cv8 Privacy Policy — Your Data, Your Rights

Our Privacy Commitments at a Glance

These six principles summarise how cv8 approaches data privacy. They are not a substitute for the full policy below, but they give you a clear picture of our core commitments before you read the detail.

1Introduction

This Privacy Policy ("Policy") describes how cv8 ("we", "us", "our") collects, uses, stores, and protects personal data provided by users ("you", "your") of the cv8 online casino and sports betting platform accessible at https://cv8.bet (the "Platform"). By registering an account and using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

This Policy applies to all personal data collected through the Platform, including data collected during registration, account use, payment transactions, and customer support interactions. If you do not agree with this Policy, you must not use the Platform.

2Information We Collect

cv8 collects personal data only to the extent necessary for the operation of the Platform and to fulfil our legal obligations. The categories of personal data we collect include:

• Identity data: full name, date of birth, gender, and nationality as provided during account registration and KYC verification.
• Contact data: email address, mobile phone number, and residential address. These are collected during registration and used for account communications and verification.
• Financial data: deposit and withdrawal transaction records, payment method identifiers (e.g. the mobile wallet number associated with your bKash, Nagad, Rocket, or Upay account), and account balance history.
• Technical data: IP address, device type, browser type and version, operating system, session identifiers, and page interaction logs. This data is collected automatically when you access the Platform and is used for security monitoring and service improvement.
• Support data: records of communications between you and the cv8 support team, including live chat transcripts, email correspondence, and complaint records, retained for quality assurance and dispute resolution purposes.

3How We Use Your Information

cv8 uses the personal data it collects for the following specific purposes, each of which is necessary for either the performance of the contract between you and cv8 or our compliance with applicable legal obligations:

• Account management: to create, administer, and maintain your player account, including verifying your identity during registration and subsequent KYC reviews.
• Payment processing: to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment methods, and to maintain accurate financial records associated with your account.
• Security and fraud prevention: to monitor account activity for signs of unauthorised access, fraudulent transactions, money laundering, and other prohibited conduct as defined in our Terms and Conditions.
• Legal compliance: to comply with applicable anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, and any lawful request from a competent regulatory authority or law enforcement agency.
• Customer support: to respond to your enquiries, resolve disputes, and improve the quality of our support services based on interaction records.

4Legal Basis for Processing

cv8 processes your personal data on one or more of the following legal grounds, depending on the specific category of data and the purpose for which it is processed:

• Contractual necessity: processing is required to fulfil our obligations under the account agreement and to provide the services you have requested, including account registration, deposit and withdrawal processing, and game access.
• Legal obligation: processing is required to comply with AML, KYC, and other applicable legal and regulatory requirements that cv8 is subject to as an online gambling operator.
• Legitimate interests: processing for fraud prevention, security monitoring, and service improvement purposes, where such processing does not override your fundamental privacy rights.

5Data Sharing and Disclosure

cv8 does not sell, rent, or otherwise transfer your personal data to third parties for commercial or marketing purposes. Personal data may be disclosed to third parties only in the following limited circumstances:

• Service providers: cv8 engages third-party technology partners, payment processors, and KYC verification providers who process personal data on our behalf under strict contractual data protection obligations. These providers are not permitted to use your data for any purpose other than those specified by cv8.
• Legal and regulatory disclosure: cv8 may disclose personal data to regulatory bodies, law enforcement agencies, or courts of competent jurisdiction when required to do so by law, court order, or a lawful request from a competent authority.
• Business transfers: in the event of a merger, acquisition, or sale of all or part of cv8's business, personal data held by cv8 may be transferred to the acquiring entity, subject to equivalent data protection commitments.

6Payment Data

When you make a deposit or request a withdrawal on cv8, your payment transaction is processed by our integrated payment partners, which include the mobile financial service providers bKash, Nagad, Rocket, and Upay. cv8 does not store full payment credentials such as complete mobile wallet PINs or bank account numbers on its own servers. Payment data is transmitted over encrypted channels and handled in accordance with the security standards required by the relevant payment providers.

Transaction records — including the date, amount, payment method type, and direction (deposit or withdrawal) of each transaction — are retained as part of your account history for the period specified in our data retention schedule. These records may be required for the purposes of resolving financial disputes, responding to regulatory enquiries, and fulfilling AML reporting obligations.

7Cookies and Tracking Technologies

cv8 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device by your browser. The types of cookies used by cv8 are as follows:

• Essential cookies: these are necessary for the Platform to function correctly and cannot be disabled. They include session authentication cookies, security tokens, and user preference settings that are required for the basic operation of your account.
• Analytics cookies: cv8 uses anonymised analytics data to understand how users interact with the Platform, which pages are visited most frequently, and where technical issues arise. This data is aggregated and does not identify individual users.
• You may configure your browser to block or delete cookies at any time. Please note that blocking essential cookies may impair the functionality of the Platform, including your ability to log in, access your account, or complete transactions.

8Data Retention

cv8 retains personal data for as long as your account remains active and for a minimum period of five years following account closure, unless a longer retention period is required by applicable law. The five-year minimum retention period reflects standard AML and financial record-keeping requirements applicable to online gambling operators. Transaction records and KYC documentation are retained for the full mandatory period regardless of account status.

When the applicable retention period expires and there is no longer a legal or operational basis for retaining your data, cv8 will securely delete or anonymise the relevant personal data. You may request early deletion of non-essential data by contacting our support team, subject to any overriding legal obligations that prevent deletion.

9Your Data Rights

You have the following rights in relation to the personal data that cv8 holds about you. To exercise any of these rights, please contact our support team by email at [email protected] with a clear description of your request and your registered account username.

• Right of access: you may request a copy of the personal data cv8 holds about you, together with information about how it is used and with whom it has been shared.
• Right to rectification: if any personal data cv8 holds about you is inaccurate or incomplete, you may request that it be corrected or updated without undue delay.
• Right to erasure: you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to any overriding legal retention obligations.
• Right to restriction: you may request that cv8 restrict its processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where you have objected to processing based on legitimate interests.
• Right to object: you have the right to object to processing of your personal data where cv8 relies on legitimate interests as its legal basis. cv8 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.

10Data Security

cv8 implements technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include SSL/TLS encryption for all data transmitted between your device and the Platform, secure server infrastructure with restricted access controls, regular security audits and vulnerability assessments, and staff training on data protection obligations.

Notwithstanding the security measures in place, no method of data transmission over the internet or electronic storage is completely secure. While cv8 takes all reasonable steps to protect your data, we cannot guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, cv8 will notify you and any applicable regulatory authority as required by law.

11Children and Minors

The cv8 Platform is strictly intended for adults aged 21 and above. cv8 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21 without appropriate verification, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the Platform, please contact our support team immediately at [email protected].

12Changes to This Privacy Policy

cv8 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the structure of the Platform. When we make material changes, we will publish the revised Policy on this page and update the "Last updated" date at the top of this document. We encourage you to review this Policy periodically to stay informed about how we protect your personal data.

13Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way cv8 handles your personal data, please contact our support team. Our team is available 24 hours a day, 7 days a week, and will endeavour to respond to all privacy-related enquiries within 5 business days.

You may reach the cv8 data team by email at [email protected]. Please include your registered account username, a clear description of your request or concern, and — where applicable — the specific section of this Policy your query relates to, so that we can route your request to the appropriate team member as efficiently as possible.