cv99bd Privacy
Policy
At cv99bd, we take your privacy seriously. This Privacy Policy explains exactly what personal data we collect when you use the cv99bd platform, how we use it, who we share it with, how long we keep it, and what rights you have over your own information. We are committed to full transparency on every aspect of data handling — no hidden clauses, no vague language.
Section 1
Data We Collect
cv99bd collects personal data from you in three main ways: directly when you provide it during registration or account use, automatically when you interact with the platform, and from verified third-party sources as part of our identity verification and fraud-prevention obligations. Below is a comprehensive overview of the categories of data we collect.
| Data Category | Specific Data Points Collected | Collection Method |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, national ID number, passport number or driving licence number (for KYC) | Provided directly by you at registration or KYC verification |
| Contact Data | Email address, mobile phone number, residential address (city, district, postal code) | Provided directly by you at registration or in account settings |
| Financial Data | bKash / Nagad / Rocket / Upay account numbers; Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank account details; deposit amounts; withdrawal amounts; transaction history | Provided directly by you when making deposits or requesting withdrawals |
| Account Data | Username, encrypted password hash, account balance, bonus balance, wagering history, session history, preferred currency (BDT), communication preferences | Generated automatically when your account is created and used |
| Technical Data | IP address, device type, operating system, browser type and version, screen resolution, time zone, device fingerprint, mobile network operator | Collected automatically via server logs and browser APIs when you access the platform |
| Usage Data | Pages visited, games played, bets placed, session duration, click paths, search queries within the platform, feature interactions | Collected automatically via analytics tools and event tracking |
| Communication Data | Live chat transcripts, support email threads, feedback submissions, and any other communications you send to cv99bd | Collected when you contact cv99bd support |
| KYC Document Data | Scanned or photographed copies of government-issued photo ID and proof-of-address documents submitted for identity verification | Provided directly by you when completing the KYC verification process |
cv99bd does not collect special category personal data (such as racial or ethnic origin, political opinions, religious beliefs, or health data) except where such data is incidentally disclosed in a support communication or self-exclusion request — in which case it is handled with heightened care and used solely for the purpose of fulfilling the relevant support or responsible gaming obligation.
We do not collect or store full payment card numbers. All financial data relating to mobile banking transactions (bKash, Nagad, Rocket, Upay) is tokenised by the respective payment processor and we retain only a masked reference identifier for reconciliation purposes.
Section 2
How We Use Your Data
cv99bd uses your personal data only for clearly defined, legitimate purposes. We do not sell your data to any third party, and we do not use your data for purposes unrelated to the operation of the cv99bd platform. The specific purposes for which we use each category of data are set out below.
Account Management
We use your identity and contact data to create and maintain your cv99bd account, verify your identity during login, process KYC verification, send account-related notifications (deposit confirmations, withdrawal approvals, security alerts), and provide customer support.
Payment Processing
We use your financial data to process deposits via bKash, Nagad, Rocket, Upay, and bank transfers; to process withdrawal requests to your verified payment method; and to maintain an accurate transaction history for your account and for our financial reconciliation obligations.
Fraud & AML Compliance
We use identity, financial, and technical data to detect and prevent fraud, money laundering, bonus abuse, account takeover attacks, underage gambling, and other prohibited activities. This includes automated screening against fraud indicators and manual review of flagged accounts.
Platform Improvement
We use anonymised usage and technical data to analyse how players interact with the cv99bd platform, identify areas for improvement in the user interface and game offering, diagnose technical errors, and optimise platform performance — particularly for users on mobile networks in Bangladesh.
Personalised Promotions
With your consent, we use your account and usage data to personalise promotional offers — including welcome bonuses, reload bonuses, free spins, and seasonal offers tied to BPL, Eid, Pohela Boishakh, and T20 World Cup — that are relevant to your gaming activity and preferences.
Responsible Gaming
We use account and usage data to monitor for indicators of problem gambling behaviour — such as rapidly escalating deposit amounts, unusually long session times, or repeated failed self-exclusion bypasses — and to enforce deposit limits, time-out periods, and self-exclusion requests in accordance with our Responsible Gaming Policy.
