cv8999 Privacy Policy
— How We Protect Your Data

1 Information We Collect

cv8999 collects personal information about you in the course of providing its online casino and sports betting services. We collect only what is necessary for the purposes described in this policy. The categories of personal data we collect are set out below.

1.1 Information You Provide Directly

When you register an account, complete KYC verification, contact our support team, or otherwise interact with the platform, you may provide us with the following information:

• Full legal name as it appears on your official identity document;
• Date of birth (used to verify that you are aged 18 or above);
• Residential address in Bangladesh (city, district, and postcode);
• Mobile phone number (used for OTP verification and account communications);
• Email address (used for account notifications, support responses, and promotional communications where you have opted in);
• Copies of identity documents submitted for KYC verification, including Bangladeshi National Identity Card (NID), passport, or driving licence;
• Payment account details for bKash, Nagad, Rocket, Upay, or linked bank accounts (Dutch-Bangla Bank, City Bank, BRAC Bank, etc.) used for deposits and withdrawals;
• Communications you send to our support team via live chat, email, or WhatsApp.

1.2 Information Collected Automatically

When you access cv8999.app, our systems automatically collect certain technical data about your device and browsing behaviour. This includes:

• IP address and approximate geolocation (country and city level);
• Device type, operating system, and browser version;
• Pages viewed, time spent on each page, and navigation path through the platform;
• Game sessions played, bet amounts, win/loss records, and session duration;
• Login timestamps and access frequency;
• Referring URL (the website or search engine that directed you to cv8999.app);
• Cookie identifiers and similar tracking technologies (see Section 5).

1.3 Information From Third Parties

In certain circumstances cv8999 may receive information about you from trusted third parties, including:

• Identity verification service providers who assist with KYC checks;
• Payment processors (bKash, Nagad, Rocket, Upay, and partner banks) who confirm the status of transactions;
• Fraud prevention and anti-money-laundering (AML) screening services;
• Analytics partners who help us understand aggregated platform usage patterns.

2 How We Use Your Data

cv8999 uses your personal data only for specific, legitimate purposes. We do not sell your personal data to third parties. The primary purposes for which we process your data are described below.

• Account creation and management: To register your account, verify your identity, manage your account settings, and communicate with you about your account status;
• Age and identity verification (KYC): To confirm that you are aged 18 or above and that the identity you have provided is genuine, as required for responsible gaming compliance;
• Processing transactions: To process deposits, withdrawals, and refunds via your chosen BDT payment method (bKash, Nagad, Rocket, Upay, or partner banks), and to maintain accurate financial records;
• Providing gaming services: To operate the games, record game outcomes, calculate winnings, apply bonus credits, and manage your account balance;
• Fraud prevention and AML compliance: To monitor account activity for signs of fraud, money laundering, bonus abuse, or multi-accounting, and to take protective action where necessary;
• Responsible gaming: To monitor your gaming patterns against responsible gaming indicators, apply self-imposed limits or exclusions, and contact you if we have concern about your gaming behaviour;
• Customer support: To respond to your enquiries, resolve disputes, and maintain a record of your communications with our team;
• Platform improvement: To analyse aggregated usage data and improve the design, performance, and content of the cv8999 platform;
• Marketing communications: To send you promotional offers, bonus notifications, and seasonal campaign updates where you have consented to receive them. You may withdraw marketing consent at any time by contacting support;
• Legal and regulatory compliance: To fulfil any legal obligation to retain records, respond to lawful requests from authorities, and enforce our Terms & Conditions.

3 Legal Basis for Processing

cv8999 processes your personal data on one or more of the following legal grounds. The applicable basis depends on the specific purpose of each processing activity.

