Privacy Policy — cv999s Bangladesh

1 Information We Collect

cv999s collects personal data from you in several ways: directly when you register and use our platform, automatically through your interaction with our website and services, and occasionally from third-party partners involved in payment processing or identity verification. We collect only the data that is genuinely necessary to provide our services, maintain security, and fulfil our legal obligations.

When you create a cv999s account, we collect the following information that you provide directly:

• Full legal name — as it appears on your official government-issued identification document.
• Date of birth — to verify that you meet the 18+ age requirement for gambling services.
• Email address — used for account communications, security alerts, and support correspondence.
• Bangladesh mobile phone number — used for account verification, two-factor authentication, and mobile payment linkage (bKash, Nagad, Rocket, Upay).
• Residential address — including city or district within Bangladesh, collected for KYC compliance purposes.
• Username and encrypted password — your chosen login credentials. Passwords are stored in a one-way hashed format and are never readable by cv999s staff.

To comply with Know Your Customer (KYC) obligations and to prevent financial crime, cv999s may request additional documentation at registration or before processing a withdrawal. This may include:

• A scanned copy or photograph of a valid government-issued photo ID (National ID Card, passport, or driving licence).
• A recent utility bill, bank statement, or other document confirming your residential address in Bangladesh.
• In high-value cases, a source-of-funds declaration or additional financial documentation.

KYC documents are handled with the highest level of security and are accessed only by authorised compliance personnel. They are not used for any purpose beyond identity verification and fraud prevention.

Every deposit and withdrawal you make on cv999s generates a transaction record. We collect and retain details including: the transaction amount in BDT, the payment method used (e.g., bKash, Nagad, Visa), the transaction timestamp, and the transaction reference number provided by the payment processor. This data is necessary for account management, dispute resolution, and financial record-keeping.

When you interact with the cv999s platform — browsing the sportsbook, playing slot games, navigating between sections — we automatically collect certain technical and behavioural data. This includes your IP address, device type, browser type and version, operating system, session start and end times, pages visited, games played, bet amounts and outcomes, and click-path data. This data is used to improve the platform experience, identify technical issues, and detect potentially fraudulent patterns.

2 How We Use Your Data

cv999s processes your personal data only for specific, legitimate purposes. We do not use your data for any purpose that is incompatible with the reason it was originally collected. The table below summarises the primary purposes for which we process your data and the lawful basis for each.

cv999s will only send you promotional communications — such as bonus offers, BPL cricket promotions, Eid special offers, or new game announcements — if you have explicitly opted in to receive them during registration or via your account settings. You may withdraw your marketing consent at any time by updating your notification preferences in your cv999s account or by contacting support. Withdrawing marketing consent does not affect our ability to send you essential service communications such as security alerts, withdrawal confirmations, or account notifications.

cv999s uses automated systems for certain fraud detection and responsible gaming monitoring functions. These systems may flag accounts for manual review based on detected patterns, but no significant decision — such as permanent account closure or withholding of funds — will be taken solely on the basis of automated processing without human review by our compliance team. You have the right to request human review of any automated decision that significantly affects your account.

3 Data Sharing & Third Parties

cv999s does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share your data only where it is strictly necessary to deliver our services, comply with legal obligations, or protect the legitimate interests of cv999s and its users.

To process your deposits and withdrawals, cv999s shares necessary transaction data with payment service providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, Visa, and Mastercard. Each of these providers operates under their own privacy policy and data security standards. cv999s selects payment partners that maintain industry-standard security certifications. We share only the minimum data required to execute a transaction — for example, your mobile number for bKash or Nagad transfers.

Casino games on cv999s are powered by third-party software studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game hosted by one of these providers, your gameplay session data (such as bet amounts and game outcomes) may be processed by the provider's servers. These studios are certified by independent testing laboratories and operate under data processing agreements with cv999s.

cv999s may use third-party identity verification services to assist with KYC document review. These partners process identity document images and supporting data solely for the purpose of confirming your identity and are contractually prohibited from using your data for any other purpose.

cv999s may disclose your personal data to law enforcement agencies, regulatory authorities, or courts where required to do so by applicable law, court order, or to protect the rights, property, or safety of cv999s, its users, or the public. We will notify you of any such disclosure where legally permitted to do so.

4 Cookies & Tracking Technologies

cv999s uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files placed on your device when you visit a website. They allow cv999s to recognise your browser, maintain your logged-in session, and gather analytical data about how the platform is used.

