Privacy Policy — How bv998 Collects, Uses, and Protects Your Personal Data

This Privacy Policy ("Policy") describes how bv998 ("the Platform", "we", "us", "our") collects, uses, stores, and discloses personal information relating to individuals ("you", "your", "the Player") who access or use the bv998 website at https://bv998.io and any associated services, features, promotions, or tools made available through it.

bv998 is committed to handling your personal data with care, transparency, and respect. We collect only the information that is genuinely necessary for us to provide our services to you, comply with our legal obligations, and operate a safe and secure platform for all players across Bangladesh.

This Policy should be read together with our Terms & Conditions and our Responsible Gaming Policy, both of which are incorporated by reference.

For the purposes of this Policy, bv998 acts as the data controller in respect of personal data collected from players who use the platform. As data controller, bv998 determines the purposes for which and the means by which personal data is processed.

All data-related enquiries, access requests, correction requests, and deletion requests should be directed to our dedicated support team at [email protected]. We aim to acknowledge all privacy-related communications within 3 business days (Bangladesh Standard Time, UTC+6) and to resolve them within a reasonable period thereafter.

bv998 collects personal data from you in several ways: directly when you register an account or interact with our platform, automatically as you browse and use our services, and in some cases from third-party payment processors who assist with transaction verification. The categories of data we may collect include the following:

We do not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information, except where explicitly required for responsible gaming purposes (for example, if a player discloses a gambling-related health concern when requesting self-exclusion support).

bv998 uses the personal data it collects for the following purposes. We will not use your data for any purpose that is incompatible with those listed below without first obtaining your consent or establishing another appropriate legal basis.

• Account creation and management: To register your bv998 account, authenticate your identity when you log in, and maintain the security and integrity of your account throughout its active life.
• Service delivery: To provide you with access to sports betting (including cricket BPL, IPL, and T20 World Cup markets), live casino games, slot games, and other platform features as they become available.
• Financial transactions: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and City Bank; to detect and prevent payment fraud; and to maintain accurate financial records as required by applicable accounting and compliance standards.
• Identity verification (KYC): To verify that you meet the minimum age requirement of 21 years, to confirm your identity as required by anti-money laundering (AML) obligations, and to prevent the creation of duplicate accounts.
• Responsible gaming: To monitor your gaming activity for signs of problem gambling behaviour, to administer the responsible gaming tools you activate (deposit limits, session reminders, self-exclusion), and to fulfil our duty of care to players.
• Customer support: To respond to your enquiries, complaints, and requests in a timely and effective manner, and to maintain a record of communications for quality assurance purposes.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, collusion, use of automated betting software, and other prohibited conduct as defined in our Terms & Conditions.
• Platform improvement: To analyse aggregate usage patterns, identify technical issues, and improve the functionality, performance, and user experience of the bv998 platform over time.
• Marketing communications: To send you promotional communications about bv998 bonuses, seasonal offers, and platform updates — but only where you have given your explicit consent to receive such communications. You may withdraw this consent at any time by contacting [email protected].
• Legal compliance: To comply with applicable legal obligations, including responding to lawful requests from regulatory bodies and law enforcement authorities where required.

bv998 processes your personal data on the following legal bases, depending on the specific purpose for which it is used:

• Contractual necessity: Processing required to provide you with the services you have requested when creating a bv998 account, including account management, game access, and transaction processing.
• Legal obligation: Processing required to comply with applicable legal requirements, including KYC identity verification, AML transaction monitoring, and record-keeping obligations.
• Legitimate interests: Processing carried out in pursuit of bv998's legitimate business interests — such as fraud prevention, platform security, and service improvement — where those interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — primarily in the context of direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

bv998 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. Your data may, however, be shared with the following categories of recipients where necessary to operate the platform and fulfil the purposes described in this Policy:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and City Bank receive the minimum transaction data necessary to process your deposits and withdrawals. These partners are bound by their own privacy and data security obligations.
• Game content providers: Providers such as Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi, and Evolution Gaming may receive technical session data necessary to deliver their games through our platform. No personally identifiable financial or KYC data is transmitted to game studios.
• Identity verification services: Third-party KYC verification providers who assist bv998 in confirming player identities and ages in accordance with our responsible gaming obligations. These providers are engaged under strict data processing agreements.
• IT and hosting providers: Cloud infrastructure and server hosting partners who store platform data on our behalf under confidentiality and security agreements that prohibit independent use of your data.
• Legal and regulatory authorities: bv998 may disclose personal data to law enforcement bodies, regulatory agencies, or courts where required to do so by applicable law, or where disclosure is necessary to protect the rights, property, or safety of bv998, its players, or the public.
• Business successors: In the event of a merger, acquisition, or sale of all or part of bv998's business, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and its implications for your data.

bv998 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with applicable legal retention obligations, and to resolve any disputes or enforce our Terms & Conditions. The following indicative retention periods apply:

• Account and registration data: Retained for the duration of your account's active life, plus a minimum of five (5) years following account closure, to meet AML and compliance record-keeping requirements.
• KYC identity documents: Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later, in line with standard financial services compliance practice.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Gaming activity logs: Retained for a minimum of three (3) years to support responsible gaming monitoring, dispute resolution, and audit requirements.
• Support communications: Retained for three (3) years from the date of the last interaction, unless a longer retention period is required to resolve an ongoing dispute.
• Technical and session data: Typically retained for up to twelve (12) months, after which it is anonymised or deleted.
• Marketing consent records: Retained until you withdraw consent, after which a record of the withdrawal is kept for compliance purposes.

