cv10 Privacy Policy — How We Handle Your Personal Data

cv10 is an online betting and gaming platform operated primarily for players located in Bangladesh. We are deeply committed to protecting the privacy and personal data of every individual who interacts with the cv10 platform, whether as a registered account holder or a visitor browsing our website.

This Privacy Policy sets out in full detail: the categories of personal data we collect; the specific purposes for which that data is used; the circumstances in which data may be shared with third parties; how long we retain your information; and the rights you hold as a data subject. We have written this policy in plain, accessible English so that every cv10 player — from Dhaka to Chittagong, Sylhet to Cox's Bazar — can understand exactly how their information is handled.

This policy applies to all data processing activities undertaken in connection with the cv10 platform, including our website at cv10.io, our customer support channels and our payment processing interfaces. This policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which are available on cv10.io.

If you have any questions about how cv10 handles your personal data, or wish to exercise any of your data rights, please contact us at the email address provided in Section 13 of this policy. Our support team is available 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6).

cv10 collects personal data from you in several ways — directly when you register or interact with the platform, automatically as you browse and play, and occasionally from trusted third-party sources. The categories of data we collect are described below.

2.1 Registration Data. When you create a cv10 account, we collect your full legal name, date of birth, email address, mobile phone number (used for bKash, Nagad and Rocket account linking), residential address in Bangladesh, and a username and password of your choice. This data is mandatory — without it, we cannot create or administer your account.

2.2 Identity Verification (KYC) Data. As part of our Know Your Customer (KYC) obligations, we may request copies of government-issued identification documents such as your National Identity Card (NID), passport or driving licence, as well as proof of address documents such as utility bills or bank statements. These documents are used solely to verify your identity and prevent fraud.

2.3 Financial & Transaction Data. We record all deposits, withdrawals and betting transactions made through your cv10 account. This includes transaction amounts in BDT (৳), timestamps, payment method identifiers (such as your bKash or Nagad wallet number), and transaction reference numbers. We do not store full payment card numbers.

2.4 Gaming Activity Data. We collect data relating to your use of the cv10 platform, including games played, bets placed, odds accepted, winnings and losses, session durations, and responsible gaming tool usage (such as deposit limits and self-exclusion requests).

2.5 Technical & Device Data. When you access cv10.io, we automatically collect certain technical data including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, and the pages you visit and the duration of your visit. This data is used for security monitoring, fraud detection and platform performance optimisation.

2.6 Communications Data. If you contact our customer support team — via email or live chat — we retain records of those communications, including the content of messages and the dates and times of contact. This helps us resolve disputes and improve the quality of our support service.

2.7 Marketing Preferences Data. We record your opt-in or opt-out preferences regarding promotional communications from cv10, including email offers, SMS notifications and in-platform promotions.

The table below summarises the main categories of data collected and their primary sources:

cv10 uses the personal data we collect for the following specific purposes. We will not use your data for any purpose that is incompatible with those listed below without first obtaining your explicit consent.

• Account creation and administration: To register your cv10 account, authenticate your identity at login, and manage your account settings, balances and preferences.
• Transaction processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay and supported Bangladeshi bank accounts, and to maintain accurate records of all financial activity on your account.
• KYC and fraud prevention: To verify your identity, confirm your age is 21 or above, detect and investigate suspicious activity, prevent money laundering, and protect the integrity of the cv10 platform.
• Platform delivery and improvement: To deliver the games, sports betting markets and live casino services you access on cv10, and to analyse usage patterns that help us improve platform performance, game selection and user experience.
• Customer support: To respond to your queries, resolve disputes, investigate complaints and maintain a record of interactions for quality assurance purposes.
• Responsible gaming: To monitor gaming activity for signs of problem gambling behaviour, apply the responsible gaming tools you have configured (such as deposit limits and cooling-off periods), and contact you if we identify patterns of concern.
• Security monitoring: To monitor login activity, detect unauthorised access attempts, identify multiple-account breaches and protect the platform against technical attacks and fraud.
• Marketing communications: To send you promotional offers, bonus notifications and product updates — but only where you have expressly opted in to receive such communications. You may opt out at any time.
• Legal compliance: To comply with applicable legal obligations, respond to lawful requests from relevant authorities, and enforce our Terms & Conditions.

cv10 processes your personal data on the following legal grounds, depending on the nature of the processing activity:

4.1 Contractual Necessity. The majority of our data processing — including account administration, transaction processing, KYC verification and game delivery — is necessary for the performance of the contract between you and cv10 (i.e., your use of the platform in accordance with our Terms & Conditions). Without this processing, we would be unable to provide the cv10 service.

