Contents
Reading progress
1Introduction
This Privacy Policy applies to all users of the cv999 platform, operated at cv999.life. It explains how cv999 collects, uses, stores, and protects the personal information of players based in Pakistan and elsewhere. By registering on cv999 or continuing to use the platform, you confirm that you have read and understood this Privacy Policy and consent to the practices described here.
cv999 treats privacy as a genuine responsibility, not a legal box to tick. Pakistani players trust the platform with their real names, their CNIC numbers, their phone numbers, and the payment methods they use for everyday financial transactions — Easypaisa, JazzCash, NayaPay, SadaPay, bank accounts. That information deserves careful handling, and this policy describes exactly how cv999 handles it.
This Privacy Policy should be read alongside the cv999 Terms and Conditions, which govern the overall relationship between you and the platform. Where this policy uses the terms "we," "us," or "cv999," they refer to the operator of cv999.life. Where it uses "you" or "player," it refers to any individual who has registered on or is using the platform.
Plain Summary: cv999 collects the information needed to run your account, process your payments, comply with regulations, and keep the platform secure. It is not sold to advertisers. It is not shared without a legitimate reason. You have rights over your data, and exercising them is straightforward.
cv999 is designed for Pakistani players — privacy protections reflect the trust you place in the platform.
2Personal Data We Collect
cv999 collects only the personal data required to provide the service, comply with legal obligations, and maintain platform security. The following table outlines the categories of data collected and specific examples of each.
| Category | Examples | Required? |
|---|---|---|
| Identity Data | Full legal name, date of birth, CNIC number, selfie or photo ID for KYC | Required |
| Contact Data | Mobile number, email address | Required |
| Payment Data | Easypaisa/JazzCash account number, bank account details for IBFT, card last four digits, transaction reference numbers, PKR deposit and withdrawal amounts | Required |
| Account Data | Username, encrypted password, account balance, bonus status, VIP tier, session history | Required |
| Usage Data | Games played, bet amounts, session start/end times, game outcomes, chat messages in live games | Automatic |
| Device & Technical Data | IP address, device type, operating system, browser type and version, screen resolution, connection type | Automatic |
| Communication Data | Support chat transcripts, email correspondence, complaint records | When used |
2.1 Sensitive Data
CNIC information is treated as sensitive personal data. It is collected solely for age verification and identity verification purposes, stored in encrypted form, and never used for marketing or shared beyond what is strictly required for KYC and regulatory compliance. cv999 does not collect biometric data, health information, or religious or political information from players.
3How We Collect Your Data
cv999 collects personal data through three main channels:
3.1 Directly From You
Most of the data cv999 holds about you comes directly from your own actions on the platform — registration form submissions, KYC document uploads, deposit and withdrawal requests, support chat conversations, and gameplay. When you fill in a form on cv999, the information you provide is transmitted over an encrypted connection and stored in secure servers.
3.2 Automatically During Your Use of the Platform
When you visit cv999.life or use the platform on any device, certain technical data is collected automatically. This includes your IP address, the device you are using, your browser, and pages or game sessions accessed. This data is collected through server logs and, where you have consented, through cookies and similar tracking technologies. See Section 7 for full details on cookies.
3.3 From Third Parties
cv999 may receive data about you from third parties in specific circumstances: payment processors (Easypaisa, JazzCash, NayaPay, SadaPay, banks, card networks) confirm transaction status and may flag unusual activity; identity verification services may confirm or supplement the identity documents you provide; fraud prevention and anti-money laundering databases may be checked as required by the platform's operating licence.
No Social Media Login: cv999 does not currently offer login via Facebook, Google, or any other social media platform. cv999 does not collect data from your social media accounts or profile activity.
Pakistani players from every city trust cv999 with their data — that trust shapes every privacy decision we make.
4Why We Use Your Data (Legal Basis)
cv999 uses personal data only for clearly defined purposes, each of which has a lawful basis. The table below maps the purposes to the data used and the legal basis for processing.
| Purpose | Data Used | Basis |
|---|---|---|
| Creating and managing your account | Identity, Contact, Account | Contract |
| Processing deposits and withdrawals | Payment, Identity | Contract |
| Age and identity verification (KYC) | Identity (CNIC), Contact | Legal Obligation |
| Anti-money laundering checks | Payment, Identity, Usage | Legal Obligation |
| Responsible gaming monitoring | Usage, Account | Legal Obligation |
| Fraud prevention and platform security | Device, Usage, Payment | Legitimate Interest |
| Improving the platform | Usage, Device (anonymised) | Legitimate Interest |
| Sending service communications | Contact, Account | Contract |
| Promotional communications (where opted in) | Contact, Usage | Consent |
| Responding to support requests | Identity, Communication, Account | Contract |
Marketing Opt-Out: If you have opted in to receive promotional communications from cv999 and wish to stop, you can unsubscribe at any time via the link in any marketing message or by contacting cv999 support. Opting out of marketing does not affect service communications such as deposit confirmations, withdrawal notifications, or KYC requests.
