Privacy Policy — cv9998

1. Information We Collect

cv9998 collects personal information through several channels: directly from you during registration and account management, automatically through your use of the platform, and from trusted third-party verification providers during the KYC process. The categories of data we collect are as follows.

Registration & Account Data

When you create a cv9998 account, we collect:

• Full legal name as it appears on your government-issued ID
• Date of birth (used to verify you are 18 years of age or older)
• Email address (used for account communications and password recovery)
• Mobile number registered with your payment method (bKash, Nagad, Rocket, or Upay)
• Residential address (city, district, division — e.g., Dhaka, Chittagong, Sylhet, Khulna)
• Username and hashed password (we never store plaintext passwords)

KYC Verification Documents

As part of our Know Your Customer (KYC) programme, we may collect and temporarily retain copies of:

• National Identity Card (NID), passport, or driving licence
• Proof of address documents (utility bills, bank statements)
• Selfie images submitted for identity confirmation
• Screenshots of mobile banking accounts (showing name and number only)

KYC documents are processed solely for identity verification and fraud prevention. They are handled by authorised personnel and certified third-party verification partners under strict confidentiality agreements.

Financial Transaction Data

We record transaction metadata necessary to process deposits and withdrawals, including payment method type (e.g., bKash, Nagad, Visa), transaction reference numbers, timestamps, amounts in BDT, and transaction status. We do not store full card numbers or mobile banking PINs. Payment credentials are processed exclusively through encrypted, certified payment gateways.

Technical & Usage Data

When you access cv9998.vip, our servers automatically log certain technical information, including:

• IP address and approximate geographic location (city/division level)
• Device type, operating system, and browser version
• Pages visited, time spent on each page, and navigation paths
• Game session data (games played, bet amounts, session duration)
• Referring URL (how you arrived at cv9998.vip)

This technical data is used for security monitoring, fraud detection, platform performance optimisation, and responsible gaming analysis. It is not used to build advertising profiles or shared with ad networks.

Communications Data

If you contact our support team at [email protected], we retain records of that correspondence — including your email address, the content of messages, and any attachments — for up to 24 months. This allows us to provide consistent support and to resolve any disputes that may arise from earlier conversations.

2. How We Use Your Data

cv9998 uses the personal information we collect for the following specific, lawful purposes:

Purpose	Data Used	Legal Basis
Account creation & management	Name, email, mobile number, address	Contractual necessity
Age & identity verification (KYC)	Date of birth, ID documents, selfie	Legal obligation
Processing deposits & withdrawals	Payment method data, transaction records	Contractual necessity
Fraud & security monitoring	IP address, device data, transaction patterns	Legitimate interest
Responsible gaming oversight	Game session data, deposit history	Legal obligation & legitimate interest
Customer support	Communications data, account history	Contractual necessity
Service improvement & analytics	Aggregated usage & technical data	Legitimate interest
Promotional communications	Email address, game preferences	Consent (opt-in only)

We will never use your data for purposes beyond those listed above without first obtaining your explicit consent or establishing a new lawful basis. Where we rely on your consent — for example, to send promotional emails about BPL cricket season offers or Eid bonuses — you may withdraw that consent at any time by contacting support or using the unsubscribe link in any marketing email.

3. Data Sharing & Third Parties

cv9998 does not sell your personal data. We share data only in the limited circumstances described below, and always subject to contractual data-protection obligations.

Payment Processors

To process transactions in BDT, cv9998 shares relevant transaction data with payment providers including bKash, Nagad, Rocket, Upay, and card scheme operators (Visa, Mastercard). These providers receive only the minimum data required to complete the transaction and are bound by their own regulatory privacy obligations.

KYC & Identity Verification Partners

We work with certified identity verification service providers to process KYC documents. These partners operate under strict data-processing agreements and are not permitted to use your documents for any purpose other than the verification task commissioned by cv9998.

Game Technology Providers

Game content on cv9998 is supplied by third-party studios including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming. These providers receive anonymised session identifiers to facilitate gameplay but do not receive your name, contact details, or financial information.

Legal & Regulatory Disclosure

cv9998 may disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory bodies when required to do so by a lawful court order, subpoena, or statutory obligation. Where permitted by law, we will notify you of any such disclosure.

4. Cookies & Tracking Technologies

cv9998.vip uses cookies and similar tracking technologies to operate the platform effectively, remember your preferences, and monitor security. Below is a breakdown of the cookie categories we use.