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies that keep you logged into your cv999s account and security cookies that protect against cross-site request forgery. These cookies cannot be disabled without breaking core platform functionality.
• Analytics cookies: Used to collect anonymised data about how users navigate the cv999s platform — for example, which game categories are most visited and where users encounter errors. This data helps us improve the user experience. Analytics data is aggregated and does not personally identify you.
• Functional cookies: Remember your preferences such as language settings, selected currency display (BDT), and previously selected payment methods to speed up future transactions.
• Fraud prevention cookies: Help our security systems identify unusual patterns that may indicate account takeover attempts, multi-accounting, or other fraudulent activity.

You can control non-essential cookies through your browser settings. Most modern browsers allow you to block third-party cookies, clear cookies on exit, or receive a notification before cookies are set. Please note that disabling strictly necessary cookies will prevent you from logging into your cv999s account. Disabling analytics or functional cookies may reduce the quality of your platform experience but will not prevent basic access to the site.

5 Data Retention

cv999s retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. When the applicable retention period has expired, data is securely deleted from our systems or irreversibly anonymised so that it can no longer be linked to you as an individual.

If you request deletion of your cv999s account, we will delete or anonymise your personal data to the extent permitted by law. Certain categories of data — particularly KYC documents and financial transaction records — must be retained for the statutory periods listed above regardless of account closure, as required by applicable anti-money laundering and financial regulations.

6 Data Security

cv999s takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure. Our security practices include the following:

• SSL/TLS encryption: All data transmitted between your device and cv999s is encrypted in transit using current SSL/TLS standards. The padlock icon in your browser's address bar confirms an active encrypted connection.
• Password hashing: User passwords are stored using a strong one-way cryptographic hashing algorithm. Even in the unlikely event of a data breach, your actual password cannot be recovered from the stored hash.
• Access controls: Access to personal data is restricted to cv999s staff and contractors who need it to perform their specific job function. Access is controlled by role-based permissions and is logged for audit purposes.
• Fraud monitoring: cv999s operates continuous, real-time transaction monitoring and account activity analysis to detect and respond to suspicious behaviour promptly.
• Secure infrastructure: The cv999s platform is hosted on secure server infrastructure with regular security patching, vulnerability scanning, and penetration testing by independent security professionals.
• Incident response: In the event of a data security incident that poses a risk to your personal data, cv999s will notify affected users promptly and take all reasonable steps to contain and remediate the incident.

7 Your Privacy Rights

As a user of the cv999s platform, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team via live chat or at [email protected] (plain text — not a link). cv999s will acknowledge your request within 5 business days and respond substantively within 30 calendar days.

You have the right to request a copy of the personal data that cv999s holds about you. This includes your registration details, KYC status, transaction history, betting records, and any communications associated with your account. We will provide this information in a structured, commonly used format.

If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic contact details (email address, phone number) directly from within your cv999s account settings. For corrections to identity or KYC data, please contact support with appropriate supporting documentation.

You may request that cv999s delete your personal data. We will honour erasure requests to the maximum extent possible, subject to our legal obligation to retain certain categories of data (see Section 5 — Data Retention). Where full deletion is not possible due to legal requirements, we will clearly explain which data must be retained and for how long.

In certain circumstances — for example, where you have contested the accuracy of data we hold or where you believe processing is unlawful — you may request that we restrict the processing of your personal data while the matter is under review.

Where our processing of your data is based on your consent (for example, marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal. To withdraw marketing consent, update your notification preferences in your cv999s account settings or contact support.

If you believe that cv999s has processed your personal data in a manner that is inconsistent with this Privacy Policy or applicable privacy principles, we encourage you to first raise the matter directly with our support team. We will investigate all privacy complaints in good faith and respond with a substantive outcome within 30 calendar days.

8 Contact & Data Controller

cv999s is the data controller responsible for the personal data collected through the cv999s platform. If you have any questions, concerns, or requests relating to this Privacy Policy or our data practices, please contact us through any of the following channels:

• Email (plain text — not a link): [email protected]
• Live chat: Available 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6).

When submitting a privacy-related request, please include your registered account username and a clear description of your request so that our team can process it efficiently. For identity verification purposes, we may need to confirm your identity before actioning data access, correction, or deletion requests.

cv999s reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. When we make material changes, we will notify registered users via their registered email address at least 14 days before the changes take effect. The updated policy will also be published on this page with a revised effective date. Your continued use of the cv999s platform after the effective date of any update constitutes your acceptance of the revised Privacy Policy.