cv990 Privacy Policy

This Privacy Policy ("Policy") describes how cv990 ("Platform", "we", "us", "our") collects, uses, stores, and protects personal data relating to users ("you", "Player") who access or register on the cv990 betting and gaming platform at cv990.app. This Policy forms part of your agreement with cv990 and should be read alongside our Terms and Conditions. By using cv990 you confirm that you have read and understood this Policy.

cv990 is committed to handling personal data responsibly and transparently. We collect only the data that is necessary to deliver our services, comply with applicable legal obligations, and protect the integrity of our platform. We do not sell personal data to third parties, and we do not share it beyond the circumstances described in this Policy.

cv990 collects personal data in the following categories. The table below summarises what is collected, how it is obtained, and why it is needed.

cv990 uses the personal data it collects only for the purposes described below. We do not use your data for purposes incompatible with those stated here without your prior consent.

• Service Delivery: To create and manage your account, process deposits and withdrawals via bKash, Nagad, Rocket, and Upay, settle bets, award bonuses, and provide access to cricket betting, slots, and live casino games.
• Identity and Age Verification: To verify that you are at least 21 years of age, to confirm the authenticity of the identity documents you submit during KYC, and to ensure compliance with applicable regulations.
• Security and Fraud Prevention: To detect and prevent fraudulent activity, money laundering, unauthorised account access, and abuse of bonus promotions. Technical data such as IP addresses and device identifiers are used to flag suspicious patterns.
• Responsible Gaming: To monitor player activity for signs of problem gambling, to administer deposit limits, session limits, loss limits, and self-exclusion requests, and to provide appropriate support and interventions where necessary.
• Legal Compliance: To fulfil our legal and regulatory obligations, including responding to lawful requests from competent authorities, maintaining required records of financial transactions, and performing anti-money laundering screening as required.

cv990 processes your personal data under one or more of the following legal bases depending on the specific processing activity.

• Contractual Necessity: Processing your identity, contact, and financial data is necessary to perform the contract between you and cv990 — that is, to operate your account, process transactions, and deliver gaming services.
• Legal Obligation: Processing for KYC, age verification, and anti-money laundering compliance is required by applicable legal and regulatory obligations that cv990 must fulfil as an online platform operating in this market.
• Legitimate Interests: Processing technical and usage data to secure the platform, detect fraud, improve service quality, and administer responsible gaming tools is based on cv990's legitimate interests as a platform operator, provided those interests are not overridden by your data protection rights.
• Consent: Where cv990 seeks to use your data for optional communications such as promotional emails or personalised offers, we will request your explicit consent before doing so. You may withdraw consent at any time by contacting cv990 support.

cv990 does not sell, rent, or trade personal data. We share data with third parties only in the limited circumstances set out below, and only to the extent necessary for the stated purpose.

• Payment Processors: Financial data (wallet numbers and transaction amounts) is shared with bKash, Nagad, Rocket, and Upay solely for the purpose of processing the deposit or withdrawal transaction you have initiated. These providers operate under their own privacy policies and are bound by their service agreements with cv990.
• Game Providers: When you play a third-party game (such as titles from Pragmatic Play, Evolution Gaming, or Spribe), your Player ID and session token are passed to the relevant provider to load and operate the game. No additional personal data beyond what is technically required for session management is shared.
• Legal and Regulatory Authorities: Where cv990 is required by law, regulation, or court order to disclose personal data to a competent authority, we will comply with that requirement. We will notify you of any such disclosure where legally permitted to do so.
• Service Providers: cv990 uses a limited number of trusted technical service providers (such as hosting infrastructure, email delivery, and security monitoring) who may process data on our behalf under strict data processing agreements. These processors are not permitted to use your data for their own purposes.

cv990 uses cookies and similar tracking technologies on the platform. Cookies are small data files stored on your device that help the platform function correctly and remember your preferences. The following categories of cookies are used.

• Essential Cookies: Required for the platform to function. These include session authentication cookies and security tokens. Essential cookies cannot be disabled without breaking the platform's core functionality.
• Functional Cookies: Remember your language preference, display settings, and last-visited game categories. Functional cookies improve your experience but are not strictly required for account operation.
• Analytics Cookies: Help cv990 understand how players use the platform — which pages are visited most, where users encounter difficulty, and how gameplay sessions progress. This data is used in aggregate to improve platform design and performance.

