999bc Privacy Policy

Introduction

This Privacy Policy applies to all services provided by 999bc through the platform accessible at 999bc.io, including the casino games lobby, sports betting markets, account registration and management, payment processing, customer support, and all associated digital touchpoints used by players in Bangladesh and elsewhere.

999bc is committed to handling your personal data responsibly and transparently. We collect only the information we genuinely need, we use it only for the purposes described in this policy, and we take all reasonable technical and organisational steps to keep it secure.

By registering a player account, making a deposit, or using any part of the 999bc platform, you acknowledge that you have read and understood this Privacy Policy and you consent to the collection and use of your personal data as described herein. If you do not agree to this Privacy Policy, you must not use the 999bc platform.

Data We Collect

999bc collects personal data across several categories depending on how you interact with our platform. The table below summarises the primary data categories, specific data points within each category, and the purpose for which each is collected.

999bc does not collect or store sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or biometric identifiers beyond what is strictly required for identity verification under applicable KYC regulations.

How We Collect Data

999bc collects personal data through the following methods and channels:

• Direct submission: Information you provide voluntarily when registering an account, completing KYC verification, making a deposit or withdrawal request, contacting customer support, or participating in a promotion.
• Automated collection: Technical and usage data collected automatically when you access and interact with the 999bc platform, including via cookies, log files, and session tracking technologies.
• Payment providers: Transaction confirmation data shared with 999bc by payment service providers including bKash, Nagad, Rocket, Upay, Visa, and Mastercard when you initiate a deposit or withdrawal.
• Identity verification partners: Verification status data returned by third-party KYC service providers when 999bc requests identity or age verification on your account.
• Public sources: In limited circumstances, 999bc may cross-reference publicly available information (such as national registry databases) to verify the accuracy of identity data you have provided during registration.

Purpose of Processing

999bc processes personal data for the following specific purposes. We do not use personal data for any purpose not listed here without first obtaining your explicit consent or updating this Privacy Policy with reasonable prior notice.

• Account creation and management: To register your player account, verify your identity and age, maintain your account preferences, and manage your session security on the 999bc platform.
• Payment processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to maintain accurate financial records of all transactions on your 999bc account.
• Legal and regulatory compliance: To fulfil obligations under applicable anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements, and any requests from law enforcement or regulatory authorities with appropriate legal authority.
• Fraud and security monitoring: To detect, investigate, and prevent fraudulent activity, unauthorised account access, bonus abuse, collusion, and other forms of prohibited conduct on the 999bc platform.
• Responsible gaming: To monitor player usage patterns for indicators of problem gambling behaviour, to apply deposit limits and self-exclusion arrangements requested by players, and to fulfil responsible gaming obligations.
• Customer support: To respond to queries, investigate complaints, resolve disputes, and improve the quality of the 999bc support service based on historical interaction records.
• Product and platform improvement: To analyse aggregated and anonymised usage data to improve the 999bc platform, optimise game offerings, and enhance the overall player experience for the Bangladesh market.
• Promotional communications: To send you information about 999bc bonuses, promotions, and new product features, but only where you have explicitly opted in to receive such communications.

Legal Basis for Processing

999bc processes your personal data on the following legal bases, depending on the specific processing activity involved:

• Contractual necessity: Processing required to fulfil the contract between you and 999bc — including account registration, payment processing, and delivery of games and betting services.
• Legal obligation: Processing required to comply with applicable law, including KYC identity verification, AML transaction monitoring, and responses to lawful requests from competent authorities.
• Legitimate interests: Processing carried out for 999bc's legitimate business interests, including fraud prevention, platform security, and improvement of services, where those interests are not overridden by your privacy rights.
• Consent: Processing for optional purposes — such as receiving promotional emails — where 999bc has obtained your freely given, specific, informed, and unambiguous consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

Data Sharing & Disclosure

999bc does not sell, rent, trade, or otherwise transfer your personal data to third parties for commercial or marketing purposes. Data is shared only in the following specific and limited circumstances:

• Payment service providers: Transaction reference data is shared with bKash, Nagad, Rocket, Upay, Visa, and Mastercard solely to facilitate the processing of deposits and withdrawals on your 999bc account.
• Identity verification providers: Identity and age verification data is shared with third-party KYC partners engaged by 999bc to fulfil regulatory compliance obligations. These partners are contractually bound to process data only for verification purposes.
• Game content providers: Certain gameplay data (such as session tokens and wager amounts) is transmitted to game studio partners including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi solely to deliver the game content you have requested.
• Law enforcement and regulatory authorities: 999bc will disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required to do so by applicable law, or where disclosure is necessary to protect the safety, rights, or property of 999bc or its players.
• Business transfers: In the event of a merger, acquisition, or transfer of all or part of the 999bc business, player data may be transferred to the acquiring entity as part of the transaction, subject to equivalent privacy protections remaining in place.

All third parties with whom 999bc shares personal data are required to maintain appropriate technical and organisational security measures and to process data only for the purposes for which it was shared. 999bc does not permit third-party partners to use player data for their own marketing purposes.

Cookies & Tracking Technologies

999bc uses cookies and similar technologies (including local storage and session tokens) to operate the platform effectively, maintain the security of your session, and understand how players interact with different areas of the site. The table below describes the categories of cookies used by 999bc:

999bc does not use third-party advertising cookies or cross-site tracking cookies. Analytics data collected by 999bc is anonymised and aggregated before analysis, meaning it cannot be used to identify individual players.

