cv9996 Privacy
Policy

cv9996 is Bangladesh's trusted online casino and sports betting platform, offering a wide range of gaming services including cricket betting, live casino, slots, crash games, and more. We are deeply committed to protecting the privacy and personal data of every player who chooses to use our platform. This Privacy Policy sets out the principles and practices we follow when handling your data.

We recognise that players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, and every corner of Bangladesh place their trust in cv9996 not only for a fair and entertaining gaming experience but also for the responsible and transparent management of their personal information. This Policy is our binding commitment to that trust.

This Policy should be read together with the cv9996 Terms and Conditions and our Responsible Gaming Policy, both of which are incorporated herein by reference and apply in parallel with this document.

For the purposes of applicable data protection law, cv9996 is the data controller responsible for your personal information collected through the Platform. As data controller, cv9996 determines the purposes and means of processing your personal data and is accountable for ensuring that all processing activities are conducted lawfully, fairly, and transparently.

If you have any questions or concerns regarding the way in which your personal data is processed by cv9996, or if you wish to exercise any of your data subject rights (as described in Section 11 of this Policy), you may contact our dedicated data protection team using the contact details provided in Section 15.

cv9996 collects personal data that is necessary for us to provide you with a safe, secure, and personalised gaming experience. The categories of personal data we collect are as follows:

We collect personal data by three primary means: (a) information you actively provide to us when registering, verifying your identity, making transactions, or contacting support; (b) information collected automatically through technical means as you interact with the Platform; and (c) information received from trusted third-party sources such as identity verification providers and payment processors, where permitted and necessary.

cv9996 processes your personal data only for specified, explicit, and legitimate purposes. The following table sets out the primary purposes for which we use your data, together with the associated lawful basis:

• Account Creation and Management: To register your account, verify your identity, manage your profile, and maintain the security and integrity of your cv9996 account.
• Transaction Processing: To process deposits via bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and BRAC Bank, and to process withdrawal requests to your verified payment method.
• KYC and AML Compliance: To comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations, including identity verification, source of funds checks, and ongoing transaction monitoring.
• Service Delivery: To provide you with access to all cv9996 gaming services, including cricket betting, live casino, slots, crash games, and promotional offers.
• Customer Support: To respond to your queries, complaints, and support requests in a timely and effective manner via live chat and email.
• Fraud Prevention and Platform Security: To detect and prevent fraudulent activity, bonus abuse, multi-accounting, money laundering, and other prohibited conduct as defined in our Terms and Conditions.
• Personalisation: To tailor content, game recommendations, promotional offers, and communications to your preferences and gaming history on the cv9996 Platform.
• Marketing Communications: Where you have provided your consent, to send you promotional emails, SMS notifications, and other marketing communications about cv9996 products, bonuses, and seasonal promotions.
• Legal and Regulatory Compliance: To meet our obligations under applicable law, including responding to lawful requests from law enforcement or regulatory authorities.
• Platform Analytics and Improvement: To analyse usage patterns, measure Platform performance, identify technical issues, and improve the overall user experience.

cv9996 will not use your personal data for any purpose that is incompatible with the purposes stated above without first obtaining your explicit consent or establishing a separate lawful basis for such processing.

cv9996 processes your personal data on the following legal bases, depending on the specific purpose of each processing activity:

1. Contractual Necessity: Processing that is necessary to perform the contract between cv9996 and you — specifically, to operate your account, process transactions, and deliver gaming services.
2. Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC verification, AML monitoring, and financial record-keeping.
3. Legitimate Interests: Processing carried out for cv9996's legitimate business interests, such as fraud prevention, Platform security, customer analytics, and service improvement, provided these interests do not override your fundamental rights and freedoms.
4. Consent: Processing based on your freely given, specific, and informed consent — primarily in relation to marketing communications. You may withdraw your consent at any time by contacting our support team or updating your account preferences.