• Contractual necessity: Processing your data is necessary for us to deliver the services you signed up for, including account management, game provision, and payment processing. Without this data, we cannot fulfil our contractual obligations to you;
• Legal obligation: Certain processing activities — including KYC identity verification, AML transaction monitoring, and record retention — are required by applicable law and cannot be waived;
• Legitimate interests: We process certain technical and usage data for the legitimate purpose of operating and improving the platform, preventing fraud, and maintaining platform security. We always balance this against your rights and interests;
• Consent: Where we rely on consent — primarily for marketing communications — we will ask for your explicit agreement before sending promotional content. You retain the right to withdraw consent at any time without penalty.

4 Data Sharing & Third Parties

cv8999 does not sell, rent, or trade your personal data to any third party for commercial purposes. We share your data only with carefully selected partners and service providers who assist us in operating the platform, and only to the extent necessary for those specific purposes.

Categories of third parties with whom we may share your data:

• KYC and identity verification providers: Companies that assist us in verifying your identity and age using your NID, passport, or driving licence details;
• Payment processors: bKash, Nagad, Rocket, Upay, and partner Bangladeshi banks (Dutch-Bangla Bank, City Bank, BRAC Bank) who process your deposits and withdrawals — these parties receive only the payment data necessary to complete the transaction;
• Game providers: Licensed game studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe) receive session tokens and game interaction data necessary to run the games you play. They do not receive your full personal profile or payment details;
• Fraud prevention and AML screening services: Third-party compliance tools that screen transactions and account activity against known fraud and money-laundering patterns;
• Customer support platforms: Live chat and helpdesk software providers who process communications between you and our support team;
• Analytics providers: Aggregated, anonymised platform usage data may be shared with analytics partners for the purpose of improving platform performance. No personally identifiable information is shared in this context;
• Legal and regulatory authorities: In response to a valid court order, regulatory enquiry, or other lawful request, we may be required to disclose your data to relevant authorities in Bangladesh or internationally. We will notify you of any such disclosure where we are legally permitted to do so.

All third-party service providers who process data on behalf of cv8999 are contractually bound to handle that data securely, to use it only for the specified purpose, and to delete it when the purpose has been fulfilled.

5 Cookies & Tracking Technologies

cv8999 uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, and to understand how visitors use the site. A cookie is a small text file placed on your device by a website when you visit it. Cookies do not contain viruses and cannot access other files on your device.

Types of cookies used by cv8999:

You can manage cookie preferences through your browser settings. Most modern browsers allow you to block all cookies, block third-party cookies only, or clear cookies that have already been set. Please note that disabling essential cookies will affect the functionality of the cv8999 platform and may prevent you from logging in or playing games correctly.

6 Data Retention

cv8999 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, or for as long as required by applicable law — whichever is longer. The following general retention guidelines apply:

• Active account data: Retained for the full duration of your account relationship with cv8999, plus a minimum of five (5) years following account closure, in accordance with standard financial record-keeping requirements;
• KYC identity documents: Retained for a minimum of five (5) years from the date of verification, or longer if required by AML regulations applicable to the transaction history associated with your account;
• Transaction and financial records: Retained for a minimum of five (5) years from the date of each transaction;
• Customer support communications: Retained for a minimum of two (2) years from the date of the last communication, or for the duration of any open dispute;
• Marketing consent records: Retained for as long as you are receiving marketing communications from cv8999, plus two (2) years following withdrawal of consent, to demonstrate the history of your preference;
• Session and analytics data: Aggregated, anonymised usage data may be retained indefinitely for platform improvement purposes. Personally identifiable session data is retained for up to 24 months.

When your data reaches the end of its retention period and there is no legal or operational reason to retain it further, cv8999 will securely delete or anonymise it in accordance with our internal data disposal procedures.

7 Your Data Rights

As a data subject, you hold a number of rights over the personal data that cv8999 holds about you. These rights are described below. To exercise any of them, please contact us at [email protected] with the subject line "Data Rights Request". We will respond within a reasonable timeframe and in any event within 30 days of receiving your request.

• Right to access: You have the right to request a copy of the personal data cv8999 holds about you, together with information about how and why it is being processed;
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic account details (such as contact information) directly through your account settings;
• Right to erasure ("right to be forgotten"): In certain circumstances, you have the right to request that we delete your personal data. This right is not absolute — we may be required to retain certain data by law (for example, for AML compliance or financial record-keeping purposes). Where erasure is possible, we will act on your request promptly;
• Right to restriction of processing: You may request that we restrict the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved;
• Right to data portability: Where your data was provided by you and is processed on the basis of consent or contractual necessity, you may request a copy of it in a structured, commonly used, machine-readable format;
• Right to object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling. You also have the right to object to processing for direct marketing purposes at any time, without any need to justify your objection;
• Right to withdraw consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

8 Data Security

cv8999 takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption: All data transmitted between your device and cv8999.app is encrypted using industry-standard SSL/TLS protocols. You can verify this by the padlock icon in your browser's address bar;
• Encrypted data storage: Sensitive personal data — including identity documents, financial records, and authentication credentials — is stored in encrypted form using strong encryption algorithms;
• Access controls: Access to personal data within cv8999's systems is restricted on a strict need-to-know basis. Only authorised staff with a legitimate operational reason may access player data, and all access is logged and audited;
• Two-factor authentication (2FA): cv8999 supports OTP-based 2FA for player accounts. We strongly recommend that all players enable 2FA to add an additional layer of protection against unauthorised login attempts;
• Fraud monitoring: Automated systems continuously monitor account activity for patterns indicative of unauthorised access, credential stuffing, or account takeover attempts;
• Regular security assessments: cv8999's technical infrastructure undergoes periodic security reviews to identify and remediate vulnerabilities before they can be exploited;
• Staff training: All cv8999 staff who handle personal data receive regular training on data protection obligations, phishing awareness, and secure data-handling practices.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights, cv8999 will notify affected players promptly and take all reasonable steps to contain and remediate the breach.

9 Minors & Age Verification

cv8999 takes its obligations regarding underage gambling seriously. As part of our KYC process, all players are required to provide proof of age before withdrawals are enabled. Accepted documents include the Bangladeshi National Identity Card (NID), a valid passport, or a current driving licence. Date of birth is verified against the submitted document and cross-referenced with account registration details.

If you are the parent or guardian of a young person and you believe they may have accessed or registered on the cv8999 platform, please contact our support team immediately at [email protected]. We will investigate promptly and take appropriate action.

We also recommend that adults sharing devices with minors make use of parental control software to restrict access to online gambling sites. A number of free tools are available for this purpose, compatible with popular mobile and desktop operating systems commonly used in Bangladesh.

10 Policy Amendments

cv8999 reserves the right to update or amend this Privacy Policy at any time. Changes may be made to reflect updates in applicable law, new data processing activities, changes to our service providers, or improvements to our data governance practices.

When we make material changes to this policy, we will update the "Last Updated" date at the top of this page and, where appropriate, notify active account holders via on-site notification or email to the address registered on their account. Minor clarifications or administrative updates may be made without specific notification.

We encourage you to review this Privacy Policy periodically to stay informed about how cv8999 handles your personal data. Your continued use of the platform following the publication of any amended Privacy Policy constitutes your acknowledgement of the changes.

11 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how cv8999 has handled your personal data, please contact our Data Protection team using the details below.

• Email: [email protected] (subject line: "Privacy Policy Enquiry" or "Data Rights Request")
• Live Chat: Available 24/7 on the cv8999 platform
• WhatsApp: +880 1700 000000 (WhatsApp only — no voice calls)
• Support Hours: 24/7, Bangladesh Standard Time (BST, UTC+6)

We aim to respond to all privacy-related enquiries within 5 working days and to resolve all formal data rights requests within 30 days. If your request is particularly complex or if you have submitted multiple requests, we may extend this period by a further 30 days, in which case we will notify you and explain the reason for the extension.

If you are not satisfied with our response to your privacy concern, you have the right to escalate your complaint through appropriate formal channels. cv8999 is committed to resolving all data protection disputes fairly and in good faith.