cv994 Privacy Policy — How We Handle Your Data

1. Introduction

This Privacy Policy ("Policy") describes how cv994 ("we", "us", or "our") collects, uses, stores, and protects the personal information of players and visitors who use the cv994 online gaming platform, website, and related services (collectively, the "Platform"). This Policy applies to all users of the Platform, including registered account holders and visitors who have not yet registered.

By registering an account on cv994 or by continuing to use the Platform, you acknowledge that you have read this Policy and consent to the data practices described herein. If you do not agree with this Policy, you must discontinue use of the Platform. cv994 processes personal data only to the extent necessary to operate the Platform safely, comply with applicable legal and regulatory obligations, and deliver the services our players expect.

Our Data Commitments at a Glance

Four principles that guide every data decision at cv994:

2. Information We Collect

cv994 collects personal information in the following categories. We limit collection to what is necessary for the stated purpose and do not retain data beyond the periods set out in Section 10 of this Policy.

Registration and Account Data

• Mobile phone number (used as your primary account identifier and for OTP verification during login and sensitive account actions).
• Full name as provided during registration or KYC verification. This is used to verify your identity and match against payment records.
• Date of birth, collected to verify that you meet the 21+ age eligibility requirement for using the cv994 Platform.
• Government-issued identity document details (collected only where KYC verification is required, such as before processing a withdrawal above a defined threshold).

Transaction and Payment Data

• Mobile wallet identifiers (bKash, Nagad, Rocket, or Upay account numbers) used to process deposits and withdrawals. cv994 does not store full payment credentials; only the wallet number and transaction reference are retained.
• Deposit and withdrawal amounts, timestamps, and processing status for each transaction. This data is retained for accounting, dispute resolution, and anti-money laundering compliance purposes.
• Bonus redemption history, including which promotions were claimed, when they were claimed, and the outcome of each rollover period. This is used for bonus fraud detection and promotional eligibility verification.
• Currency denomination of all transactions (Bangladeshi Taka, BDT). cv994 does not process transactions in foreign currencies or cryptocurrency.

Technical and Usage Data

When you access the cv994 Platform, we automatically collect certain technical data to ensure the Platform functions correctly and securely. This includes your device type, operating system version, browser type, IP address (used for geolocation at the country level only), session start and end times, pages visited, and error logs. This data is not used to build advertising profiles and is not shared with third-party marketing services.

3. How We Use Your Information

cv994 uses personal data only for the purposes listed below. We do not use your data for any purpose not described in this Policy without first obtaining your explicit consent.

• Account creation, verification, and ongoing management: to create and maintain your cv994 account, verify your identity in line with our KYC policy, and ensure that your account remains accessible and secure throughout your time with us.
• Transaction processing: to execute deposits, withdrawals, and bonus credits to and from your account via bKash, Nagad, Rocket, and Upay, and to maintain accurate financial records of all account activity.
• Platform security and fraud prevention: to detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, and any other activity that may violate our Terms and Conditions or applicable law.
• Customer support: to respond to queries, resolve disputes, and assist players who contact cv994 through our support channels. Support communications may be logged to improve service quality and for dispute resolution.
• Responsible gaming compliance: to monitor account activity for signs of problem gambling behaviour and to action responsible gaming tool requests, including deposit limits, session reminders, and self-exclusion orders.
• Legal and regulatory compliance: to fulfil our obligations under applicable anti-money laundering, KYC, and responsible gaming regulations, and to respond to lawful requests from regulatory authorities or law enforcement agencies.

4. Legal Basis for Processing

cv994 processes personal data on the following legal bases:

• Contractual necessity: Processing your registration data, transaction records, and account activity data is necessary to perform our contract with you as a player on the cv994 Platform.
• Legal obligation: Processing identity verification data (KYC), transaction records for anti-money laundering purposes, and responding to lawful regulatory requests are all necessary to comply with applicable legal obligations.
• Legitimate interests: Monitoring platform activity for fraud detection and security, and using technical data to improve Platform stability and performance, are processing activities carried out in pursuit of cv994's legitimate business interests, provided those interests do not override your fundamental rights.
• Consent: Where we send you optional service communications or promotional messages beyond what is required by your account contract, we will do so only on the basis of your explicit opt-in consent, which you may withdraw at any time by contacting support.

5. Sharing Your Information

cv994 does not sell, rent, or otherwise commercialise your personal information. We share personal data only in the limited circumstances described below, and only to the minimum extent necessary:

• Payment processing partners: Transactional data is shared with bKash, Nagad, Rocket, and Upay only to the extent required to process the specific deposit or withdrawal you have initiated. cv994 does not transmit your full account profile to payment partners; only the transaction-specific fields required by each payment service are shared.
• Certified game providers: Technical session identifiers may be shared with our licensed game providers (including Evolution Gaming, Ezugi, Pragmatic Play, Spribe, and Microgaming) solely to establish and maintain your game session. No personally identifiable financial or identity data is shared with game providers.
• Legal and regulatory authorities: cv994 will disclose personal data to governmental authorities, regulators, or law enforcement agencies where required to do so by applicable law, court order, or regulatory directive. We will, where legally permitted, notify you of such disclosure.
• Fraud prevention and security services: Anonymised or pseudonymised technical data may be shared with third-party fraud detection services where necessary to protect the integrity of the Platform and the safety of player funds.

