Privacy Policy — 999ok

1. Data We Collect

When you register for and use the 999ok platform, we collect certain categories of personal data. We collect only the information that is genuinely necessary to operate the service, verify your identity, process transactions, and comply with our legal obligations. The categories of data we collect are set out below.

1.1 Registration Data

When you create a 999ok account, you provide us with the following information:

• Full legal name (as it appears on your National Identity Card or passport)
• Date of birth (for age verification — you must be 18 years or older)
• Residential address (including division, district, and upazila for Bangladeshi residents)
• Mobile phone number (used for account verification and two-step security)
• Email address (used for account communications and password recovery)
• Chosen username and encrypted password

1.2 Identity Verification Data

To comply with our know-your-customer (KYC) obligations and to confirm that you meet the 18+ age requirement, we may collect:

• Scanned copy or photograph of your National Identity Card (NID), passport, or birth certificate
• Proof of address documents such as a utility bill or bank statement issued within the past 90 days
• Selfie or photograph for biometric comparison purposes, where required

1.3 Financial Transaction Data

To process deposits and withdrawals through bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and other supported payment methods, we record:

• Mobile financial service (MFS) account number used for each transaction
• Transaction reference numbers and timestamps
• Deposit and withdrawal amounts in BDT (৳)
• Payment method type and status (pending, completed, failed, reversed)

1.4 Usage and Behavioural Data

As you navigate and interact with the 999ok platform, we automatically collect technical and behavioural data, including:

• IP address and approximate geographic location (country and city level)
• Device type, operating system version, and browser type
• Pages visited, session duration, and click-path data
• Game history: games played, bet amounts, outcomes, and session timestamps
• Betting history on cricket, slots, and casino products
• Login timestamps and frequency of platform use

1.5 Communications Data

If you contact our support team or submit a query, complaint, or feedback, we retain:

• The content of your messages and our responses
• The channel used (email, live chat, or support ticket)
• Timestamps of the communication

2. How We Use Your Data

999ok processes your personal data only for lawful, specific, and transparent purposes. We do not use your data in ways that you would not reasonably expect. The primary purposes for which we use your data are as follows:

Purpose	Data Used	Basis
Account creation and management	Registration data, identity documents	Contractual necessity
Age and identity verification (KYC)	NID, passport, selfie, address proof	Legal obligation
Processing deposits and withdrawals	Financial transaction data, MFS details	Contractual necessity
Fraud prevention and security monitoring	Usage data, IP address, transaction history	Legitimate interest
Customer support and dispute resolution	Communications data, account history	Contractual necessity
Responsible gaming monitoring	Betting history, session data, login frequency	Legal obligation / legitimate interest
Platform performance analytics	Usage and behavioural data (anonymised)	Legitimate interest
Promotional communications (opt-in only)	Email address, phone number	Consent

2.1 Marketing Communications

999ok will only send you promotional messages — such as bonus offers, new game announcements, and seasonal promotions tied to events like Eid, Pohela Boishakh, or the BPL cricket season — if you have explicitly opted in to receive such communications during registration or through your account settings. You may withdraw your consent and opt out of marketing messages at any time by updating your communication preferences in the account dashboard or by contacting support at [email protected]. Opting out of marketing does not affect service-related communications (such as deposit confirmations, account security alerts, or withdrawal notifications), which are essential to the operation of your account.

3. Data Sharing & Third Parties

999ok does not sell, rent, or disclose your personal data to third parties for their own commercial purposes. We share data only in the limited circumstances described below, and only to the extent necessary for each specific purpose.

3.1 Payment Processors

To process your deposits and withdrawals, we share relevant transaction data with our authorised payment partners, including bKash, Nagad, Rocket, Upay, and participating Bangladeshi banks. These partners are contractually obligated to handle your data in accordance with applicable data protection standards and may not use your data for any purpose beyond processing the specific transaction.

3.2 Identity Verification Providers

Where identity verification is conducted via a third-party KYC service provider, your identity documents and biometric data may be shared with that provider solely for the purpose of completing the verification check. All KYC providers used by 999ok are bound by strict data processing agreements.

3.3 Game Content Providers

The games available on 999ok are powered by licensed third-party game studios and providers, including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, among others. These providers receive anonymised session and game outcome data necessary to deliver the game experience and calculate results. They do not receive your personally identifiable registration or financial data unless required for their own regulatory compliance.

3.4 Legal and Regulatory Disclosure

999ok may disclose your personal data to law enforcement agencies, regulatory bodies, or other government authorities where we are legally required to do so — for example, in connection with an investigation into suspected money laundering, fraud, or other illegal activity. We will not disclose more data than is strictly required by the applicable legal request or order.

3.5 Business Transfers

In the event that 999ok undergoes a merger, acquisition, asset sale, or other corporate restructuring, your personal data may form part of the transferred assets. In such circumstances, 999ok will take all reasonable steps to ensure that the receiving entity honours the commitments made in this Privacy Policy, and you will be notified of any material change to the data controller's identity prior to the transfer taking effect.

