Privacy Policy — How cvk1541 Collects, Uses & Protects Your Data

When you interact with the cvk1541 platform — whether you register an account, make a deposit, place a bet, contact customer support, or simply browse the website — we collect certain categories of personal and non-personal information. This section sets out exactly what data we collect and the circumstances under which each category is gathered.

Registration and Account Data

When you create a cvk1541 account, we collect the following mandatory information: your full legal name, date of birth, email address, Bangladeshi mobile phone number, and a username and password of your choosing. You may also be asked to provide an optional profile name or avatar. This data is required to create and maintain your account, verify your age and identity, and deliver our services to you.

Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) obligations, we may request copies of identity documents before processing your first withdrawal or in response to risk management triggers. Accepted documents include your National Identity Card (NID), passport, or other government-issued photo identification. Where address verification is required, we may also request a recent utility bill, bank statement, or other documentary proof of your residential address in Bangladesh.

Financial and Transaction Data

Every deposit, withdrawal, and in-platform transaction generates a transaction record. We collect and retain: the amount transacted in BDT (৳), the payment method used (e.g., bKash, Nagad, Rocket, bank transfer), the transaction reference number issued by the payment provider, the timestamp of the transaction, and the outcome (approved, pending, declined, or reversed). We do not store complete bKash or Nagad account credentials; we retain only the mobile number used for each transaction, which is required for withdrawal processing and fraud prevention.

Device and Technical Data

When you access cvk1541 through a browser or mobile device, we automatically collect certain technical information to deliver the platform experience and maintain security. This includes: your IP address, browser type and version, operating system, device type (mobile, tablet, desktop), screen resolution, referring URL, and session activity logs including pages visited, time on page, and clickstream data.

Communication Data

If you contact our customer support team via email or live chat, we retain a record of that communication including the content of messages, timestamps, and the outcome or resolution reached. This data is used to train and improve support quality, resolve disputes, and maintain compliance records.

cvk1541 does not share your personal data with third parties except in the limited and specific circumstances described below. Where we do share data, we require the receiving party to maintain appropriate data protection standards consistent with this Privacy Policy.

Payment Service Providers

To process your deposits and withdrawals in BDT, we share the minimum necessary transaction data with our payment processing partners. These partners include mobile financial services (bKash, Nagad, Rocket, Upay), domestic banks (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank), and international card networks (Visa, Mastercard). Each payment partner operates under their own privacy and data security policies, and data shared with them is limited to what is technically required to authorise and settle the transaction.

Identity Verification Partners

Where automated KYC verification is used, your identity document data may be processed by a third-party KYC verification service provider. Such providers are contractually bound to process your document data solely for the purpose of identity verification on behalf of cvk1541 and are prohibited from retaining or reusing your documents for any other purpose.

Game and Platform Technology Providers

Our casino and sports betting products are powered by third-party game studios and platform technology providers including, but not limited to, Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe. These providers may receive limited session and account data necessary to deliver the game experience, such as a session token and your current account balance. They do not receive your full personal profile, payment details, or identity documents.

Legal and Regulatory Disclosure

We may be required by law, court order, or regulatory authority to disclose your personal data to relevant governmental or law enforcement bodies. In such cases, we will disclose only the minimum data required to satisfy the lawful demand and will notify you where we are legally permitted to do so. We will not voluntarily disclose your personal data to any government body absent a lawful compulsion to do so.

Business Transfers

In the event of a merger, acquisition, or sale of all or part of the cvk1541 business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer via the email address registered to your account prior to the transfer taking effect, and the acquiring entity will be required to honour the terms of this Privacy Policy.

cvk1541 retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, to comply with legal and regulatory obligations, and to resolve any disputes that may arise. The following retention periods apply to the main categories of data we hold.

Account and Registration Data

Your account registration data is retained for the lifetime of your active account plus a minimum of five years following permanent account closure. This extended retention period exists to satisfy financial record-keeping obligations and to allow for the investigation of any disputes or regulatory queries that may be raised after account closure.

KYC and Identity Documents

Identity verification documents submitted during KYC review are retained for a minimum of five years from the date of submission. This retention period reflects standard financial services compliance requirements for identity record-keeping. Documents are stored in encrypted form with access restricted to the compliance team. Where a KYC request is not completed and an account is closed without verification, submitted documents are deleted within 90 days.

Transaction Records

All deposit, withdrawal, and wagering transaction records are retained for a minimum of seven years from the date of each transaction. This retention period is consistent with financial record-keeping best practices and supports the investigation of any potential financial crime or regulatory audit requiring historical transaction data.

Support Communications

Customer support interaction records — including email threads, chat transcripts, and resolution notes — are retained for three years from the date of the last communication in each case. Records relating to formal complaints or disputes may be retained for longer where the matter remains unresolved or subject to ongoing review.

Technical and Log Data

Server logs, IP address records, and session activity data are retained for 12 months from the date of recording. After this period, technical log data is either deleted or fully anonymised such that it can no longer be associated with any individual user.

Data Storage Location

All cvk1541 player data is stored on servers protected by industry-standard SSL/TLS encryption in transit and AES-256 encryption at rest. Access to player data is restricted to authorised personnel on a need-to-know basis. Physical and logical access controls are applied to all data storage systems, and access logs are reviewed regularly as part of our internal security audit programme.

As a player on the cvk1541 platform, you hold meaningful rights over your personal data. We are committed to honouring these rights promptly and transparently. To exercise any of the rights described below, please contact us at support@cvk1541 with the subject line "Data Rights Request" and a brief description of your request. We will respond within a reasonable period and may need to verify your identity before processing your request.

Right of Access

You have the right to request a copy of the personal data cvk1541 holds about you. Upon a verified access request, we will provide you with a summary of your account data, transaction history, KYC status, and any other personal data held in our systems in a readable format.

Right to Rectification

If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. For account registration data such as your name, date of birth, or contact details, you may be required to provide supporting documentation to validate the correction.

Right to Erasure

You may request deletion of your personal data where: (a) the data is no longer necessary for the purpose for which it was collected; (b) you withdraw consent and there is no other lawful basis for processing; or (c) the data has been processed unlawfully. Please note that erasure requests cannot be fulfilled where retention is required by law (e.g., for transaction records subject to mandatory financial record-keeping periods) or where the data is needed to resolve a pending dispute.

Right to Restrict Processing

You may request that we restrict processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data held, or where processing is unlawful but you prefer restriction to erasure. During a period of restricted processing, we will continue to store your data but will not process it for any other purpose.

Right to Object to Marketing

You have an absolute right to object to the use of your personal data for direct marketing purposes at any time. Upon receipt of a valid marketing opt-out request, we will cease sending you promotional emails and SMS communications immediately and permanently, with no effect on your ability to continue using the cvk1541 platform.

Right to Data Portability

Where your data has been provided by you and is processed on the basis of consent or contract, you may request that we provide your data in a structured, machine-readable format (e.g., CSV or JSON) to facilitate transfer to another service provider.