cv96 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how cv96 ("cv96", "we", "us", "our") collects, uses, stores, and protects the personal information of users ("you", "your", "Player") who access the online casino and sports betting platform available at cv96.io. This Policy applies to all players accessing cv96 from Bangladesh, including residents of Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, and all other regions of Bangladesh.

cv96 is committed to handling personal data with care, transparency, and integrity. We operate as a safe and reliable platform and recognise that trust is built through honest, clear communication about how we manage your information. This Policy has been drafted in plain professional English to ensure that players can understand their rights and our obligations without difficulty.

This Policy should be read alongside the cv96 Terms & Conditions, which govern the broader contractual relationship between you and cv96. In the event of a conflict between this Policy and the Terms & Conditions on a privacy-related matter, this Policy shall prevail.

2. Data Controller

For the purposes of this Policy, cv96 acts as the data controller in respect of the personal information collected through the cv96.io platform. As data controller, cv96 determines the purposes for which and the means by which personal data is processed.

All data protection enquiries, access requests, correction requests, and deletion requests should be directed to our Data Protection contact point:

Email: [email protected]
Subject Line: Privacy Request — [Your Account Username]

We aim to acknowledge all privacy-related correspondence within 48 hours and to resolve substantive requests within 30 calendar days of receipt, subject to identity verification requirements.

3. Data We Collect

cv96 collects personal information through several channels: directly from you during registration and ongoing account use, automatically through platform interaction, and from third-party service providers where necessary. The categories of data collected are described below.

3.1 Registration and Identity Data

When you create a cv96 account, we collect the following information:

• Full legal name (as it appears on official identification documents)
• Date of birth (to verify that you are aged 21 or above)
• Residential address, including city, district, and postcode
• Mobile phone number (Bangladesh-registered)
• Email address
• Username and encrypted password

3.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) compliance process, we may request copies of the following documents:

• National Identity Card (NID) issued by the Bangladesh Election Commission
• Valid Bangladeshi passport (biographical data page)
• Bangladesh driving licence
• Proof of address (utility bill, bank statement, or mobile financial service statement dated within 90 days)
• Payment method verification (screenshot or confirmation of mobile wallet ownership)

3.3 Financial Transaction Data

We record all financial activity on your account, including:

• Deposit amounts, timestamps, and payment method references (bKash, Nagad, Rocket, Upay, Visa, Mastercard)
• Withdrawal requests, amounts, processing status, and destination payment references
• Wallet balance history and transaction logs
• Bonus credits, wagering activity, and promotional redemption records

cv96 does not store full card numbers, CVV codes, or complete mobile banking PINs. Payment method tokens used for processing are handled exclusively by our certified payment processing partners.

3.4 Gameplay and Behavioural Data

We collect data related to your use of the platform, including:

• Games played, bet amounts, game outcomes, and session durations
• Sports betting markets accessed, odds viewed, and wagers placed
• Platform features accessed and navigation patterns
• Device type, operating system, browser version, and screen resolution
• IP address and approximate geolocation (country and city level)
• Session start and end timestamps

3.5 Communications Data

When you contact cv96 support or interact with our team, we retain records of:

• Live chat transcripts
• Email correspondence sent to and received from [email protected]
• Support ticket logs including issue descriptions and resolution actions

4. How We Use Your Data

The table below summarises the primary purposes for which cv96 processes personal data, together with the category of data used for each purpose.

Purpose	Data Categories Used
Creating and managing your player account	Registration data, identity data
Verifying your identity and age (KYC compliance)	KYC documents, registration data
Processing deposits and withdrawals	Financial transaction data, identity data
Delivering and improving platform features and games	Gameplay and behavioural data
Detecting and preventing fraud, money laundering, and account abuse	All categories
Responsible gaming monitoring and intervention	Gameplay data, financial data, behavioural data
Delivering customer support and resolving disputes	Communications data, account data
Sending service notifications (account alerts, security notices)	Contact data, account data
Sending promotional communications (with your consent)	Contact data, gameplay data
Complying with legal and regulatory obligations	All categories as required by law

cv96 does not use personal data for automated decision-making that produces significant legal effects without human oversight. Where automated systems flag accounts for review (for example, fraud detection or responsible gaming alerts), a member of the cv96 compliance team reviews the case before any account action is taken.

