Privacy Policy — cv789

This Privacy Policy applies to all personal data processed by cv789 (referred to throughout as "cv789", "we", "us", or "our") in connection with the online betting and casino platform operated at https://cv789.cam. It covers data collected from users who visit, register on, deposit to, play on, or otherwise interact with the platform, regardless of the device or network used to access it.

cv789 primarily serves players based in Indonesia. This Policy is written in English in accordance with the platform's language standard, but reflects data-handling practices aligned with internationally recognised privacy principles, including the right to access, correct, and delete personal information held about you.

By registering an account or using any feature of the cv789 platform, you confirm that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not accept this Policy, you must not use the cv789 platform.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that identifies or could reasonably be used to identify a living natural person, either directly (e.g., full name, national ID number) or indirectly (e.g., IP address, device fingerprint combined with behavioural data);
• "Processing" means any operation performed on personal data, including collection, storage, retrieval, use, disclosure, alteration, and deletion;
• "Data Controller" means cv789, the entity that determines the purposes and means of processing your personal data;
• "Data Processor" means a third party that processes personal data on behalf of cv789 under a contractual obligation, such as a payment provider or KYC verification service;
• "KYC Data" means identity and address verification documents submitted by users as part of the Know Your Customer compliance process;
• "Cookies" means small text files placed on your device by the cv789 platform or its technology partners to store session and preference information;
• "User" / "You" means any individual who accesses or uses the cv789 platform in any capacity.

cv789 collects the following categories of personal data in the course of operating its platform:

cv789 does not collect sensitive categories of personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (beyond ID photographs used for identity matching), or health data, except where such information is incidentally included in documents you submit for KYC purposes.

cv789 collects personal data through the following primary channels:

• Direct submission: Data you actively provide during account registration, the KYC verification process, payment transactions, support requests, or when completing any form or survey on the platform;
• Automated technical collection: Device and session data collected automatically when you access the platform, including IP addresses, browser fingerprints, and navigation patterns via server logs and first-party analytics tools;
• Payment processors: Transaction confirmation data returned to cv789 by partner payment providers (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, OVO, DANA, GoPay, ShopeePay, LinkAja) following a deposit or withdrawal instruction;
• KYC verification partners: Identity verification outcomes and risk scores returned by our contracted identity verification service providers following document review;
• Cookies and similar technologies: Session cookies, persistent cookies, and local storage used to maintain login state, remember user preferences, and support fraud detection. See Section 10 for full cookie details.

cv789 processes your personal data for the following purposes:

• Account management: Creating, maintaining, and securing your cv789 account, including authentication, password resets, and account closure;
• Identity verification (KYC): Verifying that you meet the age requirement (21+), confirming your identity to prevent fraud, and complying with anti-money-laundering (AML) obligations;
• Payment processing: Processing deposits and withdrawals via your nominated bank account or e-wallet and reconciling transactions against your account balance;
• Platform operation: Delivering betting markets, live casino games, slots, and lottery products; recording wager outcomes; applying bonuses and promotions to your account;
• Customer support: Responding to your support queries, resolving disputes, and maintaining a record of our communications for quality assurance;
• Responsible gaming compliance: Applying and monitoring the deposit limits, session controls, and self-exclusion arrangements you have set, and identifying potential problem gambling patterns that may warrant proactive outreach;
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent transactions, multi-accounting, bonus abuse, money laundering, and other prohibited conduct as defined in our Terms & Conditions;
• Legal compliance: Meeting our obligations under applicable licensing conditions, financial crime prevention regulations, and data retention laws;
• Platform improvement: Analysing aggregated, anonymised usage data to improve platform performance, game selection, payment method coverage, and the overall user experience.

cv789 processes your personal data on the following legal bases:

• Contract performance: Processing necessary to provide the services described in our Terms & Conditions, including account creation, payment execution, and game delivery;
• Legal obligation: Processing required to comply with anti-money-laundering regulations, licensing conditions, identity verification mandates, and data retention requirements imposed by our operating licence;
• Legitimate interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and internal analytics, where those interests are not overridden by your data protection rights;
• Consent: Where we send you optional promotional communications, we rely on your freely given consent at the time of opt-in. You may withdraw consent to marketing communications at any time by contacting our support team.

cv789 does not sell your personal data. We share your data only in the following controlled circumstances:

• Payment processors: Transaction data is shared with our banking and e-wallet partners (including BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, OVO, DANA, GoPay, ShopeePay, LinkAja) solely to execute your deposit and withdrawal instructions;
• KYC and identity verification providers: Identity documents and selfie images are shared with contracted third-party verification services for the sole purpose of confirming your identity and age in compliance with our KYC obligations. These providers are contractually bound to process your data only for that purpose and to delete it in line with our retention schedule;
• Game studios and technology providers: Minimum necessary gameplay data (such as session tokens and bet records) is passed to our licensed game providers — including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, and Pocket Games Soft — to enable real-time game delivery and outcome resolution;
• Fraud prevention networks: In cases of suspected fraud or money laundering, certain account identifiers may be shared with industry-wide fraud prevention databases to protect the broader gaming ecosystem;
• Regulatory and law enforcement authorities: cv789 will disclose personal data to licensing regulators, financial intelligence units, or law enforcement agencies when required to do so by law, court order, or our licensing conditions. We will notify you of such disclosures where legally permitted to do so;
• Corporate transactions: In the event of a merger, acquisition, or sale of all or substantially all of cv789's assets, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

All third-party data processors engaged by cv789 are required to sign data processing agreements that restrict their use of your data to the specified purpose, require appropriate technical and organisational security measures, and mandate deletion of data upon termination of the engagement.

cv789 retains personal data for the minimum period necessary to fulfil the purposes described in this Policy, subject to the following minimum retention periods which are driven by licensing and legal compliance obligations:

At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised aggregated data (from which no individual can be identified) may be retained indefinitely for statistical and product development purposes.

cv789 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes:

• 256-bit TLS encryption for all data in transit between your device and our servers;
• AES-256 encryption at rest for sensitive stored data including KYC documents and financial records;
• Segregated production environments with strict access controls limiting employee access to personal data on a need-to-know basis, enforced via role-based access management;
• Two-factor authentication (2FA) available for player accounts and mandatory for all cv789 internal administrative systems;
• Regular penetration testing conducted by independent security specialists, with findings remediated on a prioritised basis;
• 24/7 automated anomaly detection monitoring for unusual access patterns, large withdrawal spikes, and other signals associated with account compromise.

