Privacy Policy — How cvk4 Collects, Uses, and Protects Your Data

1 Introduction and Scope

This Privacy Policy ("Policy") describes how cvk4 ("we", "us", "our") collects, processes, stores, and protects the personal data of individuals ("you", "your", "user") who register for or use the cvk4 online casino and sports betting platform, accessible at https://cvk4.app (the "Platform"). This Policy applies to all registered users, prospective users who browse the Platform without registering, and any individual whose personal data is otherwise processed by cvk4 in connection with the Platform.

cvk4 is committed to protecting your privacy and handling your personal data responsibly. This Policy is intended to be transparent and straightforward, so that you fully understand what data we hold about you, how it is used, and what choices you have. We encourage you to read this Policy carefully before registering an account or submitting any personal information through the Platform.

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which are incorporated by reference into the overall agreement between you and cvk4. In the event of any conflict between this Policy and the Terms & Conditions on a privacy matter, this Policy shall prevail.

2 Personal Data We Collect

cvk4 collects personal data through several channels: directly from you when you register an account or interact with the Platform; automatically when you browse the Platform through cookies and similar tracking technologies; and from third-party service providers involved in identity verification, payment processing, and fraud detection.

Registration and Account Data

When you create a cvk4 account, we collect the following personal data: your full legal name, date of birth, residential address, email address, mobile phone number, and preferred payment method details. This information is required to create and maintain your account and to verify your identity in accordance with our Know Your Customer (KYC) procedures.

Identity Verification Data

As part of our KYC process, you may be asked to submit copies of government-issued identity documents, including your Bangladesh National Identity Card (NID), passport, driver's licence, or birth certificate. You may also be asked to provide proof of address (such as a utility bill or bank statement) and proof of payment method ownership. These documents are processed solely for the purposes of identity and age verification.

Transaction and Financial Data

cvk4 records all financial transactions on your account, including deposit amounts, withdrawal requests, bonus credits, wagering activity, and account balance history. We also record the payment method details associated with each transaction (for example, the mobile number linked to your bKash or Nagad account, or the last four digits of a card). We do not store full card numbers on our servers.

Usage and Behavioural Data

We automatically collect certain data about how you interact with the Platform, including: pages visited, games played, session duration, betting and wagering patterns, device type and operating system, browser type and version, IP address, and approximate geographic location. This data is used to improve the Platform, personalise your experience, and detect suspicious or fraudulent activity.

Communications Data

When you contact cvk4 via live chat, WhatsApp, or email, we retain a record of that communication, including your message content, contact details, and the date and time of the interaction. This data is used to respond to your queries and to maintain a record of support interactions for quality assurance purposes.

The table below summarises the categories of personal data collected and the primary purposes for which each category is processed:

3 How We Use Your Data

cvk4 processes your personal data only for the purposes set out in this Policy and only to the extent necessary to fulfil those purposes. We do not use your data for purposes that are incompatible with those described below without first obtaining your consent or establishing another lawful basis for processing.

Account Management and Service Delivery

The primary purpose for which we process your personal data is to create, maintain, and operate your cvk4 account. This includes processing your registration, verifying your identity, managing deposits and withdrawals, crediting and debiting bonus funds, and providing access to the betting and gaming services available on the Platform.

Security, Fraud Prevention, and Integrity

cvk4 uses your data — particularly your IP address, device fingerprint, usage patterns, and transaction history — to detect and prevent fraud, money laundering, match-fixing, bonus abuse, and other prohibited conduct. Where our fraud detection systems flag unusual activity, your account may be temporarily restricted pending investigation. This processing is essential to maintain the integrity of the Platform and to protect both cvk4 and other users.

Responsible Gaming Compliance

We monitor your gaming behaviour — including session duration, deposit frequency, wagering patterns, and self-exclusion history — to support our responsible gaming obligations. This allows us to identify users who may be exhibiting signs of problem gambling and to apply appropriate protective measures, such as deposit limit recommendations or temporary account restrictions. Full details are set out in our Responsible Gaming policy.

Legal and Regulatory Compliance

cvk4 may be required to process and disclose your personal data to comply with applicable legal obligations, including requests from law enforcement authorities, financial intelligence units, or other regulatory bodies. We will only disclose personal data in response to such requests where we are legally obliged to do so or where we have reasonable grounds to believe that disclosure is necessary to prevent or detect criminal activity.

Marketing and Promotional Communications

Where you have provided your consent, cvk4 may use your contact details to send you information about promotions, bonuses, new games, and seasonal offers relevant to Bangladesh players — such as Eid specials, Pohela Boishakh offers, BPL cricket promotions, and T20 World Cup betting deals. You may withdraw your consent to marketing communications at any time by contacting support at support@cvk4.app or by using the unsubscribe function in any promotional message.

