Privacy Policy

When you create a cvk999 account, we collect the following personal data:

• Full legal name — used for identity verification and account ownership.
• Date of birth — used to confirm you are aged 21 or above. 21+
• Email address — used for account communications, security alerts, and promotional messages (where opted in).
• Mobile phone number — used for two-factor authentication and payment method linking (bKash, Nagad, Rocket, Upay).
• Residential address — used for identity verification and AML compliance, including city references such as Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, and Barisal.
• Username and password — used to secure your account. Passwords are stored in hashed, salted form and are never accessible in plain text by any cvk999 employee.

To comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations, cvk999 may request copies of identity documents at registration or at any point during the lifetime of your account. Documents we may request include:

• National Identity Card (NID), passport, or driving licence.
• Recent utility bill, bank statement, or other proof of address (issued within the last three months).
• Payment method verification documentation (e.g., screenshot of bKash or Nagad account confirming the mobile number matches the registered account).

KYC documents are stored securely in encrypted format and accessed only by authorised compliance personnel. They are never shared with third parties except where required by law.

cvk999 records all financial transactions conducted on the Platform, including:

• Deposit amounts, dates, times, and payment methods (bKash, Nagad, Rocket, Upay, Visa, Mastercard, bank transfer).
• Withdrawal requests, amounts, destination payment methods, and processing status.
• Wagering history — games played, bet amounts, outcomes, and bonus usage.
• Account balance history.

Transaction records are retained for a minimum of five (5) years from the date of the transaction for legal and regulatory compliance purposes. Full payment card numbers are never stored on cvk999 servers — card data is tokenised by the payment processor.

When you access the Platform, our servers and analytics systems automatically collect certain technical data, including:

• IP address and approximate geolocation (country/city level).
• Device type, operating system, and browser version.
• Session start and end times, pages visited, and features used.
• Referring URL (the page you visited before arriving at cvk999.pro).
• Crash reports and error logs used to diagnose technical issues.

This data is used solely for Platform security, fraud detection, performance optimisation, and improving the user experience. It is not used for individual profiling or sold to advertisers.

If you contact cvk999 support or interact with our promotional communications, we retain records of:

• Support tickets, live chat transcripts, and email correspondence.
• Responses to surveys or feedback requests.
• Your marketing preferences and opt-in/opt-out choices for promotional emails and notifications.

Support communications are retained for two (2) years after the last interaction to enable continuity of service and dispute resolution.

cvk999 uses cookies and similar local storage technologies to operate the Platform effectively. Cookies are small text files stored on your device that help us recognise returning users, maintain session state, and understand how the Platform is used.

We use the following categories of cookies:

• Essential cookies: Required for basic Platform functionality — login sessions, security tokens, and payment flow state. These cannot be disabled without breaking the Platform.
• Analytical cookies: Used to understand aggregate usage patterns (pages visited, session duration, error frequency) to improve the Platform. Data is anonymised before analysis.
• Preference cookies: Store your Platform preferences such as display settings and notification choices.

cvk999 does not use third-party advertising cookies or behavioural targeting cookies. You may clear cookies via your browser settings at any time. Note that clearing essential cookies will log you out of your account and may require you to re-verify your session.

cvk999 does not sell, rent, or trade your personal data. We share data only in the following limited circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and banking partners receive the minimum data necessary to process your deposit or withdrawal transaction.
• Game providers: Studios such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi receive anonymised session tokens to deliver games. They do not receive your real name, NID, or financial data.
• Identity verification services: KYC documentation may be processed by a secure third-party verification provider operating under equivalent data protection standards.
• Legal authorities: cvk999 will disclose personal data to law enforcement or regulatory bodies where required by a lawful court order, warrant, or statutory obligation.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all of our assets, your data may be transferred to the acquiring entity, subject to equivalent privacy protections.

All third-party data processors engaged by cvk999 are bound by data processing agreements that require them to handle your information securely and only for the purposes for which it was shared.

cvk999 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, subject to the following minimum retention periods:

• Account data: Retained for the lifetime of your account plus a minimum of five (5) years after account closure.
• KYC / identity documents: Retained for a minimum of five (5) years after account closure or the last verified transaction, whichever is later.
• Transaction records: Retained for a minimum of five (5) years from the transaction date.
• Support communications: Retained for two (2) years after the last interaction.
• Marketing preference records: Retained until you withdraw consent or close your account, plus one (1) year for audit purposes.

After the applicable retention period expires, data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual.

As a cvk999 player, you hold the following rights in respect of your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request".

• Right of access: You may request a copy of all personal data cvk999 holds about you.
• Right of rectification: You may request correction of any inaccurate or incomplete personal data.
• Right of erasure: You may request deletion of your personal data, subject to our legal retention obligations (e.g., financial records required by law cannot be deleted on request).
• Right to restrict processing: You may request that we limit processing of your data in certain circumstances, for example while a correction request is pending.
• Right to data portability: You may request your data in a structured, machine-readable format for transfer to another service.
• Right to object: You may object to processing based on legitimate interests, including direct marketing. We will honour all marketing opt-out requests within 48 hours.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

cvk999 will respond to all data rights requests within five (5) business days. In complex cases we may require up to thirty (30) calendar days, in which case we will notify you of the extension within the initial five-day window.

cvk999 employs a multi-layered security architecture to protect your personal data against unauthorised access, loss, alteration, and disclosure:

• 256-bit SSL/TLS encryption on all data transmitted between your device and cvk999 servers.
• Password hashing using industry-standard cryptographic algorithms. Plain-text passwords are never stored.
• Two-factor authentication (2FA) available for all accounts via mobile OTP.
• Access controls: Internal systems operate on a strict need-to-know basis. Only authorised personnel access player data for legitimate business purposes.
• Regular security audits and penetration testing conducted by independent third-party security professionals.
• Intrusion detection systems that monitor for anomalous activity and automatically block suspected attacks.

Despite these measures, no internet-based service can guarantee absolute security. In the event of a data breach that is likely to result in risk to your rights and freedoms, cvk999 will notify affected users without undue delay.

cvk999 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will update the "Last Updated" date at the top of this page and, where appropriate, notify registered users by email or via an in-Platform notification.

Your continued use of the Platform following the publication of a revised Privacy Policy constitutes your acceptance of the changes. If you do not agree with the revised Policy, you must cease using the Platform and may request account closure by contacting [email protected].

We encourage you to review this Policy periodically to stay informed about how cvk999 protects your personal data.