Privacy Policy — Your Data at cvkkk

1 Information We Collect

When you interact with the cvkkk platform — from registration through to active play and withdrawal — we collect and process the following categories of personal information:

Where we ask for identity documents to complete KYC (Know Your Customer) verification — such as a copy of your National Identity Card (NID), passport, or utility bill — these documents are processed securely and used exclusively for identity and age verification purposes. We do not store unencrypted document images longer than is necessary for verification.

We do not collect sensitive personal data such as racial or ethnic origin, religious beliefs, or health information unless you voluntarily disclose such information in a support interaction and it is directly relevant to your query.

2 How We Use Your Data

cvkkk uses the personal data we collect to deliver, maintain, and continually improve our platform services for players across Bangladesh. The specific purposes for which your data is processed are as follows:

• Account Management: To create and manage your cvkkk account, verify your identity and age (18+ confirmation), and keep your account secure.
• Service Delivery: To process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment methods; to credit your account with winnings; and to resolve any transaction disputes.
• Legal & Compliance: To fulfil our obligations under applicable anti-money laundering (AML) and counter-financing of terrorism (CFT) frameworks, including transaction monitoring and suspicious activity reporting where required.
• Fraud Prevention: To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, and any other conduct prohibited under our Terms & Conditions.
• Customer Support: To respond to your queries, process complaints, and provide technical assistance through our 24/7 English-language support team.
• Platform Improvement: To analyse usage patterns and technical performance data to improve the reliability, speed, and quality of the cvkkk platform and its game offerings from providers including Pragmatic Play, Evolution Gaming, and Spribe.
• Responsible Gaming: To monitor for indicators of problem gambling behaviour and to apply any self-exclusion, deposit limit, or time-out tools you have activated on your account.
• Marketing Communications: To send you promotional offers, bonus alerts, and news about upcoming tournaments (BPL season, IPL, Eid promotions) via your registered email or mobile number — but only where you have provided explicit consent to receive such communications, and subject to easy opt-out at any time.

3 Legal Basis for Processing

cvkkk processes your personal data on the following legal grounds, depending on the specific activity involved:

• Contractual Necessity: Processing that is required to fulfil our agreement with you — including account creation, payment processing, and game provision — is carried out on the basis that it is necessary to perform the contract between us.
• Legal Obligation: Certain processing activities — particularly KYC verification, AML transaction monitoring, and the maintenance of financial records — are carried out to comply with applicable legal and regulatory requirements.
• Legitimate Interests: We process some data on the basis of our legitimate interests in operating a secure, fair, and commercially viable online gaming platform. This includes fraud detection, platform analytics, and responsible gaming monitoring. We conduct a balancing assessment to ensure our interests do not override your privacy rights.
• Consent: Where we rely on your consent as the legal basis for processing — most notably for marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

4 Data Sharing & Disclosure

cvkkk does not sell or commercially transfer your personal data to third parties. However, we do share data with a carefully selected set of trusted partners and service providers where it is necessary to operate our platform effectively and lawfully. All third-party data processors are bound by strict confidentiality obligations and are permitted to use your data only for the specific purpose for which it was shared.

Categories of third parties with whom cvkkk may share your personal data include:

• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, and cryptocurrency processing partners — to facilitate deposits and withdrawals on your behalf.
• Game Software Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — solely to the extent required to deliver game services. These providers are subject to their own data protection obligations.
• Identity Verification Services: Third-party KYC and age verification partners who process your identity documents to confirm your eligibility to use the platform.
• Fraud & Security Partners: Specialist fraud detection and cybersecurity service providers who assist us in identifying and preventing unauthorised account access and financial crime.
• Legal & Regulatory Authorities: We may disclose your data to law enforcement agencies, financial intelligence units, or other governmental authorities where we are legally required to do so, or where we reasonably believe disclosure is necessary to prevent serious harm or financial crime.
• Professional Advisors: Lawyers, auditors, and accountants who are bound by professional confidentiality obligations and assist us in meeting our compliance and governance responsibilities.

5 Cookies & Tracking Technologies

cvkkk uses cookies and similar tracking technologies on its platform to ensure core functionality, maintain session security, and understand how players interact with our services. The table below summarises the types of cookies we deploy:

cvkkk does not use third-party advertising cookies or tracking pixels that share your browsing behaviour with external advertisers. Our analytics data is processed internally and is not commercially shared with advertising networks.

To manage cookies, you can adjust the settings in your web browser (Chrome, Firefox, Safari, or any other browser you use). Please note that disabling strictly necessary or security cookies may impair the functionality of your cvkkk account, including the ability to log in and process transactions.

6 Data Retention

cvkkk retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, financial, and compliance obligations. The following retention periods apply as general guidelines:

• Account Data (active accounts): Retained for the full duration of your account's active status plus a post-closure retention period of five (5) years to meet financial record-keeping and AML compliance requirements.
• Transaction Records: All deposit, withdrawal, and wager records are retained for a minimum of five (5) years following the date of the transaction, in line with standard financial compliance practice.
• KYC & Identity Documents: Retained for five (5) years following account closure or the last verified transaction, whichever is later.
• Customer Support Records: Email and chat correspondence is retained for two (2) years following the close of the relevant support ticket.
• Marketing Consent Records: Records of your marketing consent or opt-out are retained for the duration of your account lifecycle plus two (2) years.
• Technical Logs: Server access logs and security event logs are retained for ninety (90) days under standard operational practice, after which they are anonymised or deleted.

