cbv999 Privacy Policy — How We Handle Your Personal Data

This Privacy Policy ("Policy") is published by cbv999 ("cbv999", "we", "us", "our"), an online casino and sports betting platform operating under an international gaming licence and accessible at cbv999.ws. This Policy applies to all personal data collected and processed in connection with your use of the cbv999 website, mobile application, customer support channels, and any other cbv999 service.

By creating a cbv999 account, completing the cbv999 login process, making a deposit or withdrawal, or otherwise using any cbv999 service, you acknowledge that you have read and understood this Policy and that you consent to the collection, use, and processing of your personal data as described herein. If you do not agree with any provision of this Policy, you must not use the cbv999 platform.

This Policy should be read in conjunction with the cbv999 Terms & Conditions, which set out the broader legal framework governing your relationship with cbv999. Where there is a conflict between the two documents on a matter of data privacy, this Policy takes precedence.

cbv999 collects personal data across several categories. The specific data collected depends on your level of engagement with the platform and the services you use. The following table summarises the primary data categories cbv999 processes:

cbv999 does not collect special category data (such as racial origin, religious beliefs, or health information) except where voluntarily disclosed by a player in the context of a responsible gaming or welfare support request, in which case such data is handled with heightened confidentiality and used solely for the purpose for which it was disclosed.

cbv999 collects personal data through the following primary channels:

3.1 Direct Collection

You provide data directly to cbv999 when you register an account, complete KYC verification, make a deposit or withdrawal request, contact customer support via live chat or email, set responsible gaming limits on your account dashboard, participate in promotions, or respond to cbv999 surveys or feedback requests.

3.2 Automated Collection

cbv999 automatically collects certain technical data every time you visit or interact with the cbv999 platform. This includes your IP address, device fingerprint, browser type and version, operating system, referral source, page view data, session duration, and click-path behaviour. This data is collected via server logs, cookies, and similar tracking technologies as described in Section 5 of this Policy.

3.3 Third-Party Sources

In limited circumstances, cbv999 may receive personal data about you from third-party sources, including: identity verification service providers used during KYC processing; payment processors (including JazzCash, EasyPaisa, and crypto payment gateways) to verify transaction authenticity; fraud prevention and AML screening databases used in routine compliance checks; and analytics providers who supply aggregated behavioural data to help cbv999 improve platform performance.

cbv999 processes personal data only for specific, documented purposes and only where a valid legal basis exists for that processing. The following table sets out the primary purposes for which cbv999 processes personal data:

Where cbv999 relies on legitimate interests as a legal basis for processing, we have assessed that our interests are not overridden by your rights and freedoms as a data subject. You may request a copy of our legitimate interests assessment for any specific processing activity by contacting cbv999 support.

cbv999 uses cookies and similar technologies (including local storage, session tokens, and device fingerprinting) to operate the platform, remember your preferences, maintain your authenticated session, detect fraud, and analyse platform usage patterns.

5.1 Essential Cookies

These cookies are strictly necessary for the cbv999 platform to function. They include session authentication tokens that keep you logged in to your cbv999 account, CSRF protection tokens that prevent cross-site request forgery attacks, and load-balancing cookies that route your connection to the correct cbv999 server cluster. Essential cookies cannot be disabled without breaking core platform functionality.

5.2 Analytics Cookies

cbv999 uses analytics cookies to understand how players interact with the platform — which pages are visited most frequently, where users encounter difficulties, and how navigation flows can be improved. Analytics data collected via these cookies is aggregated and does not identify individual players. You may opt out of analytics cookies via the cbv999 cookie preference centre, accessible from the platform footer.

