cv899 Privacy
Policy

1. Information We Collect

cv899 collects personal data in three main ways: information you provide directly when registering or transacting, information generated automatically as you use the Platform, and information received from trusted third-party partners where permitted by applicable law. The categories of data we may collect are described in the table below.

cv899 does not knowingly collect sensitive personal data beyond what is required for identity verification (i.e., government-issued ID documents). We do not collect biometric data beyond the KYC photograph, and we do not collect information about racial or ethnic origin, religion, political opinions, health, or sexual orientation.

2. How We Use Your Data

cv899 uses collected personal data only for legitimate, defined purposes directly connected to the operation of our platform and our obligations under applicable law. We do not use your data for purposes that are incompatible with those listed below.

• Account management: Creating, verifying, and maintaining your cv899 player account, including processing your registration and authenticating your identity at login.
• Transaction processing: Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, and other supported Bangladeshi payment channels.
• KYC and AML compliance: Verifying your identity and age (18+) in accordance with Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations, including screening against sanctions lists.
• Service delivery: Enabling you to place sports bets (cricket, football, kabaddi), play live casino games, access slot titles, and use all other features of the cv899 platform.
• Customer support: Responding to your queries, resolving disputes, investigating complaints, and providing 24/7 live chat and email support.
• Responsible gaming: Monitoring for indicators of problem gambling, applying player-requested deposit limits or self-exclusion settings, and intervening where our Responsible Gaming Policy requires us to act.
• Fraud prevention and security: Detecting and preventing fraudulent transactions, bonus abuse, account takeover attempts, and other prohibited conduct described in our Terms & Conditions.
• Platform improvement: Analysing aggregated, anonymised usage data to improve the cv899 website, mobile interface, game offerings, and overall player experience.
• Marketing communications: Sending you promotional offers, tournament announcements, and seasonal campaigns (such as Eid promotions or BPL specials) where you have opted in to receive such communications. You may opt out at any time.
• Legal and regulatory compliance: Fulfilling obligations imposed by applicable law, court orders, or directions from competent authorities.

3. Legal Basis for Processing

Every data processing activity carried out by cv899 rests on at least one of the following recognised legal bases:

• Contractual necessity: Processing is required to perform the contract between cv899 and you as a registered player — for example, to process your deposits and withdrawals or to maintain your account.
• Legal obligation: Processing is necessary to comply with applicable legal requirements, including KYC identity verification, AML transaction monitoring, and age-restriction enforcement.
• Legitimate interests: Processing is necessary for cv899's legitimate business interests, provided those interests are not overridden by your privacy rights. Examples include fraud prevention, platform security, and internal analytics. We conduct a balancing assessment before relying on this basis.
• Consent: For certain non-essential processing activities — such as sending you personalised marketing emails or placing non-essential cookies on your device — we rely on your freely given, informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

4. Data Sharing & Disclosure

cv899 does not sell your personal data. We may share your data with a limited set of trusted parties only where necessary and only to the extent required for the stated purpose:

4.1 Payment Service Providers

To process deposits and withdrawals, cv899 shares relevant financial and identity data with authorised payment processors, including mobile financial services operators (bKash, Nagad, Rocket, Upay) and banking partners (Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank). These partners receive only the data required to complete the transaction and are contractually bound to protect it.

4.2 Game Technology Providers

cv899 integrates games from third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive a pseudonymous player identifier and session token in order to deliver the game experience. They do not receive your full name, address, or financial data unless separately required for regulatory purposes.

4.3 KYC and Identity Verification Partners

Where cv899 uses a third-party identity verification service to validate your National ID (NID) or passport, your identity documents and personal details will be shared with that provider solely for verification purposes. Verification partners are bound by strict data processing agreements.

4.4 Legal and Regulatory Authorities

cv899 may disclose personal data to law enforcement agencies, financial intelligence units, or other competent public authorities where required by a court order, statutory obligation, or lawful request. In such cases, cv899 will disclose only the minimum data necessary to comply with the relevant requirement.

4.5 Business Transfers

In the event of a merger, acquisition, asset sale, or restructuring involving cv899, player data may be transferred to the successor entity. You will be notified in advance of any such transfer and of any material change to the processing of your data that may result from it.

5. Cookies & Tracking Technologies

cv899 uses cookies and similar technologies — including local storage, session storage, and pixel tags — to operate the platform, remember your preferences, and understand how players interact with the site. The following categories of cookies are used:

• Strictly necessary cookies: Essential for the basic functioning of the cv899 website. These include session authentication cookies and security tokens. These cookies cannot be disabled without impairing platform functionality.
• Functional cookies: Used to remember your preferences such as language setting, time zone (BST/UTC+6), and preferred deposit method, so you do not need to re-enter them on every visit.
• Analytics cookies: Used to collect aggregated, anonymised data about how players navigate the cv899 platform — which pages are most visited, where users drop off, and which game categories are most popular. This data informs our product improvement decisions. These cookies are only placed with your consent.
• Marketing cookies: Used to deliver promotional content relevant to your interests — for example, cricket betting offers during the BPL or IPL season, or Eid bonus campaigns. These cookies are placed only with your explicit consent and can be withdrawn at any time.

