cv77 Privacy Policy

Introduction

This Privacy Policy ("Policy") describes how cv77 ("cv77", "we", "us", "our") collects, processes, stores, and protects the personal data of individuals ("Player", "User", "you") who visit, register on, or otherwise interact with the cv77 online betting and casino platform available at cv77.bio.

cv77 is designed specifically for players in Bangladesh and operates entirely in English, using Bangladeshi Taka (BDT) as the account currency and supporting Bangladeshi payment methods including bKash, Nagad, and Rocket. This Policy applies to all personal data collected in connection with your use of the cv77 platform, regardless of the device or method used to access it.

By creating a cv77 account or by continuing to use the platform after this Policy has been updated and notified to you, you acknowledge that you have read and understood its contents. If you do not agree with any part of this Policy, you should discontinue use of the platform and contact cv77 Support to arrange closure of your account.

Data Controller

For the purposes of this Privacy Policy, the data controller responsible for your personal information is cv77, the operator of the cv77 platform at cv77.bio. As data controller, cv77 determines the purposes for which, and the manner in which, your personal data is processed. All data protection and privacy queries should be directed to cv77 Support using the contact details set out in Section 15 of this Policy.

Where cv77 engages third-party service providers to process data on its behalf — for example, payment processors, identity verification providers, or fraud prevention platforms — those providers act as data processors under instruction from cv77 and are bound by contractual obligations that limit their use of your data to the scope of the service they provide to cv77.

Data We Collect

cv77 collects personal data that is necessary to provide a safe, compliant, and personalised betting and casino experience. The categories of personal data we collect include, but are not limited to, the following:

cv77 does not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is strictly necessary for identity and age verification purposes.

How We Collect Your Data

cv77 collects your personal data through the following means:

• Direct interactions: Data you provide when you register an account, complete KYC verification, make a deposit or withdrawal, place a bet, play a casino game, contact Support, or update your account profile.
• Automated technologies: Technical and usage data collected automatically when you access the cv77 platform, including through cookies, server logs, and analytics tools. See Section 10 for details on cookies.
• Third-party sources: Identity and fraud-risk data received from identity verification providers and fraud prevention services that cv77 engages to confirm your identity and protect the integrity of the platform. Financial data received from payment processors when processing your deposits and withdrawals.
• KYC document review: Document images and identity data extracted from verification documents submitted by you during the KYC process.

Purpose & Legal Basis for Processing

cv77 processes your personal data only where there is a lawful basis for doing so. The following table sets out the primary purposes for which cv77 processes your data and the legal basis relied upon in each case:

Where cv77 relies on legitimate interests as the legal basis for processing, we have assessed that those interests are not overridden by your privacy rights. You may object to processing carried out on the basis of legitimate interests — see Section 11 for details of how to exercise this right.

Sharing Your Personal Data

cv77 does not sell, rent, or trade your personal data with third parties for their own independent commercial or marketing purposes. We may share your data with the following categories of third parties solely to operate the cv77 platform and fulfil our legal obligations:

• Payment processors: bKash, Nagad, Rocket (Dutch-Bangla Bank Mobile Banking), Upay, BRAC Bank, City Bank, Islami Bank, Visa/Mastercard acquiring networks — to facilitate deposits and withdrawals.
• Identity verification providers: Third-party KYC service providers who perform document verification and liveness checks to confirm your identity and age.
• Fraud prevention and anti-money laundering services: Platforms that assist cv77 in detecting suspicious transaction patterns and flagging accounts for review.
• Game software providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive the minimum data necessary to deliver their casino and live dealer game services within the cv77 platform.
• IT infrastructure and hosting providers: Cloud hosting and server infrastructure providers who store platform data under contractual data processing agreements with cv77.
• Legal and regulatory authorities: Law enforcement agencies, financial intelligence units, and other competent authorities in Bangladesh or elsewhere where disclosure is required by law or court order.
• Professional advisers: Lawyers, auditors, and accountants where disclosure is necessary for the provision of professional services to cv77.

Payment Data & Financial Security

cv77 handles payment data with the highest level of care and security. When you make a deposit or request a withdrawal using bKash, Nagad, Rocket, or any other supported payment method, your transaction is processed over encrypted channels using 256-bit SSL/TLS technology. cv77 does not store full payment credentials such as complete mobile wallet PINs, full card numbers, or internet banking passwords.

For mobile wallet transactions, cv77 receives confirmation data from the payment gateway — including transaction reference numbers, the masked wallet number, the amount, and the timestamp — but does not retain your full mobile wallet account credentials. For card payments, only the last four digits of the card number are stored for reference purposes; full card data is processed and stored by the card acquiring network, not by cv77.

All financial transactions on the cv77 platform are logged and subject to automated monitoring for patterns indicative of money laundering, fraud, or other prohibited financial activity. Where suspicious activity is identified, cv77 is obligated by applicable law to suspend the relevant account and report the activity to the appropriate financial intelligence authority.

• Deposits must originate from a payment account held in your own name.
• Withdrawals are processed exclusively to a payment method that has been used to deposit funds into the same cv77 account.
• All transaction records are retained for a minimum period of five years in accordance with anti-money laundering record-keeping obligations.

Data Retention

cv77 retains your personal data for only as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

• Account data (identity, contact, registration information): Retained for the duration of your account and for a minimum of five years following account closure, to comply with anti-money laundering, fraud prevention, and legal record-keeping requirements.
• Transaction and betting records: Retained for a minimum of five years from the date of the transaction, in line with financial record-keeping obligations.
• KYC verification documents: Retained for a minimum of five years from the date of verification or from the date of account closure, whichever is later.
• Support communications: Retained for a minimum of two years from the date of the last communication in a support thread.
• Technical and usage data (logs, IP records): Retained for up to 12 months, unless a longer retention period is required for fraud investigation or legal proceedings.
• Marketing consent records: Retained for as long as your consent remains active plus one year following withdrawal of consent, to demonstrate compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identified or identifiable individual. Where anonymisation rather than deletion is applied, the resulting anonymised data may be retained and used for statistical and analytical purposes without time limit.