Notwithstanding the above measures, no internet-connected system can guarantee absolute security. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, cv789 will notify affected users without undue delay in accordance with applicable reporting obligations.

cv789 uses cookies and similar local storage technologies to operate the platform effectively. The following categories of cookies are in use:

• Strictly necessary cookies: Required for basic platform functions such as maintaining your logged-in session, storing cart/wallet state, and enabling secure authentication. These cannot be disabled without breaking core platform functionality;
• Functional cookies: Used to remember your preferences — such as language settings and preferred game lobby view — so that you do not need to reconfigure them on each visit;
• Analytical cookies: First-party analytics cookies that collect anonymised data on how users navigate the platform, which pages are visited most frequently, and where errors occur. This data is used to improve platform performance. No personally identifiable information is included in analytical cookie data;
• Security and fraud-detection cookies: Used to identify suspicious session behaviour, detect automated bots, and prevent account takeover attacks. These are a necessary component of our fraud prevention framework.

cv789 does not use third-party advertising or retargeting cookies. You may manage cookie preferences through your browser settings, though disabling strictly necessary cookies will impair your ability to use the platform. Most modern browsers allow you to view, manage, and delete cookies stored by individual sites.

cv789 operates as an internationally licensed platform. Some of the third-party service providers we use — including game studios, identity verification partners, and cloud infrastructure providers — may be located in jurisdictions outside Indonesia. Where your personal data is transferred internationally, cv789 takes the following steps to ensure it remains adequately protected:

• We only transfer data to processors who provide contractual guarantees of equivalent data protection standards via data processing agreements;
• Where a transfer involves KYC or financial data, we apply enhanced contractual protections including data minimisation requirements (transferring only the minimum data necessary for the specific purpose) and deletion obligations upon completion of the processing task;
• We periodically review the security certifications and data handling practices of our key international processors.

By using cv789, you acknowledge and accept that your personal data may be processed in countries outside Indonesia that may have different data protection standards from those in your home jurisdiction.

The cv789 platform is strictly intended for adults aged 21 years and above. We do not knowingly collect or process personal data belonging to individuals under the age of 21. Age verification is a mandatory step in our KYC process precisely to enforce this restriction.

If cv789 discovers that personal data has been collected from a user who is under 21 years of age, we will:

• Immediately suspend the account and freeze any balance held within it;
• Delete all personal data associated with that account as promptly as is consistent with our legal obligation to report the matter to relevant authorities where required;
• Refund any deposits made to the account (net of any winnings derived therefrom, which will be forfeited) to the originating payment method.

If you are a parent or guardian who believes that a minor in your care has registered an account on cv789, please contact our support team at [email protected] immediately. We will prioritise such reports and act on them within 24 hours.

As a user of the cv789 platform, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team at [email protected] with the subject line "Data Rights Request – [Your Username]".

cv789 will respond to all valid data rights requests within 30 calendar days of receipt. Where a request is complex or high in volume, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reason for it within the initial 30-day window.

The cv789 platform integrates third-party game studios, payment processors, and technology providers to deliver its services. While cv789 carefully vets these partners and binds them by contractual data protection obligations, each provider operates under its own privacy policy in relation to data it independently collects through its own systems.

cv789 is not responsible for the privacy practices of third-party providers beyond the scope of our data processing agreements with them. We encourage you to review the privacy policies of any third-party provider whose services you interact with directly, including your bank or e-wallet provider when making deposits or withdrawals.

The cv789 platform does not contain links to external websites beyond those listed in our navigation structure. Any external site that claims to be affiliated with cv789 without appearing in our official navigation is not endorsed by us, and we accept no responsibility for data practices on such sites.

cv789 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or our platform's feature set. When material changes are made, we will provide advance notice by email to your registered address and by posting a prominent update notice on the platform, at least 14 days before the changes take effect.

Minor changes — such as clarifications that do not alter the substance of how your data is processed — may be made without specific notice, though the "Last Updated" date at the top of this page will always reflect the date of the most recent revision. Your continued use of the cv789 platform after the effective date of any revision constitutes acceptance of the updated Policy.

If you object to any change to this Privacy Policy, you must stop using the cv789 platform and may request account closure and return of your real-money balance in accordance with Section 13 of our Terms & Conditions.

If you have any questions about this Privacy Policy, wish to exercise a data rights request, or have a concern about how cv789 has handled your personal data, please contact us through the following channels:

• Email: [email protected] — use the subject line "Privacy Enquiry" or "Data Rights Request" as appropriate. Please note that this address does not support mailto-link clicks and must be typed manually into your email client;
• Live Chat: Available 24/7 via the on-site chat widget. Our support team can log your request and escalate it to our data compliance team within one business day;
• Response Time: Privacy-related requests will receive an acknowledgement within 24 hours and a substantive response within 30 calendar days.

If you are not satisfied with cv789's response to your privacy concern, you have the right to raise a formal complaint with the data protection supervisory authority in the jurisdiction under which our operating licence is issued, or with any competent authority in your country of residence.