cv96 Privacy Policy

1. Introduction

cv96 ("we", "us", "the Platform") is committed to protecting the personal information of every player who uses cv96.org. This Privacy Policy describes what personal data we collect, the purposes for which it is processed, how long it is retained, with whom it may be shared, and the rights available to you. By registering an account or continuing to use the cv96 Platform, you acknowledge that you have read and understood this Privacy Policy.

This policy applies to all personal data collected through the cv96 website, mobile browser version, and any associated support channels including email correspondence to [email protected]. It does not apply to third-party websites, payment processors, or game providers whose own privacy practices are governed by their respective policies. We encourage you to review those policies independently.

2. Information We Collect

cv96 collects personal data through three primary channels: information you provide directly during registration and account use, data generated automatically as you interact with the Platform, and information received from payment providers as part of transaction processing.

Information You Provide

• Full name and date of birth, used to verify your identity and confirm you meet the 21+ age requirement.
• Mobile phone number, used as your primary account identifier, for OTP verification, and for transactional SMS notifications.
• Email address (if provided), used for account recovery and important service communications. Providing an email is optional but recommended.
• Identity document details (national ID or passport number) when KYC verification is required for large withdrawals or where fraud is suspected.

Data Collected Automatically

• IP address and approximate geographic location at the time of login, used for fraud detection and responsible gaming monitoring.
• Device type, operating system, and browser version, used to optimise the Platform for your device and to identify unusual login patterns.
• Session activity logs including pages visited, games played, bets placed, and session duration, used for service improvement and responsible gaming analysis.

Payment Data

• Transaction reference numbers, deposit amounts, withdrawal amounts, and the payment method used (e.g. bKash, Nagad, Rocket, Upay). cv96 does not store full mobile banking PINs or card numbers.
• Partial payment account identifiers (e.g. last four digits of a mobile number used for bKash), retained solely to match withdrawals to the correct source account.
• Transaction timestamps recorded in Bangladesh Standard Time (UTC+6), used for audit trail purposes and dispute resolution.

3. How We Use Your Information

cv96 processes personal data strictly for the purposes described in this policy. We do not use your data for purposes incompatible with those disclosed here without first obtaining your explicit consent or being required to do so by law.

• Account management: to create, maintain, and secure your cv96 account, including verifying your identity, processing deposits and withdrawals, and managing responsible gaming settings.
• Service delivery: to provide access to games, betting markets, promotions, and customer support, and to personalise your experience on the Platform within the limits of applicable law.
• Fraud prevention and security: to detect, investigate, and prevent fraudulent activity, money laundering, underage gambling, and other prohibited conduct described in our Terms and Conditions.
• Responsible gaming: to monitor gameplay patterns, apply limits or time-outs at your request, and identify accounts that may benefit from responsible gaming interventions.
• Legal and regulatory compliance: to fulfil obligations under applicable Bangladeshi and international law, including responding to lawful requests from competent authorities.
• Platform improvement: to analyse aggregated and anonymised usage data to improve game performance, website reliability, and the overall user experience, without identifying individual players.

4. Legal Basis for Processing

cv96 processes your personal data under one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: processing required to fulfil our obligations under the Terms and Conditions you accepted at registration — including account creation, payment processing, and service delivery.
• Legitimate interests: processing necessary for fraud prevention, IT security, responsible gaming monitoring, and internal analytics — balanced against your rights and interests as a data subject.
• Legal obligation: processing required to comply with applicable law, including anti-money laundering regulations, court orders, and lawful requests from public authorities.
• Consent: where you have given specific, informed consent for a particular processing activity, such as receiving marketing SMS. You may withdraw consent at any time without affecting the lawfulness of earlier processing.

5. Sharing Your Information

cv96 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

• Payment processors: transaction data shared with bKash, Nagad, Rocket, Upay, Visa, and Mastercard to the extent required to complete deposits and withdrawals. These providers operate under their own privacy policies.
• Game providers: limited session identifiers shared with third-party game studios (e.g. Pragmatic Play, Evolution Gaming, Spribe) solely for the purpose of delivering game content and recording game outcomes. No financial or identity data is passed to game providers.
• Legal and regulatory authorities: personal data disclosed in response to lawful requests such as court orders, subpoenas, or mandatory reporting obligations under applicable anti-money laundering law.
• Service providers acting on our behalf: technical partners such as cloud hosting providers and cybersecurity services who process data under strict contractual obligations and may not use it for their own purposes.

