cv55 Privacy Policy

cv55 is Bangladesh's trusted online casino and sports betting platform, accessible at cv55.io. We are committed to protecting the privacy and personal data of all individuals who interact with our platform, including registered players, visitors to our website, and individuals who contact our customer support team.

This Privacy Policy ("Policy") sets out the basis on which cv55 collects and processes personal data in connection with the operation of the cv55 platform, including its website, mobile-optimised interfaces, casino games, live dealer services, sports betting markets, promotional programmes, and payment processing facilities.

This Policy should be read alongside cv55's Terms & Conditions and Responsible Gaming Policy, both of which are accessible via the footer navigation of every page on this site. By using the cv55 platform, you confirm your acceptance of this Policy in full. Where cv55 is required by applicable law to obtain your explicit consent before processing specific categories of your personal data, we will seek that consent separately through appropriate consent mechanisms.

All monetary figures referenced in this Policy are denominated in Bangladeshi Taka (৳). All communications related to data privacy matters must be conducted in English and directed to the contact details provided in Section 15 of this Policy.

For the purposes of this Privacy Policy, cv55 acts as the data controller in respect of the personal data it collects and processes about you in connection with your use of the cv55 platform. As data controller, cv55 is responsible for determining the purposes and means of processing your personal data and for ensuring that such processing is carried out lawfully, fairly, and transparently.

cv55 may engage third-party service providers who act as data processors on cv55's behalf — for example, payment processing partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank), game content providers (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi), and cloud infrastructure providers. These parties process personal data solely on cv55's documented instructions and are contractually prohibited from using your data for their own independent purposes.

cv55 collects the following categories of personal data in connection with the registration, verification, and ongoing use of your account:

cv55 does not collect or process special category personal data (such as data revealing racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) except where strictly necessary to comply with legal obligations — for example, where a responsible gaming assessment requires consideration of a player's self-reported health circumstances.

cv55 collects personal data through the following channels and mechanisms:

• Direct Collection: Data you provide voluntarily when creating a cv55 account, completing KYC identity verification, making deposits or withdrawal requests, contacting customer support, or updating your account profile and preferences.
• Automated Technical Collection: Data collected automatically by our platform infrastructure as you browse and use the cv55 website, including IP address logging, session tracking, and device fingerprinting for fraud prevention purposes. This collection occurs via server logs and first-party cookies.
• Payment Provider Data: Transaction confirmation data and payment method identifiers shared with cv55 by your chosen payment provider (bKash, Nagad, Rocket, Upay, or your bank) upon successful processing of a deposit or withdrawal request.
• Game Provider Data: Gameplay activity records and round-level data transmitted to cv55 by our integrated game providers (Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, Spribe, Ezugi) in connection with games you play on the platform.
• Identity Verification Partners: Where cv55 uses a third-party KYC or identity verification service to confirm your identity documents, that partner may share verification outcome data with cv55. No raw document images are stored by cv55 beyond the minimum period required for audit purposes.

cv55 processes your personal data for the following purposes. Each purpose is accompanied by the primary legal basis on which it relies (detailed further in Section 6):

• Account Registration and Management: To create and maintain your cv55 player account, authenticate your identity at login, manage your account settings and preferences, and communicate with you about account-related matters.
• Identity Verification (KYC): To verify that you meet the age eligibility requirement (21+), confirm your identity in accordance with our know-your-customer obligations, and validate the ownership of payment methods used on your account.
• Transaction Processing: To process deposits and withdrawals accurately and securely via your chosen payment method (bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank) and to maintain a complete and accurate record of all financial transactions on your account.
• Platform Operation and Game Delivery: To deliver casino games, live dealer tables, sports betting markets, and all other platform features to you in a functional and personalised manner.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeover attempts, and other security threats, including through automated risk-scoring systems that analyse usage patterns and technical identifiers.
• Legal and Regulatory Compliance: To meet our obligations under applicable anti-money laundering (AML), counter-terrorism financing (CTF), and data protection laws, including maintaining records required for regulatory audit purposes.
• Responsible Gaming: To monitor gameplay patterns for signs of problem gambling behaviour, implement deposit limits and self-exclusion measures you have requested, and fulfil our duty of care obligations towards players showing signs of gambling-related harm.
• Customer Support: To respond to your enquiries, resolve complaints, and provide technical assistance via live chat and email.
• Marketing Communications: Where you have opted in, to send you promotional offers, bonus notifications, and platform news relevant to your interests and activity on cv55. You may withdraw this consent at any time via your account settings or by contacting support.
• Platform Improvement and Analytics: To analyse aggregated, anonymised usage data to improve the performance, design, and features of the cv55 platform.

