cvkk Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how cvkk ("cvkk", "we", "us", "our") collects, processes, stores, and protects the personal information of individuals ("you", "your", "Player") who register an account, visit the cvkk platform, or otherwise interact with our services. This Policy forms part of the overall legal framework governing your use of cvkk and should be read in conjunction with our Terms and Conditions.

cvkk is committed to handling your personal data with transparency, integrity, and care. We recognise that the players who choose cvkk as their online gaming platform are placing trust in us, and we take that responsibility seriously. Every data processing activity carried out by cvkk has a defined purpose, a lawful basis, and appropriate technical safeguards in place.

This Policy applies to all personal data collected through the cvkk website, any cvkk mobile application where applicable, our customer support channels, and any other cvkk-operated digital touchpoint. It applies equally to players in Dhaka, Chittagong, Sylhet, Rajshahi, Khulna, Barisal, Rangpur, Mymensingh, Cox's Bazar, and all other locations across Bangladesh from which our platform is accessed.

2 Data We Collect

cvkk collects only the personal data that is necessary to deliver our services safely, fairly, and in compliance with applicable legal and regulatory requirements. The categories of personal data we collect are described in the table below.

We do not collect sensitive special-category data such as biometric information, health records, racial or ethnic origin, religious beliefs, or political opinions. If you choose to share any such information voluntarily with our support team, we will treat it with heightened confidentiality and will not retain it beyond the immediate purpose for which it was shared.

3 How We Collect Your Data

cvkk collects personal data through the following channels:

• Direct Registration: When you create an account on the cvkk platform, you provide identity and contact data directly through the registration form.
• Account Verification (KYC): When you submit documents for identity verification, we collect and store copies of those documents in our secure compliance system.
• Deposit and Withdrawal Transactions: Financial data is collected each time you initiate a deposit or withdrawal, including the payment method used and the amounts involved.
• Platform Interaction: Technical and usage data is collected automatically as you navigate the cvkk platform, through server logs, session tracking, and analytics tools.
• Customer Support: When you contact our support team via live chat or email, we collect and store the content of that communication along with any supporting information you provide.
• Cookies and Similar Technologies: We use cookies, pixel tags, and local storage to collect technical and behavioural data. See Section 7 for full details.
• Third-Party Sources: In limited cases, we may receive data from third-party identity verification providers or fraud prevention services to supplement the information you have provided directly.

4 How We Use Your Data

cvkk processes your personal data for the following purposes:

• Account Management: To create, maintain, and administer your cvkk account, including processing your registration, verifying your identity, and enabling login access.
• Payment Processing: To process deposits via bKash, Nagad, Rocket, Upay, and other supported methods, and to facilitate the withdrawal of winnings to your verified payment account.
• Legal Compliance: To comply with anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements, and any other applicable legal obligations.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, account takeover attempts, multi-accounting, and other prohibited conduct.
• Responsible Gaming: To monitor gameplay patterns for signs of problem gambling behaviour and to apply any deposit limits, session limits, or self-exclusion requests you have submitted.
• Customer Support: To respond to your queries, complaints, and requests via live chat and email, and to maintain records of support interactions for quality assurance.
• Platform Improvement: To analyse aggregated usage data and improve the functionality, performance, and content of the cvkk platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and personalised recommendations — but only where you have given explicit consent to receive such communications. You may withdraw consent at any time by contacting support.

5 Legal Basis for Processing

cvkk processes your personal data only where a valid legal basis exists. The primary legal bases we rely on are:

• Contractual Necessity: Processing that is necessary to perform the contract between you and cvkk — for example, processing a withdrawal or verifying your identity to comply with KYC requirements.
• Legal Obligation: Processing that is required to comply with applicable laws — for example, retaining transaction records for anti-money laundering purposes or reporting suspicious activity to relevant authorities.
• Legitimate Interests: Processing carried out to pursue the legitimate business interests of cvkk — for example, fraud detection, platform security, and responsible gaming monitoring — provided those interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications. You may withdraw your consent at any time without penalty to your account access or services.

6 Data Sharing & Disclosure

cvkk does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share your data only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose:

• Payment Service Providers: We share necessary financial data with payment processors — including bKash, Nagad, Rocket, Upay, and banking partners — to facilitate your deposit and withdrawal transactions. These providers are bound by their own data protection obligations.
• Identity Verification Partners: We may share identity documents and personal details with accredited KYC/AML verification service providers for the purpose of fulfilling our compliance obligations.
• Game Software Providers: Game providers such as Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe may receive limited technical data (such as a player identifier) to enable game functionality. They do not receive your full identity or financial data.
• Fraud Prevention Services: We may share data with fraud detection and device fingerprinting services to identify and prevent prohibited conduct on the platform.
• Legal and Regulatory Authorities: We will disclose personal data to law enforcement agencies, courts, or regulators where required to do so by law, court order, or other legal process. We will notify you of such disclosure where legally permitted to do so.
• Business Transfers: In the event that cvkk undergoes a merger, acquisition, or sale of assets, your personal data may be transferred to the successor entity. We will notify affected players in advance of any such transfer.