6. Cookies and Tracking Technologies

cv96 uses cookies and similar technologies to operate the Platform, maintain session state, detect fraud, and analyse usage patterns. A cookie is a small text file placed on your device by the cv96 website. It does not give cv96 access to your device or to any data beyond what you share with us directly.

Types of cookies cv96 uses

• Essential cookies: required for the Platform to function correctly, including maintaining your login session and processing bets securely. These cannot be disabled without preventing the site from working.
• Analytics cookies: used to understand how players navigate the Platform — which pages are visited most, where players encounter errors, and how long sessions last. This data is processed in aggregate and does not identify individual players.
• Security cookies: fingerprinting tokens that help identify unusual device behaviour, multiple-account attempts, and automated bot activity. These are integral to cv96's fraud prevention infrastructure.

You can manage cookie preferences through your mobile browser settings. Note that disabling essential cookies will prevent you from logging in to cv96 and accessing games. cv96 does not use advertising networks or cross-site tracking cookies.

7. Data Retention

cv96 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. Account data is retained for the lifetime of your account and for a minimum of five years following account closure, in accordance with financial record-keeping obligations applicable in Bangladesh.

Session logs and device data are retained for up to 12 months from the date of the session. Marketing consent records are retained for the period during which consent is active plus two years. Where data is no longer needed it is securely deleted or anonymised so that it can no longer be attributed to an individual player.

8. Data Security

cv96 implements technical and organisational measures designed to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Our security programme includes the following controls:

• SSL/TLS encryption on all data transmitted between your device and cv96 servers, ensuring that login credentials, payment details, and session data cannot be intercepted in transit.
• Encrypted storage for sensitive account data at rest. Passwords are hashed using industry-standard algorithms and are never stored in plaintext. cv96 staff cannot retrieve your password.
• Access controls limiting cv96 staff access to personal data on a strict need-to-know basis. All internal access to player data is logged and subject to periodic audit.
• Continuous monitoring for suspicious login activity, including detection of credential stuffing attempts, unusual geographic access patterns, and rapid sequential login failures.

9. Your Rights

As a player on cv96, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, contact [email protected] from the email address or mobile number registered on your account. We will respond within 30 days of receiving a valid request.

• Right of access: you may request a copy of the personal data cv96 holds about you, including information on how it is being used.
• Right to rectification: if you believe any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected or updated.
• Right to erasure: you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to restrict processing: you may request that cv96 limit the way it uses your personal data in certain circumstances, for example while a correction request is being investigated.
• Right to object: you may object to processing based on legitimate interests, including profiling, or to processing for direct marketing purposes.
• Right to data portability: where processing is based on consent or contract and carried out by automated means, you may request a copy of your data in a structured, machine-readable format.

cv96 will verify your identity before actioning any data rights request. Some requests may be refused where they conflict with legal obligations, such as anti-money laundering record-keeping requirements, or where they relate to data forming part of an active investigation. We will explain the reason for any refusal in writing.

10. Children's Privacy

cv96 is strictly an adult platform. No person under the age of 21 may register or use the Platform. cv96 does not knowingly collect personal data from individuals under 21. If we become aware that personal data has been collected from a person under 21, we will delete that data immediately and close the associated account. Parents or guardians who believe a minor has registered on cv96 should contact [email protected] immediately.

11. Changes to This Privacy Policy

cv96 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or the services we offer. When we make material changes, we will notify registered players by SMS or email using the contact details on file, and update the effective date shown at the top of this page.

Continued use of the cv96 Platform following the posting of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with a change, you should stop using the Platform and may request account closure by contacting [email protected].

12. Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or the way cv96 handles your personal data, please contact our support team. We are committed to resolving all privacy-related queries promptly and transparently.

Contact email: [email protected]. Please include your registered mobile number and a brief description of your privacy query in any correspondence to help us locate your account and respond accurately.