5Who We Share Your Data With
cv999 does not sell your personal data to any third party. Period. Your data is shared only where it is necessary to operate the platform, comply with legal obligations, or protect the platform and its players from fraud. The categories of recipients are listed below.
- Payment Processors: Easypaisa, JazzCash, NayaPay, SadaPay, bank partners, and card network processors receive the transaction data necessary to execute your deposits and withdrawals. They do not receive gameplay data or browsing history.
- KYC and Identity Verification Services: Third-party services may receive your CNIC and supporting documents to verify identity as required by cv999's operating licence. These services are contractually bound to use the data only for verification purposes and to store it securely.
- Fraud and AML Screening: cv999 may check your details against industry fraud databases and anti-money laundering watchlists as required by its regulatory obligations. This is a standard requirement for licensed gaming operations.
- Technology Providers: The companies that provide cloud hosting, platform infrastructure, game delivery, and customer support software handle some data as part of service delivery. All are bound by data processing agreements that restrict their use of your data to the service being provided.
- Regulatory Authorities: Where legally required, cv999 will share data with government bodies, law enforcement, or its licensing regulator. cv999 will not disclose more than what is legally required and will notify you where possible unless prohibited from doing so.
- Business Transfers: In the event of a merger, acquisition, or sale of the cv999 business, player data may be transferred as part of that transaction. You will be notified of any such change that affects this Privacy Policy before it takes effect.
No Data Sales, Ever: cv999 has never sold player data and will never do so. Your CNIC details, phone number, payment information, and gaming behaviour are not available to advertisers, data brokers, or any commercial third party outside the categories described above.
How cv999 Protects Your Data Technically
6Data Retention
cv999 retains personal data for as long as is necessary for the purpose for which it was collected, subject to regulatory minimum retention periods. The following retention rules apply:
- Account data (active accounts): Retained for the lifetime of your account plus a minimum of five years after account closure, as required for anti-money laundering compliance.
- Transaction records: Retained for a minimum of seven years as required by financial record-keeping obligations applicable to licensed gaming operators.
- KYC documents (CNIC, identity proofs): Retained for a minimum of five years after account closure. May be retained longer where regulatory requirements or ongoing investigations require it.
- Support communications: Retained for three years from the date of the last message in a support thread, or longer if the communication relates to a dispute or regulatory matter.
- Marketing consent records: Retained for three years from the date consent was given, or until you withdraw consent, whichever is earlier.
- Anonymised usage analytics: May be retained indefinitely in anonymised, non-identifiable form for platform improvement purposes.
When data is no longer required, it is securely deleted or anonymised. Secure deletion means the data cannot be reconstructed or recovered. cv999 does not retain personal data "just in case" beyond what these rules require.
Your data is handled with the same care you expect from any trusted institution in Pakistan.
7Cookies and Tracking Technologies
cv999 uses cookies and similar technologies on its website and platform. Cookies are small data files stored on your device when you visit a website. They help the platform function correctly, remember your preferences, and — where you have consented — understand how the platform is used.
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Session management, login state, security tokens, deposit/withdrawal flow continuity. The platform cannot function without these. | No | |
| Remembering your preferred language, display settings, and whether you have dismissed certain notifications. | Yes | |
| Understanding which games are most used, where players experience errors, and how pages perform — used in anonymised, aggregated form only. | Yes | |
| Detecting unusual login patterns, bot detection, fraud signals. These cookies protect your account from unauthorised access. | No |
You can manage cookie preferences through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or be notified before a cookie is stored. Note that disabling functional cookies may affect your experience on cv999 — preferences and session details may not be retained between visits.
No Advertising Cookies: cv999 does not use advertising or retargeting cookies. Your browsing activity on cv999.life is not tracked to serve you ads on other websites. There are no third-party advertising networks embedded in the platform.
8Data Security
cv999 implements technical and organisational measures appropriate to the risk level of the data processed. Key security measures include 256-bit SSL/TLS encryption for all data in transit between your device and cv999 servers; AES-256 encryption for sensitive data stored at rest, including payment details and identity documents; bcrypt password hashing with salting — your actual password is never stored in readable form; OTP (one-time password) confirmation required for all withdrawal requests; IP-based anomaly detection to flag unusual login or transaction patterns; and strict role-based access controls within cv999's operational team — employees can only access the data their role requires.
Despite these measures, no online system can guarantee absolute security. cv999 cannot provide an unconditional guarantee that its platform is immune to every possible attack or data incident. In the event of a data breach that poses a material risk to players, cv999 will notify affected users without undue delay and will take immediate steps to contain and remediate the breach.
You also have a role in security. Use a strong, unique password for your cv999 account. Do not share your login credentials. Log out from shared devices. Enable any additional verification options available in your account settings. If you believe your account has been compromised, contact cv999 support immediately via live chat.
