999dat Privacy Policy

1 Who We Are

999dat is an online casino and sports betting platform operating at 999dat.app, designed specifically for adult players in Bangladesh aged 21 and above. When this Privacy Policy refers to "999dat", "we", "us", or "our", it means the operating entity responsible for this platform. If you have any questions about how we handle your personal data, you may contact our support team at the email address listed in the footer of this page.

2 Data We Collect

999dat collects personal data through several channels in the ordinary course of operating the platform. The categories of personal data we collect include the following:

• Registration Data: Your full name, date of birth, mobile phone number, email address, and residential city (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi) provided when you open an Account.
• Identity Verification Data: Copies of government-issued identity documents such as your National Identity Card (NID) or passport, submitted when completing the account verification process.
• Financial Data: Payment method details including your bKash, Nagad, Rocket, or Upay mobile wallet number, or bank account details where applicable. We do not store full card numbers for Visa or Mastercard transactions — these are handled directly by our payment processing partners.
• Transaction Data: Records of all deposits, withdrawals, bonus claims, and wager activity associated with your Account, including timestamps, amounts in BDT, and payment method references.
• Device & Technical Data: IP address, browser type and version, operating system, device model, screen resolution, and session timestamps collected automatically when you access the platform.
• Communications Data: The content of any messages, emails, or chat interactions you have with our customer support team, including complaint and dispute records.
• Usage & Gameplay Data: Game session logs, bet history, game preferences, login frequency, and behavioural patterns on the platform, used to improve service quality and monitor responsible gaming indicators.
• Marketing Preferences: Your opt-in or opt-out status for promotional SMS, email, and in-platform notifications.

3 How We Collect Your Data

We collect personal data through the following means:

• Directly from you when you complete registration, submit verification documents, make a deposit or withdrawal request, contact support, or respond to a survey or promotion.
• Automatically via cookies, server logs, and similar tracking technologies when you browse or interact with the platform.
• From third parties such as payment processors (bKash, Nagad, Rocket, Upay), identity verification services, and fraud detection partners, who may share data with us in connection with your transactions or account security.

We do not collect personal data from social media platforms or purchase data lists from third-party data brokers. All data we hold has been collected with a legitimate purpose directly related to the operation of the 999dat platform.

4 Why We Use Your Data

999dat processes your personal data for the following specific purposes:

5 Legal Basis for Processing

999dat processes your personal data on the following legal bases, depending on the purpose of processing:

• Contractual Necessity: Processing required to perform the contract between you and 999dat — namely, operating your Account, processing transactions, and delivering the gaming services you have requested.
• Legitimate Interests: Processing carried out in pursuit of 999dat's legitimate business interests, including fraud prevention, platform security, and service improvement, where those interests are not overridden by your rights.
• Legal Obligation: Processing required to comply with applicable laws, including anti-money-laundering (AML) regulations and identity verification requirements.
• Consent: Processing based on your freely given, specific, and informed consent — in particular, the sending of direct marketing communications. You may withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 Sharing Your Data

999dat does not sell, rent, or trade your personal data. We may, however, share your data with trusted third parties in the following limited circumstances:

• Payment Processors: bKash, Nagad, Rocket, Upay, and other payment service providers require certain data to process your transactions securely. Data shared with these partners is limited to what is strictly necessary for payment processing.
• Identity Verification Partners: Third-party KYC and document verification services that assist us in confirming the identity of players and complying with age verification requirements.
• Fraud & Security Vendors: Specialist providers of IP intelligence, device fingerprinting, and fraud detection services who process data on our behalf under strict data processing agreements.
• Game Content Providers: Software studios such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi may receive session tokens or anonymised player identifiers to facilitate seamless game delivery. These providers do not receive your full registration profile.
• Legal Authorities: Where required by applicable law, court order, or regulatory directive, we may be obligated to disclose personal data to relevant authorities. We will notify you of any such disclosure where we are legally permitted to do so.

All third parties with whom 999dat shares personal data are required by contract to process that data only for the specified purpose and to maintain appropriate security standards.