Platform Improvement and Analytics

We use aggregated and anonymised usage data to analyse Platform performance, identify technical issues, optimise the user experience, and inform decisions about new features and game content. Where possible, this analysis is conducted on data that has been anonymised so that individual users cannot be identified from it.

4 Data Sharing and Third Parties

cvk4 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share your personal data only in the limited circumstances described below, and only to the extent strictly necessary for the relevant purpose.

Payment Service Providers

To process your deposits and withdrawals, cvk4 shares relevant financial and identity data with our payment processing partners, including the operators of bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard networks. These partners process your data solely for the purpose of executing the requested transaction and are bound by their own privacy and security obligations.

Identity Verification Partners

cvk4 may engage third-party identity verification and KYC service providers to assist with the verification of identity documents submitted by users. These providers process your verification documents on our behalf and are contractually prohibited from using that data for any purpose other than identity verification.

Game Content Providers

The casino games available on the cvk4 Platform are provided by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. To enable your participation in these games, certain data — such as your account identifier, session token, and in-game transaction data — is shared with the relevant provider. Game providers do not receive your full personal profile and are prohibited from using shared data for any purpose beyond game delivery and session management.

Legal and Regulatory Disclosures

cvk4 may disclose your personal data to law enforcement agencies, financial intelligence bodies, or other competent authorities where required to do so by applicable law, by a court order, or where we reasonably believe that disclosure is necessary to prevent, investigate, or prosecute criminal activity including fraud or money laundering.

Business Transfers

In the event that cvk4 undergoes a merger, acquisition, restructuring, or sale of all or part of its business or assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify affected users of any such transfer through the contact details held on their account and will ensure that the acquiring entity commits to processing your data in a manner consistent with this Privacy Policy.

5 Cookies and Tracking Technologies

The cvk4 Platform uses cookies and similar tracking technologies to deliver a functional, secure, and personalised experience. A cookie is a small text file placed on your device by a web server when you visit the Platform. Cookies do not contain executable code and cannot be used to access other data on your device.

Types of Cookies We Use

• Strictly Necessary Cookies: These cookies are essential for the Platform to function correctly. They manage your login session, maintain your account security tokens, and remember your in-session preferences. You cannot opt out of strictly necessary cookies without losing access to the Platform.
• Performance and Analytics Cookies: These cookies collect anonymised data about how users interact with the Platform — which pages are visited most frequently, how long sessions last, and where errors occur. This data is used solely to improve the Platform's performance and reliability.
• Functionality Cookies: These cookies remember your preferences (such as your preferred language, game category, or betting market) so that you do not have to re-enter them on each visit. They enhance convenience but are not strictly necessary for the Platform to operate.
• Security and Fraud Detection Cookies: These cookies assist cvk4's fraud detection and account integrity systems by flagging unusual device or behavioural patterns. They are used to protect your account and the Platform from fraudulent access attempts.

Managing Your Cookie Preferences

You may configure your browser settings to block or delete cookies at any time. However, please be aware that disabling strictly necessary cookies will impair your ability to log in to and use the cvk4 Platform. Instructions for managing cookies in popular browsers (Chrome, Firefox, Safari, Edge) are available through those browsers' respective help centres. cvk4 does not currently support a cookie preference centre directly within the Platform interface.

6 Data Retention

cvk4 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following retention principles apply:

• Active account data: Personal data associated with an active cvk4 account is retained for the duration of the account's active lifetime and for a minimum period of 5 years following account closure, to satisfy our legal and compliance obligations.
• Transaction records: Financial transaction records — including deposit history, withdrawal records, and wagering logs — are retained for a minimum of 5 years from the date of the transaction, in accordance with anti-money laundering (AML) record-keeping requirements.
• Identity verification documents: KYC documents submitted for identity verification are retained for the duration of the account relationship and for a minimum of 5 years following account closure.
• Support communications: Records of support interactions (live chat, email, WhatsApp) are retained for a period of 3 years from the date of the interaction.
• Marketing consent records: Records of your consent to (or withdrawal from) marketing communications are retained for the duration of your account and for 3 years following account closure, to demonstrate compliance with consent requirements.
• Anonymised analytics data: Aggregated and anonymised usage data that cannot be linked back to an individual user may be retained indefinitely for Platform improvement purposes.

Upon the expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with cvk4's internal data destruction procedures. Users who wish to request early deletion of their personal data should refer to the "Your Privacy Rights" section of this Policy.

