cv33 Privacy Policy

This Privacy Policy ("Policy") describes how cv33 ("the Platform", "We", "Us", or "Our") collects, uses, stores, shares, and protects the personal data of individuals ("you", "your", or "Member") who access and use the cv33 website at cv33.onl, together with all associated services, mobile interfaces, and games offered thereunder.

cv33 is committed to protecting the privacy of all its members, with particular care for users based in Bangladesh. We recognise that when you share personal information with us — whether at registration, during account verification, or in the course of transacting on the platform — you are placing trust in us to handle that information responsibly.

By registering an account on cv33, accessing the platform, or using any of the services offered, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must refrain from using the cv33 platform.

For the purposes of applicable data protection principles, the data controller responsible for your personal information is cv33, operating the platform at cv33.onl. As data controller, cv33 determines the purposes and means by which your personal data is processed.

If you have any questions, concerns, or requests relating to the processing of your personal data, you may contact us using the details provided in Section 15 of this Policy. We aim to respond to all data-related enquiries within five (5) business days.

cv33 collects personal data in several ways — directly from you when you interact with the platform, automatically when you browse or use our services, and from verified third-party sources where necessary for identity verification and fraud prevention. The categories of personal data we collect are set out below.

cv33 does not collect special category data (such as racial or ethnic origin, political opinions, religious beliefs, or health data) unless you voluntarily provide such information in the context of a responsible gaming support request, in which case it will be processed solely for the purpose of providing that support.

cv33 processes your personal data only for defined, legitimate purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which we process personal data are:

• Account Management: Creating, maintaining, and managing your cv33 member account, including authentication, password recovery, and account notifications.
• Identity Verification (KYC): Verifying your identity and age (21+ requirement) in compliance with our responsible gaming and anti-fraud obligations.
• Payment Processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and City Bank, and maintaining accurate transaction records.
• Service Delivery: Providing access to sports betting markets (including BPL, IPL, T20 World Cup), live casino, slots, Boat of Fortune, and all other cv33 products.
• Customer Support: Responding to your enquiries, complaints, and account-related requests through live chat and email.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, money laundering, prohibited conduct, and other security threats.
• Responsible Gaming Compliance: Monitoring account activity to identify potential problem gambling patterns, enforcing deposit and loss limits, and processing self-exclusion requests.
• Platform Improvement: Analysing usage data to improve the cv33 platform's performance, stability, and user experience.
• Marketing Communications: Sending you promotional offers, bonus notifications, and news about new features — only where you have expressly opted in to receive such communications. You may opt out at any time.
• Legal Compliance: Meeting obligations imposed by applicable law, including record-keeping requirements, cooperation with lawful authority requests, and dispute resolution.

cv33 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing that is necessary to perform our contract with you — specifically, the Terms & Conditions you accepted at registration. This includes account management, payment processing, and service delivery.
• Legal Obligation: Processing required for cv33 to comply with applicable legal requirements, including identity verification, anti-money laundering checks, and responsible gaming mandates.
• Legitimate Interests: Processing that serves cv33's legitimate business interests, provided those interests are not overridden by your rights and interests. This includes fraud prevention, security monitoring, and platform analytics.
• Consent: Processing based on your freely given, specific, and informed consent. This applies primarily to marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

cv33 does not sell your personal data. We may share your data only in the following limited circumstances, and only to the extent necessary for the stated purpose:

• Payment Service Providers: Your financial data is shared with the payment processors (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and card network processors) that handle your deposits and withdrawals. These parties process your data solely to execute the transaction and are bound by their own data protection obligations.
• Identity Verification Partners: Where third-party KYC and age verification services are used to process your identity documents, those partners receive only the data necessary to complete the verification and are bound by strict data processing agreements with cv33.
• Game Technology Providers: Technical data necessary to deliver game sessions may be shared with our game studio partners, including Pragmatic Play, Evolution Gaming, Ezugi, and Spribe. These providers access only the session data required to operate the game and do not receive identity or financial data unless required for jackpot verification.
• Fraud Detection Services: Anonymised or pseudonymised technical and behavioural data may be shared with specialist fraud prevention services to protect the platform and all members from financial crime.
• Legal Authorities: cv33 may disclose personal data to law enforcement, regulatory authorities, or other competent bodies where required to do so by law, court order, or to protect the rights, property, or safety of cv33 or its members.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of cv33's assets, personal data may be transferred to the relevant acquirer, subject to the same privacy protections described in this Policy.

cv33 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, regulatory, or reporting requirements. The following general retention periods apply:

• Active Account Data: Retained for the full duration of your membership plus a minimum of five (5) years following account closure, to meet legal and audit obligations.
• Transaction Records: Financial transaction records are retained for a minimum of seven (7) years from the date of the transaction, in line with standard financial record-keeping requirements.
• Identity Verification Documents: KYC documents are retained for five (5) years following account closure or the completion of the verification process, whichever is later.
• Customer Support Records: Support communications are retained for three (3) years from the date of the interaction.
• Marketing Consent Records: Records of your marketing opt-in and opt-out choices are retained for three (3) years from the date of the relevant consent or withdrawal.
• Responsible Gaming Records: Self-exclusion records and responsible gaming tool usage data are retained for a minimum of five (5) years to ensure that exclusion periods are properly enforced, including in the event of account re-registration.