Upon expiry of the applicable retention period, your personal data is either securely deleted or anonymised such that it can no longer be linked to your identity. Anonymised aggregate data may be retained indefinitely for statistical analysis and platform improvement purposes.

7 Your Privacy Rights

As a cvkkk player, you hold the following rights in relation to the personal data we hold about you. These rights can be exercised at any time by contacting our Privacy Team at [email protected]. We will acknowledge all rights requests within 48 hours and aim to fulfil them within 30 days of receipt.

8 Data Security Measures

cvkkk takes the security of your personal data seriously and maintains a comprehensive set of technical and organisational security measures designed to protect against unauthorised access, accidental loss, destruction, or disclosure. Our current security framework includes:

• 256-bit SSL/TLS Encryption: All data in transit between your browser and our servers is protected by 256-bit SSL/TLS encryption. Look for the padlock icon in your browser address bar when accessing cvkkk.net.
• Encrypted Data Storage: Sensitive personal data including financial details and identity document copies are stored in encrypted form in our secured database infrastructure. Encryption keys are managed separately from the data they protect.
• Access Controls: Access to personal data within cvkkk's internal systems is restricted to authorised personnel on a strict need-to-know basis. All internal access is logged and subject to regular audit review.
• OTP Two-Factor Authentication: We offer and strongly encourage the use of one-time password (OTP) two-factor authentication for all player accounts, providing an additional layer of protection particularly relevant when using mobile payment methods such as bKash and Nagad.
• Device Fingerprinting: Our fraud prevention systems use device fingerprinting technology to detect and flag suspicious or anomalous access patterns, including multi-account creation attempts.
• Regular Security Audits: Our platform infrastructure undergoes regular independent security assessments. Identified vulnerabilities are addressed through a formal patch management process.

Despite these measures, no online platform can guarantee absolute security. In the unlikely event of a data breach that poses a risk to your rights and freedoms, cvkkk will notify affected players promptly and take all necessary remedial steps.

9 Third-Party Services & Providers

The cvkkk platform integrates with a range of third-party service providers to deliver game content, process payments, and maintain platform security. While cvkkk carefully vets all third-party partners and requires them to uphold appropriate data protection standards, we wish to make clear that these providers operate under their own privacy policies in relation to data processed on their own systems.

Key third-party integrations on the cvkkk platform include:

• Game Content Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi deliver game content through embedded interfaces. These providers may process certain technical data (such as game session identifiers) as part of game delivery. They are contractually prohibited from using such data for any purpose beyond game provision.
• Payment Partners: bKash, Nagad, Rocket, and Upay process payment transactions on their own regulated platforms. Any data you enter directly into a bKash or Nagad interface (such as your mobile wallet PIN) is subject to those providers' own privacy policies and is not accessible to cvkkk.
• Analytics Infrastructure: cvkkk uses internally hosted analytics tools to monitor platform performance. We do not use Google Analytics or other externally hosted analytics services that would transfer your usage data to third-party advertising ecosystems.

Links to external websites appearing on the cvkkk platform (if any) are provided for informational purposes only. cvkkk is not responsible for the privacy practices of any linked third-party website and encourages you to review the privacy policies of any third-party sites you visit.

10 Children's Privacy

cvkkk employs active age verification processes at the point of registration and during KYC review to confirm that all players meet the minimum age requirement of 18 years. Where we have reasonable grounds to suspect that a registered account is held by an individual under 18, we will immediately suspend the account and initiate an age verification review.

If a parent or guardian believes that their child has accessed or registered on the cvkkk platform, we ask that they contact us immediately at [email protected]. We will take prompt action to close the account, delete any personal data collected in connection with the underage access, and refund any deposits to the funding source, in accordance with our Terms & Conditions.

We also encourage parents and guardians to make use of freely available parental control software tools to restrict access to online gambling platforms across all devices used by minors in their household.

11 Updates to This Policy

cvkkk reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. When material changes are made to this policy, we will notify active players via the email address registered to their account and will update the "Effective Date" at the top of this document.

We encourage you to review this Privacy Policy periodically to stay informed about how cvkkk protects and processes your personal data. Your continued use of the cvkkk platform following the publication of any revised Privacy Policy constitutes your acknowledgement of the changes.

12 Contact Our Privacy Team

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data cvkkk holds about you, please contact our Privacy Team using the details below. All privacy-related communications should be submitted in writing to ensure a complete and auditable record of your request.

For matters related to account self-exclusion, deposit limits, or responsible gaming support, please refer to our dedicated Responsible Gaming page. For general questions about platform rules and account management, our FAQ page is a useful first resource.

All formal legal correspondence, including data subject access requests, erasure requests, and objection notices, should be submitted in writing to [email protected] and will be handled by our dedicated privacy compliance team.