999a Privacy Policy —
How We Handle Your Data
At 999a, protecting your personal information is a core commitment. This Privacy Policy explains what data we collect, why we collect it, how it is stored and used, and the rights you have over your own information as a player on Bangladesh's leading online betting platform.
All data exchanged between your device and the 999a platform is protected by 256-bit SSL encryption. No personal information is transmitted in plaintext at any point during your session.
999a does not sell, rent, or trade your personal information to third-party marketers or data brokers. Your data is used solely to operate, improve, and secure your account experience on our platform.
Registered players have the right to access, correct, and request deletion of their personal data at any time. Submit a data request to [email protected] and we will respond within ten (10) business days.
We collect only the personal data that is strictly necessary to deliver our services, verify your identity, process transactions, and comply with applicable anti-money laundering obligations. We do not collect data we do not need.
Player data is stored on secured servers with access controls, firewalls, and regular security audits. Only authorised 999a personnel with a legitimate operational need can access stored personal data.
999a uses cookies only for essential session management, analytics, and platform performance. We do not use third-party advertising cookies. You can review and manage your cookie preferences at any time through your browser settings.
1. Data We Collect
999a collects personal data from players at various stages of the account lifecycle — at registration, during identity verification, through platform usage, and when financial transactions are processed. The categories of personal data we collect, and the context in which each is collected, are described below.
| Data Category | Specific Data Points | Collection Point |
|---|---|---|
| Identity Data | Full legal name, date of birth, national ID number, passport number (if provided) | Registration & KYC verification |
| Contact Data | Mobile phone number, email address, city/district of residence (e.g., Dhaka, Chittagong, Sylhet) | Registration form |
| Financial Data | bKash/Nagad/Rocket account number, bank account details (last 4 digits), deposit and withdrawal history | Payment processing |
| Technical Data | IP address, device type, browser type and version, operating system, session timestamps | Automatic collection during platform use |
| Usage Data | Pages visited, games played, bet history, session duration, feature interactions | Automatic collection during platform use |
| Communications Data | Content of live chat transcripts, emails sent to [email protected], and dispute correspondence | Customer support interactions |
| Verification Documents | Scanned or photographed copies of national ID, passport, utility bill, or other KYC documents | Identity verification (KYC) |
We do not collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, biometric data, or health information. If you are a player from Dhaka, Chittagong, Rajshahi, Khulna, Sylhet, Barisal, Rangpur, or any other region of Bangladesh, the same data collection standards apply uniformly regardless of your location within the country.
2. How We Use Your Data
999a processes your personal data only for legitimate, clearly defined purposes. We do not use your data for any purpose that is incompatible with the reason it was originally collected. The following table outlines the lawful basis and specific purpose for each type of processing we carry out.
We use your identity and contact data to create and maintain your 999a player account, verify your eligibility (18+ age check), authenticate your logins, and communicate account-related notifications such as deposit confirmations and security alerts.
Your financial data is used exclusively to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and supported bank channels. We verify that withdrawal requests are directed to a payment method registered in your verified name to prevent fraud.
Technical and usage data is analysed to detect unusual account behaviour, potential fraud, account sharing, multi-accounting, and money laundering activity. This processing is a legal obligation and a core platform security function.
Aggregated and anonymised usage data helps us understand how players interact with the platform, identify underperforming features, and prioritise development work. This analysis does not involve identifying individual players.
With your consent, we may send you relevant promotional offers, bonus notifications, and seasonal promotions (such as BPL cricket offers, Eid specials, or Pohela Boishakh bonuses) via SMS or email. You may withdraw this consent at any time by contacting [email protected].
Usage data — including session frequency, bet volumes, and deposit patterns — is monitored as part of our responsible gaming obligations. If a player's behaviour pattern suggests a risk of problem gambling, our team may reach out proactively to offer support tools.
999a will never use your personal data to make fully automated decisions that produce significant legal effects without human review. Any account suspension, withdrawal delay, or bonus adjustment that affects your rights will involve a human review step before action is taken.
3. Data Sharing & Disclosure
999a does not sell, rent, or otherwise transfer your personal data to third parties for commercial marketing purposes. We may share your data only in the limited circumstances described below, and only to the minimum extent necessary for each stated purpose.
- Payment Processors: Financial data is shared with bKash, Nagad, Rocket, Upay, and our banking partners solely to process the transactions you initiate. Each payment partner operates under its own privacy policy and regulatory obligations.
- Game Software Providers: When you play games powered by Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, or Ezugi, your game session data (player ID, stake, result) is transmitted to the relevant provider to operate the game. Your full identity data is not shared with game providers.
- Identity Verification Services: During KYC verification, identity documents may be processed by a third-party identity verification service operating under strict data processing agreements with 999a. Documents are not retained by the verification service beyond the period required to complete verification.
- Legal & Regulatory Obligations: We may disclose personal data to relevant authorities if required by applicable law, court order, or in connection with a legitimate investigation into suspected fraud, money laundering, or other criminal activity. We will notify affected players of such disclosures where legally permitted to do so.
- Business Transfers: In the event of a merger, acquisition, or sale of all or part of 999a's business, player data may be transferred to the acquiring entity as part of the transaction. Players will be notified of any such transfer and the privacy terms applicable to their data post-transfer.