5.3 Marketing Cookies

Where you have given explicit consent, cbv999 may use marketing cookies to deliver relevant promotional content within the platform and to measure the effectiveness of cbv999 promotional campaigns. You may withdraw consent for marketing cookies at any time via the cookie preference centre, and such withdrawal will not affect the availability of any cbv999 service.

cbv999 does not sell your personal data. We share personal data only in the limited circumstances described below, and only to the extent necessary for each specific purpose:

• Payment Processors: cbv999 shares transaction data with payment service providers — including JazzCash, EasyPaisa, crypto gateway operators, and Pakistani banking partners — solely to facilitate deposit and withdrawal processing on your cbv999 account. These processors are contractually required to handle your data securely and to use it only for payment processing purposes.
• Identity Verification Providers: cbv999 shares identity documents and biometric data with certified KYC verification service providers for the purpose of meeting our licensing obligations. These providers process data under strict data processing agreements and are prohibited from using cbv999 player data for any independent purpose.
• AML & Fraud Screening: cbv999 may share transaction and identity data with licensed anti-money-laundering screening databases and fraud prevention networks where required by our gaming licence or applicable law. Such sharing is governed by legal obligation rather than commercial interest.
• Gaming Licence Regulatory Authority: cbv999 may be required to disclose player data, account records, and transaction histories to our licensing regulatory authority in response to a lawful regulatory request, audit, or investigation.
• Law Enforcement: cbv999 will comply with lawful court orders, law enforcement requests, or government directives requiring disclosure of player data. We will, where legally permissible, notify the affected player of any such disclosure.
• Corporate Transactions: In the event of a merger, acquisition, or transfer of ownership of cbv999, player data may be transferred to the acquiring entity, subject to that entity adopting data protection standards equivalent to those described in this Policy.

cbv999 is an internationally licensed platform. Your personal data may be transferred to, stored in, and processed in countries outside Pakistan, including the jurisdiction in which cbv999 holds its gaming licence, countries where our KYC and payment service providers operate, and jurisdictions where our server infrastructure is hosted.

cbv999 ensures that all international transfers of personal data are conducted with appropriate safeguards in place. Where data is transferred to a country that does not offer a level of data protection equivalent to the standards applied in cbv999's licensing jurisdiction, we implement contractual safeguards — such as standard data protection clauses — with the recipient to ensure your data is handled to an equivalent standard.

By using cbv999 and providing personal data to us, you acknowledge and consent to the potential transfer of your data across international borders for the purposes described in this Policy.

cbv999 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable regulatory and legal obligations. The following retention schedule applies:

After the applicable retention period has elapsed, cbv999 will either securely delete or anonymise your personal data such that it can no longer be attributed to any identifiable individual. Anonymised data may be retained indefinitely for statistical and analytical purposes.

cbv999 implements a layered technical and organisational security framework to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our key security measures include:

• 256-bit TLS Encryption: All data transmitted between your device and the cbv999 platform is encrypted using industry-standard TLS 1.3 protocol, preventing interception in transit.
• Password Security: cbv999 never stores plaintext passwords. All account passwords are hashed using bcrypt with a unique salt per account before storage.
• Two-Factor Authentication (2FA): cbv999 offers optional 2FA for all accounts. Players in Pakistan are strongly encouraged to enable 2FA to protect their cbv999 account against credential theft.
• Access Controls: Personal data is accessible internally only to cbv999 staff and systems that require it for a specific, documented operational purpose. Access logs are maintained and reviewed regularly.
• Data Segmentation: Player financial data, identity documents, and gaming history are stored in separate, access-controlled database environments to minimise the impact of any isolated security incident.
• Regular Security Audits: cbv999 conducts regular penetration testing and vulnerability assessments of its platform infrastructure, conducted by independent cybersecurity specialists.
• Incident Response: cbv999 maintains a documented data breach response procedure. In the event of a breach affecting your personal data, cbv999 will notify affected players within 72 hours of confirming the breach and will take immediate steps to contain and remediate it.

As a cbv999 user, you hold the following rights in relation to your personal data. To exercise any of these rights, contact cbv999 support via live chat within the platform or by email at the address listed in Section 16.

cbv999 will respond to all verified data rights requests within 30 calendar days. Where a request is complex or involves a large volume of data, cbv999 may extend this period by a further 60 days, in which case we will notify you of the extension and the reason within the initial 30-day window.

