999cd Privacy Policy

Introduction

This Privacy Policy ("Policy") describes how 999cd ("Platform", "We", "Us", "Our") collects, uses, stores, discloses, and protects personal data relating to individuals ("You", "User", "Player") who access or use the 999cd website at https://999cd.io and all associated products and services (collectively, the "Services").

This Policy applies to all personal data processed by 999cd in connection with the provision of its Services, including data collected during account registration, KYC verification, payment processing, gameplay activity, customer support interactions, and use of the 999cd website. It should be read alongside our Terms & Conditions and Responsible Gaming Policy, each of which forms part of the overall agreement between you and 999cd.

By registering an account with 999cd or otherwise using our Services, you acknowledge that you have read, understood, and accepted the data practices described in this Policy. If you do not agree with any part of this Policy, you must not use the 999cd platform.

Data We Collect

999cd collects personal data across several categories. The specific data collected depends on the nature of your interaction with the platform:

999cd does not collect special categories of sensitive personal data (such as biometric data, health information, or political opinions) unless explicitly required by applicable law in connection with a specific verification or compliance obligation.

How We Collect Data

999cd collects personal data through the following primary channels:

• Direct submission: Data you provide voluntarily when registering an account, completing KYC verification, making a deposit or withdrawal request, contacting customer support, or responding to a promotional offer.
• Automated collection: Technical data collected automatically as you interact with the 999cd platform, including via server logs, session cookies, device fingerprinting, and analytics tools embedded within the site.
• Payment processors: Transaction confirmation data shared by bKash, Nagad, Rocket, Upay, and banking partners when you deposit or withdraw funds. 999cd does not store full payment credentials — these are handled directly by the payment provider.
• Third-party verification services: Identity verification data returned by KYC and anti-fraud service providers that 999cd engages to validate identity documents and assess risk.
• Public sources: In limited circumstances related to fraud prevention or legal compliance, 999cd may reference publicly available information to validate the identity of an account holder.

Legal Basis for Processing

999cd processes your personal data only where a valid legal basis exists. The principal legal bases on which 999cd relies are:

• Contractual necessity: Processing that is required to perform the contract between you and 999cd — including account management, payment processing, bet settlement, and customer support.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering regulations, know-your-customer requirements, tax reporting obligations, and responses to lawful requests from law enforcement or regulatory authorities.
• Legitimate interests: Processing undertaken to pursue the legitimate business interests of 999cd, provided those interests are not overridden by your rights and interests. This includes fraud prevention, platform security, responsible gaming monitoring, and internal analytics.
• Consent: Processing for which 999cd has obtained your explicit prior consent, such as sending you marketing communications about promotions, bonuses, and new features. You may withdraw consent for marketing at any time by updating your account preferences or contacting support.

How We Use Your Data

The personal data 999cd holds about you is used for the following specific purposes:

• Creating and managing your 999cd account, including authentication and access control.
• Verifying your identity and age in accordance with our 21+ policy and KYC obligations.
• Processing deposits, withdrawals, and internal fund transfers in Bangladeshi Taka (BDT) via your chosen payment method.
• Detecting and preventing fraud, money laundering, collusion, match-fixing, and other prohibited conduct on the platform.
• Monitoring gameplay and betting behaviour to identify responsible gaming concerns and intervene proactively where warranted.
• Providing and improving customer support, resolving disputes, and maintaining records of communications.
• Personalising your platform experience, including surfacing relevant games, promotions, and content.
• Sending you transactional communications (e.g., deposit confirmations, withdrawal notifications, account alerts) — these are required for service delivery and cannot be opted out of while your account is active.
• Sending you marketing communications about 999cd offers and promotions, where you have provided consent to receive them.
• Conducting internal analytics and business reporting to improve platform performance and user experience.
• Complying with applicable legal and regulatory requirements.

Data Sharing & Disclosure

999cd does not sell, rent, or trade your personal data to unaffiliated third parties for their own independent marketing purposes. We may share your data with the following categories of recipients, strictly for the purposes described:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — to facilitate the processing of your deposits and withdrawals. Each processor operates under its own privacy terms.
• KYC and identity verification providers: Third-party services engaged by 999cd to verify identity documents, screen against sanctions lists, and assess fraud risk on new and existing accounts.
• Technology service providers: Hosting, cloud infrastructure, analytics, and customer support software providers who process data on 999cd's behalf under strict data processing agreements.
• Game content providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised or pseudonymised session data necessary for game delivery and fair-play auditing. They do not receive your identity or financial data directly.
• Law enforcement and regulatory bodies: 999cd will disclose personal data to competent authorities when required by law, court order, or lawful regulatory request. Where permitted, 999cd will notify you of such disclosure.
• Business transfers: In the event of a merger, acquisition, or sale of 999cd's business or assets, your personal data may be transferred to the acquiring entity, which will be bound by this Privacy Policy or an equivalent standard of protection.

