Privacy Policy

When you interact with cv499 — whether by visiting the website, registering an account, making a deposit, placing a bet, or contacting support — we collect certain categories of personal data. This collection is necessary to provide you with a functional, secure, and personalised platform experience. The categories of data we collect are set out below.

cv499 does not knowingly collect personal data from individuals under the age of 18. If we become aware that a minor has provided personal data, we will delete that data immediately and close the associated account. If you believe a minor has registered on cv499, please contact [email protected] without delay.

Some personal data is collected directly from you (e.g., at registration), while other data is collected automatically through your use of the platform (e.g., technical and usage data). In certain cases, we may also receive data from third-party identity verification providers engaged to assist with KYC checks.

cv499 uses the personal data we collect for a defined set of purposes, each of which is grounded in a legitimate operational or legal basis. We do not use your data for any purpose that is incompatible with the purposes set out below.

• Account management: Creating and maintaining your player account, verifying your identity and age, and managing your account settings, balance, and transaction history.
• Service delivery: Enabling you to access and play games, place bets on cricket, BPL, IPL, T20 World Cup, and other markets, and use all features of the cv499 platform.
• Payment processing: Processing your deposits and withdrawal requests via bKash, Nagad, Rocket, and Upay, and maintaining accurate financial records of all transactions.
• Fraud prevention and security: Detecting and preventing fraudulent transactions, unauthorised account access, collusion, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions.
• Legal compliance: Meeting our obligations under applicable anti-money laundering (AML) requirements, Know Your Customer (KYC) standards, and any other legal or regulatory obligations applicable to the platform's operations.
• Customer support: Responding to your queries, complaints, and dispute submissions, and maintaining records of support interactions for quality assurance purposes.
• Platform improvement: Analysing aggregated, anonymised usage patterns to improve platform features, game selection, interface design, and overall user experience.
• Responsible gaming: Monitoring betting patterns to identify potential signs of problem gambling and, where appropriate, applying responsible gaming measures in accordance with our Responsible Gaming Policy.
• Marketing communications: Sending you promotional offers, bonus notifications, and platform updates via email, where you have provided consent to receive such communications. You may withdraw this consent at any time by contacting [email protected].

cv499 will not use your personal data to make solely automated decisions that produce significant legal or similarly significant effects on you without providing a means for human review, except where such processing is expressly authorised by applicable law.

In the course of operating the cv499 platform, we may share limited personal data with the following categories of recipient:

• Game providers: Third-party game studios including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Ezugi, and Spribe receive session tokens and game-play data necessary to deliver live games and slot content to your device. These providers do not receive your full identity profile.
• Payment service providers: Mobile financial service operators including bKash, Nagad, Rocket, and Upay receive transaction-level data required to process your deposits and withdrawals. These providers operate under their own privacy policies and are regulated by Bangladesh Bank.
• Identity verification services: Third-party KYC providers engaged by cv499 to verify the authenticity of identity documents submitted during the verification process. These providers process your document data solely for the purpose of verification and are prohibited from using it for any other purpose.
• IT infrastructure and cloud service providers: Hosting, database, and cybersecurity service providers who process data on our behalf in order to keep the platform operational, secure, and available. All such providers are bound by data processing agreements consistent with the principles in this Privacy Policy.
• Legal and regulatory authorities: Where we are required by applicable law, court order, or regulatory demand to disclose personal data, we will comply. Where legally permitted to do so, we will notify the affected player before disclosure.
• Fraud prevention and AML agencies: Shared watchlists and suspicious transaction databases operated by recognised industry bodies, accessed for the purpose of preventing money laundering and financial fraud.

We do not transfer personal data to countries outside the player's region without ensuring that adequate data protection safeguards are in place, consistent with the data protection principles applicable to international offshore platform operations.

cv499 uses cookies — small text files placed on your device — and similar tracking technologies such as web beacons and local storage objects. These technologies serve a number of purposes as described below.

• Session management: Keeping you logged into your account as you navigate between pages on cv499.app, and invalidating your session after a defined period of inactivity for security purposes.
• Preference storage: Remembering settings such as your preferred game lobby view and notification preferences so you do not need to reconfigure them on each visit.
• Security and fraud detection: Assigning a unique device fingerprint that helps cv499 identify suspicious login attempts from unrecognised devices and flag potential account takeover activity.
• Performance analytics: Collecting aggregated, anonymised data on page load times, error rates, and navigation paths to identify and resolve platform performance issues.
• Responsible gaming monitoring: Tracking session duration and betting frequency as inputs to our responsible gaming detection systems, which help identify players who may be displaying signs of harmful gambling patterns.

