cv991 Privacy Policy —
How We Protect Your Personal Data

This Privacy Policy ("Policy") applies to all users of the cv991 website located at https://cv991.vip ("the Platform"), including visitors who have not yet registered and registered players who hold an active account. By accessing or using any part of the Platform, you acknowledge that you have read, understood, and agreed to the data practices described in this Policy.

cv991 is committed to handling personal information responsibly and in a manner consistent with widely recognised data protection principles, including purpose limitation, data minimisation, storage limitation, integrity, and confidentiality. We collect only what is genuinely necessary to provide you with a safe, reliable, and enjoyable online gaming experience.

This Policy applies specifically to personal data collected through the cv991 web platform, our customer support channels (live chat, email, and WhatsApp), and any promotional communications you opt into. It does not apply to third-party websites that may be referenced on the Platform — those sites operate under their own privacy policies and cv991 has no responsibility for their data practices.

If you have questions about this Policy or wish to exercise any of your data rights, contact us at [email protected] or through the 24/7 live chat accessible from your account dashboard.

cv991 collects personal data through several distinct channels. The categories below describe what information is collected, at what stage it is gathered, and the legal basis on which we rely to process it.

2.1 Registration Data

When you create a cv991 account, we collect the information you provide in the registration form. This typically includes:

• Full legal name
• Date of birth (used to verify you are 18 years or older)
• Email address
• Mobile phone number (used for account verification and security alerts)
• Preferred currency (Bangladeshi Taka, BDT)
• Username and password (password stored in hashed, non-reversible form)

2.2 Identity Verification (KYC) Data

Before processing a withdrawal, cv991 requires identity verification in accordance with our Know Your Customer (KYC) obligations. This stage involves collection of:

• Bangladesh National Identity Card (NID) number and a copy of the NID document
• A selfie or photograph confirming the document belongs to you
• Proof of payment method ownership (e.g., a screenshot of your bKash or Nagad account showing your registered mobile number)

KYC documents are stored in an encrypted format, accessible only to authorised personnel in our compliance team, and are used solely for age and identity verification and anti-money laundering checks.

2.3 Financial Transaction Data

Every deposit and withdrawal you make through bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, or any other supported payment channel generates a transaction record that we retain. This record includes:

• Transaction reference number
• Amount in BDT (৳)
• Date and time (Bangladesh Standard Time, UTC+6)
• Payment method used
• Transaction status (pending, completed, failed, reversed)

2.4 Gameplay and Activity Data

We record your gameplay activity on the Platform for the purposes of game integrity, responsible gaming monitoring, and fraud detection. This includes game titles played, bet amounts, game outcomes, session start and end times, and any bonuses applied or wagering progress.

2.5 Technical and Device Data

Our servers automatically collect technical data when you access the Platform, including your IP address, browser type and version, operating system, device type (mobile or desktop), screen resolution, referring URL, and pages visited within cv991.

2.6 Communications Data

If you contact our support team via live chat, email, or WhatsApp, the content of those communications — including any attachments you submit — is stored and may be reviewed by our support and compliance teams.

cv991 processes personal data only for purposes that are compatible with the legal bases described in the table above. The primary purposes for which your data is used are as follows:

3.1 Account Management and Service Delivery

We use your registration and KYC data to create and maintain your account, verify your identity, process deposits and withdrawals through your chosen payment method (bKash, Nagad, Rocket, Upay, or bank transfer), apply bonuses and promotions, and provide access to the full cv991 game library including slots, live casino tables, cricket betting markets, and fish shooting games.

3.2 Age and Identity Verification

cv991 enforces a strict 18+ age policy. We use date-of-birth information collected at registration, supported by NID documentation at the withdrawal stage, to confirm that all players are adults. No player under the age of 18 is permitted to hold an active account or participate in real-money gaming on the Platform.

3.3 Fraud Prevention and Security

Technical and device data, transaction records, and login activity are analysed continuously to detect patterns consistent with fraud, money laundering, multi-accounting, bonus abuse, or other prohibited activities. Where a risk pattern is identified, our compliance team may place a temporary restriction on the relevant account pending investigation.

3.4 Responsible Gaming Monitoring

Gameplay data is used to monitor player behaviour for indicators of problem gambling — including unusual increases in bet size, rapid session escalation, or deposit patterns inconsistent with a player's historical behaviour. Where such patterns are detected, our responsible gaming team may reach out proactively to offer support, deposit limit guidance, or self-exclusion options.

3.5 Customer Support

Communications data is used to resolve support queries, process complaints, and maintain a quality-assurance record of our support interactions. Support staff access account and transaction data only where it is directly relevant to resolving your query.

3.6 Marketing Communications (Opt-In Only)

If you have opted in to receive promotional communications, we may use your email address or mobile number to send information about cv991 bonuses, seasonal promotions (including Eid, Pohela Boishakh, and BPL season campaigns), and new game releases. You may withdraw this consent at any time by contacting support or using the unsubscribe link in any marketing email.

cv991 does not sell, rent, or trade your personal data to third-party advertisers, data brokers, or marketing agencies. We share personal information only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.

4.1 Game Technology Providers

To deliver games to your account, cv991 passes necessary session tokens and player identifiers to game technology providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe. These providers receive only the technical information required to authenticate your game session and record the outcome. They do not receive your full registration profile, KYC documents, or financial account details.

4.2 Payment Processing Partners

Deposit and withdrawal requests require us to share relevant transaction data with the payment gateway or mobile financial service you select — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, and City Bank. The data shared is limited to what is necessary to execute the specific transaction and is governed by the privacy policies of those payment service providers.

