Privacy Policy — cvv999 Casino

Section 1

Information We Collect

When you register for and use a cvv999 account, we collect certain categories of personal information. This section describes each category of data we collect, the source from which it originates, and why it is required. We do not collect any personal data that is not necessary for the purposes described in this Privacy Policy.

1.1 Registration Data

When you create a cvv999 account, you are asked to provide the following information:

• Full legal name as it appears on your government-issued identity document.
• Date of birth (required for mandatory age verification — 18+ only).
• Residential address, including city and district (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh).
• Valid email address (used for account communications and security alerts).
• Mobile phone number (used for account verification and two-factor authentication).
• Preferred currency (Bangladeshi Taka — BDT).

1.2 Identity Verification (KYC) Data

In compliance with our Know Your Customer obligations, we may request the following documentary evidence before processing withdrawals or in response to risk-based triggers:

• Copy of a government-issued National Identity Card (NID), passport, or driving licence.
• Proof of residential address dated within the last three months (utility bill, bank statement, or official correspondence).
• Proof of payment method ownership (screenshot or statement from your bKash, Nagad, Rocket, Upay, or bank account).
• Source of funds documentation for large deposits or withdrawal requests exceeding defined thresholds.

1.3 Financial Transaction Data

Every financial transaction on the cvv999 platform generates a record. We collect and retain the following transaction data:

• Deposit amounts, dates, times, and payment method identifiers (e.g., bKash wallet number, last four digits of a card).
• Withdrawal requests, approval status, amounts, and destination payment method details.
• Bonus credits and wagering activity associated with promotional offers.
• Account balance history and running transaction ledger.

1.4 Gaming and Betting Activity Data

cvv999 maintains detailed logs of all gaming and wagering activity on the platform. This includes:

• Game sessions played, including game title, provider, start/end time, wager amount, and outcome.
• Sports betting market selections, stake amounts, odds accepted, and settlement results.
• Session duration, frequency of play, and betting pattern data used for responsible gaming monitoring.

1.5 Technical and Device Data

When you access cvv999 through a browser or mobile application, we automatically collect certain technical information:

• IP address and approximate geolocation (used for fraud prevention and access control).
• Device type, operating system, and browser version.
• Referring URL and pages visited within the cvv999 platform.
• Session timestamps and click-stream data.

Section 2

How We Use Your Data

cvv999 uses the personal data we collect for the following specific, defined purposes. We do not use your data for any purpose beyond those listed below without first obtaining your explicit consent or as required by applicable law.

Marketing Communications

cvv999 may send you promotional emails about new games, seasonal offers (Eid, Pohela Boishakh, BPL cricket season, ICC T20 tournaments), and platform updates — but only if you have explicitly opted in to receive such communications during registration or through your account settings. You may opt out of marketing communications at any time by updating your notification preferences in your account settings or by contacting [email protected]. Opting out of marketing does not affect transactional communications such as withdrawal confirmations, security alerts, and KYC requests.

Section 3

Data Sharing & Disclosure

cvv999 does not sell, rent, or trade your personal data to any third party for commercial purposes. We share personal data with third parties only in the limited circumstances described below, and only to the minimum extent necessary for each stated purpose.

Service Providers and Technology Partners

We share data with carefully selected third-party service providers who assist us in operating the cvv999 platform. These include:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard receive the minimum financial data required to process your transactions.
• Game software providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other certified studios may receive anonymised session data for game performance and RNG audit purposes.
• Identity verification providers: Third-party KYC partners may receive copies of identity documents for automated and manual verification. These partners operate under strict data processing agreements.
• Fraud prevention and security vendors: We share device and behavioural data with anti-fraud technology providers to protect the platform and its players from fraudulent activity.
• Cloud infrastructure providers: Our hosting and data storage infrastructure partners process data on our behalf under strict contractual data security obligations.

All third-party service providers who process personal data on behalf of cvv999 are bound by written data processing agreements that require them to process personal data only as instructed, to maintain appropriate security standards, and to prohibit sub-processing without cvv999's prior written consent.

Legal and Regulatory Disclosures

cvv999 may disclose personal data to law enforcement authorities, regulatory bodies, or courts when required to do so by applicable law, court order, or where we have a good-faith belief that disclosure is necessary to prevent fraud, money laundering, or other criminal activity. In all such cases, we will disclose only the minimum data required to satisfy the legal obligation.

Section 4

Cookies & Tracking Technologies

cvv999 uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your login session, and analyse platform usage. This section explains the types of cookies we use and how you can manage them.