Once a retention period has expired and there is no ongoing legal basis for retention, your data will be securely deleted or anonymised in a manner that prevents re-identification.

bv998 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include but are not limited to:

• 256-bit SSL/TLS encryption for all data in transit between your browser and bv998 servers.
• Encryption of sensitive data fields at rest, including identity document data and payment method references.
• Role-based access controls that restrict access to personal data to authorised personnel on a need-to-know basis.
• Regular independent security audits and penetration testing of platform infrastructure.
• Multi-factor authentication (MFA) for internal staff accessing systems that hold personal data.
• Incident response procedures that include prompt notification to affected players in the event of a data breach that is likely to result in a risk to their rights and freedoms.

While bv998 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials, and you should notify us immediately at [email protected] if you suspect that your account has been accessed without your authorisation.

bv998 uses cookies and similar tracking technologies (such as web beacons and local storage) to operate and improve the platform. A cookie is a small text file placed on your device by a website you visit. The following categories of cookies may be used on bv998:

• Strictly necessary cookies: Essential for the platform to function. These cookies maintain your login session, remember your language and currency preferences, and ensure the security of your account. They cannot be disabled without significantly impairing your ability to use the platform.
• Functional cookies: Used to remember your preferences and settings between visits — such as your preferred game categories or responsible gaming configuration — to provide a more personalised experience.
• Analytics cookies: Used to collect aggregated, anonymised data about how players navigate the bv998 platform. This information helps us identify areas for improvement and measure the effectiveness of new features. Individual players are not identified through analytics data.
• Session cookies: Temporary cookies that are deleted from your device when you close your browser. Used to maintain the continuity of your browsing session on bv998.

bv998 does not use advertising cookies or behavioural tracking cookies that follow your activity across third-party websites. You may manage cookie settings through your browser's built-in privacy controls. Please note that disabling strictly necessary cookies may prevent certain platform features from working correctly.

As a bv998 player, you have the following rights with respect to your personal data. To exercise any of these rights, please contact us at [email protected] with your account details and a clear description of your request. We will respond within a reasonable timeframe and will not charge a fee for standard requests.

• Right of access: You may request a copy of the personal data that bv998 holds about you, together with information about how it is being used and the basis on which it is processed.
• Right to rectification: If any of the personal data bv998 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
• Right to erasure: You may request that bv998 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been unlawfully processed. This right is subject to overriding legal obligations that may require us to retain certain data.
• Right to restriction of processing: You may request that bv998 limit the processing of your personal data in certain circumstances — for example, while a dispute about accuracy is being resolved, or pending a decision on an erasure request.
• Right to data portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you may request a copy of your data in a structured, commonly used, and machine-readable format.
• Right to withdraw consent: Where bv998 processes your data on the basis of consent — primarily for marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.
• Right to object: You have the right to object to the processing of your personal data where bv998 relies on legitimate interests as the legal basis, unless bv998 can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms.

bv998 strictly prohibits the use of its platform by persons under the age of 21. We do not knowingly collect personal data from individuals under this age threshold. As part of our registration and KYC process, all players are required to confirm their age and to provide supporting identity documentation where requested.

If bv998 becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to close the relevant account, delete the associated personal data, and return any deposited funds to the originating payment method where technically possible. If you believe that a minor has registered on bv998, please notify us at [email protected] immediately.

bv998 primarily stores and processes personal data on servers located within or serving the South and Southeast Asia region. In certain circumstances, personal data may be transferred to and processed in countries outside Bangladesh — for example, where a third-party service provider (such as a game studio or cloud infrastructure partner) operates servers in other jurisdictions.

Where such international transfers occur, bv998 takes appropriate safeguards to ensure that your data continues to receive an equivalent level of protection to that described in this Policy. This includes entering into data transfer agreements with receiving parties that impose binding data protection obligations consistent with internationally recognised standards.

bv998 reserves the right to update or amend this Privacy Policy at any time. When we make changes, we will post the revised Policy on this page with an updated effective date. Where changes are material — meaning they significantly affect how we collect, use, or share your personal data — we will endeavour to notify registered players by email or via an in-platform notification prior to the changes taking effect.

We encourage you to review this Policy periodically to stay informed about how bv998 protects your information. Your continued use of the platform following the posting of any revised Policy constitutes your acceptance of those changes.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which bv998 handles your personal data, please contact our support team using the details below. We are committed to addressing all privacy-related enquiries promptly and transparently.

When contacting us about a privacy matter, please include your registered account username and a clear description of your request or concern so that we can assist you as efficiently as possible. For account-specific data access requests, we may require you to complete a brief identity verification step before disclosing any personal data, in order to protect the security of your account.