cv789 Privacy Policy

Introduction

This Privacy Policy ("Policy") describes how cv789 ("we", "us", "our", or "the Platform") collects, processes, stores, and protects the personal data of individuals ("you", "your", or "the Player") who register, access, or use the cv789 online casino and sports betting platform at cv789.io.

cv789 is committed to handling your personal data with transparency and care. This Policy is intended to give you a clear and complete picture of our data practices so you can make informed decisions about your use of the Platform. By registering an account or continuing to use cv789, you acknowledge that you have read and understood this Privacy Policy in its entirety.

This Policy applies to all personal data collected through the cv789 website, mobile browser interface, and any associated communications channels including email and live chat support. It does not apply to third-party websites or services that may be linked from the Platform, including payment processor portals operated by bKash, Nagad, Rocket, or Upay. We encourage you to review the privacy policies of those services independently.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming policy, both of which form part of the overall agreement between you and cv789.

Personal Data We Collect

cv789 collects personal data through several channels: directly from you during registration and ongoing account use, automatically through technical systems as you interact with the Platform, and from trusted third-party verification providers where required for KYC compliance. The categories of data we collect are set out below.

2.1 Registration and Account Data

When you create a cv789 account, we collect the following information:

• Full legal name
• Date of birth (to verify the 21+ age requirement)
• Residential address, including city (e.g., Dhaka, Chittagong, Sylhet, Khulna) and postal code
• Email address
• Mobile phone number (used for account verification and 2FA OTP delivery)
• Username and encrypted password
• Preferred language and currency settings

2.2 Identity Verification (KYC) Data

As part of our Know Your Customer process, we may collect copies of the following identity documents:

• National Identity Card (NID)
• Passport
• Driver's licence
• Proof of address (utility bill, bank statement, or official correspondence dated within 90 days)
• Selfie photograph for liveness verification purposes

2.3 Financial and Transaction Data

We collect transaction records associated with your account activity, including:

• Deposit amounts, timestamps, and associated payment method identifiers (e.g., bKash or Nagad wallet number — last four digits only)
• Withdrawal requests, amounts, and processing status
• Bonus credits received and wagering history
• Account balance history

cv789 does not store full payment card numbers or full mobile banking PINs. Payment processing is handled directly by our certified payment partners under their own secure environments.

2.4 Gaming Activity Data

We record data related to your use of games and sports betting markets on cv789, including:

• Games played, bet amounts, results, and session durations
• Sports markets accessed and betting history (cricket, football, kabaddi, etc.)
• Responsible gaming tool usage (deposit limits set, self-exclusion requests, cooling-off periods activated)

2.5 Technical and Device Data

When you access cv789, our systems automatically collect certain technical data, including:

• IP address and approximate geographic location
• Device type, operating system, and browser version
• Referring URL and pages visited on cv789
• Session start and end times
• Cookie identifiers (see Section 6 for full cookie details)

2.6 Communications Data

If you contact our support team via email or live chat, we retain a record of that correspondence, including the content of messages, timestamps, and any attachments you provide. This data is used solely for the purpose of resolving your query and improving our support service quality.

How We Use Your Personal Data

cv789 uses your personal data only for the purposes listed below. We do not use personal data for any purpose that is incompatible with the original reason it was collected without first obtaining your explicit consent.

Where we use your data for analytics or service improvement, this is always performed on aggregated or anonymised data sets that cannot be used to identify individual players. cv789 does not use automated decision-making processes that produce significant legal effects on individual players without human review.

Legal Basis for Processing

cv789 processes personal data on one or more of the following legal bases, depending on the nature and purpose of the processing activity:

• Contractual necessity: Processing required to perform the services described in our Terms & Conditions — including account creation, payment processing, and game delivery — is carried out because it is necessary to fulfil our contractual obligations to you.
• Legal obligation: Certain processing activities — particularly KYC identity verification, transaction monitoring, and record retention — are required by applicable anti-money laundering (AML) laws and financial regulations.
• Legitimate interests: We process technical and device data, fraud signals, and aggregated analytics data on the basis of our legitimate interests in operating a secure, well-functioning platform, provided those interests are not overridden by your rights and freedoms.
• Consent: Where we send you optional promotional communications about bonuses, new games, or seasonal offers (e.g., Eid promotions, Pohela Boishakh specials), we do so only with your explicit consent. You may withdraw this consent at any time by contacting our support team.

Sharing Your Personal Data

cv789 does not sell, rent, or trade your personal data to third parties for commercial marketing purposes under any circumstances. We share personal data only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.

5.1 Payment Service Providers

To process deposits and withdrawals, we share necessary transactional data with our payment partners including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Visa, and Mastercard. These partners are contractually bound to handle data securely and use it solely for payment processing purposes.

5.2 Identity Verification Partners

We use approved third-party KYC and identity verification service providers to assist with document verification and liveness checks. These providers process data only under our instructions and are prohibited from using it for any other purpose.

5.3 Game Providers

Game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a pseudonymised player identifier and session token necessary to deliver their games within the cv789 environment. These providers do not receive your full name, contact details, or payment information.

5.4 Legal and Regulatory Authorities

cv789 may disclose personal data to competent courts, law enforcement agencies, or regulatory bodies where required to do so by applicable law, a valid court order, or in connection with the investigation or prevention of fraud, money laundering, or other criminal activity.

5.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of the cv789 business, personal data held by cv789 may be transferred to the acquiring entity as part of that transaction. In such circumstances, we will notify registered Players in advance and ensure that the receiving entity is bound by data protection obligations no less stringent than those in this Policy.

