cvc99 Privacy Policy

1 Data We Collect

cvc99 collects personal data from players across several touchpoints: account registration, identity verification, payment processing, gameplay, customer support interactions, and general platform use. The categories of personal data we collect, and the specific data points within each category, are detailed below.

cvc99 collects only the minimum data necessary to fulfil each specific operational purpose. We do not collect sensitive personal data such as racial or ethnic origin, religious beliefs, or biometric data beyond what is strictly required for identity verification under applicable KYC obligations.

2 How We Use Your Data

Every piece of personal data collected by cvc99 is used for one or more specific, documented purposes. We do not process personal data for purposes that are incompatible with the original reason it was collected. The following table outlines our primary processing purposes and the legal basis under which each is carried out.

• Account management: We use your identity and contact data to create and maintain your cvc99 account, authenticate your login sessions, and communicate important account-related notifications to you.
• Payment processing: Financial data is used exclusively to process deposits and withdrawals via your chosen payment method (bKash, Nagad, Rocket, Upay, Visa, Mastercard, or supported Bangladeshi banks) and to maintain accurate transaction records.
• Identity verification and KYC compliance: We process identity documents to verify your age (18+ requirement) and comply with anti-money laundering obligations. This is a legal requirement for operating a fair and compliant gaming platform.
• Fraud prevention and security: Technical data and usage data are analysed by our security systems to detect and prevent fraudulent account activity, duplicate registrations, money laundering, and unauthorised access attempts.
• Responsible gaming monitoring: Usage data — including bet frequency, session length, and deposit patterns — is monitored by our responsible gaming systems to identify players who may be displaying signs of problem gambling behaviour. This processing is carried out in the interests of player welfare.
• Platform improvement: Anonymised and aggregated usage data is analysed to understand how players interact with cvc99, which games are most popular, and where technical issues arise. This data cannot be traced back to any individual player.
• Customer support: Communications data from support interactions is retained to ensure continuity of service, resolve disputes, and improve the quality of our support team's responses.
• Marketing communications: With your explicit consent, we may send promotional emails or SMS notifications about new games, bonuses, and seasonal offers. You may withdraw this consent at any time by contacting [email protected].

cvc99 will never use your personal data to make fully automated decisions that produce legal or similarly significant effects on you without first providing human review and an opportunity to contest the decision. If you believe an automated decision affecting your account is incorrect, please contact our support team immediately.

3 Cookies & Tracking

cvc99 uses cookies — small text files stored on your device — and similar technologies such as local storage objects and session tokens to operate and improve the platform. By continuing to use cvc99 after being presented with this Privacy Policy, you acknowledge the use of these technologies as described below.

• Essential cookies: These are strictly necessary for the platform to function. They manage your login session, maintain your game state, and handle secure payment handoffs. The platform cannot operate without these cookies and they cannot be disabled.
• Preference cookies: These remember your language preference, display settings, and notification preferences so you do not need to re-enter them each visit. They are stored for up to 12 months.
• Analytics cookies: cvc99 uses first-party analytics to measure platform traffic, page load performance, and game popularity. This data is anonymised and aggregated. No individual player is identifiable from analytics data.
• Security cookies: Short-lived tokens that help us detect and prevent cross-site request forgery (CSRF), session hijacking, and other security threats. These expire automatically when your session ends.

You may manage cookie preferences through your browser settings. Disabling essential cookies will prevent you from logging in or using core platform features. For full instructions on managing cookies in your browser, refer to your browser's official help documentation. Please note that clearing cookies will also clear your saved session, and you will be required to log in again on your next visit.

4 Data Sharing & Third Parties

cvc99 does not sell, rent, or trade your personal data to any third party. We may, however, share specific and limited data with carefully selected third-party partners where doing so is necessary to operate the platform, fulfil legal obligations, or protect the safety and security of our players.

• Payment processors: Transaction data (amount, reference ID, and account identifier) is shared with bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partner Bangladeshi banks solely for the purpose of processing your deposits and withdrawals. Payment processors are contractually prohibited from using this data for any other purpose.
• Game providers: When you launch a game on cvc99, your player ID and session token are passed to the relevant game provider (e.g., Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) to initialise the game session. Game providers do not receive your full name, contact details, or financial information.
• Identity verification services: During KYC processing, your submitted identity document may be validated against third-party verification databases. These services operate under strict data processing agreements and retain verification results only for the period required by law.
• IT and security infrastructure providers: cvc99's platform is hosted on secure cloud infrastructure. Our hosting and security providers may process technical data as part of their service but are contractually bound to process it only on our instructions and never for their own purposes.
• Legal and regulatory authorities: cvc99 will disclose player data to law enforcement agencies, financial intelligence units, or regulatory bodies in Bangladesh or internationally where required to do so by a valid legal obligation, court order, or regulatory directive. We will notify affected players where legally permitted to do so.

