cv10 Privacy Policy — How We Protect Your Data

1 Information We Collect

When you interact with the cv10 platform — whether by registering an account, placing a bet, making a deposit, contacting support, or simply browsing — we may collect certain categories of personal information. The specific data collected depends on the nature of your interaction with us and the services you use.

1.1 Information You Provide Directly

This is data you actively submit to cv10 during the course of your account relationship with us. It includes:

• Identity information: Full legal name, date of birth, gender, and nationality as provided during account registration or KYC verification.
• Contact information: Email address, telephone number, and residential address (including city, district, and postal code within Bangladesh).
• Account credentials: Your chosen username and a hashed representation of your password. We do not store passwords in plain text.
• Payment information: Mobile banking wallet numbers (bKash, Nagad, Rocket, Upay), bank account details for transfer-based withdrawals, and card details where applicable. Full card numbers are not stored on cv10 servers — card processing is handled by PCI-DSS compliant payment processors.
• Identity documents: Scanned copies or photographs of national identity cards, passports, or other government-issued documents submitted for KYC purposes.
• Communications: Content of emails, live chat transcripts, or other messages you send to the cv10 support team.

1.2 Information Collected Automatically

When you access or use the cv10 platform, certain technical information is collected automatically by our systems. This includes:

• Device and browser data: IP address, device type, operating system, browser type and version, screen resolution, and language settings.
• Usage data: Pages visited, games played, bets placed (including stake amounts and outcomes), session duration, click paths, and feature interactions.
• Location data: Approximate geographic location derived from your IP address, used to verify eligibility and detect access from restricted jurisdictions.
• Cookie and tracking data: Information stored via cookies, pixel tags, and similar technologies. See Section 4 for full details.

2 How We Use Your Information

cv10 uses the personal data it collects for the following purposes, each of which is supported by a lawful basis for processing:

Where cv10 relies on your consent as the lawful basis for processing — most notably for marketing communications — you retain the right to withdraw that consent at any time without affecting the lawfulness of prior processing. To opt out of promotional emails or SMS messages from cv10, contact [email protected] or adjust your notification preferences within your account dashboard.

3 Sharing and Disclosure of Data

cv10 does not sell or rent your personal data to any third party. However, we may share your information with carefully selected third parties in the following limited circumstances:

3.1 Service Providers and Data Processors

cv10 engages trusted third-party service providers to assist in the operation of the platform. These providers process personal data strictly on our behalf and under binding data processing agreements. Categories of service providers include:

• Payment processors handling bKash, Nagad, Rocket, and bank transfer transactions
• KYC and identity verification technology providers
• Game content providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi
• Cloud hosting and infrastructure providers
• Customer support platform providers
• Fraud detection and cybersecurity service providers
• Email and communications delivery platforms

3.2 Legal and Regulatory Authorities

cv10 may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required to do so by applicable law, court order, or regulatory directive. Such disclosures will be made in good faith and limited to the information strictly necessary to comply with the relevant legal obligation.

3.3 Business Transfers

In the event that cv10 undergoes a merger, acquisition, or sale of all or substantially all of its assets, personal data held about registered Players may be transferred to the acquiring entity as part of that transaction. In such an event, cv10 will notify affected Players via their registered email address prior to the transfer taking effect, and the acquiring entity will be required to honour the commitments made in this Privacy Policy.

4 Cookies and Tracking Technologies

The cv10 platform uses cookies and similar tracking technologies to deliver a functional, personalised, and secure experience. A cookie is a small text file placed on your device by a web server when you visit a site. Cookies do not themselves contain personally identifiable information, but they can be linked to the personal data cv10 holds about you.

4.1 Types of Cookies We Use

• Strictly necessary cookies: Required for the platform to function correctly. These enable core features such as session management, account authentication, and security controls. They cannot be disabled without impairing platform functionality.
• Performance and analytics cookies: Used to understand how Players interact with the platform — which pages are visited most, where sessions end, and how long users spend on different features. This data helps cv10 improve the overall user experience.
• Functional cookies: Allow the platform to remember your preferences such as display language, preferred game category, and notification settings, so you do not need to re-enter them on each visit.
• Marketing and targeting cookies: Used to deliver promotional content that is relevant to your interests and gaming history. These are only placed with your consent and can be declined without affecting your access to core platform features.

4.2 Managing Your Cookie Preferences

You can control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies via the privacy or security settings menu. Please note that disabling certain cookies may limit the functionality of the cv10 platform, particularly features that rely on session persistence or personalised preferences. For further guidance on managing cookies, consult the help documentation for your specific browser.

5 Data Security and Retention

5.1 Security Measures

cv10 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, loss, destruction, or alteration. These include:

• TLS/SSL encryption for all data in transit between your device and our servers
• AES-256 encryption for sensitive data at rest, including payment information and identity document scans
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis
• Regular penetration testing and vulnerability assessments conducted by independent security specialists
• Multi-factor authentication requirements for internal administrative access to production systems
• Automated monitoring and alerting for unusual access patterns or potential data breach indicators

While cv10 takes all reasonable precautions to protect your personal data, no system connected to the internet can be guaranteed to be completely secure. If you have reason to believe your cv10 account has been compromised, contact [email protected] immediately.

5.2 Data Retention

cv10 retains personal data for as long as your account remains active and for a defined period thereafter, in accordance with the following general schedule:

• Account and identity data: Retained for the duration of the account and for a minimum of five years following account closure, to satisfy anti-money laundering record-keeping obligations.
• Transaction and betting records: Retained for a minimum of five years from the date of the transaction, in line with financial record-keeping requirements.
• Support communications: Retained for two years from the date of the last interaction, unless required for longer in connection with an ongoing dispute or legal matter.
• Marketing preferences: Retained until you withdraw consent or for a maximum of three years of inactivity, whichever comes first.
• Technical and usage logs: Retained for up to twelve months, after which they are aggregated and anonymised for platform analytics purposes.

6 Your Privacy Rights

As a Player on the cv10 platform, you hold the following rights with respect to your personal data. To exercise any of these rights, contact our support team at [email protected] with the subject line "Privacy Rights Request". We will respond within two business days (Bangladesh Standard Time, UTC+6) and aim to resolve all requests within 30 calendar days.

7 Third-Party Services and Links

The cv10 platform integrates with third-party services to provide certain features, including live casino games supplied by Evolution Gaming and Ezugi, slot content from Pragmatic Play, NetEnt, Microgaming, and Spribe, and payment processing via bKash, Nagad, Rocket, and banking partners. When you interact with these third-party services within the cv10 environment, the relevant provider may collect certain technical or usage data independently in accordance with their own privacy policies.

cv10 selects third-party partners who demonstrate a commitment to data privacy and security standards consistent with our own. However, cv10 does not control the data practices of third-party providers and accepts no liability for the manner in which they handle personal data outside of the cv10 platform environment. We encourage you to review the privacy policies of any third-party service providers whose platforms you interact with independently.

The cv10 website does not contain links to external third-party websites other than those necessary to provide the core platform functionality. Any links to payment provider portals or game provider platforms are provided purely for service delivery and do not constitute an endorsement of the linked party's privacy practices.

8 Updates to This Privacy Policy

cv10 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. The effective date at the top of this document will be updated whenever a material change is made.

Where a change is material — meaning it substantially affects how your data is processed or the rights available to you — cv10 will notify registered Players via the email address associated with their account at least seven days before the updated policy takes effect. For non-material updates such as clarifications of existing language or corrections of typographical errors, the updated policy will take effect immediately upon publication.

Continued use of the cv10 platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes to this policy, you should discontinue use of the platform and contact [email protected] to initiate account closure.