9Your Data Rights
As a cv999 player, you have the following rights regarding your personal data. These can be exercised by contacting cv999 at support@cv999.life with your account details and the specific right you are exercising.
Right of Access
Request a copy of all personal data cv999 holds about you. cv999 will respond within 30 days with a full data export. No fee applies for a first request in any 12-month period.
Right of Rectification
Request correction of inaccurate or incomplete personal data. For name or date of birth corrections, supporting documentation may be required.
Right of Erasure
Request deletion of your personal data where cv999 no longer has a lawful basis to retain it. This right does not override legal retention obligations — transaction records and KYC data must be kept for minimum statutory periods.
Right to Restrict Processing
Request that cv999 stops using your data for certain purposes — for example, marketing — while a dispute about accuracy or lawful basis is resolved.
Right to Data Portability
Request your personal data in a structured, machine-readable format that can be transferred to another service. Applies to data you provided directly under a contract or consent basis.
Right to Object
Object to cv999 processing your data for legitimate interest purposes, including profiling for responsible gaming purposes. cv999 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
Withdraw Consent
Where processing is based on your consent (e.g., marketing emails), you can withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.
How to Exercise Your Rights: Email support@cv999.life with the subject line "Data Rights Request" and include your registered mobile number or email and the right you wish to exercise. cv999 will respond within 30 days. Identity verification may be required before processing certain requests to ensure your data is not released to someone else.
10Children and Minors
cv999 is strictly for adults aged 18 and over. The platform is not directed at children and does not knowingly collect personal data from anyone under the age of 18. If cv999 becomes aware that a minor has registered on the platform, the account will be immediately suspended, the data will be securely deleted (except where legal obligations require retention of transaction records), and the deposited funds will be returned to the payment method used after identity verification.
If you are a parent or guardian and believe a person under 18 in your care has registered on cv999, please contact support@cv999.life immediately. cv999 will prioritise investigation and resolution of such cases.
11Third-Party Links
cv999.life does not contain links to third-party websites or platforms in the main platform interface. However, if you access cv999 through a partner link, referral, or affiliate channel, be aware that those third-party sites operate under their own privacy policies. cv999 is not responsible for the privacy practices of any third party and encourages you to read the privacy policies of any site you visit outside of cv999.life.
12Changes to This Privacy Policy
cv999 may update this Privacy Policy from time to time to reflect changes in the platform, applicable law, or operational practices. When changes are made, the "Last Updated" date at the top of this page will be revised. For material changes — particularly those that affect how personal data is used or who it is shared with — cv999 will notify registered players via their registered email address or an in-platform notification before the change takes effect.
Your continued use of cv999 after any change to this Privacy Policy constitutes acceptance of the revised policy. If you disagree with any change, you may close your account and request return of your balance by contacting cv999 support before the change takes effect.
Version History: Previous versions of this Privacy Policy are available on request by contacting support@cv999.life. This ensures transparency about how the policy has evolved over time and what commitments were in place at any given period.
13Contact and Complaints
If you have any questions, concerns, or complaints about how cv999 handles your personal data, or if you wish to exercise any of the data rights described in Section 9, please contact us through the following channels:
Live Chat
24/7 via cv999.life. Fastest response for urgent account-related data questions.
support@cv999.life — for formal data rights requests and complaints about data processing.
FAQ
Visit our FAQ page for answers to common questions about accounts and privacy on cv999.
cv999 will acknowledge privacy-related complaints within 5 business days and aim to provide a substantive response within 20 business days. If you are not satisfied with cv999's response to your complaint, you have the right to escalate the matter to the relevant regulatory or supervisory authority.
Six Ways cv999 Protects Pakistani Players' Data Every Day
These aren't just policy statements. They are specific, implemented features that protect your data on cv999 right now.
Encrypted End to End
Every piece of data travelling between your phone and cv999 servers is encrypted with 256-bit SSL. Anyone intercepting traffic cannot read what is transmitted. This applies to logins, payments, game data, and chat.
OTP on Every Withdrawal
No withdrawal on cv999 is processed without a one-time password sent to your registered mobile number. Even if someone obtained your login details, they cannot access your PKR without your phone in hand.
No Data Sales, Ever
cv999 has not sold, does not sell, and will never sell player data to advertisers, data brokers, or any commercial third party. Your information exists on cv999's systems to run your account — nothing else.
CNIC Stored Separately
Your CNIC and identity documents are stored in an isolated, separately encrypted environment from the rest of your account data. Internal access to KYC documents is restricted to a small, specifically authorised team.
Fraud Detection Active 24/7
Automated fraud monitoring runs around the clock on cv999 transactions and login events. Unusual activity — such as login from a new device or country, or withdrawal request to an unverified method — triggers an automatic security hold and review.
Minimal Internal Access
cv999 staff access to player data is role-based and logged. A support agent can see your account status but not your full CNIC. A compliance officer can review transaction history but not your support chat. Compartmentalisation limits exposure from inside.