Your Privacy Matters to cv996 — Here Is How We Protect It

1. Introduction

This Privacy Policy (hereinafter "the Policy") sets out the basis on which cv996 (hereinafter "the Platform", "we", "us", or "our") collects, processes, stores, and uses personal data provided by or obtained in connection with individuals (hereinafter "the Player", "you", or "your") who access or use the cv996 website at https://cv996.io and all associated pages, features, and services.

cv996 is committed to protecting the privacy and personal data of every player. This Policy is written in plain English and structured to give you a clear understanding of your rights and our obligations. By registering a cv996 account, accessing the cv996 Login area, depositing funds, placing a bet, or otherwise using any part of the cv996 platform, you acknowledge that you have read and understood this Policy.

This Policy should be read alongside the cv996 Terms & Conditions, which are available at cv996.io/terms-conditions, and the cv996 Responsible Gaming policy, available at cv996.io/responsible-gaming. In the event of any conflict between this Policy and the Terms & Conditions with respect to data privacy, this Policy shall prevail.

2. Data Controller

For the purposes of this Privacy Policy, cv996 acts as the data controller in respect of personal data collected from players using the cv996 platform. As data controller, cv996 determines the purposes for which and the means by which personal data is processed.

All data-related enquiries, rights requests, and complaints should be directed to the cv996 Data Queries team. Contact details are provided in Section 16 of this Policy. cv996 will acknowledge all data-related correspondence within five (5) Bangladesh business days and will provide a substantive response within thirty (30) calendar days.

3. Data We Collect

cv996 collects the following categories of personal data from players:

3.1 Registration and Identity Data

When you create a cv996 account, we collect: your full legal name; date of birth; gender (optional); residential address (including city — which may include Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar); email address; and mobile phone number. This data is collected directly from you during the registration process.

3.2 Identity Verification (KYC) Data

To comply with Know Your Customer (KYC) obligations and responsible gaming best practices, cv996 may collect copies of identity documents including: National Identity Card (NID); passport; driving licence; utility bill or bank statement as proof of address; and selfie photographs where required for liveness verification. KYC documents are processed and stored securely and are not shared beyond the scope described in Section 6 of this Policy.

3.3 Financial and Payment Data

cv996 collects data related to deposits and withdrawals, including: the payment method used (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank); transaction amounts in BDT; transaction reference numbers; and partial account identifiers where provided by the payment provider. cv996 does not store full card numbers or mobile banking PINs.

3.4 Gaming and Betting Activity Data

cv996 records all gaming and betting activity associated with your account, including: game sessions and bet histories; stake amounts and returns; bonus activations and wagering progress; responsible gaming tool activations (deposit limits, session limits, self-exclusion events); and game provider interactions.

3.5 Technical and Device Data

When you access the cv996 platform, we automatically collect certain technical data, including: IP address; device type, operating system, and browser version; screen resolution; session start and end times; page navigation patterns; and referring URL. This data is used primarily for security, fraud prevention, and platform optimisation purposes.

3.6 Communications Data

If you contact cv996 via live chat or email, we retain records of those communications including: the content of your messages; timestamps; the support agent who handled your query; and any files or screenshots you submit. Communications records may be used to resolve disputes, improve support quality, and comply with responsible gaming obligations.

3.7 Marketing Preferences

Where you have given consent to receive marketing communications, cv996 records your marketing preferences, including the types of offers you have opted into and any opt-out requests you have submitted. You may update your marketing preferences at any time via the account settings area after cv996 Login or by contacting support.

4. How We Collect Data

cv996 collects personal data through the following means:

• Directly from you — when you register, complete KYC, make a deposit or withdrawal, place a bet, contact support, or update your account settings;
• Automatically — through cookies, log files, and similar tracking technologies when you access or browse the cv996 platform (see Section 10 for full details);
• From payment providers — transaction confirmation data received from bKash, Nagad, Rocket, Upay, and banking partners when you initiate a deposit or withdrawal;
• From game providers — session and outcome data from third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, which is relayed to cv996 for account crediting and dispute resolution purposes;
• From identity verification partners — where cv996 uses a third-party KYC verification service, data may be cross-referenced against identity databases to confirm the accuracy of the information you have provided.

