cv9990 Privacy Policy

1. Introduction & Scope

This Privacy Policy ("Policy") is published by cv9990 ("we", "us", "our", "the Platform") and applies to all personal data processed in connection with your use of the cv9990 website at cv9990.app and any associated mobile or desktop application interfaces. This Policy should be read alongside the cv9990 Terms & Conditions, which form the overarching legal framework governing your relationship with the platform.

By registering an account, logging in, making a deposit, placing a bet, or otherwise accessing the services offered at cv9990, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your personal data as described herein. If you do not agree to the terms of this Policy, you should not use the cv9990 platform.

This Policy is effective as of 1 January 2026. cv9990 reserves the right to amend this Policy at any time. When we make material changes, we will update the effective date at the top of this page. Your continued use of cv9990 following any such update constitutes your acceptance of the revised Policy. We encourage you to review this page periodically to stay informed about how we protect your data.

2. Information We Collect

cv9990 collects personal data from you in the following ways: directly from you when you register or interact with the platform; automatically when you access the site; and from third-party sources such as payment processors and identity verification providers. The categories of data we collect are described below.

2.1 Registration and Identity Data

When you create a cv9990 account, we collect the information you provide during registration, including your full legal name, date of birth, email address, and mobile phone number registered in Bangladesh. You may also be required to submit a username and a password of your choosing. This data is used to create and manage your account and to verify your identity in accordance with our Know Your Customer (KYC) obligations.

2.2 Identity Verification Documents

As part of our KYC process, cv9990 may request copies of government-issued identity documents such as your Bangladesh National Identity Card (NID), passport, driving licence, or recent utility bill for proof of address. These documents are processed securely and retained only for as long as required to satisfy legal and regulatory obligations.

2.3 Financial and Transaction Data

We collect information relating to deposits, withdrawals, and betting activity on the cv9990 platform. This includes transaction amounts denominated in BDT (৳), timestamps, payment method references (such as your bKash, Nagad, or Rocket mobile wallet number), and transaction status records. Full payment card numbers are never stored by cv9990; card processing is handled entirely by our certified payment partners.

2.4 Technical and Usage Data

When you access cv9990, our servers automatically record certain technical data, including your IP address, browser type and version, device type, operating system, referring URL, pages visited, session duration, and click-stream data. This information helps us maintain platform security, diagnose technical issues, and understand aggregate usage patterns.

2.5 Communications Data

If you contact cv9990 customer support via live chat or email, we retain a record of that correspondence, including the content of your messages, timestamps, and the resolution outcome. This helps us handle future enquiries from you more efficiently and maintain a record of any commitments or agreements made during support interactions.

The table below summarises the key data categories and their primary collection sources:

3. How We Use Your Data

cv9990 uses the personal data we collect for specific, legitimate purposes directly related to the operation of the platform and our obligations to you as a registered player. We do not use your data for purposes that are incompatible with those for which it was originally collected without obtaining your explicit consent.

• Account creation and management: To register your account, verify your identity, and provide you with secure access to the cv9990 platform.
• Payment processing: To facilitate deposits and withdrawals in BDT via your chosen payment method, and to maintain accurate financial records for your account.
• Regulatory compliance and fraud prevention: To comply with anti-money laundering (AML) obligations, perform KYC verification, detect suspicious activity, and report to relevant authorities where legally required.
• Responsible gaming: To monitor your betting activity for signs of problem gambling, apply self-exclusion measures when requested, and enforce deposit limits or cooling-off periods as described in our Responsible Gaming policy.
• Customer support: To respond to your enquiries, resolve disputes, process complaints, and communicate account-related updates.
• Platform improvement: To analyse aggregate usage data, identify bugs, improve game performance, and develop new features that enhance the cv9990 player experience.
• Promotional communications: To send you relevant offers, bonus notifications, and event updates where you have given consent to receive marketing communications. You may withdraw consent at any time by contacting our support team.
• Security monitoring: To detect and prevent unauthorised account access, cheating, bot activity, and any other threats to the integrity of the cv9990 platform.

4. Data Sharing & Disclosure

cv9990 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may, however, share your data with carefully selected third-party partners who assist us in delivering the cv9990 service, and with authorities as required by law.

4.1 Payment Processing Partners

To process your deposits and withdrawals, we share necessary transaction data with our payment partners — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Visa, and Mastercard. These partners act as data processors and are contractually bound to process your data only for the purposes of facilitating your transactions.

4.2 Identity Verification Providers

cv9990 uses third-party identity verification services to assist with KYC document checking. These providers may process your identity documents on our behalf. They are subject to strict data processing agreements and are not permitted to use your data for any purpose other than identity verification on behalf of cv9990.

4.3 Game and Technology Providers

Game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive limited technical data (such as player session tokens) that is necessary to deliver their games within the cv9990 platform. These providers do not receive your full personal profile or financial information.

