999b Privacy Policy — How We Protect Your Personal Data

1 Introduction

999b ("we", "us", "our", or "the Platform") operates the online betting and casino website located at https://999b.io. This Privacy Policy describes how 999b collects, uses, stores, discloses, and otherwise processes personal data relating to individuals ("you", "your", or "the User") who access or use the 999b platform.

We are committed to handling your personal data with integrity, transparency, and care. This policy has been written in plain English to ensure it is accessible and comprehensible to all 999b users in Bangladesh, regardless of their technical or legal background.

This Privacy Policy covers all services offered through the 999b platform, including cricket betting, slots, live casino, blackjack, esports wagering, account management, payment processing, and customer support interactions. It applies whether you access 999b via a desktop browser or a mobile device.

2 Personal Data We Collect

999b collects personal data from you in the following ways: directly (when you provide it during registration or transactions), automatically (when you interact with the platform), and from third parties (such as payment providers and identity verification services). The categories of personal data we collect include:

We do not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, or health information unless it is directly relevant to a specific regulatory compliance requirement — for example, verifying a self-exclusion request made under our Responsible Gaming Policy.

3 How We Use Your Personal Data

999b uses the personal data we collect for clearly defined and legitimate purposes. We do not use your data for any purpose that is incompatible with the reason it was originally collected. The primary purposes for which 999b processes personal data are:

• Account creation and management: To register your account, verify your identity, maintain your account balance, and provide you with access to all 999b platform services.
• Payment processing: To process deposits and withdrawals via bKash, Nagad, Rocket, and Upay, to maintain transaction records, and to comply with anti-money-laundering (AML) obligations.
• Platform delivery: To provide cricket betting, slots, live casino, blackjack, and esports services, including displaying personalised account information such as bet history and balance.
• Customer support: To respond to your enquiries, resolve disputes, and address complaints submitted via email or live chat.
• Security and fraud prevention: To detect, investigate, and prevent fraudulent activity, unauthorised access, money laundering, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible gaming compliance: To enforce deposit limits, self-exclusion requests, time-out features, and age verification in accordance with our Responsible Gaming Policy.
• Marketing and promotions: To send you bonus offers, promotional updates, and platform news — but only where you have given explicit consent to receive such communications. You may opt out at any time.
• Platform improvement: To analyse aggregate usage data and improve the performance, design, and content of the 999b platform over time.
• Legal and regulatory compliance: To meet our obligations under applicable law, including responding to lawful requests from law-enforcement agencies.

4 Legal Basis for Processing Personal Data

999b processes your personal data on the following legal bases, depending on the purpose for which the data is used:

• Contractual necessity: Processing that is required to fulfil our obligations under the agreement between you and 999b — principally, operating your account, processing payments, and delivering platform services.
• Legal obligation: Processing that is necessary to comply with applicable legal requirements, including identity verification, anti-money-laundering checks, and responding to lawful government or law-enforcement requests.
• Legitimate interests: Processing undertaken to protect the security and integrity of the 999b platform, to prevent fraud and abuse, and to improve platform performance — provided that these interests do not override your fundamental rights and freedoms.
• Consent: Processing for marketing and promotional communications, which is undertaken only where you have given us a clear, freely given, and informed consent. Consent may be withdrawn at any time without detriment to your use of the platform.

5 Sharing Your Personal Data

999b does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. We may share your personal data with carefully selected third parties in the following limited circumstances:

• Payment processors: bKash, Nagad, Rocket, and Upay receive the minimum transaction data required to process your deposits and withdrawals. These providers operate under their own privacy policies and are independently responsible for their data-handling practices.
• Identity verification providers: Third-party KYC and age-verification services may receive your identity documents and selfie images to complete mandatory verification checks. These providers are contractually bound to handle your data securely and in strict confidence.
• Game studios and technology providers: Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, and others may receive session-level data necessary to deliver their games. No directly identifiable financial data is shared with game studios.
• Fraud prevention and security services: Specialist third-party security providers may process technical data such as IP addresses and device fingerprints to assist with fraud detection and account security monitoring.
• Legal and regulatory authorities: 999b will disclose personal data to law-enforcement agencies, regulatory bodies, or courts when required to do so by applicable law, or when we believe in good faith that disclosure is necessary to protect the rights, property, or safety of 999b, its users, or the public.

All third-party service providers with whom 999b shares personal data are subject to contractual data-processing agreements that require them to maintain appropriate technical and organisational security measures and to process data solely for the purposes specified by 999b.

6 Cookies & Tracking Technologies

999b uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your login session, and gather aggregate usage analytics. The main categories of cookies used on the 999b platform are:

• Strictly necessary cookies: These are essential to the operation of the platform and cannot be disabled. They include session authentication cookies that keep you logged in as you navigate between pages.
• Functional cookies: These remember your language preference, display settings, and other personalisation choices to improve your experience on the platform.
• Analytics cookies: These collect anonymised, aggregate data about how users interact with the 999b platform — for example, which pages are visited most frequently and how long users spend on each section. This data is used solely to improve the platform.
• Security cookies: These help 999b detect and prevent fraudulent activity by identifying unusual patterns of behaviour associated with a specific session or device.

