cv399 Privacy Policy — Your Data, Your Rights

This Privacy Policy ("Policy") describes how cv399 ("we", "us", "our", "Platform") collects, uses, stores, shares and protects personal information provided by or collected from individuals ("you", "your", "Member", "User") who access or use the cv399 website at cv399.pro, including all associated gaming, betting and account management services. This Policy forms part of the cv399 Terms and Conditions and should be read alongside them.

By registering for a cv399 account or continuing to use the platform after this Policy has been published or updated, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. If you do not agree with any part of this Policy, you must cease using the cv399 platform and may request account closure by contacting us at [email protected].

Your Data Rights at a Glance

As a cv399 member, you hold the following rights over your personal data. Each right can be exercised by contacting [email protected].

1.Who We Are

cv399 is an online gaming and sports betting platform operating at cv399.pro and serving players in the Bangladesh market. For the purposes of this Privacy Policy, cv399 is the data controller responsible for your personal information. Our primary contact for all data privacy enquiries is [email protected].

cv399 operates mobile-first and serves a Bangladesh-based audience whose primary payment methods include bKash, Nagad and Rocket. References to payments and financial data in this Policy therefore reflect the specific payment infrastructure used by our Members in Bangladesh. All financial data is stored and processed in BDT.

2.Information We Collect

cv399 collects personal data in the following categories. The table below sets out each category, specific examples, and the primary reason for collection:

We collect data directly from you when you register, make deposits or withdrawals, contact support, or interact with games. We also collect technical data automatically through your browser and device when you access the platform. We do not purchase personal data about you from third-party data brokers.

3.How We Use Your Information

cv399 processes personal data only for clearly defined purposes. We will not use your data for any purpose that is incompatible with the reason it was originally collected. The primary purposes for which we process your data are:

• To create and manage your cv399 account, verify your identity through KYC checks, and maintain account security — including detecting and preventing fraudulent login attempts and account takeovers.
• To process deposits and withdrawals in BDT via bKash, Nagad, Rocket, Upay and Bangladesh bank transfers — including verifying payment method ownership and maintaining transaction records as required by financial compliance obligations.
• To provide customer support, respond to queries and complaints, and manage any disputes relating to game outcomes, account transactions or promotional eligibility in a fair and documented manner.
• To monitor gaming activity for responsible gaming purposes — including identifying patterns consistent with problem gambling — and to apply deposit limits, time-outs or self-exclusion measures when requested or required.
• To send you service communications — including transaction confirmations, account security alerts, promotional offer notifications (where you have not opted out), and important policy updates — via email or SMS to the contact details registered on your account.
• To maintain and improve the cv399 platform — using aggregated, anonymised analytics to understand how Members interact with features, identify technical issues, and prioritise product development — without processing individual Member data for this purpose.

4.Legal Basis for Processing

cv399 processes personal data only where a valid legal basis exists. The following legal bases apply to our processing activities:

• Contractual necessity: processing required to perform the contract between cv399 and the Member, including account registration, payment processing, gameplay provision and customer support.
• Legal obligation: processing required to comply with applicable financial regulations, anti-money laundering requirements, age verification obligations and record retention laws.
• Legitimate interests: processing for fraud prevention, platform security, responsible gaming monitoring and service analytics — where cv399's interests in operating a safe and compliant platform do not override Member privacy rights.
• Consent: for optional marketing communications — including promotional email and SMS notifications about bonuses, seasonal offers and new game launches. Consent can be withdrawn at any time by contacting [email protected] or following the unsubscribe instructions in any marketing message.

5.Sharing Your Information

cv399 does not sell your personal data. We share personal data only in the limited circumstances described below, and only to the minimum extent necessary for the specified purpose:

• Payment processors and mobile wallet providers: cv399 shares the minimum necessary financial and identity data with bKash, Nagad, Rocket, Upay and our Bangladesh banking partners solely to execute deposit and withdrawal transactions on your behalf. These providers are contractually obligated to process your data only for that specific purpose.
• Game providers and technology partners: Platform providers including Evolution Gaming, Pragmatic Play, Spribe and Ezugi may receive anonymised session data required to deliver their games and RTP-certified RNG services. No directly identifiable personal data (name, phone number, payment details) is shared with game providers.
• Fraud prevention and compliance: Where required by applicable law or where we have a good-faith belief that disclosure is necessary to prevent fraud, money laundering or other illegal activity, cv399 may share relevant data with law enforcement agencies, financial intelligence units or regulatory bodies.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of cv399's business assets, personal data held by cv399 may be transferred to the acquiring entity as part of that transaction. Members will be notified of any such transfer and their data rights will be preserved.

