cvk8 Privacy Policy
Your Data, Your Rights
At cvk8, protecting the personal data of our Bangladeshi players is a core responsibility. This Privacy Policy explains exactly what information we collect, how we use it, who we share it with, and what rights you have over your own data.
Our Core Privacy Commitments
cvk8 is built on trust. Every data practice described in this policy is designed with Bangladeshi players in mind — safe, transparent, and fully under your control.
Every connection to the cvk8 platform is secured by 256-bit SSL/TLS encryption. Your login credentials, payment details, and personal information travel over fully encrypted channels at all times.
cvk8 does not sell, rent, or trade your personal data to any third-party marketers, data brokers, or advertising networks. Your information is used solely to operate and improve the cvk8 platform.
KYC documents submitted to cvk8 for identity verification are stored on encrypted servers with strict access controls. Only authorised compliance personnel may access identity documents.
cvk8 does not store your full bKash PIN, Nagad PIN, card number, or other sensitive payment credentials on its servers. Payment transactions are handled via encrypted payment gateways with tokenisation.
You may request access to, correction of, or deletion of your personal data at any time by contacting cvk8 support. We process all valid data rights requests within 30 days of receipt.
Whenever this Privacy Policy is materially updated, cvk8 will notify registered users via the platform or by email. The "Last Updated" date at the top of this page always reflects the most current version.
Introduction
This Privacy Policy describes how cvk8 ("the Company", "we", "us", "our") collects, uses, stores, and protects personal data provided by users ("you", "your") of the cvk8 online betting and gaming platform, accessible at cvk8.io and all associated mobile-optimised pages (collectively, the "Platform").
cvk8 is committed to handling your personal information with the highest standards of care, transparency, and security. We recognise that trust is the foundation of any relationship between a player and a betting platform, and we take our data protection obligations seriously.
By registering a cvk8 account and using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with the terms of this Privacy Policy, you should not register an account or use the Platform.
This Privacy Policy is incorporated by reference into the cvk8 Terms & Conditions and forms part of the overall agreement between you and cvk8. Words not defined in this document carry the meaning ascribed to them in the Terms & Conditions.
Data We Collect
cvk8 collects personal data in several ways — data you provide directly, data generated automatically by your use of the Platform, and data received from third-party service providers. The categories of personal data we collect include:
| Category | Examples | Collection Point |
|---|---|---|
| Identity Data | Full name, date of birth, gender, nationality | Account registration, KYC verification |
| Contact Data | Email address, phone number, city of residence | Account registration, support requests |
| Authentication Data | Username, encrypted password hash | Account registration, login events |
| Financial Data | Transaction history, deposit/withdrawal amounts, payment method type (e.g., bKash, Nagad) | Deposit and withdrawal processing |
| KYC Documents | National ID, passport scan, selfie photograph | Identity verification process |
| Betting & Gaming Data | Wager history, game selections, bet amounts, winnings | Platform activity during gameplay |
| Technical Data | IP address, device type, browser, operating system, session timestamps | Automatic collection via platform logs |
| Usage Data | Pages visited, features used, click patterns, session duration | Automatic collection via analytics tools |
| Communications Data | Support chat transcripts, email correspondence | Customer support interactions |
cvk8 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information unless such information is directly relevant to a responsible gaming assessment or legal obligation.
How We Use Your Data
cvk8 uses the personal data we collect for the following specific purposes:
- Account management: To create, maintain, and administer your cvk8 player account, including processing your registration, verifying your identity, and managing your account settings.
- Service delivery: To allow you to place bets, play casino games, make deposits and withdrawals, and access all features of the Platform.
- Payment processing: To process deposit and withdrawal transactions via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and other accepted payment methods, and to maintain accurate records of all financial transactions on your account.
- Identity verification and KYC compliance: To verify that you meet the eligibility requirements for using the Platform, including the 21+ age requirement, and to comply with applicable anti-money laundering (AML) obligations.
- Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, account takeover attempts, money laundering, and other prohibited conduct on the Platform.
- Responsible gaming: To monitor gaming behaviour patterns and identify users who may be exhibiting signs of problem gambling, and to administer responsible gaming tools such as deposit limits, cooling-off periods, and self-exclusion requests.
- Customer support: To respond to your queries, resolve disputes, and provide technical assistance via live chat and email support channels.
- Platform improvement: To analyse usage patterns, troubleshoot technical issues, and develop new features and services that better serve Bangladeshi players.
