999k Privacy Policy

1 Introduction

This Privacy Policy ("Policy") explains how 999k ("the Platform", "we", "us", "our") collects, processes, stores, and protects the personal data of individuals ("Player", "User", "you") who register for or use the 999k online betting and casino platform at 999k.one.

999k is committed to operating with full transparency regarding data practices. This Policy is designed to give you a clear and honest account of our data-handling activities so that you can make informed decisions about your use of the platform. It should be read alongside our Terms & Conditions and our Responsible Gaming guidelines, both of which form part of your agreement with 999k.

By creating an account on 999k, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with the terms of this Policy, you must not register an account or use the platform.

2 Data We Collect

999k collects personal data across several categories. The table below provides a structured overview of the categories of data we collect, with examples of specific data points within each category.

3 How We Collect Your Data

Personal data is collected through the following means:

3.1 Direct Collection

Data that you provide directly to 999k when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or participate in a promotion. This includes the information you type into forms, upload as documents, or communicate via live chat or email.

3.2 Automated Collection

Technical data collected automatically when you access the 999k platform, including your IP address, device identifiers, browser information, and session logs. This data is collected using cookies, web server logs, and similar tracking technologies as described in Section 6 of this Policy.

3.3 Third-Party Sources

In limited circumstances, 999k may receive personal data about you from third parties, including:

• Payment service providers (bKash, Nagad, Rocket, Upay, Visa, Mastercard) — transaction confirmation data necessary to credit your account or process your withdrawal.
• Identity verification service providers — data returned as part of the automated KYC verification workflow, such as document authenticity scores.
• Fraud detection and anti-money-laundering screening services — risk scores and watchlist match results used to assess account risk.

4 Purposes & Legal Bases for Processing

999k processes your personal data only for specific, defined purposes. The table below sets out the key processing purposes and the corresponding legal basis for each.

Where 999k relies on legitimate interests as the legal basis for processing, we have assessed that our interests are not overridden by your rights and freedoms, taking into account the nature of the data involved and the reasonable expectations of players registering on an online betting platform.

5 Sharing Your Data

999k does not sell your personal data to third parties. We may share your data in the limited circumstances described below:

5.1 Payment Processors

When you make a deposit or withdrawal, the minimum necessary data (such as your registered mobile number or masked payment account reference) is shared with the relevant payment service provider (bKash, Nagad, Rocket, Upay, Visa, Mastercard) solely to facilitate the transaction. These providers process your data under their own privacy policies and are contractually obligated to protect it.

5.2 Game Providers

To operate live casino tables and slot games supplied by third-party game studios — including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming — a pseudonymous player identifier and session token must be passed to the relevant provider's platform. Game providers do not receive your full name, address, or payment details. They receive only the data necessary to load and operate the game session.

5.3 KYC and Fraud Service Providers

To fulfil our identity verification and anti-fraud obligations, we use specialist third-party verification services. These providers receive the identity documents and personal data you submit during the KYC process and return a verification result. They are contractually bound to process your data only for this purpose and to maintain appropriate security standards.

5.4 Legal and Regulatory Disclosure

999k may be required to disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory bodies in response to a lawful request, court order, or where we determine that disclosure is necessary to prevent or report suspected illegal activity, including fraud or money laundering. We will notify you of any such disclosure where we are legally permitted to do so.

5.5 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of 999k's assets, personal data held by 999k may be transferred to the acquiring entity as part of that transaction. You will be notified in advance of any such transfer and the Privacy Policy governing your data post-transfer will be made available to you.

6 Cookies & Tracking Technologies

999k uses cookies and similar tracking technologies to operate the platform, maintain your session, detect fraud, and improve user experience. The categories of cookies we use are described below.

6.1 Strictly Necessary Cookies

These cookies are essential to the functioning of the platform and cannot be disabled. They include session cookies that keep you logged in during your visit, security tokens that protect against cross-site request forgery, and cookies that remember your responsible gaming settings. Because these cookies are strictly necessary, they do not require your consent.

6.2 Performance and Analytics Cookies

We use anonymised analytics cookies to understand how players navigate the platform, which games and features are most popular, and where technical errors occur. The data collected via these cookies is aggregated and does not identify you personally. These cookies help us make the platform faster, more reliable, and easier to use.

6.3 Functional Cookies

Functional cookies remember your preferences — such as your preferred deposit method or the last game category you browsed — so that the platform can present you with a more personalised experience on your next visit. These cookies do not track your activity across other websites.

6.4 Managing Cookies

You can control non-essential cookies through your browser settings. Most modern browsers allow you to block all cookies, accept only first-party cookies, or clear cookies at the end of each browsing session. Note that disabling strictly necessary cookies will prevent you from logging in to your account and using the platform. Instructions for managing cookies in common browsers are available from your browser's help documentation.

7 Data Retention

999k retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, after which it is securely deleted or irreversibly anonymised. The general retention periods applied by 999k are as follows:

• Account and identity data: Retained for the duration of the active account relationship plus a minimum of 5 years following account closure, to satisfy anti-money-laundering record-keeping obligations.
• Transaction and financial records: Retained for a minimum of 5 years from the date of the transaction, in line with standard financial record-keeping requirements.
• Gaming activity data: Retained for the duration of the active account relationship plus 2 years following closure, for responsible gaming audit purposes.
• Customer support correspondence: Retained for 3 years from the date of last contact, to support dispute resolution and service improvement.
• Technical and log data: Retained for up to 12 months for security and fraud investigation purposes, then deleted.
• Marketing preference records: Retained for the duration of the account relationship. Opt-out records are retained indefinitely to ensure that marketing is not resent to players who have withdrawn consent.

