cv89 Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how cv89 ("we", "us", "our") collects, uses, stores, and protects the personal data of individuals ("you", "User", "Player") who access or use the cv89 platform available at cv89.vip and any related services. This Policy forms part of the cv89 Terms and Conditions and should be read alongside them.

By registering an account on cv89, making a deposit, or continuing to use the platform after this Policy is published, you consent to the collection and processing of your personal data as described in this document. If you do not agree with the terms of this Policy, you should stop using the platform and close your account.

2 Information We Collect

cv89 collects personal data from you directly when you register and use the platform, and indirectly through automated systems during your interactions with the site. The categories of data we collect are:

cv89 does not collect sensitive personal data such as biometric data, health information, political views, or religious beliefs. Where KYC documents contain such information incidentally, it is processed only to the extent necessary to verify identity and age, and is not stored beyond that purpose.

3 How We Use Your Information

cv89 uses the personal data we collect for the following purposes, each of which has a defined legal basis described in Section 4:

• Account creation and management: to register your account, authenticate your identity, and maintain your player profile throughout your relationship with cv89.
• Financial transaction processing: to facilitate deposits via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to process withdrawal requests to your registered payment method.
• Identity and age verification (KYC): to comply with our obligations to prevent underage gambling and to verify that you meet the 21+ eligibility requirement before processing your first withdrawal.
• Customer support: to respond to your support queries, complaints, and feedback submitted through the platform's messaging system or via the support email address.
• Responsible gaming: to monitor your gaming behaviour, enforce deposit limits and self-exclusion settings you activate, and deliver session time reminders and reality check notifications.
• Fraud prevention and security: to detect and investigate suspicious account activity, protect the platform against money laundering, and enforce the prohibition on duplicate accounts.
• Platform improvement and analytics: to analyse aggregated, anonymised usage data that helps us improve the performance, design, and game offering of the cv89 platform. This processing does not identify individual users.

4 Legal Basis for Processing

cv89 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: processing required to register your account, process transactions, and deliver the gaming services you have requested.
• Legitimate interests: processing carried out to prevent fraud, detect money laundering, enforce platform security, and improve the platform, where these interests do not override your privacy rights.
• Legal obligation: processing necessary to comply with age verification requirements, AML obligations, and responses to lawful requests from regulatory or law enforcement authorities.
• Consent: processing for direct marketing communications, where you have provided consent via your account preferences. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

5 Sharing Your Information

cv89 does not sell, rent, or trade personal data. We share your personal data only in the following limited circumstances, and only to the extent necessary for the stated purpose:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard receive only the transaction data required to process your deposit or withdrawal. They do not receive your full account profile or gaming history.
• Game studio providers: Evolution Gaming, Pragmatic Play, Spribe, Ezugi, and other certified studios receive a session token and an anonymised player identifier to operate games. They do not receive your name, phone number, or financial data.
• Fraud prevention and identity verification partners: third-party KYC and AML screening services receive the minimum personal data necessary to perform identity checks, age verification, and sanctions screening.
• Law enforcement and regulatory authorities: we will disclose personal data to government bodies, law enforcement agencies, or courts when required by a lawful order, warrant, or regulatory obligation.

All third-party data processors who receive personal data from cv89 are bound by contractual data processing agreements that require them to process data only for the specific purpose for which it was shared, to maintain appropriate security measures, and to return or delete data when the processing purpose is fulfilled.

6 Cookies and Tracking Technologies

cv89 uses cookies and similar tracking technologies to operate the platform, maintain your session, and gather anonymised analytics data. The types of cookies we use are:

You can manage or delete non-essential cookies through your browser settings at any time. Please note that disabling essential cookies will affect the functionality of the cv89 platform, including your ability to stay logged in and complete transactions. cv89 does not use third-party advertising cookies or share cookie data with advertising networks.

7 Data Retention

cv89 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. Our specific retention periods are:

• Account data and transaction records are retained for a minimum of 5 years from the date of the last transaction on the account, to meet AML record-keeping obligations and to handle potential disputes.
• KYC identity documents are retained for 5 years from the date of account closure, in line with standard AML compliance requirements.
• Technical logs (IP address, session data) are retained for 12 months from collection for fraud investigation and security monitoring purposes.

When a retention period expires and there is no legal basis to continue holding the data, cv89 will securely delete or anonymise the data so that it can no longer be associated with an identifiable individual. Players may request early deletion of data that is not subject to a mandatory retention obligation by contacting the support team.

8 Data Security

cv89 takes the security of your personal data seriously and applies a layered set of technical and organisational measures to protect it from unauthorised access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the cv89 servers, ensuring that your credentials and financial information are protected in transit.
• Password hashing using industry-standard one-way hashing algorithms. cv89 staff cannot read your password in plain text and will never ask you for it.
• OTP (one-time password) verification for login and sensitive account actions, adding a second authentication factor beyond your password.
• Access controls that restrict platform staff access to personal data on a need-to-know basis, with audit logging of all access events involving sensitive account data.

9 Your Rights Over Your Data

As a user of cv89, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact the support team at [email protected] with your registered mobile number and a description of your request:

• Right of access: request a copy of all personal data cv89 holds about you, including transaction history and account profile information.
• Right of rectification: request correction of inaccurate or incomplete personal data held in your account.
• Right to erasure: request deletion of personal data that is no longer necessary for the purpose for which it was collected, subject to mandatory retention obligations cv89 is legally required to fulfil.
• Right to restrict processing: request that cv89 limits the way it processes your data while a dispute about accuracy or legal basis is being resolved.
• Right to data portability: request a machine-readable copy of your personal data in a structured, commonly used format, where the processing is based on your consent or a contract.
• Right to withdraw consent: withdraw consent for marketing communications or any other consent-based processing at any time, without affecting the lawfulness of processing conducted before the withdrawal.

cv89 will respond to all verified data rights requests within 30 days of receipt. In cases of complexity or high volume, this period may be extended by a further 60 days, in which case you will be notified of the extension within the initial 30-day window. Requests that cannot be granted due to a conflicting legal obligation will be explained in writing.

10 Third-Party Links and Services

The cv89 platform may reference third-party service providers such as game studios and payment processors. These third parties operate under their own privacy policies, which cv89 does not control. cv89 is not responsible for the privacy practices of any third party. When you interact directly with a third-party service (for example, completing a bKash transaction within the bKash app), you do so under the terms of that provider's own privacy notice. We encourage you to review the privacy policies of any third-party services you use in connection with cv89.

11 Children's Privacy

cv89 is an online gaming platform strictly for adults aged 21 and above. We do not knowingly collect personal data from anyone under the age of 21. The platform's registration process includes age declaration and KYC verification steps designed to prevent underage access. If cv89 discovers that personal data has been collected from a person under 21, that data will be permanently deleted and the associated account will be immediately closed.

12 Changes to This Privacy Policy

cv89 may update this Privacy Policy periodically to reflect changes in our data processing practices, legal requirements, or the features of the platform. When a material update is made, the revised Policy will be published on this page with an updated effective date. Where the change materially affects how we process your personal data, we will endeavour to notify you via SMS to your registered mobile number before the change takes effect.

Your continued use of cv89 after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you should close your account before the effective date. The date shown in the "Last Updated" field at the top of this page always reflects the date of the most recent revision.

13 Contact Our Privacy Team

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how cv89 handles your personal data, please contact our support team. We are available around the clock and will respond to all privacy-related enquiries within 30 days.

Privacy support email: [email protected]