cv9 Privacy Policy

1. Information We Collect

cv9 collects personal information from you in several ways: directly when you register an account and use our services, automatically through your interactions with the platform, and occasionally from third parties as part of our identity verification processes. Below is a detailed breakdown of the categories of information we collect and the circumstances in which each category arises.

1.1 Information You Provide Directly

1.2 Information Collected Automatically

When you access and use the cv9 platform, certain technical and behavioural data is collected automatically through our servers and analytics systems. This includes:

• Device and Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and unique device identifiers.
• Usage Data: Pages visited, games played, bets placed, session duration, click patterns, search queries within the platform, and feature interactions.
• Transaction Data: Records of all deposits, withdrawals, wagers, winnings, bonus credits, and account balance changes, including timestamps and amounts in BDT (৳).
• Location Data: General geographic location derived from your IP address (country and city level). cv9 does not collect precise GPS location data from your device.
• Log Data: Server access logs, error logs, and security event logs generated by your interactions with the platform.

1.3 Information from Third Parties

In limited circumstances, cv9 receives personal information about you from trusted third parties, including:

• Payment providers such as bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank, who confirm the status and ownership of your payment account.
• Identity verification services that cross-reference the documents you submit against official databases to confirm your identity and age.
• Fraud prevention agencies that flag accounts or payment methods associated with known fraudulent activity.
• Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, who share session and game result data that is reconciled with our own transaction records.

2. How We Use Your Data

cv9 uses your personal data only for clearly defined, legitimate purposes. We do not use your data in ways that are incompatible with the purpose for which it was originally collected. The primary purposes for which we process your data are set out below, along with the lawful basis for each.

2.1 Account Management and Service Delivery

The most fundamental use of your data is to create and maintain your cv9 account, process your deposits and withdrawals, deliver the games and betting markets you engage with, calculate and credit your winnings, and manage your bonus and promotional entitlements. This processing is necessary for the performance of our contract with you as a registered player.

2.2 Identity Verification and Regulatory Compliance

cv9 is obligated to verify the identity and age of all players as part of our commitment to responsible gaming and anti-money laundering (AML) best practices. We process your identity documents, financial data, and transaction history to fulfil these obligations. This processing is necessary for compliance with applicable legal requirements.

2.3 Fraud Prevention and Security

We analyse account activity, transaction patterns, device data, and IP information to detect and prevent fraudulent activity, money laundering, account takeover, and other security threats. This processing is in the legitimate interests of cv9 and its players to maintain a safe and fair platform.

2.4 Customer Support

When you contact cv9 support via email at [email protected], we process your contact information and the content of your communications in order to investigate and respond to your query, complaint, or dispute. Support interactions are logged and may be reviewed for quality assurance and staff training purposes.

2.5 Personalisation and Platform Improvement

We use usage data and game interaction data to personalise your experience on the cv9 platform — for example, by surfacing games you have previously enjoyed or highlighting cricket betting markets relevant to active tournaments such as the BPL or T20 World Cup. We also use aggregated, anonymised data to improve the design, performance, and feature set of the platform over time.

2.6 Marketing and Promotional Communications

With your consent, cv9 may send you promotional emails, SMS messages, or in-platform notifications about bonuses, new games, seasonal offers (including Eid promotions and Pohela Boishakh specials), and other platform news. You may withdraw your consent and opt out of marketing communications at any time by contacting [email protected] or updating your account notification settings. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

3. Data Sharing and Third Parties

cv9 does not sell your personal data to third parties. We share your data only in the limited circumstances described below, and only with parties who are bound by appropriate confidentiality and data protection obligations.

3.1 Service Providers and Data Processors

We engage carefully selected third-party service providers who process personal data on our behalf, strictly under our instructions and for no independent purpose of their own. These include:

• Payment processors: bKash, Nagad, Rocket, Upay, and banking partners who process your financial transactions.
• Identity verification providers: Third-party KYC services that verify your identity documents against official records.
• IT infrastructure and hosting providers: Cloud hosting and database providers who store platform data on secure, access-controlled servers.
• Game studios: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other studio partners who operate the games on our platform and receive game session data necessary to determine game outcomes.
• Analytics providers: Services that process anonymised or pseudonymised usage data to help us understand platform performance and user behaviour.
• Customer support tools: Helpdesk and live chat software providers who facilitate our support communications.

3.2 Legal and Regulatory Disclosure

cv9 may disclose your personal data to law enforcement agencies, regulatory bodies, courts, or other public authorities when we are legally required to do so, or when disclosure is necessary to protect the rights, safety, or property of cv9, its players, or the public. We will notify you of any such disclosure where we are legally permitted to do so.

3.3 Business Transfers

In the event that cv9 undergoes a merger, acquisition, or sale of all or a substantial portion of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy practices of the acquiring entity before the transfer takes effect.

4. Cookies and Tracking Technologies

cv9 uses cookies and similar tracking technologies on the cv9.today platform to ensure the site functions correctly, to remember your preferences, and to understand how visitors interact with our content. This section explains what cookies are, which types we use, and how you can manage them.

4.1 What Are Cookies?

Cookies are small text files that are placed on your device by websites you visit. They are widely used to make websites work more efficiently, to remember your preferences between visits, and to provide information to the website operator about how the site is being used. Cookies themselves do not contain executable code and cannot access other data on your device.

