Privacy Policy — How 999bs Protects Your Data

999bs is an English-language online betting and gaming platform built specifically for the Bangladesh market. The platform is operated at the domain 999bs.io and offers services including sports betting, live casino games, slot games, Kalaka Bingo, and related entertainment products to eligible players aged 21 and above.

For the purposes of this Privacy Policy, 999bs acts as the data controller in respect of all personal information collected through the platform. As the data controller, 999bs determines the purposes and means by which personal data is processed, and is responsible for ensuring that such processing complies with applicable data protection standards.

All enquiries relating to this Privacy Policy, including requests to exercise your data rights, should be directed to the 999bs support team. Contact details are provided in Section 14 of this Policy.

999bs collects personal data through several channels: directly from you when you register an account or interact with the platform; automatically through technical systems as you use the platform; and, in limited circumstances, from trusted third-party verification providers. The categories of data we collect are as follows:

999bs does not knowingly collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, health data, or biometric data beyond what is contained in identity documents submitted for KYC purposes. Where such data is incidentally included in a submitted document, it is not extracted, processed, or stored in a searchable format.

The personal data collected by 999bs is used for a defined set of specific, legitimate purposes. We do not use your data in any way that is incompatible with the purposes for which it was originally collected. Our principal purposes for processing personal data are:

• Account Management: To create, maintain, and administer your 999bs player account, including authentication, password management, and account preference settings.
• Identity Verification (KYC): To verify your identity and age in compliance with our 21+ age restriction policy and anti-money laundering obligations. KYC checks may be performed at registration, prior to withdrawal processing, and at any other point deemed necessary by our compliance team.
• Payment Processing: To process deposits and withdrawal requests via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and bank transfer services, and to maintain accurate financial records of all transactions conducted through your account.
• Service Delivery: To provide access to all betting markets, casino games, slot titles, and other platform features available on 999bs, and to personalise your gaming experience based on your activity history and preferences.
• Responsible Gaming Enforcement: To monitor betting patterns and account activity for indicators of problem gambling behaviour, and to apply any responsible gaming restrictions you have activated, including deposit limits, loss caps, cooling-off periods, and self-exclusion.
• Fraud & Security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeover, bonus abuse, and any other prohibited conduct described in our Terms & Conditions.
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and communicate with you regarding your account status.
• Platform Improvement: To analyse aggregated, anonymised usage data to identify technical issues, optimise platform performance, and develop new features and products.
• Marketing Communications: To send you promotional offers, bonus notifications, and tournament alerts where you have opted in to receive such communications. See Section 12 for full details of our marketing practices and your opt-out rights.
• Legal Compliance: To comply with applicable legal and regulatory obligations, including responding to lawful requests from competent authorities and maintaining records required by financial regulations.

999bs processes your personal data only where a legitimate legal basis exists for doing so. The legal bases upon which we rely are as follows:

• Contractual Necessity: Processing that is required to perform the contract between you and 999bs — specifically the Terms & Conditions you accepted at registration. This covers account creation, payment processing, game delivery, and customer support.
• Legal Obligation: Processing that is necessary to comply with legal and regulatory requirements, including KYC identity verification, anti-money laundering checks, and financial record-keeping.
• Legitimate Interests: Processing carried out for the legitimate business interests of 999bs, provided those interests are not overridden by your rights and interests. This covers fraud prevention, platform security, responsible gaming monitoring, and internal analytics. We conduct a balancing assessment before relying on this basis.
• Consent: Processing based on your freely given, specific, and informed consent. This applies primarily to marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.

999bs does not sell, rent, or otherwise trade your personal data to any third party. Data is shared with third parties only in the circumstances described below, and only to the extent necessary for each stated purpose:

• Payment Processors: Your financial data is shared with the payment service providers you use to deposit and withdraw funds — including bKash, Nagad, Rocket, Upay, Visa, and Mastercard — to the extent necessary to complete your requested transactions. Each payment provider operates under its own privacy policy and data protection obligations.
• KYC & Identity Verification Providers: Identity documents and verification data are shared with our contracted KYC service providers to complete age and identity verification checks. These providers are bound by strict data processing agreements and may not use your data for any purpose beyond verification.
• Game Content Providers: Technical session data (such as account token, game session ID, and bet history for the relevant session) is shared with licensed game studios — including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi — solely for the purpose of delivering game content and resolving disputes. These providers do not receive your identity or financial data.
• Fraud Prevention & Security Services: Technical and usage data may be shared with fraud detection and cybersecurity service providers to protect the platform and its users from prohibited conduct, as described in Section 7 of our Terms & Conditions.
• Legal & Regulatory Authorities: 999bs may disclose personal data to law enforcement agencies, financial intelligence units, or other competent regulatory authorities where required to do so by applicable law, or where disclosure is necessary to protect the rights, property, or safety of 999bs, its players, or the public.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of the 999bs business, personal data held by 999bs may be transferred to the successor entity. You will be notified of any such transfer and the privacy practices applicable to your data going forward.

All third parties with whom 999bs shares personal data are required to handle that data in accordance with applicable data protection standards and are prohibited from using it for any purpose beyond what is specified in their data processing agreements with 999bs.

999bs retains personal data for only as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where data is anonymised, the anonymised dataset may be retained indefinitely for statistical and analytical purposes, as it can no longer be used to identify any individual.

The 999bs platform uses cookies and similar local storage technologies to ensure the platform functions correctly, to maintain your session securely, and to gather aggregated performance data. We do not use third-party advertising cookies, cross-site tracking cookies, or behavioural profiling technologies.

