cv89 Privacy Policy
At cv89, your privacy is treated as a core operational responsibility, not an afterthought. This Privacy Policy explains in plain English exactly what personal data we collect, why we collect it, how it is used and protected, and what rights you hold as a cv89 account holder in Bangladesh.
Contents
- 1. About This Policy
- 2. Data We Collect
- 3. How We Collect Data
- 4. How We Use Your Data
- 5. Legal Basis
- 6. Data Sharing
- 7. Data Retention
- 8. Cookies & Tracking
- 9. Data Security
- 10. Your Rights
- 11. Children's Privacy
- 12. Third-Party Links
- 13. Policy Updates
- 14. Contact Us
1 About This Policy
This Privacy Policy describes how cv89 ("we", "us", "our") collects, uses, stores, shares, and protects the personal data of individuals ("you", "your", "the Player") who access or use the cv89 platform at cv89.io, including all associated betting, casino, payment, and customer support services.
cv89 is committed to handling all personal data with integrity, transparency, and in compliance with applicable data protection principles. We apply industry-standard security measures to safeguard the personal information entrusted to us by players across Bangladesh, including those based in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar.
This policy should be read together with our Terms & Conditions and Responsible Gaming Policy, both of which are available on the cv89 platform and are incorporated by reference into this document.
2 Data We Collect
cv89 collects the following categories of personal data from players and prospective players. We collect only the data that is necessary and proportionate to the purposes for which it is processed.
| Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, National ID number, passport number, photograph | Account registration, KYC verification, age verification |
| Contact Data | Email address, mobile number, residential address | Account communication, support, verification |
| Financial Data | bKash number, Nagad number, Rocket number, bank account details, transaction history, deposit and withdrawal records | Payment processing, fraud detection, AML compliance |
| Technical Data | IP address, device type, browser type and version, operating system, session tokens, login timestamps | Security monitoring, fraud prevention, platform optimisation |
| Usage Data | Pages visited, games played, bets placed, session duration, clickstream data | Personalisation, responsible gaming monitoring, analytics |
| Communications Data | Support chat transcripts, email correspondence, complaint records | Customer service, dispute resolution, quality assurance |
| Preference Data | Chosen deposit limits, self-exclusion settings, marketing preferences, language and display settings | Responsible gaming tools, account personalisation |
We do not collect sensitive personal data such as racial or ethnic origin, religious beliefs, health records, or biometric data beyond what is strictly required for identity verification purposes.
3 How We Collect Data
cv89 collects personal data through the following channels:
3.1 Direct Collection
Data you provide voluntarily when registering a cv89 account, completing KYC verification, making a deposit or withdrawal, contacting our customer support team, submitting a complaint, or participating in a promotion or survey.
3.2 Automated Collection
Data collected automatically when you access the cv89 platform, including technical and usage data gathered via cookies, server logs, session tracking, and similar technologies. This data is collected from the moment you load any page on cv89.io, regardless of whether you are logged in.
3.3 Third-Party Sources
Data received from third-party identity verification providers (for KYC purposes), payment processors (including bKash, Nagad, and Rocket transaction confirmations), fraud detection services, and publicly available sources where relevant to account verification or security investigations.
4 How We Use Your Data
cv89 processes your personal data for the following purposes. Each purpose is supported by a defined legal basis, as described in Section 5.
- Account Management: Creating, maintaining, verifying, and administering your cv89 account, including processing your registration, verifying your identity and age, and managing your account settings and preferences.
- Service Delivery: Processing your bets, settling winnings, operating casino and slot games, and providing all other services you access through the cv89 platform.
- Payment Processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, bank transfers, Visa, and Mastercard; detecting and preventing fraudulent transactions; and maintaining transaction records.
- Legal Compliance: Fulfilling our obligations under anti-money laundering (AML) requirements, counter-terrorism financing (CTF) obligations, Know Your Customer (KYC) regulations, and any other applicable legal or regulatory requirements.
- Responsible Gaming: Monitoring your account activity to identify signs of problem gambling; enforcing deposit limits, loss limits, session time limits, cooling-off periods, and self-exclusion requests that you have set; and proactively reaching out where our responsible gaming system flags a potential concern.
- Security & Fraud Prevention: Detecting, investigating, and preventing fraudulent activity, account takeovers, multi-accounting, bonus abuse, and any other prohibited conduct as defined in our Terms & Conditions.
- Customer Support: Responding to your enquiries, resolving disputes, processing complaints, and providing technical assistance.
- Platform Improvement: Analysing aggregated and anonymised usage data to improve the cv89 platform, identify bugs, optimise performance, and develop new features and services.
- Marketing Communications: Sending you promotional offers, bonus notifications, and platform updates by email or on-platform notification — but only where you have consented to receive such communications. You may withdraw your marketing consent at any time via your account settings.
