999p Privacy Policy — Your Data, Your Rights

Privacy at a Glance

The following summary highlights the key principles of how 999p handles your data. Please read the full policy below for complete details.

1. Introduction

This Privacy Policy describes how 999p ("999p", "we", "us", or "our") collects, uses, stores, shares, and protects the personal information of individuals who register for or use the 999p online casino and sports betting platform, accessible at https://999p.vin. This policy applies to all registered users of 999p in Bangladesh and any other jurisdiction in which the platform is accessed.

By registering for an account on 999p, you acknowledge that you have read this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this policy, you should not register for or use the 999p platform. This Privacy Policy is incorporated by reference into the 999p Terms & Conditions.

2. Information We Collect

999p collects personal information from you directly (information you provide when registering or using the platform), automatically (information collected by our systems as you use the platform), and in some cases from third parties (such as mobile wallet providers for payment verification). The categories of personal data we collect include the following.

• Registration data: your full name, date of birth, registered mobile phone number, and account password (stored as a one-way hash — never in plain text).
• Identity verification (KYC) documents: government-issued photo identification (such as a National Identity Card or passport) and proof of address, submitted when required for account verification or withdrawal processing.
• Financial transaction records: deposit amounts, withdrawal amounts, dates and times of transactions, and the mobile wallet identifiers (bKash, Nagad, Rocket, or Upay account numbers) associated with your transactions.
• Gaming activity data: details of games played, bets placed, wagers settled, bonus credits and redemptions, and session durations — collected for account management, responsible gaming monitoring, and fraud detection purposes.
• Technical and device data: IP address, device type and model, operating system version, browser type and version, mobile network operator, and general geographic location (derived from IP address, not GPS). This data is collected automatically when you access the 999p platform.

3. How We Use Your Information

999p uses the personal data collected from you for the following specific purposes. We do not use your data for any purpose not listed here without first obtaining your explicit consent.

• Account creation and management: to register your account, authenticate your identity on login, maintain your account settings, process your deposits and withdrawals, and manage your gaming activity and bonus entitlements.
• Identity verification and compliance: to verify your age and identity in accordance with our KYC obligations, and to carry out anti-money-laundering (AML) checks as required to operate a responsible gaming platform.
• Platform security and fraud prevention: to detect, investigate, and prevent fraudulent transactions, account abuse, cheating, collusion, bonus misuse, and other prohibited conduct. Technical data (including IP address and device identifiers) is used to identify suspicious patterns.
• Responsible gaming support: to monitor gaming behaviour for indicators of problem gambling, to enforce deposit limits and session time limits that you have set, and to apply self-exclusion restrictions on your account where requested.
• Customer support: to respond to your enquiries, complaints, and support requests, and to maintain a record of communications with you for service quality and dispute resolution purposes.

4. Legal Basis for Processing

999p processes your personal data on the following legal grounds, depending on the nature of the processing activity.

• Contractual necessity: processing your registration data, transaction records, and gaming activity data is necessary to perform our contract with you (the Terms & Conditions) and to deliver the services you have requested.
• Legal obligation: processing KYC documents and AML-related data is required to comply with applicable legal obligations relating to age verification, identity verification, and the prevention of financial crime.
• Legitimate interests: processing technical and device data for fraud detection, security monitoring, and platform improvement is carried out on the basis of 999p's legitimate interests in maintaining a secure and fair platform, balanced against your data protection rights.

5. Data Sharing and Disclosure

999p does not sell, rent, or trade your personal data to any third party. We may share your data in the following strictly limited circumstances only.

• Service providers acting as data processors: third-party vendors who provide services to 999p — including game platform providers (such as Evolution Gaming, Pragmatic Play, Spribe, Ezugi), payment processing infrastructure, hosting, and customer support tools — may process your data on our behalf. They are contractually bound to process data only as instructed by 999p and to maintain appropriate security standards.
• Law enforcement and regulatory authorities: 999p may disclose personal data to law enforcement agencies, courts, or regulatory bodies where required to do so by applicable law, court order, or lawful governmental request. Where legally permissible, 999p will attempt to notify you of such disclosure.
• Business transfers: in the event that 999p undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the acquiring entity as part of that transaction, subject to equivalent privacy protections.

Under no circumstances will 999p sell your personal data to third-party advertisers, data brokers, or marketing companies.

6. Payment Data and Mobile Wallets

When you make a deposit or withdrawal using bKash, Nagad, Rocket, or Upay, 999p records the transaction amount, date, time, and the mobile wallet account number associated with the transaction. This information is retained as part of your financial transaction history and is used for account reconciliation, fraud prevention, and compliance purposes. 999p does not store your mobile wallet PIN, one-time passwords (OTPs), or any authentication credentials for your mobile wallet account — these are processed exclusively by your mobile wallet provider and never transmitted to or stored by 999p.

