Privacy Policy — How cv990 Handles Your Data

cv990 collects personal information through several channels: directly from you during registration and account use, automatically through your interactions with our platform, and in limited circumstances from trusted third-party sources. We collect only the information that is necessary to provide a safe, compliant, and enjoyable gaming experience.

1.1 Information You Provide Directly

When you register an account, make deposits or withdrawals, contact support, or participate in promotions on cv990, you may provide us with the following categories of personal information:

• Identity data: Full legal name, date of birth, gender, and nationality as stated on your government-issued identification document;
• Contact data: Mobile phone number, email address, and residential address including district, division, and postcode within Bangladesh;
• Financial data: bKash account number, Nagad account number, Rocket account number, bank account details (where applicable), and transaction history on the cv990 platform;
• Verification data: Copies of government-issued identification (National ID card, passport, or driving licence), proof of address documents, and source-of-funds documentation submitted during KYC verification;
• Communications data: The content of messages you send to our customer support team via live chat or email.

1.2 Information Collected Automatically

When you access and interact with the cv990 platform, certain technical and behavioural data is collected automatically by our systems:

1.3 Information from Third Parties

In certain circumstances, cv990 may receive personal data about you from third-party sources, including identity verification service providers engaged to assist with KYC compliance, payment processing partners (such as bKash, Nagad, and Rocket) who confirm the ownership and status of a payment method linked to your account, and fraud prevention and anti-money-laundering screening databases. Any information received from third parties is handled in accordance with this Privacy Policy.

cv990 processes your personal data for specific, defined purposes. We do not use your data for any purpose that is incompatible with the reasons for which it was originally collected. The primary purposes for which we process your personal information are as follows:

• Account management: Creating and maintaining your cv990 account, verifying your identity, processing login authentication, and enabling you to access all platform features;
• Service delivery: Processing your deposits and withdrawals via bKash, Nagad, Rocket, and other supported payment methods; settling bets and crediting winnings; applying bonus offers to your account;
• Legal compliance: Fulfilling our KYC and anti-money-laundering obligations, verifying that you meet the minimum age requirement of 18 years, and responding to lawful requests from regulatory authorities or law enforcement agencies;
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, unauthorised account access, collusion, and the abuse of bonus structures;
• Responsible gaming: Monitoring betting patterns to identify potential problem gambling behaviours, enforcing self-exclusion orders, and applying account-level deposit limits or cooling-off periods requested by players;
• Customer support: Responding to your enquiries, resolving disputes, and providing technical assistance;
• Platform improvement: Analysing aggregated and anonymised usage data to improve the performance, stability, and feature set of the cv990 platform;
• Marketing communications: Sending you promotional offers, bonus notifications, and platform updates — but only where you have not opted out of marketing communications. You may opt out at any time by contacting support at [email protected].

cv990 does not sell your personal data. We do, however, share personal information with a limited set of trusted third parties where it is necessary to deliver the Service, meet legal obligations, or protect the security of our platform. All third parties with whom we share data are contractually required to handle it in a manner consistent with this Policy.

3.1 Categories of Third-Party Recipients

• Payment service providers: bKash, Nagad, Rocket, Upay, and banking partners receive transaction-level data (amount, timestamp, account reference) necessary to process your deposits and withdrawals. These providers operate under their own privacy frameworks, which we encourage you to review.
• Identity verification providers: Third-party KYC and document verification services receive copies of the identity and address documents you submit, solely for the purpose of confirming your identity and age.
• Fraud prevention and AML screening services: Your account data may be checked against industry fraud-prevention databases and anti-money-laundering watchlists as part of our compliance obligations.
• Technology infrastructure providers: Hosting, cloud storage, and platform infrastructure providers who process data on our behalf under strict data processing agreements.
• Regulatory and law enforcement authorities: Where required by applicable law, court order, or regulatory instruction, cv990 will disclose relevant personal data to the appropriate authority. We will, where legally permitted, notify you of such disclosure.
• Game content providers: Game studios and software providers (such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, and NetEnt) may receive anonymised session and game-play data to support game performance analytics. These providers do not receive your name, contact details, or financial information.

cv990 uses cookies and similar tracking technologies to operate the platform effectively, remember your preferences, maintain your login session, and gather anonymised analytics data that helps us improve the Service. This section explains what cookies we use and how you can manage them.