You may manage or disable cookies through your browser settings at any time. Please note that disabling strictly necessary cookies may prevent some parts of the 999bc platform from functioning correctly, including the login and payment cashier features.

Data Retention

999bc retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Active account data: Retained for the full duration of your active account relationship with 999bc, plus a minimum of five years following account closure, in compliance with financial record-keeping and AML obligations.
• Transaction records: Deposit, withdrawal, and wagering transaction records are retained for a minimum of seven years following each transaction date for audit and regulatory compliance purposes.
• KYC verification documents: Identity and age verification documents are retained for a minimum of five years following the completion of the verification process or account closure, whichever is later.
• Support communications: Customer support correspondence is retained for a minimum of three years following the resolution of the relevant query or dispute.
• Marketing consent records: Records of promotional communication consent and any subsequent withdrawal of consent are retained for a minimum of three years to demonstrate compliance with consent obligations.
• Technical and usage data: Log files and session data are retained for up to 24 months for security monitoring and platform improvement purposes, after which they are anonymised or deleted.

At the end of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Where full deletion is not technically possible due to backup systems, data is isolated from active processing until it can be permanently removed.

Your Data Rights

As a player on the 999bc platform, you have the following rights with respect to your personal data. To exercise any of these rights, please contact the 999bc support team using the contact details provided in Section 14 of this Privacy Policy.

• Right of access: You may request a copy of all personal data held about you by 999bc at any time. 999bc will respond to access requests within 30 days of receipt.
• Right to rectification: You may request the correction of any inaccurate or incomplete personal data held on your 999bc account. Basic profile data (such as contact details) can be updated directly through your account settings dashboard.
• Right to erasure: You may request deletion of your personal data. 999bc will fulfil erasure requests where there is no overriding legal obligation to retain the data. Note that financial transaction records and KYC documents must be retained for the periods specified in Section 8, even following account closure.
• Right to restrict processing: You may request that 999bc restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to a particular processing activity.
• Right to data portability: You may request a structured, machine-readable copy of the personal data you have directly provided to 999bc, for the purpose of transferring it to another service provider.
• Right to object: You may object to processing carried out on the basis of legitimate interests, including the use of your data for product improvement and analytics purposes. You may also withdraw consent for promotional communications at any time.

Children & Minors

The 999bc platform is strictly intended for adults aged 21 years and above. 999bc does not knowingly collect personal data from any individual under the age of 21. If 999bc becomes aware that personal data has been collected from a minor, all such data will be deleted immediately and the associated account will be permanently closed.

If you are a parent or guardian and you believe that a person under the age of 21 in your care has registered an account or provided personal data to 999bc, please contact the 999bc support team immediately using the details provided in Section 14. 999bc will investigate all such reports as a priority matter and take appropriate action within 24 hours of notification.

999bc strongly encourages parents and guardians to make use of parental control software and internet filtering tools to prevent minors from accessing online gambling platforms. The 999bc platform itself employs age verification checks at the point of registration and at the KYC stage to minimise the risk of underage access.

Security Measures

999bc implements a comprehensive set of technical and organisational security measures to protect player personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL (Secure Sockets Layer) encryption applied to all data in transit between player devices and 999bc servers.
• Encrypted storage of all player account data and financial records on secured, access-controlled server infrastructure.
• Role-based access controls ensuring that 999bc staff can access player data only to the extent required for their specific job function.
• Multi-factor authentication options for player accounts to prevent unauthorised access in the event of credential compromise.
• Automated fraud detection and anomaly monitoring systems that flag unusual account activity for human review.
• Regular security assessments and penetration testing of the 999bc platform by independent security professionals.
• Staff training on data protection obligations and secure handling of personal information.

While 999bc takes all reasonable steps to protect your personal data, no digital platform can guarantee absolute security against all possible threats. In the event of a data breach that poses a risk to player rights and freedoms, 999bc will notify affected players and relevant authorities in accordance with applicable legal requirements.

Third-Party Links

The 999bc platform may contain references to third-party services, payment providers, and game studio partners. While 999bc takes care to work only with reputable partners, 999bc is not responsible for the privacy practices or data handling policies of any third-party service. Each third-party service operates under its own privacy policy, which you should review independently.

This Privacy Policy applies solely to data collected and processed by 999bc directly through the 999bc.io platform. It does not apply to data collected by payment providers such as bKash, Nagad, Rocket, Upay, Visa, or Mastercard when you interact with their own platforms or apps outside of the 999bc cashier interface.

Policy Updates

999bc reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we provide. When material changes are made to this Privacy Policy, 999bc will notify registered players by email to their registered address and by displaying a prominent notice on the 999bc platform for a period of at least 14 days prior to the updated policy taking effect.

The current and effective version of this Privacy Policy is always available at 999bc.io/privacy-policy. The version marked with the most recent effective date supersedes all previous versions. Your continued use of the 999bc platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms.

If any update to this Privacy Policy requires your renewed consent for a processing activity previously consented to, 999bc will seek that consent separately before commencing the updated processing activity.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data held about you by 999bc, please contact the 999bc data team using the details below. All privacy-related inquiries are handled by dedicated staff and responded to within 2 business days for standard requests and within 24 hours for urgent security matters.

Email: support 999bc.io

When submitting a data rights request or privacy inquiry, please include your registered 999bc username and a clear description of your request. For identity verification purposes, you may also be asked to provide a copy of a government-issued ID before your request is processed.