Section 3
Legal Basis for Processing
cv99bd processes your personal data only where a valid legal basis exists for doing so. Depending on the purpose, we rely on one or more of the following legal bases:
- Contractual necessity: Processing your identity, contact, and financial data is necessary to perform the contract between you and cv99bd — namely, operating your account, processing deposits and withdrawals, and providing access to games and promotions. Without this processing, we cannot provide the service.
- Legal obligation: Processing your identity and financial data for KYC verification, age verification, anti-money-laundering screening, and transaction record-keeping is necessary for cv99bd to comply with its legal and regulatory obligations.
- Legitimate interests: Processing your technical and usage data for fraud prevention, platform security, and service improvement is justified by cv99bd's legitimate interest in maintaining a safe, fair, and well-functioning platform for all players. We have assessed that these legitimate interests are not overridden by your privacy rights.
- Consent: Processing your contact data for personalised marketing communications (including promotional emails and SMS notifications) is based on your freely given, specific, and informed consent. You may withdraw your consent for marketing communications at any time by updating your notification preferences in your account settings or by contacting support.
Where processing is based on consent, withdrawal of that consent does not affect the lawfulness of any processing carried out prior to the withdrawal. Withdrawal of consent for marketing will not affect your ability to use the cv99bd platform or access your account.
Section 4
Data Sharing & Third Parties
cv99bd does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share your data only in the specific circumstances described below, and only to the extent necessary for the stated purpose.
| Recipient Category | Purpose of Sharing | Data Shared |
|---|---|---|
| Payment Processors | Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and partner banks | Name, mobile number or bank account reference, transaction amount |
| KYC / Identity Verification Providers | Automated identity document verification and age confirmation | Name, date of birth, ID document images, address |
| Game Studio Providers | Delivering game content (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) | Anonymised player session token; no personally identifiable data is shared with game studios |
| Fraud & AML Screening Services | Automated screening of transactions and account activity against fraud and money-laundering indicators | Name, IP address, device fingerprint, transaction patterns |
| Cloud Infrastructure Providers | Hosting platform data, databases, and backups on secure cloud servers | All data categories — accessed only by authorised infrastructure personnel under strict access controls |
| Legal & Regulatory Authorities | Compliance with legal obligations, responding to lawful requests, reporting suspected financial crime | Data as required by the specific legal request or obligation |
| Analytics Providers | Analysing platform usage patterns to improve UX and performance | Anonymised and aggregated usage and technical data only — no personally identifiable data |
All third-party service providers who process personal data on behalf of cv99bd are bound by data processing agreements that require them to handle your data securely, use it only for the purpose for which it was shared, and comply with applicable data protection standards. cv99bd remains responsible for the data shared with these providers.
Section 6
Data Retention
cv99bd retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years after closure | AML compliance, legal record-keeping obligations, and dispute resolution |
| Financial Transaction Records | 7 years from the date of each transaction | Financial record-keeping and anti-money-laundering regulatory requirements |
| KYC Documents | 5 years from account closure | Identity verification record-keeping and regulatory compliance |
| Support Communications | 3 years from the date of the last communication | Quality assurance, dispute resolution, and training purposes |
| Technical & Usage Logs | 13 months from collection date | Platform analytics, security investigation, and fraud pattern detection |
| Marketing Consent Records | Duration of consent + 3 years after withdrawal | Demonstrating lawful basis for marketing communications |
| Self-Exclusion Records | Duration of exclusion + 7 years | Responsible gaming obligations and prevention of re-registration during exclusion period |
After the applicable retention period has expired, personal data is securely deleted or permanently anonymised in accordance with cv99bd's data destruction procedures. Anonymised data (from which you cannot be identified) may be retained indefinitely for statistical and analytical purposes.
