cv445 Privacy Policy

1. Introduction

cv445 ("we", "us", "our", "the Platform") operates the online casino and sports betting service accessible at cv445.io. In the course of providing these services to players based in Bangladesh and other permitted jurisdictions, we necessarily collect and process certain personal information about you ("Player", "User", "you").

This Privacy Policy sets out the types of personal data we collect, the purposes for which we process that data, the legal basis for each processing activity, the third parties with whom data may be shared, the measures we take to keep your data secure, and the rights available to you as a data subject. This policy applies to all data collected through the cv445 website, mobile web interface, customer support channels, and any related services.

By registering a cv445 account or continuing to use our platform after this policy has been published or updated, you acknowledge that you have read and understood how your personal data is handled as described in this document.

2. Data Controller

For the purposes of applicable data protection law, cv445 acts as the data controller in respect of personal data collected from players using the cv445 platform. If you have any questions, requests, or concerns relating to how your personal data is handled, please contact our dedicated data privacy contact using the details provided in Section 15 of this policy.

3. Data We Collect

We collect the following categories of personal data from players and prospective players:

3.1 Identity Data

• Full legal name (as shown on your national identity document)
• Date of birth (used to verify that you are aged 21 or above)
• Gender (collected optionally during registration)
• Nationality and country of residence
• Copies of identity documents submitted during KYC verification (National ID card, passport, driving licence)

3.2 Contact Data

• Email address
• Mobile phone number (including the number linked to your bKash, Nagad, or Rocket account)
• Residential address (district, division, and postal code within Bangladesh)

3.3 Financial Data

• Mobile financial service account identifiers (bKash, Nagad, Rocket, Upay wallet numbers — last four digits only stored post-verification)
• Card payment references (Visa and Mastercard — card numbers are never stored in full on cv445 servers; processing is handled by PCI-DSS compliant payment gateways)
• Transaction history: deposit amounts, withdrawal amounts , dates, and payment method references
• Account wallet balance history
• Bonus credit allocations and wagering progress records

3.4 Technical Data

• IP address and approximate geolocation (country and city level)
• Device type, operating system, and browser version
• Session timestamps and duration
• Unique device identifiers and cookie identifiers

3.5 Gameplay & Behavioural Data

• Game history: titles played, stakes placed, outcomes, session length
• Sports betting history: markets selected, odds accepted, settlement outcomes
• Responsible gaming tool usage: deposit limits set, cooling-off periods activated, self-exclusion requests
• Customer support interaction records (live chat transcripts, email correspondence)

3.6 Marketing & Communications Data

• Preferences and consent choices for promotional communications
• Response data from surveys or feedback requests (where voluntarily completed)

4. How We Collect Data

cv445 collects personal data through the following means:

• Direct registration: Information you provide when creating your account, completing KYC verification, or updating your profile.
• Transactions: Data generated automatically when you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, Visa, or Mastercard.
• Platform use: Data captured automatically as you navigate the cv445 website, launch games, and place bets — including device data, IP address, and session logs.
• Cookies and similar technologies: As described in Section 9, we use cookies and pixel tags to recognise returning visitors, maintain session state, and analyse platform performance.
• Customer support: Data you share when contacting our support team via live chat or email.
• Third-party game providers: Game studios such as Pragmatic Play, Evolution Gaming, and Ezugi may share session-level data with cv445 for the purpose of resolving disputes or verifying game outcomes. These studios do not share your identity data directly with cv445 beyond what we have already collected at registration.

5. Purpose & Legal Basis for Processing

The table below summarises the key purposes for which cv445 processes your personal data and the corresponding legal basis for each processing activity:

6. Data Sharing

cv445 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. We share personal data only in the following limited and controlled circumstances:

6.1 Payment Processors

To process deposits and withdrawals, we share the minimum necessary financial and identity data with our approved payment partners, including bKash, Nagad, Rocket, Upay, and PCI-DSS compliant card processing gateways. These partners act as independent data controllers for transactions conducted through their own systems and are bound by their own privacy policies and regulatory obligations.

6.2 Game Content Providers

Third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive a pseudonymous player identifier and session token to facilitate gameplay. These studios do not receive your full name, mobile number, or payment details unless specifically required to resolve a documented dispute, and only with appropriate safeguards in place.

6.3 KYC and Identity Verification Services

Where cv445 uses a third-party KYC verification provider to authenticate the identity documents you submit, that provider receives only the documents and data necessary to complete the verification check. KYC providers engaged by cv445 are contractually bound to use your data solely for the purpose of identity verification and to delete it promptly upon completion of that task.

6.4 Legal and Regulatory Disclosures

cv445 may disclose personal data to law enforcement agencies, regulatory bodies, courts, or other government authorities where we are required to do so by applicable law, valid legal process, or a binding court order. We will, where permitted, notify the affected player of any such disclosure.

6.5 Business Transfers

In the event that cv445 undergoes a merger, acquisition, or sale of all or a portion of its business assets, player data may be transferred to the acquiring entity as part of that transaction. Affected players will be notified of any such transfer and any material change to this privacy policy that results from it, with no less than 30 days' advance notice.

7. International Data Transfers

cv445 primarily stores and processes player data on servers located within or near the Asia-Pacific region. Some of our third-party service providers — including game studios and technical infrastructure providers — may process data in jurisdictions outside Bangladesh. Where personal data is transferred internationally, cv445 ensures that appropriate safeguards are in place, including contractual data protection clauses, to provide a level of protection equivalent to that applicable in the original jurisdiction of collection.

