cbv999 Privacy Policy

1 Introduction & Scope

cbv999 ("we", "us", "our") operates Bangladesh's trusted online gaming platform at cbv999.net. In the course of providing cricket betting, live casino, slots, and related entertainment services to players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, and other regions of Bangladesh, we collect and process personal data. We take that responsibility seriously.

This Privacy Policy sets out in plain, accessible English:

• What categories of personal data cbv999 collects from you;
• The purposes for which that data is collected and processed;
• How long we retain your data and under what circumstances we delete it;
• With whom we may share your data and under what safeguards;
• The security measures we have in place to protect your information; and
• The rights you have in relation to your personal data and how to exercise them.

This Policy is incorporated by reference into cbv999's Terms & Conditions. By registering a cbv999 account or using the Platform in any capacity, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, you should not use the Platform.

1.1 Changes to This Policy

cbv999 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform functionality. When material changes are made, we will publish the revised Policy on this page with an updated effective date and notify registered players via their registered email address. Your continued use of the Platform after the revised Policy takes effect constitutes your acceptance of the updated terms.

1.2 Age Restriction

The cbv999 Platform is strictly for adults aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. If we become aware that a person under 18 has submitted personal data to cbv999, we will promptly delete that data and close the associated account. If you are a parent or guardian and believe your child has registered on cbv999, please contact our support team immediately at [email protected].

2 Data We Collect

cbv999 collects personal data from you through several channels: directly when you register or interact with the Platform, automatically when you browse or play, and (in limited circumstances) from third-party verification or payment partners. The categories of data we collect are described below.

2.1 Registration & Account Data

When you create a cbv999 account, we collect:

• Your full legal name;
• Date of birth (for age verification — 18+ only);
• Residential address (district, city, postal code);
• A valid Bangladeshi mobile number;
• An email address (optional but recommended for account recovery);
• A username and hashed password of your choosing.

2.2 Identity Verification (KYC) Data

If cbv999 requires you to complete a Know Your Customer (KYC) verification check, we may collect and process copies of:

• Your National Identity Card (NID) or passport;
• A recent utility bill or bank statement as proof of address;
• A screenshot or reference confirming ownership of your registered bKash, Nagad, or Rocket mobile number.

KYC documents are processed solely for the purpose of confirming your identity and age, and are stored in an encrypted document repository accessible only to cbv999's compliance team.

2.3 Financial Transaction Data

When you make a deposit or withdrawal, we log the following transactional data:

• Payment method type (e.g., bKash, Nagad, Rocket, Upay, bank transfer, Visa, Mastercard);
• Transaction amount in BDT (৳) and a unique transaction reference number;
• Date and time of the transaction (in BST, UTC+6);
• Transaction status (pending, confirmed, failed, reversed).

We do not store full card numbers, full bKash PINs, or other sensitive payment credentials. These are handled exclusively by our payment processing partners using tokenised flows.

2.4 Gameplay & Betting Activity Data

To deliver our gaming services and maintain fair play, we record:

• All bets placed, including stake amount, game or market selected, odds, and outcome;
• Game session data including session start and end times, rounds played, and game titles accessed;
• Bonus credits claimed, wagering progress, and bonus outcomes;
• Account balance changes and historical statements.

2.5 Device & Technical Data

When you access cbv999, our servers automatically collect:

Data Type	Purpose
IP address	Fraud detection, geographic access controls, and security logging
Device type & OS	Platform optimisation and mobile compatibility
Browser type & version	Compatibility testing and session management
Pages visited & time on page	Improving user experience and Platform navigation
Referring URL	Understanding how players find cbv999
Session cookies & local storage tokens	Maintaining authenticated sessions and user preferences

2.6 Support & Communication Data

When you contact cbv999's support team via live chat, email, or WhatsApp, we retain a record of the communication including the content of messages, the date and time of contact, and the resolution outcome. This data is used to provide effective customer service and to train our support team.

3 How We Use Your Data

cbv999 processes your personal data only for legitimate, clearly defined purposes. We do not process data in ways that are incompatible with the purposes for which it was originally collected. Our primary purposes are:

3.1 Delivering and Maintaining the Platform

Your account data, gameplay data, and session data are essential for providing the cbv999 Platform service. Without this data, we cannot maintain your account, process your bets, apply bonuses, or deliver winnings. This processing is carried out on the legal basis of contractual necessity — it is required to fulfil the agreement between cbv999 and you as a registered player.

3.2 Identity Verification and Fraud Prevention

cbv999 processes your KYC documents and transaction data to verify your identity, confirm your age (18+), detect and prevent fraudulent activity, and identify potential money laundering. This processing is necessary for compliance with applicable legal and regulatory obligations and cbv999's own fraud-prevention policies.