7 Cookies & Tracking Technologies

cvkk uses cookies and similar tracking technologies to operate the platform effectively, maintain your session, and gather analytical data about how the platform is used. The following categories of cookies are used:

Strictly necessary cookies cannot be disabled as they are essential to the operation of the platform. You may manage your preferences for functional and analytics cookies through your browser settings. Please note that disabling certain cookies may affect the performance and functionality of your cvkk account.

8 Data Retention

cvkk retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

• Account Data: Retained for the duration of your active account plus a minimum of five (5) years following account closure, in line with standard financial record-keeping requirements.
• Transaction Records: Financial transaction data is retained for a minimum of five (5) years from the date of the transaction to satisfy anti-money laundering and tax compliance obligations.
• KYC and Verification Documents: Retained for a minimum of five (5) years following account closure or the completion of the KYC review process.
• Support Communications: Live chat transcripts and email correspondence are retained for up to three (3) years from the date of the interaction.
• Technical and Usage Data: Server logs and session data are typically retained for up to thirteen (13) months, after which they are anonymised or deleted.
• Marketing Preferences: Records of consent for marketing communications are retained for the duration of the consent plus an additional two (2) years.

When personal data is no longer required and the applicable retention period has expired, cvkk will securely delete or irreversibly anonymise that data in accordance with our internal data disposal procedures.

9 Data Security

cvkk applies robust technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our core security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the cvkk platform is encrypted using industry-standard 256-bit SSL/TLS protocols, ensuring that your data cannot be intercepted in transit.
• Encrypted Data Storage: Sensitive personal and financial data stored on cvkk servers is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted to cvkk staff and service partners on a strict need-to-know basis. All access events are logged and regularly audited.
• Two-Factor Authentication: Players are encouraged to enable two-factor authentication (2FA) on their cvkk accounts to provide an additional layer of protection against unauthorised access.
• Regular Security Audits: cvkk undergoes periodic independent security assessments to identify and remediate vulnerabilities in our platform infrastructure.
• Incident Response: In the event of a data breach that poses a risk to player rights and freedoms, cvkk will notify affected players and relevant authorities as promptly as possible in accordance with applicable legal requirements.

While cvkk implements comprehensive security measures, no digital platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying cvkk immediately if you suspect any unauthorised access to your account.

10 Your Data Rights

As a cvkk player, you hold the following rights in relation to your personal data. To exercise any of these rights, contact our support team at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 72 hours and resolve it within 30 calendar days.

Please note that certain rights — particularly the right to erasure — may be limited where cvkk is under a legal obligation to retain specific data (for example, transaction records required for AML compliance). In such cases, we will explain the applicable limitation in our response to your request.

11 Minors & Age Restriction

cvkk employs age verification as a mandatory step in the account registration and KYC process. Any individual found to be under 21 years of age will be permanently excluded from the cvkk platform. Parents and guardians who believe a minor has accessed or registered on cvkk are encouraged to contact our support team immediately at [email protected] so that the account can be closed without delay.

12 Third-Party Links & Services

The cvkk platform may contain links to third-party websites or services — for example, game providers' information pages or payment method provider websites. This Privacy Policy applies solely to data collected and processed by cvkk. cvkk is not responsible for the privacy practices of any third-party website or service, and we encourage you to review the privacy policies of any third-party services you access.

Game software providers integrated into the cvkk platform (including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe) operate under their own data processing agreements. When you interact with a live dealer game or a third-party game environment, limited session data may be shared with the relevant provider as described in Section 6. These providers are required to process such data solely for the purpose of delivering the game service.

13 Changes to This Policy

cvkk reserves the right to update or amend this Privacy Policy at any time. When material changes are made, the revised Policy will be published on this page with an updated effective date. Where changes significantly affect how we process your personal data, we will also notify registered players via email or through an in-platform notification.

Your continued use of the cvkk platform following the publication of a revised Privacy Policy constitutes your acknowledgement of the changes. We encourage you to review this Policy periodically to remain informed of how we are protecting your data. Previous versions of this Policy may be made available on request by contacting our support team.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way cvkk processes your personal data, please contact our dedicated data support team. All privacy-related enquiries receive priority handling.

For formal data complaints that have not been resolved satisfactorily through our internal process, you may escalate your complaint to the relevant data protection authority in your jurisdiction. cvkk will cooperate fully with any such investigation.