At cv999, your privacy is taken as seriously as the security of your PKR balance. This Privacy Policy explains exactly what personal data the cv999 platform collects from Pakistani players, why we collect it, how we use and protect it, with whom we may share it, how long we retain it, and what rights you hold over your own information. We have written this policy in clear English — not legal obscurity — because we believe every cv999 player deserves to fully understand how their data is handled.
This summary does not replace the full policy below. The complete legal text governs in all cases.
cv999 does not sell, rent, or monetise your personal data to third-party advertisers or data brokers under any circumstances. Your information is used exclusively to operate your cv999 account, comply with licensing obligations, and improve the platform experience for Pakistani players.
All data transmitted between your device and the cv999 platform — including login credentials, personal details, payment information, and KYC documents — is protected by 256-bit SSL encryption. Data at rest is encrypted using AES-256. Your information is never transmitted or stored in plain text at any point in the cv999 infrastructure.
cv999 follows a data minimisation principle — we collect only the personal data that is genuinely required to operate your account, process payments, verify your identity for KYC compliance, and fulfil our international gaming licence obligations. We do not collect data speculatively or "just in case."
Registered cv999 players have the right to request a copy of all personal data held about them, to correct inaccurate data, to request deletion of data where permissible under our licence obligations, and to object to certain processing activities. All data rights requests are handled within 30 days of receipt.
The CNIC scans, identity photographs, and proof-of-payment documents you submit for cv999 KYC verification are used exclusively for identity verification and anti-money laundering compliance. KYC documents are not shared with third parties for marketing, profiling, or any purpose beyond regulatory compliance.
cv999 sends promotional emails and SMS notifications only to players who have opted in to receive them during registration or via their account communication preferences. You can opt out of all marketing communications at any time from within your cv999 account settings — without any requirement to contact support.
cv999 refers to the operator of the online gaming platform accessible at cv999.cam. cv999 is a licensed gaming operator holding an international gaming licence that authorises the provision of online casino, live dealer, card game, and sports betting services. Our platform is specifically designed and operated for English-speaking Pakistani players, offering gaming in PKR and supporting Pakistani payment methods including JazzCash and EasyPaisa.
For the purposes of data protection law and this Privacy Policy, cv999 is the data controller in respect of all personal data collected from players using the cv999 Platform. As data controller, cv999 determines the purposes and means by which your personal data is processed. All data protection enquiries may be directed to our Data Protection contact at [email protected].
Platform Address: cv999.cam | Contact: [email protected] | Support Hours: 8 AM – 2 AM Pakistan Standard Time, daily
This Privacy Policy applies to all personal data collected, stored, and processed by cv999 in connection with your use of the cv999 platform at cv999.cam, including account registration, login sessions, gameplay activity, deposits, withdrawals, KYC submissions, customer support interactions, and marketing communications.
This policy applies to all registered cv999 players regardless of the device used to access the platform — mobile phone, tablet, or desktop computer. It also applies to visitors who browse the cv999 platform without having created an account, in respect of any anonymous technical data collected during that browsing session.
This policy does not govern the privacy practices of third-party service providers whose services cv999 may use (such as payment processors or game software suppliers), except to the extent that cv999 shares data with them as described in Section 9. cv999 recommends that players review the privacy policies of any third-party payment providers they use independently of the cv999 platform.
The following table sets out the categories of personal data cv999 collects, examples of the specific data points within each category, and the primary purpose for which that category is collected.
