cv365 Privacy Policy

1 Overview & Scope

cv365 is an online casino and sports betting platform operated at the domain cv365.onl, serving registered players primarily based in Bangladesh. We take data protection seriously and are committed to handling all personal information in a lawful, transparent, and secure manner. This Privacy Policy applies to all personal data processed in connection with your use of the cv365 platform, including data collected during account registration, login, deposit and withdrawal transactions, gameplay, customer support interactions, and any marketing communications you opt in to receive.

This policy covers the following categories of data processing activity:

• Personal identification data collected during account registration and Know Your Customer (KYC) verification.
• Financial data associated with your deposit and withdrawal transactions in Bangladeshi Taka (৳ BDT).
• Technical and behavioural data generated by your use of the cv365 website and platform features.
• Communication data arising from your interactions with the cv365 customer support team via live chat, email, or WhatsApp.
• Marketing preferences and promotional communication records where you have opted in to receive them.

This Privacy Policy is written in English. In the event of any ambiguity or dispute, the English-language version of this document shall be the authoritative and definitive version.

2 Data We Collect

2.1 Registration & Identity Data

When you create a cv365 account, we collect the personal information necessary to establish and verify your identity. This includes:

• Full legal name
• Date of birth (to verify the 21+ age requirement)
• Residential address (including city — e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, or Mymensingh)
• Mobile phone number
• Email address
• Username and hashed password

2.2 KYC Verification Documents

As part of our identity verification (KYC) process, we may request and retain copies of the following documents:

• National ID card (NID) or passport
• Proof of address (utility bill, bank statement, or similar document dated within the last three months)
• Proof of payment method ownership (e.g., screenshot of bKash, Nagad, or Rocket account registered in your name)

2.3 Financial Transaction Data

We record all financial activity associated with your cv365 account, including deposit amounts (in ৳ BDT), withdrawal requests and outcomes, payment method identifiers (e.g., bKash mobile number or bank account number — never full card numbers), transaction timestamps, and bonus credits and wagering records.

2.4 Technical & Device Data

When you access the cv365 platform, our systems automatically collect certain technical information, including:

• IP address and approximate geolocation
• Browser type and version
• Device type (desktop, mobile, tablet) and operating system
• Session start and end times
• Pages visited and features accessed within the platform
• Referring URL (the web address you came from before visiting cv365.onl)

2.5 Gameplay & Betting Data

We retain detailed records of all games played and bets placed on the cv365 platform. This includes the game title and provider, stake amount, outcome, return to player (RTP) data, and timestamps. These records are maintained for dispute resolution, responsible gaming monitoring, and regulatory compliance purposes.

2.6 Customer Support Communications

If you contact our support team via live chat, email ([email protected]), or WhatsApp, we record the content of those communications for quality assurance, training, and dispute resolution purposes. These records are retained for a period of up to 24 months from the date of the communication.

2.7 Summary of Data Categories

3 How We Use Your Data

cv365 uses the personal data described above only for specific, legitimate purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The key purposes for which we process your personal data are as follows:

3.1 Account Management

To create, maintain, and administer your cv365 account. This includes verifying your identity at registration, processing your login credentials securely, and managing account preferences and settings.

3.2 Transaction Processing

To process your deposit and withdrawal requests in ৳ BDT via your chosen payment method (bKash, Nagad, Rocket, Upay, bank transfer, or card). Financial transaction data is retained to provide an accurate account history and to resolve any payment disputes.

3.3 Regulatory & Legal Compliance

To fulfil our obligations under applicable anti-money laundering (AML) regulations, including conducting Know Your Customer (KYC) checks, verifying the source of funds where required, and maintaining transaction records for the mandated retention period. We may be legally required to disclose certain data to relevant authorities upon valid request.

3.4 Fraud Prevention & Security

To detect, investigate, and prevent fraudulent activity, unauthorised account access, money laundering, and other illegal or policy-violating conduct on the cv365 platform. Technical and device data plays a critical role in identifying suspicious patterns of behaviour.

3.5 Responsible Gaming

To monitor gameplay patterns and identify players who may be exhibiting signs of problem gambling — for example, unusually rapid increases in bet size, extended unbroken sessions, or repeated self-exclusion override attempts. Where such patterns are detected, cv365 may reach out proactively or apply responsible gaming interventions.

3.6 Customer Support

To handle your support enquiries, complaints, and disputes efficiently and fairly. Support communications are logged to ensure consistency and to provide context when a follow-up contact is made.

3.7 Platform Improvement

To analyse aggregated, anonymised usage data for the purpose of improving the cv365 platform — including game selection, navigation, payment flows, and customer support processes. This analysis does not involve the use of individually identifiable data.