4.3 Fraud Prevention and Security Services

We may share IP address data, device fingerprint data, and transaction pattern information with specialist fraud detection and cybersecurity service providers. These providers act as data processors under our instruction and are prohibited from using the data for any purpose other than providing fraud detection services to cv991.

4.4 Legal and Regulatory Disclosure

cv991 may disclose personal data where required to do so by applicable law, court order, or lawful request from a competent authority. In such cases, we will disclose only the minimum amount of information necessary to satisfy the legal requirement and will, where legally permitted, notify the affected account holder in advance.

cv991 uses cookies and similar tracking technologies (local storage, session tokens) to operate the Platform efficiently and securely. The following table describes each category of cookie deployed on the cv991 website.

5.1 Managing Cookies

Most modern browsers allow you to control cookie settings through the browser's privacy or settings menu. You can typically choose to block third-party cookies, clear all cookies on browser close, or review and delete individual cookies by domain. Please note that disabling strictly necessary or fraud prevention cookies may result in an inability to log in or use certain features of the cv991 Platform.

5.2 No Third-Party Advertising Cookies

cv991 does not deploy third-party advertising cookies, tracking pixels from social media platforms, or remarketing tags from ad networks on any page of the Platform. The cookies we use are limited to the operational, functional, and security categories described above.

Protecting your personal and financial data is a core operational priority at cv991. We implement multiple layers of security controls to guard against unauthorised access, disclosure, alteration, or destruction of personal information.

6.1 Encryption in Transit and at Rest

All data transmitted between your device and our servers is encrypted using TLS 1.2 or higher (SSL). Sensitive data stored in our databases — including passwords, KYC document files, and payment credentials — is encrypted at rest using AES-256 encryption. Passwords are stored exclusively as salted cryptographic hashes; cv991 staff cannot view your password in plain text under any circumstances.

6.2 Access Controls

Access to personal data is restricted on a strict need-to-know basis. Staff members are granted access only to the data categories required to perform their specific role. All internal access to personal data is logged and subject to periodic audit. Customer support agents, for example, can see account status and recent transaction summaries but do not have access to raw KYC document files.

6.3 Infrastructure Security

The cv991 platform is hosted on hardened server infrastructure protected by DDoS mitigation, intrusion detection systems, and regular penetration testing. Critical security patches are applied within 24 hours of release. Our infrastructure team maintains 24/7 monitoring of all production systems.

6.4 Incident Response

In the event of a data security incident that poses a risk to your personal data, cv991 will notify affected players promptly via the email address registered on their account. Notification will include a plain-language description of what data was involved, the likely impact, and the steps cv991 has taken in response.

As a cv991 player, you have the following rights regarding your personal data. To exercise any of these rights, contact our support team at [email protected] or via live chat. We will acknowledge your request within 5 business days and provide a full response within 30 calendar days.

7.1 Right of Access

You have the right to request a copy of all personal data cv991 holds about you. This includes your registration information, transaction history, gameplay records, KYC verification status, and support communication logs. We will provide this information in a structured, commonly used format.

7.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For changes to your name or date of birth, we may request supporting documentation to verify the correction before updating our records.

7.3 Right to Erasure

You may request that cv991 delete your personal data. We will action erasure requests where the data is no longer necessary for the purpose it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been processed unlawfully. Please note that we are legally required to retain certain data categories (particularly financial transaction records and KYC documents) for defined periods regardless of erasure requests — we will inform you clearly if this applies to your request.

7.4 Right to Restrict Processing

You may ask cv991 to pause processing of your personal data in certain circumstances — for example, while a rectification request is being assessed, or where you contest whether our legitimate interest grounds are valid. During a restriction period, we will store your data but not actively process it.

7.5 Right to Data Portability

For data you have provided to cv991 directly (registration data, account preferences), and where processing is based on your consent or contractual necessity, you may request a machine-readable export of that data for the purpose of transferring it to another service.

7.6 Right to Withdraw Marketing Consent

Where you have opted in to receive promotional communications from cv991, you may withdraw that consent at any time. Withdrawal of marketing consent takes effect within 48 hours. It does not affect the lawfulness of processing that took place before withdrawal.

7.7 Right to Account Closure

You may close your cv991 account at any time by contacting support. Following closure, your personal data will be retained for the periods specified in the data retention table in Section 2, after which it will be securely deleted or fully anonymised. Outstanding balances must be withdrawn before account closure can be completed.

cv991 reserves the right to update or amend this Privacy Policy at any time in response to changes in applicable law, evolving data protection standards, new platform features, or changes to our data processing activities. When we make material changes to this Policy, we will take the following steps to ensure you are informed:

• The "Last Updated" date at the top of this page will be revised to reflect the date of the most recent change.
• A notice will be displayed on the cv991 homepage and player dashboard for a minimum of 14 days following any material update.
• For changes that significantly affect how we process your personal data, we will send a direct notification to the email address registered on your account at least 14 days before the changes take effect.

Your continued use of the cv991 Platform after the effective date of any update constitutes your acceptance of the revised Policy. If you do not agree with any changes, you should stop using the Platform and may request account closure and data deletion in accordance with Section 7 of this Policy.

We recommend reviewing this Policy periodically — particularly before each BPL season, Eid promotional period, or any time you make significant changes to your account settings or payment methods — to stay informed about how your data is being handled.

For any questions about this Policy, changes to it, or your data rights, please contact cv991 support at [email protected]. Our support team operates 24 hours a day, 7 days a week, including Bangladeshi public holidays, and is available via live chat, email, and WhatsApp.