5. Legal Basis for Processing

cv96 processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform our obligations under the Terms & Conditions, including account creation, transaction processing, and game delivery.
• Legitimate interests: Processing necessary for fraud prevention, security monitoring, platform analytics, and responsible gaming management, where those interests are not overridden by your privacy rights.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering regulations, identity verification requirements, and record-keeping obligations.
• Consent: Processing for optional purposes such as sending promotional communications. You may withdraw consent at any time by contacting [email protected] or adjusting your account notification preferences.

6. Data Sharing and Disclosure

cv96 does not sell, rent, or trade your personal data to third parties for commercial purposes. We share personal data only in the following limited circumstances:

6.1 Service Partners

We share data with third-party service providers who assist in operating the cv96 platform, including:

• Payment processors: bKash, Nagad, Rocket (Dutch-Bangla Bank), Upay, and card network partners (Visa, Mastercard), for the purpose of processing deposits and withdrawals
• Identity verification providers: KYC and anti-fraud technology partners who assist in document verification and age confirmation
• Game providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other certified studios, who receive session tokens and bet data necessary to operate individual game sessions
• Cloud infrastructure and hosting providers: Who provide the servers and databases on which the cv96 platform operates, under strict data processing agreements

All third-party service partners are bound by data processing agreements that prohibit them from using cv96 player data for their own commercial purposes and require them to implement appropriate security measures.

6.2 Legal and Regulatory Disclosure

cv96 may disclose personal data to law enforcement agencies, regulatory authorities, or courts where required to do so by applicable law, court order, or where we reasonably believe disclosure is necessary to prevent fraud, money laundering, or harm to individuals. We will notify affected players of such disclosures where legally permitted to do so.

6.3 Business Transfers

In the event of a merger, acquisition, asset sale, or restructuring of cv96's business operations, personal data held by cv96 may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and given the opportunity to delete their account if they do not consent to the new data controller's privacy practices.

7. Data Retention

cv96 retains personal data for as long as is necessary to fulfil the purposes set out in this Policy, subject to the following minimum and maximum retention periods:

• Active account data: Retained for the duration of the player's active account relationship with cv96.
• Account and transaction records following closure: Retained for a minimum of five years from the date of account closure, in accordance with record-keeping and anti-money laundering compliance requirements.
• KYC identity documents: Retained for a minimum of five years from the date of submission or account closure, whichever is later.
• Customer support communications: Retained for two years from the date of the last interaction, or for the duration of any unresolved dispute.
• Marketing consent records: Retained for the duration of the consent period plus one year following withdrawal of consent, for audit purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical and platform improvement purposes.

8. Security Measures

cv96 implements a layered security framework to protect personal data against unauthorised access, accidental loss, alteration, and disclosure. Our security measures include:

• SSL/TLS encryption: All data in transit between your browser or app and our servers is encrypted using TLS 1.2 or higher.
• Encryption at rest: Sensitive data fields, including identity document images and financial references, are encrypted in our databases using AES-256 or equivalent standards.
• Access controls: Access to personal data is restricted to cv96 staff and contractors who have a genuine operational need, governed by role-based access permissions.
• Two-factor authentication: Available for player accounts and mandatory for internal administrative systems.
• Regular security audits: cv96 conducts periodic security assessments and penetration testing to identify and remediate vulnerabilities.
• Incident response: cv96 maintains a data breach response procedure. In the event of a breach affecting player data, affected players will be notified promptly with details of what was affected and what remedial steps are being taken.

While cv96 takes all reasonable precautions, no online platform can guarantee absolute security. Players are advised to use strong, unique passwords for their cv96 accounts and to notify us immediately of any suspected unauthorised access.

