Data Protection Last Updated: January 2026 256-bit SSL

cv99ap Privacy Policy

Your privacy matters to us. This policy explains exactly what personal data cv99ap collects from players in Bangladesh, how it is used, how it is protected, and what rights you hold over your information.

📅 Effective Date: 1 January 2026

1. Introduction and Scope

This Privacy Policy ("Policy") describes how cv99ap ("we", "us", "the Operator", "the Platform") collects, processes, stores, shares, and protects the personal data of users ("you", "Player", "User") who access our website at https://cv99ap.org, create an account, make deposits, participate in games, or otherwise interact with any of our services (collectively, "the Services").

By registering an account on cv99ap or by continuing to use our Services, you acknowledge that you have read and understood this Policy in full and consent to the collection and processing of your personal data as described herein. If you do not consent, you must not use the Services.

This Policy applies to all personal data collected through the cv99ap website, mobile browser experience, customer support channels, and any associated promotional communications. It does not apply to third-party websites that may be linked from our platform — those sites operate under their own privacy terms, which you should review independently.

cv99ap is committed to handling your personal data responsibly, securely, and in accordance with internationally recognised data protection principles. We apply the data minimisation principle — meaning we collect only what is genuinely necessary for delivering, improving, and safeguarding our Services to players across Bangladesh.


2. Personal Data We Collect

cv99ap collects personal data through several channels: directly from you when you register or interact with the Platform, automatically via our systems as you use the Services, and occasionally from trusted third-party verification and payment service partners.

📝
Registration and Account Data
When you create a cv99ap account, we collect your full legal name, date of birth, residential address (including city — for example Dhaka, Chittagong, Sylhet, or Khulna), email address, and mobile phone number. This data is essential for creating and maintaining your account and for conducting identity verification.
🪪
Identity Verification (KYC) Data
As part of our Know Your Customer (KYC) process, we may collect scanned copies or photographs of government-issued identity documents such as your National Identity Card (NID), passport, or driving licence. We may also collect a selfie photograph for biometric comparison purposes. KYC data is collected only when required to verify your identity, age (21+), or payment method ownership prior to processing your first withdrawal.
💳
Payment and Transaction Data
We collect records of all financial transactions conducted on cv99ap, including deposit amounts, withdrawal requests, payment method identifiers (such as bKash mobile number, Nagad account number, or masked card numbers), and transaction timestamps. Full payment credentials (e.g., complete card numbers or mobile wallet PINs) are never stored on cv99ap servers — these are processed exclusively by our PCI-DSS compliant payment partners.
🎮
Gaming Activity Data
We record your gameplay activity on the Platform, including games played, bets placed, wager amounts, game outcomes, session duration, and bonus usage history. This data is used for account management, dispute resolution, responsible gaming monitoring, fraud prevention, and service improvement purposes.
📱
Technical and Device Data
When you access cv99ap, our systems automatically collect certain technical information including your IP address, device type, operating system, browser type and version, screen resolution, preferred language, and session timestamps. This data is used for security monitoring, fraud detection, and to optimise the Platform's performance across different devices and mobile networks used across Bangladesh.
🍪
Cookies and Tracking Technologies
cv99ap uses cookies and similar tracking technologies to maintain your session state, remember your preferences, analyse usage patterns, and deliver relevant promotional content. Essential cookies are required for the Platform to function; analytical and preference cookies may be declined via your browser settings. We do not use third-party advertising trackers that share your data with unaffiliated advertising networks.

3. How We Use Your Data

cv99ap processes your personal data only for specific, legitimate purposes directly related to operating a safe, fair, and reliable online casino and sports betting platform for players in Bangladesh. We do not process your data in ways that are incompatible with the purposes listed below.