The cbv999 platform is strictly intended for use by individuals who are 21 years of age or older. cbv999 does not knowingly collect personal data from individuals under the age of 21. If cbv999 becomes aware that it has collected personal data from an individual under 21, all such data will be deleted immediately and the associated account permanently closed.

If you are a parent or guardian and believe that a person under 21 has registered a cbv999 account or provided personal data to cbv999, please contact us immediately via the details in Section 16. cbv999 will treat such reports as high-priority welfare matters and respond within 24 hours.

The cbv999 platform may contain links to third-party resources or may integrate third-party services — such as game providers, live streaming feeds, or payment gateways — that have their own independent privacy policies and data practices. cbv999 is not responsible for the privacy practices of third-party services. We encourage you to review the privacy policy of any third-party service before interacting with it. cbv999's Privacy Policy applies solely to data processed by cbv999 directly.

cbv999 may send you promotional communications — including bonus offers, PSL betting promotions, new game announcements, and platform updates — via SMS, email, or push notification, subject to the following conditions:

• cbv999 will only send marketing communications to players who have explicitly opted in to receiving them during account registration or from the cbv999 account dashboard.
• You may opt out of marketing communications at any time by updating your notification preferences in the cbv999 account dashboard, by replying STOP to any cbv999 SMS, or by clicking the unsubscribe link in any cbv999 email.
• Transactional communications — including deposit confirmations, withdrawal notifications, account security alerts, and KYC status updates — are not considered marketing communications and will be sent regardless of your marketing preferences, as they are necessary for the operation of your cbv999 account.
• cbv999 does not share your contact details with third-party marketers.

As a licensed gaming operator, cbv999 is subject to anti-money-laundering (AML) regulations and is required to maintain robust Know Your Customer (KYC) procedures. The processing of personal data for AML and KYC purposes is a legal obligation and cannot be waived or opted out of by individual players.

AML and KYC data processing on cbv999 includes: verification of identity documents (CNIC, passport) against third-party identity databases; screening of player names and financial details against international sanctions and politically exposed person (PEP) lists; monitoring of transaction patterns for indicators of money laundering activity; and reporting of suspicious transaction activity to the relevant financial intelligence authorities as required by law.

All AML and KYC records are retained for a minimum of five years from the date of collection, regardless of whether the associated cbv999 account remains active, in compliance with applicable gaming licence and financial crime prevention requirements.

cbv999 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law or regulatory requirements, or improvements to our platform and services. The version number and effective date at the top of this Policy indicate when it was last updated.

Where a material change is made to this Policy — particularly any change that affects how cbv999 collects, uses, or shares your personal data — cbv999 will notify active account holders via the registered email address or via a prominent notice within the cbv999 platform, at least 14 days before the change takes effect. Your continued use of cbv999 after that date constitutes acceptance of the revised Policy.

cbv999 recommends that you review this Privacy Policy periodically to stay informed of how your data is being handled. The most current version of this Policy is always available at cbv999.ws/privacy-policy.

If you have a question about this Privacy Policy, wish to exercise a data right, or want to raise a concern about how cbv999 has handled your personal data, please contact our Data Protection team through the following channels:

• Email: [email protected] — use the subject line "Privacy Request" or "Data Complaint" for prioritised routing.
• Live Chat: Available 24/7 within the cbv999 platform after completing the cbv999 login. Ask to speak with the Data Protection team.
• Response Commitment: Privacy enquiries are acknowledged within 48 hours. Full responses to data subject access requests and rectification requests are provided within 30 calendar days.

If you are not satisfied with cbv999's response to a privacy complaint, you have the right to escalate the matter to the data protection supervisory authority in cbv999's licensing jurisdiction. Details of the relevant authority are available from cbv999 customer support upon request.