Official Policy

Cv99 Privacy Policy – Member Personal Data Protection

Cv99 is committed to protecting the privacy and data security of every member. This document explains in detail how we collect, use, store, and protect your information in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

Updated: 1 January 2026
🔒

Our Commitment to Your Privacy

Six core principles that form the foundation of how cv99 handles and protects your personal information every day.

High-Level Encryption

All data transmitted through cv99 is protected with 256-bit SSL encryption. Sensitive information such as passwords and payment details is never stored in plain text.

Malaysia PDPA Compliance

Cv99 operates in full compliance with the Personal Data Protection Act 2010. Every data collection and usage process adheres to Malaysian legal requirements.

Data Control in Your Hands

You have the right to access, correct, and request deletion of your personal data at any time. Our team will process your request within 14 business days.

No Data Sales

Cv99 has never sold, rented, or traded members' personal data to any third party for marketing purposes without your explicit consent.

Secure Data Storage

Cv99 servers are equipped with multi-layered firewall protection and an active intrusion detection system. Data backups are performed regularly to prevent information loss.

Data Breach Notification

In the event of any security incident involving your data, cv99 will notify you within 72 hours of the incident being detected, in line with international best practices.

1Introduction

Cv99 is an online entertainment platform operating under the domain cv99.plus and serves users across Malaysia. We understand that privacy is more than a legal obligation — it is our moral responsibility to every member who trusts us with their personal information.

This Privacy Policy is designed to clearly and transparently explain how cv99 collects, processes, stores, protects, and in certain circumstances, discloses your personal data. This document applies to all users who access the cv99 website, register an account, use gaming services, or interact with any feature of our platform.

By registering or continuing to use the cv99 platform, you are deemed to have read, understood, and agreed to the terms set out in this Privacy Policy. If you do not agree with any part of this policy, you are advised not to use our services.

This Privacy Policy should be read alongside Terms and Conditions cv99. Both documents form the basis of the service agreement between you and cv99.

2Personal Data We Collect

Cv99 only collects personal data that is strictly necessary to provide, improve, and protect our services. Data collection occurs through two main methods — information you provide directly and information collected automatically when you use the platform.

Information You Provide Directly

Data Categories Example Information Primary Purpose
Identity Full name, date of birth, identification card number KYC verification & age eligibility
Contact Email address, phone number Account communication & support
Finance Bank account number, account holder name Deposit & withdrawal processing
Security Password (encrypted), security questions Account Protection & Verification
KYC Documents MyKad copy, utility bills, bank statements Identity verification & AML compliance

Information Collected Automatically

  • IP address and general location (city/state level)
  • Device type, operating system, and web browser version
  • Server log data — pages visited, session time and duration
  • Cookies and session identifiers for an improved user experience
  • Gaming activity data including betting history and transactions
cv99 never stores full credit or debit card numbers. All card payments are processed through PCI DSS-certified third-party payment gateways.

3How We Use Your Data

The personal data we collect is used solely for legitimate and stated purposes. cv99 will not use your data for any other purpose without first obtaining your consent.

  • Account management: Creating, verifying, and managing your member account, including KYC and age verification processes.
  • Transaction processing: Handling deposits, withdrawals, and all financial transactions in your account securely and accurately.
  • Service delivery: Providing access to over 500 games, bonuses, VIP programs, and other platform features you use.
  • Platform security: Detecting and preventing fraud, unauthorized access, money laundering, and service abuse.
  • Service communication: Sending important notifications related to your account, transactions, policy updates, and security information.
  • Marketing (with consent): Delivering promotional content, exclusive bonuses, and relevant VIP offers if you have opted in to receive marketing communications.
  • Platform improvements: Analyzing aggregated usage patterns to improve overall platform performance, design, and user experience.
  • Legal compliance: Meeting reporting obligations to relevant authorities as required by Malaysian law.
You may withdraw consent to receive marketing communications at any time by updating your account settings or contacting the cv99 support team.

4Data Sharing & Disclosure

Cv99 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. However, in the course of operating the platform, we may need to share certain information with trusted parties in the following circumstances:

Trusted Service Providers

Cv99 uses authorised third-party service providers to support platform operations. All such providers are bound by strict confidentiality agreements and are only permitted to use your data for specified purposes.

  • Game providers: Basic account information required to integrate with third-party gaming systems.
  • Payment gateway: Transaction information required to securely process deposits and withdrawals.
  • Identity verification services: Copies of KYC documents for identity and age verification purposes.
  • Analytics providers: Anonymised usage data for platform performance analysis.

Legally Required Disclosure

Cv99 may disclose your personal data to Malaysian authorities or regulatory bodies when required by law, court order, or for the purpose of preventing and investigating financial crime.

In the event of a merger, acquisition, or sale of cv99 assets, members' personal data may be transferred to the new entity. You will be notified via email or platform notification before any such transfer takes place.