8. Data Retention

cv445 retains personal data for as long as is necessary to fulfil the purposes described in this policy, comply with legal obligations, and resolve disputes. The following general retention periods apply:

• Active account data: Retained for the full duration of your account and for a minimum of five (5) years after account closure, to satisfy anti-money laundering record-keeping obligations.
• Transaction records: Retained for a minimum of seven (7) years from the date of the transaction.
• KYC documents: Retained for five (5) years from the date of submission or the date of account closure, whichever is later.
• Customer support records: Retained for three (3) years from the date of the last interaction.
• Marketing consent records: Retained until you withdraw consent, plus an additional 12 months for audit purposes.
• Gameplay logs: Retained for a minimum of two (2) years for dispute resolution purposes, and longer where required by applicable regulations.

When personal data is no longer required, cv445 securely deletes or anonymises it in accordance with our internal data destruction procedures.

9. Cookies & Tracking Technologies

cv445 uses cookies and similar technologies (pixel tags, local storage) to operate and improve our platform. Cookies are small text files stored on your device that allow us to recognise you between sessions, maintain your login state, personalise your experience, and measure platform performance.

9.1 Types of Cookies We Use

• Essential cookies: Required for the platform to function. These include session authentication cookies and security tokens. You cannot opt out of these without losing access to the platform.
• Functional cookies: Remember your preferences such as language settings, preferred game category, and responsible gaming tool configurations.
• Analytics cookies: Collect anonymised or pseudonymised data about how players navigate cv445, which pages are most visited, and where technical errors occur. This data is used to improve platform performance and user experience.
• Marketing cookies: Used only where you have provided explicit consent, to personalise promotional content shown to you on the cv445 platform. cv445 does not use cross-site tracking cookies for advertising on third-party websites.

You may manage your cookie preferences through your browser settings at any time. Please note that disabling essential cookies will impair your ability to log in to and use the cv445 platform.

10. Security Measures

cv445 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure:

• Encryption in transit: All data transmitted between your device and cv445 servers is protected by 256-bit TLS/SSL encryption.
• Encryption at rest: Sensitive data fields — including identity document references, payment method identifiers, and account credentials — are encrypted at the database level.
• Access controls: cv445 staff access to player data is governed by role-based access controls and the principle of least privilege. Only staff with a demonstrable operational need may access personal data, and all access is logged.
• Two-factor authentication: Players are encouraged to enable two-factor authentication (2FA) on their cv445 accounts. Our internal systems require 2FA for all staff accessing production data environments.
• Security audits: cv445 conducts periodic security assessments and vulnerability testing of our platform infrastructure.
• Incident response: In the event of a personal data breach that poses a risk to affected players, cv445 will notify impacted players and, where applicable, relevant authorities within the timeframe required by law.

11. Your Rights

As a player whose personal data is processed by cv445, you hold the following rights. To exercise any of these rights, please contact us using the details in Section 15. We will respond to all verifiable requests within 30 days of receipt.

• Right of access: You may request a copy of the personal data cv445 holds about you, along with information about how that data is processed.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that we correct or complete it.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to any overriding legal obligations (such as anti-money laundering retention requirements) that require us to retain certain records.
• Right to restrict processing: In certain circumstances, you may request that we temporarily suspend active processing of your data while a dispute or correction request is pending.
• Right to data portability: You may request a machine-readable copy of the personal data you have provided to cv445, which you may then transfer to another service provider of your choice.
• Right to withdraw consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.
• Right to object: You may object to processing based on legitimate interest grounds. cv445 will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.

12. Children & Minors

cv445 strictly prohibits use of its platform by persons under the age of 21. We do not knowingly collect, process, or store personal data relating to individuals under 21. If we discover or are notified that a minor has registered an account or provided personal data, we will immediately close the account, delete the associated personal data, and void any associated balance. Parents or guardians who believe a minor has created a cv445 account should contact us immediately using the support details in Section 15.

13. Marketing Communications

cv445 may send you promotional communications — including bonus offers, seasonal promotions (such as Eid or Pohela Boishakh specials), tournament announcements, and game launch notifications — where you have provided explicit consent to receive such communications at the time of registration or subsequently through your account preferences panel.

You may opt out of marketing communications at any time by updating your preferences in your cv445 account settings or by contacting our support team directly. Opting out of marketing communications does not affect transactional communications such as deposit confirmations, withdrawal notifications, or security alerts, which are sent as a necessary part of operating your account.

14. Changes to This Policy

cv445 reserves the right to update or revise this Privacy Policy at any time. Where changes are material — for example, where we introduce a new category of data processing or a new type of third-party sharing — we will notify registered players by email and by posting a prominent notice on the cv445 platform no less than seven (7) days before the revised policy takes effect. The effective date at the top of this document will be updated to reflect the most recent revision. Your continued use of the cv445 platform after the effective date of any revision constitutes your acceptance of the updated policy.

15. Contact & Data Requests

For any questions, concerns, or formal requests relating to your personal data or this Privacy Policy, please contact cv445 through one of the following channels:

• Live Chat: Available 24/7 on the cv445 platform — the fastest route for straightforward data queries.
• Email: support at cv445.io — for formal data subject access requests, erasure requests, or privacy complaints. Please include "Privacy Request" in your subject line and provide sufficient information to verify your identity.
• Response time: cv445 will acknowledge receipt of a data subject request within 5 business days and will provide a substantive response within 30 calendar days of receipt. Complex requests may require up to 90 days, in which case we will notify you of the extension and the reasons for it.
• Support hours: 24/7, Bangladesh Standard Time (BST, UTC+6).