Account Services
Creating, managing, and securing your cv99ap account; processing login requests; verifying your identity at registration and KYC checkpoints.
Payments
Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and local bank transfers; detecting and preventing payment fraud.
Legal Compliance
Meeting age verification (21+), anti-money laundering (AML), and Know Your Customer (KYC) obligations as required by our operating standards.
Responsible Gaming
Monitoring gameplay patterns for signs of problem gambling; enforcing player-set deposit limits, cooling-off periods, and self-exclusion requests.
Security
Detecting fraudulent activity, unauthorised account access, bot usage, bonus abuse, and other security threats; maintaining audit logs for investigation purposes.
Customer Support
Responding to your enquiries, resolving disputes, and processing complaints submitted via our support channels.
Service Improvement
Analysing aggregated, anonymised usage data to improve Platform performance, game selection, and the overall user experience for Bangladeshi players.
Marketing
Sending you promotional offers, bonus notifications, and seasonal campaigns (such as Eid or Pohela Boishakh promotions) where you have opted in to receive marketing communications. You may opt out at any time.

cv99ap processes your personal data under the following legal bases, depending on the nature and purpose of each processing activity:

📃
Contractual Necessity
Processing your registration data, KYC documents, payment information, and gaming activity records is necessary for us to fulfil our obligations under the Terms & Conditions you accepted when creating your cv99ap account.
Consent
Where we send optional marketing communications or deploy non-essential analytical cookies, we rely on your explicit consent. You have the right to withdraw consent at any time by updating your account preferences or contacting support, without affecting the lawfulness of processing carried out prior to withdrawal.
⚖️
Legitimate Interests
We process technical and device data, fraud-detection signals, and aggregated analytics under our legitimate interest in maintaining a secure platform and preventing financial crime, provided these interests are not overridden by your privacy rights.
🏛️
Legal Obligation
Certain processing activities — including identity verification, transaction monitoring, and record retention — are carried out to comply with applicable anti-money laundering standards, age-verification obligations, and other legal requirements applicable to online gaming operators.

5. Data Sharing and Disclosure

cv99ap does not sell, rent, or trade your personal data to unaffiliated third parties for their own commercial purposes. We may share your data with the following categories of recipients strictly as necessary to deliver our Services:

💰
Payment Service Providers
We share transaction-related data with our payment processing partners — including bKash, Nagad, Rocket, Upay, and card network operators Visa and Mastercard — solely for the purpose of completing your deposit and withdrawal requests. These partners process your payment data under their own privacy policies and are bound by industry security standards including PCI-DSS.
🔎
Identity Verification Partners
To conduct KYC checks, we may share your identity documents and registration details with regulated third-party identity verification service providers. These providers are contractually bound to process your data only for the specific verification purpose and to maintain appropriate security measures.
🎰
Game Content Providers
Game studios and live casino providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive limited technical identifiers (such as a pseudonymous player session token) necessary to authenticate your game session and record results. These providers do not receive your full personal profile or payment data.
🏛️
Legal and Regulatory Authorities
We may disclose your personal data to law enforcement agencies, regulatory bodies, or courts where we are legally required to do so, or where disclosure is necessary to prevent, investigate, or report suspected fraud, money laundering, or other criminal activity. We will only disclose the minimum data necessary to satisfy the legal requirement.

Third-party processors: All third parties with whom we share personal data are required to maintain appropriate technical and organisational security measures and are prohibited from using your data for any purpose other than the specific service they provide to cv99ap.


6. Data Security

Protecting your personal data is a core operational priority at cv99ap. We implement a layered security framework designed to guard against unauthorised access, accidental loss, alteration, or disclosure of the data we hold about you.

🔐
256-bit SSL Encryption
All data transmitted between your browser or mobile device and cv99ap servers is encrypted using industry-standard 256-bit SSL/TLS protocols. This ensures that your login credentials, payment details, and personal information cannot be intercepted in transit.
🛡️
Access Controls
Access to personal data stored on cv99ap systems is restricted on a strict need-to-know basis. Internal staff with authorised access are subject to confidentiality obligations and regular security training. Privileged access is protected by multi-factor authentication.
🔍
Continuous Monitoring
Our security team conducts continuous monitoring of Platform systems for intrusion attempts, unusual access patterns, and data anomalies. Automated alerting systems flag suspicious activity for immediate investigation, helping to protect player accounts around the clock.

