Privacy Policy — 999bd4

Your Privacy at a Glance

The six core principles that guide how 999bd4 handles your personal data

The categories of personal data 999bd4 processes

999bd4 collects personal information through several channels: when you register an account, when you make a deposit or withdrawal, when you contact our support team, and automatically through your use of the platform. The data we collect falls into the following categories:

1.1 Registration and Account Data

• Full name as it appears on your official identification document.
• Date of birth, collected to verify that you meet the 21+ age requirement.
• Email address, used for account communications, security alerts, and promotional messages (where you have opted in).
• Phone number linked to your mobile banking accounts (bKash, Nagad, Rocket, Upay) for payment processing.
• Residential address, including city (Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar) and postcode.
• Username and encrypted password — your password is never stored in plain text.

1.2 Identity Verification Data

• National ID (NID) number or passport number, collected as part of our Know Your Customer (KYC) verification process.
• Photographs or scans of your NID, passport, or other government-issued identity document.
• Proof of payment method, such as a screenshot of your bKash or Nagad account confirming ownership.

1.3 Financial Transaction Data

• Deposit and withdrawal amounts in Bangladeshi Taka (BDT), transaction dates, and the payment method used.
• Mobile money transaction reference numbers from bKash, Nagad, Rocket, and Upay.
• Bank account details where bank transfers are used, including account name and branch.

1.4 Technical and Usage Data

• IP address and approximate geolocation (country and city level).
• Device type, operating system, and browser version used to access the platform.
• Session logs including login timestamps, pages visited, games played, bet amounts, and session duration.
• Cookie identifiers — see Section 7 for full details on our cookie practices.

The lawful purposes for which 999bd4 processes personal information

999bd4 processes your personal data only for specific, defined purposes. We do not use your data for any purpose that is incompatible with the reasons for which it was originally collected. Our primary purposes are:

1. Account management: Creating, maintaining, and securing your player account, including verifying your identity and age, resetting credentials, and managing account preferences.
2. Payment processing: Executing deposit and withdrawal transactions via bKash, Nagad, Rocket, Upay, and affiliated Bangladeshi banks. Transaction data is retained as required for financial record-keeping and anti-money-laundering compliance.
3. Customer support: Responding to your enquiries, resolving disputes, and providing assistance with account or game issues. Support conversations may be recorded and retained for quality assurance and training purposes.
4. Legal and regulatory compliance: Fulfilling our obligations under applicable anti-money-laundering (AML) regulations and identity verification requirements. This includes reporting obligations where required by law.
5. Platform security and fraud prevention: Detecting and preventing fraudulent activity, multiple account registration, bonus abuse, and other violations of our Terms & Conditions.
6. Responsible gaming: Monitoring gameplay patterns to identify potential signs of problem gambling and, where appropriate, applying protective measures consistent with our Responsible Gaming Policy.
7. Service improvement: Analysing aggregated, anonymised usage data to improve platform performance, game selection, and user experience. This analysis does not involve profiling individual players for marketing purposes.
8. Marketing communications (opt-in only): Sending promotional emails or notifications about bonuses, tournaments, and seasonal offers (such as BPL season promotions or Eid specials) — only where you have explicitly opted in. You may withdraw consent at any time through your account settings or by contacting support.

When and with whom 999bd4 shares personal information

999bd4 does not sell, rent, or trade your personal data to any third party. We share data only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.

1. Payment providers: Transaction data (name, phone number, and amount) is shared with mobile money operators including bKash, Nagad, Rocket, and Upay, and with Bangladeshi banking partners, solely for the purpose of processing your deposits and withdrawals.
2. Game software providers: Your player session identifier (never your full personal details) is passed to licensed game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — to enable game functionality and maintain game integrity records.
3. Identity verification services: Where we use a third-party KYC provider to verify your identity documents, your NID or passport data is transmitted to that provider under a data processing agreement that prohibits any secondary use of your information.
4. Legal authorities: We may disclose personal data to law enforcement agencies, regulatory bodies, or courts where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of 999bd4, its players, or the general public.
5. Business transfers: In the unlikely event of a merger, acquisition, or sale of all or part of 999bd4's business, your personal data may be transferred to the acquiring entity, subject to the same privacy protections as described in this policy.

