This Privacy Policy explains how cv99 collects, uses, stores, and protects the personal information of players registered on the cv99 platform. We are committed to handling your data with transparency, care, and in accordance with applicable data protection principles.
cv99 is an online casino and sports betting platform operated under an international offshore licence and made available to players in Bangladesh and other eligible jurisdictions. The cv99 platform is accessible at cv99.today and encompasses the website, any associated mobile web application, customer support services, and promotional communications issued under the cv99 brand.
cv99 acts as the data controller in respect of all personal data collected from players through the cv99 platform. This means cv99 is responsible for determining the purposes for which your personal data is processed and the manner in which it is processed.
If you have questions, requests, or complaints regarding the use of your personal data, you may contact the cv99 data privacy team using the following details:
cv99 collects personal data that is necessary to provide you with a safe, compliant, and functional gaming and betting experience. The categories of personal data we collect are set out in the table below:
| Category | Data Elements | Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, gender, nationality, government-issued ID number | Account registration, KYC verification, age verification |
| Contact Data | Email address, mobile phone number, residential address (city, district, division) | Account communication, security alerts, support responses |
| Account Data | Username, hashed password, account creation date, login history, session logs | Account management, security monitoring, fraud detection |
| Financial Data | bKash / Nagad / Rocket / Upay wallet number, bank account name and number (for withdrawals), transaction amounts, transaction timestamps | Payment processing, withdrawal verification, AML compliance |
| Gaming Data | Game session history, bet amounts, game outcomes, win/loss records, bonus activity | Service delivery, responsible gaming monitoring, dispute resolution |
| Technical Data | IP address, device type, browser type and version, operating system, screen resolution, referral URL | Security, fraud prevention, platform optimisation |
| Verification Documents | National ID card, passport, utility bill, or other KYC documents uploaded by the player | Identity and age verification, AML compliance |
| Communications Data | Content of Live Chat sessions , support emails, and feedback submissions | Customer support, service improvement, complaint resolution |
cv99 does not collect or store full payment card numbers. We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data except where explicitly required for responsible gaming assessments and only with your express consent.
cv99 collects personal data through the following channels:
cv99 processes personal data only for defined, legitimate purposes. The primary purposes for which we process your data are as follows:
cv99 processes your personal data on the following legal grounds:
| Legal Basis | When It Applies |
|---|---|
| Contractual Necessity | Processing required to perform the contract between you and cv99 — including account registration, payment processing, and service delivery. |
| Legal Obligation | Processing required to comply with AML obligations, age verification requirements, and responses to lawful authority requests. |
| Legitimate Interests | Processing for fraud prevention, security monitoring, responsible gaming enforcement, and platform analytics — where these interests are not overridden by your rights. |
| Consent | Processing for optional marketing communications (email/SMS promotions). You may withdraw consent at any time by contacting cv99 support or using the unsubscribe option in any marketing email. |
6.1 Use of Cookies. cv99 uses cookies and similar tracking technologies (such as local storage and session tokens) to operate the platform, maintain your login session, remember your preferences, and collect technical usage data. Cookies are small text files stored on your device by your browser.
6.2 Types of Cookies Used:
6.3 Managing Cookies. You may configure your browser to block or delete cookies at any time. Please note that disabling essential cookies will prevent you from logging in to your cv99 account. For detailed instructions on managing cookies in your specific browser, please refer to your browser's help documentation.
cv99 does not sell your personal data to third parties under any circumstances. We share personal data only in the following limited circumstances and only to the extent necessary for the specified purpose:
All third parties with whom cv99 shares personal data are required to implement appropriate technical and organisational security measures and are contractually prohibited from using your data for any purpose beyond what is specified by cv99.
cv99 operates under an international offshore licence, and some of the third-party service providers with whom we share data (such as cloud hosting providers or KYC technology partners) may be located outside Bangladesh. As a result, your personal data may be transferred to and processed in countries outside of Bangladesh.
Where such international transfers occur, cv99 takes reasonable steps to ensure that your data receives an adequate level of protection through contractual safeguards, including standard data processing clauses that impose data protection obligations on the receiving party equivalent to those applied by cv99.
