Legal Document
999ba Privacy Policy
We take your privacy seriously. This policy explains exactly what personal data 999ba collects, why we collect it, how it is stored and protected, and the rights you hold over your own information as a player in Bangladesh.
Our Core Privacy Commitments
SSL Encryption
All data transmitted between your device and the 999ba platform is protected with SSL encryption. Your personal and financial information is never sent in plain text.
Transparent Collection
We only collect data that is necessary to operate your account, process payments, and comply with applicable anti-fraud and verification requirements. Nothing more.
We Never Sell Your Data
999ba does not sell, rent, or trade your personal information to any third party for marketing or commercial purposes, under any circumstances.
Right to Correct
You may update or correct your personal information at any time by contacting our support team. Accurate records help us serve you faster and process payments without delay.
Right to Erasure
Subject to our legal retention obligations, you may request deletion of your personal data by closing your account and submitting a formal erasure request to our support team.
24/7 Support
Our support team is available around the clock via live chat on the 999ba platform to answer any privacy-related questions or handle data requests on your behalf.
1. Introduction
This Privacy Policy ("Policy") describes how 999ba ("We", "Us", "Our") collects, uses, stores, and protects the personal information of players and visitors who access the 999ba website and related mobile services (collectively, the "Service"). This Policy applies to all players in Bangladesh and any other jurisdiction from which the Service is accessed.
By registering a player account or continuing to use the Service, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal information as described herein. If you do not agree with this Policy, you must not use the Service.
2. Information We Collect
We collect personal information only where it is necessary for the operation of the Service, the fulfilment of legal obligations, or the improvement of the player experience. The categories of information we collect are set out below.
Information You Provide Directly
Information Collected Automatically
When you access the Service, certain technical data is automatically collected by our platform infrastructure. This data is used for security monitoring, fraud prevention, and platform performance analysis. It includes the following.
- IP address, approximate geographic location derived from IP, and device identifiers including device type and operating system version.
- Browser type, screen resolution, and the referring URL that brought you to the 999ba website.
- Session logs, login timestamps, pages visited, games played, bet amounts, and in-platform navigation patterns.
- Cookies and similar tracking technologies as described in Section 10 of this Policy.
3. How We Use Your Information
999ba uses the personal information it collects strictly for the purposes listed below. We do not use your data for any purpose beyond what is described in this Policy without obtaining your explicit consent first.
- Account creation and management: to register your player account, maintain your profile, process your deposits and withdrawals, and keep transaction records.
- Identity and age verification: to confirm that you meet the 21+ age eligibility requirement and to complete KYC checks where required.
- Fraud prevention and security: to detect, investigate, and prevent unauthorised account access, multi-accounting, money laundering, and other prohibited activities.
- Customer support: to respond to your queries, resolve disputes, process account closure requests, and communicate with you regarding your account status.
- Responsible gaming compliance: to monitor betting patterns, apply deposit limits, enforce self-exclusion periods, and identify players who may need support.
- Platform improvement: to analyse aggregate, anonymised usage data to improve the performance, reliability, and user experience of the 999ba Service.
- Promotional communications: to send you bonus offers, promotional updates, and service announcements relevant to your account, only where you have opted in to receive such communications.
4. Legal Basis for Processing
We process your personal data under one or more of the following legal bases, depending on the specific purpose for which the data is used.
- Contractual necessity: processing is required to fulfil our obligations under the Terms & Conditions that form the agreement between you and 999ba (e.g. account registration, payment processing, game access).
- Legal obligation: processing is required to comply with applicable anti-money-laundering (AML) obligations, fraud prevention requirements, age verification mandates, and other legally imposed obligations.
- Legitimate interests: processing is required for fraud detection, security monitoring, platform integrity, and the prevention of prohibited conduct, where these interests are not overridden by your fundamental rights.
- Consent: for promotional communications and non-essential cookies, we rely on your explicit opt-in consent, which you may withdraw at any time without affecting any other processing basis.
5. Sharing Your Information
999ba does not sell, rent, or trade your personal data. We share your information only in the limited circumstances described below, and only to the extent necessary for the specified purpose.
Trusted Service Providers
- Game content providers (such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi) receive session identifiers and bet data necessary to deliver the game to your device. These providers operate their own privacy frameworks and are contractually bound to process your data only for the purpose of game delivery.
- Payment processors and mobile financial service providers (bKash, Nagad, Rocket, Upay) receive only the transaction data required to process your specific deposit or withdrawal. We do not share your full profile with these providers.
- Identity verification partners who assist with KYC document checks. These partners are bound by strict confidentiality obligations and may not use your data for any purpose other than verification.
Disclosure Required by Law
We may disclose your personal information where we are legally required to do so in response to a valid request from a competent authority, including but not limited to anti-money-laundering investigations, fraud investigations, or court orders. In such cases, we will disclose only the minimum information necessary to satisfy the legal requirement and will, where legally permitted, inform you that such a disclosure has been made.
6. Payment Data and Mobile Wallets
Because 999ba processes all deposits and withdrawals in BDT via mobile financial services widely used in Bangladesh — primarily bKash, Nagad, Rocket, and Upay — we collect and retain certain payment-related data as a necessary part of the transaction process and our AML compliance obligations.
Specifically, in relation to each transaction we retain the following.
