cv999s Privacy Policy

When you register and use the cv999s platform, we may collect the following categories of personal information:

Identity Data: Your full legal name, date of birth, and gender as provided at registration or during KYC (Know Your Customer) verification.

Contact Data: Your registered Bangladeshi mobile number and any email address you provide. These are used to communicate account updates, security alerts, and support responses.

Financial & Transaction Data: Details of deposits, withdrawals, and betting activity on your account, including the mobile financial service accounts (bKash, Nagad, Rocket, Upay) used for transactions. We do not store full payment credentials — transactions are processed directly by the relevant payment provider.

Technical & Device Data: IP address, device type, operating system, browser type and version, session timestamps, and pages visited within the platform. This data is collected automatically when you access cv999s.

Usage & Behavioural Data: Game play history, betting patterns, session durations, frequency of logins, and responsiveness to promotions. This data is used to personalise your experience, detect problem gambling indicators, and improve platform performance.

Communications Data: Records of correspondence between you and our support team, including chat logs, email exchanges, and support ticket content.

Verification Documents: Where KYC is required, copies of identity documents (e.g., National Identity Card, passport) submitted to us for verification purposes. These are stored securely and access is strictly limited to our compliance team.

cv999s processes personal data for specific, lawful purposes only. We will never use your data for a purpose that is incompatible with the reason it was originally collected. Our primary purposes are:

• Account Management: To create, maintain, and manage your cv999s account, including verifying your identity and age (21+ requirement) at registration and during ongoing account use.
• Service Delivery: To enable you to place bets, play casino games, make deposits and withdrawals, and access all features of the cv999s platform.
• Payment Processing: To initiate, process, and record financial transactions via bKash, Nagad, Rocket, and Upay in Bangladeshi Taka (BDT).
• Legal & Regulatory Compliance: To fulfil our obligations under applicable anti-money laundering (AML), Know Your Customer (KYC), and responsible gaming requirements.
• Fraud Detection & Security: To monitor account activity for signs of fraudulent behaviour, unauthorised access, collusion, or prohibited conduct as defined in our Terms & Conditions.
• Customer Support: To respond to your queries, process complaints, and resolve disputes in a timely and effective manner.
• Responsible Gaming: To identify patterns consistent with problem gambling and to apply responsible gaming tools (deposit limits, session limits, self-exclusion) where appropriate or upon your request.
• Platform Improvement: To analyse usage data in aggregate (anonymised where possible) to improve the performance, stability, and feature set of the cv999s platform.
• Marketing Communications: Where you have provided explicit consent, to send you information about cv999s promotions, bonuses, and new game releases. You may withdraw marketing consent at any time by contacting [email protected].

We do not sell, rent, or trade your personal data. We share it only in the following limited and controlled circumstances:

• Payment Providers: bKash, Nagad, Rocket, and Upay receive transaction-level data necessary to process your deposits and withdrawals. Each provider operates under its own privacy policy and applicable Bangladeshi regulations.
• Game Content Providers: Third-party game studios such as Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, and Spribe may receive anonymised session identifiers to deliver their game content on our platform. These providers do not receive your full identity or financial data.
• Fraud & Risk Management Partners: We work with specialised fraud detection service providers who analyse transaction and behavioural data to flag suspicious activity. Data shared with these providers is subject to strict contractual data protection obligations.
• Legal & Regulatory Authorities: We may disclose personal data to relevant authorities where we are legally required to do so — for example, in response to a lawful request by a law enforcement body or court order.
• Corporate Transactions: In the event of a merger, acquisition, or sale of assets involving cv999s, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this policy.

All third parties with whom we share personal data are required to maintain appropriate technical and organisational security measures and to use the data only for the specific purpose for which it was shared.

cv999s implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These include:

• SSL/TLS encryption for all data in transit between your device and our servers;
• Encryption at rest for sensitive stored data, including identity documents and financial records;
• Role-based access controls ensuring that only authorised personnel can access personal data, strictly limited to those with a legitimate operational need;
• Regular penetration testing and vulnerability assessments of our platform infrastructure;
• Multi-factor authentication requirements for internal administrative access to data systems;
• Automated monitoring and alerting systems for unusual access patterns or potential data breaches.

