Your Privacy Matters at 999bs

1. Data We Collect

999bs collects personal data that is necessary to provide our services, comply with applicable legal obligations, and maintain the security and integrity of the platform. We do not collect data beyond what is reasonably necessary for these purposes. The categories of personal data we collect are set out below.

1.1 Registration Data

When you create a 999bs account, we collect the following information:

• Full legal name — as it appears on your government-issued identity document;
• Date of birth — to verify that you meet the 18+ eligibility requirement;
• Email address — used for account communications, security alerts, and (where opted in) promotional messages;
• Mobile number — a valid Bangladeshi mobile number for account verification and two-factor authentication;
• Residential address — including division (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh);
• Username and encrypted password — passwords are hashed using a one-way algorithm; plain-text passwords are never stored.

1.2 Identity Verification Data

To comply with know-your-customer (KYC) obligations and prevent underage gambling, we may request copies of:

• Bangladesh National Identity Card (NID);
• Valid passport (current and unexpired);
• Government-issued birth certificate;
• Proof of residential address (utility bill or bank statement, dated within three months).

Identity documents are stored in encrypted form and accessed only by authorised compliance personnel. They are not used for any purpose other than age and identity verification.

1.3 Financial Transaction Data

When you make deposits or withdrawals through the 999bs platform, we record:

• Transaction reference numbers issued by the payment provider (bKash, Nagad, Rocket, Upay, or bank);
• Transaction amounts in BDT (৳);
• Payment method type (e.g., mobile financial service, bank transfer);
• Transaction timestamps and status (completed, pending, failed).

We do not store full mobile wallet account numbers, bank account numbers, or any payment credential beyond what is required to process and reconcile transactions.

1.4 Gameplay and Behavioural Data

To operate the platform, resolve disputes, and detect fraudulent activity, we record:

• Game session logs — game title, provider, stake amount, outcome, timestamp;
• Sports betting records — market selected, odds, stake, settlement result;
• Bonus and promotion claim history;
• Responsible gaming tool activations — deposit limits set, cool-off periods, self-exclusion requests.

1.5 Technical and Device Data

Automatically collected when you access the 999bs platform:

• IP address and approximate geolocation (city/region level);
• Device type, operating system, and browser version;
• Session duration, pages visited, and click-path data;
• Error logs and crash reports (anonymised where possible).

2. How We Use Your Data

999bs processes personal data only for specified, explicit, and legitimate purposes. We do not use your data in a manner incompatible with those purposes. The table below summarises our principal processing activities, the data categories involved, and the lawful basis for each.

2.1 Marketing Communications

999bs will only send you promotional emails, SMS messages, or in-platform notifications regarding bonuses, seasonal offers (such as Eid campaigns, BPL cricket promotions, or Pohela Boishakh events), and new game launches if you have explicitly opted in to receive such communications during registration or subsequently through your account preferences. You may withdraw consent and opt out at any time by updating your notification settings or by writing to [email protected]. Opting out of marketing communications will not affect transactional communications, which are necessary for the operation of your account.

2.2 Automated Decision-Making

999bs may use automated processes to flag accounts for review in connection with fraud detection, bonus abuse identification, and responsible gaming monitoring. Where an automated process results in a restriction being applied to your account, you have the right to request human review of that decision by contacting our compliance team at [email protected].

3. Data Sharing & Disclosure

999bs does not sell, rent, or trade your personal data to third parties. We share personal data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.

3.1 Payment Service Providers

To process your deposits and withdrawals, we share the minimum necessary transactional data with our authorised payment partners — bKash, Nagad, Rocket, and Upay. Each provider operates under its own privacy policy and security standards. 999bs is not responsible for the data practices of payment providers once data has been transmitted to them for transaction processing purposes.

3.2 Game and Content Providers

Games and sports betting content on the 999bs platform are provided by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers receive anonymised session data sufficient to render game content and record outcomes. They do not receive your full name, contact details, or financial information.

3.3 Legal and Regulatory Disclosure

999bs may disclose personal data to law enforcement authorities, regulators, or courts where required to do so by applicable law, or where such disclosure is necessary to:

• Comply with a legal obligation or lawful order;
• Protect the rights, property, or safety of 999bs, its players, or the public;
• Investigate and prevent fraud, money laundering, or other financial crimes;
• Enforce these Terms & Conditions or resolve legal disputes.

3.4 Service Providers and Processors

We engage a limited number of trusted third-party service providers to assist with platform operations — including hosting infrastructure, email delivery, and analytics. These providers act as data processors under our instruction and are contractually prohibited from using your personal data for any purpose other than the specific service they are engaged to provide. All processors are required to maintain appropriate security standards.

4. Cookies & Tracking Technologies

The 999bs website uses cookies and similar local storage technologies to deliver and improve the platform experience. This section explains what cookies we use, why we use them, and how you can manage your preferences.

4.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember information about your visit — such as your login session, preferred settings, and browsing behaviour within the site. Cookies do not contain executable code and cannot access other data stored on your device.

