cv99 Privacy Policy —
How We Protect Your Personal Data

1. Introduction

cv99 ("we", "us", "our") is committed to protecting the privacy and personal data of every player who accesses our online casino and cricket betting platform at cv99.bar. We understand that players in Bangladesh entrust us with sensitive personal and financial information, and we take that responsibility seriously.

This Privacy Policy describes the categories of personal data we collect from players and prospective players, the purposes for which we process that data, the circumstances under which we may share it with third parties, and the rights available to you as a data subject. This policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which form part of the overall agreement between you and cv99.

If you have any questions about this Privacy Policy or about how cv99 handles your personal data, please contact our support team at [email protected]. We aim to respond to all privacy-related enquiries within five business days.

2. Personal Data We Collect

2.1 Registration Data

When you register a cv99 account, we collect the following information:

• Full legal name
• Date of birth (to verify that you are aged 21 or above)
• Residential address (including division, district, and postcode within Bangladesh)
• Email address
• Mobile phone number (including Grameenphone, Robi, Banglalink, or Teletalk numbers)
• Preferred username and encrypted password

2.2 Identity Verification (KYC) Data

To comply with our Know Your Customer (KYC) obligations and to process withdrawals, we may request copies of the following documents:

• Government-issued photo identification (Bangladesh National ID card, passport, or driving licence)
• Proof of residential address (utility bill, bank statement from Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, or equivalent, dated within three months)
• Proof of payment method ownership (screenshot of bKash or Nagad account, or card front showing name)

2.3 Financial Data

We collect transaction records relating to your deposits and withdrawal requests, including the payment method used (bKash, Nagad, Rocket, Upay, Visa, or Mastercard), transaction amounts in Bangladeshi Taka (৳), timestamps, and reference identifiers. We do not store complete card numbers or mobile banking PINs — these are processed and tokenised directly by the relevant payment processor.

2.4 Gaming Activity Data

We record your activity on the cv99 platform, including games played, bets placed, sports markets accessed (including cricket BPL and IPL markets), wagering history, bonus usage, session durations, and win/loss records. This data is used to operate your account, settle bets accurately, enforce bonus terms, and support responsible gaming monitoring.

2.5 Technical and Device Data

When you access cv99, our systems automatically collect certain technical data, including:

• IP address and approximate geographic location
• Browser type and version
• Operating system and device type
• Session start and end times (recorded in Bangladesh Standard Time, BST/UTC+6)
• Pages visited and features used within the cv99 platform
• Referring URL (if you arrived at cv99.bar via a link)

2.6 Communications Data

If you contact our support team by email, live chat, or any other channel, we retain records of those communications, including the content of messages, timestamps, and any attachments, for the purposes of resolving your query and improving our support service.

3. How We Use Your Personal Data

cv99 uses the personal data described above for the following purposes:

Purpose	Data Used
Creating and managing your cv99 account	Registration data, KYC documents
Verifying your age (21+) and identity	Date of birth, government-issued ID
Processing BDT deposits and withdrawals	Financial data, KYC documents
Settling bets and managing bonus offers	Gaming activity data, financial data
Fraud prevention and security monitoring	Technical data, financial data, gaming data
Responsible gaming monitoring and intervention	Gaming activity data, session data
Responding to support enquiries	Communications data, account data
Sending promotional communications (opt-in only)	Email address, gaming preferences
Improving platform performance and user experience	Technical data, gaming activity data
Complying with legal and regulatory obligations	All categories as required by law

4. Legal Basis for Processing

cv99 processes your personal data on the following legal bases:

• Contract performance: Processing is necessary to create and manage your account, process transactions, and deliver the gaming services you have requested.
• Legal obligation: Processing is required to comply with anti-money-laundering (AML) laws, age verification requirements, and other applicable legal obligations.
• Legitimate interests: Processing is necessary for our legitimate interests in preventing fraud, maintaining platform security, and improving our services, provided those interests are not overridden by your rights.
• Consent: Where we send you optional marketing communications, we do so only on the basis of your prior consent. You may withdraw your consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

5. Sharing Your Personal Data

5.1 Payment Processors

To process your BDT deposits and withdrawal requests, we share the minimum necessary payment data with our payment processing partners, including bKash, Nagad, Rocket, Upay, and the relevant card networks (Visa, Mastercard). Each of these processors operates under their own privacy policies and data protection obligations.

5.2 Identity Verification Providers

cv99 uses third-party KYC and identity verification service providers to authenticate the documents you submit during the verification process. These providers process your identity documents solely for verification purposes and are contractually prohibited from using your data for any other purpose.

5.3 Game Content Providers

Where you play games provided by third-party studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — limited technical session data may be shared with those providers for the purpose of delivering the game, recording results, and ensuring fair play. Game providers do not receive your full personal profile or payment details.

5.4 Legal and Regulatory Disclosure

cv99 may disclose your personal data to law enforcement agencies, regulatory bodies, or other competent authorities where we are required to do so by law, or where we reasonably believe that disclosure is necessary to prevent fraud, money laundering, or other criminal activity, or to protect the rights and safety of cv99 players and staff.

