cvbaji Privacy Policy

01 Data We Collect

cvbaji collects personal data in three broad categories:

Information you provide directly:

• Full legal name and date of birth (required for account registration and age verification).
• Bangladeshi mobile number and email address (used for account communication and two-factor authentication).
• Residential address and city (e.g., Dhaka, Chittagong, Sylhet, Khulna) where required for identity verification.
• Government-issued photo ID and proof of address submitted during KYC verification.
• Payment method details, including registered bKash, Nagad, Rocket, or Upay mobile numbers, and bank account references. Full card or account numbers are never stored on cvbaji servers.
• Support communications: the content of any messages, emails, or chat conversations you initiate with the cvbaji support team.

Information collected automatically:

• Device information: device type, operating system version, browser type and version, screen resolution, and unique device identifiers.
• Network information: IP address, approximate geographic location derived from IP, and mobile network operator.
• Usage data: pages visited, games played, session duration, betting history, deposit and withdrawal records, and navigation patterns within the Platform.
• Cookie and tracking data: session cookies, preference cookies, and analytics identifiers as described in Section 7 of this Policy.

Information from third parties:

• Identity verification data returned by third-party KYC service providers.
• Transaction confirmation data returned by bKash, Nagad, Rocket, Upay, and banking partners.
• Fraud-risk signals from third-party fraud prevention services.

02 How We Use Your Data

cvbaji uses collected personal data for the following purposes:

• Account management: creating and maintaining your player account, verifying your identity and age, and processing account-related requests.
• Payment processing: facilitating deposits and withdrawals via your chosen payment method, and maintaining transaction records as required by applicable law.
• Platform operation: delivering games, processing bets, calculating outcomes, and maintaining game history records.
• Fraud prevention and security: detecting and preventing unauthorised access, duplicate account creation, money laundering, and other prohibited conduct described in our Terms & Conditions.
• Legal compliance: meeting obligations under applicable anti-money-laundering legislation, record-keeping requirements, and responding to lawful requests from competent authorities.
• Responsible gaming: monitoring play patterns to identify signs of problem gambling and enforcing player-requested deposit limits, self-exclusions, and cooling-off periods.
• Customer support: responding to your queries, resolving complaints, and maintaining records of support interactions.
• Marketing communications: sending promotional offers, bonus notifications, and seasonal promotions (e.g., BPL season offers, Eid promotions) — but only where you have explicitly opted in to receive such communications. You may opt out at any time.
• Platform improvement: using aggregated, anonymised usage data to analyse player behaviour, improve game selection, and optimise the Platform experience.

03 Data Sharing and Third Parties

cvbaji does not sell, rent, or trade your personal data to third parties. We share data only in the circumstances described below, and only to the extent necessary:

All third-party service providers engaged by cvbaji are contractually obligated to handle data securely, to use it only for the stated purpose, and to comply with applicable data protection standards. cvbaji remains responsible for ensuring these obligations are met.

04 Data Retention

cvbaji retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account data (name, DOB, contact details): retained for the duration of the account relationship and for a minimum of 5 years after account closure, to meet anti-money-laundering record-keeping obligations.
• Transaction records (deposit and withdrawal history): retained for a minimum of 5 years from the date of each transaction.
• KYC documents (ID copies, proof of address): retained for the duration of the account relationship and for a minimum of 5 years after account closure.
• Support communications: retained for 2 years from the date of the last interaction.
• Marketing preferences and opt-out records: retained indefinitely to ensure that opt-out requests are honoured if a player re-registers in the future.
• Anonymised analytics data: may be retained indefinitely as it cannot be linked back to an individual player.

After the applicable retention period expires, personal data is securely deleted or anonymised. You may request early deletion (subject to legal obligations) as described in Section 6 of this Policy.

05 Security Measures

cvbaji takes the security of your personal data seriously. The following technical and organisational measures are in place to protect data against unauthorised access, disclosure, alteration, or destruction:

• Encryption in transit: all data transmitted between your device and the cvbaji Platform is encrypted using TLS 1.2 or higher (256-bit SSL). This applies to login, registration, payment, and all other Platform interactions.
• Encryption at rest: sensitive personal data stored on cvbaji servers — including identity documents and payment references — is encrypted at rest using industry-standard encryption algorithms.
• Access controls: access to player data is restricted to authorised cvbaji personnel who require it to perform their job functions. All staff with access to personal data are bound by confidentiality obligations.
• Two-factor authentication: players are encouraged to enable two-factor authentication (2FA) on their accounts. cvbaji may require 2FA as a condition of processing high-value withdrawals.
• Fraud monitoring: automated systems monitor account activity continuously for signs of unauthorised access, unusual transaction patterns, and other indicators of account compromise.
• Incident response: in the event of a data breach that poses a risk to player rights, cvbaji will notify affected players and, where required by applicable law, relevant authorities, within the legally prescribed timeframe.

While cvbaji employs robust security measures, no online platform can guarantee absolute security. Players are responsible for maintaining the confidentiality of their own account credentials and for notifying cvbaji immediately at [email protected] if they suspect unauthorised access to their account.