3.8 Marketing Communications

To send you promotional communications — including information about bonuses, seasonal offers (such as BPL cricket promotions, Eid specials, or Pohela Boishakh campaigns), and new game launches — only where you have given explicit prior consent to receive such communications. You may withdraw this consent at any time by contacting our support team or updating your communication preferences within your account settings.

4 Legal Basis for Processing

cv365 processes your personal data on one or more of the following legal bases, depending on the nature of the processing activity:

• Contractual Necessity: Processing is required to perform the contract between you and cv365 — specifically, to operate your account, process transactions, and deliver the platform services you have registered to use.
• Legal Obligation: Processing is required to comply with our legal obligations, including KYC identity verification, AML record-keeping requirements, and responding to lawful requests from authorities.
• Legitimate Interests: Processing is necessary for cv365's legitimate business interests — including fraud prevention, platform security, responsible gaming monitoring, and internal analytics — provided those interests are not overridden by your own privacy rights.
• Consent: Where processing is not covered by the above bases — in particular, for marketing communications and certain non-essential cookies — cv365 relies on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing that took place prior to withdrawal.

5 Data Sharing & Disclosure

cv365 does not share your personal data with third parties except in the specific circumstances described below. In all cases, data sharing is limited to what is strictly necessary for the stated purpose.

5.1 Payment Processors

To process your deposits and withdrawals, cv365 shares relevant financial data with your chosen payment provider — for example, bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, or Mastercard. These providers process your payment data under their own privacy policies and security standards. cv365 shares only the minimum data required to complete the transaction.

5.2 Game Providers

When you play a game supplied by a third-party provider such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, or Microgaming, certain technical session data (such as a session token and stake amount) is transmitted to the relevant provider to enable gameplay. These providers do not receive your full personal profile and are contractually prohibited from using session data for their own independent purposes.

5.3 Fraud Prevention & Security Partners

cv365 may share technical and behavioural data with specialist fraud prevention and cybersecurity service providers who assist us in identifying and investigating suspicious activity on the platform. These providers act as data processors on our behalf and are bound by strict confidentiality obligations.

5.4 Legal & Regulatory Authorities

cv365 may disclose personal data to law enforcement agencies, financial intelligence units, regulatory bodies, or courts where we are legally required to do so — for example, in response to a valid subpoena, court order, or formal regulatory investigation. In such cases, cv365 will disclose only the data specifically requested and will notify the relevant player where legally permitted to do so.

5.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of the cv365 business, personal data held by cv365 may be transferred to the acquiring entity as part of that transaction. In such circumstances, cv365 will take reasonable steps to ensure that the acquiring entity honours the commitments made in this Privacy Policy.

6 Data Retention

cv365 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

Following the expiry of the applicable retention period, cv365 will securely delete or irreversibly anonymise the relevant personal data. Anonymised aggregate data (which cannot be used to identify any individual) may be retained for statistical and platform improvement purposes beyond these periods.

7 Cookies & Tracking Technologies

7.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits and to store information about your preferences and session state. cv365 uses cookies and similar tracking technologies (such as browser local storage and session tokens) to operate the platform effectively and to provide you with a personalised experience.

7.2 Types of Cookies We Use

• Strictly Necessary Cookies: These cookies are essential for the cv365 platform to function. They enable core features such as secure login sessions, account authentication, and shopping cart / deposit flow state. The platform cannot function properly without these cookies, and they do not require your consent.
• Functional Cookies: These cookies remember your preferences — such as your preferred language (English) and display settings — to personalise your experience on the cv365 platform across sessions. They are set only with your consent.
• Analytics Cookies: These cookies collect anonymised, aggregated information about how players use the cv365 platform — including which pages are most visited, how long sessions typically last, and where players navigate after landing on the homepage. This data helps us improve the platform. Analytics cookies are set only with your consent.
• Security Cookies: These cookies assist our fraud detection and security systems in identifying unusual or potentially malicious patterns of access to the cv365 platform.

7.3 Managing Cookies

You can control and manage cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies at any time. Please note that blocking strictly necessary cookies will prevent you from logging in to your cv365 account and using core platform features. For detailed guidance on managing cookies in your specific browser, refer to your browser's help documentation.

8 Your Rights

As a cv365 account holder, you hold a number of rights in respect of the personal data we process about you. These rights are summarised below. To exercise any of these rights, please contact our support team using the contact details in Section 12 of this policy.

8.1 Right of Access

You have the right to request a copy of the personal data cv365 holds about you. We will respond to verified access requests within a reasonable timeframe. The response will describe the categories of data held, the purposes for which it is processed, and any third parties with whom it has been shared.

8.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update many details (such as your contact email or residential address) directly within your cv365 account settings. For changes to identity data (such as your legal name or date of birth), please contact our support team and provide appropriate documentary evidence.