| Data Category | Examples | Primary Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, CNIC number, nationality | Account registration, KYC verification, age compliance |
| Contact Data | Pakistani mobile number, email address, residential address | Account communication, OTP delivery, withdrawal notifications |
| Financial Data | JazzCash / EasyPaisa account number, bank account details, transaction history, deposit and withdrawal amounts in PKR | Payment processing, fraud prevention, AML compliance |
| KYC Document Data | CNIC scan or photograph, proof-of-payment method documentation, source-of-funds documentation where requested | Identity verification, AML compliance, licensing obligations |
| Account Usage Data | Login timestamps, session duration, games played, bet amounts, bet results, balance history, bonus redemptions | Platform operation, responsible gaming monitoring, dispute resolution |
| Technical Data | IP address, device type, operating system, browser type and version, screen resolution, referring URL | Security, fraud detection, platform optimisation |
| Communications Data | Live chat transcripts, email correspondence with support, formal complaints submitted | Customer service, dispute resolution, quality improvement |
| Marketing Preference Data | Opt-in / opt-out status for email, SMS, push notification marketing | Ensuring marketing communications are sent only to consenting players |
cv999 does not intentionally collect sensitive personal data categories — such as racial or ethnic origin, political opinions, health data, or biometric data — except where a CNIC photograph incidentally contains facial imagery necessary for identity verification. In such cases, the photograph is used solely for identity verification purposes and is not processed for facial recognition or biometric profiling.
The majority of personal data cv999 holds about you is provided directly by you during the registration process, during KYC verification, when you contact customer support, when you submit a complaint, or when you update your account profile. This includes your name, contact details, CNIC, and payment method information.
When you access the cv999 platform — whether logged in or as an anonymous visitor — technical data is collected automatically by our platform infrastructure. This includes your IP address, the device and browser you are using, your session duration, and the pages or game categories you visit. This data is collected using standard web server logging and first-party cookies as described in Section 8.
When you make a deposit or withdrawal using JazzCash, EasyPaisa, or a bank transfer, cv999 receives confirmation data from the payment provider including the transaction reference number, the amount processed, and confirmation of the sending account number. cv999 does not receive or store your full JazzCash or EasyPaisa PIN or banking passwords — these are authenticated directly with the respective payment provider.
Where cv999 uses third-party identity verification services to assist in the KYC process, those providers may return a verification outcome (e.g., verified / unverified) and certain data points extracted from the submitted document. All such data is handled under a formal data processing agreement with the identity verification provider.
cv999 processes your personal data only where a valid legal basis exists under applicable data protection law. The legal bases on which cv999 relies are as follows:
Where cv999 relies on consent as the legal basis for any processing activity, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. Withdrawal of marketing consent does not affect your ability to use the cv999 platform.
cv999 uses your personal data for the following specific purposes:
cv999 does not use your personal data to make fully automated decisions that have significant legal or similarly significant effects on you without human review.
Know Your Customer (KYC) and Anti-Money Laundering (AML) data handling at cv999 is governed by cv999's international gaming licence obligations, which impose specific requirements on how player identity is verified and how suspicious financial activity is detected, recorded, and reported.
KYC data at cv999 consists primarily of: a clear photograph or scan of your valid CNIC (both sides); proof of the payment method used for deposits (such as a screenshot of your JazzCash account showing your registered mobile number); and, for high-value accounts, source-of-funds documentation such as a salary slip, bank statement, or business income evidence. The specific documents required depend on your transaction volume and risk profile as assessed by cv999's compliance team.
KYC documents submitted to cv999 are used solely for the following purposes: verifying that you are who you claim to be; confirming that you are at least 21 years of age; confirming that you are the legitimate owner of the payment method used for deposits; and assessing the risk profile of your account for AML compliance purposes. KYC documents are never shared with third parties for commercial, marketing, or non-compliance purposes.
cv999 operates a transaction monitoring system that reviews deposit and withdrawal patterns for indicators of potential money laundering activity. Where a transaction or pattern of transactions triggers a compliance alert, cv999's AML team conducts a manual review. Where, following review, activity cannot be satisfactorily explained, cv999 is legally obligated under its gaming licence to make a Suspicious Activity Report (SAR) to the relevant financial intelligence authority. We are legally prohibited from informing the subject of such a report that it has been made.
Depositing funds derived from criminal activity, fraud, or any other illegal source at cv999 is strictly prohibited and will be reported to relevant law enforcement authorities. All associated funds will be frozen pending investigation.
