999bd1 Privacy Policy

999bd1 collects personal data through the following channels:

• Direct registration: Information you provide when you create a 999bd1 account, including your name, email address, mobile number, and date of birth.
• Identity verification: Documents you submit during KYC checks, such as a scan or photograph of your National Identity Card (NID) or passport.
• Payment processing: Mobile financial service account details and transaction records generated when you deposit or withdraw funds via bKash, Nagad, Rocket, or Upay.
• Platform usage: Automatically collected technical and behavioural data as you navigate and interact with the 999bd1 website, including via cookies and session tracking.
• Customer support: Information you share when contacting our support team by email or through the platform's contact system.
• Third-party providers: In limited circumstances, data received from game providers (e.g., Pragmatic Play, Evolution Gaming) or payment gateway partners where required to resolve a transaction dispute.

999bd1 uses your personal data only for the following legitimate purposes:

• Account management: Creating, maintaining, and securing your 999bd1 account, including password resets and login security.
• Identity verification: Confirming your age (21+ requirement) and identity in compliance with our KYC obligations before processing withdrawals.
• Payment processing: Executing deposit and withdrawal transactions through your chosen mobile financial service provider.
• Service delivery: Enabling access to sports betting markets, live casino games, slots, and all other platform features.
• Fraud and security: Detecting and preventing fraudulent activity, money laundering, multi-accounting, and other prohibited conduct.
• Responsible gaming: Monitoring usage patterns to identify signs of problem gambling and, where relevant, applying deposit limits or self-exclusion measures at the user's request or our discretion.
• Customer support: Responding to enquiries, resolving disputes, and improving service quality based on support interactions.
• Platform improvement: Analysing aggregated, anonymised usage data to optimise the platform's performance, content, and user experience.
• Legal compliance: Meeting any obligations under applicable law, including responding to valid regulatory or law-enforcement requests.

999bd1 uses cookies and similar tracking technologies to maintain session state, improve platform performance, and understand how users navigate the site. The types of cookies we use include:

• Essential cookies: Required for the platform to function. These include session authentication cookies that keep you logged in as you move between pages. These cannot be disabled without breaking core functionality.
• Functional cookies: Remember your preferences (e.g., preferred language, last visited section) to improve your experience across sessions.
• Analytics cookies: Collect anonymised data about how users interact with the platform. This data is used to understand traffic patterns and identify technical issues. No personally identifiable information is included in analytics data.
• Security cookies: Help detect and prevent fraudulent sessions, including CSRF (Cross-Site Request Forgery) protection tokens.

You may disable non-essential cookies through your browser settings. Note that disabling essential cookies will affect your ability to log in and use the platform normally.

999bd1 does not sell your personal data. We share data with third parties only in the following limited and controlled circumstances:

• Payment service providers: Sharing the minimum necessary payment details with bKash, Nagad, Rocket, and Upay to execute your requested transaction.
• Game technology providers: Providers such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, and Microgaming may receive a session token and limited account identifiers to authenticate your game sessions. They do not receive your full identity or financial data.
• Identity verification services: Where we use a third-party KYC provider to verify your identity documents, that provider will receive the documents you submit. KYC providers are contractually bound to process your data solely for the verification purpose and to maintain appropriate security standards.
• Legal and regulatory authorities: Where we receive a valid legal demand — such as a court order or a regulatory request from a competent authority — we may be required to disclose specific user data. We will notify you of such a demand where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of 999bd1's business, your data may be transferred to the successor entity, subject to equivalent privacy protections.

All third parties who receive personal data from 999bd1 are required to handle it securely, use it only for the specified purpose, and comply with applicable data protection standards.

999bd1 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following retention guidelines:

• Active accounts: All account and transaction data is retained for the duration of your active account relationship with 999bd1.
• Closed accounts: Following account closure, we retain identity and transaction records for a minimum of 5 years to meet financial record-keeping obligations and support dispute resolution if required.
• KYC documents: Identity verification documents are retained for a minimum of 5 years from the date of verification or account closure, whichever is later.
• Support records: Customer support correspondence is retained for 2 years from the date of the last interaction, or longer if the matter relates to an unresolved dispute.
• Analytics data: Anonymised, aggregated analytics data may be retained indefinitely as it contains no personally identifiable information.

When retention periods expire, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual.

As a 999bd1 user, you have the following rights regarding your personal data. To exercise any of these rights, contact our support team at [email protected]:

• Right of access: You may request a summary of the personal data we hold about you, including the categories of data, the purposes for which it is processed, and any third parties it has been shared with.
• Right to rectification: If any personal data we hold is inaccurate or incomplete, you may ask us to correct it. We aim to process rectification requests within 10 business days.
• Right to erasure: You may request deletion of your personal data. We will honour this request where no legal obligation requires us to retain the data. Note that active account data and financial records subject to retention obligations cannot be deleted on request alone.
• Right to restrict processing: In certain circumstances — for example, while you contest the accuracy of data we hold — you may ask us to pause processing of your data without deleting it.
• Right to data portability: You may request a machine-readable export of the personal data you provided to us, where technically feasible.
• Right to withdraw consent: Where processing is based on your consent (e.g., optional marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

999bd1 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure:

• SSL/TLS encryption: All data transmitted between your device and our servers is encrypted in transit using industry-standard SSL/TLS protocols.
• Password hashing: Account passwords are stored as cryptographic hashes. We never store passwords in plain text. Even internal staff cannot retrieve your password — only reset it via a verified process.
• Access controls: Internal access to user data is role-based and limited to staff with a legitimate operational need. All access events are logged.
• Fraud detection systems: Automated systems monitor account activity for anomalies indicative of unauthorised access or fraudulent transactions, triggering alerts and temporary locks where appropriate.
• Secure infrastructure: Platform servers are hosted in secured data centre environments with physical access controls, redundant systems, and regular security audits.

While we take these measures seriously, no online platform can guarantee absolute security. You are responsible for keeping your login credentials confidential and for using a secure, private device and network when accessing 999bd1.

999bd1 is strictly an adult platform. Use of our services is limited to individuals aged 21 years or older. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that an account has been registered by a person below the minimum age, the account will be immediately closed and any balance held pending review.

If you believe a minor has registered on 999bd1, please notify us immediately at [email protected] so that we can take prompt action. Parents and guardians are encouraged to use parental control tools on shared devices to prevent access to online gambling platforms.

From time to time, 999bd1 may send you promotional communications about bonuses, new games, seasonal offers (such as BPL or IPL betting promotions, Eid offers, or Pohela Boishakh specials), and other platform updates. The following rules govern how we handle marketing communications:

• Marketing messages are sent only to users who have not opted out during or after registration.
• You may unsubscribe from promotional emails at any time by contacting [email protected] with the subject line "Unsubscribe from marketing".
• Unsubscribing from marketing does not affect the delivery of transactional communications (e.g., deposit confirmations, withdrawal status updates, security alerts) which are sent regardless of marketing preferences.
• We do not send SMS marketing without explicit opt-in consent.
• Your marketing preference is stored on your account and honoured across all communication channels.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a privacy concern, please contact the 999bd1 data support team:

• Email: [email protected] (plain text — not a clickable link)
• Subject line: Include "Privacy Request" or "Data Rights" in the subject for faster routing.
• Response time: We aim to acknowledge all privacy-related requests within 2 business days and to provide a full response within 10 business days.

If you are not satisfied with our response to a privacy complaint, you may escalate the matter in writing to our senior team by recontacting [email protected] with the subject line "Privacy Escalation". We are committed to resolving all data-related concerns fairly and transparently.