cvb8 Privacy Policy

Introduction

cvb8 ("we", "us", "our") is committed to protecting the privacy and personal data of every individual who accesses or uses the cvb8 Platform at cvb8.io. This Privacy Policy explains what personal information we collect, why we collect it, how we use it, how we store and protect it, and what rights you hold in relation to it.

This Privacy Policy applies to all cvb8 products and services accessible via cvb8.io, including the sportsbook, live casino, slots lobby, mobile interface, and all account management and support functions. It applies to all registered Players as well as visitors who browse the Platform without registering.

By accessing or using any part of the cvb8 Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, you should not access or use the cvb8 Platform. This Privacy Policy should be read alongside the cvb8 Terms and Conditions, which govern the overall relationship between you and cvb8.

Data We Collect

cvb8 collects personal data through several channels: directly from you during registration and account management, automatically through your use of the Platform, and from third-party sources such as payment processors and identity verification services. The categories of personal data we collect are set out below.

2.1 Registration & Account Data

• Full legal name as it appears on your Bangladesh National Identity Card (NID) or other approved identification document;
• Date of birth (collected to verify the 21+ age requirement);
• Residential address within Bangladesh (district, division, and postal code);
• Mobile phone number (used for account verification and communications);
• Email address (used for account-related notifications and support);
• Username and encrypted password;
• Security question and answer (where enabled).

2.2 Identity Verification (KYC) Data

• Copies or images of government-issued identity documents including Bangladesh NID, passport, or driving licence;
• Selfie or facial image submitted alongside identity documents for liveness verification;
• Proof of address documentation (utility bill, bank statement dated within 90 days);
• Source-of-funds documentation for high-value accounts where requested.

2.3 Financial & Transaction Data

• Deposit and withdrawal transaction records including amounts, timestamps, and payment method references;
• bKash, Nagad, Rocket, or Upay mobile wallet identifiers (last four digits only; full wallet numbers are never stored on cvb8 servers);
• Bank account identifiers where bank transfer methods are used;
• All betting and wagering records including stakes, odds, game titles, and settlement outcomes.

2.4 Technical & Usage Data

• IP address and approximate geolocation data (city-level, derived from IP);
• Device type, operating system, browser version, and screen resolution;
• Session timestamps, login history, and session duration data;
• Pages visited, features used, game titles launched, and navigation paths within the Platform;
• Responsible gaming tool usage (deposit limit settings, session time configurations, self-exclusion requests).

2.5 Communications Data

• Records of all support interactions including live chat transcripts, email correspondence, and any attached files submitted to cvb8 support;
• Promotional communications preferences (opt-in and opt-out records for SMS, email, and on-platform notifications);
• Feedback, complaints, and dispute correspondence.

How We Use Your Data

cvb8 uses the personal data we collect strictly for the purposes listed below. We do not use personal data for purposes incompatible with those for which it was originally collected without first providing notice and, where required, obtaining consent.

• Account creation and management: To register your Account, verify your identity, maintain your Account details, and provide access to all Platform features;
• Age verification and KYC compliance: To confirm that you meet the minimum 21-year age requirement and to comply with anti-money laundering (AML) and know-your-customer (KYC) obligations;
• Transaction processing: To process deposits, withdrawals, and refunds via your chosen payment method (bKash, Nagad, Rocket, Upay, or bank transfer) and to maintain accurate financial records;
• Platform delivery and improvement: To operate, maintain, and improve the cvb8 Platform, diagnose technical issues, and develop new features based on aggregated usage patterns;
• Responsible gaming enforcement: To monitor wagering behaviour for signs of problem gambling and to enforce deposit limits, session limits, cool-off periods, and self-exclusion requests submitted by Players;
• Fraud detection and security: To detect, investigate, and prevent fraudulent activity, account takeovers, money laundering, and prohibited conduct as defined in the cvb8 Terms and Conditions;
• Customer support: To respond to support queries, complaints, and dispute submissions in a timely and informed manner;
• Promotions and communications: To send bonus offers, event announcements, and Platform updates to Players who have opted in to marketing communications. You may withdraw this consent at any time by contacting [email protected];
• Legal and regulatory compliance: To comply with applicable legal obligations, respond to lawful requests from competent authorities in Bangladesh, and maintain records as required by applicable law.

Legal Basis for Processing

cvb8 processes personal data on the following legal bases:

• Contractual necessity: Processing that is necessary to perform our contract with you — specifically, to operate your Account, process transactions, settle bets, and provide all cvb8 Platform services you have requested;
• Legal obligation: Processing required to comply with applicable laws, including age verification requirements, anti-money laundering obligations, and the retention of financial and transaction records;
• Legitimate interests: Processing carried out to pursue the legitimate interests of cvb8 and its Players, including fraud prevention, platform security, responsible gaming monitoring, and service improvement — where such interests are not overridden by your fundamental privacy rights;
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — particularly in relation to the receipt of marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

Cookies & Tracking Technologies

cvb8 uses cookies and similar tracking technologies to operate the Platform effectively, remember your preferences, and analyse usage patterns. The following table describes the categories of cookies in use on cvb8.io:

You may control cookie preferences through your browser settings. Please note that disabling Necessary cookies will impair the functionality of the Platform and may prevent you from logging in or completing transactions. Disabling Analytics or Functional cookies will not affect your ability to use core Platform features.

Data Sharing & Disclosure

cvb8 does not sell, rent, or trade your personal data to any third party. We share personal data only in the following strictly defined circumstances:

6.1 Payment Processors

Necessary transaction data is shared with payment service providers — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and Visa/Mastercard processing networks — solely for the purpose of processing deposits and withdrawals. These providers operate under their own privacy and security frameworks and are not permitted to use cvb8 player data for any secondary purpose.