7 Data Security Measures

cvk4 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, loss, alteration, or disclosure. While no online platform can guarantee absolute security, cvk4 maintains industry-standard security practices appropriate for an online gaming platform serving the Bangladesh market.

Technical Security Measures

• All data transmitted between your browser and the cvk4 Platform is encrypted using TLS (Transport Layer Security) with 256-bit SSL certificates.
• Account passwords are stored in hashed form using industry-standard cryptographic algorithms. cvk4 staff cannot view your password in plain text.
• Two-factor authentication (OTP) is available for all user accounts and is strongly recommended. Users who enable OTP protection receive a one-time verification code to their registered mobile number for every new login.
• cvk4's servers are protected by enterprise-grade firewalls and intrusion detection systems. Access to production systems is restricted to authorised personnel on a least-privilege basis.
• Device fingerprinting and anomaly detection systems monitor for unusual login patterns and flag potential account compromise attempts for immediate investigation.

Organisational Security Measures

• Access to user personal data within cvk4 is restricted to staff members who require it to perform their designated functions (e.g., support agents, finance team, compliance team).
• All cvk4 staff with access to personal data are bound by confidentiality obligations and receive data protection awareness training.
• Third-party service providers who process personal data on cvk4's behalf are contractually required to maintain security standards consistent with those applied by cvk4.

8 Your Privacy Rights

As a user of the cvk4 Platform, you have the following rights with respect to your personal data. To exercise any of these rights, please contact the cvk4 support team at support@cvk4.app with the subject line "Privacy Rights Request", including your full name and registered account details so that we can identify your account.

Right of Access

You have the right to request a copy of the personal data that cvk4 holds about you. We will provide this information in a structured, commonly used format within a reasonable period of receiving your request. We may ask you to verify your identity before providing access to your data.

Right to Rectification

If any personal data that cvk4 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may be able to correct certain information (such as your contact details) directly within your account settings. For other data (such as your date of birth on your registered account), you will need to contact our support team and may be asked to provide supporting documentation.

Right to Erasure

You may request that cvk4 delete your personal data. We will honour such requests where we are not required to retain the data by law or for legitimate business purposes (such as the retention of transaction records for AML compliance). Where deletion is not possible in full, we will inform you of the specific data categories that must be retained and the reason for their retention.

Right to Restrict Processing

You may request that cvk4 restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data held or where you object to a particular processing purpose. Where processing is restricted, we will retain the data but will not actively use it until the restriction is lifted.

Right to Object to Marketing

You have the right to object to the processing of your personal data for direct marketing purposes at any time. If you object to marketing, we will cease sending you promotional communications. This will not affect the processing of your data for account management, security, or legal compliance purposes.

9 Children and Minors

The cvk4 Platform is strictly intended for adults aged 18 years and above. 18+ cvk4 does not knowingly collect personal data from individuals under the age of 18. If we become aware that personal data has been collected from a minor, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and you believe that a person under 18 in your care has registered an account on the cvk4 Platform or submitted personal data to cvk4, please contact us immediately at support@cvk4.app. We will investigate and take appropriate action without delay.

We strongly encourage parents and guardians to make use of parental control and internet filtering software to restrict minors' access to gambling websites. More information on tools available for Bangladesh users is provided in our Responsible Gaming policy.

10 Changes to This Policy

cvk4 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the features and services offered on the Platform. Where a material change is made to this Policy, we will notify registered users via the email address or contact number held on their account, or by displaying a prominent notice on the Platform, at least 7 days before the updated Policy takes effect.

Non-material amendments — such as typographical corrections, clarifications of existing provisions, or updates required to reflect minor operational changes that do not affect the substance of your rights — may take effect immediately upon publication on the Platform.

The date at the top of this Policy indicates when it was last updated. We recommend that you review this Privacy Policy periodically to stay informed of any changes. Your continued use of the cvk4 Platform following publication of an updated Policy constitutes your acceptance of the revised terms.

11 Contact for Privacy Queries

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way in which cvk4 processes your personal data, please contact our support team using any of the following channels:

• Email: support@cvk4.app — please use the subject line "Privacy Query" to ensure your message is directed to the appropriate team.
• Live Chat: Available 24/7 through the cvk4 Platform. Our support agents can handle initial privacy queries and escalate complex matters to the relevant team.
• WhatsApp: cvk4 offers WhatsApp support around the clock for users who prefer messaging-based communication. Contact details are available within the Platform's support section.

cvk4 is committed to handling all privacy-related enquiries with care and confidentiality. We will respond to all queries within 5 business days and will escalate complex matters to our data protection team as appropriate. Support is available in English and is accessible from all divisions of Bangladesh including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, and Mymensingh.