5 Legal Basis for Processing
cv89 processes your personal data on the following legal bases:
- Contractual Necessity: Processing required to perform the contract between you and cv89 — including account registration, game operation, bet settlement, and payment processing.
- Legal Obligation: Processing required to comply with applicable law, including KYC identity verification, AML transaction monitoring, and record-keeping obligations.
- Legitimate Interests: Processing necessary for cv89's legitimate interests, such as fraud prevention, platform security, responsible gaming monitoring, and analytics — provided such interests are not overridden by your privacy rights.
- Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.
6 Data Sharing & Disclosure
cv89 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. We share your data only in the following limited and controlled circumstances:
6.1 Service Providers
We engage carefully selected third-party service providers who process data on our behalf under binding data processing agreements. These include payment processors (bKash, Nagad, Rocket, Visa, Mastercard), identity and KYC verification providers, cloud hosting infrastructure providers, customer support platform operators, and analytics service providers. All such providers are contractually required to process your data only for the specific purposes we instruct and to maintain appropriate security standards.
6.2 Game Content Providers
When you play casino or slot games on the cv89 platform, technical session data (such as a session token, game ID, and stake amounts) is shared with the relevant game studio (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, or Ezugi) to enable proper game delivery and result verification. These providers do not receive your full identity data.
6.3 Legal & Regulatory Authorities
cv89 will disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required by applicable law, court order, or where we have a good-faith belief that disclosure is necessary to prevent fraud, money laundering, or other illegal activity. We will notify you of any such disclosure where legally permitted to do so.
6.4 Business Transfers
In the event of a merger, acquisition, restructuring, or sale of all or part of cv89's business assets, your personal data may be transferred to the relevant successor entity. You will be notified of any such transfer and of any material changes to the applicable privacy terms before the transfer takes effect.
7 Data Retention
cv89 retains your personal data for as long as necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by law or legitimate business need. The following general retention periods apply:
- Account and identity data: Retained for the duration of your account relationship with cv89 plus a minimum of five years following account closure, in compliance with standard AML record-keeping requirements.
- Financial transaction records: Retained for a minimum of five years from the date of each transaction.
- Customer support communications: Retained for three years from the date of the last communication in a given support thread.
- Technical and usage data: Retained in identifiable form for up to 24 months, after which it is anonymised or deleted.
- Marketing preference records: Retained for the duration of your account relationship, plus 12 months following account closure, to demonstrate consent compliance.
When retention periods expire, personal data is securely deleted or irreversibly anonymised. You may request early deletion of certain categories of data subject to the conditions described in Section 10.
8 Cookies & Tracking Technologies
cv89 uses cookies and similar tracking technologies on the cv89.io website to deliver and improve the platform experience. A cookie is a small text file placed on your device by your browser when you visit a website.
8.1 Types of Cookies Used
- Strictly Necessary Cookies: Required for the platform to function correctly. These include session authentication tokens, security cookies, and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
- Performance Cookies: Collect aggregated, anonymised data about how players use the cv89 platform (e.g., which pages are most visited, error rates) to help us improve performance and reliability.
- Functional Cookies: Remember your preferences such as display settings and notification preferences to provide a more personalised experience.
- Analytics Cookies: Used to understand user behaviour patterns at an aggregated level for platform development purposes. No individual player is identified through analytics cookies alone.
You may manage your cookie preferences through your browser settings. Blocking strictly necessary cookies will impair your ability to use the cv89 platform. Blocking performance or analytics cookies will not affect your ability to place bets, play games, or manage your account.
9 Data Security
cv89 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Key security measures include:
- SSL/TLS Encryption: All data transmitted between your device and cv89's servers is encrypted using SSL/TLS protocols. You can verify this by the padlock icon in your browser address bar when visiting cv89.io.
- Encrypted Data Storage: Sensitive data including passwords (stored as salted cryptographic hashes), payment method identifiers, and identity documents are stored in encrypted form on secure servers.
- Access Controls: Access to personal data within cv89's systems is restricted on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and regular security training.
- Intrusion Detection: cv89's infrastructure is monitored 24/7 for suspicious activity, including automated intrusion detection systems and regular security audits.
- Two-Factor Authentication: cv89 supports two-factor authentication (2FA) for player accounts to provide an additional layer of protection against unauthorised access. Players are strongly encouraged to enable 2FA via their account security settings.
While cv89 takes all reasonable precautions to protect your data, no internet-based system can be guaranteed to be completely impenetrable. In the event of a data breach that poses a risk to your rights and freedoms, cv89 will notify affected players promptly and take immediate remedial action.
10 Your Privacy Rights
As a cv89 account holder, you hold the following rights with respect to the personal data we hold about you. To exercise any of these rights, contact our support team at [email protected] with the subject line "Privacy Rights Request".