You may manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the 999b platform, including your ability to remain logged in or to access specific features. 999b does not use cookies to serve third-party advertising or to track your activity on websites other than 999b.io.

7 Data Retention

999b retains personal data for as long as is necessary to fulfil the purposes set out in this Privacy Policy, unless a longer retention period is required or permitted by applicable law. The general retention principles applied by 999b are as follows:

• Active account data: Personal data associated with an active 999b account is retained for the duration of the account's active status and for a reasonable period thereafter to allow for dispute resolution.
• Financial transaction records: Records of deposits, withdrawals, and betting transactions are retained for a minimum of seven (7) years in accordance with standard financial record-keeping requirements applicable to payment service operations.
• Identity verification documents: KYC documents (NID copies, selfies, utility bills) are retained for a minimum of five (5) years following account closure to satisfy anti-money-laundering regulatory requirements.
• Customer support communications: Support chat transcripts and email correspondence are retained for up to three (3) years from the date of the last interaction to assist with ongoing or future dispute resolution.
• Marketing consent records: Records of your marketing consent or opt-out are retained indefinitely to evidence compliance with your stated communication preferences.

When personal data is no longer required, 999b will securely delete or anonymise it in a manner that prevents recovery or reconstruction. Anonymised, aggregate data (from which no individual can be identified) may be retained indefinitely for platform analytics and improvement purposes.

8 Data Security

999b implements a comprehensive set of technical and organisational security measures designed to protect your personal data from unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and the 999b platform.
• Cryptographic password hashing using industry-standard algorithms, ensuring that your password is never stored in plain text.
• Access controls and role-based permissions limiting internal staff access to personal data on a strict need-to-know basis.
• Regular security audits and vulnerability assessments to identify and address potential weaknesses in our infrastructure and application layer.
• Intrusion detection and monitoring systems that alert our security team to suspicious activity in real time.

While 999b takes all reasonable steps to protect your data, no method of transmission over the internet or method of electronic storage is completely secure. In the unlikely event of a data breach that poses a significant risk to your rights and freedoms, 999b will notify affected users promptly and take all necessary remediation steps.

9 Your Data Rights

As a user of the 999b platform, you have the following rights with respect to the personal data we hold about you. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request". We will respond to all valid requests within a reasonable timeframe.

• Right of access: You may request a copy of the personal data that 999b holds about you, along with information about how and why it is being processed.
• Right to rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to erasure: In certain circumstances, you may request that 999b delete the personal data we hold about you. This right is subject to exceptions, including where retention is required by law or where the data is necessary for the establishment, exercise, or defence of legal claims.
• Right to restriction of processing: You may request that 999b restricts its processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested.
• Right to data portability: You may request that 999b provides you with a copy of the personal data you have provided to us in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (for example, for marketing communications), you may withdraw that consent at any time by contacting our support team.
• Right to object: You may object to 999b's processing of your personal data where that processing is based on legitimate interests, including profiling for direct marketing purposes.

10 Children and Minors

The 999b platform is strictly intended for adults aged 21 years and above. 999b does not knowingly collect or process personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under the minimum age, we will take immediate steps to delete that data and close the associated account.

Parents and guardians are strongly encouraged to install parental control software on shared devices to prevent minors from accessing online gambling platforms, including 999b. If you believe that a minor may have accessed the 999b platform using your account or device, please contact us immediately at [email protected] so that appropriate action can be taken.

11 Third-Party Links

The 999b platform may from time to time contain references to third-party game studios, payment providers, or sports data services. These references do not constitute endorsements, and 999b is not responsible for the privacy practices or content of any third-party website or service.

This Privacy Policy applies solely to the 999b platform at https://999b.io. If you follow a link to a third-party service, we encourage you to review that service's own privacy policy before submitting any personal data. 999b accepts no liability for the data-handling practices of any third party.

12 Updates to This Privacy Policy

999b reserves the right to update or revise this Privacy Policy at any time. When we make changes, we will update the Effective Date at the top of this document. For material changes that significantly affect how we use your personal data, we will provide advance notice via the email address associated with your 999b account, or via a prominent notice on the platform homepage.

We encourage you to review this Privacy Policy periodically to stay informed about how 999b is protecting your data. Your continued use of the 999b platform following the publication of any updated Privacy Policy constitutes your acceptance of those changes.

If you have any questions, concerns, or complaints about this Privacy Policy or about the way 999b handles your personal data, please contact our support team in writing at: [email protected]. We are committed to resolving all privacy-related enquiries promptly and fairly.