cvc444 Privacy Policy

cvc444 collects personal information from you in three primary ways: information you provide directly when registering and using the platform, information generated automatically through your interactions with the site, and information received from trusted third-party partners such as payment processors and identity verification services. Below is a comprehensive breakdown of each category.

1.1 Information You Provide Directly

When you register a cvc444 account or interact with our support team, you provide us with the following types of personal data:

• Registration details: Full legal name, date of birth, email address, mobile phone number, and preferred username.
• KYC documents: Government-issued photo identification (National ID card, passport, or driving licence), selfie verification photographs, and proof of payment method ownership.
• Payment information: Mobile banking account number (bKash, Nagad, Rocket, Upay), bank account details (for bank transfer withdrawals), and Visa/Mastercard details where applicable. Full card numbers are never stored on cvc444 servers — card processing is handled by PCI-DSS-compliant third-party payment gateways.
• Communication records: The content of messages you send via live chat, email correspondence to [email protected], or any feedback forms submitted through the platform.
• Responsible gaming preferences: Any deposit limits, session time limits, or self-exclusion requests you configure in your account settings.

1.2 Information Collected Automatically

When you access and use the cvc444 platform, our systems automatically record certain technical and behavioural data:

• Device and browser data: IP address, browser type and version, operating system, device model, and screen resolution.
• Session data: Login timestamps (in BST, UTC+6), session duration, pages visited, game titles accessed, bet amounts placed, and navigation paths through the site.
• Transaction logs: A complete, timestamped record of every deposit, withdrawal, bonus credit, wager, and game result associated with your account.
• Geolocation data: Country and city-level location derived from your IP address, used for fraud detection and regional compliance purposes. cvc444 does not collect precise GPS-level location data.
• Cookie and tracking data: Data collected via first-party cookies and similar technologies as described in Section 4 of this policy.

1.3 Information from Third Parties

cvc444 may receive limited personal data from trusted third-party service providers in the following contexts:

• Payment processors: Transaction confirmation data, payment reference numbers, and payer mobile numbers from bKash, Nagad, Rocket, Upay, and card payment gateways.
• Identity verification services: Confirmation of document authenticity and age verification outcomes from KYC processing partners.
• Fraud prevention services: Device fingerprint risk scores and IP reputation data from fraud detection infrastructure providers.

cvc444 uses the personal information it collects for a defined set of legitimate purposes. We do not use your data for any purpose incompatible with those listed below without first obtaining your explicit consent.

2.1 Marketing Communications

cvc444 will only send you promotional emails, SMS messages, or in-platform notifications about bonuses, BPL season promotions, and new game launches if you have explicitly opted in to receive marketing communications during registration or via your account settings. You may withdraw consent for marketing communications at any time by updating your notification preferences in your account settings or by emailing [email protected] with the subject line "Unsubscribe". Withdrawing marketing consent does not affect the lawfulness of processing carried out before the withdrawal.

2.2 Automated Decision-Making

cvc444 uses automated systems for fraud detection, responsible gaming risk scoring, and bonus eligibility assessment. Where an automated decision has a significant impact on your account (for example, an automatic account suspension triggered by fraud detection rules), you have the right to request human review of that decision by contacting [email protected]. See Section 7 for a full description of your data rights.

cvc444 does not sell, rent, or trade your personal information with any third party for their own commercial purposes. We share your data only in the limited circumstances described below, and only to the extent necessary to fulfil the stated purpose.

3.1 Service Providers

cvc444 works with a small number of carefully selected third-party service providers who process personal data on our behalf as data processors. These include:

• Payment processing partners: bKash, Nagad, Rocket, Upay, and card payment gateways receive the minimum data necessary to process your transactions (mobile number, amount, reference ID).
• KYC and identity verification providers: Your identity documents and verification photographs are shared with our KYC processing partner solely for the purpose of confirming your identity and age.
• Game software providers: Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi may receive an anonymised player session token to facilitate game delivery. They do not receive your name, mobile number, or payment details.
• Cloud hosting and infrastructure: cvc444's platform is hosted on secure cloud infrastructure. The hosting provider processes server logs and technical data under a strict data processing agreement.
• Fraud prevention services: IP reputation, device fingerprint, and behavioural risk signals may be shared with specialist fraud detection vendors to identify and prevent unauthorised access and bonus abuse.

3.2 Legal and Regulatory Disclosure

cvc444 may disclose your personal information to law enforcement agencies, regulatory authorities, or courts of competent jurisdiction where we are legally required to do so. This includes disclosures made in connection with AML investigations, fraud investigations, or court orders. cvc444 will notify you of such disclosures where legally permitted to do so.

3.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of the assets of the cvc444 business, your personal data may be transferred to the acquiring entity as part of that transaction. cvc444 will notify registered players via email at least 30 days before any such transfer takes effect and will provide an option to request account deletion if you do not consent to the transfer.

