cv899 Privacy Policy
Your Data, Protected at Every Step

This Privacy Policy ("Policy") describes how cv899 ("we", "us", "our", "cv899") collects, uses, stores, discloses, and otherwise processes personal data about users ("you", "your", "Player") who access or use the cv899 online casino and cricket betting platform available at https://cv899.io (the "Platform").

We are committed to handling your personal data with care, transparency, and respect. This Policy is written in plain English so that all of our Bangladesh-based players can understand exactly how their information is used. Please read this Policy carefully before creating an account or otherwise using the Platform.

By registering for an account on cv899, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with the terms of this Policy, you must not use the Platform.

For the purposes of this Privacy Policy, the data controller responsible for your personal data is cv899, the entity operating the Platform at https://cv899.io. All enquiries regarding the processing of your personal data should be directed to our support team at [email protected] (plain text — this address is not a clickable link).

Where cv899 engages third-party service providers to process personal data on its behalf (for example, payment processors, KYC verification services, and platform analytics providers), those providers act as data processors and are bound by appropriate contractual obligations that restrict their use of your data to the purposes specified by cv899.

cv899 collects personal data in the following categories. We collect only what is necessary for the purposes described in Section 5 of this Policy.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, biometric data, or health data, except where you voluntarily disclose health-related information in the context of a responsible gaming support request, in which case it is used solely for that purpose.

cv899 collects your personal data through the following means:

• Direct interactions: Information you provide when registering an account, completing KYC verification, making deposits or withdrawal requests, contacting customer support, or responding to surveys or promotions.
• Automated technologies: When you access and use the Platform, we automatically collect Technical Data and Usage Data through cookies, web beacons, server logs, and similar tracking technologies. See Section 6 for full details on our use of cookies.
• Third-party sources: Identity verification and fraud-prevention service providers may supply additional data to confirm the accuracy of information you have provided. Payment processors (bKash, Nagad, Rocket, Upay) confirm transaction status but do not share full financial credentials with cv899. Analytics providers may supply aggregated behavioural data to help us understand Platform usage patterns.

cv899 processes your personal data only where there is a clear, lawful purpose for doing so. The table below sets out the primary purposes for which we process your data and the legal basis we rely on in each case:

cv899 uses cookies and similar technologies (such as web beacons and local storage objects) to operate and improve the Platform. A cookie is a small text file placed on your device when you visit a website. cv899 uses the following categories of cookies:

• Strictly Necessary Cookies: These are essential for the Platform to function. They enable core features such as session management, authentication, and security. The Platform cannot function properly without them. No consent is required for these cookies.
• Functional Cookies: These remember your preferences (such as language settings, display preferences, and last visited game category) to personalise your experience on the Platform. These cookies do not track your activity across other websites.
• Analytics Cookies: These collect anonymised or pseudonymised information about how players use the Platform — for example, which game categories are most popular, how long sessions last, and which features are used most frequently. This data helps us improve the Platform experience for Bangladesh players. We use only privacy-respecting analytics tools and do not share raw analytics data with third-party advertisers.

No third-party advertising cookies: cv899 does not use cookies from third-party advertising networks. We do not allow advertisers to place cookies on the Platform for the purpose of building behavioural advertising profiles about our players.

Managing cookies: You can control or delete cookies through your browser settings. Instructions for doing so are available via your browser's Help documentation. Please note that disabling strictly necessary cookies may prevent some or all Platform features from working correctly. For functional and analytics cookies, you may opt out without affecting core Platform functionality.

cv899 does not sell, rent, or share your personal data with third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and only to the extent necessary for the purposes described in this Policy:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank receive the minimum data necessary to process your deposit or withdrawal transactions. Each provider operates under its own privacy policy and security standards. cv899 does not store your full mobile banking credentials.
• KYC and Identity Verification Providers: Third-party KYC service providers may receive copies of your identity documents and personal details for the purpose of verifying your identity and conducting anti-money-laundering checks. These providers are contractually bound to use your data only for verification purposes.
• Platform Infrastructure Providers: Cloud hosting, content delivery, and server infrastructure providers may have incidental access to personal data stored on systems they operate on cv899's behalf. These providers act as data processors and are bound by appropriate data processing agreements.
• Analytics and Performance Monitoring: Anonymised or aggregated usage data may be shared with analytics platform providers to help cv899 understand how the Platform is used and identify areas for improvement. Raw personally identifiable data is not shared for analytics purposes.
• Legal and Regulatory Authorities: cv899 may disclose your personal data to law enforcement agencies, courts, regulators, or other public authorities where required to do so by applicable law, court order, or other legal process, or where we believe disclosure is necessary to protect the rights, property, or safety of cv899, our players, or the public.
• Business Transfers: In the event that cv899's business or assets are acquired by or merged with another entity, your personal data may be transferred as part of that transaction. We will notify you via the email address associated with your account before your personal data becomes subject to a materially different privacy policy as a result of such a transaction.

In all cases where personal data is shared with third parties, cv899 takes reasonable steps to ensure that the recipient provides an adequate level of data protection consistent with the standards described in this Policy.

cv899 is an offshore platform and its infrastructure, including servers and data processing systems, may be located outside of Bangladesh. By registering for and using the Platform, you acknowledge and consent to the transfer of your personal data to countries outside of Bangladesh, which may not have data protection laws equivalent to those in your home jurisdiction.

