cv997 Privacy Policy

1 Data We Collect

cv997 collects personal data in several ways: directly from you when you register or use the platform, automatically through your interaction with the website, and occasionally from third-party sources such as payment processors and fraud-prevention services. Below is a full account of the categories of personal data we collect.

1.1 Registration & Account Data

When you create a cv997 player account, we collect the following information:

• Full legal name as it appears on your government-issued identification
• Date of birth (used to verify that you are aged 18 or above)
• Email address
• Bangladesh mobile number (used for SMS OTP and account communications)
• Preferred currency (Bangladeshi Taka — ৳)
• Username and encrypted password
• Residential address in Bangladesh (required for enhanced KYC verification)

1.2 Identity Verification (KYC) Data

To comply with anti-money-laundering (AML) requirements and to verify player age, cv997 collects the following KYC documents:

• National ID Card (NID) — both front and back scan/photograph
• Valid Bangladeshi passport (photo page)
• Bangladesh driving licence
• Proof of address — utility bill, bank statement, or similar official document dated within 90 days
• Source of funds documentation — where required for higher-volume accounts

1.3 Financial & Transaction Data

cv997 records all financial transactions conducted through the platform, including:

• Deposit amounts, timestamps, and payment methods (bKash, Nagad, Rocket, Upay, bank transfer, card)
• Withdrawal requests, amounts, and destination payment method references
• Bet history — game name, bet amount, outcome, and timestamp
• Account balance history
• Bonus credits, wagering activity, and promotional participation records

cv997 does not store full card numbers or full mobile banking PINs. Payment method tokenisation is used where applicable, and sensitive payment credentials are handled exclusively by our payment processing partners.

1.4 Technical & Usage Data

When you access the cv997 platform, our systems automatically collect the following technical data:

1.5 Communications Data

If you contact cv997 support via live chat or email, we retain a record of the communication, including your name, contact details, the subject matter of your enquiry, and the response provided. This data is used to handle your support request, improve service quality, and maintain audit trails.

2 How We Use Your Data

cv997 uses personal data only for legitimate, specified purposes. The table below sets out the primary purposes for which we process your data and the legal basis for each.

cv997 does not use automated decision-making or profiling in a way that produces significant legal effects on players, except where required for fraud detection and responsible gaming intervention — in which case affected players will be notified and provided with an opportunity to contest the decision.

3 Data Sharing & Disclosure

cv997 does not sell, rent, or trade your personal data. We share personal data only in the following circumstances and only to the extent necessary for each purpose.

3.1 Service Providers

cv997 engages a limited number of third-party service providers who process personal data on our behalf under strict data processing agreements. These include:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and card processors — to facilitate deposits and withdrawals
• KYC verification providers: Third-party identity verification platforms that assist with document authentication
• Game providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi — game outcome data is shared with providers for game integrity and dispute resolution purposes
• Analytics providers: Web analytics platforms that process aggregated usage data to help cv997 improve its platform
• Email and SMS delivery providers: Platforms that send transactional and marketing communications on cv997's behalf
• Fraud prevention services: Specialist services that assist cv997 in detecting and preventing fraudulent account activity

All service providers are contractually required to process personal data only on cv997's documented instructions and to maintain security measures commensurate with the sensitivity of the data handled.

3.2 Legal Disclosure

cv997 may disclose personal data to governmental authorities, law enforcement agencies, or regulatory bodies when required to do so by applicable law, court order, or lawful request. cv997 will, where legally permitted, notify the affected player of any such request before disclosure is made.

3.3 Business Transfers

In the event that cv997 undergoes a merger, acquisition, or sale of all or substantially all of its assets, personal data held by cv997 may be transferred to the acquiring entity as part of that transaction. Affected players will be notified by email in advance of any such transfer, and the acquiring entity will be required to honour this Privacy Policy or obtain fresh consent where required.

4 Cookies & Tracking

cv997 uses cookies and similar tracking technologies on the cv997.org website. A cookie is a small text file stored on your device by your browser when you visit a website. Cookies allow cv997 to recognise your device on subsequent visits, maintain your session, and personalise your experience.

4.1 Types of Cookies Used

4.2 Managing Cookies

Strictly necessary cookies cannot be disabled as they are essential for the cv997 platform to function correctly. You may disable functional, analytics, and marketing cookies at any time by adjusting your browser settings. Most modern browsers allow you to block or delete cookies via their privacy or settings menu. Please note that disabling cookies may affect the functionality of certain cv997 features, including session persistence and personalised game recommendations.

