Privacy Policy — 999bets

1 Information We Collect

When you register, verify, deposit, play, or contact 999bets, we collect certain categories of personal data that are necessary to provide our services safely and legally. Below is a full account of the data categories we collect and the circumstances in which each is gathered.

1.1 Registration Data

When you create a 999bets account, we collect the following information you provide directly:

• Full legal name (as it appears on your government-issued ID)
• Date of birth (to verify you are 18 years of age or older)
• Email address (used for account communication and password recovery)
• Mobile phone number registered in Bangladesh (used for account security and payment verification)
• Preferred username and password (password is stored in hashed form — never in plain text)

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer process, we may request copies of identity documents at registration or prior to processing a withdrawal. Documents we may request include:

• National ID card, passport, or driving licence (front and back)
• Proof of address dated within 3 months (utility bill, bank statement, or official government correspondence)
• Proof of ownership of the payment method you use (e.g., a screenshot showing your name and bKash or Nagad account number)

KYC documents are handled with the highest level of sensitivity. They are stored on encrypted servers with access strictly limited to authorised compliance personnel. Documents are not shared with third parties except where required by law or by regulated payment processors conducting their own KYC obligations.

1.3 Financial Transaction Data

When you deposit or withdraw funds via bKash, Nagad, Rocket, Upay, or a bank transfer, we record:

• Transaction reference numbers and timestamps
• Deposit and withdrawal amounts in Bangladeshi Taka (BDT)
• Payment method type and masked account identifiers (e.g., the last four digits of a bKash number)
• Transaction status (pending, completed, failed, reversed)

Full payment account credentials (such as your complete bKash PIN or bank password) are never collected or stored by 999bets. All payment authentication is handled directly by the respective payment provider.

1.4 Gameplay & Betting Data

We record your activity on the 999bets platform for operational, fairness, and responsible gaming purposes:

• Games played, bets placed, and outcomes (wins and losses)
• Sports betting markets accessed, odds viewed, and wagers placed
• Session durations, login and logout timestamps
• Responsible gaming settings you have applied (deposit limits, time-out periods, self-exclusion status)
• Bonus and promotion activations and wagering progress

1.5 Device & Technical Data

When you access 999bets via a web browser or mobile device, we automatically collect certain technical data:

• IP address (used for geolocation, fraud detection, and regulatory compliance)
• Device type, operating system, and browser version
• Referring URL and pages visited within the 999bets platform
• Cookie identifiers and session tokens (see Section 4)

1.6 Customer Support Communications

When you contact our support team via email at support@999bets, we retain records of your communications, including the content of your messages and any attachments you send. These records are used to resolve your query and to improve our support quality.

2 How We Use Your Data

999bets uses the personal data it collects for the following purposes. For each purpose, we identify the legal basis on which we rely to process your data.

2.1 Promotional Communications

If you have opted in to receive promotional emails or SMS notifications from 999bets, we may use your email address and mobile number to send you information about bonuses, seasonal promotions (such as BPL or Eid offers), new game launches, and platform updates. You may withdraw your consent and unsubscribe from promotional communications at any time by contacting support@999bets. Unsubscribing from marketing communications will not affect your ability to use your 999bets account.

2.2 Automated Decision-Making

999bets uses automated systems to detect fraudulent activity, identify potential responsible gaming concerns, and apply bonus eligibility rules. Where an automated decision significantly affects your account (such as an account restriction or bonus removal), you have the right to request a manual review by a member of our compliance team. Please contact support@999bets to initiate a review.

3 Data Sharing & Third Parties

999bets does not sell your personal data to third parties. We share data only in the limited circumstances described below, and always subject to contractual data protection obligations on the part of the recipient.

3.1 Payment Processors

To process your deposits and withdrawals, we share transaction data with our payment processing partners, including mobile wallet operators (bKash, Nagad, Rocket, Upay) and bank partners (Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank). These partners receive only the data required to execute and verify your transaction. They are independently subject to Bangladesh Bank regulations and maintain their own data protection obligations.

3.2 Game Software Providers

Casino and arcade games on the 999bets platform are powered by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive a session token and player ID to authenticate your game session and record outcomes for audit purposes. They do not receive your full name, contact details, or payment information.

3.3 Identity Verification Services

For KYC purposes, we may use third-party identity verification services to assist in authenticating the documents you submit. These services process your KYC documents on our behalf under strict data processing agreements and are not permitted to retain or use your data for any purpose other than the verification task.

3.4 Legal & Regulatory Authorities

999bets will disclose personal data to law enforcement agencies, regulatory bodies, or other authorities where we are legally required to do so, including in response to a lawful request, court order, or where disclosure is necessary to protect the rights and safety of the platform or its players.

3.5 Business Transfers

In the event that 999bets undergoes a merger, acquisition, or sale of assets, player data may be transferred as part of that transaction. In such circumstances, 999bets will notify registered players via their account email address before any data transfer takes place, and the acquiring party will be bound by the obligations of this Privacy Policy.

4 Cookies & Tracking Technologies

999bets uses cookies and similar tracking technologies to operate the platform efficiently, maintain your session security, and understand how players interact with the site. This section explains what cookies we use and why.

4.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They allow the website to recognise your device on a return visit and to retain certain preferences or session states. Cookies do not grant access to your device or any personal files stored on it beyond what you provide to the website.