Where your personal data is transferred to third-party service providers in other countries, cv899 takes reasonable contractual and technical measures to ensure that your data remains protected to a standard consistent with this Privacy Policy. This may include the use of standard contractual data protection clauses between cv899 and the relevant third-party processor.

If you have concerns about how your personal data is handled as a result of international transfers, please contact us at [email protected] for more information about the specific safeguards in place.

cv899 retains personal data only for as long as is necessary for the purposes for which it was collected, or for such longer period as may be required by applicable law or legitimate business necessity. The following general retention periods apply:

When personal data is no longer required and the applicable retention period has expired, cv899 will securely delete or anonymise the data so that it can no longer be associated with you as an individual. Anonymised, aggregated data (from which you cannot be identified) may be retained indefinitely for statistical and analytical purposes.

cv899 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• SSL/TLS Encryption: All data transmitted between your browser or app and the cv899 Platform is encrypted using industry-standard SSL/TLS protocols. Look for the padlock icon and "https://" in your browser's address bar when using the Platform.
• Password Hashing: Passwords are never stored in plain text. cv899 uses strong one-way cryptographic hashing algorithms to store password credentials, meaning that even cv899 staff cannot view your password.
• Access Controls: Access to systems containing personal data is restricted to authorised cv899 personnel on a need-to-know basis. All staff with access to personal data are bound by confidentiality obligations.
• Two-Factor Authentication (2FA): cv899 supports and encourages the use of two-factor authentication on player accounts to provide an additional layer of security beyond your password.
• Regular Security Reviews: cv899 conducts periodic reviews of its security infrastructure and data handling practices to identify and address potential vulnerabilities.
• Data Minimisation: We limit the personal data we collect and process to what is strictly necessary, reducing the potential impact of any security incident.

Despite our best efforts, no online platform can guarantee absolute security. If you believe your cv899 account has been compromised, or if you discover a potential security vulnerability, please contact us immediately at [email protected]. We will investigate all reported security concerns promptly.

cv899 respects your rights as a data subject. Depending on applicable law and the circumstances of your request, you may have the following rights in relation to your personal data held by cv899:

• Right of Access: You have the right to request a copy of the personal data we hold about you. We will provide this in a structured, commonly used format within 30 days of receiving a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update many details directly through your account settings panel; for other corrections, please contact our support team.
• Right to Erasure: In certain circumstances, you have the right to request that we delete your personal data. This right is subject to cv899's legal obligations to retain certain data (for example, for anti-money-laundering compliance purposes), which may mean we are unable to fulfil an erasure request in full.
• Right to Restriction of Processing: You may have the right to request that we restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested.
• Right to Data Portability: Where processing is based on your consent or on a contract, you may request a machine-readable copy of the personal data you have provided to cv899, suitable for transfer to another data controller.
• Right to Object: You have the right to object to the processing of your personal data where cv899 relies on legitimate interest as its legal basis. You also have the right to object to direct marketing at any time, including profiling carried out for marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, please submit a request by email to [email protected] with the subject line "Data Subject Request". We will verify your identity before processing the request and respond within 30 days. In complex cases, this period may be extended by up to a further 30 days, and we will notify you of any extension.

The cv899 Platform is intended exclusively for adults. Consistent with our Terms & Conditions, players must be at least 21 years of age to register and participate on the Platform. Bangladesh players must meet this 21+ requirement in accordance with our responsible gaming standards for the region.

cv899 does not knowingly collect or process personal data from individuals under the age of 21. If we become aware that a user below the minimum age has registered an account or provided personal data, we will immediately suspend the account, delete the associated personal data, and refund any deposits to the payment method from which they originated.

If you are a parent or guardian and believe that a minor in your care has accessed the cv899 Platform or provided personal data, please contact us immediately at [email protected] so that we can take appropriate action without delay.

The cv899 Platform may, from time to time, contain references to third-party game providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) and payment platforms (such as bKash, Nagad, Rocket, and Upay). While these partners provide games and services accessible through cv899, their own platforms and services operate under their respective privacy policies, which are entirely independent of this Privacy Policy.

cv899 is not responsible for the privacy practices, data collection methods, or content of any third-party platform. We recommend that you review the privacy policy of any third-party service with which you interact, particularly when accessing those services directly outside of the cv899 Platform environment.

cv899 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform features. When material changes are made to this Policy, we will update the "Last Updated" date at the top of this page and, where reasonably practicable, notify registered players by email using the address associated with their cv899 account.

Your continued use of the Platform following the publication of a revised Privacy Policy constitutes your acceptance of the changes. We recommend that you review this page periodically — at least once every 30 days — to stay informed of how cv899 handles your personal data. If you do not agree with any changes to this Policy, you should stop using the Platform and contact [email protected] to request account closure.

If you have any questions, concerns, or complaints about this Privacy Policy or about the way cv899 handles your personal data, please contact our support team using the details below. All privacy-related enquiries are handled by our dedicated support staff who are available 24 hours a day, 7 days a week, in English.

Email: [email protected] (plain text — not a clickable link)

Subject line for privacy requests: "Privacy Policy Enquiry" or "Data Subject Request"

Response time: We aim to acknowledge all privacy-related enquiries within 48 hours (Bangladesh Standard Time, UTC+6) and to provide a substantive response within 30 days of receiving a verified request.

This Privacy Policy was last reviewed and updated on 1 January 2026. The English-language version of this Policy is the authoritative version and takes precedence in the event of any inconsistency with any translated version.