Privacy Policy CV999 — Member Personal Data Protection

This Privacy Policy describes how cv999 manages the personal information of users on the cv999.plus platform and the cv999 mobile app. It applies to all individuals who visit, register, or use any service offered by cv999.

Cv999 is committed to complying with Malaysia's Personal Data Protection Act 2010 (PDPA) and the highest international data protection standards. We understand that your trust is the foundation of our relationship, and we do not take this responsibility lightly.

By registering or using the cv999 platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the platform.

Cv999 collects your personal data in several ways. Below is a breakdown of the data we collect by category:

Data may also be collected automatically when you visit our platform, including information about how you interact with the cv999 website and app.

The personal data we collect is used for the following purposes:

• Account Management: Creating, verifying and maintaining your cv999 account, including a streamlined KYC process.
• Transaction Processing: Securely processing all deposits and withdrawals via FPX, DuitNow, TNG eWallet, GrabPay, Boost and USDT.
• Platform Security: Detecting and preventing fraud, money laundering and suspicious activity on the cv999 platform.
• Customer Support: Responding to inquiries, resolving complaints and providing technical assistance to members.
• Responsible Gaming: Monitoring wagering patterns to identify members who may need support and offering betting limit management tools.
• Marketing Communications: Sending information about promotions, bonuses and platform updates — only to members who have given their consent.
• Legal Compliance: Meeting reporting and compliance obligations to the relevant authorities in accordance with Malaysia's legal requirements.
• Service Improvement: Analyzing aggregate usage patterns to improve the user experience on the cv999 platform.

Cv999 does not sell your personal data to any third party. However, we may need to share certain information with trusted parties in the following circumstances:

• Payment Providers: Financial institutions and digital wallet providers that process your deposits and withdrawals, subject to their own privacy policies.
• Game Providers: Gaming companies such as Pragmatic Play, NetEnt, and Playtech that provide game content on the cv999 platform, for the purposes of game settlement and fraud prevention.
• Technical Service Providers: Companies that help us operate the platform, including cloud computing, analytics, and cybersecurity services — all bound by strict confidentiality agreements.
• Statutory Authorities: Government agencies or regulatory bodies when required by law or a valid court order.
• Fraud Investigators: Specialized companies that help us detect and prevent fraudulent activity, money laundering, and financial crime.

All third parties that receive your data are required to comply with data protection standards equivalent to those of cv999 and may only use that data for the specified purposes.

Cv999 continuously invests in security infrastructure to ensure your personal data is always protected. The security measures we employ include:

• 256-bit SSL Encryption: All data transmitted between your device and cv999 servers is encrypted using industry-standard 256-bit SSL technology.
• Two-Factor Authentication (2FA): An additional security layer is available for all cv999 accounts to prevent unauthorized access.
• 24/7 Monitoring: The security monitoring system operates 24/7 to detect any suspicious activity in real time.
• Strict Access Controls: Only authorized cv999 staff may access member personal data, and every access is logged for audit purposes.
• Regular Security Testing: The cv999 platform undergoes regular security assessments and penetration testing by independent experts.
• Data Backup: Data is automatically backed up to a secure location to prevent data loss due to system failure.

Cv999 uses cookies and similar tracking technologies to enhance your experience on the platform. The following are the types of cookies we use:

• Essential Cookies: Required for core platform operations such as login authentication and session security. These cookies cannot be disabled.
• Preference Cookies: Saving your preferences such as language and interface display to make navigation easier.
• Analytics Cookies: Helping us understand how members use the cv999 platform so we can make relevant improvements. This data is collected in aggregate and anonymized.
• Marketing Cookies: Used to display relevant cv999 promotional content to you. You may opt out of marketing cookies through your browser settings.

You may manage or delete cookies through your web browser settings at any time. Please note that disabling certain cookies may affect the functionality of the cv999 platform.

Cv999 retains your personal data for as long as necessary to fulfill the purpose of collection or as required by law. Generally:

• Active Account Data: Retained for as long as your account remains active on the cv999 platform.
• Financial Transaction Data: Retained for a minimum of 7 years in accordance with Malaysia's financial and tax regulatory requirements.
• KYC Data: Retained for 5 years after account closure in accordance with the Anti-Money Laundering Act 2001.
• Communication Logs: Retained for 2 years for complaint resolution and customer service record purposes.
• Closed Account Data: Following account closure, personal data that is no longer required will be deleted or anonymized within 90 days.

When data is no longer needed, cv999 will securely delete it using methods that ensure it cannot be recovered.

As a cv999 member, you have the following rights regarding your personal data under Malaysia's Personal Data Protection Act 2010:

To exercise any of the rights above, please contact the cv999 support team via live chat or email at [email protected]. We will process your request within 14 business days.

Cv999 Platform not intended for individuals under 18 years of age and we do not knowingly collect personal data from minors. If we find that data has been collected from an individual under age without parental or guardian knowledge, we will take immediate action to delete that information and close the account in question.

If you believe your child or any minor has registered on the cv999 platform, please contact us immediately so we can take the appropriate action.

Cv999 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or platform improvements. When significant changes occur, we will notify you through:

• Notices prominently displayed on the cv999.plus homepage.
• In-app notifications on the cv999 mobile app.
• An email will be sent to the address registered in your account for changes involving your fundamental rights.

The "Last Updated" date at the top of this document indicates when this Privacy Policy was last revised. We encourage you to review this policy periodically.

If you have any questions, concerns, or complaints about how cv999 handles your personal data, our dedicated privacy team is here to help:

• Live Chat: Available 24/7 directly on the cv999 platform — the fastest way to get an immediate response.
• Privacy Email: [email protected] — please state "Privacy Inquiry" in the subject line of your email.