cv33bd Privacy Policy
Your Data, Your Rights

Information We Collect

cv33bd collects personal data through several channels: directly from you when you register an account or interact with our services, automatically through your use of the Platform, and — in limited circumstances — from trusted third-party sources as part of our verification and fraud-prevention processes. We collect only the data that is necessary and proportionate to the purposes described in this Privacy Policy.

1.1 Data You Provide Directly

When you register with cv33bd, interact with our support team, or use our services, you may provide us with the following categories of personal data:

1.2 Data Collected Automatically

When you access or use the cv33bd Platform — whether via desktop browser, mobile browser, or our progressive web app — we automatically collect certain technical and behavioural data:

• Device & Technical Data: IP address, device type, operating system, browser type and version, screen resolution, device identifiers.
• Usage Data: Pages visited, games played, bets placed, session duration, navigation paths, search queries within the Platform, features used.
• Location Data: Country and region inferred from IP address (used for eligibility verification). We do not collect precise GPS location data.
• Cookie Data: Data collected through cookies, local storage, and similar tracking technologies as described in Section 4 of this Policy.
• Transaction Logs: Timestamps, amounts, and outcomes of all deposits, withdrawals, bets, and game rounds associated with your account.

1.3 Data From Third Parties

In limited circumstances, cv33bd may receive personal data about you from third-party sources, including:

• Identity Verification Providers: Third-party KYC service providers may supply confirmation of your identity documents' authenticity and cross-reference against sanctions watchlists.
• Payment Processors: bKash, Nagad, Rocket, Upay, and banking partners may provide transaction confirmation data and wallet-holder verification information.
• Fraud Prevention Services: Specialised fraud-detection platforms may supply risk scores and device fingerprint data to help us identify suspicious account activity.

How We Use Your Data

cv33bd uses the personal data we collect for the following purposes. Each use is tied to a specific legal basis, which is explained in Section 3 of this Policy.

1. Account Registration and Management: To create and maintain your cv33bd account, verify your identity, manage your preferences and settings, and communicate with you about your account status, security alerts, and important service updates.
2. Payment Processing: To process deposits and withdrawals via your chosen payment method (bKash, Nagad, Rocket, Upay, or bank transfer), verify that payment accounts are registered in your name, detect and prevent fraudulent transactions, and maintain accurate financial records.
3. KYC and Age Verification: To verify that you are at least 18 years of age and that the identity information you provided at registration is accurate and current, in compliance with responsible gaming and anti-money laundering obligations.
4. Platform Delivery and Improvement: To deliver the games, betting markets, live casino tables, and other services available on the Platform; to monitor and improve Platform performance; to diagnose and fix technical issues; and to develop new features based on usage analytics.
5. Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, bonus abuse, collusion, and other forms of prohibited conduct as defined in the cv33bd Terms & Conditions.
6. Responsible Gaming Compliance: To enforce deposit limits, self-exclusion requests, and cooling-off periods; to monitor betting patterns for indicators of problem gambling behaviour; and to provide timely interventions and support resources where needed.
7. Personalisation: To personalise your experience on the Platform by recommending games and promotions that match your stated preferences and historical activity, where you have not opted out of personalised communications.
8. Marketing Communications: To send you promotional offers, bonus notifications, and seasonal campaign updates (such as BPL cricket promotions, Eid bonus offers, and Pohela Boishakh specials) by email or in-app notification — but only where you have provided your consent to receive such communications. You may withdraw this consent at any time.
9. Legal and Regulatory Compliance: To comply with applicable legal obligations, including anti-money laundering regulations, record-keeping requirements, and responses to lawful requests from competent authorities.

Legal Basis for Processing

cv33bd processes your personal data on one or more of the following legal bases, depending on the specific purpose of the processing activity:

Cookies & Tracking Technologies

cv33bd uses cookies and similar tracking technologies (including local storage and session storage) to operate the Platform, maintain your session, prevent fraud, and improve your experience. Cookies are small text files placed on your device by your browser when you access the Platform.

4.1 Categories of Cookies We Use

cv33bd does not use third-party advertising cookies or retargeting pixels that track your activity across other websites. Our analytics tools are configured to anonymise IP addresses and are not used to build individual advertising profiles.

4.2 Managing Your Cookie Preferences

You can manage your cookie preferences through your browser settings. Most modern browsers allow you to view, block, or delete cookies at any time. Please note that blocking strictly necessary cookies will prevent you from logging in to your cv33bd account and may cause the Platform to malfunction. Detailed instructions for managing cookies in your specific browser are available in your browser's help documentation.

Data Sharing & Third Parties

cv33bd does not sell your personal data. We share your data with third parties only in the specific circumstances described below, and only to the extent necessary for the stated purpose.