5. Purposes & Legal Bases for Processing

The table below summarises the key purposes for which cv996 processes personal data and the corresponding lawful basis for each processing activity:

Purpose of Processing	Data Categories Involved	Lawful Basis
Account registration and management	Registration data, identity data	Contractual necessity
Identity verification (KYC)	KYC documents, identity data	Legal obligation; contractual necessity
Processing deposits and withdrawals	Financial data, identity data	Contractual necessity
Providing gaming and betting services	Gaming activity data, financial data	Contractual necessity
Fraud prevention and security monitoring	Technical data, financial data, gaming data	Legitimate interest
Responsible gaming compliance	Gaming data, registration data, communications data	Legal obligation; legitimate interest
Customer support and dispute resolution	Communications data, gaming data	Contractual necessity; legitimate interest
Direct marketing communications	Registration data, marketing preferences	Consent
Platform analytics and improvement	Technical data, gaming activity data	Legitimate interest
Legal and regulatory compliance	All categories as required	Legal obligation

6. Data Sharing

6.1 Service Providers. cv996 shares personal data with carefully selected third-party service providers who assist in the operation of the platform. These include: payment processing partners (bKash, Nagad, Rocket, Upay, and banking partners); KYC and identity verification providers; game content providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi); customer support platform providers; fraud detection and security monitoring services; and cloud infrastructure and data hosting providers. All third-party service providers are contractually bound to process personal data only on cv996's instructions and to maintain appropriate security standards.

6.2 Legal and Regulatory Disclosures. cv996 may disclose personal data to law enforcement authorities, regulatory bodies, or other public agencies where required to do so by applicable law, court order, or other legal process. Such disclosures will be limited to the minimum data necessary to satisfy the legal requirement.

6.3 Business Transfers. In the event that cv996 undergoes a corporate restructuring, merger, acquisition, or sale of all or a substantial part of its assets, personal data held by cv996 may be transferred to the relevant successor entity as part of that transaction. Players will be notified of any such transfer and any material change to the terms under which their data is held.

6.4 No Sale of Data. cv996 does not sell, rent, lease, or otherwise trade personal data belonging to players to any third party for commercial gain. This restriction applies absolutely and without exception.

7. International Data Transfers

The cv996 platform is designed to serve players in Bangladesh, and the majority of data processing takes place within data centres that support the platform's operational requirements. Where personal data is transferred to or processed by service providers located outside Bangladesh, cv996 takes steps to ensure that appropriate safeguards are in place to protect the data in transit and at the destination.

Such safeguards may include: standard contractual clauses requiring the recipient to maintain data protection standards equivalent to those observed by cv996; data processing agreements with all third-party recipients; and encryption of data in transit and at rest. Players may request further information about international transfer safeguards by contacting the cv996 Data Queries team.

8. Data Retention

8.1 Active Accounts. cv996 retains personal data for as long as a player's account remains active. Data held in connection with an active account is retained to enable continued provision of gaming and betting services, account management, and customer support.

8.2 Closed Accounts. Following closure of a player account — whether at the player's request or as a result of action by cv996 — personal data is retained for a minimum period of five (5) years from the date of closure. This retention period reflects responsible gaming obligations, fraud prevention requirements, and the need to maintain records sufficient to resolve any post-closure disputes.

8.3 KYC Documents. Identity verification documents submitted as part of the cv996 KYC process are retained for a minimum of five (5) years from the date of verification, in accordance with applicable anti-money laundering best practices.

8.4 Marketing Data. Where a player has consented to receive marketing communications and subsequently withdraws that consent, cv996 will cease sending marketing communications within five (5) Bangladesh business days of receiving the opt-out instruction. A record of the opt-out will be retained to ensure the instruction is honoured.

8.5 Secure Deletion. Upon expiry of any applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised data (from which no individual can be identified) may be retained indefinitely for statistical and analytical purposes.

9. Security Measures

cv996 implements a range of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between the player's device and the cv996 platform;
• Encryption of sensitive data (including identity documents and payment information) at rest on cv996 servers;
• Access controls ensuring that personal data is accessible only to cv996 staff and authorised service providers who have a legitimate need to access it;
• Multi-factor authentication requirements for internal systems that handle player data;
• Regular security assessments, vulnerability scans, and penetration testing of platform infrastructure;
• Incident response procedures that ensure rapid identification, containment, and notification in the event of a data breach;
• Staff training on data protection obligations and secure data handling practices.

10. Cookies & Tracking Technologies

10.1 What Are Cookies. Cookies are small text files placed on your device by the cv996 platform when you visit. They allow the platform to recognise your device on subsequent visits and to store certain preferences or session information. cv996 also uses similar tracking technologies including web beacons, pixel tags, and local storage objects.