5 Data Security & Retention

cvc99 implements a layered security architecture to protect your personal data from unauthorised access, accidental loss, disclosure, or destruction. Our security measures are reviewed and updated on a regular basis to address emerging threats and industry best practices.

• All data in transit is encrypted using TLS 1.2 or higher. All data at rest — including stored KYC documents and financial records — is encrypted using AES-256 encryption.
• Access to personal data within cvc99's internal systems is governed by a strict role-based access control (RBAC) policy. Only personnel with a documented operational need may access specific categories of player data.
• cvc99 maintains a comprehensive incident response plan. In the event of a data breach that poses a risk to player rights, affected players will be notified promptly with details of what data was involved and what steps are being taken to mitigate harm.
• Regular penetration testing and security audits are conducted on the cvc99 platform to identify and address vulnerabilities before they can be exploited.
• Player account passwords are stored in hashed form using a strong, salted hashing algorithm. cvc99 personnel cannot view your password in plain text. If you forget your password, it must be reset — it cannot be retrieved.

With regard to data retention, cvc99 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, tax, or accounting obligations. The following retention periods apply as a general guide:

• Active account data: Retained for the lifetime of the account plus a minimum of 5 years following account closure, to comply with financial record-keeping requirements.
• KYC identity documents: Retained for a minimum of 5 years from the date of submission or the date of account closure, whichever is later.
• Transaction records: Retained for a minimum of 7 years from the transaction date to comply with applicable financial regulations.
• Support correspondence: Retained for 3 years from the date of the most recent interaction, unless the correspondence relates to an active dispute or legal matter.
• Marketing consent records: Retained for as long as you remain opted in, plus 2 years following opt-out to demonstrate that consent was properly obtained and withdrawn.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to any individual player. Anonymised, aggregated data may be retained indefinitely for statistical and platform improvement purposes.

6 Your Privacy Rights

As a cvc99 player, you hold specific rights with respect to the personal data we hold about you. cvc99 is committed to facilitating the exercise of these rights in a timely, transparent, and straightforward manner. All rights requests should be submitted in writing to [email protected]. We will respond within 14 business days of receipt.

• Right of access: You have the right to request a copy of all personal data that cvc99 holds about you, along with information about how it is being used, where it was obtained from, and who it has been shared with.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (such as updating a phone number) may be made directly in your account settings. Formal corrections to identity data require verification.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where it has been processed unlawfully. This right is subject to our legal obligation to retain certain data for regulatory compliance.
• Right to restrict processing: You may request that cvc99 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified.
• Right to withdraw marketing consent: Where data processing is based on your consent — such as receiving promotional emails — you have the right to withdraw that consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
• Right to lodge a complaint: If you are not satisfied with how cvc99 has handled your personal data or responded to a rights request, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.

7 Children's Privacy

cvc99 is an adult-only gambling platform. The minimum age to register an account, deposit funds, or place any wager on cvc99 is 18 years. This restriction is absolute. cvc99 does not knowingly collect, store, or process personal data relating to any person under the age of 18.

During the account registration process, all players are required to confirm that they are aged 18 or above. Where cvc99 has reasonable grounds to suspect that a registered account is being operated by or on behalf of a minor, that account will be suspended immediately pending a formal age verification review. Any deposits received from a confirmed underage account will be returned to the original payment source following the completion of the investigation, and no winnings will be paid out.

Parents and guardians who are concerned about minors accessing online gambling platforms are encouraged to make use of freely available parental control software tools that can restrict access to gambling websites at the device or network level. cvc99 fully supports the use of such tools and encourages responsible household internet management.

8 Policy Updates & Contact

cvc99 reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, the introduction of new platform features, changes in applicable law, or feedback received from our players. The date of the most recent revision is always displayed at the top of this page.

Where a proposed change to this Privacy Policy is material — meaning it significantly affects how we use your data or reduces your rights — cvc99 will provide at least 14 days' advance notice to all registered players via the email address on file before the revised policy takes effect. For minor or clarifying changes that do not affect the substance of our data practices, we may update this page without advance notice.

If you have any questions, concerns, or requests related to this Privacy Policy or the way cvc99 handles your personal data, please contact our Data Privacy team using the details below. All privacy-related correspondence is treated as confidential and is handled by trained personnel.

• Email: [email protected] (subject line: "Privacy Enquiry")
• Response time: Within 14 business days of receipt for standard enquiries; within 3 business days for urgent data breach or account security matters.
• Language: All privacy correspondence is handled in English.
• Operating hours: Support is available 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6).