7 Cookies & Tracking Technologies

999dat uses cookies and similar technologies on its platform. Cookies are small text files stored on your device that help us recognise returning users, maintain your login session, and analyse how the platform is used. We use the following categories of cookies:

• Essential Cookies: Required for the platform to function correctly. These include session management cookies that keep you logged in during a visit. These cannot be disabled without breaking core platform functionality.
• Analytics Cookies: Used to collect anonymised data about how players navigate the platform, which pages are most visited, and where users encounter difficulties. This data informs our product improvement efforts.
• Preference Cookies: Store your platform preferences such as language settings and notification preferences to improve your experience on return visits.

999dat does not use cross-site tracking cookies, advertising cookies, or retargeting pixels that follow your activity outside of the 999dat platform. You may manage or delete cookies through your browser settings; however, disabling essential cookies will impair your ability to use the platform.

8 Data Retention

999dat retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

• Account & Registration Data: Retained for the duration of your Account plus a minimum of five (5) years following Account closure, to satisfy anti-money-laundering record-keeping obligations.
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction.
• Identity Verification Documents: Retained for the duration of your Account plus five (5) years following closure.
• Support Communications: Retained for two (2) years from the date of the interaction, unless the communication relates to an unresolved dispute, in which case it is retained until the dispute is fully resolved.
• Marketing Preferences & Consent Records: Retained for the period of the relationship and for two (2) years following your last interaction with the platform, to evidence consent and facilitate opt-out compliance.

Where data is no longer required for its original purpose and no legal retention obligation applies, 999dat will securely delete or anonymise it. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes, as it no longer constitutes personal data.

9 Data Security

999dat takes the security of your personal data seriously and implements appropriate technical and organisational measures to protect it against unauthorised access, alteration, disclosure, or destruction. Our security measures include:

• SSL/TLS encryption for all data transmitted between your device and our servers.
• Encrypted storage of sensitive data, including identity documents and financial records, on secured servers.
• Access controls ensuring that personal data is accessible only to authorised 999dat personnel who require it to perform their duties.
• Regular security assessments and monitoring of our platform infrastructure for vulnerabilities.
• Two-factor authentication available for player accounts to provide an additional layer of login security.

While we implement robust security measures, no online platform can guarantee absolute security. In the event of a data breach that poses a significant risk to your rights, 999dat will notify affected players without undue delay and take all necessary steps to contain and remediate the breach.

10 Your Privacy Rights

As a registered player on 999dat, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact our support team using the email address in the footer.

11 Children & Age Restrictions

The 999dat platform is strictly for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been submitted by or on behalf of a person under 21, we will delete that data and close the associated Account immediately. If you believe that a minor has registered on the platform, please contact our support team so that we can investigate and take appropriate action promptly.

12 International Data Transfers

999dat operates as an offshore platform. Certain personal data — in particular, data processed by our third-party game content providers and payment processing partners — may be transferred to and processed in countries outside Bangladesh. Where such transfers occur, 999dat ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that described in this Privacy Policy. These safeguards include contractual data processing agreements with all recipient third parties that impose binding data protection obligations. By using the 999dat platform, you acknowledge that your personal data may be transferred internationally in the manner described in this section.

13 Changes to This Privacy Policy

999dat reserves the right to update or modify this Privacy Policy at any time. When material changes are made, we will publish the revised policy on this page with an updated effective date and, where appropriate, notify registered players via email or in-platform notification. We encourage you to review this page periodically to stay informed about how we are protecting your data. Your continued use of the platform following the publication of any changes constitutes your acceptance of the revised Privacy Policy.

14 Contact & Privacy Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which 999dat processes your personal data, please contact our support team using the email address displayed in the footer of this page. We will acknowledge your enquiry promptly and aim to provide a substantive response within ten (10) business days. All privacy-related complaints will be handled with strict confidentiality and escalated to our data protection team for review.

Please include your registered username, a clear description of your concern, and any relevant reference numbers in your correspondence to help us respond efficiently.