Privacy Policy
How cv9991 Protects Your Data
At cv9991, your privacy is a core commitment — not an afterthought. This Privacy Policy explains exactly what personal information we collect, why we collect it, how it is used, and the rights you hold over your own data as a player on our platform.
Our Privacy Commitments
A snapshot of the six core principles that guide how cv9991 handles your personal data — before we get into the full legal detail below.
Data Minimisation
cv9991 collects only the personal data that is strictly necessary for account operation, identity verification, payment processing, and regulatory compliance. We do not collect data out of curiosity or for speculative future use.
SSL Encryption
All data transmitted between your device and cv9991.vip is protected by industry-standard SSL (Secure Sockets Layer) encryption. Your login credentials, payment details, and personal information are never transmitted in plain text.
No Data Selling
cv9991 does not sell, rent, or trade your personal data to third-party marketers or advertising networks. Your information is used solely for the purposes described in this Privacy Policy and will never be monetised without your explicit consent.
Purpose Limitation
Every category of data we collect is tied to a specific, documented purpose. If cv9991 needs to use your data for a new purpose not covered by this Policy, we will notify you and obtain fresh consent before doing so.
Player Control
You retain meaningful control over your personal data at all times. You may request access to the data cv9991 holds about you, ask for corrections, request deletion, or withdraw marketing consent — all by contacting our support team.
Transparent Practices
This Privacy Policy is written in clear, accessible English so that all players — regardless of technical background — can understand exactly how their data is handled. We update this document whenever our practices change and notify affected players promptly.
1. Information We Collect
cv9991 collects personal information through several channels during the lifecycle of your account. Below is a comprehensive breakdown of the categories of data we collect and the circumstances under which each is gathered.
| Data Category | Specific Examples | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, NID/passport number | Account registration; KYC verification |
| Contact Data | Email address, mobile phone number, residential address | Account registration; profile updates |
| Financial Data | bKash/Nagad/Rocket account numbers, bank account details, transaction history | Deposit and withdrawal processing |
| Account Activity Data | Login timestamps, session durations, game history, wager amounts, win/loss records | Ongoing platform use |
| Device & Technical Data | IP address, browser type, operating system, device identifiers, screen resolution | Automatically on each site visit |
| Communications Data | Live chat transcripts, support emails, feedback submissions | When you contact customer support |
| Marketing Preferences | Email opt-in/opt-out status, preferred communication channels, promotion history | Account settings; promotional sign-ups |
cv9991 does not knowingly collect sensitive personal data beyond what is strictly required for identity verification and regulatory compliance. Where identity documents such as a Bangladesh National Identity Card (NID) or passport are submitted, they are processed solely for KYC purposes and stored in an encrypted format with access restricted to authorised compliance personnel only.
When you interact with the cv9991 platform via a mobile device — which represents the majority of our Bangladeshi players accessing the site from Dhaka, Chittagong, Sylhet, and other cities — additional technical information such as your mobile network operator, device model, and mobile OS version may be captured as part of our standard server logs. This data is used exclusively for performance optimisation and fraud prevention.
2. How We Use Your Data
Every use of your personal data by cv9991 is grounded in a legitimate legal basis. The following table maps each processing activity to its purpose and legal justification.
| Processing Activity | Purpose | Legal Basis |
|---|---|---|
| Account registration & verification | Creating and maintaining your player account; confirming identity and age | Contract performance; Legal obligation |
| Payment processing | Executing deposits and withdrawals via bKash, Nagad, Rocket, and other methods | Contract performance |
| Responsible gaming monitoring | Detecting patterns of excessive play; administering self-exclusion and deposit limits | Legal obligation; Legitimate interest |
| Fraud & AML detection | Identifying suspicious account activity, money laundering, and bonus abuse | Legal obligation; Legitimate interest |
| Customer support | Responding to queries, resolving disputes, and managing complaints | Contract performance; Legitimate interest |
| Marketing communications | Sending promotional offers, bonus notifications, and event announcements (e.g., BPL season) | Consent (opt-in only) |
| Platform improvement | Analysing usage patterns to improve game selection, UI performance, and mobile experience | Legitimate interest |
Where cv9991 relies on your consent as the legal basis for a processing activity — most commonly for marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal. To withdraw marketing consent, update your notification preferences in the account settings panel or contact support at [email protected].
Automated Decision-Making
cv9991 uses automated systems for certain account-related decisions, including fraud scoring, responsible gaming threshold alerts, and bonus eligibility checks. Where an automated decision produces a significant effect on your account — such as a temporary withdrawal hold or a responsible gaming intervention — you have the right to request a human review of that decision. Contact support to exercise this right.
