999gam Privacy Policy

1. Introduction & Scope

This Privacy Policy ("Policy") describes how 999gam ("the Company", "we", "us", "our") collects, uses, stores, shares, and protects the personal data of individuals ("you", "your", "the Player") who access or use the 999gam platform at https://999gam.bet and any related mobile-accessible interface (collectively, "the Platform").

This Policy applies to all data processing activities that arise from your use of the Platform, including account registration, identity verification, deposits and withdrawals, gameplay, customer support interactions, and marketing communications. By registering an account or continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming page, both of which form part of the overall agreement between you and 999gam.

2. Personal Data We Collect

We collect personal data through several channels: directly from you when you register or interact with the Platform; automatically through your use of the Platform; and, in limited circumstances, from third-party service providers who assist us in operating the Platform. The categories of personal data we may collect include:

• Identity data: Full name, date of birth, national identity card or passport number, and photograph (where required for age or identity verification).
• Contact data: Email address, mobile phone number, and city of residence within Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, or Mymensingh).
• Account data: Username, encrypted password, account preferences, communication preferences, and self-exclusion or limit settings.
• Financial data: bKash wallet number, Nagad account, Rocket account, Upay account, bank account details (Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, or other), transaction history, deposit and withdrawal records, and current account balance.
• Gameplay data: Game history, bet amounts, win/loss records, session durations, and responsible gaming tool usage.
• Technical data: IP address, device type, operating system, browser type and version, screen resolution, and time-zone setting (Bangladesh Standard Time, UTC+6).
• Usage data: Pages visited, features used, links clicked, navigation path, and time spent on the Platform.
• Communications data: Records of correspondence between you and our customer support team, including support tickets, chat transcripts, and email exchanges.

3. How We Use Your Personal Data

We use your personal data only for the purposes for which it was collected and for compatible purposes that you would reasonably expect. The primary purposes for which 999gam processes your personal data are as follows:

• Account management: Creating, maintaining, and administering your 999gam account, including processing your registration, verifying your identity and age (21+ requirement), and managing your account settings.
• Service delivery: Providing access to casino games, sports betting markets (including BPL, IPL, T20 World Cup, and other cricket events), and all other Platform features.
• Financial processing: Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and partner banks; detecting and preventing payment fraud; and complying with anti-money-laundering (AML) obligations.
• Customer support: Responding to enquiries, resolving disputes, processing complaints, and providing technical assistance.
• Responsible gaming: Monitoring gameplay for signs of problem gambling behaviour; enforcing deposit limits, cooling-off periods, and self-exclusion requests that you have activated.
• Security and fraud prevention: Detecting, investigating, and preventing fraudulent transactions, unauthorised account access, bonus abuse, and other prohibited conduct described in our Terms & Conditions.
• Legal compliance: Meeting our obligations under applicable law, responding to lawful requests from regulatory or law enforcement authorities, and maintaining records as required.
• Marketing communications: Sending you promotional offers, bonus notifications, and Platform updates by email or SMS — but only where you have consented to receive such communications. You may withdraw this consent at any time.
• Platform improvement: Analysing aggregated, anonymised usage data to improve the performance, usability, and content of the Platform.

4. Legal Basis for Processing

For each category of personal data we process, we rely on at least one of the following legal bases:

• Contractual necessity: Processing that is required to perform our contractual obligations to you under the Terms & Conditions — for example, processing your deposits and withdrawals, maintaining your account, and delivering gameplay services.
• Legal obligation: Processing that is required to comply with a legal obligation to which the Company is subject — for example, identity verification, AML checks, and record-keeping.
• Legitimate interests: Processing that is in our legitimate business interests, where those interests are not overridden by your rights — for example, fraud prevention, Platform security, and internal analytics.
• Consent: Processing that is based on your freely given, specific, informed consent — for example, sending you marketing emails or SMS messages. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5. Sharing Your Personal Data

We may share your personal data with carefully selected third parties only where necessary and only for the purposes described in this Policy. The categories of recipients are as follows:

• Payment service providers: bKash, Nagad, Rocket, Upay, and partner banks receive the minimum financial data required to process your transactions securely.
• Identity verification providers: Third-party KYC (Know Your Customer) and age verification services that assist us in confirming your identity and ensuring compliance with the 21+ requirement.
• Game content providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive anonymised session identifiers necessary to deliver their games — they do not receive your full personal profile.
• IT and infrastructure providers: Cloud hosting, data storage, and cybersecurity vendors who process data solely on our behalf under strict data processing agreements.
• Fraud and AML compliance providers: Specialist third-party tools that assist us in identifying and preventing financial crime.
• Regulatory and law enforcement authorities: Where we are required by applicable law, court order, or official government or regulatory request to disclose personal data.
• Professional advisers: Lawyers, auditors, and accountants who require access to certain data in order to provide professional services to the Company, subject to strict confidentiality obligations.