cv9996 does not sell, rent, or trade your personal data to third parties for commercial marketing purposes. We may, however, share your personal data with the following categories of recipients where strictly necessary and subject to appropriate safeguards:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and BRAC Bank, for the sole purpose of processing your financial transactions. These providers act as independent data controllers for their own services.
• Identity Verification (KYC) Partners: Third-party identity verification and AML screening service providers engaged by cv9996 to carry out mandatory compliance checks on your behalf.
• Game Content Providers: Game studios including Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi may receive limited technical data (e.g., session tokens) necessary to deliver games within the cv9996 Platform environment.
• IT and Infrastructure Providers: Hosting, cloud infrastructure, and cybersecurity service providers engaged to operate and protect the cv9996 Platform on our behalf.
• Analytics Providers: Anonymised or pseudonymised usage data may be shared with analytics service providers to help cv9996 understand Platform performance and user behaviour trends.
• Law Enforcement and Regulatory Authorities: cv9996 may disclose your personal data to police, financial intelligence units, courts, or other competent authorities where required to do so by applicable law, court order, or regulatory obligation, or where we have a good-faith belief that such disclosure is necessary to prevent serious harm or criminal activity.
• Corporate Transactions: In the event of a merger, acquisition, or sale of all or substantially all of the assets of cv9996, your personal data may be transferred to the successor entity, subject to equivalent privacy protections.

All third parties with whom cv9996 shares personal data are required to process that data in accordance with applicable data protection law and to implement appropriate technical and organisational security measures. cv9996 enters into data processing agreements with all relevant third-party processors.

cv9996 uses cookies and similar tracking technologies to operate the Platform, improve user experience, and deliver relevant content and promotions. A cookie is a small data file placed on your device when you visit the cv9996 website. The following types of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These enable core features such as login sessions, account security, and bet placement. They cannot be disabled without impairing Platform functionality.
• Performance Cookies: Used to collect anonymised information about how visitors interact with the cv9996 Platform, including pages visited, errors encountered, and load times. This data helps us improve Platform performance.
• Functional Cookies: Allow the Platform to remember your preferences such as language, currency display (BDT / ৳), and game history to provide a more personalised experience.
• Targeting and Analytics Cookies: Where you have provided consent, these cookies track your engagement with cv9996 content to deliver personalised promotions and measure the effectiveness of our marketing campaigns.

You may manage your cookie preferences through your browser settings. Please note that disabling certain categories of cookies may affect the functionality of the cv9996 Platform. For session-based login and bet placement to function correctly, strictly necessary cookies must remain enabled.

cv9996 takes the security of your personal data extremely seriously. We have implemented a comprehensive set of technical and organisational security measures designed to protect your data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include, but are not limited to:

• SSL/TLS Encryption: All data transmitted between your device and the cv9996 Platform is protected using industry-standard SSL/TLS encryption protocols. Look for the padlock icon in your browser's address bar when accessing cv9996.biz.
• Encryption at Rest: Sensitive personal data stored on cv9996 servers — including identity documents, financial records, and account credentials — is encrypted using AES-256 encryption.
• Access Controls: Access to personal data within cv9996 is restricted on a strict need-to-know basis. Only authorised personnel who require access to perform their job functions are permitted to access personal data, and all such access is logged and audited.
• Two-Factor Authentication: cv9996 supports optional two-factor authentication (2FA) for player accounts to provide an additional layer of protection against unauthorised access.
• Regular Security Testing: cv9996 conducts regular vulnerability assessments and penetration testing to identify and remediate potential security weaknesses in our Platform infrastructure.
• Incident Response: cv9996 maintains a formal data breach incident response procedure. In the event of a breach that poses a risk to your rights and freedoms, we will notify you and any applicable regulatory authorities as required by law.

While cv9996 employs robust security measures, no online platform can guarantee absolute security. You are also responsible for maintaining the security of your own account by keeping your login credentials confidential, using a strong and unique password, and logging out of your account when accessing cv9996 from a shared device.

cv9996 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, as described in this Policy, unless a longer retention period is required or permitted by applicable law.

The following general retention periods apply:

• Active Account Data: Personal data associated with your cv9996 account is retained for the full duration of your account's existence and remains accessible to you at all times through your account dashboard.
• Post-Closure Retention: Following the closure of your cv9996 account, we retain your personal data for a minimum period of five (5) years in order to comply with anti-money laundering regulations, financial record-keeping requirements, and to resolve any outstanding disputes.
• Transaction Records: Financial transaction records are retained for a minimum of five (5) years from the date of each transaction, in line with standard financial compliance requirements.
• KYC Documents: Identity verification documents submitted for KYC purposes are retained for the duration of your account plus a minimum of five (5) years post-closure.
• Marketing Data: Where you have provided consent to receive marketing communications, we retain your marketing preferences until you withdraw consent. Following withdrawal, we retain a record of your opt-out to ensure we do not inadvertently contact you again.
• Support Communications: Chat transcripts and email correspondence with cv9996 support are retained for up to three (3) years from the date of the interaction.