Security Measures

cv77 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, and destruction. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption on all data transmissions between your device and the cv77 platform.
• Encrypted data storage for sensitive personal and financial data at rest.
• Access controls that restrict access to personal data to authorised cv77 personnel and processors who require it to perform their specific role.
• Multi-factor authentication on internal administrative systems that handle player data.
• Regular security audits and vulnerability assessments of the cv77 platform infrastructure.
• Incident response procedures that define the steps cv77 will take in the event of a suspected data breach, including notifying affected players without undue delay where the breach is likely to result in a high risk to their rights and freedoms.

While cv77 takes all reasonable steps to protect your data, no method of transmission over the internet or method of electronic storage is completely secure. You also have a role to play in keeping your account safe: use a strong, unique password for your cv77 account, do not share your login credentials with anyone, and contact cv77 Support immediately if you suspect any unauthorised access to your account.

Cookies & Tracking Technologies

cv77 uses cookies and similar tracking technologies to operate the platform, remember your session, personalise your experience, and analyse platform usage. A cookie is a small text file placed on your device by a website server. cv77 uses the following categories of cookies:

• Strictly necessary cookies: Required for the platform to function, including session management, authentication tokens, and security cookies. These cannot be disabled.
• Functional cookies: Enable the platform to remember your preferences, such as your preferred language and display settings, to provide a more personalised experience.
• Analytics cookies: Collect anonymised or pseudonymised data about how players use the cv77 platform — including pages visited, time spent, and navigation paths — to help cv77 improve the platform. These are placed only with your consent.
• Performance cookies: Used to monitor platform uptime, load times, and error rates to ensure service quality and stability.

You can manage your cookie preferences through your browser settings. Please note that disabling functional or analytics cookies may affect the performance or personalisation features of the cv77 platform. Strictly necessary cookies cannot be disabled via browser settings as they are essential to platform operation.

cv77 does not use third-party advertising or retargeting cookies that track your behaviour across other websites for ad targeting purposes.

Your Data Rights

As a player on the cv77 platform, you have the following rights with respect to your personal data. To exercise any of these rights, contact cv77 Support using the details in Section 15. cv77 will respond to verified requests within 30 days.

• Right of access: You have the right to request a copy of the personal data cv77 holds about you, along with information about how it is used.
• Right to rectification: You have the right to request correction of any personal data that is inaccurate, incomplete, or out of date.
• Right to erasure: You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you withdraw consent and there is no other legal basis for continued processing. This right does not apply where cv77 is required to retain data by law (e.g., for anti-money laundering compliance).
• Right to restrict processing: You have the right to request that cv77 restricts the processing of your data in certain circumstances, for example while a dispute about the accuracy of your data is being resolved.
• Right to data portability: Where processing is based on your consent or on performance of a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing based on legitimate interests or for direct marketing purposes. Where you object to direct marketing, cv77 will cease processing your data for that purpose immediately.
• Right to withdraw consent: Where processing is based on your consent (e.g., receipt of promotional communications), you may withdraw that consent at any time by contacting cv77 Support or using the unsubscribe mechanism in marketing communications. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Minors

The cv77 platform is strictly intended for individuals who are 21 years of age or older. cv77 does not knowingly collect, store, or process personal data belonging to persons under the age of 21. If cv77 becomes aware that personal data has been collected from a person under 21, that data will be deleted from cv77's systems immediately and the associated account will be closed.

If you are a parent or guardian and you believe that a person under 21 has registered an account on cv77 or has accessed the platform using your payment credentials, please contact cv77 Support immediately at [email protected] so that the account can be investigated and closed without delay.

International Data Transfers

Some of the third-party processors engaged by cv77 — including game software providers such as Evolution Gaming, Pragmatic Play, and Microgaming, and certain cloud infrastructure providers — may be based outside Bangladesh. Where personal data is transferred to a processor in another country, cv77 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that which applies within Bangladesh.

Such safeguards include, but are not limited to, contractual clauses binding the recipient processor to data protection standards consistent with this Policy, and selection of processors operating in jurisdictions that provide an adequate level of data protection. If you would like further information about the safeguards cv77 applies to international data transfers, please contact Support using the details in Section 15.

Changes to This Privacy Policy

cv77 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, platform functionality, or our data processing practices. Where changes are material — meaning they meaningfully affect your rights or the way in which your data is processed — cv77 will provide at least 7 days' advance notice to registered players via their registered mobile number or email address.

The effective date displayed at the top of this Policy will be updated each time a new version is published. The most current version of this Privacy Policy is always available on the cv77 platform. Your continued use of the platform following the effective date of a revised Policy constitutes your acknowledgement of the changes and your agreement to be bound by the updated terms.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way cv77 handles your personal data, please contact the cv77 Support team using the details below. All privacy-related correspondence is handled in English and is treated with priority by a dedicated team member.

• Email: [email protected] (plain text — not a clickable link)
• Support Hours: 24 hours a day, 7 days a week
• Response Time: Within 5 minutes via live chat for general queries; within 24 hours for formal data rights requests
• Language: English
• Time Zone: Bangladesh Standard Time (BST, UTC+6)

For data erasure requests, access requests, or consent withdrawal, please state clearly in your message the nature of your request and the email address or mobile number associated with your cv77 account. cv77 will verify your identity before processing the request.