- Marketing communications: To send you promotional offers, bonus notifications, and platform updates where you have provided consent to receive such communications. You may withdraw this consent at any time.
- Legal and regulatory compliance: To fulfil any legal obligations applicable to cvk8's operations, including responding to lawful requests from relevant authorities.
Legal Basis for Processing
cvk8 processes personal data on the following legal bases:
- Contractual necessity: Processing that is necessary to perform our contract with you — i.e., to provide the cvk8 betting and gaming service as described in the Terms & Conditions. This covers account creation, bet processing, payments, and customer support.
- Legal obligation: Processing that is required to comply with applicable legal requirements, including KYC/AML obligations and responses to lawful authority requests.
- Legitimate interests: Processing carried out for purposes of fraud prevention, platform security, responsible gaming monitoring, and service improvement, where these interests are not overridden by your fundamental rights and freedoms.
- Consent: Processing for marketing communications and optional analytics personalisation, where you have given explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
Data Sharing & Disclosure
cvk8 does not sell your personal data. We may share your personal information with the following categories of third parties only to the extent necessary for the purposes described in this Privacy Policy:
- Payment service providers: bKash, Nagad, Rocket, Upay, Visa, and Mastercard processing partners, solely for the purpose of completing your deposit and withdrawal transactions.
- Identity verification providers: Third-party KYC and AML screening services that assist cvk8 in verifying your identity and detecting fraudulent or suspicious account activity.
- Game software providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive certain session data necessary to deliver their games via the Platform. These providers operate under strict data processing agreements.
- IT infrastructure and hosting providers: Cloud hosting and technical infrastructure partners who store and process Platform data on behalf of cvk8 under confidentiality obligations.
- Legal and regulatory authorities: cvk8 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law or in response to a lawful legal process.
- Professional advisors: Legal counsel, auditors, and compliance advisors who require access to certain data in the ordinary course of advising cvk8 on its business and legal obligations.
Cookies & Tracking Technologies
cvk8 uses cookies and similar tracking technologies on the Platform to deliver a reliable, personalised, and secure user experience. The following categories of cookies are used:
- Strictly necessary cookies: These cookies are essential for the Platform to function. They enable core features such as user authentication, session management, and security token validation. The Platform cannot operate without these cookies, and they cannot be disabled.
- Performance and analytics cookies: These cookies collect aggregated, anonymised data about how users navigate the Platform — which pages are visited most frequently, how long sessions last, and where errors occur. This data is used exclusively to improve Platform performance.
- Functional cookies: These cookies remember your preferences — such as your preferred language setting, last-visited game category, or responsible gaming notification preferences — to provide a more personalised experience on your next visit.
- Session security cookies: Short-lived cookies that carry encrypted session tokens to validate your authenticated session and protect against cross-site request forgery (CSRF) attacks.
You may control non-essential cookies through your browser settings. Please note that disabling certain cookies may affect Platform functionality. cvk8 does not use third-party advertising cookies or cross-site behavioural tracking technologies.
Data Retention
cvk8 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, and in any case for no longer than required by applicable legal and regulatory obligations. The following general retention periods apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account identity & contact data | Duration of account + 5 years post-closure | Legal compliance, dispute resolution |
| KYC documents | Duration of account + 5 years post-closure | AML regulatory requirements |
| Transaction records | 7 years from transaction date | Financial record-keeping obligations |
| Betting & gaming history | Duration of account + 3 years post-closure | Dispute resolution, responsible gaming review |
| Support communications | 3 years from last communication | Service quality, dispute resolution |
| Technical / log data | 12 months from collection | Security monitoring, debugging |
| Marketing consent records | Until consent withdrawn + 1 year | Proof of consent compliance |
When personal data is no longer required and no legal obligation mandates its retention, cvk8 will securely delete or anonymise it using industry-standard data destruction methods.
Data Security
cvk8 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
- 256-bit SSL/TLS encryption on all data transmitted between your device and the cvk8 Platform.
- Encrypted data storage for all personal data and KYC documents held on cvk8 servers, using AES-256 encryption at rest.
- Password hashing using industry-standard one-way hashing algorithms — cvk8 does not store your password in plain text.
- Role-based access controls ensuring that only authorised cvk8 personnel with a legitimate business need may access personal data, and that access is logged and audited.