4.2 Legitimate Interests. Some processing activities are carried out on the basis of cv10's legitimate interests, provided those interests are not overridden by your fundamental rights and freedoms. This includes fraud detection and prevention, security monitoring, platform analytics and the improvement of our services.

4.3 Legal Obligation. Certain processing activities — particularly KYC verification and the retention of financial transaction records — are required to comply with applicable legal and regulatory obligations, including anti-money laundering requirements.

4.4 Consent. Where cv10 relies on your consent as the legal basis for processing — most notably for marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. To withdraw consent, update your preferences in your account settings or contact our support team.

cv10 uses cookies and similar tracking technologies to enhance your experience on the platform, maintain session security and collect analytical data about how the platform is used. A "cookie" is a small text file placed on your device when you visit a website. cv10 uses the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They enable core features such as account login, session management, security tokens and payment processing flows. These cookies cannot be disabled.
• Performance & Analytics Cookies: These cookies help us understand how players use cv10.io — which pages are most visited, how long sessions last, and where errors occur. This data is aggregated and anonymous. It is used solely to improve the platform.
• Functional Cookies: These cookies remember your preferences and settings, such as your language preference, responsible gaming limits and notification settings, so that you do not have to re-enter them on each visit.
• Marketing Cookies: These cookies are only placed with your explicit consent. They help us understand which promotions and offers are most relevant to you. You may opt out of marketing cookies at any time via your account settings.

By continuing to use cv10.io after being presented with our cookie notice, you consent to the use of cookies as described above. You may control or delete cookies through your browser settings at any time, however disabling strictly necessary cookies will impair your ability to use the cv10 platform.

cv10 does not sell, rent or trade your personal data to any third party. We may, however, share your data with the following categories of trusted third-party service providers, strictly for the purposes described below and subject to binding contractual data protection obligations:

• Payment Processors: We share necessary financial data (such as your mobile wallet number and transaction amount) with bKash, Nagad, Rocket, Upay and partner Bangladeshi banks to process your deposits and withdrawals. These providers process data under their own privacy policies and are responsible for the security of data within their own systems.
• Identity Verification Providers: cv10 may use third-party KYC verification services to validate the identity documents you submit. These providers are contractually bound to process your data only for the purpose of identity verification and to maintain strict security standards.
• Game Software Providers: Your gaming session data (such as game ID, bet amounts and outcomes) is shared with our licensed game providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe and Ezugi — to the extent necessary to deliver the game you are playing and to resolve disputes. These providers operate under commercial licence agreements and are not permitted to use your data for their own independent purposes.
• Fraud Prevention & Security Services: We may share technical data (such as IP addresses and device fingerprints) with fraud detection and cybersecurity service providers to protect the platform and its players from fraudulent activity.
• Legal and Regulatory Authorities: cv10 will disclose personal data to law enforcement, regulatory bodies or other competent authorities where required to do so by applicable law, court order or lawful request. We will notify affected users of such disclosures where we are legally permitted to do so.

All third parties with whom cv10 shares personal data are required to implement appropriate technical and organisational security measures and to process data only in accordance with our instructions and applicable data protection law.

cv10 retains your personal data only for as long as it is necessary for the purpose for which it was collected, or for as long as required by applicable legal obligations. The retention periods below apply as a general guide:

When a retention period expires, cv10 will securely delete or irreversibly anonymise the relevant data. If you request deletion of your account and personal data, we will action that request subject to any overriding legal retention obligations described in the table above.

cv10 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration or disclosure. Our key security measures include:

• 256-bit SSL/TLS encryption on all data in transit between your device and cv10's servers.
• Encryption at rest for all sensitive personal data stored in cv10's databases, including identity documents and financial records.
• Access controls and role-based permissions ensuring that only authorised personnel can access personal data, and only to the extent necessary for their role.
• Multi-factor authentication for internal systems and administrative access to player data.
• Regular security audits and penetration testing to identify and remediate vulnerabilities in our platform infrastructure.
• Automated fraud detection systems monitoring login activity, transaction patterns and device behaviour for signs of account compromise or suspicious activity.
• Incident response procedures to detect, contain and respond to data security incidents promptly. In the event of a data breach that is likely to result in high risk to your rights and freedoms, cv10 will notify affected players without undue delay.