While we apply rigorous security measures, no system can guarantee absolute security. In the event of a data breach that poses a risk to your rights and freedoms, cv99ap will notify affected users and take immediate remedial action in accordance with applicable data protection standards.


7. Data Retention

cv99ap retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, to comply with legal obligations, and to resolve any disputes. The following general retention periods apply:

Account Data
Retained for the lifetime of your active account plus a minimum of 5 years following account closure, to support legal and regulatory obligations.
KYC Documents
Retained for a minimum of 5 years from the date of verification or account closure, whichever is later, in line with anti-money laundering record-keeping standards.
Transaction Records
Financial transaction logs are retained for a minimum of 5 years from the date of each transaction to support audit, dispute, and AML compliance requirements.
Gaming Activity
Gaming session logs are retained for up to 3 years following the relevant session, primarily for dispute resolution and responsible gaming monitoring.
Marketing Data
Where you have opted in to marketing communications, your preference data is retained until you withdraw consent or request deletion, after which it is promptly removed from our active marketing systems.
Technical Logs
Server access logs and device data are retained for up to 12 months for security and fraud-prevention analysis, unless longer retention is required for an active investigation.

8. Your Privacy Rights

As a cv99ap player, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact our support team using the email address listed in the Contact section below. We will respond to all valid requests within a reasonable timeframe and at no charge.

👁️
Right of Access
You have the right to request a copy of the personal data cv99ap holds about you, together with information about how it is processed. We will provide this data in a structured, commonly used format.
✏️
Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or supplement it without undue delay. You may update basic account information directly via your account settings.
🗑️
Right to Erasure
In certain circumstances, you may request deletion of your personal data. Please note that where we are legally required to retain records (for example, KYC documents and transaction logs under AML obligations), we cannot erase that data until the applicable retention period expires. Erasure requests will be assessed on a case-by-case basis.
🚫
Right to Object to Marketing
You have the absolute right to object to the processing of your personal data for direct marketing purposes at any time. To opt out of marketing communications, update your notification preferences in your account settings or contact our support team directly.
📦
Right to Data Portability
Where processing is based on your consent or contractual necessity, you may request that we provide your personal data in a portable, machine-readable format so that you can transfer it to another service provider of your choice.

9. Minors and Age Restriction

The cv99ap Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under 21 years of age. If we become aware that a user is under the minimum age requirement, we will immediately close that account, void any balances arising from bonus or wagering activity, return any real-money deposits where required, and securely delete all associated personal data.

Parent or guardian alert: If you believe that a minor under 21 years of age has registered an account on cv99ap, please contact us immediately at [email protected] so that we can take prompt action.


10. Updates to This Policy

cv99ap reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform services. When material changes are made, we will post the updated Policy on this page with a revised effective date, and we will notify registered users via email or an in-platform notice where reasonably practicable.

Your continued use of the cv99ap Platform after any such update constitutes your acceptance of the revised Policy. We encourage you to review this page periodically. The effective date displayed at the top of this Policy indicates when the most recent version was published.


11. Contact Us About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or to how cv99ap handles your personal data, please contact our Data Protection team using the details below. We are committed to addressing all legitimate privacy enquiries promptly and transparently.

📧
Privacy Enquiries
Email: [email protected]
Please use the subject line "Privacy Request" and include your registered account email address so that we can verify your identity and locate your data efficiently. We aim to respond to all privacy-related requests within 14 calendar days of receipt.

For general support enquiries unrelated to privacy, please use the same email address. Our support team operates 24 hours a day, 7 days a week, in Bangladesh Standard Time (BST, UTC+6).


Your Data is Safe With cv99ap

We take your privacy seriously so you can focus on what matters — enjoying great games. Explore our casino, check out frequently asked questions, or log in to your account.