4. Cookies & Tracking
The 999a website uses cookies and similar tracking technologies to ensure the platform functions correctly, to measure site performance, and to improve your user experience. A cookie is a small text file placed on your device by a web server. Cookies do not contain executable code and cannot be used to access other files on your device.
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Essential / Session Cookies | Maintain your login session, remember your account state, enable secure navigation between pages | No — required for platform to function |
| Analytics Cookies | Collect anonymised data on page views, feature usage, and session durations to help us improve the platform | Yes — via browser settings |
| Performance Cookies | Monitor platform load times, detect errors, and support technical troubleshooting | Yes — via browser settings |
| Preference Cookies | Remember your display preferences such as language setting and notification choices | Yes — clearing them resets preferences |
999a does not use third-party advertising cookies, tracking pixels for external ad networks, or cross-site tracking technologies. You can manage or delete cookies at any time through your browser's settings menu. Disabling essential cookies will affect your ability to log in and use the platform. Disabling analytics or performance cookies will not affect your access to games or account features.
We may also use server-side logging to record IP addresses, request timestamps, and error codes for security and fraud monitoring purposes. These logs are retained for a maximum of 90 days and are used only for technical operations and security investigations.
5. Data Security
999a implements a multi-layered security approach to protect the personal data of all registered players. Our security practices are reviewed regularly and updated in response to evolving threats. Below is a summary of the primary security measures in place.
All player data stored in our databases is encrypted at rest using AES-256 encryption. All data transmitted between your browser and our servers is encrypted in transit using TLS 1.2 or higher. No unencrypted personal data passes through our systems.
Access to personal data is restricted to 999a staff who require it to perform their specific job function. All internal access is logged. Staff with access to personal data are subject to confidentiality obligations and regular training on data protection practices.
In the event of a personal data breach that poses a risk to affected players, 999a will notify affected individuals via their registered email address within 72 hours of becoming aware of the breach. We will describe the nature of the breach, data affected, and steps being taken to mitigate harm.
999a's technical infrastructure undergoes regular security assessments including penetration testing and vulnerability scanning. Critical vulnerabilities are remediated on a priority basis. We also operate a responsible disclosure programme — if you discover a security vulnerability, report it to [email protected].
6. Data Retention
999a retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply to each category of personal data we hold.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years after closure | Legal obligations, fraud prevention, dispute resolution |
| Financial Transaction Records | 7 years from transaction date | AML compliance and financial record-keeping requirements |
| KYC Verification Documents | Duration of account + 5 years after closure | Regulatory compliance and identity re-verification |
| Bet & Game History | 5 years from date of activity | Dispute resolution, bonus audit, regulatory reporting |
| Support & Communications Data | 3 years from last interaction | Quality assurance, dispute evidence, complaint handling |
| Server & Access Logs | 90 days | Security monitoring and fraud investigation |
| Analytics Data (anonymised) | Up to 24 months, rolling | Platform performance improvement |
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Data that has been anonymised (i.e., cannot be linked back to an identifiable individual) may be retained indefinitely for statistical and research purposes. Players who request account deletion will have their personally identifiable data removed within the shortest timeframe permitted by the applicable retention obligations listed above.
7. Your Privacy Rights
As a 999a player, you have the following rights in relation to your personal data. To exercise any of these rights, submit a written request to with your registered account username and a clear description of the right you wish to exercise. We will respond within ten (10) business days of receiving your request.
- Right of Access: You have the right to request a copy of all personal data we hold about you. We will provide this in a structured, readable format within ten (10) business days of your verified request.
- Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update standard contact information directly via your account settings.
- Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to applicable retention obligations (see Section 6). Note that financial and identity data subject to AML retention requirements cannot be deleted before the mandatory retention period has elapsed.
- Right to Restrict Processing: You may request that we suspend active processing of your personal data in certain circumstances, for example while a dispute or data accuracy review is in progress.
- Right to Data Portability: You may request that we provide your account data and bet history in a machine-readable format (CSV or JSON) so that you can transfer it to another service if you choose.
- Right to Withdraw Marketing Consent: If you have consented to receive promotional communications from 999a, you may withdraw that consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
- Right to Object to Processing: You may object to processing carried out on the basis of legitimate interests. We will honour your objection unless we can demonstrate compelling legitimate grounds that override your rights.
8. Policy Updates & Contact
999a reviews this Privacy Policy periodically and may update it to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, we will notify registered players via their registered email address at least 14 days before the changes take effect, unless a shorter notice period is required by applicable law.
The version of this Privacy Policy displayed on this page is the current operative version. The "Last Updated" date at the top of this page reflects the date on which the most recent substantive revision was made. Continued use of the 999a platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms.
If you have any questions, concerns, or requests relating to this Privacy Policy or 999a's data handling practices, please reach out to our support team. We are available 24 hours a day, seven days a week, to assist you.
For all privacy-related queries, data access requests, or complaints, write to us at . Please include "Privacy Request" in the subject line of your email so our team can route it to the appropriate person promptly.
We acknowledge all privacy requests within two (2) business days. Substantive responses to data access, rectification, erasure, or portability requests are provided within ten (10) business days. Complex requests may take longer, in which case we will keep you informed of progress.
Continue Exploring 999a
Your Data Is Safe — Now Enjoy the Platform
Now that you know how 999a protects your privacy, explore cricket betting, slots, and live casino — all in BDT. 18+ only. Play responsibly.