4.1 Types of Cookies We Use

4.2 Managing Your Cookie Preferences

Strictly necessary cookies cannot be disabled, as they are essential for the platform to function. Functional and analytics cookies may be disabled through your browser settings. Please note that disabling functional cookies may affect your platform experience — for example, your language preference and game history may not be retained between sessions. For detailed instructions on managing cookies in your specific browser, refer to your browser's help documentation.

cv990 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with applicable legal and regulatory obligations, and to resolve any disputes that may arise in connection with your account.

5.1 Retention Periods

• Active account data: Retained for the duration of your account and for a minimum period of five (5) years following account closure, in accordance with anti-money-laundering record-keeping requirements.
• KYC and identity documents: Retained for a minimum of five (5) years following account closure or the date of the last transaction, whichever is later.
• Transaction records: Full financial transaction logs are retained for a minimum of five (5) years for audit and regulatory compliance purposes.
• Customer support communications: Retained for up to three (3) years following the closure of the relevant support case.
• Analytics data: Anonymised, aggregated analytics data may be retained indefinitely as it cannot be used to identify individuals.

5.2 Data Storage Location

cv990 stores personal data on secure servers. All data storage is subject to technical and organisational security measures described in Section 7. Where data is processed by third-party service providers, those providers are required by contract to maintain equivalent security standards and to process data only as directed by cv990.

5.3 Data Deletion

Upon the expiry of the applicable retention period, personal data is securely deleted or anonymised. If you request deletion of your account data before the retention period has expired, cv990 will delete all data that it is not legally required to retain, and will clearly communicate to you which categories of data must be retained for regulatory compliance and the expected duration of that retention.

As a player on the cv990 platform, you hold a number of rights in relation to your personal data. cv990 is committed to honouring these rights promptly and transparently. To exercise any of the rights described below, please contact our support team at [email protected] with a clear description of your request and sufficient information to verify your identity.

6.1 Right of Access

You have the right to request a copy of the personal data that cv990 holds about you. We will provide this information in a readable format within a reasonable timeframe, subject to identity verification.

6.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For certain data fields (such as name and date of birth), correction may require submission of updated documentation.

6.3 Right to Erasure

You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw your consent (where consent is the legal basis for processing). This right is subject to cv990's overriding legal obligations — data that must be retained for regulatory compliance cannot be deleted ahead of the applicable retention period, but we will clearly explain what is retained and why.

6.4 Right to Restrict Processing

In certain circumstances — for example, while a dispute about the accuracy of your data is being resolved — you may request that we limit the processing of your personal data to storage only.

6.5 Right to Object to Marketing

You have an unconditional right to object to the processing of your personal data for direct marketing purposes. Upon receipt of a valid objection, cv990 will cease all marketing communications to you without delay.

cv990 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. While no digital platform can guarantee absolute security, cv990 maintains the following safeguards as a baseline:

• SSL/TLS encryption: All data transmitted between your device and cv990's servers is encrypted using current industry-standard SSL/TLS protocols;
• Encrypted data storage: Sensitive data — including KYC documents, payment method details, and passwords — is stored in encrypted form at rest;
• Access controls: Access to personal data is restricted on a strict need-to-know basis. Staff members are granted only the level of access required to perform their specific role, and all access is logged and audited;
• Two-factor authentication: Where available, two-factor authentication (via OTP to your registered mobile number) is strongly encouraged for account login and withdrawal authorisation;
• Regular security reviews: cv990 conducts periodic internal reviews of its data processing and security practices to identify and remediate potential vulnerabilities;
• Incident response: In the event of a data breach that is likely to result in a risk to your rights or interests, cv990 will notify affected players without undue delay and will take all reasonable steps to contain and mitigate the breach.

cv990 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The date of the most recent revision is always displayed at the top of this page. Where changes are material — for example, a new category of data being collected, a new third-party recipient being introduced, or a change to retention periods — we will notify registered players via in-platform notification or registered email address at least seven (7) days before the changes take effect.

Continued use of the cv990 platform after a revised Privacy Policy has taken effect constitutes your acceptance of the updated terms. If you do not agree with any material changes, you may close your account by contacting our support team before the effective date of the revision.

8.1 Contact Our Privacy Team

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data cv990 holds about you, please contact us using the details below. All privacy-related enquiries are handled by our dedicated compliance and support team.

• Email: [email protected] (please include "Privacy Request" in the subject line)
• Live Chat: Available 00:00 – 23:59 BST (UTC+6) via the cv990 platform after login
• Response time: Privacy enquiries acknowledged within 5 business days; substantive response within 20 business days

This Privacy Policy was last reviewed and updated on 1 January 2026. It governs all personal data processing carried out by cv990 in connection with the Service as of that date. Previous versions of this Policy are available upon request by contacting [email protected].