6.2 Identity Verification Partners

KYC document images and biometric verification data are shared with our contracted identity verification service provider for the sole purpose of completing the mandatory age and identity verification process. Once verification is complete, document images are retained only as long as required by applicable retention obligations (see Section 7).

6.3 Game Providers

Aggregated, anonymised gameplay data (game session IDs, round outcomes, RTP calculations) is shared with licensed game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe — strictly for game integrity and technical support purposes. Individual player names, contact details, and financial data are never shared with game studios.

6.4 Legal and Regulatory Authorities

cvb8 will disclose personal data to competent authorities in Bangladesh or other jurisdictions where required to do so by law, court order, or lawful regulatory request. Such disclosures are made only to the extent strictly necessary to satisfy the legal obligation and are documented in our internal compliance records.

6.5 Corporate Transactions

In the event of a merger, acquisition, or sale of assets involving the cvb8 Platform, personal data held by cvb8 may be transferred to the acquiring entity as part of that transaction. Affected Players will be notified of any such transfer and of any material changes to this Privacy Policy resulting from it before the transfer takes effect.

Data Retention

cvb8 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal or regulatory obligations. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where data is anonymised, it may be retained indefinitely as aggregate statistical data for Platform analysis, as it no longer constitutes personal data once anonymised.

Data Security

cvb8 implements a comprehensive set of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures include:

• TLS/SSL Encryption: All data transmitted between your device and cvb8 servers is encrypted using industry-standard TLS 1.2 or TLS 1.3 protocols;
• Data Encryption at Rest: Sensitive personal data — including KYC documents, financial records, and authentication credentials — is encrypted at rest using AES-256 encryption;
• Password Hashing: Player passwords are stored exclusively as salted cryptographic hashes and are never stored in plain text. cvb8 staff cannot retrieve or view your password;
• Two-Factor Authentication (2FA): cvb8 offers optional 2FA for all Player Accounts as an additional access control layer;
• Access Controls: Access to personal data by cvb8 staff is strictly limited to individuals who require it to perform their job functions, subject to role-based access permissions and comprehensive audit logging;
• Regular Security Testing: cvb8 conducts periodic vulnerability assessments and penetration testing of the Platform infrastructure to identify and remediate security weaknesses before they can be exploited;
• Incident Response: cvb8 maintains a documented data breach response procedure. In the event of a breach that poses a risk to Players' personal data, affected Players will be notified without undue delay.

Your Rights

As a cvb8 Player and data subject, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected]. cvb8 will respond to verified requests within 30 days of receipt.

• Right of Access: You have the right to request a copy of the personal data cvb8 holds about you, along with information about how it is being used;
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held in your Account;
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to cvb8's legal retention obligations (see Section 7);
• Right to Restriction of Processing: You may request that cvb8 restrict the processing of your personal data in certain circumstances, such as where you contest its accuracy or have objected to its processing;
• Right to Data Portability: You may request a machine-readable copy of the personal data you provided to cvb8, for the purpose of transferring it to another service provider;
• Right to Object: You have the right to object to processing of your personal data based on cvb8's legitimate interests, including for marketing communications. Where you object to marketing communications, we will cease sending them immediately;
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

cvb8 will not charge a fee for processing any data subject request unless the request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply. Identity verification may be required before cvb8 processes any data access or erasure request to protect against unauthorised disclosures.

Third-Party Services

The cvb8 Platform integrates third-party services to deliver specific functions. Each third-party service provider operates under its own privacy policy and data processing framework. cvb8 performs due diligence on all third-party partners to ensure that their data handling standards are consistent with the protections described in this Privacy Policy.

Third-party service categories used by cvb8 include:

• Game Studios: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe supply the game content available on the Platform. Game session data is processed by these studios under their respective provider agreements;
• Payment Gateways: Mobile financial services including bKash, Nagad, Rocket, and Upay, and card networks including Visa and Mastercard, process payment transactions. Transaction data is shared with these providers solely to complete the payment instruction;
• Identity Verification: cvb8 uses a contracted KYC verification partner to process identity document images and liveness checks. This partner is contractually prohibited from using cvb8 player data for any purpose other than identity verification;
• Infrastructure Providers: cvb8's Platform is hosted on secure cloud infrastructure. Server-level data access is restricted to authorised infrastructure personnel and is subject to the same access control and audit logging standards as cvb8's own systems.

cvb8 is not responsible for the privacy practices of any third-party website or service that is not directly operated by cvb8. This Privacy Policy applies solely to cvb8.io and its associated Platform services.

Children's Privacy

The cvb8 Platform is strictly intended for adults aged 21 years and above. cvb8 does not knowingly collect, process, or retain personal data from any individual under the age of 21. Age verification is enforced at registration through mandatory NID submission and is a prerequisite for any financial transaction on the Platform.

Policy Updates

cvb8 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, our data processing practices, or the services we offer. When we make material changes to this Privacy Policy, we will update the "Last Updated" date at the top of this document and publish the revised version on cvb8.io.

Where changes are material and significantly affect the way we process your personal data or the rights available to you, cvb8 will endeavour to provide advance notice to registered Players via on-platform notification or email. Continued use of the Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms.

Players are encouraged to review this Privacy Policy periodically to remain informed about how cvb8 protects their personal data. The current version of this Privacy Policy is always accessible at cvb8.io/privacy-policy.