Where a player's account is under active investigation for suspected fraud, money laundering, or a Terms breach, data relevant to that investigation will be retained until the investigation is fully resolved, regardless of the general retention schedule above.

8 Security Measures

999k implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, and disclosure. Our key security controls include:

• 256-bit SSL/TLS encryption on all data in transit between your device and 999k servers.
• Encryption at rest for all sensitive personal data and financial records stored in our databases.
• Hashed password storage using industry-standard cryptographic algorithms — 999k never stores your password in plaintext and cannot retrieve it.
• Two-factor authentication (2FA) available as an optional additional layer of security for player accounts.
• Role-based access controls limiting internal access to personal data to staff members who require it to perform their job functions.
• Regular security audits and penetration testing conducted by independent third-party security specialists.
• Fraud monitoring systems that operate continuously to detect anomalous account activity, unusual login patterns, and suspicious transaction behaviour.

While 999k takes every reasonable technical precaution, no system is entirely immune to security risks. You play an important role in protecting your own account by choosing a strong, unique password, enabling 2FA, and not sharing your credentials with any third party.

9 Your Rights Over Your Personal Data

As a player on 999k, you have the following rights with respect to your personal data. To exercise any of these rights, please contact our support team at [email protected] from the email address registered on your account, with the subject line "Data Rights Request".

9.1 Right of Access

You have the right to request a copy of the personal data that 999k holds about you. We will provide a structured summary of your data within 30 days of receiving a verified request. There is no charge for a first-time access request within any 12-month period.

9.2 Right to Rectification

If you believe that any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Where the correction relates to KYC-verified data (such as your legal name or date of birth), updated supporting documentation will be required.

9.3 Right to Erasure

You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and there is no other legal basis for continued processing. Please note that this right is subject to our legal obligation to retain certain data — particularly financial and identity records — for anti-money-laundering compliance purposes. Where erasure of some data is not possible due to these obligations, we will inform you of the specific records that must be retained and the reason for their retention.

9.4 Right to Restriction of Processing

You may request that we restrict the processing of your personal data in specific circumstances — for example, while you contest the accuracy of data we hold, or where you have objected to processing based on legitimate interests and we are assessing whether our interests override yours.

9.5 Right to Data Portability

Where processing is based on your consent or on the performance of a contract, and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format (such as JSON or CSV). This allows you to transfer your data to another service provider if you choose to do so.

9.6 Right to Object

You have the right to object to processing of your personal data where 999k relies on legitimate interests as the legal basis. You also have the absolute right to object to processing for direct marketing purposes at any time, with no need to justify your objection. We will cease marketing communications immediately upon receiving a valid opt-out request.

10 Minors & Age Policy

999k operates a strict minimum age policy. The platform is available exclusively to individuals who are 21 years of age or older at the time of registration. We do not knowingly collect personal data from any person under the age of 21.

Age verification is conducted as part of the KYC process for all registered accounts. Where an account is found to belong to a person under 21 years of age, that account will be closed immediately, all transactions will be reversed where technically possible, and any personal data associated with the account will be deleted from our live systems in accordance with our data retention schedule.

11 International Data Transfers

The personal data of 999k players may be processed and stored on servers located outside of Bangladesh. This occurs primarily in the context of our use of third-party service providers — including cloud infrastructure providers, game studios, and KYC verification services — some of which operate data centres in other jurisdictions.

Where personal data is transferred internationally, 999k takes steps to ensure that an adequate level of protection is applied to your data in the destination country or territory. These steps may include the use of standard contractual clauses, data processing agreements with appropriate security provisions, and assessment of the destination jurisdiction's data protection framework.

By registering on 999k and accepting this Privacy Policy, you consent to the transfer of your personal data to jurisdictions outside Bangladesh where this is necessary to deliver the services described in this Policy, subject to the protections described above.

12 Amendments to This Policy

999k reserves the right to update this Privacy Policy at any time to reflect changes in our data-handling practices, changes in applicable law, or changes to the services we offer. When material changes are made, we will notify registered players via email to the address on file and via an on-platform notification displayed upon next login.

The "Last updated" date at the top of this Policy indicates when the most recent revision took effect. We encourage you to review this Policy periodically. Continued use of the 999k platform following the effective date of any revision constitutes your acceptance of the updated Policy. If you do not accept a revision, you should cease using the platform and may request account closure by contacting [email protected].

Prior versions of this Privacy Policy are archived and available upon request by contacting our support team.

13 Contact & Data Rights Requests

If you have any questions about this Privacy Policy, wish to exercise any of your data rights as described in Section 9, or have a concern about how 999k has handled your personal data, please contact us using the details below:

• Email: [email protected] — please use the subject line "Privacy Policy Query" or "Data Rights Request" so that your message is routed to the correct team.
• Live Chat: Available 24/7 from within your account dashboard. For data rights requests requiring formal processing, email is preferred so that a written record is maintained.
• Response Times: All privacy-related queries are acknowledged within 48 hours. Formal data rights requests are resolved within 30 days (extendable by a further 30 days for complex requests, with notification).

999k takes all privacy concerns seriously and is committed to resolving any issues promptly and transparently. If you feel that a privacy concern has not been adequately addressed after contacting our support team, you may escalate the matter by writing to our senior compliance team at the same address, clearly marked "Formal Privacy Complaint".