4.2 Types of Cookies We Use

4.3 Managing Cookies

You can control and manage cookies through your browser settings. Most modern browsers allow you to view the cookies stored on your device, delete existing cookies, and block cookies from being set in future. Please note that disabling strictly necessary cookies will impair the functionality of the cv9 platform — for example, you may not be able to stay logged in between pages if session cookies are blocked. Disabling functional or analytics cookies will not affect your ability to use the core platform features. Instructions for managing cookies in common browsers are available on each browser's official support pages.

5. Data Retention and Storage

cv9 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or operational obligations. The following retention schedule applies:

• Account and identity data: Retained for the lifetime of your account and for a minimum of 5 years following account closure, in accordance with standard AML record-keeping requirements.
• Transaction and financial records: Retained for a minimum of 5 years from the date of each transaction. This includes all deposit, withdrawal, wager, and bonus transaction records.
• KYC documents: Retained for a minimum of 5 years following the completion of the verification process or account closure, whichever is later.
• Support communications: Retained for 2 years from the date of the last interaction in each support case, unless the communication forms part of an active dispute or legal matter.
• Marketing consent records: Retained for the duration of your account and for 1 year following account closure or the withdrawal of consent, whichever is later.
• Analytics and log data: Aggregated and anonymised analytics data may be retained indefinitely. Raw server log data is retained for up to 12 months.

When the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual. Secure deletion methods are applied to both digital and physical records in accordance with industry best practices.

6. Your Rights Over Your Data

As a cv9 player, you have a number of important rights in relation to the personal data we hold about you. cv9 is committed to honouring these rights promptly and transparently. To exercise any of the rights described below, please submit a written request to [email protected] with the subject line "Data Rights Request" and your registered username.

6.1 Right of Access

You have the right to request a copy of the personal data cv9 holds about you, along with information about how it is being processed. We will provide this information in a clear, structured format within 30 days of receiving your request. There is no charge for a standard data access request.

6.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update some information directly through your account settings. For changes to identity-critical fields (such as your legal name or date of birth), you will be required to submit supporting documentation.

6.3 Right to Erasure

You may request that cv9 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where the processing was unlawful. Please note that this right is not absolute — cv9 is required by law to retain certain financial and identity records for a minimum of 5 years, and erasure requests cannot override these mandatory retention obligations.

6.4 Right to Restrict Processing

You have the right to request that cv9 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified, or while an objection to processing is being assessed. During a processing restriction, cv9 will continue to store your data but will not process it for other purposes without your consent, except as required by law.

6.5 Right to Data Portability

Where processing is based on your consent or on a contractual obligation, and the processing is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format. You may also request that we transmit this data directly to another service provider where technically feasible.

6.6 Right to Object to Marketing

You have the absolute right to object to the processing of your personal data for direct marketing purposes at any time. Once you object, cv9 will cease processing your data for marketing purposes immediately. This right can be exercised by contacting [email protected] or by following the unsubscribe instructions included in any marketing communication.

7. Security Measures

cv9 takes the security of your personal data seriously and implements a layered set of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure. Our key security measures include:

• Transport Layer Security (TLS/SSL): All data transmitted between your device and the cv9 platform is encrypted using 256-bit SSL/TLS encryption, ensuring that your login credentials, payment information, and personal data cannot be intercepted in transit.
• Encryption at Rest: Sensitive data fields — including identity documents, financial account details, and KYC records — are encrypted at rest in our database using strong symmetric encryption keys managed through a secure key management system.
• Access Controls: Access to personal data within cv9 is restricted on a strict need-to-know basis. Staff members are granted access only to the data required for their specific role, and all access events are logged and periodically audited.
• Two-Factor Authentication (2FA): cv9 encourages all players to enable 2FA on their accounts, which provides an additional layer of protection by requiring a one-time SMS code in addition to the standard password at each login.
• Intrusion Detection and Monitoring: Our platform is continuously monitored for suspicious activity, unusual login patterns, and potential security incidents. Automated alerts notify our security team of anomalies in real time.
• Regular Security Assessments: cv9 conducts periodic internal security reviews and works with external security specialists to identify and remediate potential vulnerabilities in our platform infrastructure.
• Staff Training: All cv9 staff who handle personal data receive regular training on data protection obligations, secure data handling practices, and how to identify and respond to security incidents.

Despite these measures, no online platform can guarantee absolute security against all possible threats. In the event of a data breach that is likely to result in a risk to your rights and freedoms, cv9 will notify affected players without undue delay and will take all reasonable steps to contain and remediate the incident.

8. Changes to This Policy

cv9 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, platform features, or regulatory requirements. When material changes are made to this policy, we will notify registered players via email to their registered address and by displaying a prominent notice on the cv9.today platform for a period of at least 14 days before the updated policy takes effect.

The date on which this Privacy Policy was most recently updated is displayed at the top of this page. We encourage you to review this policy periodically so that you are always informed about how your data is being used. The version of this policy in effect at the time you use the platform governs our data processing practices in relation to your use of the platform at that time.

If you do not agree with the changes made to this Privacy Policy, you should stop using the cv9 platform and contact our support team to request account closure and deletion of your personal data (subject to our mandatory retention obligations as described in Section 5).

If you have any questions, concerns, or requests relating to this Privacy Policy or the way cv9 handles your personal data, please contact our dedicated support team at any time:

• Email: [email protected] (plain text — not a clickable link)
• Support Hours: 24 hours a day, 7 days a week
• Languages: English and Bengali
• Service Area: All players across Bangladesh — Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar