cv22 Privacy Policy
Your privacy is a fundamental commitment at cv22. This Privacy Policy explains precisely what personal data we collect when you use our platform, how that data is used, who it may be shared with, and the rights you hold over your own information. We process all data in accordance with secure industry practices and handle every player's personal details with strict confidentiality.
About This Policy: This Privacy Policy applies to all users of the cv22 platform accessible at https://cv22.vip, including visitors who have not yet registered an account. By registering a cv22 account or continuing to browse the platform, you acknowledge that you have read and understood this policy. If you have questions about how your data is handled, you may contact our support team at any time via live chat or at [email protected].
Privacy at a Glance
The following cards summarise cv22's core privacy commitments. They are provided for convenience and do not replace the full legal text set out in the sections below.
Minimal Data Collection
cv22 collects only the personal data that is strictly necessary to operate your account, process financial transactions, verify your identity, and comply with applicable legal obligations. We do not collect data beyond what is required for these defined purposes.
SSL Encryption
All data transmitted between your device and the cv22 platform is protected using industry-standard SSL/TLS encryption. Financial transaction data — including bKash, Nagad, Rocket, and Upay payment details — is handled through encrypted channels at all times.
No Unauthorised Sale of Data
cv22 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. Data sharing with third parties is strictly limited to service delivery, legal compliance, and fraud prevention, as described in this policy.
Your Control Over Data
You have the right to access, correct, and request deletion of the personal data cv22 holds about you, subject to legal retention obligations. You may also opt out of non-essential marketing communications at any time through your account settings or by contacting support.
Transparent Cookie Use
cv22 uses cookies and similar tracking technologies solely to maintain session integrity, analyse platform performance, and personalise content. We do not use third-party advertising cookies. You can manage cookie preferences through your browser settings at any time.
Defined Retention Periods
cv22 retains your personal data only for as long as is necessary to fulfil the purposes described in this policy, or as required by applicable law. Account data is retained for a minimum of 5 years following account closure to satisfy anti-money laundering record-keeping obligations.
Information We Collect
When you register a cv22 account or use our platform, we collect personal data across the following categories. The specific data collected depends on the nature of your interaction with the platform — for example, a registered player who makes deposits will have more data on file than a visitor who only browses the site without registering.
| Data Category | Specific Data Points | Purpose |
|---|---|---|
| Registration Data | Full name, date of birth, mobile number, email address, account username, password (hashed) | Account creation, identity verification, age verification (18+ compliance), account security |
| Identity Verification (KYC) | National ID card number, passport number or image, date of birth confirmation, residential address | Age and identity verification required before first withdrawal or when KYC threshold (৳10,000) is reached |
| Financial Data | Payment method type (bKash, Nagad, Rocket, Upay, bank name), registered mobile number or account number associated with payment method, transaction amounts in BDT, transaction timestamps | Processing deposits and withdrawals, anti-money laundering compliance, fraud prevention |
| Gaming and Betting Activity | Game sessions, bet amounts, bet outcomes, bonus usage, wagering history, game provider interactions | Account management, dispute resolution, responsible gaming monitoring, bonus administration |
| Device and Technical Data | IP address, browser type and version, operating system, device type, screen resolution, time zone (Bangladesh Standard Time detected), session duration | Platform security, fraud detection, performance optimisation, session management |
| Communications Data | Live chat transcripts, support emails sent to [email protected], in-platform notifications and responses | Customer support delivery, dispute resolution, quality assurance |
| Voluntary Survey Data | Responses to optional satisfaction surveys or promotional questionnaires | Platform improvement, understanding player preferences — collected only with explicit player consent |
Data we do NOT collect: cv22 does not collect or store full payment card numbers, CVV codes, or full bank account numbers. Payment method authentication is handled directly by the respective mobile banking provider (bKash, Nagad, Rocket, Upay) or bank, and cv22 receives only a confirmation token and masked account reference upon successful transaction completion.
Minors: cv22 is strictly an 18+ platform. We do not knowingly collect any personal data from individuals under the age of 18. If we discover that a registered account belongs to a minor, the account will be immediately closed, all data will be flagged for review, and the matter may be reported to relevant authorities where required by law.
How We Use Your Data
cv22 processes your personal data only for specific, defined purposes. We do not use your data for purposes that are incompatible with those stated at the time of collection. The following is a complete list of the purposes for which cv22 uses the data it holds about you:
Account operation: Your registration data is used to create, maintain, and authenticate your cv22 account. This includes verifying your identity at login, managing your account balance in BDT, processing your deposit and withdrawal requests via bKash, Nagad, Rocket, Upay, and supported bank channels, and maintaining an accurate record of your gaming and betting activity.