Most modern web browsers allow you to control cookie settings, including blocking or deleting cookies. However, disabling essential cookies will impair your ability to log in and use core platform features. To manage cookies, access your browser's privacy or security settings. Please note that cv499 does not currently respond to "Do Not Track" browser signals, as no universally accepted standard for such signals exists.

cv499 does not use third-party advertising cookies or place retargeting cookies that track your browsing activity across other websites outside of cv499.app.

cv499 retains personal data only for as long as it is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or operational obligations. The following retention periods apply as general guidelines:

• Active account data: Retained for the full duration of your active account relationship with cv499, plus a post-closure period as detailed below.
• Financial transaction records: Retained for a minimum of five years following the date of the transaction, in accordance with standard financial record-keeping practices applicable to offshore gaming operators.
• KYC documentation: Retained for a minimum of five years following account closure or the completion of the last transaction to which the documentation relates, whichever is later.
• Support and communications records: Retained for a period of three years from the date of the last interaction, to support dispute resolution and quality assurance processes.
• Technical and usage logs: Retained for a rolling period of 12 months, after which they are aggregated and anonymised for analytical purposes or deleted.
• Self-exclusion records: Where a player has applied for self-exclusion, certain identifying records are retained indefinitely to prevent re-registration in violation of the exclusion period.

When the applicable retention period expires, personal data is securely deleted or irreversibly anonymised so that it can no longer be attributed to any individual. Where deletion is not immediately practicable (e.g., due to backup system schedules), the data is isolated from active processing until deletion can be completed.

cv499 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures are reviewed and updated on a regular basis to reflect current best practices in platform security.

Our technical security measures include:

• 256-bit SSL/TLS encryption on all data transmissions between player devices and cv499 servers.
• Encryption at rest for sensitive data categories, including identity documents and financial records.
• Access control systems that restrict access to personal data to authorised personnel only, based on the minimum-access principle.
• Two-factor authentication requirements for privileged administrative access to platform systems.
• Automated intrusion detection and anomalous activity monitoring with real-time alerting.
• Regular vulnerability assessments and penetration testing of platform infrastructure.
• Secure off-site backup systems with tested recovery procedures.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to player rights and interests, cv499 will notify affected players as promptly as practicable and take immediate steps to contain and remediate the breach. Notifications will be sent to the email address registered on your cv499 account.

Players also play an important role in maintaining account security. You are advised to use a strong, unique password for your cv499 account, never share your login credentials with any third party, and contact [email protected] immediately if you suspect unauthorised access to your account.

As a user of the cv499 platform, you hold the following rights with respect to your personal data. These rights may be exercised at any time by contacting our support team:

• Right of access: You have the right to request a copy of the personal data cv499 holds about you. We will provide this in a structured, commonly used format within a reasonable timeframe following identity verification.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Account details such as your email address and phone number can also be updated directly through your account settings panel.
• Right to erasure: You may request the deletion of your personal data where: it is no longer necessary for the purposes for which it was collected; you withdraw consent and no other legal basis applies; or the data has been processed unlawfully. This right is subject to legal retention obligations — for example, financial transaction records required for AML compliance cannot be deleted on request.
• Right to restrict processing: You may request that cv499 limits the processing of your personal data in certain circumstances, such as while the accuracy of data is being verified or a complaint is under review.
• Right to data portability: Where technically feasible and where the processing is based on your consent or a contractual relationship, you may request that your personal data be transferred to you or to another service provider in a machine-readable format.
• Right to object to marketing: You may withdraw consent to receive marketing communications from cv499 at any time by contacting [email protected]. Withdrawal of marketing consent does not affect the lawfulness of any communications sent prior to that withdrawal.
• Right not to be subject to solely automated decisions: Where cv499 makes automated decisions that significantly affect your account (e.g., automated fraud detection leading to account suspension), you have the right to request human review of that decision.

cv499 will not charge a fee for the exercise of these rights unless a request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply. We reserve the right to decline requests that are repetitive or impractical to fulfil within a reasonable resource allocation.

cv499 reserves the right to revise this Privacy Policy at any time to reflect changes in our data practices, platform features, legal obligations, or the regulatory environment applicable to the platform's operations. When material changes are made, the "Last updated" date at the top of this page will be revised, and registered players will be notified via the email address on their account where the change is significant.

Your continued use of the cv499 platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. We therefore recommend reviewing this page periodically, and in particular before making any new deposits or providing additional personal information.

This Privacy Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, which together govern your use of the cv499 platform. In the event of any conflict between this Privacy Policy and the Terms & Conditions with respect to the handling of personal data, this Privacy Policy shall prevail.

For all privacy-related questions, data access requests, or complaints regarding the handling of your personal data, please contact our dedicated support team at [email protected]. Our team operates 24 hours a day, 7 days a week, on Bangladesh Standard Time (UTC+6), and is committed to handling all privacy enquiries with care and discretion.