7. Cookies and Tracking Technologies

999p uses cookies and similar tracking technologies to improve the performance, security, and usability of the platform. A cookie is a small data file stored on your device by your browser when you visit a website. The types of cookies used by 999p include the following.

• Session cookies: these are temporary cookies that expire when you close your browser. They are used to maintain your login state during an active session and are essential for the platform to function correctly.
• Persistent cookies: these cookies remain on your device for a set period after you close your browser. They are used to remember your language preferences and other account settings so that you do not need to re-enter them each time you visit.
• Analytics and performance cookies: these cookies collect aggregated, anonymised data about how users navigate the platform — including pages visited, time spent on each page, and error events. This data helps 999p identify technical issues and improve the user experience.

You can control or disable cookies through your mobile browser settings. Please note that disabling essential session cookies will prevent you from logging in to your 999p account and using the platform. 999p does not use third-party advertising cookies or behavioural tracking cookies for marketing profiling purposes.

8. Data Security

999p implements a combination of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, loss, or destruction. These measures include SSL/TLS encryption for all data transmitted between your device and the 999p platform; one-way cryptographic hashing of account passwords (your password is never stored in a recoverable form); access controls that restrict personal data access to authorised 999p personnel on a need-to-know basis; and regular security reviews of platform infrastructure.

While 999p takes all reasonable precautions to protect your data, no internet-based platform can guarantee absolute security. In the event of a data breach that affects your personal data, 999p will take prompt action to contain the breach and, where required, will notify affected users. You are responsible for maintaining the confidentiality of your own account credentials and for ensuring that you access 999p only from devices that are secure and under your control.

9. Data Retention

999p retains your personal data for as long as your account remains active and for a period after account closure as required to fulfil legal, regulatory, and operational obligations. The following retention periods apply: account registration data and KYC documents are retained for a minimum of five years from the date of account closure; financial transaction records are retained for a minimum of five years from the date of each transaction; gaming activity logs are retained for a minimum of three years; customer support communications are retained for two years from the date of the last communication in a given matter.

After the applicable retention period expires, 999p will securely delete or anonymise your personal data so that it can no longer be attributed to you. Where data is retained for legal compliance purposes beyond the standard retention period, access to that data will be restricted to authorised compliance personnel only.

10. Your Data Rights

As a user of 999p, you have the following rights with respect to the personal data that 999p holds about you. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request" along with your registered mobile number for account verification.

• Right of access: you have the right to request a copy of the personal data that 999p holds about you, together with information about how it is being used. We will respond to verified access requests within 30 days.
• Right of rectification: if you believe that any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. Requests to change identity or date-of-birth data will require supporting documentation.
• Right to erasure: in certain circumstances you have the right to request that 999p delete your personal data. This right does not apply where retention is required for legal compliance, fraud investigation, or the resolution of an ongoing dispute involving your account.
• Right to restriction of processing: you may request that 999p restrict the processing of your personal data in certain circumstances — for example, while a rectification request is being reviewed, or where you have objected to processing on legitimate-interest grounds.
• Right to object: where 999p processes your data on the basis of legitimate interests, you have the right to object to that processing. 999p will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.

999p will not charge a fee for handling data rights requests submitted in good faith. We reserve the right to decline requests that are manifestly unfounded, excessive, or repetitive, or where fulfilling the request would require the disclosure of third-party personal data.

11. Children and Minors

999p is strictly an adults-only platform. Registration and use of 999p is prohibited for any person under the age of 21 years. 999p does not knowingly collect, process, or retain personal data from individuals under 21. If 999p becomes aware that a user is under 21 years of age, the account will be closed immediately and any associated funds returned or forfeited in accordance with the Terms & Conditions. If you are a parent or guardian and believe that a minor in your care has registered for 999p, please contact us immediately at [email protected] so that we can take prompt action.

12. Changes to This Privacy Policy

999p reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, platform features, or applicable legal requirements. When material changes are made, the updated policy will be published on this page with a revised "Last Updated" date. Where the changes are significant, 999p will also notify registered users via their registered mobile number or through an in-platform notification.

Your continued use of the 999p platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this page periodically to stay informed about how 999p is protecting your information. The version of this policy in effect at any given time is the one that governs the processing of your data at that time.

13. Contact Us About Privacy

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to report a privacy concern, please contact the 999p support team. All privacy-related enquiries will be handled with strict confidentiality and responded to within 30 days.

Email: [email protected] (plain text only — not a clickable link). Support is available 24/7 in English. Please include your registered mobile number and the subject "Privacy Enquiry" in your message so we can locate your account and respond efficiently.