cv55 relies on one or more of the following legal bases when processing your personal data:

• Contractual Necessity: Processing is necessary to perform the contract between you and cv55 — i.e., to operate your player account, deliver games and betting services, and process your financial transactions. Without this processing, we cannot provide the cv55 service to you.
• Legal Obligation: Processing is required to comply with cv55's legal obligations under applicable AML, CTF, KYC, and data protection frameworks. This includes identity verification, transaction record-keeping, and the fulfilment of law enforcement requests issued by competent authorities.
• Legitimate Interests: Processing is necessary for cv55's legitimate interests in operating a secure and commercially viable platform — including fraud detection, security monitoring, platform analytics, and responsible gaming monitoring — provided those interests are not overridden by your own rights and interests.
• Consent: For marketing communications and non-essential cookies, cv55 relies on your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without detriment to your ability to use the platform.

cv55 does not sell or rent your personal data to any third party. We share your personal data only in the following limited and controlled circumstances:

• Payment Processors: Transaction data (including wallet numbers, amounts, and transaction IDs) is shared with your selected payment provider (bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank) solely for the purpose of processing your deposit or withdrawal request.
• Game Providers: Your account identifier and gameplay activity is shared with integrated game studios (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi) to the minimum extent necessary to deliver games and record outcomes. These providers are contractually prohibited from using this data for any purpose other than game delivery.
• Identity Verification Services: Where cv55 uses a third-party KYC partner to verify your identity documents, the relevant identity data is shared with that partner under strict contractual data processing terms.
• Fraud Prevention and Security Partners: Technical identifiers (IP addresses, device fingerprints, session patterns) may be shared with specialist fraud prevention service providers to identify and block suspicious activity.
• Legal and Regulatory Authorities: cv55 will disclose personal data to competent governmental, regulatory, or law enforcement authorities where required to do so by applicable law, court order, or lawful official request. We will, where legally permitted, notify affected players of any such disclosure.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of cv55's assets, your personal data may be transferred to the acquiring entity as part of that transaction, subject to equivalent privacy protections being maintained.

cv55 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following indicative retention periods apply:

On expiry of the applicable retention period, personal data is either securely deleted from cv55's systems or anonymised in a manner that permanently prevents re-identification, unless retention is required to defend or pursue a legal claim that remains outstanding at the time of the scheduled deletion.

cv55 implements a layered, defence-in-depth approach to data security. The following technical and organisational measures are in place to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure:

• Encryption in Transit: All data transmitted between your browser or device and the cv55 platform is encrypted using TLS 1.2 or higher (256-bit SSL). Connections using older, insecure protocols are rejected.
• Encryption at Rest: Sensitive personal data stored in cv55's databases — including identity data, payment information, and authentication credentials — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is strictly limited to cv55 employees and authorised contractors who require access to perform their job functions. All access is governed by role-based access control (RBAC) policies and is logged for audit purposes.
• Intrusion Detection and Monitoring: cv55's infrastructure is monitored 24/7 by automated intrusion detection systems. Anomalous access patterns and potential data breach indicators trigger immediate alerts to our security team for investigation.
• Regular Security Audits: cv55 conducts regular internal security reviews and commissions periodic third-party penetration testing of its platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Password Security: Player account passwords are hashed using a strong, salted cryptographic algorithm. cv55 does not store passwords in plain text and cannot retrieve your password — only reset it via a secure email verification process.
• Two-Factor Authentication: cv55 supports and encourages the use of two-factor authentication (2FA) on all player accounts as an additional layer of account security beyond username and password credentials.
• Data Breach Response: In the event of a confirmed personal data breach that poses a risk to your rights and freedoms, cv55 will notify affected players without undue delay and take all necessary remediation steps to contain and investigate the breach.

cv55 uses cookies and similar tracking technologies to ensure the proper functioning of the platform, remember your preferences, maintain your session, and analyse usage patterns for the purpose of platform improvement. The following categories of cookies are used on the cv55 platform:

• Strictly Necessary Cookies: These cookies are essential for the cv55 platform to function. They enable core features such as user authentication, session management, security token validation, and navigation between pages. These cookies cannot be disabled without impairing your ability to use the platform.
• Functional Cookies: These cookies remember your preferences and settings — such as your preferred language, currency display (৳ BDT), and responsible gaming limit selections — so that you do not need to re-enter them on each visit.
• Analytical Cookies: These cookies collect aggregated, anonymised data about how visitors use the cv55 platform — such as which pages are visited most frequently and where users encounter navigation difficulties. This information is used exclusively to improve the platform experience and is never used to identify individual users.
• Security and Fraud Prevention Cookies: These cookies assist cv55's fraud detection systems in identifying suspicious patterns, multiple account abuse, and bot-driven activity. They are classified as strictly necessary given their role in protecting the integrity of the platform.

cv55 does not use third-party advertising cookies or cross-site tracking technologies for the purpose of serving behavioural advertising to users of the platform. You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will affect your ability to log in and use core platform features.

As a data subject whose personal data is processed by cv55, you have the following rights with respect to your personal information. These rights may be exercised at any time by contacting cv55 at [email protected] with the subject line "Data Rights Request":

cv55 will respond to all valid data rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 60 days, in which case cv55 will notify you of the extension and the reason for it within the initial 30-day window. cv55 will not charge a fee for processing data rights requests unless a request is manifestly unfounded or excessive.

The cv55 platform is strictly intended for adults aged 21 and above. cv55 does not knowingly collect, process, or retain personal data belonging to individuals under the age of 21. The collection and processing of personal data from minors would be contrary to cv55's Terms & Conditions, its Responsible Gaming Policy, and the principles set out in this Privacy Policy.

As part of the account registration and KYC verification process, cv55 requires all new players to confirm their date of birth and provide government-issued identity documentation confirming they meet the minimum age requirement. Where cv55 discovers or has reasonable grounds to believe that personal data has been collected from a player who is under 21 years of age, cv55 will:

• Immediately suspend the relevant account pending investigation.
• Permanently close the account upon confirmation that the player is under 21.
• Delete all personal data associated with the account from cv55's systems, subject to any overriding legal retention obligations.
• Return any deposited funds to the payment source, subject to any applicable fraud investigation requirements.

cv55 operates as a platform serving players primarily located in Bangladesh. However, certain service providers engaged by cv55 — including game providers, fraud prevention partners, and cloud infrastructure providers — may be located outside Bangladesh and may process your personal data on servers situated in other countries.

Where personal data is transferred outside Bangladesh, cv55 takes steps to ensure that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable data protection principles. These safeguards may include:

• Contractual clauses in data processing agreements with third-party recipients that impose binding data protection obligations equivalent to those cv55 itself observes.
• Transferring data only to recipients located in countries or jurisdictions that provide an adequate level of data protection as recognised by applicable international standards.
• Implementing supplementary technical measures (such as end-to-end encryption) where the legal framework of the recipient country does not on its own provide sufficient protection.

You may request further information about the specific safeguards in place for any particular international data transfer by contacting cv55 at [email protected].

cv55 reserves the right to update or amend this Privacy Policy at any time in response to changes in applicable law, changes to our data processing practices, the introduction of new platform features, or updated industry best-practice standards for data protection in the online gaming sector.

When cv55 makes a material change to this Privacy Policy — that is, a change that substantively affects the way in which your personal data is collected, used, shared, or retained — we will notify you by one or more of the following methods:

• Displaying a prominent notification on the cv55 platform homepage and/or in your account dashboard.
• Sending an email notification to the registered email address on your cv55 account.
• Updating the "Last Updated" date displayed at the top of this Privacy Policy page.

Your continued use of the cv55 platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the changes and your agreement to be bound by the updated terms. If you do not agree with a material change to this Policy, you should cease using the platform and may request account closure in accordance with cv55's Terms & Conditions. cv55 recommends reviewing this Privacy Policy periodically — at minimum once every 90 days — to stay informed of any updates.

If you have any questions, concerns, or requests in relation to this Privacy Policy or the way in which cv55 processes your personal data, please contact us using the details below. All privacy-related communications must be submitted in English and should clearly state the nature of your enquiry and your cv55 account username where applicable.