Upon expiry of the applicable retention period, personal data is securely and permanently deleted or anonymised so that it can no longer be associated with you.

cv9996 primarily operates from and for the Bangladesh market and endeavours to keep your personal data within appropriate jurisdictional boundaries wherever possible. However, due to the global nature of some of our technology and service provider relationships, your personal data may in certain circumstances be transferred to, stored in, or processed in countries outside Bangladesh.

Where such international transfers occur, cv9996 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections that apply within Bangladesh. These safeguards may include:

• Data processing agreements with third-party processors that incorporate appropriate contractual clauses governing the transfer and processing of personal data.
• Transfers to countries or organisations that have been determined to offer an adequate level of data protection.
• Implementation of additional technical and organisational safeguards where the adequacy of protection in the destination country cannot be independently confirmed.

As a data subject, you have the following rights in respect of the personal data held about you by cv9996. To exercise any of these rights, please contact us using the details in Section 15:

• Right of Access: You have the right to request a copy of the personal data cv9996 holds about you, together with information about how it is being processed. We will respond to verified access requests within 30 days.
• Right to Rectification: If any personal data cv9996 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to Erasure ("Right to be Forgotten"): You may request that cv9996 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where you object to processing and there is no overriding legitimate interest. This right is subject to our legal retention obligations described in Section 9.
• Right to Restriction of Processing: You may request that cv9996 restrict the processing of your personal data in certain circumstances — for example, while you contest the accuracy of data we hold, or while an objection to processing is being considered.
• Right to Data Portability: Where processing is carried out on the basis of consent or contractual necessity and by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to processing based on legitimate interests or for direct marketing purposes. Where you object to direct marketing, cv9996 will cease processing your data for that purpose immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

cv9996 will respond to all data subject requests within a reasonable period and in any event within 30 days of receipt of a verified request. We may request proof of identity before processing any data subject rights request to ensure the security of your personal data.

The cv9996 Platform is strictly intended for adults aged 18 years and above. cv9996 does not knowingly collect personal data from individuals under the age of 18. Our registration process includes date-of-birth verification, and we reserve the right to request documentary proof of age from any player at any time.

If cv9996 becomes aware that personal data has been collected from a person under the age of 18, we will immediately take the following steps:

• Suspend or permanently close the relevant account.
• Delete all personal data associated with the account to the extent permitted by applicable law.
• Refund any real-money deposits made to the account, subject to verification procedures.
• Report the incident to relevant authorities where required or appropriate.

If you are a parent or guardian and believe that your child has registered an account on the cv9996 Platform, please contact us immediately at [email protected] so that we can take the necessary action without delay.

The cv9996 Platform may contain references to or integrations with third-party services — including game providers such as Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi, as well as payment service providers such as bKash and Nagad. Each of these third parties operates under its own privacy policy and data protection practices, which are independent of cv9996.

cv9996 is not responsible for the privacy practices, content, or data security of any third-party service or platform. We recommend that you review the privacy policies of any third-party service you interact with in connection with your use of the cv9996 Platform.

This Policy applies solely to personal data collected, processed, and stored by cv9996 through the cv9996.biz website and associated services. It does not extend to any third-party platforms, services, or applications.

cv9996 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory requirements, or operational circumstances. Any material changes to this Policy will be communicated to registered players via email notification or a prominent notice displayed on the cv9996 Platform prior to the changes taking effect.

The effective date at the top of this Policy will be updated each time a new version is published. We encourage all players to review this Policy periodically to stay informed about how cv9996 is protecting their personal data. Your continued use of the cv9996 Platform following the publication of a revised Policy constitutes your acceptance of the updated terms.

If a proposed change to this Policy requires your consent (for example, a new processing purpose that was not covered by your original consent), we will seek that consent from you directly before the change takes effect. You will always have the right to withdraw consent or close your account if you do not agree with a material change to this Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which cv9996 processes your personal data, please do not hesitate to contact our dedicated support team using the details below. We are committed to addressing all privacy-related enquiries promptly and thoroughly.

• Email: [email protected] (plain text — not a clickable link)
• Response Time: We aim to respond to all privacy enquiries within 3 business days (Bangladesh Standard Time, UTC+6).
• Data Subject Rights Requests: Please include "Data Rights Request" in the subject line of your email and provide your registered username and a description of your request to help us process it efficiently.
• Escalation: If you are not satisfied with our response to a privacy concern, you may escalate the matter by clearly indicating this in a follow-up email. cv9996 takes all unresolved privacy complaints seriously and will assign senior review where necessary.