• Strictly Necessary Cookies: These cookies are essential for the platform to operate. They manage your login session, maintain your authentication state, and preserve your account preferences between page loads. The platform cannot function without these cookies and they cannot be disabled.
• Performance & Analytics Cookies: These cookies collect anonymised information about how users interact with the platform — including which pages are visited most frequently, how long sessions last, and which features are used. This data is used exclusively to improve platform performance and user experience. No individual user is identifiable from this data.
• Security Cookies: These cookies support our fraud detection and security systems by helping to identify suspicious login patterns, unusual account activity, and potential bot behaviour. They are essential to maintaining the integrity of the platform.
• Preference Cookies: These cookies remember user interface preferences such as display settings and previously selected options within the platform. They are not used to track activity across different websites.

All cookies set by 999bs are first-party cookies, meaning they are set directly by the 999bs domain and cannot be read by other websites. Cookies set by our game studio partners (Evolution Gaming, Pragmatic Play, etc.) are limited to the game session iframe and are governed by the respective studio's own cookie policy.

999bs implements a comprehensive, multi-layered security framework to protect your personal data from unauthorised access, accidental loss, disclosure, alteration, or destruction. Our security measures include:

• All data transmitted between your device and the 999bs platform is encrypted using 256-bit TLS/SSL protocols, ensuring that your login credentials, payment details, and personal information cannot be intercepted in transit.
• Personal data stored on 999bs servers is encrypted at rest using AES-256 encryption. Database access is restricted to authorised personnel only, on a strict need-to-know basis, with multi-factor authentication required for all administrative access.
• Our infrastructure is protected by enterprise-grade firewalls, intrusion detection and prevention systems, and continuous 24/7 security monitoring. Automated alerts are triggered by any anomalous access pattern or suspected breach attempt.
• All 999bs staff and contractors who have access to personal data undergo mandatory data protection training and are bound by confidentiality obligations. Access privileges are reviewed quarterly and revoked immediately upon termination of employment or contract.
• 999bs conducts regular penetration testing and security audits of its platform infrastructure. Identified vulnerabilities are remediated according to a risk-prioritised patch management schedule.
• In the event of a personal data breach that poses a risk to the rights and freedoms of affected individuals, 999bs will notify affected players without undue delay, providing details of the breach, the data affected, and the remediation steps being taken.

While 999bs takes every reasonable technical and organisational measure to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the security of your account credentials and for ensuring that you do not share your password with any third party. If you suspect your account has been compromised, contact our support team immediately via live chat.

As a player on the 999bs platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact the 999bs support team as described in Section 14. We will respond to all data rights requests within 30 days of receipt.

The 999bs platform serves players located in Bangladesh and processes the majority of personal data on infrastructure within the region. However, certain third-party service providers — including game studio partners and KYC verification providers — may process data on servers located in other countries.

Where personal data is transferred outside Bangladesh, 999bs ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that described in this Privacy Policy. Such safeguards include contractual data processing agreements that impose data protection obligations on the receiving party, and — where applicable — standard contractual clauses or equivalent transfer mechanisms.

By using the 999bs platform and submitting your personal data, you acknowledge that your data may be transferred to, stored, and processed in countries outside Bangladesh as described in this section. 999bs will not transfer your personal data to any third party that has not provided adequate assurances regarding the protection of that data.

As part of our Know Your Customer (KYC) verification process, 999bs requires all players to confirm their date of birth and submit valid government-issued identity documentation. Age verification is conducted prior to the processing of any withdrawal request and may be triggered at any other point during account activity at the discretion of our compliance team.

If you are a parent or guardian and believe that a person under the age of 21 has registered an account on the 999bs platform, please contact our support team immediately. We will investigate the matter and take all necessary steps, including account closure and data deletion, without undue delay.

999bs may send you promotional communications — including bonus offers, deposit match promotions, free spin notifications, tournament announcements, and seasonal promotions — where you have given your explicit consent to receive such communications at the point of registration or through your account preferences.

Marketing communications from 999bs may be delivered via email or SMS to the contact details registered on your account. We will never share your contact details with third-party marketing organisations for the purpose of sending unsolicited promotional materials.

• You may opt out of marketing communications at any time by updating your notification preferences within your 999bs account settings.
• You may also contact our support team via live chat and request that your details be removed from all marketing lists. We will process such requests within 5 business days.
• Opting out of marketing communications will not affect transactional communications — such as deposit confirmations, withdrawal notifications, KYC requests, and security alerts — which are necessary for the operation of your account and cannot be disabled.
• Even after opting out, you may continue to see non-personalised promotional content within the platform interface, as this is part of the general platform experience rather than directed marketing communications.

999bs reserves the right to update or amend this Privacy Policy at any time. Changes may be made to reflect updates to our data practices, changes in applicable law or regulatory requirements, new features introduced to the platform, or feedback from our player community.

Whenever a material change is made to this Privacy Policy, 999bs will notify registered players by posting a prominent notice on the platform and, where the change significantly affects how your data is used, by sending a direct notification to your registered email address. The updated Policy will be published at 999bs.io/privacy-policy with the revised effective date clearly indicated at the top of the document.

Your continued use of the 999bs platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with a material change to this Policy, you may close your account by contacting our support team and requesting account closure. We will process your closure request and handle the data associated with your account in accordance with our retention obligations as described in Section 6.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how 999bs has handled your personal data, please contact our support team using the details below. All privacy-related enquiries are handled by our dedicated data protection team and will receive a response within 30 days of receipt.

If you are not satisfied with the response you receive from our support team regarding a privacy complaint, you have the right to escalate the matter to the appropriate regulatory authority in your jurisdiction. 999bs is committed to resolving all privacy concerns fairly and transparently, and we encourage you to engage with our team directly in the first instance so that we have the opportunity to address your concern before any formal escalation.