cvk33 Privacy Policy

cvk33 collects personal data through several channels: directly from you during registration and account management, automatically through your use of the platform, and from third-party sources such as payment processors and identity verification providers. The categories of information we collect are described below.

1.1 Registration and Identity Data

When you create a cvk33 account, we collect your full legal name, date of birth, nationality, residential address, email address, and mobile phone number. This information is required to establish your identity, verify your age (18+ requirement), and create a unique account record associated with you as an individual.

1.2 Identity Verification (KYC) Documents

As part of our Know Your Customer (KYC) obligations, we may request copies of government-issued identity documents such as your National Identity Card (NID), passport, or birth certificate. We may also request proof of address documents including utility bills, bank statements, or government correspondence dated within the last three months. Where required by our anti-money laundering (AML) policy, we may additionally request source-of-funds documentation.

1.3 Financial and Transaction Data

cvk33 records all deposit and withdrawal transactions processed through your account, including the payment method used (bKash, Nagad, Rocket, Upay, bank transfer, Visa, Mastercard), transaction amounts in Bangladeshi Taka (৳), transaction timestamps, and reference numbers. We do not store full payment card numbers on our servers — card data is tokenised by our payment processing partners.

1.4 Usage and Behavioural Data

When you use the cvk33 platform, we automatically record data about your activity, including:

• Games played, bet amounts, game outcomes, and session duration.
• Pages and sections of the platform you visit, and the time spent on each.
• Search queries entered within the platform.
• Bonus offers viewed, claimed, and wagered.
• Sports betting markets browsed and bets placed on events such as BPL, IPL, T20 World Cup, and football fixtures.

1.5 Technical and Device Data

We collect technical data relating to the device and network you use to access cvk33, including your IP address, device type, operating system, browser type and version, screen resolution, and general geographic location inferred from your IP address. This data is used for fraud prevention, platform optimisation, and security monitoring.

1.6 Communications Data

If you contact our support team via email or live chat, or if you submit a complaint or dispute, we retain records of that communication including the content of messages, timestamps, and any attachments submitted. This data is used to resolve your query and to improve our service quality.

cvk33 uses your personal data only for clearly defined, legitimate purposes. We do not process your data in ways that are incompatible with the purposes listed below. Our primary purposes for processing personal data are:

Marketing Communications: cvk33 will only send you promotional emails, SMS notifications, or in-platform messages about bonuses, tournaments, and seasonal offers (such as BPL season promotions or Eid special offers) if you have explicitly opted in to receive marketing communications during registration or through your account settings. You may opt out of marketing communications at any time by updating your account preferences or by contacting [email protected].

Automated Decision-Making: cvk33 uses automated systems to detect suspicious account activity, identify potential problem gambling patterns, and flag transactions that may be inconsistent with our AML policy. Where an automated decision materially affects your account — such as a temporary transaction restriction — you have the right to request a human review of that decision by contacting our compliance team.

cvk33 does not sell your personal data. We may, however, share your data with specific categories of trusted third parties where it is necessary to deliver our services, comply with legal obligations, or protect the security of the platform. All third-party data processors engaged by cvk33 are bound by contractual data protection obligations consistent with the standards described in this Privacy Policy.

3.1 Payment Processing Partners

To process deposits and withdrawals, cvk33 shares necessary transaction data with our payment partners including bKash, Nagad, Rocket, and Upay (for mobile financial services), and with international card scheme processors for Visa and Mastercard transactions. These partners receive only the data required to complete the specific transaction — they do not receive your full gaming history or account profile.

3.2 Identity Verification Services

For KYC purposes, cvk33 may share identity document images and personal details with accredited third-party identity verification providers. These providers are engaged solely to confirm the authenticity of the documents submitted and the identity of the account holder. Their use of your data is restricted to this purpose.

3.3 Game Software Providers

When you play games powered by third-party studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi, a session token is shared with the relevant provider to facilitate game loading and record bet settlements. Game providers receive a pseudonymous player identifier — they do not receive your full name, contact details, or financial information.

