cv988 Privacy Policy

cv988 collects personal data from you in several ways: directly when you provide it to us during registration, account management, or support interactions; automatically when you use the platform; and in some cases from third-party payment and verification providers. The categories of data we collect are set out in the table below.

cv988 does not intentionally collect special-category personal data (such as health information, religious beliefs, or biometric data) from players. If you voluntarily disclose such information — for example in a support message — we will treat it with the highest level of confidentiality and will not use it for any purpose other than resolving the specific matter for which it was shared.

cv988 does not knowingly collect personal data from individuals under 18 years of age. If we become aware that we have collected data from a minor, we will delete that data immediately and close the associated account.

cv988 does not sell your personal data. We share personal data with third parties only where necessary, and only under the following strictly controlled circumstances:

• Payment Processors: To process your deposits and withdrawals, cv988 shares the minimum necessary financial and identity data with licensed payment providers including bKash, Nagad, Rocket, Upay, and partner banks (Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank) and card networks (Visa, Mastercard). These providers process data only to complete the requested transaction and are bound by their own regulatory obligations regarding data protection.
• Game and Platform Providers: To deliver casino games, sports betting markets, and live dealer tables, cv988 shares session and account data with licensed game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers receive only the data required to run the game session and return the result.
• Identity Verification Providers: For KYC and age verification purposes, cv988 may share identity documents and personal details with trusted third-party verification service providers. These providers are contractually bound to use your data solely for verification purposes and to delete it once the verification is complete.
• Fraud and Security Services: cv988 uses third-party fraud detection and cybersecurity tools that may process technical data (such as IP addresses and device fingerprints) to identify and prevent fraudulent activity on the platform.
• Legal and Regulatory Disclosure: cv988 may disclose personal data to law enforcement agencies, financial intelligence units, regulatory bodies, or courts where we are legally required or compelled to do so, or where disclosure is necessary to protect the rights, property, or safety of cv988, its players, or the public.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of cv988's business, personal data held by cv988 may be transferred to the acquiring entity. In such a case, players will be notified of any change in data controller and their rights under this policy will continue to be honoured.

cv988 takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS Encryption: All data in transit between your device and cv988 servers is encrypted using industry-standard 256-bit SSL/TLS protocols.
• Password Hashing: Account passwords are never stored in plain text. cv988 uses strong cryptographic hashing algorithms to store password credentials so that even in the event of a data breach, plain-text passwords cannot be recovered.
• Access Controls: Access to personal data within cv988 is restricted on a strict need-to-know basis. Only authorised personnel with a legitimate operational reason are permitted to access player data.
• Regular Security Audits: cv988's platform and infrastructure undergo regular security assessments and penetration testing to identify and remediate potential vulnerabilities before they can be exploited.
• Data Breach Response: cv988 maintains an incident response plan to address data security breaches promptly. In the event of a breach that poses a risk to players' rights and freedoms, affected players will be notified without undue delay.

While cv988 takes all reasonable steps to protect your data, no system is completely immune to security risks. You also play a role in keeping your data secure: use a strong, unique password for your cv988 account, do not share your login credentials with anyone, and log out after each session, particularly when using shared devices. If you suspect that your cv988 account has been compromised, contact support immediately at [email protected].

As a player on the cv988 platform, you have the following rights with respect to your personal data. To exercise any of these rights, contact the cv988 privacy team at [email protected] with the subject line "Privacy Rights Request". cv988 will respond to all valid requests within a reasonable timeframe and will not charge a fee for standard requests.

cv988 will not discriminate against any player who exercises their privacy rights. Exercising a right will not result in degraded service, account suspension, or any other adverse treatment.

Please note that some rights are subject to exceptions. For example, the right to erasure does not apply where cv988 is required to retain the data to comply with a legal obligation (such as anti-money laundering record-keeping requirements). Where cv988 is unable to fulfil a request in full, we will explain the reason clearly and tell you what steps you can take if you are not satisfied with our response.