3. Data Sharing & Disclosure
cv9991 does not sell or rent your personal data. We share data only where strictly necessary, with trusted partners bound by confidentiality obligations.
In the course of operating the cv9991 platform, we work with a limited number of carefully selected third-party service providers and technology partners. Each third party that receives your data is required to handle it in accordance with applicable data protection standards and is contractually prohibited from using that data for any purpose other than the specific service they provide to cv9991.
Partners Who May Receive Your Data
- Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and BRAC Bank receive the minimum financial data required to complete your transaction.
- Identity verification providers: Third-party KYC bureaus may receive your identity documents to perform age and identity checks in accordance with our compliance obligations.
- Game providers: Pragmatic Play, Evolution Gaming, Spribe, and other licensed providers receive your anonymised session data to deliver and maintain game functionality.
- Cloud and hosting infrastructure: Our hosting and data storage providers hold your encrypted account data under strict data processing agreements.
- Customer support platforms: Live chat and helpdesk tools used by our 24/7 support team may store support conversation history.
Disclosure to Authorities
cv9991 may be required to disclose personal data to government bodies, law enforcement agencies, or financial regulators where we are legally compelled to do so. Circumstances in which such disclosure may occur include:
- Court orders or other binding legal process
- Anti-money laundering (AML) investigations by financial authorities
- Fraud investigations involving player accounts
- Regulatory audits or compliance inspections
- Protection of the rights, property, or safety of cv9991, our players, or the public
Where permitted, cv9991 will notify affected players of such disclosures. We will never voluntarily share data with authorities beyond our legal obligations.
4. Cookies & Tracking Technologies
cv9991 uses cookies and similar tracking technologies to keep the platform running smoothly and to understand how players use the site. Here is a transparent breakdown of what we use and why.
A cookie is a small text file placed on your device by a website you visit. Cookies allow the website to recognise your device on return visits and to remember preferences and session states. cv9991 uses both first-party cookies (set directly by cv9991.vip) and third-party cookies (set by trusted partner services such as game providers and analytics tools). You can manage your cookie preferences through your browser settings at any time — however, disabling certain essential cookies may affect the functionality of the Platform.
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Essential / Session | Maintain your login session, remember your account state, and enable core platform functionality | No — required for platform operation |
| Security | Detect suspicious login patterns, prevent CSRF attacks, and support two-factor authentication flows | No — required for account security |
| Preference | Remember your language, display settings, and notification preferences | Yes — platform may reset to defaults |
| Analytics | Understand which features are most used, identify performance bottlenecks, and improve the platform | Yes — via browser or consent settings |
| Game Provider | Cookies set by Pragmatic Play, Evolution, Spribe, and other providers to deliver and maintain embedded game sessions | Partial — disabling may affect game loading |
Most modern browsers allow you to view, manage, and delete cookies through the browser's settings or preferences menu. You may also use browser extensions to block specific categories of cookies. For mobile users accessing cv9991 via Chrome or Firefox on Android — which is the most common access method among our players in Bangladesh — the browser's privacy settings include options to clear cookies on exit or to block third-party cookies site-by-site.
5. Data Security Measures
Protecting the personal and financial data of every cv9991 player is a technical and organisational priority. The following security measures are maintained on an ongoing basis.
🔐 Technical Safeguards
- TLS/SSL encryption for all data in transit between your device and cv9991 servers
- AES-256 encryption for sensitive data at rest, including identity documents and financial records
- Multi-factor authentication (MFA) available for all player accounts
- Automated intrusion detection systems monitoring for anomalous access patterns
- Regular penetration testing by independent third-party security specialists
- Strict role-based access controls limiting staff access to personal data on a need-to-know basis
🏢 Organisational Safeguards
- All cv9991 staff handling player data undergo regular data protection training
- Data processing agreements (DPAs) in place with all third-party vendors
- Formal data breach response plan with defined notification timelines
- Regular internal audits of data access logs and processing activities
- Principle of least privilege enforced across all internal systems
- Dedicated data protection officer (DPO) overseeing compliance with this Policy
Despite the robust measures cv9991 employs, no digital platform can guarantee absolute security against all possible threats. In the event of a data breach that poses a risk to your rights and freedoms, cv9991 will notify affected players as promptly as practicable, providing details of the nature of the breach, the categories of data involved, and the steps we are taking to mitigate any harm.
6. Your Privacy Rights
As a cv9991 player, you hold specific rights over the personal data we hold about you. These rights may be exercised at any time by contacting our support team.
cv9991 is committed to respecting and upholding your privacy rights. The following rights are available to all players regardless of their location. To exercise any of these rights, submit a written request to [email protected] with your registered account email and a description of the right you wish to exercise. We will respond within a reasonable timeframe and, in most cases, within 30 days of receiving your request.