While we take all reasonable precautions to protect your data, no internet-based platform can guarantee absolute security. You are responsible for keeping your cv999s login credentials confidential and for notifying us immediately at [email protected] if you suspect any unauthorised access to your account.

We retain personal data only for as long as is necessary for the purposes set out in this Privacy Policy, or as required or permitted by law. Our general retention guidelines are as follows:

• Active Account Data: Retained for the full duration of your account's active life plus up to 5 years following account closure, in line with anti-money laundering record-keeping requirements.
• KYC & Identity Documents: Retained for up to 5 years after account closure or the date of the last transaction, whichever is later.
• Transaction Records: Retained for up to 5 years to support financial audit trails, dispute resolution, and regulatory compliance.
• Support Communications: Retained for up to 3 years to assist with ongoing or future disputes and to improve service quality.
• Marketing Consent Records: Retained until you withdraw consent, plus a short additional period to evidence the withdrawal of consent.
• Technical/Log Data: Typically retained for up to 12 months in rolling logs, unless a security investigation requires longer retention of specific records.

When data is no longer required, it is securely deleted or anonymised so that it can no longer be associated with an identifiable individual.

cv999s uses cookies and similar technologies (including local storage and session identifiers) to provide, secure, and improve the platform experience. The types of cookies we use include:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication tokens and security cookies. They cannot be disabled without breaking core platform functionality.
• Functional Cookies: Remember your preferences such as language settings, display preferences, and recently played games to personalise your return visits.
• Analytics Cookies: Help us understand how players navigate the platform — which pages are most visited, where sessions end, and how features are used. This data is collected in aggregate and used solely to improve platform performance.
• Fraud Prevention Cookies: Assist our fraud detection systems in identifying unusual behavioural patterns across sessions that may indicate account takeover, bot activity, or duplicate accounts.

You can manage or disable non-essential cookies through your browser or device settings. Disabling strictly necessary cookies may prevent you from logging in or using core platform features. We do not use third-party advertising or retargeting cookies.

As a cv999s player, you have the following rights with respect to your personal data. To exercise any of these rights, contact us at [email protected] with your registered mobile number and a clear description of your request.

• Right of Access: You may request a copy of the personal data we hold about you. We will provide this within 30 days of a verified request.
• Right to Rectification: If your personal data is inaccurate or incomplete, you have the right to request that we correct or update it.
• Right to Erasure: You may request that we delete your personal data where it is no longer necessary for the purpose it was collected, subject to any legal retention obligations (e.g., AML record-keeping requirements may prevent immediate full deletion).
• Right to Restriction: You may ask us to restrict processing of your data while a dispute or complaint is being resolved, rather than deleting it outright.
• Right to Object: You may object to processing of your personal data carried out on the basis of legitimate interest, including profiling for responsible gaming monitoring purposes.
• Right to Withdraw Consent: Where processing is based on consent (e.g., marketing communications), you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
• Right to Data Portability: Where technically feasible and where processing is based on consent or contract, you may request your personal data in a commonly used machine-readable format.

We will respond to all data rights requests within 30 days of receipt. Complex requests may require an extension of up to a further 30 days, in which case we will notify you of the extension and the reason for it.

Some of the third-party service providers we work with — including game content studios and fraud detection partners — may process personal data outside Bangladesh. Where such transfers occur, we take steps to ensure that your data receives an equivalent level of protection to that applied within Bangladesh, including:

• Entering into data processing agreements that require the receiving party to implement appropriate technical and organisational security measures;
• Working only with established, reputable service providers with demonstrated compliance with internationally recognised data protection standards;
• Minimising the personal data transferred to what is strictly necessary for the specific service being provided.

By using the cv999s platform, you acknowledge that your data may be transferred to and processed in countries outside Bangladesh as described in this section.

The cv999s platform is strictly for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory component of our registration and KYC process.

If we discover that we have inadvertently collected personal data from a person under 21 years of age, we will promptly delete that data, close the associated account, and return any deposited funds to the payment source. If you believe that a minor has accessed the platform or provided personal data, please contact us immediately at [email protected].

cv999s reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify active players via their registered contact details.

We encourage you to review this Privacy Policy periodically. The most current version is always available at cv999s.bet/privacy-policy. Your continued use of the platform after any changes have been published constitutes your acceptance of the revised policy.