Your Rights Under Our Privacy Policy
cv89 respects your right to control how your personal data is used. The rights listed below are available to all registered players. To exercise any right, email [email protected] with "Privacy Rights Request" in the subject line.
Right of Access
You may request a copy of all personal data cv89 holds about you at any time. We will provide this information within 30 days of a valid request, free of charge for the first request in any 12-month period.
Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. You can update most account details directly via your cv89 account settings page.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to legal retention obligations (e.g., AML record-keeping requirements that legally prevent immediate deletion).
Right to Restrict Processing
You may request that cv89 restricts the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where you have objected to processing pending verification of our legitimate grounds.
Right to Data Portability
Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you may request a copy of your data in a structured, commonly used, machine-readable format for transfer to another service.
Right to Object
You may object at any time to the processing of your personal data for direct marketing purposes. You may also object to processing carried out on the basis of legitimate interests, and cv89 will cease such processing unless we can demonstrate compelling legitimate grounds.
11 Children's Privacy
If cv89 becomes aware that it has inadvertently collected personal data from a person under the age of 21, we will immediately close the associated account, void any balances, and securely delete all personal data associated with that account. If you believe a person under 21 has registered a cv89 account, please contact us immediately at [email protected].
Parents and guardians in Bangladesh are encouraged to use internet filtering tools and parental control software to prevent underage individuals from accessing online gambling platforms. cv89 supports the use of such tools and cooperates with responsible gaming organisations that provide guidance on protecting minors from gambling harm.
12 Third-Party Links
The cv89 platform does not contain links to third-party websites for browsing or shopping purposes. All navigation on cv89.io is internal. However, where game studios (such as Pragmatic Play, Evolution Gaming, or NetEnt) deliver game content through embedded iframes or API integrations, those providers operate under their own privacy policies with respect to technical data exchanged during game sessions.
Similarly, payment providers such as bKash and Nagad operate their own applications and privacy frameworks when you initiate a payment through their platforms. cv89 is not responsible for the privacy practices of third-party payment providers or game studios. We encourage you to review the privacy policies of any third-party service you interact with in connection with your cv89 account.
13 Policy Updates
cv89 may update this Privacy Policy from time to time to reflect changes in our data practices, the services we offer, or applicable legal requirements. When material changes are made — meaning changes that could significantly affect how we use your personal data or the rights available to you — we will provide advance notice via email to your registered address and/or a prominent on-platform notification at least 7 days before the changes take effect.
For non-material changes (such as clarifications, formatting corrections, or updates to contact information), the revised policy will be published on this page with an updated "Last updated" date, and no separate notification will be issued. We encourage you to review this Privacy Policy periodically to stay informed about how cv89 protects your data. Your continued use of the cv89 platform following any update constitutes acceptance of the revised Privacy Policy.
14 Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the way cv89 handles your personal data, please contact our dedicated privacy support team. We aim to acknowledge all privacy-related enquiries within 5 business days and to provide a substantive response within 30 days.
Email: [email protected]
Subject Line for Privacy Requests: "Privacy Rights Request"
Support Hours: 24 hours a day, 7 days a week, including Bangladesh public holidays
For responsible gaming concerns, deposit limit requests, or self-exclusion enquiries, please visit our dedicated Responsible Gaming page in addition to contacting our support team.
cv89 Data Protection at a Glance
End-to-End SSL Encryption
Every page of cv89.io is served over HTTPS with SSL/TLS encryption. All data exchanged between your browser and our servers — including login credentials, payment data, and personal details — is protected in transit at all times.
No Data Selling — Ever
cv89 has never sold, rented, or traded player personal data to advertisers, data brokers, or any other commercial third party. Your data is used exclusively to deliver and improve your cv89 experience. This commitment is permanent and unconditional.
Strict KYC Verification
Our multi-step KYC verification process protects your account from being accessed by fraudsters or impersonators. Identity documents are verified through trusted third-party providers and stored with encryption at rest.
Two-Factor Authentication
cv89 supports two-factor authentication (2FA) via SMS or authenticator app. Enabling 2FA on your account adds a critical second layer of security, ensuring that even a compromised password cannot result in unauthorised account access.
Responsible Gaming Monitoring
cv89's responsible gaming system continuously monitors account activity for behavioural patterns associated with problem gambling. Where a concern is identified, our team may reach out proactively — a process that requires access to certain usage data, handled with the utmost discretion.
Fraud Detection & AML Controls
cv89 operates automated and manual fraud detection systems that monitor transactions and account behaviour in real time. Suspicious activity is flagged immediately for investigation, protecting both individual players and the integrity of the cv89 platform as a whole.
Your Data Is Safe With cv89
Have questions about how your personal data is handled? Our support team is available 24/7. You can also review our full Terms & Conditions, explore our Responsible Gaming tools, or log in to your account to manage your privacy settings directly. For adults aged 21 and above only.
21+ | Gamble responsibly | cv89 is a safe and reliable platform