All third parties with whom 999cd shares personal data are contractually required to handle that data securely and in accordance with applicable data protection standards. 999cd does not permit its service providers to use your data for their own purposes beyond the scope of the services they provide to 999cd.

Cookies & Tracking

The 999cd website uses cookies and similar tracking technologies to deliver a functional, personalised, and secure user experience. Cookies are small text files stored on your device that allow 999cd to recognise your browser across sessions and maintain your preferences.

999cd uses the following categories of cookies:

• Strictly necessary cookies: Essential for the operation of the 999cd platform. These include session authentication cookies and security tokens. They cannot be disabled without disrupting core platform functionality.
• Performance and analytics cookies: Used to understand how users navigate the 999cd platform — which pages are visited most, where users encounter errors, and how long sessions last. This data is aggregated and anonymised.
• Functional cookies: Used to remember your preferences, such as language settings, odds format, and display options, so they persist between sessions.
• Marketing and targeting cookies: Used to deliver promotional content relevant to your interests and to measure the effectiveness of 999cd's marketing activities. These are only deployed with your consent.

You can manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the 999cd platform. 999cd does not currently respond to Do Not Track signals from browsers, as no uniform standard for such signals has been established.

Data Retention

999cd retains personal data only for as long as it is necessary for the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

• Account data and KYC documents: Retained for a minimum of five (5) years following the closure of your account, in accordance with anti-money laundering record-keeping requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Customer support communications: Retained for three (3) years from the date of the interaction, or longer if the communication relates to an unresolved dispute or legal matter.
• Technical and usage data: Retained for up to twenty-four (24) months, after which it is anonymised or deleted.
• Marketing consent records: Retained for as long as your consent remains active, plus two (2) years thereafter to demonstrate the basis of that consent.

When personal data is no longer required and its retention period has expired, 999cd will securely delete or irreversibly anonymise it. Where deletion is not immediately possible due to backup schedules or legal holds, the data will be isolated from active processing until deletion can be completed.

Your Rights

As a 999cd account holder, you hold the following rights in relation to the personal data we process about you. To exercise any of these rights, contact 999cd support at the email address shown in the footer of this page. We will respond to all verified requests within a reasonable time frame.

999cd will not charge a fee for handling rights requests in ordinary circumstances. We may request identity verification before actioning a request to ensure we do not disclose personal data to an unauthorised party. If we are unable to comply with a request for legal reasons, we will explain the basis for that refusal.

Children's Privacy

The 999cd platform is strictly intended for individuals who are 21 years of age or older. 999cd does not knowingly collect, process, or store personal data from anyone under the age of 21. If 999cd becomes aware that personal data has been submitted by a person under the minimum age threshold, that account will be immediately suspended, all wagers will be voided, and the personal data will be deleted as promptly as technically and legally possible.

If you are a parent or guardian and you believe that a minor in your care has created a 999cd account, please contact our support team immediately at the email address shown in the footer. We take this matter extremely seriously and will act without delay on any verified report of underage registration.

Data Security

999cd employs a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your browser and the 999cd platform.
• Encryption at rest for sensitive personal data and financial records stored on 999cd servers.
• Industry-standard password hashing using bcrypt or equivalent algorithms — 999cd staff cannot read your password.
• Role-based access controls that restrict staff access to personal data on a strict need-to-know basis.
• Comprehensive audit logging of all access to and modifications of personal data within 999cd systems.
• Regular security assessments, penetration testing, and vulnerability scans conducted against the 999cd platform.
• Incident response procedures that ensure prompt containment of any data breach and timely notification to affected users where required by law.

While 999cd takes every reasonable precaution to protect your data, no internet-based platform can guarantee absolute security. You are responsible for keeping your login credentials confidential and for notifying 999cd immediately if you suspect any unauthorised access to your account.

Policy Updates

999cd reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, business practices, or platform functionality. When material changes are made, 999cd will update the "Last updated" date shown at the top of this document and, where practicable, notify registered players via the email address associated with their account.

Your continued use of the 999cd platform after any revised Privacy Policy has been posted constitutes your acceptance of the updated terms. We encourage you to review this Policy periodically to stay informed of how 999cd handles your personal data. If you have any concerns about changes to this Policy, please contact our support team before continuing to use the platform.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data 999cd holds about you, please contact the 999cd data team using the following details:

• Email: [email protected] (plain text only — do not send sensitive personal documents via email without prior arrangement)
• Response time: 999cd aims to acknowledge all privacy-related enquiries within 2 business days and to provide a substantive response within 14 calendar days.
• Language: All privacy correspondence must be submitted in English to ensure accurate handling.

999cd takes all privacy enquiries seriously. If you are not satisfied with our response to a complaint or request, you may have the right to escalate the matter to the relevant data protection authority in your jurisdiction.