6.Payment Data and Financial Information

Given that cv399 primarily serves Bangladesh players using mobile financial services, we apply heightened protection to financial data. bKash, Nagad and Rocket wallet numbers are treated as sensitive financial identifiers. We store only the last four digits of wallet numbers in our systems for reference purposes; full wallet numbers are never logged in plain text in our databases or application logs.

All deposit and withdrawal transaction records are retained for a minimum of 5 years from the date of the transaction, in compliance with financial record-keeping obligations. These records may be accessed by cv399 compliance personnel, and disclosed to regulatory or law enforcement bodies where legally required. Members may request a copy of their transaction history at any time by contacting [email protected].

7.Cookies and Tracking Technologies

cv399 uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files placed on your device when you visit cv399.pro. We use the following categories of cookies:

• Essential cookies: strictly necessary for the platform to function — including session authentication, account security tokens and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
• Analytics cookies: used in anonymised, aggregated form to understand how Members navigate the platform, which game categories are most visited, and where technical errors occur. No individual Member is identifiable from analytics data.
• Preference cookies: used to remember your platform settings such as language preference and display options, so you do not need to reconfigure them on each visit.

You can manage cookie settings through your browser preferences. Disabling non-essential cookies will not affect your ability to log in or play on cv399, but may affect analytics and preference features. cv399 does not use third-party advertising cookies or cross-site tracking cookies.

8.Data Retention

cv399 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law. The following general retention periods apply: active account data is retained for the duration of the account relationship plus 5 years after closure; KYC and identity verification documents are retained for 5 years from the date of verification or account closure, whichever is later; financial transaction records are retained for a minimum of 5 years; marketing consent records are retained for 3 years from the date consent was given or last renewed.

When personal data is no longer required and no legal obligation exists to retain it, cv399 will securely delete or anonymise it. Anonymised data (from which no individual can be identified) may be retained indefinitely for statistical and service improvement purposes.

9.Data Security

cv399 implements industry-standard technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction or disclosure. These measures include SSL/TLS encryption for all data in transit between your device and our servers; encryption of sensitive data fields at rest in our databases; role-based access controls limiting which cv399 personnel can access personal data; regular security reviews and vulnerability assessments of the platform infrastructure; and multi-factor authentication requirements for platform administrative access.

While cv399 takes all reasonable steps to protect your data, no internet transmission or electronic storage system is completely secure. Members are encouraged to use strong, unique passwords for their cv399 accounts, to enable two-factor authentication where available, and to contact [email protected] immediately if they suspect their account has been compromised.

10.Children's Privacy

cv399 is strictly an adults-only platform. We do not knowingly collect or process personal data from individuals under the age of 21. If we discover that personal data has been collected from a person under 21 without verifiable parental or guardian consent, we will delete that data immediately and close the associated account. If you believe a person under 21 has registered on cv399, please contact us immediately at [email protected] so we can take appropriate action.

11.Exercising Your Rights

To exercise any of the data rights described in this Policy, please submit a request to [email protected]. To protect your privacy, we will need to verify your identity before processing any data rights request. Verification will typically require you to confirm details matching your registered account. Please note the following when making a request:

• We will respond to all verified data rights requests within 30 days of receipt. Where a request is complex or we have received a high volume of requests, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reason for it.
• There is no charge for exercising your data rights unless a request is manifestly unfounded, repetitive or excessive, in which case cv399 reserves the right to charge a reasonable fee or decline to act on the request.
• Where cv399 is unable to fulfil a deletion or erasure request — for example because the data is subject to a mandatory retention obligation — we will explain the reason clearly and confirm what action, if any, we are able to take.

To submit a data rights request, email us at: [email protected]

12.Changes to This Privacy Policy

cv399 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we provide. The "Last Updated" date at the top of this Policy will be revised whenever a material change is made. We will notify active Members of material changes via email or an in-platform notification at least 14 days before the updated Policy takes effect.

Your continued use of cv399 following the effective date of a revised Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you have the right to close your account and request deletion of your personal data (subject to our legal retention obligations) by contacting [email protected].

13.Contact Us

If you have any questions, concerns or complaints about this Privacy Policy or about how cv399 handles your personal data, please contact our data privacy team. We aim to respond to all privacy enquiries within 24 hours Bangladesh Standard Time (BST, UTC+6).

Email: [email protected]