How long 999bd4 keeps your personal information

999bd4 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply:

1. Active account data (name, contact details, account preferences) is retained for the duration of your active relationship with 999bd4, plus a period of five years following account closure to meet financial and legal record-keeping obligations.
2. Transaction records (deposit/withdrawal history, bet logs) are retained for a minimum of five years following the date of the transaction, in accordance with standard financial compliance requirements.
3. Identity verification documents (NID copies, passport scans) are retained for five years following account closure, after which they are securely deleted from our systems.
4. Support correspondence is retained for three years from the date of the conversation, unless it relates to a formal dispute, in which case it is retained until the dispute is fully resolved plus one year.
5. Marketing consent records are retained until you withdraw your consent, and for one year thereafter as evidence of your consent history.
6. Technical logs and session data are retained for 12 months, after which they are anonymised or deleted.

When personal data is no longer required, 999bd4 securely deletes or anonymises it so that it can no longer be associated with any individual. Anonymised, aggregated data (such as platform-wide statistics) may be retained indefinitely for business analysis purposes.

The technical and organisational measures 999bd4 uses to protect your data

The security of your personal data is a top priority for 999bd4. We implement a combination of technical, physical, and administrative safeguards to protect your information against unauthorised access, disclosure, alteration, and destruction.

• SSL/TLS encryption: All data transmitted between your device and the 999bd4 platform is encrypted using Transport Layer Security (TLS 1.2 or higher). You will see a padlock icon in your browser's address bar confirming the secure connection.
• Encrypted data storage: Sensitive data fields — including passwords (hashed), financial account references, and identity document data — are encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data within 999bd4's systems is restricted to authorised staff on a strict need-to-know basis, with role-based access controls and multi-factor authentication enforced for all administrative accounts.
• Intrusion detection: Our infrastructure is monitored 24/7 for unusual activity, with automated alerting and a defined incident response procedure to contain any potential data breach promptly.
• Regular security reviews: 999bd4 conducts periodic internal security assessments and works with third-party security specialists to identify and remediate vulnerabilities.

What you are entitled to ask of 999bd4 regarding your personal data

As a user of the 999bd4 platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected]. We will respond to all valid requests within 30 days.

Please note that some rights are subject to limitations where we are legally required to retain data (for example, financial transaction records held for AML compliance). In all such cases, 999bd4 will clearly explain the reason why a request cannot be fully fulfilled.

How 999bd4 uses cookies on the platform

999bd4 uses cookies — small text files stored on your device — to enable essential platform functionality and to understand how players use the site. We do not use third-party advertising or cross-site tracking cookies.

1. Essential session cookies: Required for the platform to function. These cookies maintain your login session, remember your account preferences, and protect against cross-site request forgery. They cannot be disabled without rendering the platform unusable.
2. Analytics cookies: Used to collect anonymised data about how players navigate the platform — such as which pages are visited most frequently and where errors occur. This data is used solely to improve the platform and is never linked to individual player profiles. You may decline analytics cookies without affecting your access to the platform.
3. Security cookies: Short-lived cookies used to detect unusual login patterns, such as access from a new device or location, and to trigger additional verification steps where appropriate.

You can manage cookie preferences through your device's browser settings. Please note that disabling all cookies may affect the functionality of the 999bd4 platform, including your ability to stay logged in between page loads.

999bd4 is strictly for adults aged 21 and above

The 999bd4 platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from any individual under the age of 21. Age verification is a mandatory step in the account registration and KYC process.

If 999bd4 becomes aware that a player account has been registered by or on behalf of a person under 21 years of age, the account will be immediately suspended, all associated balances will be reviewed, and the personal data of the underage individual will be deleted from our systems as promptly as permitted by applicable law.

How we notify you of updates

999bd4 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform features. When a material change is made, we will update the effective date at the top of this page and, where the change significantly affects how we process your personal data, we will notify registered players via email or an in-platform notification prior to the change taking effect.

Your continued use of the 999bd4 platform following the publication of an updated Privacy Policy constitutes your acceptance of the changes. If you do not agree with a change, you should stop using the platform and contact our support team to request account closure and data deletion.

How to reach 999bd4 with data protection queries

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how 999bd4 handles your personal information, please contact our support team. All privacy-related requests are handled by our dedicated data protection team.

Email (plain text — not a clickable link): [email protected]

We aim to acknowledge all privacy requests within 48 hours and to resolve them fully within 30 days (Bangladesh Standard Time, UTC+6). For complex requests involving large volumes of data or multi-party coordination, we will notify you if additional time is required.