cv88 Privacy
Policy & Data Protection

01 Introduction

This Privacy Policy ("Policy") describes how cv88, the operator of the online gaming and sports betting platform at cv88.lat ("cv88", "we", "us", "our"), collects, uses, stores, discloses, and protects the personal data of players and visitors who access our platform. This Policy applies to all individuals who register for a cv88 account, browse the cv88 website, contact our support team, or otherwise interact with our services from anywhere in Bangladesh, including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar.

By registering for a cv88 account or using any of our services, you confirm that you have read, understood, and agree to the terms of this Privacy Policy. This Policy should be read together with our Terms & Conditions and our Responsible Gaming policy, both of which form part of the complete agreement governing your relationship with cv88.

We are committed to handling your personal data with transparency, integrity, and respect. We do not sell, rent, or commercially trade your personal data to any third party for that party's own marketing purposes. Where we share data, we do so only as described in this Policy and solely for the purposes of delivering and improving the cv88 service.

02 Data Controller

cv88 acts as the data controller in respect of all personal data collected through the cv88.lat platform. As the data controller, cv88 determines the purposes for which personal data is processed and the means by which that processing is carried out.

For all data protection enquiries, requests to exercise your rights, or concerns about how your personal data is handled, you may contact us at:

Contact: support at cv88.lat

Our support team is available 24 hours a day, 7 days a week, and includes specialists with knowledge of the Bangladeshi market and applicable data protection considerations. All data protection requests will be acknowledged within 5 business days and resolved within 30 calendar days wherever practically possible.

03 Data We Collect

cv88 collects personal data through several routes: directly from you when you register, deposit, withdraw, or contact us; automatically through your use of the platform; and, in limited circumstances, from trusted third-party partners such as identity verification providers.

The categories of personal data we collect include, but are not limited to:

• Identity Data: Your full legal name, date of birth, nationality, and government-issued identification numbers such as your Bangladesh National ID (NID) number, passport number, or driving licence number.
• Contact Data: Your mobile phone number, email address, and residential address, including city and district within Bangladesh.
• Financial Data: Mobile financial service identifiers (bKash number, Nagad number, Rocket number, Upay ID), bank account references, card details where applicable, deposit and withdrawal history, and transaction amounts in Bangladeshi Taka (৳).
• Technical Data: Your IP address, device identifiers, browser type and version, operating system, referral source, and log data generated during your sessions on the cv88 platform.
• Gaming Activity Data: Details of bets placed, games accessed, session durations, winnings, losses, bonus usage, and responsible gaming tool activations.
• Communications Data: Records of your interactions with cv88 support agents, including live chat transcripts, email correspondence, and formal complaint records.
• Marketing Preference Data: Your preferences regarding promotional communications, including opt-in and opt-out records for SMS and email campaigns.

04 How We Use Your Data

cv88 uses your personal data for a range of clearly defined purposes. We do not use your data for any purpose that is incompatible with the purposes listed below without first obtaining your consent or establishing an alternative legal basis.

• Account Registration and Management: To create, maintain, and administer your cv88 player account, including storing your preferences and managing your account settings.
• Identity Verification (KYC): To verify your identity, confirm your age (21+), and comply with our Know Your Customer obligations. This may involve cross-referencing data you provide with information from third-party verification services.
• Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. Transaction data is retained for audit and dispute resolution purposes.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeovers, and other unauthorised or illegal conduct on the cv88 platform.
• Responsible Gaming: To monitor gaming activity patterns that may indicate problem gambling behaviour, to enforce deposit limits and self-exclusion requests, and to comply with our responsible gaming obligations.
• Customer Support: To respond to your enquiries, process complaints, and provide you with assistance in relation to your cv88 account.
• Platform Improvement: To analyse aggregated platform usage data, identify technical issues, and improve the overall performance, reliability, and user experience of the cv88 platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and seasonal campaign materials (such as BPL season offers, Eid promotions, and Pohela Boishakh specials) where you have opted in to receive such communications. You may opt out at any time.
• Legal Compliance: To comply with applicable legal obligations, respond to lawful requests from regulatory bodies or law enforcement authorities, and to enforce our Terms & Conditions.