Right of Access
Request a copy of all personal data cv9991 holds about you, including account data, transaction history, and support communications.
Right to Rectification
Request correction of inaccurate or incomplete personal data held in your account — for example, an incorrectly recorded date of birth or outdated address.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to overriding legal retention obligations.
Right to Restriction
Request that cv9991 restrict the processing of your data while a dispute about its accuracy or the legitimacy of processing is being resolved.
Right to Portability
Request a structured, machine-readable copy of personal data you have provided to cv9991, where processing is based on consent or contract.
Right to Object
Object to processing carried out on the basis of legitimate interest, including profiling for responsible gaming monitoring or marketing personalisation.
Right re: Automated Decisions
Request human review of any significant decision made about your account through purely automated means, such as a fraud flag or account restriction.
Right to Withdraw Consent
Withdraw your consent to marketing communications or any other consent-based processing at any time, without affecting prior lawful processing.
cv9991 will not charge a fee for handling rights requests in standard circumstances. If a request is manifestly unfounded or excessive — for example, repetitive requests for the same data — we reserve the right to charge a reasonable administrative fee or to decline the request, with written explanation provided. In all cases, we will aim to resolve your request fairly and transparently.
7. Data Retention Policy
cv9991 retains personal data only for as long as necessary to fulfil the purpose for which it was collected or to comply with applicable legal obligations.
Different categories of personal data are held for different periods depending on their nature and the legal requirements that apply to them. The following table outlines the standard retention periods applied by cv9991. In some cases, data may be retained for longer periods where required by applicable law or where a dispute, investigation, or legal proceeding is ongoing.
| Data Category | Standard Retention Period | Reason |
|---|---|---|
| Account & identity data | Duration of account + 5 years after closure | AML compliance; legal dispute resolution |
| Transaction records | 7 years from transaction date | Financial regulatory obligations |
| KYC documents | 5 years from account closure | Anti-money laundering (AML) requirements |
| Support communications | 3 years from last interaction | Dispute resolution; service quality |
| Game session & activity logs | 2 years from each session | Responsible gaming monitoring; fairness audits |
| Marketing preference records | Until withdrawn + 1 year | Evidence of consent management |
| Server & access logs (IP, device) | 90 days rolling | Security monitoring; fraud detection |
When the applicable retention period expires and no overriding legal basis for continued retention exists, cv9991 will securely delete or irreversibly anonymise the relevant data. Anonymised, aggregated data — from which no individual can be identified — may be retained indefinitely for statistical analysis and platform improvement purposes.
8. Updates to This Policy
cv9991 reserves the right to update this Privacy Policy at any time. Here is how we handle changes and how you will be informed.
The digital landscape, regulatory environment, and cv9991's own services evolve over time. This Privacy Policy will be reviewed and updated periodically to reflect those changes. When material updates are made — such as changes to the categories of data we collect, new third-party sharing arrangements, or significant changes to your rights — cv9991 will communicate those changes to registered players via their registered email address and by displaying a prominent notice on the Platform for a minimum of 30 days following the update.
Minor updates — such as clarifications of existing language, corrections of typographical errors, or updates to contact information — may be made without individual notification. The "Last updated" date at the top of this document will always reflect the most recent revision. We strongly encourage all players to review this Privacy Policy periodically, particularly before making a deposit or engaging with a new feature of the Platform.
Contact Our Data Protection Team
If you have any questions, concerns, or requests relating to this Privacy Policy or the way cv9991 handles your personal data, our data protection team is available to assist. You can reach us through the following channel:
Email: [email protected]
Please include your registered account email address and a clear description of your enquiry in your message. We aim to respond to all privacy-related enquiries within 5 business days (Bangladesh Standard Time, UTC+6). For urgent account security matters, please indicate "URGENT — Account Security" in the subject line of your message.
This Privacy Policy applies solely to the cv9991 platform at cv9991.vip. Links to third-party websites or embedded game content from providers such as Pragmatic Play, Evolution Gaming, and Spribe are subject to those parties' own privacy policies. cv9991 is not responsible for the data practices of third-party game providers or external websites, and we encourage you to review their policies independently before sharing personal information with those services.
Play Securely on cv9991
Your data is protected. Your games are fair. Your experience is built for Bangladesh. Explore the full cv9991 casino, check out our FAQ, or read our Responsible Gaming guide to make the most of your time on the platform.
18+ only. Please gamble responsibly. Terms & Conditions apply.