By registering a cv99 account and accepting the cv99 Privacy Policy and Terms & Conditions, you acknowledge and consent to the transfer of your personal data to cv99's international service providers for the purposes described in this Policy.
cv99 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, to maintain your active account, or to comply with applicable legal, regulatory, and anti-money laundering retention obligations.
| Data Category | Retention Period |
|---|---|
| Active Account Data | Retained for the lifetime of the active cv99 account plus 5 years after account closure. |
| Transaction and Financial Records | Minimum 5 years from the date of each transaction, in compliance with AML record-keeping requirements. |
| KYC Documents | 5 years from account closure or from the date of the last transaction, whichever is later. |
| Gaming and Session Logs | 3 years from account closure, or longer where required for active dispute resolution. |
| Support Communications | 2 years from the date of each interaction, unless the matter remains subject to an open dispute or investigation. |
| Marketing Consent Records | Until consent is withdrawn, plus 1 year for evidence-of-consent record-keeping. |
After the applicable retention period has expired, cv99 will securely delete or permanently anonymise your personal data so that it can no longer be linked to you as an individual.
Subject to applicable law and cv99's legitimate interests in fraud prevention and regulatory compliance, you have the following rights in respect of your personal data held by cv99:
11.1 Technical Measures. cv99 implements industry-standard technical security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include 256-bit SSL/TLS encryption for all data transmitted between your browser and the cv99 platform, encrypted storage of sensitive account and payment data, two-factor authentication (2FA) availability for all registered accounts, automated session timeouts after periods of inactivity, and regular security monitoring and vulnerability assessments.
11.2 Organisational Measures. Access to personal data held by cv99 is strictly limited to authorised personnel whose roles require such access. All staff and contractors with access to player data are bound by confidentiality obligations and receive data protection training appropriate to their role.
11.3 Data Breach Response. In the event of a personal data breach that poses a risk to the rights and freedoms of affected players, cv99 will take immediate steps to contain the breach, assess its scope and impact, and notify affected players as promptly as practicable. Notifications will be sent to the email address registered with your cv99 account.
11.4 Player Responsibility. While cv99 takes all reasonable steps to secure your data on its end, the security of your account also depends on the strength and confidentiality of your login credentials. You must not share your cv99 username or password with any third party. cv99 recommends enabling 2FA via SMS OTP for additional account protection.
The cv99 platform is strictly intended for individuals aged 18 years and above. cv99 does not knowingly collect, store, or process personal data from individuals under the age of 18. If you are a parent or guardian and believe that a minor has submitted personal data to cv99 and registered an account, please contact us immediately at . Upon verified notification, cv99 will promptly close the relevant account and delete all associated personal data.
cv99's age verification procedures at registration and during KYC review are designed to prevent underage access to the platform. Any account where the account holder is found to be under 18 will be closed immediately, all balances will be returned to the relevant payment source where technically feasible, and the incident will be logged in accordance with cv99's responsible gaming obligations.
cv99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, platform features, applicable regulations, or operational requirements. When material changes are made, cv99 will notify registered players by displaying a prominent notice on the cv99 platform and, where practicable, by sending a notification to the email address associated with your account.
The "Last Updated" date displayed in the hero section at the top of this page indicates the version currently in effect. We encourage you to review this Policy periodically to stay informed about how cv99 protects your personal data. Your continued use of the cv99 platform after the publication of an updated Policy constitutes your acceptance of the revised terms.
For all privacy-related requests, data rights exercises, or concerns about how cv99 handles your personal data, please use the contact details below. Please include your registered cv99 username and a clear description of your request to allow us to respond as efficiently as possible.
Every data exchange between your device and the cv99 platform is protected by 256-bit SSL/TLS encryption — the same standard used by major international banking platforms. Your personal information and payment details are never transmitted in plain text.
cv99 does not sell, rent, or trade your personal data to advertisers or marketing companies under any circumstances. Your data is used exclusively to operate your cv99 account, process your payments, verify your identity, and keep your account secure.
cv99 processes all BDT transactions exclusively through trusted local payment providers — bKash, Nagad, Rocket, and Upay — and selected Bangladesh banking partners including BRAC Bank, City Bank, and Dutch-Bangla Bank. Your financial data stays within verified channels.
cv99 respects your right to access, correct, restrict, and delete your personal data. Data rights requests submitted to are processed within 30 days, and all privacy enquiries receive an initial acknowledgement within 12 hours (BST, UTC+6).
cv99 operates on a data minimisation principle — we collect only the personal data that is genuinely necessary to deliver the cv99 service, verify your identity, and meet our anti-money laundering obligations. We do not collect health data, political views, or other sensitive categories without your express consent.
cv99 does not store your data indefinitely. Clear retention schedules govern every category of player data we hold. When the retention period for your data expires, it is securely deleted or permanently anonymised so it can no longer be associated with you as an individual.
If you have questions about how cv99 uses your personal data, our support team is available 24/7. You can also review our FAQ for common account queries, explore our full game library on the cv99 Casino page, or check the Terms & Conditions for the complete platform rules. 18+ only.