Age and identity verification: cv22 is legally and ethically obligated to verify that all players are aged 18 or above and that the identity information provided at registration is genuine. KYC data is used exclusively for this verification process and for responding to regulatory enquiries.
Fraud prevention and security: Device data, IP address, and transaction pattern analysis are used to detect and prevent fraudulent account activity, unauthorised access attempts, multi-account abuse, and money laundering. Where suspicious activity is identified, cv22 may restrict account access pending investigation.
Responsible gaming monitoring: Gaming activity data — including session duration, bet frequency, and loss patterns — is used to identify players who may be showing signs of problem gambling behaviour. cv22 may proactively contact such players to offer responsible gaming tools including deposit limits, cooling-off periods, and self-exclusion options.
Legal and regulatory compliance: cv22 is required by applicable law to maintain records of player identity, financial transactions, and gaming activity for a minimum period of 5 years. This data may be disclosed to law enforcement or regulatory authorities in response to a lawful request.
Customer support: Communications data from live chat and email interactions is used solely to resolve your support queries, investigate disputes, and improve the quality of our support service. Chat transcripts are stored for a maximum of 2 years from the date of the interaction.
Marketing communications: With your consent, cv22 may send you promotional messages via SMS or email regarding new games, deposit bonuses, seasonal promotions (such as Eid or Pohela Boishakh special offers), and BPL cricket betting markets. You may withdraw your consent and unsubscribe from marketing communications at any time through your account settings or by notifying support.
Legal basis for processing: cv22 processes your data on the following legal bases: (a) performance of the contract between you and cv22 (account operation, payment processing); (b) compliance with legal obligations (KYC, AML record-keeping); (c) legitimate interests (fraud prevention, platform security); and (d) your explicit consent (marketing communications, voluntary surveys). You may withdraw consent-based processing at any time without affecting the lawfulness of prior processing.
Responsible Gaming Data Use
cv22's responsible gaming monitoring system analyses anonymised gameplay patterns to flag accounts that may benefit from intervention. If you are contacted by cv22 regarding your gaming behaviour, this is done with the intent of offering help — not as a restriction on your account without cause. Visit our Responsible Gaming page for full details of available tools.
Opting Out of Marketing
You have full control over whether cv22 sends you promotional communications. To opt out: (1) log in to your cv22 account, (2) navigate to Account Settings → Notifications, and (3) toggle off the marketing communications option. Changes take effect within 48 hours. Alternatively, reply STOP to any SMS or email us at [email protected] with the subject "Unsubscribe".
Data Sharing and Disclosure
cv22 does not sell, rent, or trade your personal data to any third party for commercial gain. We share data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose. All third parties with whom cv22 shares personal data are contractually required to handle that data securely and in accordance with this Privacy Policy.
Payment Processors
To process your deposits and withdrawals, cv22 shares the minimum necessary transaction data with your selected payment provider — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, or other supported BDT channels. This data is limited to the transaction amount and your registered payment account reference. Payment providers operate under their own privacy policies and security standards.
Game Providers
When you play a game delivered by a third-party provider — including Pragmatic Play, NetEnt, Microgaming, Evolution Gaming, Ezugi, or Spribe — a session token and anonymised player identifier are shared with that provider to enable gameplay. cv22 does not share your name, mobile number, or financial details with game providers.
Technology and Hosting Partners
cv22 uses third-party infrastructure providers for web hosting, database management, content delivery, and platform analytics. These providers process data on cv22's behalf and under cv22's instructions. They are not permitted to use your data for their own purposes. All hosting and infrastructure partners are required to maintain security standards at least equivalent to those described in this policy.
Legal and Regulatory Authorities
cv22 may disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory authorities where required to do so by applicable law, court order, or in connection with the investigation of fraud, money laundering, or other unlawful activity. Such disclosures are made only to the extent required and will be logged internally for audit purposes.
Business transfers: In the event that cv22 undergoes a merger, acquisition, or sale of all or part of its business assets, your personal data may be transferred to the acquiring entity as part of that transaction. In such circumstances, cv22 will notify registered players of the transfer and the identity of the new data controller before the transfer takes effect. The acquiring entity will be required to honour the commitments set out in this Privacy Policy.
Cookies and Tracking Technologies
cv22 uses cookies and similar browser-based storage technologies to ensure the platform operates correctly and to improve your experience. A cookie is a small text file stored on your device by your web browser when you visit the cv22 website. Cookies do not contain executable code and cannot be used to access other files on your device.