5.5 No Sale of Data

cv99 does not sell, rent, lease, or otherwise transfer your personal data to third-party advertisers, data brokers, or marketing agencies. Any sharing of data is strictly limited to the categories described in this section and is governed by appropriate data processing agreements.

6. Cookies and Tracking Technologies

cv99 uses cookies and similar tracking technologies on the cv99.bar website to deliver core platform functionality, maintain your login session, remember your preferences, and analyse overall site performance. The following categories of cookies are used:

• Strictly necessary cookies: Required for the platform to function. These include session management and security cookies. They cannot be disabled without impairing your use of cv99.
• Functional cookies: Used to remember your language preference, display settings, and other personalisation options you have configured in your account.
• Analytics cookies: Used to collect aggregate, anonymised data about how players interact with the cv99 platform, including pages visited and session duration. This data helps us improve the site. No individual player is identified in analytics reports.

You may configure your browser to refuse cookies or to alert you when cookies are being set. Please note that disabling strictly necessary cookies will affect your ability to use the cv99 platform, including logging in and accessing your account. Analytics and functional cookies may be disabled without affecting core functionality.

7. Data Retention

cv99 retains your personal data for the following periods, after which data is securely deleted or irreversibly anonymised:

• Account and registration data: Retained for the duration of your account plus a minimum of five years following account closure, in accordance with anti-money-laundering record-keeping requirements.
• KYC and identity documents: Retained for the same period as account data. Original document images are deleted promptly once verification is completed, with only the outcome and verification reference retained thereafter.
• Financial transaction records: Retained for a minimum of five years following each transaction to satisfy legal and audit obligations.
• Gaming activity logs: Retained for the duration of your account plus two years to support dispute resolution and responsible gaming reviews.
• Support communications: Retained for two years from the date of the last communication in a given thread.
• Technical and device data: Retained for a maximum of 13 months and then aggregated or deleted.

8. Data Security

cv99 employs a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and cv99.bar
• Encrypted storage of passwords using industry-standard hashing algorithms; passwords are never stored in plain text
• Access controls restricting internal access to personal data on a strict need-to-know basis
• Regular security audits and penetration testing of the cv99 platform infrastructure
• Automated monitoring for unusual account activity, including login attempts from unrecognised devices or locations
• Two-factor authentication (2FA) available to all players as an additional account protection measure

While cv99 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, cv99 will notify affected players promptly and take all necessary steps to mitigate harm.

9. Your Data Protection Rights

As a cv99 player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with your full name, registered email address, and a description of your request. We will respond within 30 calendar days.

• Right of access: You may request a copy of the personal data cv99 holds about you, along with information about how it is being used.
• Right to rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request that it be corrected. You may also update certain details directly within your cv99 account settings.
• Right to erasure: In certain circumstances, you may request that cv99 delete your personal data. This right is subject to limitations where cv99 is required to retain data by law (e.g., AML record-keeping obligations).
• Right to restriction of processing: You may ask cv99 to restrict the processing of your data in certain circumstances, for example while a dispute about the accuracy of your data is being resolved.
• Right to data portability: Where processing is based on your consent or on a contract, you may request that cv99 provide your personal data in a structured, commonly used, machine-readable format.
• Right to object: You may object to processing based on legitimate interests or to the use of your data for direct marketing at any time. Where you object to marketing, we will stop sending promotional communications immediately.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

10. Children and Minors

The cv99 platform is strictly intended for adults aged 21 years and above. cv99 does not knowingly collect or process personal data relating to individuals under the age of 21. If we become aware that a minor has registered an account or provided personal data to us, we will close that account immediately and delete all associated data.

Parents and guardians who become aware that a minor in their household has accessed or registered on cv99.bar are requested to contact [email protected] immediately so that the account can be closed and the data removed without delay.

11. Third-Party Links and Platforms

The cv99 platform may contain references to third-party payment providers and game studios. While we take care to work only with reputable partners, cv99 is not responsible for the privacy practices of third-party websites or services. Once you leave cv99.bar — for example, to complete a payment via the bKash or Nagad app — your data is subject to that third party's privacy policy. We recommend reviewing the privacy policies of any third-party service you use in connection with your cv99 account.

12. Changes to This Privacy Policy

cv99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, we will notify registered players by email to the address held on account, or by a prominent notice on the cv99.bar website, at least seven (7) calendar days before the revised policy takes effect.

The date of the most recent revision is displayed at the top of this page. Your continued use of the cv99 platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of the changes. If you do not accept the revised policy, you may close your account by contacting [email protected] before the new policy takes effect.

13. Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way cv99 handles your personal data, please contact our support team using the details below. All privacy enquiries are treated with strict confidentiality.

• Email: [email protected] (plain text — this is not a clickable link)
• Availability: 24 hours a day, 7 days a week, every day of the year including public holidays observed in Bangladesh
• Response Time: Standard enquiries within 5 business days; urgent data breach notifications acknowledged within 24 hours
• Time Zone: Bangladesh Standard Time (BST, UTC+6)

If you remain dissatisfied with our response to a privacy complaint, you may seek further assistance through the relevant data protection authority or through our FAQ page, which addresses common questions about account security and data handling.