Your Privacy Matters at cvk4 —
Transparent, Secure & Responsible
At cvk4, we treat your personal data with the same care and precision that goes into every match we cover. This Privacy Policy explains exactly what information we collect from players across Bangladesh, how we use it, who we share it with, and the rights you hold over your own data. We believe transparency builds trust, and trust is the foundation of everything we do.
Six Privacy Principles We Live By
Every decision cvk4 makes about personal data is guided by these six core principles — applied consistently across all player interactions on our platform.
Full Transparency
We tell you exactly what data we collect, why we collect it, and how it is used — before we collect it. There are no hidden data practices at cvk4. This Privacy Policy is written in plain English so every player in Dhaka, Chittagong, Sylhet, and beyond can understand it.
Purpose Limitation
Data collected for one purpose is never repurposed without your knowledge. If we collect your bKash number to process a deposit, we do not use it to send unsolicited marketing without your explicit consent. Every data point has a defined and limited use.
Data Minimisation
cvk4 collects only the minimum data required to operate the platform safely and effectively. We do not gather information for the sake of it. If a piece of data is not necessary to serve you, protect the platform, or comply with our obligations, we do not collect it.
Security First
All personal data stored by cvk4 is protected by industry-standard SSL encryption in transit and AES-256 encryption at rest. Our infrastructure undergoes regular security audits, and access to personal data is restricted to authorised personnel only on a strict need-to-know basis.
Your Rights Are Central
You have the right to access, correct, export, and request deletion of your personal data at any time. cvk4 provides straightforward mechanisms for exercising these rights — no lengthy bureaucratic processes, no unjustified delays. See Section 13 for the full list of your data rights.
No Data Selling
cvk4 does not sell, rent, or trade your personal data to third parties for commercial gain — ever. Your data is shared only with service providers who are essential to running the platform, and all such providers are contractually bound to strict confidentiality obligations.
- Introduction
- Who We Are
- Data We Collect
- How We Collect Your Data
- How We Use Your Data
- Legal Bases for Processing
- Data Sharing and Third Parties
- Cookies and Tracking Technologies
- Data Retention
- Data Security
- Children and Minors
- International Data Transfers
- Your Data Rights
- Marketing Communications
- Changes to This Policy
- Contact and Complaints
1 Introduction
This Privacy Policy ("Policy") describes how cvk4 ("we", "us", "our") collects, uses, stores, shares, and protects personal information relating to users ("you", "your") of the cvk4 platform accessible at cvk4.io. It applies to all users of our website, mobile-optimised platform, and any associated services, regardless of the device or method of access used.
By registering an account, making a deposit, placing a bet, or otherwise using the cvk4 platform, you confirm that you have read and understood this Policy and that you consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the platform immediately.
This Policy should be read alongside our Terms and Conditions, which govern the use of the cvk4 platform. Together, these documents form the complete agreement between you and cvk4 regarding your use of our services and the handling of your personal information.
2 Who We Are
cvk4 is an online cricket betting and live casino entertainment platform serving adult players (aged 21 and above) primarily located in Bangladesh. Our platform is accessible at cvk4.io and provides sports betting markets — with a primary focus on cricket including BPL, IPL, T20 World Cup, and Bangladesh international fixtures — alongside a full suite of online casino games including live dealer tables, slots, and crash games.
cvk4 operates as a data controller with respect to the personal data of registered users and visitors to the platform. For questions relating to this Policy, or to exercise any of your data rights, please contact our designated privacy team at the contact details provided in Section 16.
3 Data We Collect
cvk4 collects personal data in several categories, depending on the nature of your interaction with the platform. The following table sets out the categories of data we may collect and the context in which each is typically gathered:
| Data Category | Examples | Collection Context |
|---|---|---|
| Identity Data | Full name, date of birth, NID number, passport number | Registration and KYC verification |
| Contact Data | Mobile number (bKash/Nagad-registered), email address | Account registration, support contact |
| Location Data | City/district (e.g., Dhaka, Sylhet, Khulna), IP-derived region | Platform access, fraud detection |
| Financial Data | Payment method type (bKash, Nagad, Rocket, Upay), transaction amounts in ৳ BDT, transaction reference IDs | Deposits and withdrawals processing |
| Gaming Data | Bet history, game session logs, win/loss records, bonus usage | Platform use, responsible gaming monitoring |
| Technical Data | IP address, device type, browser type, OS, session timestamps | Automatic collection during platform use |
| Communications Data | Support chat transcripts, email correspondence, feedback submissions | Customer support interactions |
| Preference Data | Marketing consent status, deposit limit settings, self-exclusion status | Account settings and responsible gaming tools |
cvk4 does not collect or store full payment card numbers. All payment processing for card-based transactions (Visa, Mastercard) is handled entirely by our certified payment processing partners, who operate under their own PCI-DSS compliant data security frameworks.