10.2 Types of Cookies Used. cv996 uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for the platform to function. These include session cookies that maintain your Login state, security tokens that protect against cross-site request forgery, and load-balancing cookies. These cannot be disabled without rendering the platform inoperable.
• Functional Cookies: These remember your preferences such as language, display settings, and previously entered (but not submitted) form data, allowing the platform to provide a more personalised experience.
• Analytical Cookies: These collect anonymised data about how players use the cv996 platform — which pages are visited most frequently, how long sessions last, and where players navigate from. This information is used exclusively to improve the platform.
• Marketing Cookies: Where you have consented to marketing, these cookies may track your activity across cv996 pages to help deliver promotional content relevant to your interests. These are only placed with your explicit consent.

10.3 Managing Cookies. You can control and manage cookies through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, and receive alerts when new cookies are set. Please note that disabling strictly necessary cookies will prevent you from using the cv996 platform. Instructions for managing cookies vary by browser — consult your browser's help documentation for guidance specific to your setup.

11. Minors

The cv996 platform is strictly intended for adults aged 21 years and above. cv996 does not knowingly collect, process, or retain personal data belonging to individuals under the age of 21. If cv996 discovers or has reason to believe that personal data has been submitted by a person under the age of 21, the relevant account will be closed immediately and all associated data will be securely deleted, with any funds held in the account forfeited in accordance with the cv996 Terms & Conditions.

Parents and guardians who believe that a minor may have created a cv996 account are encouraged to contact the support team immediately at [email protected] so that the matter can be addressed without delay.

12. Direct Marketing

12.1 Consent-Based Marketing. cv996 will only send direct marketing communications — including emails, in-platform notifications, and SMS messages relating to promotions, bonuses, and new features — to players who have given explicit consent to receive such communications. Consent is collected during the registration process and can be updated at any time.

12.2 Opting Out. You may withdraw consent to receive marketing communications at any time by: updating your preferences in the account settings area after cv996 Login; clicking the unsubscribe link included in any marketing email; or contacting the cv996 support team directly. Opt-out requests will be processed within five (5) Bangladesh business days.

12.3 Service Communications. Withdrawal of marketing consent does not affect cv996's ability to send service-related communications — such as account verification messages, transaction confirmations, responsible gaming alerts, KYC requests, or security notifications — as these are sent on the basis of contractual necessity rather than consent.

13. Exercising Your Rights

To exercise any of the data rights described in this Policy — including access, rectification, erasure, portability, restriction, or objection — please contact the cv996 Data Queries team using the contact details in Section 16. Please include:

• Your full registered name and the email address associated with your cv996 account;
• A clear description of the right you wish to exercise and the specific data it relates to;
• Where we are required to verify your identity before processing a rights request, we will ask you to provide a copy of a valid identity document.

cv996 will acknowledge all rights requests within five (5) Bangladesh business days and will provide a substantive response — or, where more time is needed, a progress update — within thirty (30) calendar days of receipt. In complex or high-volume cases, this period may be extended by a further thirty (30) days, in which case you will be notified of the extension and the reason for it.

All rights requests are handled free of charge. If a request is manifestly unfounded or excessive — in particular because of its repetitive character — cv996 reserves the right to charge a reasonable administrative fee or to decline to act on the request, in either case providing written reasons for the decision.

14. Third-Party Links

The cv996 platform may contain links to third-party websites or resources — for example, links to game provider information pages or payment partner support pages. cv996 has no control over the content, privacy practices, or data handling of third-party websites and is not responsible for their compliance with any privacy standard. This Privacy Policy applies only to data processed by cv996 in connection with the cv996 platform. Players who follow links to third-party sites should review the privacy policy applicable to that site before providing any personal data.

15. Changes to This Privacy Policy

cv996 reserves the right to update or amend this Privacy Policy at any time to reflect changes in data processing practices, legal requirements, or platform features. Where a material change is made to this Policy, cv996 will notify registered players via the contact details held on their account prior to the change taking effect. The effective date at the top of this Policy will be updated to reflect the date of the most recent revision.

The most current version of this Privacy Policy is always available on this page at cv996.io/privacy-policy. Continued use of the cv996 platform following the effective date of any revised Policy constitutes acknowledgement of the changes. If you do not accept the revised Policy, you must cease using the platform and may request account closure in accordance with the cv996 Terms & Conditions.

16. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way cv996 handles your personal data, please contact the cv996 Data Queries team using the details below. All correspondence must be in English to ensure accurate and timely handling.

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 in English via the cv996 platform
• Support Hours: All day, Bangladesh Standard Time (BST, UTC+6)
• Response Time: Acknowledgement within 5 Bangladesh business days; full response within 30 calendar days

When contacting cv996 regarding a data privacy matter, please use the subject line "Data Privacy Request" to ensure your message is routed directly to the Data Queries team and handled with appropriate priority.