999bf Privacy Policy

When you interact with 999bf — whether you are registering an account, making a deposit, placing a bet, or contacting our support team — we collect certain categories of personal information. This Privacy Policy applies to all data collection activities carried out by 999bf across its website and mobile platform. The categories of information we collect are as follows:

Account Registration Data — When you create a 999bf account, we collect your full legal name, date of birth, email address, mobile phone number, and your chosen account password (stored in hashed form — we never store plaintext passwords). This information is necessary to establish and maintain your account identity.

Identity Verification (KYC) Data — To comply with our Know Your Customer obligations and to confirm that all players are aged 18 or above, we may collect copies of government-issued identification documents (such as your National ID Card or passport), proof of address documents (such as a utility bill or bank statement issued within the last three months), and payment method confirmation documents. These documents are processed securely and retained only for as long as required by our compliance obligations.

Financial Transaction Data — We record details of all deposits and withdrawals processed through your 999bf account, including transaction amounts in Bangladeshi Taka (৳), timestamps, payment method type (bKash, Nagad, Rocket, Upay, Visa, Mastercard), and transaction reference numbers. This data is required for account reconciliation, fraud prevention, and regulatory compliance.

Gaming & Betting Activity Data — We maintain records of your gameplay and betting history on 999bf, including games played, bet amounts, win/loss outcomes, bonus usage, and session durations. This data is used for account management, responsible gaming monitoring, dispute resolution, and platform improvement.

Device & Technical Data — When you access 999bf, our servers automatically collect your IP address, browser type and version, operating system, device type, screen resolution, referring URL, and session timestamps. This technical data is used for security monitoring, fraud detection, and platform performance optimisation.

Communications Data — If you contact 999bf via email, live chat, or any other support channel, we retain records of that correspondence, including the content of messages and any attachments, for quality assurance, training, and dispute resolution purposes.

999bf uses the personal data we collect for specific, legitimate purposes only. We do not process your data in ways that are incompatible with the purposes for which it was collected. The primary purposes for which we use your data are as follows:

We will never use your personal data for purposes beyond those listed above without first obtaining your explicit consent or establishing a new, clearly communicated legal basis. If you receive a marketing communication from 999bf that you did not opt into, please contact [email protected] immediately so that we can investigate and rectify the issue.

999bf does not sell, rent, or trade your personal data to third parties for their own commercial purposes. However, in order to operate the platform effectively and fulfil our legal obligations, we do share specific categories of data with carefully selected third-party service providers and, where required by law, with regulatory or governmental bodies. All third parties with whom we share data are required to handle that data in accordance with applicable data protection standards and our contractual instructions.

The categories of third parties with whom 999bf may share your data are as follows:

• Payment Processing Partners: bKash, Nagad, Rocket, Upay, and card processing networks (Visa, Mastercard) receive only the transactional data necessary to process your deposits and withdrawals. They operate under their own privacy and security frameworks, which we encourage you to review.
• Identity Verification Providers: We may use third-party KYC service providers to assist with the verification of identity documents and age confirmation. These providers process verification data strictly under our instructions and are prohibited from using it for any independent purpose.
• Game Software Providers: Casino and sports betting software providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session and game-outcome data for the purpose of game integrity auditing and technical support. These providers do not receive personally identifiable information unless required for a specific dispute or audit.
• Analytics and Platform Services: We use aggregated, anonymised analytics data to improve platform performance, user experience, and responsible gaming tools. Any analytics provider we engage is prohibited from combining our anonymised data with other datasets to re-identify individuals.
• Legal and Regulatory Authorities: 999bf will disclose personal data to law enforcement agencies, financial intelligence units, or other governmental bodies where we are legally compelled to do so, or where we believe in good faith that disclosure is necessary to prevent serious harm, fraud, or criminal activity.

Where personal data is transferred to or processed by a third party located outside Bangladesh, we take reasonable steps to ensure that equivalent data protection standards are applied, including the use of contractual safeguards and data processing agreements.

999bf uses cookies and similar tracking technologies to ensure the platform functions correctly, to maintain your logged-in session, and to gather anonymised data about how players use the site so that we can continue improving it. A cookie is a small text file placed on your device by a web server. Cookies do not harm your device and do not contain executable code.

We use the following categories of cookies on the 999bf platform:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They manage your authenticated session, maintain your account security state, and ensure that your betting activity is correctly attributed to your account. You cannot opt out of these cookies while using 999bf, as they are required for basic functionality.
• Performance & Analytics Cookies: These cookies collect anonymised information about how visitors navigate and interact with the 999bf website — for example, which pages are visited most frequently, how long players spend on each section, and whether they encounter any error messages. This data is used in aggregate form and does not identify individual users.
• Functional Cookies: These cookies remember your preferences such as your preferred language setting, display preferences, and recently viewed games, allowing us to provide a more personalised experience without requiring you to re-enter your preferences on each visit.
• Security Cookies: These cookies support our fraud detection and account security systems by flagging unusual login patterns, unexpected geographical access, or abnormal transaction behaviour that may indicate account compromise or abuse.