9. Cookies and Tracking Technologies

cv96 uses cookies and similar technologies (collectively, "cookies") to support platform functionality, maintain your session, and improve the player experience. The following categories of cookies are in use:

9.1 Strictly Necessary Cookies

These cookies are essential for the platform to function. They maintain your login session, remember your language and display preferences, and protect against cross-site request forgery attacks. These cookies cannot be disabled without rendering the platform non-functional.

9.2 Analytical and Performance Cookies

These cookies help cv96 understand how players interact with the platform — which pages are visited most frequently, where players encounter errors, and how overall platform performance can be improved. Data collected by these cookies is aggregated and does not identify individual players. cv96 does not use third-party advertising analytics networks.

9.3 Functional Cookies

These cookies remember your preferences, such as your selected payment method, game lobby filters, and notification settings, to provide a more personalised experience during future sessions.

9.4 Managing Cookie Preferences

You can manage or disable non-essential cookies at any time through your browser settings. Please note that disabling analytical or functional cookies may affect the quality of your experience on the cv96 platform. Strictly necessary cookies cannot be disabled through browser settings without impacting platform functionality.

10. Your Privacy Rights

As a player based in Bangladesh using the cv96 platform, you have the following rights with respect to your personal data:

• Right of Access: You may request a copy of the personal data cv96 holds about you. We will provide this in a clear, readable format within 30 days of a verified request.
• Right to Rectification: If any personal data cv96 holds about you is inaccurate or incomplete, you may request that it be corrected. You may also update certain account details directly in your account settings.
• Right to Erasure: You may request deletion of your personal data. We will action this request subject to any legal obligations requiring us to retain certain records (see Section 7). Data that must be retained by law will be flagged and quarantined from operational use pending expiry of the retention period.
• Right to Restrict Processing: You may request that we temporarily restrict processing of your personal data while a correction request or objection is being assessed.
• Right to Data Portability: You may request a machine-readable copy of the personal data you have directly provided to cv96, for the purpose of transferring it to another service provider.
• Right to Object: You may object to processing carried out on the basis of cv96's legitimate interests. We will cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Request — [Your Account Username]". We may require you to verify your identity before processing your request.

11. Minors and Age Policy

cv96 is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the cv96 registration and KYC process. If cv96 discovers that an account has been registered by a person under 21, the account will be immediately suspended, all winnings will be forfeited, and any real-money balance will be returned to the payment source. The personal data of the underage individual will be deleted from our systems within 30 days of discovery, except where retention is required by law.

If you believe that a minor has registered on the cv96 platform, please notify us immediately at [email protected].

12. International Data Transfers

cv96 primarily operates its platform infrastructure to serve players in Bangladesh. In some cases, personal data may be processed by service partners operating in other countries — for example, game providers with servers located outside Bangladesh, or cloud infrastructure partners with data centres in multiple regions. Where personal data is transferred internationally, cv96 ensures that appropriate safeguards are in place, including contractual data protection clauses binding the recipient to privacy and security standards consistent with those described in this Policy.

By using the cv96 platform, you acknowledge that your data may be processed in jurisdictions outside Bangladesh. cv96 will not transfer personal data to countries that do not maintain adequate data protection standards without implementing appropriate contractual safeguards.

13. Changes to This Privacy Policy

cv96 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will notify registered players via email to the address on file and display a prominent notice on the platform upon login. The updated Policy will display the revised effective date at the top of this page.

Continued use of the cv96 platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you may close your account and withdraw your remaining balance before the changes take effect. Account closure requests can be submitted by emailing [email protected].

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by cv96, please contact us using the details below. Our support team is available 24 hours a day, seven days a week.

Email: [email protected]

Subject Line Format: Privacy Request — [Your Account Username]

Response Time: We acknowledge all privacy-related enquiries within 48 hours and aim to resolve substantive requests within 30 calendar days, subject to identity verification requirements.

This Privacy Policy was last reviewed and updated on 1 January 2026. cv96 reserves the right to update this Policy at any time. Continued use of the platform constitutes acceptance of the current Policy.