4.4 Legal and Regulatory Disclosure

cv9990 may disclose your personal data to law enforcement agencies, regulatory bodies, or other government authorities in Bangladesh or internationally where we are legally compelled to do so, where we reasonably believe disclosure is necessary to prevent fraud or criminal activity, or where required to protect the rights and safety of cv9990, its staff, or other players.

5. Cookies & Tracking Technologies

cv9990 uses cookies and similar tracking technologies (such as web beacons and local storage objects) to operate the platform, remember your preferences, and gather analytical data about how players use the site. The cookies we use fall into the following categories:

5.1 Strictly Necessary Cookies

These cookies are essential for the cv9990 website to function correctly. They enable core features such as user authentication, session management, and security checks. Without these cookies, services you have requested — such as staying logged in to your account — cannot be provided. These cookies cannot be disabled.

5.2 Analytics and Performance Cookies

cv9990 uses analytics cookies to understand how visitors interact with the platform — for example, which pages are visited most frequently, how long players spend on each section, and which games are most popular. This data is collected in aggregate form and is not linked to your personal identity. It helps us improve the platform experience for all players.

5.3 Functional Cookies

Functional cookies allow cv9990 to remember choices you have made — such as your preferred language setting or game layout preferences — to provide a more personalised experience. Disabling these cookies may affect the functionality of certain platform features.

5.4 Managing Cookies

You can manage or delete cookies at any time through your browser settings. Most browsers allow you to refuse all cookies, accept only certain types of cookies, or delete existing cookies. Please note that disabling strictly necessary cookies will prevent you from using core cv9990 features including account login. For guidance on managing cookies in your specific browser, refer to your browser's official help documentation.

6. Data Retention

cv9990 retains your personal data for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable law. The following general retention guidelines apply:

• Active account data: Retained for the duration of your active relationship with cv9990, plus a period of up to 5 years following account closure, to satisfy AML record-keeping requirements.
• KYC identity documents: Retained for a minimum of 5 years from the date of submission or from the date of account closure, whichever is later, in accordance with anti-money laundering obligations.
• Transaction records: Financial transaction logs are retained for a minimum of 5 years from the date of the transaction to support regulatory compliance and dispute resolution.
• Customer support records: Support correspondence is retained for up to 3 years from the date of the last interaction, after which it is securely deleted or anonymised.
• Technical and usage logs: Server and access logs are typically retained for up to 12 months before automated deletion, unless a specific security or legal reason requires longer retention.
• Marketing consent records: Records of your marketing preferences and consent history are retained for the duration of your account plus 3 years to demonstrate compliance with consent requirements.

When the applicable retention period expires, cv9990 will securely delete or anonymise your personal data so that it can no longer be associated with you as an individual.

7. Your Privacy Rights

As a user of cv9990, you have a number of rights with respect to your personal data. We are committed to honouring these rights in a timely and transparent manner. To exercise any of the rights described below, please contact our support team at [email protected].

• Right of Access: You have the right to request a copy of the personal data that cv9990 holds about you. We will provide this information within a reasonable timeframe following verification of your identity.
• Right to Rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You can update basic account information such as your email address directly from within your cv9990 account settings.
• Right to Erasure: In certain circumstances, you may request that cv9990 delete your personal data. This right is subject to limitations — for example, we are not able to delete data that we are legally required to retain for AML compliance purposes. We will inform you of any applicable limitations when you make such a request.
• Right to Restrict Processing: You may request that cv9990 restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to a particular processing activity.
• Right to Data Portability: Where technically feasible and legally permitted, you may request that we provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
• Right to Withdraw Marketing Consent: Where cv9990 sends you promotional emails or SMS notifications based on your consent, you may withdraw that consent at any time by contacting our support team. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.
• Right to Lodge a Complaint: If you believe that cv9990 has processed your personal data in a manner that is inconsistent with this Policy or applicable law, you have the right to raise a complaint with us directly. We will investigate all complaints in good faith and respond within a reasonable period.

8. Data Security Measures

cv9990 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. While no digital platform can guarantee absolute security, we take our data protection obligations seriously and maintain robust safeguards across the platform.

8.1 Technical Safeguards

All data transmitted between your device and cv9990 is protected using SSL/TLS encryption with strong cipher configurations. Passwords are stored in hashed form using industry-standard cryptographic algorithms — plain-text passwords are never stored. Access to production databases is restricted to authorised personnel only, and all administrative access is logged and monitored.

8.2 Organisational Safeguards

Access to personal data within the cv9990 organisation follows a principle of least privilege — staff members are granted access only to the data they need to perform their specific roles. All personnel with access to personal data are trained in data protection best practices and are bound by confidentiality obligations. Third-party service providers who process data on our behalf are subject to data processing agreements that require them to implement equivalent security standards.

8.3 Incident Response

In the event of a personal data breach that poses a risk to your rights, cv9990 will take immediate steps to contain the breach, assess its scope and impact, and notify affected players as soon as reasonably practicable. We will provide clear information about what data was affected, what steps we are taking to address the breach, and what actions you can take to protect yourself.