3.4 No Cross-Border Transfers Without Safeguards

Where your personal data is processed by a service provider located outside Bangladesh, cvc444 takes reasonable steps to ensure that appropriate contractual safeguards are in place to protect your data in accordance with standards equivalent to those applied within Bangladesh. We do not transfer personal data to countries that lack adequate data protection frameworks without implementing appropriate contractual protections.

cvc444 uses cookies and similar browser-based storage technologies to operate the platform securely and to understand how players interact with the site. We use only first-party cookies — we do not deploy third-party advertising cookies or cross-site behavioural tracking technologies on cvc444.net.

4.1 Managing Your Cookie Preferences

You can manage non-essential cookie categories (Preference and Analytics cookies) through your cvc444 account settings under Settings > Privacy & Cookies. You may also configure your web browser to block or delete cookies at the browser level; however, disabling essential or security cookies will prevent you from logging in to the cvc444 platform and using its core features.

4.2 Local Storage and Session Storage

In addition to cookies, cvc444 may use browser local storage and session storage to temporarily retain game state, UI preferences, and authentication tokens. This data is stored on your device and is not transmitted to third parties. Local storage data can be cleared by clearing your browser's site data for cvc444.net.

cvc444 retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention schedule applies:

5.1 Account Deletion Requests

If you request deletion of your cvc444 account, we will permanently delete or anonymise all personal data that we are not legally required to retain within 30 calendar days of receiving your verified request. Data categories subject to mandatory regulatory retention periods (transaction records, KYC documents) will be securely archived and access-restricted for the duration of the applicable retention period, after which they will be permanently deleted. They will not be used for any commercial purpose during the retention period.

cvc444 implements a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, or destruction. The following technical and organisational measures are in place:

• Transport Layer Security (TLS 1.3): All data transmitted between your browser or device and cvc444 servers is encrypted using TLS 1.3 with 256-bit encryption. The site operates exclusively over HTTPS.
• Data encryption at rest: Sensitive personal data fields — including identity document files, payment method details, and KYC photographs — are encrypted at rest using AES-256 encryption on cvc444's database servers.
• Access controls: Access to personal data stored on cvc444 systems is restricted to authorised personnel on a strict need-to-know basis. All internal access is logged and audited.
• Two-factor authentication (2FA): cvc444 strongly encourages all players to enable 2FA on their accounts. Internally, all cvc444 staff accounts with access to player data require mandatory 2FA.
• Penetration testing: cvc444's platform undergoes periodic security assessments and penetration testing by independent third-party security auditors.
• DDoS protection: The platform is protected by enterprise-grade distributed denial-of-service (DDoS) mitigation infrastructure to ensure availability and to prevent network-level attacks that could expose player data.
• Incident response plan: cvc444 maintains a documented data breach response plan. In the event of a data breach that poses a risk to your rights or freedoms, affected players will be notified without undue delay and no later than 72 hours after we become aware of the breach.

6.1 Your Responsibility for Account Security

While cvc444 takes all reasonable steps to protect your data on our end, you also play an important role in account security. You are responsible for keeping your cvc444 password confidential and for not sharing your login credentials with any third party. Use a unique password that you do not use on any other website. If you believe your account has been compromised, contact [email protected] immediately or use the live chat feature to request an emergency account lock.

As a cvc444 player and data subject, you have a comprehensive set of rights over your personal data. cvc444 is committed to upholding these rights and to making the exercise of them as straightforward as possible. All data subject rights requests should be directed to [email protected] with the subject line "Data Rights Request".

7.1 Response Timeframes

cvc444 will acknowledge all data subject rights requests within 5 business days of receipt and will complete the request or provide a substantive update within 30 calendar days. In cases of particular complexity, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it before the initial 30-day period expires.

7.2 Identity Verification for Rights Requests

To protect your privacy, cvc444 will verify your identity before processing any data subject rights request. We will ask you to confirm your registered mobile number and may request one piece of supporting identification. This step ensures that personal data is not disclosed to or deleted on behalf of an unauthorised third party.

If you have any questions, concerns, or complaints about this Privacy Policy or about how cvc444 handles your personal data, you have several ways to get in touch. cvc444 takes all privacy inquiries seriously and commits to responding promptly and substantively.

8.1 General Privacy Inquiries

For general privacy questions, data subject rights requests, marketing opt-outs, or cookie preference inquiries, contact the cvc444 support team via any of the following channels:

• Email: [email protected] (use subject line "Privacy Inquiry" for faster routing)
• Live chat: Available 24/7 directly on the cvc444 platform — accessible after login via the chat icon
• Support hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)

8.2 Changes to This Privacy Policy

cvc444 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, we will notify all registered players via email and via an in-platform notification at least 14 days before the updated policy takes effect. The effective date at the top of this page will be updated accordingly. Continued use of cvc444 after the effective date of any update constitutes your acceptance of the revised policy. If you do not agree with any changes, you must stop using the platform and may request account deletion as described in Section 5.

8.3 Governing Law

This Privacy Policy is governed by and construed in accordance with the laws applicable in Bangladesh. Any disputes arising in connection with this Privacy Policy shall be subject to the exclusive jurisdiction of the competent courts of Bangladesh. cvc444 is committed to resolving privacy complaints fairly and transparently, and will always attempt to resolve disputes through direct dialogue before any formal legal process is initiated.