Section 7
Your Privacy Rights
cv99bd respects your rights over your own personal data. As a user of the cv99bd platform, you have the following rights with respect to the personal data we hold about you. To exercise any of these rights, contact our support team via Live Chat or at [email protected]. We will respond to all valid requests within 30 days.
Section 8
Data Security
cv99bd employs industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Our security infrastructure includes the following safeguards:
- 256-bit SSL/TLS encryption: All data transmitted between your device and the cv99bd platform is encrypted using 256-bit SSL/TLS encryption. Look for the padlock icon and "https://" in your browser address bar to confirm the secure connection is active.
- Encrypted data storage: All sensitive personal data — including identity documents and financial references — is encrypted at rest using AES-256 encryption in our cloud storage infrastructure. Encryption keys are managed separately from the encrypted data.
- Password hashing: Account passwords are never stored in plain text. They are hashed using a strong one-way cryptographic algorithm (bcrypt with an appropriate cost factor) so that even in the event of a data breach, passwords cannot be recovered from stored hash values.
- Role-based access controls: Access to personal data within cv99bd's internal systems is strictly role-based. Only personnel who require access to personal data to perform their specific job function are granted access , and all access events are logged for audit purposes.
- Two-factor authentication (2FA): cv99bd supports two-factor authentication for player accounts. We strongly recommend enabling 2FA via your account security settings to add an additional layer of protection against unauthorised access.
- Regular security audits: Our platform undergoes regular internal and third-party security assessments, including penetration testing and vulnerability scanning, to identify and remediate security weaknesses before they can be exploited.
- DDoS protection and WAF: cv99bd's infrastructure is protected by a Web Application Firewall (WAF) and distributed denial-of-service (DDoS) mitigation services to ensure platform availability and protect against network-level attacks.
- Incident response procedures: cv99bd maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify affected players as soon as practicable and take all necessary remedial action.
While cv99bd takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You also have a responsibility to keep your account credentials confidential. Do not share your cv99bd username or password with anyone. If you suspect your account has been compromised, contact our support team immediately via Live Chat or at [email protected].
Section 9
Third-Party Links
The cv99bd platform may contain references to third-party services such as bKash, Nagad, Rocket, Upay, and game studio providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These services operate independently of cv99bd and have their own privacy policies governing the collection and use of personal data in connection with their own platforms.
cv99bd is not responsible for the privacy practices of any third-party service providers. We encourage you to review the privacy policies of any third-party service you interact with — particularly your mobile banking provider (bKash, Nagad, Rocket, or Upay) — before submitting personal data to those services. cv99bd's Privacy Policy applies solely to data processed by cv99bd on the cv99bd platform.
In the context of game delivery, third-party game studios receive only an anonymised session token to initiate your game session. They do not receive your name, contact details, financial data, or any other personally identifying information from cv99bd. The gameplay experience delivered by these studios is subject to their own end-user terms, but the personal data exchange between cv99bd and game studios is strictly limited as described in Section 4 of this Privacy Policy.
Section 10
Policy Updates
cv99bd reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law or regulation, or improvements to the platform that affect how personal data is handled. The effective date shown at the top of this page will be updated whenever a new version is published.
When we make material changes to this Privacy Policy — for example, changes to the categories of data we collect, the purposes for which we use it, or the third parties with whom we share it — we will notify registered players by email to the address associated with their account and by displaying a prominent notice on the cv99bd platform for a period of at least 14 days before the changes take effect.
Your continued use of the cv99bd platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with the updated Privacy Policy, you should stop using the platform and contact support to request account closure. We will retain your data following closure in accordance with the retention periods set out in Section 6 above.
For minor, non-material changes — such as clarifications of existing wording, corrections of typographical errors, or updates to contact details — we may update the Privacy Policy without sending a direct notification, relying instead on the updated effective date as notice of the revision.
Play at cv99bd with Confidence
Your privacy is protected every step of the way. Now that you understand how cv99bd handles your data, explore our games, promotions, and cricket betting — all secured with 256-bit SSL encryption. 18+ only. Play responsibly.