3.4 Legal and Regulatory Disclosure

cvk33 may disclose your personal data to law enforcement agencies, regulators, or judicial authorities where required to do so by applicable law, court order, or regulatory directive. We may also disclose data where we believe in good faith that such disclosure is necessary to prevent fraud, money laundering, or other criminal activity, or to protect the rights, property, or safety of cvk33, its members, or the public.

cvk33 uses cookies and similar tracking technologies (including local storage objects and session tokens) to operate the platform, remember your preferences, maintain your logged-in session, and gather analytics data that helps us improve the user experience. The categories of cookies we use are as follows:

• Essential Cookies: These cookies are strictly necessary for the platform to function. They manage your login session, maintain your account state across pages, and enable core security features. Essential cookies cannot be disabled without breaking platform functionality.
• Analytics Cookies: We use anonymised analytics data to understand how members navigate the platform — which pages are most visited, where users encounter friction, and how game category preferences vary across regions like Dhaka, Chittagong, and Sylhet. This data is aggregated and does not identify you individually.
• Fraud Prevention Cookies: Certain cookies are used by our security systems to detect and prevent fraudulent account activity, bot traffic, and automated abuse. These cookies collect device fingerprint signals and are essential to platform integrity.
• Preference Cookies: These cookies remember your platform preferences such as display language, preferred payment method, and notification settings, so you do not need to re-configure them on each visit.

Managing Cookies: You may control cookie settings through your browser's privacy preferences. Disabling non-essential cookies will not prevent you from accessing the platform, but may affect certain features such as saved preferences. Note that disabling essential and fraud prevention cookies may prevent you from logging in or using real-money features.

cvk33 retains your personal data only for as long as it is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as standard:

When personal data reaches the end of its applicable retention period, cvk33 will securely delete or permanently anonymise it. Secure deletion means the data is rendered unrecoverable using methods consistent with industry best practices for data destruction.

If you request deletion of your account and personal data under your right to erasure (see Section 7), cvk33 will process your request subject to any overriding legal obligations — for example, transaction records subject to a 7-year financial retention requirement cannot be deleted before that period expires, but they will be restricted from active use and deleted promptly once the retention period ends.

cvk33 takes the security of your personal data seriously. We have implemented a layered set of technical and organisational security measures designed to protect your information against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes the following controls:

• Transport Layer Security (TLS 1.3): All data transmitted between your browser or app and cvk33's servers is encrypted using TLS 1.3, the current industry standard for secure web communications. Look for the padlock icon in your browser's address bar when accessing cvk33.app.
• AES-256 Encryption at Rest: Personal data and identity documents stored on cvk33's servers are encrypted at rest using AES-256 encryption. This means that even in the unlikely event of a server-level breach, the data remains unreadable without the corresponding decryption keys.
• Two-Factor Authentication (2FA): cvk33 supports two-factor authentication for member accounts to provide an additional layer of login security beyond username and password.
• Intrusion Detection and Monitoring: cvk33's infrastructure is monitored 24 hours a day, 7 days a week by automated intrusion detection systems. Suspicious access patterns trigger immediate alerts to our security team for investigation.
• Penetration Testing: cvk33's platform undergoes regular independent penetration testing to identify and remediate potential vulnerabilities before they can be exploited.
• Staff Training and Access Controls: All cvk33 employees who handle personal data receive mandatory data protection training. Access to personal data is restricted to authorised personnel only, governed by a principle of least privilege.

Data Breach Response: In the event of a personal data breach that poses a risk to the rights and freedoms of affected members, cvk33 will notify affected individuals without undue delay — and in any case within 72 hours of becoming aware of the breach — by email to their registered address. The notification will describe the nature of the breach, the categories of data affected, and the steps cvk33 is taking to mitigate the impact.

As a cvk33 member, you hold a set of rights with respect to the personal data we hold about you. cvk33 is committed to honouring these rights promptly and transparently. To exercise any of the rights listed below, please contact our data protection team at [email protected], clearly stating the right you wish to exercise and providing sufficient information to verify your identity. We will respond within 30 days of receipt of a valid request.

cvk33 will not charge a fee for processing a data rights request unless the request is manifestly unfounded or excessive. In such cases, we may charge a reasonable administrative fee or refuse to act on the request, providing written reasons for our decision.

If you have any questions, concerns, or requests relating to this Privacy Policy or to cvk33's handling of your personal data, please contact our data protection team using the details below. We aim to respond to all privacy-related enquiries within 5 business days.

Data Protection Contact:
Email: [email protected]
Subject line: "Privacy Policy Enquiry — [Your Account Username]"
Response time: Within 5 business days (Bangladesh Standard Time, UTC+6)

How to Make a Complaint: If you are not satisfied with how cvk33 has handled a privacy matter after raising it directly with our support team, you may escalate your complaint to our senior compliance team by emailing [email protected] with the subject line "Privacy Complaint Escalation". We will acknowledge your escalation within 48 hours and provide a final determination within 21 business days.

cvk33 takes all privacy complaints seriously and will investigate every escalated matter thoroughly. We are committed to resolving privacy concerns fairly and transparently. Where a complaint cannot be resolved to your satisfaction through our internal process, you may seek independent dispute resolution through your local consumer protection channels.