4 How We Collect Your Data
cvk4 collects personal data through the following channels and mechanisms:
- Direct interactions: Data you provide when you create an account, complete identity verification (KYC), make a deposit or withdrawal, contact our support team, or respond to a survey or promotion.
- Automated technical collection: As you navigate the cvk4 platform, our systems automatically record technical data including your IP address, device identifiers, browser type, pages visited, session duration, and interaction events. This data is collected using server logs, cookies, and similar technologies (see Section 8).
- Payment providers: When you process a deposit or withdrawal through bKash, Nagad, Rocket, Upay, or any other supported payment method, we receive confirmation data from the payment provider including transaction status, transaction reference, and the registered mobile number associated with the transaction.
- Identity verification partners: Where enhanced KYC verification is required, we may work with third-party identity verification services that cross-reference the identity documents you provide against public and regulated data sources.
- Fraud and risk management services: Our fraud prevention partners may supply us with risk signals, device fingerprint data, and behavioural analytics to assist in identifying potentially fraudulent activity on the platform.
5 How We Use Your Data
cvk4 uses the personal data it collects for the following defined purposes. Each purpose is tied to a specific legal basis as described in Section 6:
- Account creation and management: To create and maintain your cvk4 account, verify your identity, and ensure your account details remain accurate and current.
- Processing transactions: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment methods, and to maintain accurate financial records of all transactions in ৳ BDT.
- Providing gaming services: To deliver the cricket betting, live casino, slots, and other gaming experiences available on the cvk4 platform, including bet settlement, bonus credit, and game history maintenance.
- Customer support: To respond to your queries, resolve disputes, and provide 24/7 English-language assistance to players across Bangladesh.
- Responsible gaming: To monitor gaming patterns, apply deposit limits and self-exclusion preferences you have set, identify signs of problem gambling, and fulfil our duty of care obligations to users.
- Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeover attempts, and other prohibited activities that could harm users or the platform.
- Legal and regulatory compliance: To comply with applicable legal obligations, respond to lawful requests from competent authorities, and maintain records required for audit and compliance purposes.
- Platform improvement: To analyse aggregated usage data, identify bugs, improve platform performance, and develop new features that better serve our Bangladeshi player base.
- Marketing communications (with consent): To send you relevant promotional offers, bonus notifications, and updates about new games or cricket events where you have provided explicit consent to receive marketing. See Section 14 for opt-out information.
6 Legal Bases for Processing
cvk4 processes your personal data only where a valid legal basis exists for doing so. The legal bases we rely on are as follows:
- Contractual necessity: Processing required to fulfil our obligations to you under the Terms and Conditions — including account management, transaction processing, and delivery of gaming services.
- Legal obligation: Processing required to comply with applicable laws, including identity verification, record-keeping, fraud reporting, and responses to lawful authority requests.
- Legitimate interests: Processing undertaken for our legitimate business interests — including platform security, fraud prevention, responsible gaming monitoring, and product analytics — where those interests are not overridden by your rights and interests.
- Consent: Processing for purposes where you have given clear, informed, and freely given consent — most commonly for direct marketing communications and for the use of non-essential cookies.
Where we rely on consent as a legal basis, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal. To withdraw consent for marketing communications, use the unsubscribe link in any marketing email or contact us at [email protected].
7 Data Sharing and Third Parties
cvk4 does not sell, rent, or commercially trade your personal data. We share personal data only in the following limited circumstances, and only to the minimum extent necessary for the stated purpose:
- Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Visa, and Mastercard — to facilitate deposit and withdrawal transactions.
- Game studios and content providers: Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe — to deliver game content. These studios receive limited session data necessary to power the game (e.g., player ID, stake, and balance) and are prohibited from using it for any other purpose.
- Identity verification providers: Third-party KYC and document verification services engaged to validate NID, passport, and other identity documents submitted during account verification.
- Fraud prevention and security services: Providers of risk scoring, device fingerprinting, and behavioural analytics that assist cvk4 in maintaining platform integrity and protecting user accounts.