While cv10 takes all reasonable and appropriate steps to protect your data, no system of security is completely infallible. You also play an important role in keeping your account secure — please use a strong, unique password for your cv10 account and do not share your login credentials with anyone.

As a cv10 player, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact our support team using the details in Section 13. cv10 will respond to all valid requests within 30 days.

• Right of Access: You have the right to request a copy of the personal data cv10 holds about you, along with information about how it is being used. This is sometimes called a Subject Access Request (SAR).
• Right to Rectification: If any personal data cv10 holds about you is inaccurate or incomplete, you have the right to request that we correct or update it. You can also update most account details directly within your cv10 account settings.
• Right to Erasure: You may request that cv10 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where there is no legitimate basis for continued processing. This right is subject to overriding legal retention obligations.
• Right to Restriction: You have the right to request that cv10 restrict the processing of your data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you may request that cv10 provide your personal data to you in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing based on legitimate interests, including profiling, where you believe that your rights and interests override cv10's legitimate interests. You also have the unconditional right to object to processing for direct marketing purposes at any time.
• Right to Withdraw Consent: Where cv10 relies on your consent as the legal basis for processing, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

cv10 is strictly an adult gambling platform. The cv10 service is not directed at, and must not be used by, any person under the age of 21. cv10 does not knowingly collect personal data from individuals under the age of 21.

If cv10 discovers or is notified that it has inadvertently collected personal data from a person under the age of 21, we will immediately suspend the associated account, delete the personal data in question, and void any associated balance in accordance with our Terms & Conditions.

If you are a parent or guardian and believe that your child has registered a cv10 account, please contact us immediately at [email protected]. We take the protection of minors extremely seriously and will act swiftly on any such report. cv10 uses age verification measures during the registration process and during KYC checks to enforce our 21+ policy.

cv10 may send you promotional communications — including bonus offers, free spin promotions, seasonal tournament invitations and product updates — by email and SMS, but only where you have given your explicit consent to receive such communications during the registration process or subsequently through your account settings.

You may opt out of marketing communications from cv10 at any time by:

• Updating your notification preferences in your cv10 account settings.
• Clicking the unsubscribe link included in any marketing email from cv10.
• Contacting our support team at [email protected] and requesting removal from our marketing list.

Please note that opting out of marketing communications does not affect transactional or service communications, such as account security alerts, deposit and withdrawal confirmations, KYC request notifications and responsible gaming communications. These communications are necessary for the operation of your cv10 account and cannot be disabled.

cv10 does not send unsolicited marketing messages. If you receive a communication purporting to be from cv10 that you did not expect, please contact our support team immediately, as this may indicate an attempt by a third party to impersonate cv10.

cv10 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations or platform features. When we make material changes to this policy, we will notify registered players by email and by displaying a prominent notice on cv10.io for a period of at least 30 days prior to the updated policy taking effect.

The "Last Updated" date at the top of this policy will always reflect the date on which the most recent version came into effect. We encourage you to review this policy periodically to stay informed about how cv10 protects your personal data. Your continued use of the cv10 platform following the effective date of any revised policy constitutes your acceptance of the changes.

If you do not agree with any changes to this Privacy Policy, you have the right to close your cv10 account and request deletion of your personal data in accordance with Section 9. Please contact our support team to initiate this process.

If you have any questions, concerns or complaints about this Privacy Policy or the way cv10 processes your personal data, please contact our dedicated data privacy support team using the details below. We are committed to resolving all privacy-related queries promptly and transparently.

cv10 takes all privacy complaints seriously. Upon receiving your complaint, we will:

• Acknowledge receipt of your complaint within 5 business days.
• Investigate the matter thoroughly and impartially.
• Provide you with a written response detailing our findings and any actions taken within 30 days.
• Where appropriate, implement remedial measures to address the concern raised.

If you are not satisfied with how cv10 has handled your privacy complaint, you may wish to seek further assistance from an independent consumer protection or data protection authority in your jurisdiction. cv10 will cooperate fully with any such authority in the investigation of a complaint.