You can manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent certain core features of the cv899 platform from functioning correctly. For detailed information about the specific cookies in use and their lifetimes, please contact cv899 support.

6. Data Retention

cv899 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or for as long as required by applicable legal and regulatory obligations. The following retention guidelines apply:

• Active account data: Retained for the duration of your relationship with cv899 as an active registered player.
• KYC and identity documents: Retained for a minimum of 5 years from the date of account closure, in accordance with standard AML compliance requirements.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction, for financial audit and regulatory compliance purposes.
• Support communications: Retained for a period of 2 years from the date of each interaction, to allow for dispute resolution and quality assurance.
• Marketing consent records: Retained for 3 years from the date of last consent update, or until consent is withdrawn.
• Technical logs (IP, device, session): Typically retained for 90 days, unless extended by a fraud investigation or legal hold.

Once the applicable retention period has expired and there is no overriding legal reason to continue holding data, cv899 will securely delete or irreversibly anonymise that data in accordance with our internal data governance procedures.

7. Your Privacy Rights

As a cv899 player, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact cv899 support using the email address listed in the footer of this page. We will respond to verified requests within 30 calendar days.

• Right of access: You have the right to request a copy of the personal data cv899 holds about you, along with information about how it is being processed.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay.
• Right to erasure ("right to be forgotten"): You may request that cv899 delete your personal data where it is no longer necessary for the purpose it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been processed unlawfully. Note that this right is subject to our legal retention obligations — for example, KYC and transaction records must be retained for 5 years and cannot be erased early.
• Right to restrict processing: You may request that cv899 pause processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified.
• Right to data portability: Where processing is based on your consent or on a contract, you have the right to receive your personal data in a structured, machine-readable format so that you may transfer it to another service provider.
• Right to object: You have the right to object to processing based on cv899's legitimate interests at any time, including profiling for marketing purposes. You may also object to direct marketing communications and cv899 will cease such communications immediately upon receipt of a valid objection.
• Rights related to automated decision-making: Where cv899 uses automated processes to make decisions that have a significant effect on you — such as automated fraud flagging — you have the right to request human review of that decision.

8. Data Security Measures

cv899 implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• TLS/SSL encryption: All data in transit between your browser or device and the cv899 platform is encrypted using current TLS protocols, preventing interception by third parties.
• Encryption at rest: Sensitive data stored on cv899 servers — including identity documents and financial records — is encrypted at rest using industry-standard algorithms.
• Access controls: Access to personal data is restricted to cv899 staff and contractors who have a legitimate need to process it in the course of their duties. All access is logged and subject to review.
• Two-factor authentication (2FA): cv899 offers and encourages the use of two-factor authentication on all player accounts to reduce the risk of unauthorised account access.
• Penetration testing and security audits: cv899 conducts regular security assessments of its platform infrastructure to identify and remediate vulnerabilities.
• Incident response: In the event of a data breach that poses a risk to player rights and freedoms, cv899 will take prompt remedial action and notify affected players without undue delay.

While cv899 takes all reasonable precautions to secure your data, no internet-based platform can guarantee absolute security. You are responsible for keeping your cv899 login credentials confidential and for notifying support immediately if you suspect unauthorised access to your account.

9. Third-Party Services

The cv899 platform integrates third-party game content provided by studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you launch a game from one of these providers, you may interact directly with software and servers operated by that provider. cv899 is not responsible for the privacy practices of third-party game studios and encourages you to review the privacy documentation of any third-party service you interact with.

cv899 does not embed third-party social media tracking pixels or advertising networks on the Platform. Any analytics services used by cv899 are configured to anonymise IP addresses and are bound by data processing agreements that restrict the use of data to analytics purposes only.

Payment partners including bKash, Nagad, Rocket, Upay, and banking institutions operate under their own privacy policies and data protection frameworks. cv899 is not responsible for how these partners process data on their own systems, and we recommend reviewing their respective privacy notices for complete information.

10. Policy Updates & Contact

10.1 Updates to This Policy

cv899 reviews this Privacy Policy periodically and updates it whenever our data practices change or when required by changes in applicable law. When a material update is made, we will notify registered players by email and/or by an in-platform notification at least 7 calendar days before the new version takes effect. The "Effective Date" at the top of this Policy will be updated to reflect the date of the latest revision. Continued use of the cv899 platform after the effective date of a revised Policy constitutes your acceptance of the updated terms.

10.2 Contact for Privacy Enquiries

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how cv899 has handled your personal data, please contact us at:

• Email: support at cv899.app (plain text — not a clickable link)
• Live Chat: Available 24/7 inside your cv899 account dashboard
• Support Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)

We aim to acknowledge all privacy-related enquiries within 2 business days and to resolve substantive requests within 30 calendar days. If your concern relates to a data breach or urgent security matter, please mark your message as urgent so our team can prioritise your case.