Privacy Policy — 999ee

999ee collects personal data through several channels: directly from you when you register an account, make a deposit, or contact our support team; automatically through your use of the platform; and occasionally from trusted third-party sources for identity verification and fraud prevention purposes. We collect only the data that is necessary and proportionate to the purposes described in this Policy.

Registration & Account Data

When you create a 999ee account, we collect the following information:

• Full legal name — as it appears on your national identification document
• Date of birth — to verify you are 18 years of age or older
• Email address — for account communications, transaction receipts, and promotional messages (where opted in)
• Mobile phone number — linked to your mobile financial service account (bKash, Nagad, Rocket, or Upay) for payment processing and two-factor authentication
• Username and encrypted password — your chosen login credentials; passwords are stored using one-way hashing and are never accessible in plain text
• Residential address — collected during identity verification, including city (e.g., Dhaka, Chittagong, Sylhet, Khulna) and district

Identity Verification Data

To comply with our know-your-customer (KYC) obligations and to protect the integrity of the platform, we may request and retain copies of identity documents including your National ID Card (NID), passport, or driving licence. Where required, we may also request a recent utility bill or bank statement as proof of address. These documents are processed securely and retained only for as long as legally required.

Financial & Transaction Data

We collect records of all financial transactions conducted on the platform, including deposit amounts, withdrawal requests, payment method references (e.g., bKash wallet number, Nagad account reference), transaction timestamps, and balance history. We do not store full payment card numbers or mobile banking PINs. All payment processing is handled via secure, encrypted connections with our payment service partners.

Usage & Behavioural Data

We automatically collect technical and behavioural data when you interact with the platform, including:

• IP address and approximate geolocation (country and city level)
• Device type, operating system, and browser version
• Pages visited, time spent on each page, and navigation paths
• Games played, bet amounts, session durations, and game history
• Login timestamps and session activity logs
• Referral source (e.g., search engine, direct URL entry)

Communications Data

When you contact 999ee support via live chat, email, or WhatsApp, we retain a record of the conversation including your messages, any attachments you provide, the date and time of the interaction, and the resolution outcome. This data is used to resolve disputes, improve service quality, and for staff training purposes.

999ee processes your personal data for specific, legitimate purposes only. We do not sell your personal data to third parties for their own marketing purposes. The table below summarises the primary purposes for which your data is used and the lawful basis for each:

Where we rely on your consent to process data — for example, to send you promotional emails about bonuses, BPL cricket betting offers, or seasonal promotions tied to Eid or Pohela Boishakh — you may withdraw that consent at any time by updating your communication preferences within your account settings or by contacting our support team.

In the course of operating the 999ee platform, we may share your personal data with the following categories of third parties:

Payment Service Providers

To process your deposits and withdrawals, we share necessary financial information with our payment partners including bKash, Nagad, Rocket, Upay, BRAC Bank, and City Bank. These providers receive only the transaction data required to complete the specific payment; they do not receive your full account profile or game history. Each payment partner operates under its own privacy policy and is subject to applicable Bangladesh Bank regulations.

Game Content Providers

Our platform hosts games developed by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game hosted by these providers, limited session data (such as a pseudonymous player ID, game session token, and bet/win records) is transmitted to the provider's servers for the purpose of delivering and recording the game outcome. These providers do not receive your name, contact details, or payment information.

Identity Verification Services

We use third-party identity verification services to assist with KYC document checks. These services process your identity documents in a secure, encrypted environment and return a verification outcome to 999ee. Document images shared for this purpose are not retained by the verification provider beyond the period required to complete the check.

Legal & Regulatory Disclosure

999ee may disclose personal data to competent authorities, law enforcement agencies, or regulatory bodies where required to do so by applicable law, court order, or regulatory directive. In such cases, we will disclose only the minimum data required to satisfy the legal obligation and will, where legally permitted, notify the affected player of the disclosure.

Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of the assets of 999ee, your personal data may be transferred to the acquiring entity as part of that transaction. In such circumstances, we will notify affected players and ensure that the receiving entity is bound by privacy obligations no less protective than those set out in this Policy.

999ee uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files placed on your device by your browser when you visit our site. They help us remember your session, personalise your experience, and understand how players interact with different areas of the platform.

Types of Cookies We Use

• Strictly Necessary Cookies: These are essential for the platform to function. They maintain your login session, remember your language and currency preferences, and protect against cross-site request forgery (CSRF). These cookies cannot be disabled without affecting your ability to use the site.
• Performance & Analytics Cookies: These cookies collect anonymised data about how visitors use the platform — which pages are most visited, where users drop off, and how long sessions last. This data helps us identify areas for improvement. We use aggregated, anonymised data only; these cookies do not identify you personally.
• Functional Cookies: These cookies remember your preferences such as preferred deposit method, display settings, and notification preferences, so you do not need to re-enter them on every visit.
• Marketing Cookies (consent-based): Where you have opted in to marketing communications, these cookies help us understand which promotional content is relevant to your interests. They are not used to build profiles for third-party advertisers.

