ccv999 Privacy Policy

1 Information We Collect

ccv999 collects personal information in three primary ways: information you provide directly when registering or using the Platform; information collected automatically through your use of the Platform; and information obtained from third-party service providers where necessary to verify your identity or process payments.

Information You Provide Directly:

• Full legal name as it appears on your government-issued identity document.
• Date of birth (used to verify you are 18 years of age or older).
• Residential address in Bangladesh (city, district, and postal code).
• Contact email address and mobile phone number.
• Chosen username and encrypted password credentials.
• Payment method details — specifically your registered bKash, Nagad, Rocket, or Upay mobile wallet number, or bank account identifiers for Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, or Sonali Bank transfers.
• Identity verification documents submitted during KYC review: National ID card, passport, or driving licence (front and back images).
• Communications you send to the ccv999 support team via email, live chat, or any other channel.

Information Collected Automatically:

• IP address and approximate geolocation derived from IP.
• Device type, operating system, browser version, and screen resolution.
• Session duration, pages visited, game titles played, wager amounts, and betting history.
• Login timestamps, logout events, and session activity logs.
• Cookie identifiers and local storage tokens used for session management (see Section 5).

Information from Third Parties: Where required to verify your identity or prevent fraud, ccv999 may receive limited data from KYC verification partners, payment processors, or fraud screening services. Such data is used solely for the stated verification purpose and is not merged into a broader marketing profile.

2 How We Use Your Data

ccv999 uses the personal data we collect for specific, documented purposes. We do not use your data in ways that are incompatible with the purposes described at the time of collection. The following list covers every material use case for which ccv999 processes player data:

• Account creation and management: To register your ccv999 account, maintain your profile, authenticate your login sessions, and allow you to access all Platform features including the games lobby, sports betting markets, and cashier.
• Identity verification (KYC): To confirm that you are who you say you are, that you are at least 18 years of age, and that you are not subject to a self-exclusion or platform ban. KYC is a mandatory step before any withdrawal is approved.
• Payment processing: To facilitate deposits via bKash, Nagad, Rocket, Upay, and partner banks, and to process withdrawal requests to your verified payment method. Payment data is handled through encrypted channels and is not stored on ccv999 servers beyond what is necessary for transaction records.
• Fraud prevention and security: To detect and investigate suspicious login attempts, duplicate account registrations, money laundering patterns, bonus abuse, and any other activity that violates the ccv999 Terms & Conditions or applicable law.
• Responsible gaming monitoring: To identify patterns of play that may indicate problem gambling behaviour (such as rapidly escalating wager sizes, extended unbroken sessions, or requests to override self-imposed limits), and to reach out proactively when such patterns are detected.
• Customer support: To respond to your queries, complaints, and formal dispute submissions via email at [email protected] or through the on-platform live chat service.
• Platform analytics and improvement: To understand aggregate player behaviour patterns, identify underperforming features, test new game integrations, and continuously improve the ccv999 user experience for the Bangladesh market.
• Promotional communications: To send you information about ccv999 bonuses, deposit match offers, BPL cricket free bet promotions, Eid special offers, and platform updates — but only if you have opted in to receive such communications. You may opt out at any time via the account settings dashboard.
• Legal compliance: To fulfil any legal obligations that require us to retain, disclose, or report data, including cooperation with law enforcement authorities in cases of confirmed fraud or criminal activity.

3 Legal Basis for Processing

ccv999 processes your personal data only where a valid legal basis exists for doing so. The applicable legal bases for the processing activities described in Section 2 are as follows:

• Contractual necessity: Processing required to fulfil the contract between ccv999 and you as a registered player — including account management, payment processing, and game access. Without this processing, ccv999 cannot deliver the services you have signed up for.
• Legal obligation: Processing required to comply with applicable legal requirements, including KYC/AML (anti-money laundering) obligations, age verification mandates, and law enforcement reporting duties.
• Legitimate interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and internal analytics — where ccv999's legitimate business interests do not override your fundamental rights and freedoms.
• Consent: Processing for marketing communications and non-essential cookies, where your prior, freely given, specific, and informed consent has been obtained. You may withdraw consent at any time without affecting the lawfulness of prior processing.

