cv999a Privacy Policy

cv999a collects personal data from you in several ways: directly when you register an account or interact with the platform, automatically when you browse or use the platform's features, and occasionally from third-party sources such as payment processors and identity verification providers. The categories of data we collect are described in detail below.

1.1 Registration Data

When you create a cv999a account, we collect the following information:

• Full legal name as it appears on your government-issued identity document
• Date of birth (used to verify that you are 18 years of age or older)
• Email address (used for account communications and verification)
• Mobile telephone number registered in Bangladesh
• Username and encrypted password (passwords are hashed and never stored in plain text)
• Preferred payment method (bKash, Nagad, Rocket, Upay, bank transfer, or card)
• Residential address in Bangladesh (required for KYC compliance)

1.2 Identity Verification (KYC) Data

To comply with our Know Your Customer (KYC) obligations and to verify that players are at least 18 years of age, cv999a may request and collect:

• Scanned copy or photograph of a valid National Identity Card (NID), passport, or other government-issued photo ID
• Proof of address (such as a utility bill, bank statement, or official correspondence dated within the last three months)
• Proof of payment method ownership (such as a screenshot of the registered bKash or Nagad account confirming the account holder's name matches the cv999a registration name)
• Selfie photograph for biometric verification purposes, where required by our compliance process

1.3 Transaction and Financial Data

When you make deposits or withdrawals on the cv999a platform, we collect and retain records of:

• Deposit and withdrawal amounts in Bangladeshi Taka (৳)
• Payment method identifiers (e.g., the last four digits of a registered card, or the mobile number associated with a bKash or Nagad account)
• Transaction timestamps, reference numbers, and processing status
• Account balance history for audit and compliance purposes

1.4 Platform Usage Data

When you browse or use the cv999a platform, we automatically collect certain technical and behavioural data, including:

• IP address and approximate geographic location (country and city level)
• Device type, operating system, and browser version
• Session duration, pages visited, and features interacted with
• Game history: titles played, bet amounts, outcomes, and session lengths
• Login timestamps and logout events
• Referral source (how you arrived at cv999a, e.g., via a search engine or a direct URL)

1.5 Communications Data

If you contact the cv999a support team via email at [email protected], we collect and retain the content of those communications, including your name, contact details, and the substance of your query or complaint. This data is retained for quality assurance, dispute resolution, and regulatory compliance purposes.

cv999a does not sell your personal data. We share your information with third parties only where it is strictly necessary for the operation of the platform, to fulfil a legal obligation, or where you have given explicit consent. The categories of third party with whom data may be shared are described below.

3.1 Payment Service Providers

To process deposits and withdrawals, cv999a shares the minimum necessary financial identifiers with the relevant payment service providers, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and card networks such as Visa and Mastercard. These providers are contractually bound to use your data solely for the purpose of processing the transaction and are prohibited from retaining or using it for any other purpose.

3.2 Game Content Providers

The cv999a platform integrates games and live casino content from third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive pseudonymised session identifiers or game-outcome data to facilitate gameplay and record results. Game providers do not receive your full personal profile, payment details, or identity documents.

3.3 Identity Verification Partners

Where cv999a uses a third-party identity verification service to assist with KYC processing, your identity document images and associated personal data may be shared with that provider solely for verification purposes. Such providers are contractually required to maintain appropriate data security standards and to delete submitted documents once verification is complete.

3.4 Legal and Regulatory Authorities

cv999a may disclose player data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction in Bangladesh or other applicable territories where we are legally required to do so. Examples include anti-money laundering investigations, fraud referrals, and responses to valid legal process.

3.5 Business Transfers

In the event that cv999a undergoes a merger, acquisition, restructuring, or sale of assets, player data held at the time of the transaction may be transferred to the acquiring or successor entity as part of that transaction. We will notify affected players via their registered email address prior to any such transfer taking effect and will ensure that the receiving entity is bound by privacy obligations no less protective than those set out in this Policy.

cv999a implements a comprehensive set of technical and organisational measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. While no online platform can guarantee absolute security, we take our obligations in this area seriously and continuously review and update our security practices.

5.1 Technical Safeguards

• SSL/TLS Encryption: All data in transit between your browser or app and the cv999a platform is encrypted using industry-standard TLS 1.2 or higher protocols. You can verify this by checking for the padlock symbol in your browser's address bar.
• Password Hashing: Player passwords are never stored in plain text. They are processed using a strong, salted cryptographic hashing algorithm before storage, meaning that even in the unlikely event of a data breach, your password cannot be recovered from our records.
• Access Controls: Access to the systems that hold player personal data is restricted on a strict need-to-know basis. cv999a staff are granted access only to the data categories required for their specific operational role.
• Firewall and Intrusion Detection: The cv999a platform infrastructure is protected by network-level firewalls and monitored by intrusion detection systems that flag unusual access patterns for immediate review.
• Regular Security Audits: Our platform and data storage systems are subject to periodic security reviews to identify and remediate vulnerabilities before they can be exploited.

5.2 Organisational Safeguards

• All cv999a personnel who handle personal data receive privacy and data security training as part of their onboarding and on a regular refresher basis.
• Data processing activities are documented and reviewed to ensure ongoing compliance with this Privacy Policy and applicable data protection standards.
• Third-party vendors who process personal data on cv999a's behalf are subject to contractual security requirements and periodic due diligence reviews.

5.3 Data Breach Response

In the event that cv999a becomes aware of a security incident that affects the confidentiality, integrity, or availability of your personal data, we will act promptly to contain the incident, assess the risk, and notify affected players via their registered email address within a reasonable timeframe. The notification will include the nature of the breach, the categories and approximate volume of data affected, the steps cv999a has taken in response, and recommended actions you can take to protect yourself.

As a cv999a player, you hold a number of rights in relation to the personal data we hold about you. These rights are described below. To exercise any of these rights, please contact the cv999a support team at [email protected] with the subject line "Privacy Rights Request". We will respond to all valid requests within 30 days of receipt.

7.1 Right of Access

You have the right to request a copy of the personal data that cv999a holds about you. We will provide this in a structured, commonly used, and machine-readable format where technically feasible. We may ask you to verify your identity before fulfilling an access request.

7.2 Right to Rectification

If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it without undue delay. Where data has been shared with third-party processors, we will notify them of the correction where feasible.

7.3 Right to Erasure

You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and there is no other lawful basis for processing), or where you object to processing and there are no overriding legitimate grounds. Please note that this right is not absolute — we may be required to retain certain data categories for legal compliance reasons even following an erasure request, as described in Section 6 above.

7.4 Right to Restrict Processing

You have the right to request that cv999a restricts the processing of your personal data in certain circumstances — for example, while you contest the accuracy of data we hold, or where you have objected to processing and we are assessing whether our legitimate grounds override your interests.

7.5 Right to Data Portability

Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive a copy of your personal data in a portable format and, where technically feasible, to have it transmitted directly to another data controller.

7.6 Right to Object to Marketing

You have the absolute right to object to the use of your personal data for direct marketing purposes at any time. Following receipt of an opt-out request, we will cease sending marketing communications within five business days. Opting out of marketing does not affect your ability to use the cv999a platform.

7.7 Rights Related to Automated Decision-Making

Where cv999a uses automated systems to make decisions about your account — such as flagging unusual betting patterns for compliance review — you have the right to request human review of any automated decision that significantly affects you, to express your point of view, and to contest the decision.