cv991 Privacy Policy

Who We Are

cv991 is an online betting and casino platform operated under the brand name "cv991", accessible at https://cv991.io. The platform provides sports betting (including cricket, featuring Bangladesh Premier League and international T20 fixtures), live casino games, slots, card games including Teen Patti, and related entertainment services primarily for players based in Bangladesh.

For all purposes related to this Privacy Policy, cv991 acts as the data controller — the entity that determines the purposes for which and the manner in which personal data is processed. cv991's designated contact for all privacy and data protection enquiries is reachable via live chat on the platform or by email at [email protected].

Where cv991 engages third-party service providers to process personal data on its behalf (for example, payment processors or KYC verification providers), those providers act as data processors under contractual obligations that require them to handle personal data only in accordance with cv991's documented instructions and to maintain confidentiality.

Data We Collect

cv991 collects personal data in the following categories. The full details — including examples, processing purpose and legal basis — are set out in the Data Categories table above. A summary is provided here for convenience:

• Identity Data: Information that uniquely identifies you as an individual, collected primarily during account registration and KYC verification. This includes your full legal name, date of birth, and government-issued identification document details such as your National ID card or passport number.
• Contact Data: Your email address, Bangladeshi mobile number, and residential address (city references such as Dhaka, Chittagong, Sylhet, Khulna, Rajshahi and others may form part of address data). This data is used to communicate with you about your account, transactions and, where you have consented, promotional offers.
• Financial Data: Payment method references necessary to process your deposits and withdrawals. cv991 does not store full card numbers. Mobile financial service references (bKash, Nagad, Rocket, Upay) are stored only to the extent required to process and reconcile transactions and to fulfil AML compliance obligations.
• Technical Data: Automatically collected data about the device, browser and network connection you use to access the platform. This includes IP address, device identifiers, browser type and version, and session timestamps. Technical data is essential for platform security, fraud prevention and service delivery.
• Usage Data: Records of your interactions with the platform, including games played, bets placed, session durations and feature usage. Usage data informs responsible gaming monitoring, product improvement and personalisation of your experience.
• Communications Data: The content of your communications with the cv991 support team via live chat and email, including support request history and resolution outcomes.
• Marketing Preferences: Your stated preferences regarding receipt of promotional communications from cv991. Marketing messages are only sent to players who have explicitly opted in.

cv991 does not intentionally collect sensitive personal data such as health or medical information, racial or ethnic origin, religious beliefs, or biometric data, except where a player voluntarily discloses health information in the context of a responsible gaming self-exclusion or cooling-off request. Such disclosures are handled with the utmost confidentiality and processed solely for the purpose of delivering the requested responsible gaming protection.

How We Collect Your Data

cv991 collects personal data through the following channels and mechanisms:

• Direct Interactions: Data you provide when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, respond to a survey, or participate in a promotion.
• Automated Technologies: When you access and use the platform, technical and usage data is automatically collected via server logs, session tracking mechanisms, and cookies or similar tracking technologies. Further details are set out in Section 7 (Cookies & Tracking).
• Third-Party Sources: In limited circumstances, cv991 may receive data about you from third parties. This includes identity and address verification data from KYC verification providers, fraud signals from fraud prevention services, and transaction confirmation data from payment processors (bKash, Nagad, Rocket, Upay, Visa and Mastercard networks).
• Publicly Available Sources: cv991 may, in the context of fraud investigation or AML compliance, cross-reference publicly available information such as sanctions lists or public records, where this is required by law or legitimate interest.

How We Use Your Data

cv991 uses the personal data it collects for the following specific purposes. We do not use your data for any purpose that is incompatible with the purposes listed below without first providing you with notice and, where required, obtaining your consent.