05 Legal Basis for Processing

cv88 processes personal data only where a lawful basis exists for doing so. The primary legal bases on which we rely are as follows:

• Contractual Necessity: Processing that is necessary to perform our contract with you — including managing your account, processing payments, and delivering the gaming service — is carried out on the basis of contractual necessity.
• Legal Obligation: Processing required to comply with applicable law — including anti-money laundering (AML) regulations, age verification requirements, and responses to lawful authority requests — is carried out on the basis of legal obligation.
• Legitimate Interests: Processing carried out for fraud prevention, platform security, and analytics is based on cv88's legitimate interest in operating a safe, fair, and commercially viable gaming platform, where those interests are not overridden by your data protection rights.
• Consent: Where we rely on consent — particularly for marketing communications and optional cookies — we will obtain your explicit agreement in advance. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

06 Sharing Your Data

cv88 does not sell your personal data to any third party. We share personal data only in the following limited circumstances, and only to the extent necessary for the stated purpose:

• Payment Processors: We share financial data with mobile financial service operators (bKash, Nagad, Rocket, Upay) and banking partners solely for the purpose of processing your deposits and withdrawals in Bangladeshi Taka (৳).
• Identity Verification Partners: We share identity data with certified KYC and age-verification service providers to confirm your eligibility to hold a cv88 account.
• Game Technology Providers: We share session and gameplay data with our game providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — to the extent required to deliver and maintain the games on our platform.
• IT and Security Service Providers: We share technical data with infrastructure, hosting, and cybersecurity providers who support the operation of the cv88 platform under strict data processing agreements.
• Legal and Regulatory Authorities: We may disclose personal data to law enforcement, regulatory bodies, or government authorities where we are required to do so by law, court order, or in connection with the investigation of suspected criminal activity.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of cv88's business assets, your personal data may be transferred to the acquiring entity, subject to equivalent data protection obligations.

07 Data Retention

cv88 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

• Account Data: Retained for the duration of your account relationship with cv88, plus a period of 5 years following account closure to comply with AML and fraud investigation obligations.
• Financial Transaction Data: Retained for a minimum of 5 years from the date of each transaction in accordance with financial record-keeping requirements.
• KYC Documentation: Retained for the duration of the account relationship, plus 5 years following closure, in line with identity verification and AML obligations.
• Gaming Activity Data: Retained for 3 years from the date of the recorded activity, or longer where required for responsible gaming monitoring or dispute resolution.
• Support Communications: Retained for 2 years from the date of the final interaction, unless the matter relates to a formal complaint or legal dispute, in which case the retention period extends to the resolution of the matter plus 1 year.
• Marketing Preferences: Retained for the duration of your opt-in consent, plus 1 year after withdrawal of consent as a record of your preferences.

Where data is no longer required, cv88 will securely delete or anonymise it in accordance with industry-standard data destruction practices. Anonymised data (from which no individual can be identified) may be retained indefinitely for statistical and analytical purposes.

08 Data Security

cv88 takes the security of your personal data seriously and employs a range of technical and organisational measures designed to protect it from unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and the cv88 platform is encrypted using industry-standard Secure Socket Layer (SSL) or Transport Layer Security (TLS) protocols.
• Password Hashing: Account passwords are stored using strong cryptographic hashing algorithms. cv88 staff cannot access your password in plaintext under any circumstances.
• Access Controls: Access to personal data within cv88's systems is restricted on a need-to-know basis. Staff with access to personal data are trained in data protection obligations and are bound by confidentiality agreements.
• Fraud Detection Systems: cv88 employs automated and manual monitoring systems to detect suspicious account activity, unusual transaction patterns, and potential security incidents.
• Regular Security Assessments: cv88 conducts periodic security reviews and vulnerability assessments to identify and address potential risks to the platform and its data infrastructure.

While cv88 takes all reasonable steps to protect your personal data, no system of data transmission or storage can be guaranteed to be completely secure. In the event of a data breach that affects your rights or interests, cv88 will notify affected players without undue delay and will take prompt remedial action.