5 Data Security

cv997 implements a layered security architecture to protect personal data against unauthorised access, loss, alteration, and disclosure. Our security measures include, but are not limited to:

• 256-bit SSL/TLS encryption on all data in transit between your device and cv997 servers
• AES-256 encryption for sensitive data at rest, including KYC documents and financial records
• Role-based access controls ensuring that only authorised personnel can access specific categories of personal data
• Two-factor authentication (2FA) available for all player accounts and mandatory for cv997 staff accounts accessing administrative systems
• Regular penetration testing and vulnerability assessments conducted by independent security specialists
• Intrusion detection systems monitoring for anomalous access patterns in real time
• Data minimisation — cv997 collects only the personal data necessary for the stated purpose
• Secure password hashing using industry-standard algorithms — cv997 does not store passwords in plain text

Despite these measures, no online platform can guarantee absolute security. In the event of a data security incident that is likely to result in significant harm to affected players, cv997 will notify impacted individuals as promptly as practicable, with details of the nature of the incident and the steps being taken to mitigate its effects.

6 Data Retention

cv997 retains personal data for as long as your account is active and for a defined period after account closure, as required by applicable law and legitimate operational needs. The table below outlines our standard retention periods by data category.

At the end of the applicable retention period, personal data is securely deleted or anonymised in a manner that ensures it can no longer be attributed to an identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical and business intelligence purposes.

7 Your Privacy Rights

As a cv997 player, you have the following rights with respect to your personal data. To exercise any of these rights, contact the cv997 support team at [email protected]. We will respond to all verifiable requests within 30 days.

7.1 Right of Access

You have the right to request a copy of the personal data cv997 holds about you. Upon receipt of a verified access request, cv997 will provide a summary of your personal data within 30 days at no charge. Where a request is manifestly excessive or repetitive, a reasonable administrative fee may be applied.

7.2 Right to Rectification

If any personal data cv997 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Where possible, you may update certain account details (such as your email address or phone number) directly through your cv997 account settings. For corrections to legal name or date of birth, you will be required to submit updated identity documentation.

7.3 Right to Erasure

You may request the deletion of your personal data. cv997 will act on erasure requests where the data is no longer necessary for the purpose for which it was collected, where consent has been withdrawn and no other lawful basis applies, or where the data has been processed unlawfully. Erasure requests cannot be fulfilled where cv997 is required by law to retain the data — for example, financial transaction records subject to AML retention obligations.

7.4 Right to Restrict Processing

You may request that cv997 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested, or while an objection to processing is being assessed. During a restriction, cv997 may store the data but will not actively process it beyond what is required for legal compliance.

7.5 Right to Object

You have the right to object to cv997 processing your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, though cv997 may be able to demonstrate compelling grounds that override your objection in certain cases.

7.6 Right to Data Portability

Where cv997 processes your personal data on the basis of your consent or for contract performance, and where the processing is carried out by automated means, you have the right to receive a machine-readable copy of the data you provided to cv997. This right covers registration data and transaction history and does not extend to data derived or inferred by cv997 from your use of the platform.

8 Contact & DPO

If you have any questions, concerns, or requests relating to this Privacy Policy or the way cv997 handles your personal data, please contact the cv997 Data Protection team using the details below.

8.1 General Privacy Enquiries

For general privacy questions, data access requests, erasure requests, and marketing opt-out requests, contact the cv997 support team:

• Email (plain text — not a link): [email protected]
• Support Hours: 24/7, Bangladesh Standard Time (UTC+6)
• Response Time: Within 30 days for formal data rights requests; within 24 hours for general enquiries

8.2 Policy Updates

cv997 reserves the right to update this Privacy Policy at any time. When material changes are made, cv997 will notify registered players by email to their registered address and will display a prominent notice on the cv997.org website. The effective date at the top of this Policy will be updated accordingly. Your continued use of the cv997 platform following notification of any changes constitutes acceptance of the updated Privacy Policy.

8.3 Children's Privacy

The cv997 platform is strictly for adults aged 18 and above. cv997 does not knowingly collect personal data from individuals under the age of 18. If you believe that a minor has submitted personal data to cv997, please contact [email protected] immediately. Upon confirmed discovery that personal data has been collected from a minor, cv997 will delete that data promptly and permanently close the relevant account.

Thank you for trusting cv997 with your personal information. We take that trust seriously and remain committed to protecting your privacy at every step of your experience on our platform. For any privacy-related matter, do not hesitate to reach out to our team at [email protected].