999nd Privacy Policy — How We Handle Your Personal Data

999nd collects personal data from players through several channels: directly when you register an account or complete KYC verification, automatically when you use the platform, and from third-party payment providers when you make deposits or withdrawals. We collect only the data that is necessary for the purposes described in this Privacy Policy.

Registration and Account Data

When you create a 999nd account, we collect the following information:

• Full legal name (as it appears on your government-issued identification document)
• Date of birth (to verify you are 18 years of age or older)
• Email address (used for account communications and transactional notifications)
• Mobile phone number (used for account security and payment verification)
• Residential address in Bangladesh (district, city, and postal code)
• Preferred currency (Bangladeshi Taka, ৳ BDT, is the only supported currency)
• Username and encrypted account password

Identity Verification (KYC) Data

To comply with our age verification and responsible gaming obligations, 999nd may request the following documentation from players, particularly at the point of withdrawal or when account activity triggers a verification review:

• A copy of a government-issued photo identification document such as a Bangladesh National Identity Card (NID), passport, or birth certificate
• Proof of ownership of the payment method used (e.g., a screenshot of the registered bKash or Nagad account showing the account holder's name and number)
• Proof of address (e.g., a recent utility bill or bank statement issued in Bangladesh in the player's name)
• Source-of-funds documentation for players making large or unusual transactions, in accordance with our anti-money laundering (AML) obligations

Financial Transaction Data

Each time you make a deposit or withdrawal on 999nd, we collect a record of the transaction including the amount in ৳ BDT, the payment method used (bKash, Nagad, Rocket, Upay, bank transfer, Visa, or Mastercard), the transaction timestamp (in Bangladesh Standard Time, BST UTC+6), and the transaction status. We do not store full mobile banking PINs, full card numbers, or online banking passwords on our platform.

Gameplay and Betting Data

999nd maintains a log of all gaming and betting activity conducted through your account. This includes the games played, stakes placed, outcomes recorded, bonus funds claimed and wagered, and session durations. This data is used to resolve disputes, detect fraudulent activity, support responsible gaming monitoring, and improve the platform experience for Bangladeshi players.

Technical and Device Data

When you access the 999nd platform from any device, we automatically collect certain technical information, including your IP address, browser type and version, operating system, device type (desktop, mobile, or tablet), referring URL, pages visited within the 999nd platform, and session duration. This information helps 999nd diagnose technical issues, prevent unauthorised access, and understand how players navigate the platform.

Communications Data

If you contact 999nd's customer support team — whether by email to [email protected] or through the in-platform live chat — we retain a record of that correspondence, including the content of your messages and the date and time of contact. This record is used to resolve your enquiry and to improve the quality of our support service.

999nd uses the personal data it collects for the following specific purposes. We do not use your data for any purpose that is incompatible with the reason it was originally collected without first seeking your consent.

Marketing Communications

With your consent at registration, 999nd may send you promotional communications about new games from providers such as Pragmatic Play, Evolution Gaming, and Spribe, seasonal bonus offers aligned with the Bangladeshi calendar (Eid, Pohela Boishakh, Victory Day), BPL cricket promotions, and other platform news. You may opt out of all marketing communications at any time by contacting [email protected] or updating your notification preferences in account settings. Opting out of marketing does not affect essential transactional communications.

999nd processes your personal data on the following legal bases depending on the specific activity involved:

• Contractual Necessity: The majority of personal data processing on 999nd is necessary to fulfil our contractual obligations to you as a registered player — including account creation, processing your deposits and withdrawals, maintaining your game history, and providing customer support.
• Legal Obligation: Certain processing activities are required by applicable legal and regulatory obligations, including age verification (18+ only), identity verification for KYC purposes, anti-money laundering transaction monitoring, and the retention of financial records.
• Legitimate Interests: We process technical data such as IP addresses, device information, and session logs on the basis of our legitimate interests in securing the 999nd platform against fraud, preventing multi-accounting, improving platform performance, and understanding how players in Bangladesh interact with our services. We balance these interests against your privacy rights and do not process data in a way that is unduly prejudicial to you.
• Consent: Where we process your data for marketing communications or optional personalisation features, we do so on the basis of your consent. You may withdraw this consent at any time without affecting the lawfulness of processing that occurred before the withdrawal.