In all cases where personal data is shared with a third party, cv994 requires that the recipient maintains appropriate data security standards and uses the shared data only for the specific purpose for which it was disclosed. cv994 remains accountable for the protection of your data in all sharing arrangements.

6. Payment Data and Mobile Wallet Privacy

cv994 processes payments exclusively through mobile financial services that are widely used in Bangladesh, including bKash, Nagad, Rocket, and Upay. When you make a deposit or request a withdrawal, cv994 transmits only the minimum data fields required by the relevant payment service to process the transaction — typically your registered wallet number, the transaction amount in BDT, and a transaction reference number generated by our system.

cv994 does not store your full mobile wallet PIN, password, or one-time-password (OTP). These are generated and consumed within your mobile device or the relevant payment app and are never transmitted to or stored on the cv994 Platform. If you believe your payment credentials have been compromised, you should contact your mobile financial service provider directly and immediately change your wallet PIN.

7. Cookies and Tracking Technologies

cv994 uses cookies and similar tracking technologies to ensure the Platform operates correctly, to maintain your login session, and to collect anonymised analytics data that helps us improve Platform performance. We do not use third-party advertising cookies or tracking pixels that report your browsing behaviour to external advertising networks.

Types of Cookies We Use

• Essential cookies: Required for the Platform to function. These include session cookies that keep you logged in during your visit and security cookies that help protect your account from cross-site request forgery attacks. Essential cookies cannot be disabled without impairing Platform functionality.
• Analytics cookies: Used to collect anonymised data about how players use the Platform — which pages are visited most, where navigation is abandoned, and where errors occur. This data is used solely to improve the cv994 Platform and is not shared with third-party analytics providers that serve advertising.
• Preference cookies: Store your language and display preferences so that cv994 can present the Platform in your preferred configuration on your next visit. These cookies do not contain personally identifiable information.

You may configure your browser to block or delete cookies. Please note that disabling essential cookies will impair your ability to log in and use the cv994 Platform. Analytics and preference cookies may be blocked without affecting your ability to access games or process transactions.

8. Data Retention

cv994 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply: active account data is retained for the lifetime of your account plus a minimum of 5 years following account closure, to satisfy anti-money laundering record-keeping requirements; transaction records are retained for a minimum of 5 years from the date of the transaction; KYC and identity verification documents are retained for a minimum of 5 years from the date of verification or account closure, whichever is later; technical and usage logs are retained for a maximum of 12 months, after which they are deleted or permanently anonymised.

When data is no longer required, cv994 securely destroys or permanently anonymises it in accordance with our internal data destruction procedures. You may request early deletion of your account data by contacting cv994 support; however, please note that data subject to a legal retention obligation cannot be deleted until the applicable retention period has expired.

9. Your Data Rights

As a cv994 player you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact cv994 support with your registered mobile number and a description of your request:

• Right of access: You may request a copy of the personal data cv994 holds about you. We will provide this within a reasonable timeframe, typically within 30 days of a verified request.
• Right to rectification: If you believe any personal data we hold about you is inaccurate or incomplete, you may request that we correct or complete it. We will act on verified correction requests promptly.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (where consent was the basis of processing), or where processing is unlawful. This right is subject to our legal retention obligations.
• Right to restrict processing: In certain circumstances you may request that we limit the way we use your personal data while a dispute or correction request is being resolved.
• Right to withdraw consent: Where cv994 processes your data on the basis of consent (for example, for optional marketing communications), you may withdraw that consent at any time by contacting support. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

cv994 will respond to all data rights requests within 30 days. In exceptional circumstances where a request requires additional time to process, we will notify you of the delay and the expected resolution date. We may ask you to verify your identity before acting on any data rights request.

10. Data Security

cv994 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, or destruction. Our security measures include SSL encryption for all data in transit between your device and our Platform; encrypted storage of account credentials, payment data, and identity documents; access controls that restrict personal data access to authorised cv994 personnel only, on a need-to-know basis; regular security reviews of our Platform infrastructure; and session timeout controls that automatically log out inactive accounts.

While cv994 takes all reasonable steps to protect your personal data, no internet-based platform can guarantee absolute security. In the event of a data security incident that affects your personal data, cv994 will notify affected players without undue delay and will take immediate steps to contain and remediate the incident. You play an important role in keeping your account secure: use a strong, unique password; do not share your login credentials; and log out after each session, particularly on shared or public devices.

11. Children and Minors

The cv994 Platform is strictly for adults aged 21 and above. cv994 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been submitted by or on behalf of a person under 21, we will delete that data immediately and close the associated account. If you are a parent or guardian and believe that a minor has registered on cv994, please contact our support team immediately so that we can take appropriate action without delay. 21+ only.

12. Changes to This Policy

cv994 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or Platform features. When a material change is made, we will update the "Last updated" date at the top of this document and, where the change significantly affects how we use your personal data, we will notify registered players directly. Your continued use of the cv994 Platform after the effective date of a revised Policy constitutes your acceptance of the changes. We encourage you to review this Policy periodically.

13. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data rights, or need to report a privacy concern, please contact the cv994 support team. Our support team is available 24 hours a day, 7 days a week and can assist players across Bangladesh, including those based in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. Contact email: [email protected] (plain text — not a clickable link).