• Account Management: To create, maintain and administer your cv991 account, verify your identity, process login requests, and manage account security including two-factor authentication.
• Service Delivery: To enable you to place bets, play casino games, participate in tournaments, claim bonuses and use all platform features that you have requested access to.
• Payment Processing: To process your deposits and withdrawals via your chosen payment method, reconcile transactions, and maintain accurate financial records in accordance with legal retention obligations.
• KYC and AML Compliance: To verify your identity before processing withdrawals, to screen your account against sanctions and PEP (politically exposed person) lists, and to fulfil anti-money laundering obligations as required by applicable law.
• Fraud Prevention and Security: To detect, investigate and prevent fraudulent activity, account takeover attempts, bonus abuse, multi-accounting and other prohibited conduct described in the cv991 Terms & Conditions.
• Responsible Gaming: To monitor betting patterns that may indicate problem gambling behaviour, to apply deposit limits, cooling-off periods and self-exclusion arrangements at your request, and to comply with responsible gaming obligations.
• Customer Support: To respond to your enquiries, resolve complaints, process refund requests, and maintain a record of your support history for quality assurance purposes.
• Marketing and Promotions: Where you have opted in, to send you information about cv991 promotions, seasonal offers (such as BPL season bonuses, Eid promotions, or Pohela Boishakh specials), and product updates. You may withdraw your marketing consent at any time by contacting [email protected].
• Analytics and Product Improvement: To analyse aggregated, anonymised usage patterns in order to improve platform performance, game offerings, user experience and support processes. Individual-level data used for analytics is not shared externally.
• Legal Compliance: To comply with all applicable legal and regulatory obligations, including responding to lawful requests from law enforcement or regulatory authorities.

Legal Bases for Processing

cv991 processes your personal data under one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing that is necessary to perform the contract between you and cv991 — i.e., the Terms & Conditions governing your use of the platform. This covers account management, service delivery, payment processing and KYC verification.
• Legal Obligation: Processing required to comply with applicable legal requirements, including AML obligations, fraud reporting duties, and data retention requirements imposed by law.
• Legitimate Interests: Processing that is necessary for cv991's legitimate business interests, provided those interests are not overridden by your fundamental privacy rights. This covers fraud prevention, platform security, technical data collection, usage analytics and product improvement. When relying on legitimate interests, cv991 conducts a balancing assessment to ensure the processing is proportionate.
• Consent: Processing for which cv991 has obtained your explicit prior consent, specifically the sending of marketing and promotional communications. You have the right to withdraw consent at any time without this affecting the lawfulness of processing carried out before withdrawal.

Data Sharing and Disclosure

cv991 does not sell, rent or trade your personal data. We share your personal data only in the circumstances described below, and only to the minimum extent necessary for each purpose:

• Payment Processors: Personal and financial data necessary to initiate, process and confirm your deposits and withdrawals is shared with the relevant payment service providers, including bKash, Nagad, Rocket, Upay, and the Visa and Mastercard processing networks. These providers process your data under their own privacy policies and under contractual obligations with cv991 that restrict further use of your data.
• KYC and Identity Verification Providers: Identity data (name, date of birth, ID document details) is shared with third-party identity verification services engaged by cv991 to perform KYC checks. These providers are contractually bound to use your data solely for the purpose of completing the verification request made by cv991.
• Fraud Prevention and AML Services: Technical data and certain identity or financial data may be shared with specialist fraud prevention and AML screening services for the purpose of detecting and preventing fraudulent or unlawful activity. Where fraud is confirmed, data may also be shared with law enforcement authorities as required by law.
• Game Software Providers: Aggregate or pseudonymised session data may be shared with game providers (including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming and Spribe) for the purpose of game outcome validation, RTP compliance verification and technical support. Personal identifying information is not shared with game providers beyond what is strictly necessary.
• Legal and Regulatory Authorities: cv991 may disclose personal data to law enforcement agencies, regulatory bodies, tax authorities or courts where required by applicable law, a court order, or a lawful request from a competent authority. cv991 will, where legally permitted, notify you of such a disclosure.
• Business Transfers: In the event that cv991 undergoes a merger, acquisition, asset sale or other business reorganisation, your personal data may be transferred to the successor entity. You will be notified in advance of any such transfer, and the successor entity will be required to honour the commitments made in this Privacy Policy.

cv991 does not transfer your personal data to third parties in countries that do not provide an adequate level of data protection, except under appropriate safeguards such as contractual clauses that require the recipient to maintain equivalent data protection standards.

