999dat Privacy Policy

1 Information We Collect

When you use the 999dat platform, we collect certain categories of personal data necessary to deliver a safe, compliant, and high-quality gaming experience to players across Bangladesh. We collect only the minimum data required for each specific purpose. The following table outlines the categories of personal data we collect, the source of that data, and the legal basis on which we process it.

1.1 Data We Do Not Collect

999dat does not collect sensitive personal data categories beyond what is strictly required for KYC compliance. We do not collect racial or ethnic origin data, religious beliefs, political opinions, biometric data beyond a selfie-with-ID for liveness checks, health data, or sexual orientation data. We do not purchase or import data about Bangladesh players from any third-party data broker.

1.2 Data Provided by Minors

The 999dat platform is strictly for adults aged 18 and above. We do not knowingly collect personal data from individuals under 18 years of age. If we become aware that personal data belonging to a minor has been submitted to 999dat — whether during registration or at any other point — we will immediately delete that data and permanently close the associated account. If you believe a minor has registered on 999dat, please report this to [email protected] without delay.

2 How We Use Your Data

999dat processes personal data only for the specific, lawful purposes described in this section. We do not use your personal data for any purpose that is incompatible with the purpose for which it was originally collected. Where we need to use your data for a new purpose not listed here, we will notify you in advance and update this Privacy Policy before processing begins.

• Account Management: To create, maintain, and manage your 999dat player account, including processing your registration details, updating account preferences, and sending account-related notifications such as deposit confirmations and withdrawal approvals via email or SMS to your registered Bangladeshi mobile number.
• Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, and Upay, verify that payment accounts match your registered identity, and maintain accurate transaction records in Bangladeshi Taka (BDT) for accounting and regulatory audit purposes.
• Identity and Age Verification: To fulfil our KYC obligations, confirm that every 999dat player is at least 18 years of age, and verify that account details are consistent with the identity documents provided. This is a legal obligation and cannot be waived.
• Fraud and Security Monitoring: To detect and prevent fraudulent activity, money laundering, bonus abuse, account takeover attempts, and other prohibited conduct. Technical data such as IP addresses and device fingerprints are used for this purpose.
• Responsible Gaming: To monitor betting and gaming patterns for signs of problem gambling behaviour. Usage data helps our responsible gaming team identify players who may benefit from deposit limits, cooling-off periods, or self-exclusion. This processing is carried out in the interests of player welfare.
• Customer Support: To respond to and resolve support queries submitted by Bangladesh players via live chat or email to [email protected], and to maintain records of interactions for quality assurance and dispute evidence purposes.
• Legal Compliance: To comply with any applicable legal obligations, including responding to lawful requests from regulatory or law enforcement authorities, maintaining financial records for the required retention periods, and enforcing these Terms & Conditions.
• Platform Improvement: To analyse aggregated, anonymised usage data to understand how Bangladesh players interact with the 999dat platform — including which sports markets, casino games, and slots are most popular — and to improve the platform's performance, design, and content accordingly.

3 Data Sharing and Third Parties

999dat does not sell your personal data to any third party. We share personal data only with carefully selected partners and service providers whose involvement is necessary to operate the 999dat platform effectively and in compliance with applicable obligations. All third-party data processors are bound by strict data processing agreements that prohibit them from using 999dat player data for their own commercial purposes.

3.1 Categories of Third-Party Recipients

• Payment Processors: bKash, Nagad, Rocket, and Upay receive the minimum financial data required to process deposit and withdrawal transactions. These providers are subject to Bangladesh Bank regulations and operate under their own published privacy policies.
• Game Content Providers: Casino game providers such as Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe may receive a session token and anonymised player identifier to facilitate gameplay. They do not receive your name, mobile number, or financial details.
• Identity Verification Services: Third-party KYC service providers may process your identity documents on 999dat's behalf to perform automated age and identity checks. These providers are contractually bound to process documents solely for the KYC purpose and to delete documents promptly once verification is complete.
• Analytics Providers: Anonymised, aggregated usage data may be shared with analytics platforms to help 999dat understand platform performance. No personally identifiable information is included in these data shares.
• Legal and Regulatory Authorities: 999dat will disclose personal data to law enforcement, regulatory bodies, or courts where required to do so by a valid legal order or where disclosure is necessary to prevent fraud or protect the rights and safety of 999dat players.

3.2 International Data Transfers

Some of 999dat's third-party service providers — including game content providers such as Evolution Gaming and Pragmatic Play — operate servers outside Bangladesh. Where your data is transferred to a country outside Bangladesh, 999dat ensures that appropriate contractual safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy. If you require further information about the international transfers applicable to your data, please contact [email protected].