4 Data Sharing & Disclosure

ccv999 does not sell, rent, or trade your personal data. We share your data only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose:

• Payment processors: Your mobile wallet number (bKash, Nagad, Rocket, Upay) or bank account details are shared with the relevant payment provider solely to process your deposit or withdrawal transaction. These providers are contractually bound to handle your data securely and to use it only for payment processing.
• KYC and identity verification partners: Identity documents submitted during account verification may be processed by a contracted KYC service provider operating under a strict data processing agreement with ccv999. These providers are prohibited from using your data for any purpose other than the verification task.
• Game providers: To enable gameplay, certain technical session tokens are shared with game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers do not receive your full name, payment details, or identity documents — only the session credentials required to load the game.
• Fraud prevention and security services: ccv999 may share technical identifiers (IP address, device fingerprint, session tokens) with contracted fraud screening services to detect and prevent account takeovers, bonus abuse, and payment fraud.
• Law enforcement and regulatory authorities: Where required by law, court order, or regulatory directive, ccv999 will disclose personal data to the appropriate authorities. ccv999 will notify affected players of such disclosures where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of ccv999's platform assets, player data may be transferred to the acquiring entity as part of the transaction, subject to the same privacy protections described in this Policy.

All third-party service providers engaged by ccv999 are required to maintain the confidentiality of your data and to implement appropriate technical and organisational security measures consistent with industry standards.

5 Cookies & Tracking Technologies

The ccv999 platform uses cookies and similar technologies (such as local storage tokens and session identifiers) to enable core platform functionality, maintain your login session, remember your language and display preferences, and gather anonymous analytics data to help us improve the platform.

Types of Cookies Used by ccv999:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication tokens that keep you logged in during your visit, and security cookies that protect against cross-site request forgery (CSRF) attacks. These cookies cannot be disabled without breaking core platform functionality.
• Functional Cookies: Used to remember your preferences such as display language, preferred game category, and notification settings. These improve your experience but are not essential to the Platform's operation. You may disable them via your browser settings with minimal impact.
• Analytical Cookies: Used to collect anonymised data about how players navigate the Platform — which pages are visited most frequently, where players encounter errors, and which game categories are most popular among users in Dhaka, Chittagong, Sylhet, and other cities. This data is aggregated and never linked to an individual player's identity for marketing purposes.

What ccv999 Does NOT Use: We do not deploy third-party advertising cookies, social media tracking pixels, retargeting cookies, or any cross-site tracking technology. Your browsing behaviour on other websites is not tracked by ccv999.

Managing Cookies: You can control and delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will prevent you from logging in to your ccv999 account. Instructions for managing cookies are available in the help documentation of your browser (Chrome, Firefox, Safari, Edge, or Samsung Internet).

6 Data Retention

ccv999 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal obligations. The following retention schedule applies:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be attributed to an identified individual. If you request deletion of your data before the end of a mandatory retention period, ccv999 will delete all data it is legally permitted to remove and will restrict processing of the data that must be retained to the minimum extent required by law.

7 Your Rights as a Data Subject

As a ccv999 player whose personal data is processed by the Platform, you hold the following rights with respect to that data. To exercise any of these rights, contact our support team at [email protected] with your registered account email and a description of your request. ccv999 will respond within 30 days.

• Right of Access: You may request a copy of all personal data that ccv999 holds about you, along with information about how it is used and with whom it has been shared.
• Right to Rectification: If any personal data held by ccv999 is inaccurate or incomplete, you may request that it be corrected. Some corrections (e.g., changes to your registered name) will require supporting documentation.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been unlawfully processed. Note that data subject to mandatory legal retention periods (see Section 6) cannot be deleted until those periods expire.
• Right to Restrict Processing: You may request that ccv999 limits the processing of your data in certain circumstances — for example, while a rectification request is under review, or where you contest the legal basis for processing.
• Right to Data Portability: Where processing is based on your consent or on a contract, you may request that ccv999 provide your personal data in a structured, commonly used, machine-readable format (e.g., CSV) so that it can be transferred to another service provider of your choice.
• Right to Object: You may object to processing carried out on the basis of legitimate interests (including profiling for responsible gaming monitoring) where you believe your fundamental rights outweigh those interests. You may also object at any time to processing for direct marketing purposes, and ccv999 will cease such processing immediately upon receipt of an objection.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without penalty. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

8 Data Security Measures

ccv999 implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction.