Strictly necessary cookies: These cookies are essential for the cv22 platform to function. They maintain your authenticated session, store your language and regional settings, and prevent cross-site request forgery (CSRF) attacks. These cookies cannot be disabled without preventing you from using the platform. They expire at the end of your session or after a defined security timeout period.
Performance and analytics cookies: cv22 uses first-party analytics cookies to measure aggregate platform usage, including page load times, most-visited sections, error rates, and feature adoption. This data is used in anonymised, aggregated form to guide platform improvements. No individual player is identified through performance analytics.
Functional cookies: These cookies remember your preferences — such as your preferred display settings, last-visited game categories, and notification preferences — so that you do not have to reconfigure them on each visit. Functional cookies expire after 90 days.
What we do NOT use: cv22 does not use third-party advertising cookies, retargeting pixels, or any tracking technology that shares your browsing behaviour with external advertising networks. We do not use Google AdSense, Facebook Pixel, or equivalent third-party ad-serving technologies on the cv22 platform.
Managing cookies: You may manage and delete cookies at any time through your browser settings. Most modern browsers allow you to block all cookies, accept only first-party cookies, or clear stored cookies on a schedule. Note that disabling strictly necessary cookies will prevent you from logging into your cv22 account. Disabling functional cookies will mean your preferences are not remembered between sessions.
Local storage: In addition to cookies, cv22 may use browser local storage to cache game assets and improve load performance. Local storage data is not transmitted to cv22 servers and is cleared when you clear your browser data.
| Cookie Summary | |
|---|---|
| Session Cookies | Strictly necessary; expire on session end |
| Security Cookies | CSRF protection; strictly necessary |
| Analytics Cookies | First-party, anonymised; 30-day expiry |
| Functional Cookies | Preference storage; 90-day expiry |
| Advertising Cookies | Not used by cv22 |
| Third-Party Trackers | Not used by cv22 |
To manage cookies in your browser: in Chrome, go to Settings → Privacy and security → Cookies. In Firefox, go to Options → Privacy & Security. In Safari, go to Preferences → Privacy. Changes apply to all websites, not only cv22.
Data Security and Retention
Security measures: cv22 implements a layered approach to data security. All data in transit between your device and cv22 servers is encrypted using TLS 1.2 or higher. Data at rest — including account credentials, financial records, and KYC documents — is encrypted using AES-256 encryption. Access to player data within cv22's internal systems is restricted to authorised personnel on a strict need-to-know basis, with access logging and periodic access reviews.
Password security: Passwords are stored as salted cryptographic hashes — the plaintext password is never stored by cv22 and cannot be recovered. If you forget your password, a reset link will be sent to your registered mobile number. cv22 staff will never ask you to share your password via live chat, email, or any other channel.
Incident response: In the event of a data security incident that affects your personal data, cv22 will investigate the incident promptly, contain the breach, and notify affected players as soon as practically possible. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the steps cv22 has taken or proposes to take to address the incident.
Your responsibility: While cv22 takes all reasonable technical and organisational measures to protect your data, account security also depends on the strength of your password and the security of the device from which you access the platform. cv22 recommends that you use a unique password for your cv22 account, enable any available two-factor authentication features, and log out of your account when using a shared device.
Data retention periods: cv22 retains your personal data for the following periods:
- Account registration and KYC data: Retained for a minimum of 5 years following permanent account closure, in compliance with applicable anti-money laundering record-keeping requirements.
- Transaction records: Retained for a minimum of 5 years from the date of the transaction.
- Gaming activity logs: Retained for 3 years from the date of activity, unless required for an open dispute or investigation.
- Support communications: Retained for 2 years from the date of the interaction.
- Marketing consent records: Retained for 3 years from the date consent was given or last updated.
After the applicable retention period has expired and no legal hold applies, personal data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual.
How We Protect Your Data
- TLS 1.2+ encryption in transit
- AES-256 encryption at rest
- Salted password hashing
- Role-based internal access controls
- Access logging and audit trails
- Breach notification procedures
Security alert: cv22 will never send you an unsolicited request for your password, full payment account number, or OTP code via email, SMS, or live chat. If you receive such a request claiming to be from cv22, do not respond and report it immediately to [email protected].
Your Privacy Rights
As a cv22 player, you hold the following rights in relation to the personal data we process about you. To exercise any of these rights, please contact our support team via live chat or in writing at [email protected]. cv22 will respond to all data rights requests within 30 days. In cases of complexity or high volume, this period may be extended by a further 30 days, in which case you will be notified of the extension and the reason for it.
Right of Access
You may request a copy of all personal data cv22 holds about you, along with information about how it is used and with whom it is shared.
Right to Rectification
You may request correction of any inaccurate or incomplete personal data cv22 holds about you. Changes to core account details may require identity re-verification.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to cv22's legal retention obligations.