Managing Cookies

Most web browsers allow you to control cookies through their settings. You may block or delete cookies at any time; however, disabling strictly necessary cookies will impair your ability to log in and use the platform. For guidance on managing cookies in your specific browser, please refer to your browser's help documentation. Continuing to use 999ee without changing your browser's cookie settings constitutes your acceptance of our use of cookies as described in this section.

Protecting your personal data is a responsibility we take seriously at 999ee. We implement a range of technical and organisational security measures proportionate to the sensitivity of the data we hold, including:

• 256-bit SSL/TLS encryption on all data transmitted between your device and our servers
• Password hashing using industry-standard one-way cryptographic algorithms; plain-text passwords are never stored
• Two-factor authentication (2FA) available for all player accounts as an additional layer of login security
• Access controls limiting internal access to personal data on a strict need-to-know basis, with all access events logged and auditable
• Encrypted storage for identity documents and sensitive financial records
• Regular security assessments to identify and remediate vulnerabilities in platform infrastructure
• Segregated environments ensuring that production player data is isolated from development and testing systems

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in risk to your rights and freedoms, 999ee will notify affected players without undue delay and will take immediate steps to contain and investigate the incident. We will also notify relevant authorities as required.

You play an important role in keeping your account secure. Always use a strong, unique password for your 999ee account, never share your login credentials with anyone, and log out of your account when using a shared or public device. If you suspect unauthorised access to your account, contact our support team immediately at [email protected].

999ee retains your personal data for as long as your account remains active and for a defined period thereafter, in accordance with our legal obligations and legitimate business interests. The following retention periods apply:

When your data reaches the end of its applicable retention period, it is securely deleted or anonymised in a manner that prevents re-identification. Where anonymised data is retained for aggregate analytics, it no longer constitutes personal data and falls outside the scope of this Policy.

If you close your 999ee account, your personal data will not be deleted immediately — it will be retained for the minimum periods described above to satisfy legal obligations. You will not receive promotional communications following account closure, though transactional and legal communications may still be sent where relevant.

As a player on the 999ee platform, you hold specific rights in relation to your personal data. 999ee is committed to honouring these rights and to responding to all valid requests in a timely manner. To exercise any of the rights below, please contact us at [email protected] with the subject line "Privacy Rights Request".

• Right of Access: You may request a copy of the personal data 999ee holds about you. We will provide this in a structured, commonly used format within a reasonable timeframe following identity verification.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You may also update many of your account details directly through your account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other lawful basis applies. Note that certain data must be retained to comply with legal obligations — such requests will be assessed on a case-by-case basis.
• Right to Restrict Processing: You may request that we limit the processing of your data in certain circumstances, for example while the accuracy of your data is being disputed or while an objection to processing is being assessed.
• Right to Object: Where processing is based on our legitimate interests, you have the right to object. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to Data Portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you may request that we provide your personal data in a machine-readable format suitable for transfer to another service provider.

All privacy rights requests will be acknowledged within 5 business days of receipt. We may need to verify your identity before processing a request to ensure that personal data is not disclosed to an unauthorised party. We will endeavour to respond substantively within 30 calendar days; for complex or multiple requests, we may extend this period by up to an additional 30 days and will notify you accordingly.

999ee reviews and updates this Privacy Policy periodically to reflect changes in our data practices, legal requirements, or platform functionality. When material changes are made, we will notify registered players via the email address on file at least 14 days prior to the updated Policy taking effect. The "Last updated" date at the top of this document reflects the most recent revision.

Your continued use of the 999ee platform after the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not agree with the updated Policy, you should cease using the platform and may request account closure by contacting our support team.

Contact Our Privacy Team

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which 999ee handles your personal data, please contact us using the details below. We take all privacy enquiries seriously and will respond within 5 business days (Bangladesh Standard Time, UTC+6).

• Email: [email protected]
• Live Chat: Available 24/7 via the 999ee platform
• Subject Line: "Privacy Policy Enquiry" for faster routing to our privacy team

All times and response windows are measured in Bangladesh Standard Time (BST, UTC+6). Written complaints received by email will be acknowledged within 24 hours and resolved within 30 calendar days wherever possible. If you are not satisfied with our response, you may escalate your complaint through any available consumer protection channel in Bangladesh.