When personal data is no longer required for any legitimate purpose, it will be securely deleted or irreversibly anonymised in accordance with cv33's internal data disposal procedures.

cv33 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the cv33 platform.
• Encryption at rest for sensitive data fields stored in our databases, including financial account details and identity document references.
• Role-based access controls limiting access to personal data to authorised personnel on a strict need-to-know basis.
• Regular independent security audits and penetration testing of the cv33 platform infrastructure.
• Multi-factor authentication options for member accounts to protect against unauthorised login.
• Continuous monitoring for anomalous account activity and automated alerts for suspicious login attempts.
• Staff training on data protection obligations and secure data handling practices.

While cv33 takes all reasonable precautions, no system is completely immune to security risks. You are responsible for maintaining the confidentiality of your own login credentials and for ensuring that you access your account only over secure, trusted networks.

cv33 uses cookies and similar tracking technologies on the cv33.onl website. Cookies are small text files placed on your device when you visit our platform. They serve several important functions and are categorised as follows:

• Strictly Necessary Cookies: These cookies are essential for the cv33 platform to function correctly. They include session management cookies, authentication tokens, and security cookies. These cannot be disabled without impairing core platform functionality.
• Functional Cookies: These cookies remember your preferences (such as your preferred language, game display settings, and responsible gaming limits) to provide a personalised experience across sessions.
• Analytical Cookies: These cookies collect aggregated, anonymised data about how members use the cv33 platform — including page views, session durations, and navigation paths. This data is used to improve platform performance and user experience. No personally identifiable information is captured through analytical cookies.
• Performance Cookies: These cookies help us diagnose technical issues, monitor platform response times, and ensure service stability.

cv33 does not use third-party advertising cookies or tracking pixels for the purpose of serving you targeted advertisements on other websites. You may control cookie settings through your browser preferences. Please note that disabling strictly necessary cookies will impair your ability to log in and use the cv33 platform.

As a cv33 member, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request":

• Right of Access: You have the right to request a copy of the personal data cv33 holds about you, along with information about how it is being used.
• Right to Rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected.
• Right to Erasure: In certain circumstances, you have the right to request that cv33 delete the personal data it holds about you. This right is subject to limitations where retention is required by law or for the purposes of ongoing legal claims.
• Right to Restrict Processing: You may request that cv33 suspend the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data or where the processing is unlawful.
• Right to Data Portability: Where processing is based on your consent or on contract performance and is carried out by automated means, you may request a copy of your data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to cv33's processing of your personal data where that processing is based on legitimate interests, including profiling. You also have an unconditional right to object to processing for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

The cv33 platform is strictly for adults aged 21 years and above. cv33 does not knowingly collect, process, or retain personal data belonging to individuals under the age of 21. If you are under 21 years of age, you must not register an account or use any cv33 service.

Where cv33 becomes aware or has reasonable grounds to believe that a member is under the age of 21, we will immediately suspend the account, initiate age verification procedures, and — where underage access is confirmed — delete all personal data associated with that account, subject to any legal retention obligations.

cv33 primarily processes and stores member data within data centres serving the South and Southeast Asian region, with a focus on minimising data transfer distances for members based in Bangladesh. However, some of our third-party service providers — including game technology providers and fraud detection services — may process data in jurisdictions outside Bangladesh.

Where personal data is transferred internationally, cv33 ensures that appropriate safeguards are in place, including contractual data processing agreements that impose equivalent data protection standards on the receiving party. cv33 will not transfer personal data to a jurisdiction with materially inferior data protection standards without implementing additional protective measures.

The cv33 platform may from time to time contain links or references to third-party websites, payment portals, or game provider interfaces. cv33 has no control over, and accepts no responsibility for, the privacy practices or content of those third-party sites.

When you follow a link to a third-party site or interact with a third-party payment interface, you are subject to that party's own privacy policy. We encourage you to review the privacy policy of any third-party site before providing it with your personal information.

cv33 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. The most current version of this Policy will always be accessible at cv33.onl/privacy-policy and will display the effective date at the top of the page.

Where a change to this Policy is material — meaning it significantly affects how we process your personal data or the rights available to you — cv33 will notify active members via their registered email address or via an in-platform notification prior to the change taking effect. Continued use of the cv33 platform after the effective date of any revision constitutes your acceptance of the updated Policy.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a concern about how cv33 is handling your personal data, please contact our data protection team using the details below:

• Email: [email protected]
• Subject Line: "Data Privacy Request" (for data rights requests) or "Privacy Policy Enquiry" (for general questions)
• Response Time: We aim to respond within five (5) business days
• Support Hours: 24/7 English-language support