- Legal and regulatory authorities: Where required by law or in response to a lawful request from a competent authority, cvk4 may be required to disclose personal data. We will only do so to the extent required and will inform affected users where legally permissible.
- Business successors: In the event of a merger, acquisition, or sale of all or substantially all of cvk4's assets, personal data may be transferred to the acquiring entity, subject to the same privacy commitments contained in this Policy.
All third-party service providers who access personal data on our behalf are required to enter into data processing agreements that bind them to confidentiality and data security standards consistent with this Policy. cvk4 remains responsible for the processing carried out by these providers on our instructions.
8 Cookies and Tracking Technologies
cvk4 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit a website. The following categories of cookies are used on cvk4.io:
- Strictly necessary cookies: These cookies are essential for the platform to function. They enable core features such as maintaining your login session, processing transactions, and applying your responsible gaming settings. These cookies cannot be disabled without preventing core platform functionality.
- Performance and analytics cookies: These cookies collect aggregated information about how users interact with the platform — which pages are visited most frequently, how long sessions last, and which features are used. This data is used solely to improve platform performance and user experience.
- Functional cookies: These cookies remember your preferences — such as your preferred game categories, language settings, and device type — to personalise your experience across sessions.
- Marketing cookies (with consent only): These cookies are only placed where you have given explicit consent. They help us understand the effectiveness of our marketing communications and deliver relevant promotional content related to cricket betting events such as BPL and IPL, or casino offers.
You can control and manage cookies at any time through your browser settings. Disabling non-essential cookies will not prevent you from using the cvk4 platform, though some personalisation features may be less effective. Strictly necessary cookies cannot be disabled via browser settings as they are required for the platform to function.
9 Data Retention
cvk4 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:
- Active account data: Retained for the full duration of your account being active on the cvk4 platform.
- Transaction and financial records: Retained for a minimum of 5 years following the date of each transaction, in accordance with applicable financial record-keeping obligations.
- Identity verification documents: Retained for a minimum of 5 years following account closure or the completion of the KYC process, whichever is later.
- Support communications: Retained for 2 years following the resolution of the support interaction, to enable follow-up and quality assurance.
- Marketing consent records: Retained for the period of active consent plus 2 years following withdrawal, to demonstrate compliance with consent-based processing obligations.
- Self-exclusion records: Retained permanently to ensure that self-excluded users cannot be inadvertently re-onboarded, in line with responsible gaming best practices.
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual user. Where data cannot be fully deleted due to technical constraints, it is isolated and protected from any further active processing until deletion is possible.
10 Data Security
cvk4 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security framework includes the following controls:
- SSL/TLS encryption for all data transmitted between your device and cvk4 servers, ensuring that your login credentials, payment details, and personal information cannot be intercepted in transit.
- AES-256 encryption at rest for all sensitive personal data stored in our databases, including identity documents, financial records, and authentication credentials.
- Role-based access controls (RBAC) ensuring that only authorised personnel with a defined business need can access personal data. All internal access is logged and audited.
- Regular penetration testing and vulnerability assessments conducted by independent security professionals to identify and remediate potential weaknesses in our infrastructure.
- Multi-factor authentication (MFA) requirements for all cvk4 staff who have access to systems containing personal data.
- Incident response procedures that ensure any data breach affecting user information is identified, contained, and — where legally required — reported to affected users without undue delay.
While cvk4 takes extensive measures to protect your data, no platform can guarantee absolute security. You are responsible for keeping your account login credentials confidential. If you believe your account has been compromised, contact our support team at [email protected] immediately so we can secure your account.
11 Children and Minors
The cvk4 platform is strictly for adults aged 21 years and above. cvk4 does not knowingly collect personal data from any person under the age of 21. If we become aware that personal data has been collected from or about a person under 21, we will immediately close the relevant account, return any deposited real-money funds to the originating payment method, and delete all personal data associated with that individual as promptly as technically possible.
If you are a parent or guardian and believe that a minor in your care has registered an account or provided personal data to cvk4, please contact us immediately at [email protected] so that we can take appropriate action without delay.
12 International Data Transfers
cvk4 primarily serves players in Bangladesh, and our core data processing infrastructure is operated to serve that market. However, some of our third-party service providers — including certain game studios and fraud prevention partners — may be located in or process data from jurisdictions outside Bangladesh.
Where personal data is transferred internationally, cvk4 ensures that appropriate safeguards are in place to protect your data to the same standard as described in this Policy. These safeguards may include contractual clauses, standard contractual terms, or equivalent measures that obligate the receiving party to apply adequate data protection standards.