4.2 Cookies We Use

4.3 Managing Cookies

You can control and delete cookies through your browser settings at any time. Please note that disabling essential cookies will impair the functionality of the 999bs platform — in particular, you will not be able to maintain a login session or access gameplay features. Disabling optional analytics cookies will not affect your ability to use the platform. Browser-specific instructions for managing cookies are available through your browser's help documentation.

999bs does not use third-party advertising cookies, cross-site tracking pixels, or social media tracking widgets on any page of the platform.

5. Data Retention

999bs retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply to the principal categories of data we hold:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where deletion is not immediately practicable due to technical constraints, the data will be placed in a restricted state and deleted at the next scheduled purge cycle.

6. Your Privacy Rights

As a player on the 999bs platform, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact our privacy team at [email protected] with the subject line "Privacy Rights Request" and your registered account username. We will respond within a reasonable timeframe, typically within 30 days of receiving a complete and verifiable request.

6.1 Right of Access

You may request a copy of the personal data that 999bs holds about you at any time. We will provide this in a structured, commonly used format. The first copy is provided free of charge; additional requests may incur a reasonable administrative fee.

6.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or completed. For straightforward updates (such as a change of email address or mobile number), this can be done directly in your account profile settings without needing to contact support.

6.3 Right to Erasure

You may request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other lawful basis applies. Please note that this right is subject to overriding legal obligations: where data must be retained to comply with financial record-keeping or anti-money-laundering requirements, erasure requests cannot be fulfilled until the mandatory retention period expires.

6.4 Right to Restrict Processing

You may request that we restrict the processing of your personal data in certain situations — for example, while the accuracy of the data is being contested, or while an objection to processing is being considered.

6.5 Right to Object

You have the right to object to processing of your personal data where that processing is based on our legitimate interest, including profiling for responsible gaming monitoring purposes. We will consider your objection and either accept it or explain the compelling legitimate grounds that override it.

6.6 Right to Withdraw Consent

Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time without detriment to your account status. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

7. Data Security Measures

The security of your personal data is a primary operational concern for 999bs. We implement a layered security architecture covering technical, organisational, and procedural controls designed to protect your data against unauthorised access, disclosure, alteration, or destruction.

7.1 Technical Controls

• TLS/SSL encryption is enforced across all pages and data transmission channels on the 999bs platform — indicated by the HTTPS protocol in your browser;
• Password hashing using a modern one-way cryptographic algorithm means that even 999bs personnel cannot read your stored password;
• Two-factor authentication (2FA) is available to all players and recommended as a best practice — enabling 2FA significantly reduces the risk of unauthorised account access;
• Database encryption is applied to all tables containing sensitive personal and financial data at rest;
• Intrusion detection systems monitor platform traffic in real time for anomalous activity patterns consistent with unauthorised access attempts.

7.2 Organisational Controls

• Access to personal data is restricted on a strict need-to-know basis — only personnel whose role requires it are granted access, and all access is logged;
• All staff who handle personal data undergo data protection training as part of their onboarding and at regular intervals thereafter;
• Third-party data processors are subject to due-diligence review and contractual data protection obligations before being engaged;
• Internal data protection policies are reviewed and updated on an annual basis.

7.3 Reporting a Security Concern

If you believe your 999bs account has been accessed without your authorisation, or if you have identified a potential security vulnerability on the platform, please contact us immediately at [email protected] with the subject line "Security Concern". We treat all security reports as high priority and will respond within 24 hours. Please do not publicly disclose any vulnerability before we have had a reasonable opportunity to investigate and address it.

Despite our best efforts, no online platform can guarantee absolute security against all possible threats. In the unlikely event of a data breach that poses a material risk to your rights, 999bs will notify affected players promptly and take immediate steps to contain and remediate the incident.

8. Contact & Policy Updates

8.1 How to Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or to the personal data 999bs holds about you, please contact our privacy team using the following details:

• Email: [email protected] (plain text — not a clickable link)
• Subject line for privacy enquiries: "Privacy Policy Enquiry"
• Response time: Within 2 business days for general enquiries; within 30 calendar days for formal rights requests
• Business hours: 24/7 support availability, Bangladesh Standard Time (BST, UTC+6)

8.2 Updates to This Policy

999bs reviews this Privacy Policy at least once per calendar year and whenever there is a material change to our data processing activities, applicable law, or platform features that affects how personal data is handled. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page;
• Send a notification to your registered email address summarising the key changes;
• Display a prominent notice on the platform for a period of at least 14 days following the update.

Your continued use of the 999bs platform after a policy update has been notified constitutes your acceptance of the revised Privacy Policy. If you do not accept the updated Policy, you must cease using the platform and request account closure.

8.3 Governing Language and Jurisdiction

This Privacy Policy is written in English. In the event of any inconsistency between this Policy and any translation or summary, the English-language version shall prevail. This Policy is intended to reflect good-faith data protection practices appropriate to the Bangladesh market context in which 999bs operates.