4 Cookies and Tracking Technologies

999dat uses cookies and similar lightweight tracking technologies on its platform to maintain session integrity, remember your preferences, and gather anonymised analytics that help us improve the experience for Bangladesh players. We do not deploy third-party advertising cookies, behavioural tracking pixels, or cross-site tracking technologies of any kind.

4.1 Types of Cookies Used

4.2 Managing Cookie Preferences

You can control and manage cookies through your browser settings. All major browsers — including Chrome, Firefox, Safari, and Edge — provide options to block or delete cookies. Please note that disabling strictly necessary cookies will prevent you from logging into your 999dat account and using core platform features. Disabling functional or analytics cookies will not prevent you from accessing the platform but may reduce the personalisation of your experience.

For guidance on managing cookies in your specific browser, please refer to your browser's help documentation. If you use the 999dat platform on a mobile device via a mobile browser on Android or iOS, cookie management options are available in your mobile browser settings.

5 Data Retention and Storage

999dat retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The retention periods applied to each data category are set out below. Once a retention period expires, personal data is securely deleted or anonymised so that it can no longer be attributed to any individual player.

• Active Account Data: Retained for the full duration of your account being open on 999dat, plus a minimum of 5 years after account closure to satisfy anti-money laundering record-keeping requirements.
• KYC Identity Documents: Retained for a minimum of 5 years from the date of verification completion. Documents are stored in encrypted form and access is restricted to authorised compliance personnel only.
• Financial Transaction Records: Retained for 7 years from the date of each transaction in accordance with standard financial record-keeping practice. This applies to all deposits and withdrawals processed via bKash, Nagad, Rocket, and Upay.
• Support Communications: Live chat transcripts and email correspondence are retained for 2 years from the date of the last interaction in the relevant support thread, then securely deleted.
• Technical and Log Data: Server logs and IP address records are retained for 90 days for security and fraud monitoring purposes, then automatically purged unless a specific investigation requires retention beyond this period.
• Marketing Preferences: Your opt-in or opt-out status for marketing communications is retained indefinitely so that 999dat can honour your preferences. The underlying contact data is deleted in line with the account data retention schedule.

6 Your Data Rights

As a 999dat player, you hold a number of rights with respect to the personal data we hold about you. 999dat is committed to honouring these rights promptly and transparently. To exercise any of the rights described below, please contact our English-language support team at [email protected] with the subject line "Data Rights Request" and your registered account email address. All requests will be acknowledged within 5 business days and resolved within 30 calendar days.

7 Data Security Measures

999dat takes the security of your personal data seriously and employs a combination of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure. While no online platform can guarantee absolute security, 999dat maintains a comprehensive information security programme designed to minimise risk and respond rapidly to any potential data security incident.

7.1 Technical Safeguards

• All data transmitted between your device and 999dat is protected by TLS 1.2 or higher encryption, indicated by the HTTPS prefix in your browser's address bar.
• All data at rest on 999dat servers — including identity documents, financial records, and account information — is encrypted using AES-256 encryption.
• Player passwords are stored as salted cryptographic hashes. 999dat staff cannot view your password in plain text under any circumstances.
• The 999dat platform undergoes regular vulnerability assessments and penetration testing conducted by independent security specialists.
• Access to production systems containing player data is restricted to authorised personnel through multi-factor authentication and role-based access controls.

7.2 Organisational Safeguards

• All 999dat staff who handle personal data receive data protection training and are bound by confidentiality obligations in their employment agreements.
• Access to player data is granted on a strictly need-to-know basis. Support agents can access only the minimum data required to resolve the specific support query they are handling.
• In the event of a data breach that is likely to affect the rights and freedoms of players, 999dat will notify affected players without undue delay and take immediate remedial action.

7.3 Your Responsibility

While 999dat implements robust security measures on its end, you are also responsible for maintaining the security of your 999dat account. You should use a strong, unique password for your 999dat account, enable two-factor authentication where available, and never share your login credentials with any third party. If you suspect that your account has been compromised, contact [email protected] immediately so that we can take protective action.

8 Updates to This Privacy Policy

999dat reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or the services we provide to Bangladesh players. When material changes are made to this Privacy Policy, we will notify registered players by email to their registered address and display a prominent notice on the 999dat platform for a minimum of 14 days following the update.

The Effective Date at the top of this Privacy Policy will be updated each time a new version is published. We encourage you to review this page periodically to stay informed about how 999dat protects your data. Your continued use of the 999dat platform after the Effective Date of an updated Privacy Policy constitutes your acceptance of the revised terms.

If you disagree with any changes made to this Privacy Policy and no longer wish to use the 999dat platform, you may request closure of your account by contacting [email protected]. Account closure requests will be processed within 5 business days. Note that certain data — particularly financial transaction records and KYC documents — will be retained after account closure in accordance with the retention periods described in Section 5 of this policy.