8.3 Right to Erasure

In certain circumstances, you have the right to request the deletion of personal data cv365 holds about you — commonly referred to as the "right to be forgotten". This right is not absolute: cv365 may be required to retain certain data (such as KYC and financial transaction records) to comply with legal and regulatory obligations, even after your account has been closed. Where deletion is not possible in full, cv365 will explain why and delete what it lawfully can.

8.4 Right to Restrict Processing

In certain circumstances — for example, where you contest the accuracy of data we hold, or where you have objected to processing and we are considering your objection — you have the right to request that we temporarily restrict our processing of your personal data.

8.5 Right to Data Portability

Where processing is based on your consent or on contractual necessity, and where the processing is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format.

8.6 Right to Withdraw Consent

Where cv365 processes your data on the basis of consent (in particular, for marketing communications and non-essential cookies), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal. To withdraw marketing consent, update your preferences in account settings or contact our support team.

8.7 Right to Object

You have the right to object to cv365 processing your personal data on the basis of legitimate interests. Where such an objection is raised, cv365 will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or where the processing is necessary for the establishment, exercise, or defence of legal claims.

9 Data Security

cv365 takes the security of your personal data seriously and maintains a comprehensive set of technical and organisational measures to protect it against unauthorised access, disclosure, alteration, loss, or destruction. Key security measures in place include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the cv365 platform is encrypted using industry-standard 256-bit SSL/TLS technology, protecting it from interception in transit.
• Encrypted Data Storage: Sensitive personal data — including identity documents and financial records — is stored in encrypted form on secure servers. Passwords are hashed using a strong one-way algorithm; cv365 never stores passwords in plain text.
• Access Controls: Access to personal data within the cv365 organisation is strictly limited on a need-to-know basis. Staff members can only access the specific data required to perform their job functions. All access is logged and audited.
• Two-Factor Authentication: cv365 supports SMS OTP-based two-factor authentication for account logins, providing an additional layer of security beyond your password.
• Fraud Detection Systems: Automated systems monitor account activity in real time for patterns consistent with unauthorised access, account takeover, and fraudulent transactions. Suspicious activity triggers immediate alerts and, where appropriate, temporary account holds pending investigation.
• Regular Security Reviews: cv365 conducts regular internal reviews of its data security practices to identify and address potential vulnerabilities before they can be exploited.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, cv365 will notify affected players promptly and take all necessary steps to contain and remediate the breach.

10 Children & Minors

cv365 is strictly an adult platform. The minimum age to register and use any feature of the cv365 platform is 21 years. We do not knowingly collect personal data from any person under the age of 21. Age verification is performed as part of the standard account registration and KYC process.

If cv365 becomes aware that personal data has been collected from a person under the age of 21, the relevant account will be immediately suspended, all associated data will be securely deleted or isolated, and any funds held in the account will be handled in accordance with our standard underage account procedure.

If you are a parent or guardian and you believe that a minor in your care has created a cv365 account, please contact our support team at [email protected] immediately. We will take prompt action to investigate and close the account.

11 Changes to This Policy

cv365 reserves the right to update or amend this Privacy Policy at any time. Changes may be made to reflect updates in applicable law, changes in our data processing practices, improvements to the cv365 platform, or feedback received from players. The revised policy will be published at cv365.onl/privacy-policy with an updated effective date at the top of the document.

Where a change is material — meaning it significantly affects how we process your personal data or the rights available to you — cv365 will provide advance notice via email to the address registered on your account, or via a prominent notice displayed when you next log in to the platform. We recommend that you review this Privacy Policy periodically to stay informed of any updates.

Your continued use of the cv365 platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with any updated version of this policy, you should discontinue use of the platform and contact our support team to request account closure.

12 Contact & Data Requests

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data cv365 holds about you, please reach out to our support team using any of the channels below. All data-related enquiries are handled by trained staff who can assist you with access requests, rectification requests, erasure requests, and complaints.

12.1 Support Channels

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week via the cv365 platform. Average first response time: 2–5 minutes.
• WhatsApp: The cv365 WhatsApp support number is made available to verified account holders after login. It is not publicly listed for security reasons.

12.2 Response Timeframes

cv365 aims to acknowledge all privacy-related enquiries within 24 hours of receipt and to provide a substantive response within 30 days. In cases of particular complexity, the response period may be extended by up to a further 30 days, in which case we will inform you of the extension and the reason for it within the initial 30-day period.

12.3 Identity Verification for Data Requests

To protect your personal data from unauthorised disclosure, cv365 will verify your identity before processing any data rights request. You will be asked to confirm at minimum your registered email address, username, and one additional piece of identifying information. In some cases, we may request a copy of your ID document to complete verification.