The cv999 platform uses first-party cookies — small data files stored on your device by your browser — to enable essential platform functions and improve your experience. cv999 does not use third-party advertising cookies or cross-site tracking technologies.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Session Cookies | Maintaining your logged-in state across the cv999 platform during an active session. Without these, you would be required to log in again with every page navigation. | Deleted when browser is closed |
| Remember-Me Cookies | Retaining your login state between sessions when you select "Remember Me" on the cv999 login page. Stored only on your device with your explicit instruction. | 30 days (or until manual logout) |
| Preference Cookies | Remembering your platform preferences — such as selected language, lobby game sort order, and notification settings — so you do not need to reconfigure them at each login. | 90 days |
| Security Cookies | Supporting fraud and bot detection by identifying unusual patterns of interaction with the cv999 platform. | Session / 24 hours |
| Analytics Cookies | Collecting anonymised, aggregated data on page visits, feature usage, and error occurrence to improve platform performance. No personally identifiable information is included. | 12 months |
You may configure your browser to refuse or delete cookies at any time. Please note that disabling session cookies will prevent you from remaining logged in to your cv999 account between page navigations. Disabling preference cookies will mean your platform settings reset at each visit. Analytics cookies may be blocked without affecting platform functionality.
cv999 does not sell, rent, or trade your personal data. We share your data only in the limited circumstances described below, and only to the extent necessary for the specified purpose:
In all cases where cv999 shares data with third-party processors (as opposed to independent data controllers), cv999 requires those processors to process your data only under cv999's instructions, to implement appropriate security measures, and to refrain from using your data for their own independent purposes.
cv999's primary platform infrastructure is hosted on servers located within the jurisdiction of our gaming licence. Some of the third-party service providers that cv999 works with — including game software suppliers and identity verification providers — may process data on servers located outside Pakistan or the licensing jurisdiction. Where such international transfers occur, cv999 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections described in this policy.
Safeguards for international data transfers may include: contractual data transfer agreements incorporating standard data protection clauses; binding corporate rules where the receiving entity is part of a regulated group; or transfers to jurisdictions recognised as providing an adequate level of data protection by the relevant regulatory authority under our gaming licence.
Specific information about the safeguards applicable to any particular international data transfer may be requested from cv999 by contacting [email protected] with the subject line "International Transfer Enquiry."
cv999 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or for as long as required by applicable law or our gaming licence obligations. The following retention periods apply as a general guide:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years after closure | Gaming licence obligation, AML regulation |
| KYC Documents | 5 years from submission (or account closure, whichever is later) | AML compliance, licensing requirement |
| Financial Transaction Records | 5 years from transaction date | AML regulation, audit obligation |
| Account Usage & Bet History | Duration of account + 2 years after closure | Dispute resolution, responsible gaming monitoring |
| Customer Support Records | 3 years from date of interaction | Dispute resolution, service quality |
| Technical / Server Logs | 90 days | Security monitoring, fraud detection |
| Marketing Consent Records | Duration of consent + 2 years | Proof of consent, regulatory compliance |
Upon expiry of the applicable retention period, cv999 securely deletes or anonymises your personal data in a manner that prevents identification or reconstruction of the original data. Where legal proceedings or regulatory investigations are ongoing, data directly relevant to those proceedings may be retained beyond the standard retention period until resolution.
cv999 implements a layered security architecture to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Our security measures include:
While cv999 implements industry-standard security measures, no electronic transmission or storage system is 100% secure. You are responsible for maintaining the confidentiality of your cv999 login credentials and for ensuring the security of the device from which you access the platform.
As a cv999 player, you hold the following rights in relation to your personal data. These rights may be subject to limitations where other legal obligations — such as AML record-keeping requirements — conflict with their full exercise.
You may request a copy of all personal data cv999 holds about you. We will provide this within 30 days of a verified request.
You may request correction of any inaccurate or incomplete personal data held in your cv999 account.
You may request deletion of your personal data where it is no longer necessary and no overriding legal obligation requires retention.
You may request that cv999 restrict processing of your data in specific circumstances, such as while a data accuracy dispute is resolved.
You may request a copy of data you provided to cv999 in a structured, machine-readable format for transfer to another service.
You may object to processing carried out on the basis of cv999's legitimate interests, including direct marketing and analytics profiling.