3.3 Processing Payments

Financial transaction data is processed to facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and other supported payment channels. This processing is necessary for the performance of our contract with you. We share transactional references with our payment partners strictly to the extent required to complete each transaction.

3.4 Responsible Gaming Monitoring

cbv999 analyses gameplay patterns, session duration, and betting frequency to identify players who may be exhibiting signs of problem gambling. This processing is carried out in the interest of player welfare and to fulfil our responsible gaming obligations. If our systems flag a concern, our responsible gaming team may proactively reach out to offer support resources. Refer to our Responsible Gaming page for details.

3.5 Personalised Experience and Promotions

With your consent, cbv999 may use your gameplay history and preferences to personalise game recommendations, display relevant promotions (such as cricket-season bonus offers during the BPL or IPL), and tailor the Platform experience to your interests. You may withdraw this consent at any time through your account settings or by contacting support.

3.6 Customer Support

Communication data collected via live chat, email, and WhatsApp is processed to respond to your enquiries, resolve disputes, and improve our support service quality. Support records are retained for a period consistent with our data retention schedule (see Section 6).

3.7 Legal Compliance and Regulatory Obligations

cbv999 may be required to process and disclose your personal data to comply with a court order, legal process, or instruction from a competent law enforcement authority or regulatory body. We will only disclose data to the extent required by law and will inform you of such disclosure where legally permissible.

4 Data Sharing & Third Parties

4.1 Payment Processing Partners

To process deposits and withdrawals, cbv999 shares limited transaction data (amount, reference, account identifier) with our payment processing partners including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and card acquirers. These partners operate under their own privacy policies and are independently regulated as licensed financial service providers in Bangladesh.

4.2 Game Providers

Games available on cbv999 are provided by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you launch a game, a session token and anonymised player identifier may be shared with the relevant game provider to initialise the game session. Game providers do not receive your full name, NID number, or payment details.

4.3 Identity Verification Providers

cbv999 may use third-party KYC and identity verification service providers to validate documents submitted during the verification process. These providers act as data processors under contractual data-processing agreements and may only use your data for the purpose of completing the requested verification check.

4.4 Analytics and Platform Improvement

cbv999 uses aggregated, anonymised analytics data to understand Platform usage trends, identify performance issues, and improve the user experience. Where third-party analytics tools are used, they receive only anonymised or pseudonymised data and are prohibited from using that data for any purpose other than providing their analytics service to cbv999.

4.5 Legal and Regulatory Disclosures

cbv999 may disclose your personal data to law enforcement agencies, regulatory authorities, or courts where required by a legally binding obligation, court order, or where cbv999 reasonably believes disclosure is necessary to protect the safety of any person, detect or prevent fraud, or enforce these Terms and Conditions.

4.6 Business Transfers

In the event that cbv999 undergoes a merger, acquisition, or sale of all or substantially all of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer via email or a prominent notice on the Platform prior to your data being transferred and becoming subject to a different privacy policy.

5 Cookies & Tracking Technologies

cbv999 uses cookies and similar browser-based storage technologies to operate the Platform, maintain your authenticated session, remember your preferences, and understand how players navigate the site. This section explains the categories of cookies we use and how you can manage them.

5.1 Cookie Categories

Category	Purpose	Duration
Strictly Necessary	Required for Platform operation — session management, authentication tokens, CSRF protection. Cannot be disabled without breaking the site.	Session / up to 24 hours
Functional	Remembers your language preference, display settings, and last-visited game category to personalise your experience on return visits.	Up to 90 days
Analytics	Collects anonymised data on page views, navigation paths, and feature usage to help cbv999 improve the Platform.	Up to 12 months
Responsible Gaming	Stores locally set session-time reminders and self-imposed deposit limit acknowledgements to support responsible gaming tools.	Persistent until cleared

5.2 Managing Cookies

You can manage or disable cookies through your browser settings. Most modern browsers allow you to block or delete cookies, or to receive a notification before a cookie is set. Please be aware that disabling strictly necessary cookies will prevent you from logging in to your cbv999 account and using core Platform features. For guidance on managing cookies in your specific browser, refer to the browser's official help documentation.

6 Data Retention

cbv999 retains personal data only for as long as is necessary for the purposes described in this Policy or as required by applicable law. The table below outlines our standard retention periods by data category.