4.2 Cookies We Use

4.3 Managing Cookies

You can control cookie settings through your web browser. Most browsers allow you to block or delete cookies via their privacy or security settings. Please be aware that disabling essential or session cookies will prevent 999bets from functioning correctly — you will not be able to log in or use the cashier without these cookies enabled.

Disabling analytics or preference cookies will not affect your ability to play, deposit, or withdraw. It will, however, mean that we cannot remember your display preferences between sessions.

5 Data Retention & Storage

999bets retains personal data for as long as it is necessary to fulfil the purposes for which it was collected, and for as long as required by applicable legal, regulatory, and financial record-keeping obligations. The table below outlines our standard retention periods by data category.

When data reaches the end of its retention period and there is no longer a legal or operational basis for retaining it, 999bets will securely delete or anonymise the data so that it can no longer be attributed to an identifiable individual.

5.1 Storage Location

Player data is stored on encrypted servers. While 999bets primarily operates to serve the Bangladesh market (Bangladesh Standard Time, UTC+6), data may be hosted on servers located in jurisdictions with recognised data protection standards. In all cases, appropriate technical and contractual safeguards are in place to protect data that is processed or stored outside Bangladesh.

6 Data Security Measures

Protecting your personal data from unauthorised access, disclosure, or loss is a core operational priority at 999bets. We implement a layered set of technical and organisational security measures as described below.

6.1 Technical Measures

• TLS/SSL Encryption: All data transmitted between your device and 999bets's servers is encrypted using TLS 1.2 or higher. The padlock icon displayed in your browser confirms the connection is secure.
• Password Hashing: Account passwords are stored using industry-standard one-way cryptographic hashing algorithms. Even 999bets personnel cannot read your password in plain text.
• Access Controls: Internal access to player data is restricted to authorised personnel on a strict need-to-know basis. All internal access events are logged and audited.
• Firewalls & Intrusion Detection: Our server infrastructure is protected by web application firewalls (WAF) and automated intrusion detection systems that monitor for suspicious access patterns in real time.
• Database Encryption: Sensitive data fields within our databases — including KYC document references and payment identifiers — are encrypted at rest.

6.2 Organisational Measures

• Staff who handle player data undergo data protection training and are bound by confidentiality obligations.
• Third-party service providers who process player data on our behalf are vetted and bound by data processing agreements that impose equivalent security standards.
• 999bets maintains an internal incident response procedure. In the event of a data breach that poses a risk to player rights, affected players will be notified without undue delay.

6.3 Your Responsibilities

While 999bets invests heavily in platform-side security, players also play an important role in keeping their accounts safe:

• Use a strong, unique password for your 999bets account that you do not use on any other site.
• Never share your login credentials, OTP codes, or payment PINs with any other person, including anyone claiming to be from 999bets support. Our team will never ask for your password.
• Always log out after your session, especially on shared or public devices.
• Contact support@999bets immediately if you notice any unrecognised activity on your account.

7 Your Privacy Rights

As a 999bets player, you have a number of rights over your personal data. These rights are summarised below. To exercise any of these rights, contact us at support@999bets. We will respond to all valid requests within 30 days of receipt.

7.1 Right of Access

You have the right to request a copy of the personal data that 999bets holds about you. This is sometimes called a Subject Access Request (SAR). We will provide you with a summary of your data in a clear, readable format, free of charge in most circumstances.

7.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For account registration data, you may be able to update certain details directly from your account settings. For KYC data or other sensitive fields, please contact our support team.

7.3 Right to Erasure

You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been processed unlawfully. Please note that we may be required to retain certain data for legal and regulatory compliance periods as set out in Section 5, even following an erasure request.

7.4 Right to Restriction of Processing

In certain circumstances, you may request that we restrict the processing of your data — for example, while you contest the accuracy of the data or while a complaint is being investigated. During a restriction period, your data will be stored but not actively processed beyond what is necessary for the restriction itself.

7.5 Right to Data Portability

Where processing is based on your consent or on the performance of a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format. You may also request that we transmit your data directly to another controller where technically feasible.

7.6 Right to Object

You have the right to object to the processing of your personal data where we rely on legitimate interests as our legal basis, including profiling for responsible gaming purposes or analytics. If you object, we will cease processing your data for that purpose unless we can demonstrate compelling legitimate grounds that override your interests.

7.7 Right to Withdraw Consent

Where processing is based on your consent — such as receiving promotional emails — you may withdraw that consent at any time by contacting support@999bets. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

8 Contact & Data Enquiries

If you have any questions about this Privacy Policy, wish to exercise one of your privacy rights, or wish to raise a concern about how 999bets handles your personal data, please contact us using the details below. All privacy-related enquiries are handled in English by our customer support team, who are available 24 hours a day, 7 days a week, on Bangladesh Standard Time (UTC+6).

8.1 Complaints

If you believe that 999bets has failed to handle your personal data in accordance with this Privacy Policy, you have the right to lodge a formal complaint. Please contact our support team in the first instance so that we can attempt to resolve the matter directly. We are committed to investigating all privacy complaints promptly and transparently.

8.2 Changes to This Privacy Policy

999bets reserves the right to update or modify this Privacy Policy at any time. When material changes are made, registered players will be notified via the email address held on their account. The effective date at the top of this document will be updated to reflect the date of the most recent revision. Your continued use of the platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms.

We encourage you to review this Privacy Policy periodically to remain informed about how we protect your data. If you have any concerns about a change to this policy, please contact us before continuing to use the platform.