1. Payment Service Providers: We share necessary transaction and identity data with bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard to process your deposits and withdrawals. These providers act as data processors on cv33bd's behalf and are contractually bound to process your data only for payment processing purposes.
2. KYC and Identity Verification Partners: We share copies of your identity documents and personal details with certified third-party KYC verification services to confirm the authenticity of your documents, check your details against sanctions and politically exposed persons (PEP) watchlists, and fulfil our age verification obligations.
3. Game Providers: When you play a game, your account identifier and gameplay data are shared with the relevant game provider (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others) to enable the game session and settle results. Game providers receive only the minimum data necessary to operate the game and are bound by their own data protection agreements.
4. Fraud Prevention and Security Services: We work with specialist fraud-detection providers who process device, behavioural, and transaction data to identify suspicious activity. These providers act as processors under strict contractual data protection obligations.
5. Hosting and Infrastructure Providers: Our Platform is hosted on secure cloud infrastructure. Our hosting providers process data on our behalf as data processors and do not have independent access to your personal data for their own purposes.
6. Legal and Regulatory Authorities: cv33bd may disclose your personal data to competent law enforcement agencies, regulatory bodies, or courts of law where we are legally required to do so — for example, in response to a valid court order, anti-money laundering investigation, or a lawful request from a financial intelligence unit.
7. Business Transfers: In the event of a merger, acquisition, or sale of all or part of cv33bd's business, your personal data may be transferred to the acquiring entity as part of the business assets. You will be notified in advance of any such transfer and your rights under this Privacy Policy will continue to apply.

Data Retention

cv33bd retains your personal data for as long as is necessary to fulfil the purposes set out in this Privacy Policy and to comply with our legal obligations. The following retention periods apply as a general guide:

When your data is no longer required for any of the above purposes, cv33bd will securely delete or anonymise it. Anonymised data — which can no longer be linked to any individual — may be retained indefinitely for aggregated analytics and Platform improvement purposes.

Your Privacy Rights

As a cv33bd player, you have the following rights with respect to your personal data. To exercise any of these rights, please submit a written request to [email protected]. We will respond to all valid requests within 30 calendar days of receipt. In some cases, we may need to verify your identity before processing your request.

1. Right of Access: You have the right to request a copy of the personal data that cv33bd holds about you, along with information about how it is used and with whom it has been shared. This is commonly referred to as a Subject Access Request (SAR).
2. Right to Rectification: You have the right to request that cv33bd correct any inaccurate or incomplete personal data held about you. You may also update certain account details (such as your contact email or mobile number) directly through your account settings.
3. Right to Erasure: You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer needed for the purpose for which it was collected, or where you have withdrawn the consent on which processing was based. This right is not absolute and does not apply where cv33bd is required to retain data to comply with a legal obligation (such as anti-money laundering record-keeping requirements).
4. Right to Restriction of Processing: You have the right to request that cv33bd restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where you have objected to processing based on legitimate interests pending our review.
5. Right to Data Portability: Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON).
6. Right to Object: You have the right to object at any time to processing of your personal data that is based on cv33bd's legitimate interests. You also have an unconditional right to object to the use of your data for direct marketing purposes.
7. Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Data Security

cv33bd implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, misuse, alteration, or destruction. Our key security practices include:

• TLS/SSL Encryption: All data transmitted between your device and the cv33bd Platform is encrypted using Transport Layer Security (TLS 1.2 or higher). Our platform enforces HTTPS on all connections; unencrypted HTTP connections are automatically redirected.
• At-Rest Encryption: Sensitive personal data — including KYC documents, financial data, and identity records — is encrypted at rest using industry-standard AES-256 encryption in our database and file storage systems.
• Access Controls: Access to personal data within cv33bd is restricted on a strict need-to-know basis. All internal access to production data is logged, reviewed, and controlled through role-based access management systems.
• Password Security: Account passwords are stored as salted cryptographic hashes. cv33bd staff cannot view your password in plain text. We strongly recommend enabling two-factor authentication (2FA) on your account for additional protection.
• Penetration Testing and Audits: cv33bd conducts regular security assessments, including penetration testing of the Platform, to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, cv33bd will notify affected players without undue delay and take all necessary steps to contain and remediate the breach.

Children's Privacy

cv33bd is a real-money gambling platform and is strictly intended for adults aged 18 years and above. We do not knowingly collect, process, or retain personal data from any individual under the age of 18. Our registration process includes mandatory date-of-birth verification, and all accounts are subject to age verification checks as part of our Know Your Customer (KYC) procedures.

If cv33bd discovers or has reason to believe that personal data has been collected from a person under the age of 18 — whether through a false declaration at registration or any other means — we will take the following immediate steps:

• Suspend and permanently close the relevant account without notice.
• Void all bets, game rounds, and bonus activity associated with the account.
• Securely delete all personal data associated with the underage account as soon as it is legally permissible to do so.
• Retain a minimum record solely for the purpose of preventing re-registration by the same individual.

If you are a parent or guardian and believe that your child has registered an account on cv33bd, please contact us immediately at [email protected]. We will investigate and act on your report as a priority. We also recommend that parents and guardians make use of parental control software to restrict access to gambling websites on shared or family devices.

Updates to This Policy

cv33bd reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to our services. All updates will be published on this page with a revised "Last Updated" date at the top of the document.

Where a proposed change is material — meaning it significantly affects how we collect, use, or share your personal data — we will notify you in advance by:

• Sending an email notification to your registered email address at least 14 days before the change takes effect.
• Displaying a prominent notice on the cv33bd Platform when you next log in to your account.

Your continued use of the cv33bd Platform after a Privacy Policy update constitutes your acknowledgement of the revised Policy. If you do not agree with any material change to this Policy, you have the right to close your account and request deletion of your personal data, subject to our legal retention obligations outlined in Section 6.

We encourage you to review this Privacy Policy periodically to stay informed about how cv33bd protects your data. All previous versions of this Policy are available upon request by contacting [email protected].