Cookies & Tracking Technologies

cv991 uses cookies and similar tracking technologies on the platform to deliver core functionality, improve performance, and support security. A cookie is a small text file placed on your device by your browser when you access a website. The following categories of cookies are used on the cv991 platform:

• Strictly Necessary Cookies: Required for the platform to function. These include session cookies that maintain your logged-in state, security tokens that protect against cross-site request forgery, and load-balancing cookies. Strictly necessary cookies cannot be disabled without breaking core platform functionality.
• Performance and Analytics Cookies: Used to collect anonymised information about how players use the platform — for example, which pages are visited most frequently and whether error messages are encountered. This data is used to improve platform reliability and user experience. No personally identifying information is collected via these cookies.
• Functional Cookies: Allow the platform to remember choices you have made (such as your preferred language setting or whether you have acknowledged an on-screen notice) in order to provide a more personalised experience.
• Security Cookies: Used to detect and prevent fraudulent activity, identify unusual login patterns, and support multi-account detection systems.

cv991 does not use third-party advertising cookies or behavioural tracking cookies for the purpose of serving targeted advertisements on external websites. Your browsing activity outside of the cv991 platform is not tracked by cv991.

Most browsers allow you to control cookie settings through the browser's privacy preferences. Disabling strictly necessary cookies will impair your ability to use the platform. To manage your cookie preferences or to request information about specific cookies in use, please contact [email protected].

Data Security

cv991 implements a layered approach to data security, combining technical, organisational and procedural safeguards designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure or destruction. Key security measures include:

• Encryption in Transit: All data exchanged between your device and the cv991 platform is encrypted using 256-bit SSL/TLS protocols. This applies to account login, game sessions, payment transactions, and all support communications.
• Encryption at Rest: Sensitive data stored in cv991's databases, including identity documents and financial records, is encrypted at rest using AES-256 encryption.
• Password Security: Account passwords are never stored in plain text. cv991 uses a strong cryptographic hashing algorithm with per-user salting to store password credentials securely.
• Access Controls: Access to personal data within cv991's systems is restricted on a strict need-to-know basis. Staff with access to personal data are subject to confidentiality obligations and regular data protection training.
• Intrusion Detection: cv991's infrastructure is monitored continuously for signs of unauthorised access, unusual activity patterns and potential security incidents. Security logs are retained and reviewed regularly.
• Incident Response: cv991 maintains a documented data security incident response procedure. In the event of a data breach that is likely to result in significant risk to affected individuals, cv991 will notify the affected players as promptly as practicable and take all reasonable steps to contain and remediate the breach.

While cv991 takes all reasonable steps to secure your personal data, no security system is entirely impenetrable. You are responsible for maintaining the confidentiality of your account credentials and for immediately notifying cv991 if you believe your account has been compromised.

Data Retention

cv991 retains personal data only for as long as is necessary to fulfil the specific purpose for which it was collected, or as required by applicable legal, regulatory, accounting or reporting obligations. The following general retention periods apply:

• Account Data (active accounts): Retained for the duration of the account's active life and for a minimum of five years following account closure, to comply with AML and financial record-keeping obligations.
• KYC and Identity Documents: Retained for a minimum of five years from the date of submission or the date the account is closed (whichever is later), in accordance with anti-money laundering legal requirements.
• Financial Transaction Records: Retained for a minimum of five years from the date of each transaction, as required by applicable financial regulations.
• Customer Support Communications: Retained for up to three years from the date of the last interaction, for quality assurance and complaint management purposes.
• Marketing Preference Records: Retained for as long as your account is active, or for up to two years following opt-out or account closure, to evidence the history of consent and withdrawal of consent.
• Technical and Usage Data: Anonymised or aggregated technical data may be retained indefinitely for analytics purposes. Non-anonymised technical data (such as IP logs used for fraud detection) is retained for up to 12 months.