All third-party service providers with whom we share personal data are contractually required to process that data only for the specified purpose, to maintain appropriate security standards, and to comply with applicable data protection obligations.

6. Cookies & Tracking Technologies

The Platform uses cookies and similar tracking technologies to provide a functional, secure, and personalised experience. A cookie is a small text file placed on your device when you visit a website. We use the following categories of cookies:

• Strictly necessary cookies: Essential for the Platform to function correctly. These include session cookies that keep you logged in, security tokens that protect against cross-site request forgery, and cookies that remember your responsible gaming settings. These cookies cannot be disabled without impairing Platform functionality.
• Functional cookies: Remember your preferences such as language settings, display preferences, and recently played games to improve your experience on return visits.
• Analytics cookies: Collect anonymised information about how visitors use the Platform — for example, which pages are visited most frequently and how users navigate between sections. This data is used solely to improve the Platform and is not linked to individual user profiles.

We do not use advertising or profiling cookies that track your behaviour across third-party websites. You can manage or delete cookies through your browser settings at any time. Note that disabling strictly necessary cookies will affect your ability to use certain features of the Platform.

7. Data Retention

We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting obligations. Our standard retention periods are as follows:

• Active account data: Retained for the duration of your account's active status plus a period of five (5) years following account closure, to meet our AML record-keeping obligations.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction.
• Identity verification documents: Retained for five (5) years from the date of verification or account closure, whichever is later.
• Customer support records: Retained for three (3) years from the date the support interaction was resolved.
• Marketing consent records: Retained for the duration of your consent plus three (3) years thereafter as evidence of consent.
• Anonymised analytics data: May be retained indefinitely as it cannot be linked back to an individual.

When data is no longer required, it is securely deleted or anonymised in accordance with our internal data destruction procedures.

8. Data Security

Our security measures include, but are not limited to, the following:

• SSL/TLS encryption: All data transmitted between your device and our servers is encrypted using Transport Layer Security (TLS) with a minimum of 256-bit encryption.
• Password hashing: Account passwords are never stored in plain text. We use strong one-way cryptographic hashing algorithms with per-user salts.
• Access controls: Personal data is accessible only to authorised 999gam personnel who require it to perform their job functions. Access is governed by role-based permissions and regularly reviewed.
• Network security: Our infrastructure is protected by firewalls, intrusion detection systems, and regular vulnerability assessments.
• Incident response: We maintain a documented data breach response procedure. In the event of a breach that is likely to result in a risk to your rights or interests, we will notify affected players promptly.

While we take every reasonable precaution to protect your data, no method of transmission over the internet or electronic storage is 100% secure. You play an important role in keeping your account secure by maintaining the confidentiality of your login credentials and reporting any suspected unauthorised access to [email protected] without delay.

9. Your Data Rights

As a 999gam player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected]. We will respond to all verified requests within a reasonable timeframe.

10. Children's Privacy & Age Restriction

The Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, store, or process personal data from any person under the age of 21. If we become aware that we have inadvertently collected personal data from an underage individual, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that a minor in your care has registered on the Platform, please contact us immediately at [email protected] with the relevant account details so that we can investigate and take appropriate action without delay.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we provide. When we make a material change to this Policy, we will update the "Last updated" date at the top of this page and, where required, notify registered players via email or in-Platform notification prior to the change taking effect.

Your continued use of the Platform after the effective date of any updated Policy constitutes your acceptance of the revised terms. We recommend that you review this page periodically to stay informed of how we are protecting your personal data.

12. Contact Us About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 999gam handles your personal data, please contact our support team. We are available 24 hours a day, 7 days a week, including all Bangladesh public holidays, and we aim to respond to all privacy-related enquiries within 48 hours (Bangladesh Standard Time, UTC+6).

Email: [email protected]
Subject line: Please include "Privacy Request" in your subject line so we can route your message to the appropriate team member promptly.