You may manage cookie preferences through your device or browser settings. Please note that disabling essential cookies will impair your ability to log in and use the platform. cv990 does not use third-party advertising cookies.

cv990 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory retention obligations, and to resolve any disputes that may arise. As a general guide: active account data is held for the lifetime of the account plus a post-closure period of five years; financial transaction records are retained for a minimum of five years following the transaction date to meet anti-money laundering record-keeping requirements; KYC documentation is retained for five years from the date of account closure; technical and usage data is retained for up to two years.

When data is no longer required for any lawful retention purpose, cv990 will securely delete or anonymise it so that it can no longer be attributed to you as an individual. If you request deletion of your account and data, cv990 will action that request subject to any overriding legal retention obligations. Please allow up to 30 days for full deletion to be completed.

cv990 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Security measures in place include: SSL (Secure Socket Layer) encryption for all data transmitted between your device and the cv990 platform; encrypted storage of sensitive account and financial data at rest; access controls that limit which cv990 personnel can view personal data, based on role and operational necessity; regular security reviews and vulnerability assessments of the platform infrastructure.

While cv990 takes security seriously and applies industry-standard protections, no online platform can guarantee absolute security against all possible threats. If you become aware of any suspected security incident affecting your cv990 account, please contact our support team immediately at [email protected]. In the event of a significant data breach that is likely to affect your rights, cv990 will notify you as promptly as practicable.

As a user of cv990 you have the following rights in relation to your personal data. To exercise any of these rights, contact cv990 support at [email protected] with your registered account details. We will respond within a reasonable timeframe and in any event within 30 days of receiving your request.

• Right of Access: You may request a copy of the personal data cv990 holds about you, including the categories of data, the purposes for which it is processed, and any third parties with whom it has been shared.
• Right to Rectification: If any personal data cv990 holds about you is inaccurate or incomplete, you may request that it be corrected. For standard account details this can often be done directly through your account settings.
• Right to Erasure: You may request deletion of your personal data and account. cv990 will act on such requests subject to any overriding legal obligation to retain data (for example, transaction records required under anti-money laundering rules). Where full deletion is not immediately possible due to a legal hold, cv990 will delete the data as soon as the retention period expires.
• Right to Restriction: You may request that cv990 restrict the processing of your data in certain circumstances — for example, while a dispute about the accuracy of that data is being resolved, or where you have objected to processing based on legitimate interests.
• Right to Object: You may object to processing of your personal data based on cv990's legitimate interests. If you object, cv990 will cease that specific processing unless it can demonstrate compelling legitimate grounds that override your interests or rights.

To exercise any of the rights listed above, email cv990 support at [email protected] with the subject line "Data Rights Request" and include your registered email address and account username so we can locate your records promptly and verify your identity before actioning the request.

cv990 is strictly an adults-only platform. We do not knowingly collect personal data from any person under the age of 21. If you believe that a person under 21 has registered an account or provided personal data to cv990, please notify us immediately at [email protected]. Upon confirmation we will delete all data associated with that account without delay and permanently close the account.

The cv990 platform integrates third-party game content from providers such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, and Microgaming. When you launch a game from one of these providers, you are interacting with that provider's software within the cv990 platform environment. Each provider operates under its own privacy and data-handling policies. cv990 only passes the minimum data required to load and authenticate the gaming session.

cv990 also uses payment infrastructure provided by bKash, Nagad, Rocket, and Upay. These providers are independent organisations with their own regulatory obligations and privacy policies. Transactions you initiate through these payment gateways are subject to the relevant provider's terms in addition to cv990's policies. cv990 is not responsible for the data practices of any third-party provider.

cv990 may update this Privacy Policy periodically to reflect changes in our data practices, legal obligations, or platform features. The current version will always be published at cv990.app/privacy-policy with the date of last update shown at the top. Where updates are material, we will notify registered players via their registered email address or via on-platform notification where practicable. Your continued use of cv990 after any update constitutes acceptance of the revised Policy. We recommend reviewing this page every few months to stay informed.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way cv990 handles your personal data, please contact our support team. We are available 24 hours a day, 7 days a week. You may reach us by email at [email protected]. Please include your registered account email and username in all privacy-related correspondence so we can locate your records and respond efficiently. We are committed to resolving privacy concerns promptly and transparently.