5Cookies & Tracking Technologies

Cv99 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of Cookies We Use

Cookie Type Purpose Duration
Essential Cookies Session verification, login security, language preferences Session / 30 days
Performance Cookies Page usage analytics, load times, technical errors 90 days
Functional Cookies Settings you have selected such as theme and game preferences 1 year
Marketing Cookies Relevant promotional display (with your consent only) 30–90 days

You can control or delete cookies through your web browser settings. Please note that disabling essential cookies may affect certain functions of the cv99 platform, including the ability to stay logged in.

6Data Security

Cv99 continually invests in the latest security infrastructure to ensure your personal data is always protected against unauthorised access, modification, disclosure, or destruction.

Our Security Measures

  • 256-bit SSL Encryption: All communications between your device and cv99 servers are encrypted using the latest TLS protocols.
  • Secure password storage: Your password is stored as a bcrypt hash that cannot be decrypted.
  • Two-factor authentication (2FA): Additional security layers are available for all member accounts to prevent unauthorized access.
  • 24/7 Monitoring: An active intrusion detection system monitors all platform activity around the clock to identify threats promptly.
  • Multi-layer firewall: Our servers are protected by enterprise-grade firewalls that filter malicious traffic.
  • Regular security audits: cv99 conducts regular penetration testing and security audits by independent security experts.
  • Internal access controls: Only authorised staff with a legitimate work need may access members' personal data.
While cv99 takes all reasonable measures to protect your data, no online system can guarantee absolute 100% security. You also play an important role by keeping your password and login credentials confidential.

7Your Rights Under the PDPA

As a user subject to Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding your personal data that cv99 fully respects.

Right of Access

You have the right to request a copy of the personal data we hold about you. Requests will be processed within 14 business days.

Right to Rectification

If your data is inaccurate or outdated, you have the right to request that we correct the information promptly.

Right to Erasure

You may request the deletion of your personal data, subject to data retention obligations required by law.

Right to Restriction

You may request that cv99 restrict how we process your data in certain circumstances as provided under the PDPA.

Right to Data Portability

You have the right to receive your personal data in a machine-readable format for transfer to another service provider.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time without providing a reason.

To exercise any of the above rights, please contact the cv99 data protection team via email [email protected] or via the platform's live chat. We will verify your identity before processing any request.

8Data Retention

Cv99 retains your personal data for as long as necessary to fulfil the purposes stated in this Privacy Policy, subject to Malaysian legal requirements that mandate record retention for longer periods in certain circumstances.

  • Active account data: Retained for the duration your account is active plus 5 years after account closure.
  • Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysia's financial and taxation legal requirements.
  • KYC documents: Retained for the period required by applicable anti-money laundering (AML) laws.
  • Support communication logs: Retained for 3 years for reference and dispute resolution purposes.
  • Server log data: Retained for 12 months for security and technical analysis purposes.

Once the retention period expires or when data is no longer required, cv99 will securely delete or anonymise that data in accordance with established data deletion procedures.

9Third-Party Links & Services

Cv99 integrates with game providers, payment gateways, and third-party support services required for daily operations. While we carefully select our partners and require them to comply with strict security standards, cv99 is not responsible for the privacy practices of those third-party entities.

Every third-party provider we use is subject to a data processing agreement that clearly sets out:

  • Permitted data usage limits
  • Security obligations that must be met
  • Prohibition on disclosing data to third parties without cv99's authorization
  • Data deletion procedure upon contract termination
If you access external links from the cv99 platform, cv99's Privacy Policy does not apply to those websites. You are encouraged to read the privacy policy of each website you visit independently.

10Changes to the Privacy Policy

Cv99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our business practices, new technology requirements, or developments in data protection law in Malaysia.

When a material change occurs, cv99 will:

  • Updating the "Last Updated" date at the top of this document.
  • Displaying a clear notice on the platform's home page at least 14 days before changes take effect.
  • Sending notifications to your registered email for changes that directly affect your privacy rights.

Continued use of the cv99 platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. If you disagree with the changes, you have the right to close your account before the effective date.

The current version of this Privacy Policy is effective from 1 January 2026 and supersedes all previous versions.

11Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or the handling of your personal data by cv99, our Data Protection Officer team is ready to assist you.

Privacy Email

Send privacy-related enquiries to [email protected] with the subject line "Privacy Enquiry". We will respond within 14 business days.

Live Chat 24/7

For urgent enquiries, use the live chat button at the bottom right of the platform. Our support team is available 24 hours a day, 7 days a week.

For more information about your rights under Malaysian law, you may refer to Malaysia Department of Personal Data Protection under the Ministry of Communications and Multimedia. For questions related to responsible gaming, please visit the Responsible Gaming ours.

🔐

Join cv99 with Full Confidence

Your personal data is protected with 256-bit SSL encryption and full PDPA compliance. Register now and enjoy a safe, fair, and enjoyable gaming experience.

256-bit SSL Encryption Malaysia PDPA Compliance Data Not Sold 24/7 Support
Bahasa Melayu