- The mobile wallet number used for the transaction, masked after recording to reduce exposure (e.g. stored as a partially visible reference, not the full number in plaintext).
- Transaction amount in BDT, timestamp in Bangladesh Standard Time (BST, UTC+6), and the platform-generated transaction reference number.
- The direction of the transaction (deposit or withdrawal) and the resulting account balance change, retained as part of the complete transaction ledger for your account.
7. Cookies and Tracking Technologies
999ba uses cookies and similar local storage technologies to operate the platform, maintain your session while you are logged in, and gather anonymised analytics data that helps us improve the Service. We do not use third-party advertising cookies or tracking pixels that share your behavioural data with external advertising networks.
Types of Cookies We Use
- Strictly necessary cookies: required to operate the core functions of the platform, including session management, login state, and security token validation. These cannot be disabled without breaking the Service.
- Functional cookies: remember your in-platform preferences such as language settings, responsible gaming limit configurations, and display preferences between sessions.
- Analytics cookies: collect anonymised, aggregated data about how players navigate the Service. This data is used internally to identify performance bottlenecks and improve the user experience. No personally identifying information is transmitted through analytics cookies.
You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair the functionality of the Service. Disabling functional or analytics cookies will not prevent you from using the core platform.
8. Data Retention
We retain personal data only for as long as it is necessary for the purpose for which it was collected, or as required by applicable legal or regulatory obligations. The retention periods below apply as standard.
Once a retention period expires, personal data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual. Where anonymisation rather than deletion is applied, the resulting data set contains no personal identifiers and is used solely for aggregate statistical purposes.
9. Data Security
999ba implements a multi-layered security architecture to protect your personal information from unauthorised access, disclosure, alteration, and destruction. Our security measures include the following.
- SSL/TLS encryption for all data in transit between your browser or mobile device and the 999ba platform servers.
- Encryption at rest for sensitive personal and financial data stored in our database infrastructure, using industry-standard encryption algorithms.
- Access controls that restrict database and system access to authorised personnel only, with role-based permissions and audit logging of all administrative actions.
- Regular security assessments and vulnerability scanning of the platform infrastructure to identify and remediate potential weaknesses before they can be exploited.
While we apply rigorous security standards, no online platform can guarantee absolute security. In the event of a data breach that affects your personal information and creates a significant risk of harm, 999ba will notify affected players and take immediate remedial action. You are also responsible for maintaining the security of your own account credentials — never share your password with any third party.
10. Your Data Rights
As a 999ba player, you hold the following rights in relation to your personal data. To exercise any of these rights, contact our support team via live chat on the platform or by email at the address provided in Section 12. We will respond to all valid requests within a reasonable timeframe.
- Right of access: you may request a copy of the personal data we hold about you at any time. We will provide this in a structured, readable format within a reasonable period of receiving your request.
- Right to rectification: you may request correction of any inaccurate or incomplete personal data we hold about you. Correcting your contact details or registered wallet number helps ensure uninterrupted service.
- Right to erasure: you may request deletion of your personal data subject to our legal retention obligations. Erasure requests made while your account carries an active balance or pending withdrawal will be processed after the balance is settled.
- Right to restriction: you may request that we restrict the processing of your personal data in certain circumstances, for example where you contest the accuracy of data we hold pending our verification of it.
- Right to data portability: you may request that we provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
- Right to withdraw consent: where processing is based on your consent (e.g. promotional communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
We will process all valid data rights requests promptly. In cases where a request cannot be fulfilled — for example, because fulfilling it would conflict with a legal retention obligation — we will explain the reason clearly and indicate what steps, if any, are available to you.
11. Children's Privacy
The 999ba Service is strictly for adults aged 21 years and above. We do not knowingly collect personal information from individuals under the age of 21. If we become aware that a person under 21 has registered an account or submitted personal data, we will immediately suspend that account, delete the associated personal data, and void any transactions made during the period of underage use. If you are a parent or guardian and believe your child has accessed the Service, please contact our support team immediately via live chat so that we can investigate and take appropriate action.
12. Third-Party Links
The 999ba platform may contain references to third-party service providers such as game studios or payment processors. While we take care to partner with reputable organisations, 999ba is not responsible for the privacy practices of third-party platforms. If you access a third-party website or service from a reference on our platform, we encourage you to review that party's own privacy policy before providing any personal information to them.
13. Changes to This Privacy Policy
999ba reserves the right to update this Privacy Policy at any time. When changes are made, the revised Policy will be published on this page with an updated effective date. We recommend reviewing this page periodically to stay informed of how we handle your personal data. Your continued use of the Service after any update constitutes acceptance of the revised Policy.
For material changes that significantly affect how your data is used or shared, 999ba will make reasonable efforts to notify active players directly via in-platform notification. The absence of direct notification does not affect the validity of the updated Policy.
14. Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the way 999ba handles your personal data, please reach out to our support team. We are available 24/7 via live chat on the 999ba platform. You may also contact us by email at the address shown below — the email address is displayed as plain text only and is not a clickable link.
Your Privacy Matters to Us
Have questions about how 999ba protects your data? Our support team is available around the clock. You can also explore our FAQ for quick answers, or visit our Responsible Gaming page to learn about the tools we provide to help you stay in control.