06 Your Data Rights

As a cvbaji player, you have the following rights with respect to your personal data. To exercise any of these rights, please contact us at [email protected] with your registered account details and the nature of your request. cvbaji will respond within 30 days.

• Right of access: you may request a copy of the personal data we hold about you, along with information about how it is used and with whom it has been shared.
• Right of rectification: you may request correction of any inaccurate or incomplete personal data held in your account.
• Right to erasure: you may request deletion of your personal data, subject to our legal obligations to retain certain records. Requests will be assessed individually; where erasure is not possible due to legal requirements, we will inform you of the retention basis.
• Right to restriction: you may request that we restrict processing of your data in certain circumstances, for example while a correction request is being reviewed.
• Right to object: you may object to the processing of your data for direct marketing purposes at any time. You may also object to processing based on our legitimate interests, though we may be able to demonstrate compelling grounds to continue.
• Right to withdraw consent: where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.
• Right to data portability: you may request that we provide your personal data in a structured, machine-readable format so that you can transfer it to another service provider.

07 Cookies and Tracking Technologies

cvbaji uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and analyse usage patterns. The following categories of cookies are used:

• Strictly necessary cookies: required for the Platform to function. These include session authentication cookies that keep you logged in during a session. These cookies cannot be disabled without breaking core Platform functionality.
• Preference cookies: store your chosen settings such as language preference, display options, and last-used payment method. Disabling these cookies means your preferences will not be remembered between sessions.
• Analytics cookies: collect anonymised data about how players use the Platform, including which pages are visited most frequently and where players navigate from. This data is used to improve the Platform. cvbaji uses privacy-respecting analytics tools that do not share raw data with advertising networks.
• Fraud prevention cookies: help identify unusual or potentially fraudulent activity by tracking device fingerprints and session behaviour patterns.

Most browsers allow you to control cookies through their settings. Blocking all cookies may impair your ability to use the cvbaji Platform, particularly features that require an active authenticated session. For guidance on managing cookies in your browser, please refer to your browser's help documentation.

08 Marketing Communications

cvbaji may send promotional communications — including bonus offers, seasonal promotions (Eid, Pohela Boishakh, BPL season, T20 World Cup), and new game announcements — to players who have opted in to receive them. Marketing communications are delivered by SMS to your registered Bangladeshi mobile number or by email to your registered address.

You may opt out of marketing communications at any time by:

• Updating your communication preferences in the account settings section of the Platform.
• Contacting support at [email protected] and requesting removal from the marketing list.
• Following the unsubscribe instructions included in any marketing email.

Opting out of marketing communications does not affect the delivery of transactional messages that are required for account operation, such as deposit confirmations, withdrawal notifications, and security alerts. These messages are sent regardless of marketing preference settings.

09 International Data Transfers

The cvbaji Platform serves players primarily in Bangladesh. Some of our third-party service providers — including game studio providers such as Evolution Gaming and Pragmatic Play, and cloud infrastructure providers — may process data in jurisdictions outside Bangladesh. Where such transfers occur, cvbaji takes steps to ensure that adequate protections are in place, including contractual data processing agreements that require recipients to maintain data security standards equivalent to those described in this Policy.

cvbaji does not transfer personal data to jurisdictions known to have inadequate data protection frameworks without implementing appropriate safeguards. If you have concerns about international data transfers relating to your account, please contact us at [email protected].

10 Minors and Age Restriction

The cvbaji Platform is strictly for adults aged 21 and above. cvbaji does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as part of the registration process and may be supplemented by documentary KYC verification at any point.

If cvbaji discovers that personal data belonging to a person under the age of 21 has been collected — for example, because a minor provided false information during registration — the account will be immediately suspended, all funds held will be returned to the verified payment source, and the personal data will be deleted from our systems as promptly as legal obligations permit.

If you believe that a minor may have registered for a cvbaji account, please notify us immediately at [email protected] so that we can investigate and take appropriate action.

11 Changes to This Privacy Policy

cvbaji reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, operational requirements, or applicable legal obligations. When material changes are made, we will notify registered players via the Platform or by sending a message to the registered contact details on file.

The "Last updated" date at the top of this Policy indicates when the most recent revision was made. We encourage you to review this Policy periodically. Continued use of the Platform after any revision constitutes your acceptance of the updated Policy.

If you do not agree with a revised version of this Privacy Policy, you should stop using the Platform and may request account closure by contacting us at [email protected]. Closure requests will be processed in accordance with our Terms & Conditions and the data retention obligations described in Section 4 above.

12 Contact and Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how your personal data has been handled, please contact the cvbaji data team:

Email: [email protected] (plain text — not a clickable link)

We aim to acknowledge all privacy-related enquiries within 48 hours and to resolve them within 30 days. For complex requests — such as full subject access requests or erasure requests involving legacy transaction records — we may require up to 60 days, in which case we will notify you of the extended timeline and the reason for it.

If you are not satisfied with how cvbaji has handled your personal data or responded to a privacy request, you have the right to escalate your complaint to a competent supervisory authority or data protection body in your jurisdiction.