- Regular security assessments including vulnerability scanning and penetration testing of the Platform infrastructure.
- Fraud detection systems that monitor account activity in real time for indicators of unauthorised access or suspicious behaviour.
- Secure payment tokenisation — full payment credentials (bKash PINs, card numbers) are never stored on cvk8 servers.
While cvk8 takes all reasonable steps to protect your data, no online platform can guarantee absolute security against all threats. You are also responsible for keeping your account credentials confidential and for notifying cvk8 immediately if you suspect unauthorised access to your account.
Your Data Rights
cvk8 respects your rights over your personal data. Depending on the circumstances of your data processing, you may have the following rights:
Rights You Hold Over Your Personal Data
You may request a copy of all personal data that cvk8 holds about you. We will provide this information in a clear, readable format within 30 days of a valid request.
If any personal data that cvk8 holds about you is inaccurate or incomplete, you may request that we correct or update it. Some corrections may require supporting documentation.
You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, or where you withdraw consent. This right is subject to legal retention obligations.
In certain circumstances you may request that cvk8 restrict the processing of your personal data — for example, while a dispute about accuracy is being resolved.
Where technically feasible, you may request that cvk8 provide your personal data in a structured, machine-readable format so you can transfer it to another service provider.
You may object to cvk8 processing your personal data on the basis of legitimate interests, including profiling, at any time. You may also withdraw marketing consent at any time.
How to exercise your rights: To submit any data rights request, contact the cvk8 data team by emailing [email protected] with the subject line "Data Rights Request" and your registered account username. We will acknowledge your request within 5 business days and fulfil it within 30 days. In some cases we may need to verify your identity before processing the request.
Children & Minors
The cvk8 Platform is strictly intended for adults aged 21 years and above. cvk8 does not knowingly collect personal data from any person under the age of 21.
Parents and guardians who believe that a minor may have registered on the Platform without their knowledge are encouraged to contact cvk8 support immediately at [email protected] so that the situation can be investigated and resolved promptly.
International Data Transfers
cvk8 operates as an internationally licensed offshore platform. As a result, personal data collected from users based in Bangladesh may be stored on and processed by servers located outside of Bangladesh. These servers are operated by cvk8's trusted infrastructure partners in jurisdictions that maintain adequate data protection standards.
Wherever personal data is transferred internationally, cvk8 ensures that appropriate contractual safeguards are in place between cvk8 and the receiving entity to protect your data to a standard at least equivalent to that described in this Privacy Policy. These safeguards include data processing agreements incorporating standard contractual clauses and confidentiality obligations.
By using the cvk8 Platform, you acknowledge and consent to the international transfer of your personal data as described in this section.
Third-Party Services & Links
The cvk8 Platform integrates with third-party game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi to deliver casino games and live dealer experiences. These providers may collect certain technical and session data directly as part of delivering their games. Their data practices are governed by their own privacy policies, which are separate from this document.
cvk8 is not responsible for the privacy practices of third-party game software providers. We recommend that you review the privacy policies of any third-party providers whose services you access through the Platform if you have questions about how they handle your data.
Policy Amendments
cvk8 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, changes in applicable law, or improvements to the Platform. When material changes are made, cvk8 will:
- Update the "Last Updated" date at the top of this Privacy Policy page;
- Display a prominent notice on the Platform or send a notification to your registered email address informing you of the changes; and
- Where required by applicable law, seek your renewed consent before applying material changes to the processing of your personal data.
Your continued use of the cvk8 Platform following notification of any amendment constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically so that you are always informed of the most current version of our privacy practices.
Contact & Data Requests
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how cvk8 has handled your personal data, please contact the cvk8 data protection team using the details below:
Email: [email protected]
Subject Line: "Privacy Policy Enquiry" or "Data Rights Request"
Response Time: Within 5 business days (Bangladesh Standard Time, UTC+6)
When submitting a data rights request, please include your registered cvk8 username and a clear description of your request so that we can process it efficiently. We may need to verify your identity before we can action your request to ensure the security of your personal data.
cvk8 takes all privacy complaints seriously. If you are not satisfied with our response to your complaint or enquiry, you have the right to escalate the matter through the appropriate legal channels available in your jurisdiction.
Explore cvk8 With Confidence
Your data is safe with us. Now dive into cricket betting, live casino games, and 500+ slots — all secured by SSL encryption and built for Bangladeshi players. 21+ only.