To exercise any of the above rights, submit a written request to [email protected] with the subject line "Data Rights Request" and include sufficient information for cv999 to verify your identity as the account holder. cv999 will respond within 30 days. Where a request is refused, cv999 will provide reasons and information about your right to escalate to the relevant supervisory authority.
The cv999 platform is strictly restricted to individuals aged 21 years and above. cv999 does not knowingly collect personal data from persons under the age of 21.
cv999 employs mandatory KYC age verification to confirm that all registered players meet the 21+ age requirement. Any account discovered to belong to a person under the age of 21 is immediately suspended and all associated data is reviewed. Where data has been collected from a minor, cv999 will delete that data as promptly as practicable, subject to any legal reporting obligations that may arise in connection with the minor's use of the platform.
If you are a parent or guardian and believe that a person under 21 in your care has created a cv999 account or submitted personal data to the cv999 platform, please contact [email protected] immediately. cv999 will investigate and take appropriate action without undue delay.
cv999 sends promotional communications — including bonus offers, PSL cricket betting promotions, seasonal festival campaigns, and new game announcements — only to players who have opted in to receive them. Opt-in is requested during the registration process and can be adjusted at any time via your cv999 account communication preferences panel.
Where you have opted in, cv999 may contact you via email, SMS, and in-platform push notifications. Each communication channel requires a separate opt-in and may be individually disabled without affecting the others. Transactional communications — such as deposit confirmations, withdrawal notifications, and security alerts — are not subject to marketing opt-in and will be sent regardless of your marketing preferences, as they are necessary for the operation of your account.
You may withdraw your consent to receive marketing communications at any time by: visiting Account Settings → Communication Preferences within your cv999 account and disabling the relevant channel; clicking the unsubscribe link in any cv999 marketing email; or contacting [email protected] with the subject line "Marketing Opt-Out." Opt-outs are processed within five business days. You may continue to receive transactional messages after unsubscribing from marketing.
Withdrawing marketing consent does not affect the lawfulness of any marketing communication sent before the withdrawal was processed, and does not affect your ability to use the cv999 platform in any way.
cv999 reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, updates to our gaming licence obligations, or improvements to our platform. The effective date of the current version is displayed at the top of this document.
Where changes to this policy are material — meaning they meaningfully affect your rights or how your data is processed — cv999 will notify registered players by email at least 14 days before the updated policy takes effect, and will display a prominent notice on the cv999 platform. Continued use of the cv999 platform after the effective date of any updated policy constitutes acceptance of the updated terms.
For non-material changes — such as clarifications of existing practices, corrections of typographical errors, or updates to contact information — cv999 may update this policy without prior notice, and the updated policy takes effect from the date of publication on the platform.
Tip: We recommend bookmarking cv999.cam/privacy-policy and reviewing this page periodically — particularly before any significant activity on your account such as a first withdrawal or a high-value deposit.
For any questions, requests, or concerns relating to this Privacy Policy or to how cv999 handles your personal data, please contact us using the details below. All privacy enquiries are handled by cv999's data protection team and responded to within the timeframes specified in Section 13.
cv999 — Data Protection Team
Email: [email protected]
Subject Line for Privacy Requests: "Privacy Enquiry" or "Data Rights Request"
Response Time: Within 30 calendar days for data rights requests; within 5 business days for general privacy enquiries
Support Hours: 8:00 AM – 2:00 AM Pakistan Standard Time, 7 days per week
If you are not satisfied with cv999's response to a data rights request or privacy complaint, you have the right to escalate the matter to the relevant data protection supervisory authority under the jurisdiction of our gaming licence, or to seek independent legal advice. Details of the applicable supervisory authority are available from the cv999 compliance team upon request.
cv999 is Pakistan's most transparent and player-forward gaming platform. Your PKR, your data, and your identity are protected by layers of security and a genuine commitment to fair, responsible gaming. Live cricket betting, PSL odds, 500+ slots, and live dealer tables — all in PKR via JazzCash. 21+ only.
21+ Only. Please review our Terms & Conditions and Responsible Gaming policy before playing.