Data Category	Retention Period	Basis
Account registration data	Duration of active account + 5 years after closure	Legal compliance & dispute resolution
KYC verification documents	5 years from date of verification	Anti-money laundering obligations
Financial transaction records	7 years from date of transaction	Financial record-keeping requirements
Gameplay & betting records	3 years from date of last activity	Dispute resolution & fair play auditing
Support communication records	2 years from date of last communication	Quality assurance & dispute records
Analytics & session logs	12 months on a rolling basis	Platform improvement (anonymised)
Marketing consent records	Until consent is withdrawn + 1 year	Demonstrating lawful processing basis

When the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be linked to an individual. Where you request deletion of your data before the end of an applicable retention period, cbv999 will delete all data that is not subject to a legal retention obligation and will inform you of any data that must be retained and the reason why.

7 Data Security

cbv999 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security programme includes the following controls:

7.1 Encryption in Transit and at Rest

All data transmitted between your device and cbv999 servers is encrypted using 256-bit TLS (Transport Layer Security). Account passwords are stored using a one-way bcrypt hashing algorithm — cbv999 staff cannot read your password. Sensitive data fields in our database (including NID numbers and financial reference data) are encrypted at rest using AES-256.

7.2 Access Controls

Access to cbv999's production systems and player data is restricted to authorised personnel only, on a strict need-to-know basis. All administrative access is authenticated via multi-factor authentication (MFA) and logged. Access privileges are reviewed quarterly and revoked immediately upon role change or employment termination.

7.3 Payment Security

cbv999 does not store full payment card numbers on its servers. Card transactions are processed through PCI-DSS compliant payment gateways. Mobile financial service transactions (bKash, Nagad, Rocket, Upay) use tokenised references rather than storing wallet credentials or PINs.

7.4 Vulnerability Management

cbv999 conducts regular security assessments of the Platform, including automated vulnerability scanning and periodic penetration testing by independent security professionals. Critical vulnerabilities are patched on an emergency basis; non-critical findings are addressed within a defined remediation timeline.

7.5 Data Breach Response

In the event of a confirmed personal data breach that is likely to result in a risk to affected individuals' rights and freedoms, cbv999 will notify affected players via their registered email address without undue delay and will take immediate steps to contain, investigate, and remediate the breach. cbv999 will cooperate with relevant authorities as required.

8 Your Privacy Rights

As a cbv999 player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us using the details in Section 9. We will respond to all valid requests within 30 days.

8.1 Right of Access

You have the right to request a copy of the personal data cbv999 holds about you. Upon a verified access request, we will provide a structured summary of your account data, transaction history, and any KYC records held. This is sometimes called a Subject Access Request (SAR).

8.2 Right to Rectification

If any personal data cbv999 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. For account details such as your mobile number or address, you can update these directly in your account settings. For KYC documents, please contact our support team.

8.3 Right to Erasure

You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (where processing is based on consent), or where no overriding legal basis exists for continued processing. Please note that cbv999 may be required to retain certain data to fulfil legal obligations (see Section 6), in which case we will inform you of what data must be retained and why.

8.4 Right to Restrict Processing

You have the right to request that cbv999 restrict the processing of your data in certain circumstances — for example, where you contest the accuracy of the data while cbv999 verifies it, or where you object to processing and cbv999 is assessing whether a legitimate overriding basis exists.

8.5 Right to Data Portability

Where cbv999 processes your data on the basis of your consent or to perform a contract with you, and the processing is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format. This allows you to transfer your data to another service provider where technically feasible.

8.6 Right to Object

You have the right to object to cbv999 processing your personal data for direct marketing purposes (including personalised game recommendations or promotional communications). You may exercise this right at any time by updating your communication preferences in your account settings or by contacting support. Upon receiving a valid objection to marketing, cbv999 will cease that specific processing immediately.

8.7 Right to Withdraw Consent

Where cbv999 relies on your consent as the legal basis for processing (for example, sending you promotional offers by email or SMS), you have the right to withdraw that consent at any time without affecting the lawfulness of processing that took place before the withdrawal.

9 Contact & Data Queries

If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or have a concern about how cbv999 handles your personal data, please contact our Data Privacy team using the details below. All privacy-related enquiries are treated with strict confidentiality.

• Email: [email protected] (subject line: "Privacy Request — [Your Username]")
• Live Chat: Available 24/7 via the cbv999 Platform
• WhatsApp: +880 1700-000000
• Response Time: We aim to acknowledge all privacy requests within 3 business days (BST, UTC+6) and provide a full response within 30 calendar days.

When submitting a privacy request, please provide your registered username or mobile number so we can verify your identity before processing the request. We may ask for additional verification information if the request involves access to or deletion of sensitive account data.