999nd uses a limited set of cookies and similar technologies to operate the platform, maintain your session, and gather anonymised usage analytics. We do not use third-party advertising cookies, cross-site tracking pixels, or behavioural profiling technologies that follow you outside the 999nd domain.

Types of Cookies Used

• Strictly Necessary Cookies: These cookies are essential for the 999nd platform to function. They maintain your login session, remember your language preferences, and enable secure payment processing. The platform cannot function without these cookies and they cannot be disabled.
• Analytics Cookies: We use first-party analytics cookies to understand aggregate patterns in how players navigate the 999nd platform — for example, which game categories are most visited, where players in Dhaka, Chittagong, or Sylhet tend to drop off during registration, and which pages load slowly. This data is anonymised and cannot be used to identify individual players.
• Functional Cookies: These cookies remember your preferences such as your chosen game category, your preferred display settings, and whether you have previously dismissed certain informational notices. They are not essential but improve your platform experience.

Managing Cookies

You can control and manage cookies through your browser settings. Most modern browsers allow you to block or delete cookies, or to receive a notification before a cookie is stored. Please note that disabling strictly necessary cookies will prevent you from logging in or using core features of the 999nd platform. Disabling analytics or functional cookies will not prevent you from accessing games or making transactions.

For guidance on managing cookies in your specific browser, refer to your browser's official help documentation. 999nd does not maintain control over the cookie behaviour of third-party Game Providers' game engines, which may set their own session cookies within embedded game frames. Please refer to the relevant Game Provider's privacy documentation for details.

999nd does not sell, rent, or trade your personal data to any third party for commercial purposes. We share your personal data only in the limited circumstances described below, and only to the extent strictly necessary for each purpose.

Game Providers

To deliver the games available on the 999nd platform — including titles from Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, Play'n GO, and Hacksaw Gaming — your account session token and relevant gameplay parameters must be passed to the respective Game Provider's system when you launch a game. Game Providers receive only the technical session data necessary to run the game and record the outcome; they do not receive your full name, NID details, payment information, or contact details. Each Game Provider operates under its own privacy policy and data protection framework.

Payment Service Providers

To process your deposits and withdrawals, 999nd shares the minimum necessary transactional data with the relevant payment service providers, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, and card networks such as Visa and Mastercard. This data exchange is conducted over encrypted connections and is limited to the information required to complete and verify the specific transaction.

KYC and Fraud Prevention Partners

999nd may use third-party identity verification or fraud prevention services to assist in processing KYC documentation. These partners act as data processors on 999nd's behalf and are contractually obligated to handle your data securely, use it only for the specified verification purpose, and not to retain it beyond the period required to complete the verification.

Legal and Regulatory Disclosure

999nd may disclose your personal data to law enforcement agencies, regulatory bodies, or other government authorities if required to do so by applicable law, a valid court order, or a lawful regulatory demand. In such cases, 999nd will disclose only the data specifically required by the relevant legal instrument and will notify you of such disclosure where permitted by law to do so.

Business Transfers

In the event that 999nd undergoes a merger, acquisition, restructuring, or sale of all or part of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer via the email address registered on your account, and the acquiring entity will be required to honour the terms of this Privacy Policy with respect to your personal data.

999nd retains your personal data for as long as your account remains active and for a defined period after account closure, in accordance with our legal and operational obligations. The following retention periods apply:

When a data retention period expires, 999nd securely deletes or permanently anonymises the relevant data so that it can no longer be associated with any individual player. Anonymised, aggregated data (from which no individual can be identified) may be retained indefinitely for statistical analysis and platform improvement purposes.