13 Your Data Rights
As a user of the cvk4 platform, you hold the following rights with respect to your personal data. All requests to exercise these rights should be submitted to [email protected]. cvk4 will acknowledge all such requests within 5 business days and complete the request within a reasonable period, typically no longer than 30 calendar days.
Your Rights Over Your Personal Data
cvk4 respects your right to control your own data. Below are the specific rights you hold as a cvk4 user and what each one means in practice.
Right of Access
You may request a copy of all personal data cvk4 holds about you, including what it is, where it came from, and how it is being used. We will provide this in a clear, readable format.
Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Update requests can also be made directly from your account settings for most data fields.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations that may require us to retain certain records.
Right to Restrict Processing
In certain circumstances, you may request that cvk4 restrict the processing of your personal data — for example, while a dispute about its accuracy is being resolved — without requiring full deletion.
Right to Data Portability
You have the right to receive a copy of the personal data you have provided to cvk4 in a structured, commonly used, machine-readable format, so that you can transfer it to another service provider if you choose.
Right to Object
You have the right to object to processing of your personal data where cvk4 relies on legitimate interests as its legal basis. You also have an absolute right to object to direct marketing processing at any time, with no need to provide justification.
14 Marketing Communications
cvk4 will only send you direct marketing communications — including promotional offers, bonus announcements, cricket event notifications (such as BPL or IPL fixtures), and new game releases — where you have given explicit prior consent to receive such communications at the time of account registration or via your account settings.
Marketing messages may be delivered by email or via in-platform notifications. We do not send unsolicited SMS marketing to mobile numbers associated with your bKash, Nagad, or Rocket account without a separate, specific consent for that channel.
You may withdraw your consent to receive marketing communications at any time, at no cost and without affecting your ability to continue using the cvk4 platform. To opt out, you may:
- Click the unsubscribe link included in any marketing email sent by cvk4.
- Update your communication preferences directly within your account settings under the Privacy & Notifications section.
- Contact our support team at [email protected] and request removal from all marketing lists.
Please note that opting out of marketing communications does not prevent cvk4 from sending you transactional or service-related messages that are necessary for the operation of your account — such as deposit confirmations, withdrawal notifications, and security alerts. These communications are sent on the basis of contractual necessity, not consent, and cannot be disabled while your account remains active.
15 Changes to This Policy
cvk4 reserves the right to update, amend, or replace this Privacy Policy at any time in response to changes in applicable law, regulatory guidance, industry best practices, or the development of new platform features that affect how personal data is collected or processed.
When material changes are made to this Policy — meaning changes that meaningfully affect how your personal data is used or your rights as a user — cvk4 will notify active registered users by email to the address associated with their account, and will display a prominent notice on the cvk4.io platform for a period of at least 14 days following the change taking effect.
The "Last Updated" date at the top of this Policy reflects the date on which the most recent version came into effect. We encourage you to review this Policy periodically so that you remain informed about how cvk4 handles your personal data. Continued use of the cvk4 platform following the publication of a revised Policy constitutes your acceptance of the updated terms.
Previous versions of this Privacy Policy are available on request. If you would like to review a prior version or understand what has changed between versions, please contact our support team at [email protected] and reference the effective date of the version you wish to review.
16 Contact and Complaints
If you have any questions, concerns, or requests relating to this Privacy Policy or the way cvk4 handles your personal data, please contact our privacy team using the details below. We are committed to responding to all privacy-related enquiries promptly and in good faith.
- Email: [email protected] (plain text — not a clickable link)
- Response time: We aim to acknowledge all privacy enquiries within 2 business days and resolve them within 30 calendar days.
- Support language: English — 24/7 availability for users across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, and Mymensingh.
If you are not satisfied with our response to your privacy enquiry, or if you believe that cvk4 is processing your personal data in a manner inconsistent with this Policy or applicable law, you have the right to escalate your complaint through the appropriate channel. cvk4 takes all such escalations seriously and will review each case on its individual merits, with the goal of achieving a fair and proportionate outcome.
For responsible gaming concerns — including requests to set deposit limits, activate a self-exclusion, or seek guidance on problem gambling resources — please visit our Responsible Gaming page or contact support at [email protected]. Responsible gaming requests are treated as highest priority and are acted upon within 24 hours.
Ready to Experience cvk4?
Now that you know how cvk4 protects your data, explore our cricket betting markets, live casino tables, and hundreds of slot games — all served with the security and transparency this Policy guarantees.