• Encryption in Transit: All data transmitted between your device and the ccv999 servers is encrypted using TLS 1.2 or higher. This applies to the website, mobile-optimised platform, and all API connections used by the cashier and game providers.
• Encryption at Rest: Sensitive personal data stored in ccv999 databases — including identity documents, payment method identifiers, and KYC records — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to player personal data is restricted on a strict need-to-know basis. ccv999 staff members are granted data access only to the extent required to perform their specific role. All data access is logged and regularly audited.
• Password Security: Player passwords are stored as salted cryptographic hashes. ccv999 employees cannot read your password in plain text. If you forget your password, a secure reset link is sent to your registered email address — your password is never retrieved or transmitted in plain text.
• Fraud Monitoring: Automated fraud detection systems monitor login activity, transaction patterns, and session behaviour in real time. Anomalous activity triggers automatic alerts and, where appropriate, temporary account holds pending investigation.
• Incident Response: In the event of a data security incident that affects your personal data and poses a risk to your rights and freedoms, ccv999 will notify affected players without undue delay and will take all reasonable steps to contain and remediate the incident.

Despite these measures, no digital platform can guarantee absolute security. Players are responsible for maintaining the confidentiality of their own login credentials and for logging out of their ccv999 account when using shared or public devices. If you suspect that your account has been compromised, contact us immediately at [email protected].

9 Third-Party Services

The ccv999 platform integrates with a number of third-party services to deliver a complete gaming and betting experience. Each of these integrations involves some degree of data exchange, governed by the terms described below:

• Game Providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, Habanero): When you launch a game, an authenticated session token is passed to the game provider's servers to initiate the game. This token identifies your ccv999 session but does not include your full name, payment information, or identity documents. Game providers process game results and return outcome data to ccv999 for wallet crediting.
• Payment Processors (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank): Payment providers receive only the transaction-specific data required to process your deposit or withdrawal — typically your registered wallet number or bank account identifier and the transaction amount in BDT. These providers have their own privacy policies governing their data practices.
• Analytics Services: ccv999 uses privacy-respecting analytics tools to monitor platform performance and player behaviour in aggregate. These tools are configured to anonymise IP addresses and are prohibited from using collected data for advertising or cross-site tracking purposes.
• KYC Verification Partners: Identity documents submitted during account verification are processed by contracted KYC service providers under strict data processing agreements. These partners are certified to handle sensitive identity data and are prohibited from using your documents for any purpose other than the specific verification task assigned by ccv999.
• Fraud Prevention Services: Technical identifiers such as IP address, device fingerprint, and browser characteristics may be shared with fraud screening services to detect multi-accounting, bonus abuse, and payment fraud. These services return a risk score to ccv999 and do not retain your personal data beyond the immediate screening transaction.

ccv999 does not control the privacy practices of third-party service providers beyond the data processing agreements in place. We encourage you to review the privacy policies of payment providers you use, particularly bKash, Nagad, Rocket, and Upay, as their handling of your mobile wallet data is governed by their own terms independently of ccv999.

This Privacy Policy applies exclusively to personal data processed by ccv999 and its contracted processors. It does not extend to external websites, apps, or services that may be referenced in our communications. If you click a link to an external resource (for example, a responsible gaming helpline or a regulatory body's website), your interaction with that resource is governed by its own privacy policy.

10 Updates to This Policy

ccv999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform functionality. When material changes are made, ccv999 will notify registered players via email to their registered address and by displaying a prominent notice on the Platform for a minimum of 14 days before the changes take effect.

The "Effective Date" at the top of this page reflects the date of the most recent revision. Your continued use of the ccv999 Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you should stop using the Platform and contact us to close your account and request deletion of your personal data to the extent permitted by law.

For questions, clarifications, or formal data rights requests regarding this Privacy Policy, please contact the ccv999 Data Protection team at: [email protected]. Our support team is available 24 hours a day, 7 days a week, including Bangladesh public holidays such as Eid, Victory Day (16 December), and Independence Day (26 March), and responds to all data protection enquiries in English.