The specific security measures 999nd maintains include:

• SSL/TLS Encryption in Transit: All data exchanged between your browser or mobile device and the 999nd platform is encrypted using industry-standard SSL/TLS protocols, protecting it from interception during transmission.
• Encryption at Rest: Sensitive data stored on 999nd's servers — including KYC documents, payment identifiers, and account credentials — is encrypted at rest using strong encryption standards.
• Access Controls: Access to personal data within 999nd's internal systems is restricted on a strict need-to-know basis. Only staff whose role specifically requires access to personal data — such as the compliance, payments, and customer support teams — are granted access, and all access is logged and audited.
• Password Security: Player account passwords are stored in a one-way hashed format. 999nd staff cannot view your password in plain text. You should choose a strong, unique password for your 999nd account and never share it with anyone.
• Fraud Detection Systems: 999nd operates automated fraud detection systems that monitor account activity, transaction patterns, and login behaviour for signs of unauthorised access or suspicious activity. Unusual activity may trigger additional authentication requirements or a temporary account hold pending investigation.
• Third-Party Security Assessments: 999nd periodically engages third-party security professionals to review platform security controls, identify vulnerabilities, and recommend improvements. Game Providers integrated into the 999nd platform are required to demonstrate equivalent security certifications as a condition of their integration.

Your Responsibilities

While 999nd takes extensive measures to protect your data, you also play an important role in keeping your account secure. You are responsible for keeping your login credentials confidential, using a strong and unique password, logging out of your 999nd account after each session (especially on shared devices), and promptly notifying 999nd at [email protected] if you suspect unauthorised access to your account. 999nd will never ask for your password by email, phone, or live chat.

Data Breach Response

In the unlikely event of a data breach that poses a material risk to affected players, 999nd will investigate the incident promptly, take immediate steps to contain and remediate the breach, and notify affected players via the email address registered on their account within a reasonable timeframe. The notification will describe the nature of the breach, the categories of data affected, and the steps 999nd is taking in response.

As a player on the 999nd platform, you hold the following rights with respect to the personal data we hold about you. You may exercise any of these rights at any time by contacting [email protected] with your account details and a clear description of your request. 999nd aims to respond to all privacy rights requests within 30 days of receipt.

Please note that certain rights are subject to limitations where 999nd is required to retain data by law (for example, KYC documents and financial records cannot be deleted within the mandatory retention period). 999nd will clearly explain any applicable limitations when responding to your request.

999nd employs age verification measures at account registration and at the point of withdrawal to enforce the 18+ restriction. If 999nd discovers or is notified that a player account has been created by or is being used by a person under the age of 18, the following steps will be taken immediately:

• The account will be permanently suspended and all access to the platform will be revoked.
• Any funds held in the account, including deposits, winnings, and bonus balances, will be withheld pending investigation and may be forfeited.
• All personal data associated with the underage account will be securely deleted in accordance with our data retention obligations, except where retention is required to comply with a legal obligation.
• The matter may be referred to relevant child protection authorities where appropriate.

Parents and guardians who believe that a minor in their household has registered on the 999nd platform should contact [email protected] immediately. 999nd encourages responsible adults to use parental control software to restrict minors' access to online gambling platforms. Information about parental controls is available from internet service providers operating in Bangladesh.

Policy Updates

999nd reserves the right to amend or update this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or platform features. The "Last Updated" date at the top of this document indicates when the most recent revision was made.

Where a material change is made to how we collect or use your personal data, 999nd will notify registered players via the email address on file before the change takes effect, where practicable. For minor clarifications or non-material updates, the revised Privacy Policy will be published on this page and the "Last Updated" date will be amended accordingly. Your continued use of the 999nd platform following any update to this Privacy Policy constitutes your acceptance of the revised terms.

How to Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data 999nd holds about you, please contact our data protection team at:

• Email: [email protected] (plain text — not a clickable link)
• Response time: 999nd aims to respond to all privacy-related enquiries within 5 business days of receipt, during normal operating hours in Bangladesh Standard Time (BST, UTC+6).
• Postal enquiries: For formal written requests, including subject access requests, please send your written request by email to [email protected] with the subject line "Privacy Rights Request" and include your full name, registered email address, and a clear description of your request.