Cookies & Tracking Technologies

cv789 uses cookies and similar tracking technologies to operate the Platform, recognise returning players, maintain session state, and gather anonymised usage analytics. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication tokens, CSRF protection tokens, and language preference cookies. These cannot be disabled without disrupting your ability to use cv789.
• Functional Cookies: Remember your preferences such as display settings, currency selection, and responsible gaming tool configurations, so you do not need to re-enter them each session.
• Analytics Cookies: Collect anonymised data about how players navigate the Platform — pages visited, session duration, click paths — to help us identify usability improvements. No individually identifiable data is captured through analytics cookies.
• Security Cookies: Used by our fraud detection and bot-prevention systems to distinguish legitimate player sessions from automated or malicious access attempts.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to log in and use the Platform. Disabling analytics cookies will not affect your gaming experience.

Data Retention

cv789 retains personal data for as long as necessary to fulfil the purpose for which it was collected, subject to any longer retention periods required by applicable law. The following retention guidelines apply:

• Active account data: Retained for the full duration of your active account relationship with cv789, plus a minimum of five years following account closure.
• KYC and identity documents: Retained for a minimum of five years after the end of the business relationship, in accordance with standard anti-money laundering record-keeping requirements.
• Transaction records: Retained for a minimum of five years from the date of each transaction.
• Support communications: Retained for up to three years following resolution of the relevant support query.
• Technical and device data (logs): Retained for up to 12 months from the date of collection, after which they are anonymised or deleted.
• Marketing consent records: Retained for as long as your marketing consent remains active, plus two years after withdrawal of consent.

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised so that it can no longer be associated with any individual player.

Data Security

cv789 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key measures include:

• 256-bit SSL/TLS encryption applied to all data in transit between your device and the cv789 servers, ensuring that account credentials, payment information, and personal data cannot be intercepted.
• At-rest encryption for all stored personal data and KYC documents held in our database infrastructure.
• Two-factor authentication (2FA) via SMS OTP available to all players, and mandatory for withdrawal requests above certain thresholds.
• Access controls: Personal data is accessible only to cv789 personnel and authorised third-party processors who have a legitimate operational need. Access is governed by role-based permissions and is logged and audited.
• Penetration testing and vulnerability assessments conducted on a regular schedule by independent security specialists.
• Incident response procedures: In the event of a data breach that is likely to result in a risk to the rights and freedoms of players, cv789 will notify affected individuals without undue delay and take all reasonable steps to contain and remediate the incident.

While cv789 takes all reasonable precautions to safeguard your data, no internet-based platform can guarantee absolute security. You are responsible for keeping your own login credentials confidential and for notifying cv789 promptly if you suspect any unauthorised activity on your account.

Your Privacy Rights

As a registered player on cv789, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected] with your account username and a description of your request. We will respond within a reasonable timeframe and in any event no later than 30 days from receipt of a valid request.

• Right of access: You may request a copy of the personal data cv789 holds about you, along with information about how it is being used.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to any overriding legal retention obligations (such as AML record-keeping requirements).
• Right to restrict processing: You may request that we limit the way we use your personal data in certain circumstances, for example while a rectification request is being assessed.
• Right to data portability: Where technically feasible, you may request that we provide your personal data in a structured, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (e.g., for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to object: You may object to processing carried out on the basis of legitimate interests where you believe your rights and freedoms override those interests.

Children's Privacy

cv789 is strictly an adults-only platform. Registration and use of cv789 is prohibited for any person under the age of 21. We do not knowingly collect personal data from individuals under 21 years of age. If we become aware that an account has been registered by a person under 21, that account will be immediately suspended, all associated data will be reviewed, and the account and any associated balance will be handled in accordance with our Terms & Conditions.

If you are a parent or guardian and believe that a person under your care has registered a cv789 account without your knowledge, please contact us immediately at [email protected] so that we can take appropriate action.

International Data Transfers

cv789 primarily serves players in Bangladesh and stores personal data on infrastructure located within or near the South Asia region. In certain circumstances, however, personal data may be transferred to or processed by third-party service providers — such as game studios, identity verification partners, or cloud infrastructure providers — whose systems may be located outside Bangladesh.

Whenever personal data is transferred outside Bangladesh to a third-party processor, cv789 ensures that appropriate safeguards are in place to protect that data to a standard at least equivalent to the protections described in this Privacy Policy. Such safeguards typically take the form of contractual data processing agreements with the relevant third-party processor.

Updates to This Policy

cv789 reserves the right to update or revise this Privacy Policy at any time. When material changes are made, we will notify registered players by displaying a prominent notice on the Platform at the time of next login, and where possible by email to the address registered on your account.

The most current version of this Privacy Policy will always be published at cv789.io/privacy-policy with the effective date clearly stated at the top of the document. Your continued use of cv789 following the posting of a revised Privacy Policy constitutes your acknowledgment of and agreement to the updated terms. If you do not agree to the revised policy, you must discontinue use of the Platform and close your account.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way cv789 handles your personal data, please reach out to our dedicated support team. All privacy-related enquiries are handled with strict confidentiality and are prioritised within our support queue.

• Email: [email protected] (plain text — not a clickable link)
• Support hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)
• Response time: Privacy and data rights requests are typically acknowledged within 24 hours and resolved within 30 days
• Live chat: Available within the Platform for logged-in players for general privacy queries

When submitting a data rights request, please include your registered account username and a clear description of the right you wish to exercise. For erasure or portability requests, identity verification may be required before we can action the request.