Strictly Necessary Cookies

These cookies are essential for the platform to function. They manage your login session, maintain your account state between page loads, and protect against cross-site request forgery (CSRF) attacks. You cannot opt out of strictly necessary cookies while continuing to use the platform.

Functional Cookies

Functional cookies remember your preferences — such as your preferred language display setting and notification preferences — so you do not have to reconfigure them on every visit. These can be disabled, but doing so may reduce the quality of your experience on cv9998.vip.

Analytics Cookies

We use first-party analytics cookies to understand how players navigate cv9998.vip — which game categories are most visited, where users drop off during registration, and how long sessions typically last. This data is aggregated and anonymised; no individual player is identified in analytics reports. We do not use Google Analytics or other third-party analytics platforms that track users across sites.

Security & Fraud-Prevention Cookies

These cookies help us detect unusual login patterns, flag suspicious transactions, and prevent automated bot activity. They form a core part of our platform security infrastructure and cannot be disabled.

5. Data Security & Retention

Protecting your personal data is a core operational priority at cv9998. We implement a layered security architecture that includes the following technical and organisational measures:

• TLS/SSL encryption on all data in transit between your device and our servers
• AES-256 encryption for all personally identifiable data stored at rest
• Role-based access controls ensuring staff can only access data relevant to their specific job function
• Multi-factor authentication required for all cv9998 internal systems that handle player data
• Regular security audits and penetration testing conducted by independent specialists
• Automated intrusion detection that flags and quarantines suspicious access attempts in real time

Data Retention Periods

We retain personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Active account data: Retained for the lifetime of your account plus 5 years after closure
• KYC documents: Retained for 5 years from the date of submission, in line with anti-money-laundering record-keeping requirements
• Transaction records: Retained for 5 years from the date of each transaction
• Support communications: Retained for 24 months from the date of the most recent message in each thread
• Technical / server logs: Retained for 90 days, then automatically purged unless flagged for a security investigation
• Marketing consent records: Retained until you withdraw consent, plus 12 months thereafter as evidence of your original opt-in

When data is no longer required and its retention period has expired, it is securely deleted from all active systems and removed from backup archives on the next scheduled backup rotation cycle.

6. Your Rights Over Your Data

As a player on cv9998, you hold the following rights with respect to your personal information. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request". We will respond within 5 business days during Bangladesh Standard Time (BST, UTC+6) working hours.

• Right of Access — You may request a copy of all personal data we hold about you, including account information, transaction history, and any KYC documents on file.
• Right to Rectification — If any personal data we hold is inaccurate or incomplete, you have the right to request that we correct it without undue delay.
• Right to Erasure — You may request deletion of your personal data when it is no longer necessary for the purpose it was collected, subject to our legal retention obligations (for example, we are required to keep transaction records and KYC documents for 5 years regardless of an erasure request).
• Right to Restrict Processing — You may ask us to restrict how we use your data while a dispute or correction request is being resolved.
• Right to Data Portability — You may request your account and transaction data in a structured, machine-readable format (CSV or JSON) for transfer to another service.
• Right to Withdraw Marketing Consent — If you have opted in to receive promotional emails or SMS notifications, you may withdraw that consent at any time with immediate effect.

7. Children's Privacy

cv9998 is strictly an adults-only platform. We do not knowingly collect, process, or retain personal data belonging to individuals under the age of 18. Our registration process requires a date-of-birth entry and is supported by KYC age verification to enforce this restriction.

If we discover or are notified that an account has been created by a person under 18, we will immediately close the account, delete all associated personal data, void any balance, and — where required — report the incident to the relevant authority. If you are a parent or guardian and believe a minor has accessed cv9998 using your device or credentials, please contact us immediately at [email protected] so we can take prompt action.

We also recommend that parents and guardians in Bangladesh make use of device-level parental controls and content filtering tools to prevent minors from accessing online gambling platforms.

8. Changes to This Policy

cv9998 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, platform features, or applicable legal requirements. The "Effective" date at the top of this document will always reflect the date of the most recent revision.

Where a change materially affects your rights or how your data is used, we will notify all registered players via the email address on file at least 7 days before the change takes effect. For minor clarifications or non-material updates, we may update the document without individual notification, though the revised version will always be accessible at cv9998.vip/privacy-policy.

Your continued use of cv9998 after the effective date of any revision constitutes your acceptance of the updated Privacy Policy. If you do not agree with the revised terms, you must stop using the platform and may request account closure by contacting our support team.