Right to Restrict Processing
You may request that cv22 restrict the processing of your data while a dispute about its accuracy or the lawfulness of its processing is being resolved.
Right to Data Portability
You may request a machine-readable copy of the personal data you have provided to cv22, for the purpose of transferring it to another service provider.
Right to Object
You may object to cv22 processing your data for marketing purposes or where processing is based on legitimate interests. cv22 will cease such processing unless it can demonstrate compelling legitimate grounds.
Right to Withdraw Consent
Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
Right to Complain
If you believe cv22 has not handled your personal data in accordance with this policy, you have the right to raise a formal complaint. Submit your complaint in writing to [email protected]. cv22 will acknowledge receipt within 48 hours and respond substantively within 14 days.
Identity verification for rights requests: To protect your privacy, cv22 will verify your identity before processing any data rights request. You may be asked to confirm your registered mobile number, provide a reference to a recent transaction, or complete a brief KYC step if your account is not already fully verified. This step is necessary to ensure that data is not disclosed to or deleted by an unauthorised third party.
Third-Party Services
The cv22 platform integrates with a number of third-party services in order to deliver games, process payments, and maintain platform performance. This section describes how each category of third-party service interacts with your data.
Game software providers: cv22 licenses game content from Pragmatic Play, NetEnt, Microgaming, Evolution Gaming, Ezugi, Spribe, and other accredited providers. When you launch a game, a secure session is initiated between cv22 and the relevant provider's game server. The provider receives an anonymised session token and stake/win amounts. No personally identifiable information — such as your name, mobile number, or NID details — is transmitted to game providers. Each provider is subject to its own data handling policies governing the anonymised session data they process.
Mobile payment platforms: bKash, Nagad, Rocket, and Upay are independent platforms operated by their respective companies under their own privacy policies and terms of service. When you initiate a deposit or withdrawal via one of these methods, you are interacting directly with that provider's payment interface. cv22 receives only a success/failure confirmation and a masked account reference upon transaction completion. cv22 does not have visibility into your full mobile banking account details, balance, or transaction history with that provider.
Infrastructure and hosting: cv22 uses cloud infrastructure and content delivery network services to host the platform and deliver content to players across Bangladesh, including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, and Rangpur. These providers process data on cv22's behalf under data processing agreements that impose equivalent security and confidentiality obligations. Infrastructure providers do not have the right to use player data for their own purposes.
External links: The cv22 website does not contain links to external third-party websites. All navigation links on the platform point to internal cv22 pages. cv22 is not responsible for the privacy practices of any external site that you may navigate to independently. This policy applies only to data processed by cv22 through the cv22 platform.
Policy Updates and Contact
Updates to this policy: cv22 reviews this Privacy Policy periodically and may update it to reflect changes in our data practices, platform features, or applicable legal requirements. When we make material changes to this policy, we will notify registered players via their registered mobile number or email address at least 14 days before the changes take effect. The updated policy will be published at https://cv22.vip/privacy-policy with a revised effective date. Continued use of the cv22 platform after the effective date of a policy update constitutes acceptance of the revised policy.
Non-material changes: We may update this policy at any time to correct typographical errors, improve clarity, or reflect minor operational changes that do not affect how your data is processed. Non-material updates will be published without advance notice, but the effective date at the top of the policy will always reflect the date of the most recent revision.
Contacting cv22 about privacy: If you have any questions, concerns, or requests relating to this Privacy Policy or the way cv22 handles your personal data, please contact our support team. We are available 24/7 via live chat inside your cv22 account, or you may write to us at [email protected]. Support is conducted in English, and responses are optimised for Bangladesh Standard Time (BST, UTC+6) with an average response time of under 3 minutes during peak hours.
Formal written requests: Data rights requests, formal privacy complaints, and requests for a copy of data processing agreements should be submitted in writing to [email protected] with the subject line "Privacy Request — [Your Account Username]". Including your account username in the subject line ensures your request is routed directly to the data management team and processed within the 30-day response window described in Section 6.
Privacy Contact Details
For all privacy-related enquiries:
Email (plain text — not a link):
Response time: within 30 days for data rights requests; within 48 hours for general privacy queries. Support hours optimised for Bangladesh Standard Time (BST, UTC+6).
Ready to Play at cv22?
Now that you understand how cv22 protects your personal data, explore everything our platform has to offer — from live cricket betting and BPL markets to slots, Andar Bahar, Crazy 777 crash games, and live casino tables. All BDT deposits and withdrawals are processed via bKash, Nagad, Rocket, and Upay. For players aged 18 and above only.