Most web browsers are set to accept cookies by default. You may configure your browser to block or delete cookies; however, doing so may impair certain functions of the 999bf platform, including the ability to maintain a logged-in session. For instructions on managing cookies, please refer to your browser's help documentation.

Protecting your personal data from unauthorised access, disclosure, alteration, or destruction is a core operational priority for 999bf. We implement a layered security architecture across our platform that combines technical controls, organisational policies, and ongoing monitoring to maintain the highest practical standard of data protection.

Our key security measures include:

• 128-bit SSL Encryption: All data transmitted between your device and our servers is encrypted using Secure Sockets Layer (SSL) technology. This ensures that your login credentials, payment information, and personal data cannot be intercepted during transmission.
• Password Hashing: Account passwords are stored as one-way cryptographic hashes — never in plaintext. Even in the highly unlikely event of a data breach, your actual password would not be exposed.
• Role-Based Access Controls: Access to personal data within the 999bf organisation is restricted on a strict need-to-know basis. Employee access rights are regularly reviewed and promptly revoked upon role change or departure.
• Regular Security Audits: We conduct periodic internal and external security reviews of our platform infrastructure, application code, and data handling procedures to identify and remediate vulnerabilities proactively.
• Intrusion Detection Systems: Automated systems monitor our infrastructure continuously for unusual access patterns, brute-force login attempts, and other indicators of potential security compromise.
• Secure Payment Processing: Financial transaction data is processed through PCI-compliant payment channels. 999bf does not store full card numbers on its own servers.

In the event of a data security incident that materially affects your personal data, 999bf will notify affected players as promptly as practicable and will take immediate steps to contain the incident, assess the impact, and implement corrective measures. Notification will be provided via the email address registered to your account.

999bf retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following retention periods apply to the main categories of personal data we hold:

When the applicable retention period has expired, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual. Where data is anonymised rather than deleted, the resulting anonymised dataset may be retained indefinitely for aggregate research and platform improvement purposes.

If you close your 999bf account voluntarily or if your account is closed by 999bf due to a breach of our Terms & Conditions, the retention periods set out above continue to apply from the date of closure. Closure of your account does not trigger immediate deletion of your data where a longer retention period is required by law or legitimate business need.

As a player on 999bf, you hold a number of rights in relation to the personal data we hold about you. We are committed to honouring these rights promptly and transparently. The rights available to you are as follows:

• Right of Access: You have the right to request a copy of the personal data that 999bf holds about you. We will provide this information in a structured, commonly used format within 30 days of receiving your verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay. You may update basic account information such as your email address and phone number directly through your account settings panel.
• Right to Erasure ("Right to Be Forgotten"): You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where you object to processing based on legitimate interest. This right is subject to our legal retention obligations — data we are required to retain by law cannot be deleted at your request.
• Right to Restriction of Processing: You may request that we restrict the processing of your personal data in certain circumstances, such as while the accuracy of the data is being contested or while an objection is being assessed.
• Right to Data Portability: Where processing is based on your consent or on a contract, and processing is carried out by automated means, you have the right to receive your personal data in a structured, machine-readable format and to request that it be transferred to another organisation where technically feasible.
• Right to Object: You have the right to object at any time to the processing of your personal data where that processing is based on legitimate interest, including profiling. You also have an unconditional right to object to the use of your data for direct marketing purposes.
• Right to Withdraw Consent: Where 999bf processes your data on the basis of consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.

To exercise any of the rights described above, please contact our support team at [email protected] with the subject line "Privacy Rights Request". We may ask you to verify your identity before processing your request. We aim to respond to all valid data rights requests within 30 calendar days. In complex cases, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reasons for it.

999bf reviews this Privacy Policy periodically and may update it to reflect changes in our data processing practices, changes in applicable law, the introduction of new platform features, or feedback from players and regulators. When we make material changes to this policy, we will update the Effective Date displayed at the top of this document and post a prominent notice on the 999bf platform informing players that the Privacy Policy has been revised.

For changes that significantly affect your rights or the way we use your data, we will also notify you directly via the email address registered to your account at least 14 days before the changes take effect, where this is practicable. Your continued use of the 999bf platform after the revised Privacy Policy has come into effect constitutes your acceptance of those changes.

We encourage you to review this Privacy Policy each time you visit 999bf, and to contact our support team at [email protected] if you have any questions, concerns, or requests relating to your privacy or the data we hold about you. We take every privacy enquiry seriously and are committed to resolving concerns quickly and fairly for all players across Bangladesh.