Types of Cookies Used

Managing Your Cookie Preferences

You can manage or disable non-essential cookies through your browser settings. Most modern browsers (Chrome, Firefox, Edge, Safari) allow you to view, delete, and block cookies on a per-site or global basis. Please note that disabling strictly necessary cookies will prevent you from logging in to your cvv999 account and using core platform features.

Instructions for managing cookies in the most commonly used browsers in Bangladesh are available from the respective browser support documentation. cvv999 does not use any cross-site tracking pixels, social media tracking widgets, or third-party advertising networks on the platform.

Section 5

Data Security Measures

cvv999 implements a layered approach to data security designed to protect your personal information against unauthorised access, disclosure, alteration, and destruction. Our security programme includes the following measures:

• Encryption in transit: All data transmitted between your device and cvv999 servers is encrypted using TLS 1.3 with 256-bit AES encryption. All payment data is additionally protected by PCI-DSS-compliant tokenisation.
• Encryption at rest: Sensitive personal data stored in our databases — including identity documents, payment method details, and KYC records — is encrypted at rest using AES-256 encryption.
• Access control: Access to personal data is restricted to cvv999 employees and contractors who require it to perform their specific job functions. All access is logged and subject to regular audit review.
• Multi-factor authentication: All internal cvv999 systems that hold personal data require multi-factor authentication for access by staff members.
• Penetration testing: cvv999 engages independent cybersecurity professionals to conduct regular penetration tests and vulnerability assessments of our platform infrastructure.
• Incident response: We maintain a documented security incident response plan. In the event of a confirmed data breach affecting player personal data, we will notify affected players promptly via their registered email address.

Section 6

Data Retention Policy

cvv999 retains personal data only for as long as it is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply to the main categories of personal data we hold:

Following the expiry of the applicable retention period, cvv999 will securely delete or anonymise your personal data so that it can no longer be associated with you as an individual. Anonymised, aggregated data (from which all personal identifiers have been removed) may be retained indefinitely for statistical and platform improvement purposes.

If you request deletion of your personal data before the end of the relevant retention period, we will action your request to the maximum extent possible, but we may be required by law to retain certain categories of data (particularly financial transaction records and KYC documents) for the minimum statutory period regardless of your deletion request.

Section 7

Your Privacy Rights

As a player on the cvv999 platform, you have the following rights with respect to your personal data. These rights may be exercised by submitting a written request to [email protected] from your registered email address.

• Right of access: You have the right to request a copy of all personal data we hold about you. We will provide this in a structured, commonly used, machine-readable format within 30 days of receiving your verified request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay. For certain data categories (such as your registered name or date of birth), correction will require documentary evidence.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected and there is no legal obligation requiring us to retain it. See the Data Retention section above for applicable minimum retention periods.
• Right to restrict processing: You may request that we restrict the processing of your personal data in certain circumstances — for example, while a dispute about its accuracy is being resolved.
• Right to data portability: You may request that we provide your personal data in a portable format so that you can transfer it to another service provider.
• Right to withdraw consent: Where we process your personal data on the basis of your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place before withdrawal.
• Right to object: You have the right to object to the processing of your personal data where we rely on legitimate interests as the legal basis, including profiling for responsible gaming purposes. We will review your objection and cease processing unless there are compelling legitimate grounds that override your interests.

cvv999 will respond to all verified privacy rights requests within 30 days of receipt. In complex cases, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it. We do not charge any fee for processing privacy rights requests unless they are manifestly unfounded or excessive.

Section 8

Policy Updates & Contact

cvv999 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When we make material changes to this Policy, we will notify all registered players via email to their registered address and by displaying a prominent notice on the cvv999 platform for a period of at least 14 days before the changes take effect.

We encourage you to review this Privacy Policy periodically. The effective date at the top of this page indicates when the current version was last updated. Your continued use of the cvv999 platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms.

How to Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way cvv999 handles your personal data, please contact our data protection team using the details below. Our support team is available 24 hours a day, 7 days a week, and will respond to all privacy-related enquiries within 48 hours Bangladesh Standard Time (BST, UTC+6).

This Privacy Policy is governed by and construed in accordance with the laws applicable in Bangladesh. In the event of any dispute arising from this Policy or our data processing practices, the parties agree to attempt resolution through good-faith negotiation before pursuing any formal legal remedy. The English-language version of this Privacy Policy is the authoritative version; in the event of any conflict between translations, the English text shall prevail.