09 Cookies & Tracking Technologies

cv88 uses cookies and similar tracking technologies (such as web beacons and local storage) to support the operation of the platform, maintain your session, remember your preferences, and gather anonymised analytics data. The types of cookies used on the cv88 platform include:

• Strictly Necessary Cookies: These are essential to the operation of the platform. They enable you to log in, navigate between pages, and use core platform features. These cookies cannot be disabled without significantly impairing your ability to use cv88.
• Functional Cookies: These cookies remember your preferences — such as your preferred language settings, display options, and notification preferences — so you do not need to re-enter them each time you visit.
• Analytics Cookies: These cookies collect anonymised information about how players use the cv88 platform, including which pages are visited most frequently and how players navigate the site. This data helps us improve the platform experience for all users in Bangladesh.
• Security Cookies: These cookies support our fraud prevention and account security systems by helping us detect suspicious activity and verify that requests made from your browser are genuinely from you.

You can manage or disable cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the cv88 platform. For instructions on managing cookies in your specific browser, refer to your browser's help documentation.

cv88 does not use cookies to deliver third-party advertising or to track your activity on other websites outside the cv88.lat domain.

10 Your Rights

As a cv88 player, you hold the following rights in respect of your personal data. You may exercise any of these rights at any time by contacting our support team at support at cv88.lat:

• Right of Access: You have the right to request a copy of the personal data cv88 holds about you, together with information about how that data is used and shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been processed unlawfully. Note that this right may be limited where cv88 is required to retain data by law.
• Right to Restrict Processing: You may request that cv88 restricts the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data or object to its use.
• Right to Data Portability: Where processing is based on your consent or on a contractual relationship, you may request a copy of the data you have provided to cv88 in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where cv88 relies on legitimate interests as its legal basis, including for direct marketing purposes. Where you object to direct marketing, cv88 will cease such processing immediately upon receipt of your objection.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.

11 Minors & Age Restriction

The cv88 platform is strictly for adults aged 21 years and over. cv88 does not knowingly collect personal data from any individual under the age of 21. Age verification is a mandatory component of the cv88 registration and KYC process.

If cv88 becomes aware that personal data has been collected from a person under 21 without verifiable parental or guardian consent — or in contravention of applicable age restriction laws — that data will be deleted promptly and the associated account will be suspended pending investigation.

If you are a parent or guardian and believe that a minor in your care has registered with cv88 or provided their personal data to our platform, please contact us immediately at support at cv88.lat so that we may take appropriate action without delay.

12 International Data Transfers

cv88 operates primarily as a platform serving players in Bangladesh. In the course of delivering our services, your personal data may be transferred to and processed by service providers located in countries outside Bangladesh. This may include our game technology providers, hosting infrastructure partners, and identity verification services.

Where personal data is transferred internationally, cv88 takes appropriate steps to ensure that the receiving party provides an adequate level of data protection, including through the use of contractual data protection clauses and due diligence assessments of third-party security standards.

By accepting this Privacy Policy and using the cv88 platform, you consent to the transfer of your personal data to third parties in other countries for the purposes described in this Policy, subject to the safeguards described above.

13 Policy Amendments

cv88 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will notify registered players via the contact details associated with their account — such as their registered mobile number or email address — or via a prominent notice on the cv88 platform.

The revised Policy will be published on this page with an updated "Last Updated" date at the top. Your continued use of the cv88 platform following the publication of an amended Policy constitutes your acceptance of the updated terms. We encourage you to review this Policy periodically to stay informed about how we handle your personal data.

14 Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or the way cv88 handles your personal data, please contact our support team. We are committed to resolving all privacy-related enquiries promptly and transparently.

Contact: support at cv88.lat

Our support team is available 24 hours a day, 7 days a week, including Bangladesh Standard Time (BST, UTC+6) business hours. All privacy-related correspondence should clearly state your registered account name and the nature of your request to allow us to process it efficiently.

If you are not satisfied with cv88's response to your privacy concern, you have the right to escalate your complaint. cv88 takes all unresolved complaints seriously and will make reasonable efforts to reach a satisfactory resolution. We recommend exhausting the cv88 internal complaint process before pursuing any external escalation route.