferences and Consent Records: Retained for the lifetime of your account and for two (2) years following account closure, to evidence the basis of our marketing communications.
• Technical Logs (IP addresses, device data): Retained for twelve (12) months from the date of collection, after which they are deleted or anonymised.

When data reaches the end of its retention period, it is securely deleted or rendered permanently anonymous so that it can no longer be associated with any individual player.

Data Security

cv334 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security framework includes:

• Transport Encryption: All data transmitted between your device and cv334 servers is encrypted using TLS 1.3 (256-bit AES encryption), preventing interception by third parties during transmission.
• Data at Rest Encryption: Sensitive personal and financial data stored on cv334 servers is encrypted at rest using industry-standard encryption protocols.
• Access Controls: Access to player data within cv334's internal systems is restricted on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and regular security training.
• Two-Factor Authentication: Account access is protected by two-factor authentication options to reduce the risk of unauthorised login.
• Intrusion Detection: Our platform infrastructure is monitored 24/7 by automated security systems designed to detect and respond to anomalous access patterns, distributed denial-of-service attacks, and other security threats.
• Penetration Testing: cv334 conducts periodic security assessments and penetration tests to identify and remediate vulnerabilities before they can be exploited.

Despite these measures, no internet-based platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and interests, cv334 will notify affected players as promptly as possible and take all reasonable steps to contain and remediate the breach.

Your Privacy Rights

As a player on the cv334 Platform, you have the following rights in relation to your personal data. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request" and include your registered account username and a description of the right you wish to exercise. cv334 will respond to all verified requests within 30 calendar days.

• Right of Access: You have the right to request a copy of all personal data that cv334 holds about you, along with information about how that data is processed and shared.
• Right to Rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it without undue delay.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where you object to processing based on legitimate interests. This right is subject to cv334's legal obligations to retain certain records.
• Right to Restriction of Processing: In certain circumstances, you may request that cv334 restrict its processing of your personal data — for example, while the accuracy of data is under dispute, or while an objection to legitimate interests processing is being considered.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object at any time to the processing of your personal data where cv334 relies on legitimate interests as the legal basis for processing, including profiling based on those interests. You also have an absolute right to object to your data being used for direct marketing purposes.
• Right to Withdraw Consent: Where cv334 processes your personal data on the basis of your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

Children and Minors

The cv334 Platform is strictly intended for adults aged 21 years and above. cv334 does not knowingly collect personal data from individuals under the age of 21. If you are under 21 years of age, you must not use the cv334 Platform or provide any personal data to us.

If cv334 becomes aware that personal data has been collected from a person under the age of 21 without verified parental or guardian consent, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe that your child has provided personal data to cv334, please contact us immediately at [email protected].

Third-Party Links

The cv334 Platform may, from time to time, contain references to third-party websites or services for informational purposes. cv334 has no control over the content, privacy practices, or data collection activities of any third-party website. This Privacy Policy applies solely to data collected and processed by cv334 through the cv334 Platform and does not extend to third-party platforms.

We encourage you to review the privacy policies of any third-party websites you visit through links referenced on the cv334 Platform before submitting any personal information to those sites.

Changes to This Privacy Policy

cv334 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When we make material changes to this Policy, we will notify registered players by displaying a prominent notice on the cv334 Platform and, where practicable, by sending a notification to your registered contact details.

The revised Policy will take effect seven (7) calendar days following the notification date, unless a shorter period is required by applicable law. The "Last Updated" date at the top of this document will always reflect the date of the most recent revision. Your continued use of the cv334 Platform after the effective date of any revision constitutes your acceptance of the updated Privacy Policy.

If you do not agree to the revised Privacy Policy, you must stop using the Platform and may request account closure in accordance with our Terms & Conditions.

Contact and Data Enquiries

If you have any questions, concerns, or complaints about this Privacy Policy or about how cv334 handles your personal data, please contact our support team using the details below. We are available 24 hours a day, 7 days a week, in Bangladesh Standard Time (BST, UTC+6).

• Email (plain text — not a link): [email protected]
• Live Chat: Available directly on the cv334 Platform, 24/7
• WhatsApp: +880 1700 000 334
• Service Region: Serving players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and all of Bangladesh

When contacting us about a data rights matter, please include your registered account username and a clear description of your request so that we can process it efficiently. We aim to acknowledge all data enquiries within 48 hours and to provide a full response within 30 calendar days of receiving a verified request.