At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where deletion is not technically possible (for example, data stored in encrypted backup archives), cv991 ensures the data is isolated from further processing until deletion is feasible.

Your Data Rights

As a registered player on cv991, you have the following rights in respect of your personal data. To exercise any of these rights, please contact cv991 via live chat or by email at [email protected]. cv991 will respond to all verified data rights requests within 30 days of receipt. Complex or multiple requests may require up to 60 days, in which case cv991 will notify you of the extension and the reason for it.

• Right of Access: You have the right to request a copy of the personal data cv991 holds about you, together with information about the purposes for which it is processed, the categories of data held, and the recipients with whom it has been shared.
• Right to Rectification: If any personal data cv991 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been unlawfully processed. This right is subject to overriding legal retention obligations — cv991 may be required by law to retain certain data (such as KYC and financial records) even following an erasure request.
• Right to Restriction of Processing: You may request that cv991 restricts the processing of your personal data in certain circumstances — for example, while a rectification request is pending, or where you have objected to processing and cv991 is assessing the grounds for that objection.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, and the processing is carried out by automated means, you have the right to receive the personal data you have provided to cv991 in a structured, commonly used and machine-readable format, and to transmit that data to another service provider.
• Right to Object: You have the right to object to processing of your personal data where cv991 relies on legitimate interests as the legal basis for that processing. cv991 will cease the relevant processing unless it can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or where processing is necessary for the establishment, exercise or defence of legal claims.
• Right to Withdraw Consent: Where cv991 processes your personal data on the basis of your consent (specifically, for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

cv991 will not charge a fee for processing data rights requests unless a request is manifestly unfounded or excessive, in which case a reasonable fee may be charged or the request refused. cv991 may request verification of your identity before processing any data rights request to ensure that personal data is not disclosed to an unauthorised person.

Children and Minors

The cv991 platform is strictly intended for adults aged 21 years or older. cv991 does not knowingly collect or process personal data belonging to individuals under the age of 21. Age verification is conducted as part of the account registration process and as a condition of processing the first withdrawal from any account.

If cv991 discovers or is notified that a registered account belongs to a person under the age of 21, the account will be immediately suspended, all associated bets will be voided, any balance will be returned (net of any winnings generated), and all personal data associated with the underage account will be deleted as promptly as possible, subject to any overriding legal retention obligations.

If you are a parent or guardian and believe that a minor in your care has registered an account on cv991, please contact [email protected] immediately. cv991 takes underage gambling prevention extremely seriously and will act on all such reports promptly and confidentially.

Third-Party Links

The cv991 platform does not contain links to external third-party websites. All navigational links within the platform direct to other pages within the cv991 domain (https://cv991.io). Accordingly, this Privacy Policy applies in its entirety to all pages and features accessible within the cv991 platform.

In the event that cv991 introduces any third-party integrations in the future that involve links to external sites or services, those external sites will have their own privacy policies that are independent of this Policy. cv991 will not be responsible for the privacy practices of any third-party websites. This Policy will be updated to reflect any such changes before they are introduced.

Changes to This Privacy Policy

cv991 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. When material changes are made to this Policy, cv991 will notify registered players by displaying a prominent notice on the platform homepage and, where the change materially affects your rights, by sending a notification to the email address registered to your account.

The effective date at the top of this Policy will be updated to reflect the date on which the revised version takes effect. Your continued use of the cv991 platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of the revised Policy. If you do not agree with any changes, you should cease using the platform and may request account closure by contacting [email protected].

Previous versions of this Privacy Policy are available on request. To request a prior version, please contact our support team via live chat or email.

Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or to cv991's handling of your personal data, please contact us using the details below. Our support team operates 24 hours a day, 7 days a week, and aims to respond to all privacy-related enquiries within 2–5 minutes via live chat, or within 24 hours by email.