4. Cookies & Tracking Technologies

999ok uses cookies and similar tracking technologies to operate the platform effectively, remember your preferences, and understand how the site is being used. A cookie is a small text file stored on your device by your browser when you visit a website. The cookies used on 999ok fall into the following categories:

Cookie Type	Purpose	Duration
Essential	Maintain your login session, keep your account secure, enable platform core functions	Session / up to 24 hours
Functional	Remember your language, display preferences, and last-visited game categories	Up to 30 days
Analytics	Measure page performance, identify navigation drop-off points, and improve the platform (data aggregated and anonymised)	Up to 90 days
Security	Detect and prevent fraud, bot activity, and unauthorised account access	Up to 12 months

4.1 Managing Cookies

You can control and delete cookies through your browser settings at any time. Most modern browsers allow you to block all cookies, accept only first-party cookies, or clear existing cookies on demand. Please note that disabling essential cookies will impair the functionality of the 999ok platform — in particular, you will not be able to maintain a logged-in session without the essential session cookie. Blocking analytics or functional cookies will not prevent you from using the platform but may result in a less personalised experience.

4.2 No Cross-Site Tracking

999ok does not use tracking pixels, web beacons, or fingerprinting technologies to follow your activity across other websites or platforms outside of 999ok.im. Our analytics data is collected solely within the 999ok platform environment and is not shared with advertising networks or social media platforms for the purpose of targeting you with advertisements on other sites.

5. Data Retention

999ok retains your personal data only for as long as is necessary to fulfil the purposes described in this Privacy Policy or as required by applicable law. Our standard retention periods are as follows:

Data Category	Retention Period	Reason
Account registration data	Duration of account + 5 years after closure	Legal obligation / dispute resolution
Identity verification documents	Duration of account + 5 years after closure	Anti-money laundering (AML) compliance
Financial transaction records	7 years from transaction date	Financial record-keeping obligations
Game and betting history	Duration of account + 2 years after closure	Dispute resolution / responsible gaming monitoring
Support communications	3 years from last interaction	Quality assurance / dispute resolution
Analytics data (anonymised)	Up to 90 days (rolling)	Platform performance improvement

When the applicable retention period expires, personal data is securely deleted or irreversibly anonymised in accordance with our internal data destruction procedures. If you request deletion of your account before the end of a retention period, 999ok will delete all data that it is not legally required to retain and will suppress the remaining data from active use until the retention period concludes.

6. Your Rights Over Your Data

As a user of the 999ok platform, you hold the following rights in relation to the personal data we process about you. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within two business days and provide a full response within fourteen business days.

6.1 Right of Access

You have the right to request a copy of the personal data 999ok holds about you, together with information about how it is being used and who it has been shared with. We will provide this information in a clear, readable format, free of charge, within the response timeframe.

6.2 Right to Rectification

If any personal data 999ok holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For straightforward corrections — such as a change of address or phone number — you may also update these details directly through your account settings without needing to submit a formal data rights request.

6.3 Right to Erasure

You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent and there is no other lawful basis for processing. Please note that 999ok may be required to retain certain data for defined retention periods under applicable financial and anti-money laundering regulations, even following an erasure request. In such cases, we will explain precisely which data must be retained and why.

6.4 Right to Restrict Processing

In certain circumstances — for example, while a data accuracy dispute is being resolved — you may request that 999ok temporarily suspends active processing of your personal data. The data will be retained but not used until the dispute is settled.

6.5 Right to Data Portability

Where data has been provided to 999ok on the basis of your consent or for the performance of a contract, you have the right to request that we provide your data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider if you choose.

6.6 Right to Object to Marketing

You have an unconditional right to object to your personal data being used for direct marketing purposes at any time. You may exercise this right by updating your communication preferences in your account dashboard or by emailing [email protected]. Once you have objected, we will stop using your data for marketing within five business days.

7. Data Security Measures

999ok takes the security of your personal data seriously and implements a layered set of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, disclosure, or destruction.

7.1 Technical Safeguards

• SSL/TLS encryption: All data transmitted between your browser or app and the 999ok servers is encrypted using industry-standard TLS 1.2 or higher protocols.
• Password hashing: User passwords are stored only as irreversible cryptographic hashes. 999ok staff cannot view or retrieve your plaintext password.
• Two-step verification: An optional SMS-based second authentication factor is available to all account holders and is strongly recommended.
• Firewall and intrusion detection: The 999ok platform is protected by enterprise-grade network firewalls and real-time intrusion detection and prevention systems.
• Regular security audits: Our infrastructure undergoes periodic vulnerability assessments and penetration testing by qualified security professionals.

7.2 Organisational Safeguards

• Access to personal data is restricted on a strict need-to-know basis. Only personnel whose role requires access to specific data categories are granted that access.
• All staff who handle personal data are trained in data protection principles and bound by confidentiality obligations.
• Data processing activities are logged and periodically reviewed for anomalies or policy violations.

7.3 Data Breach Response

In the unlikely event of a data security breach that is likely to result in a risk to the rights and freedoms of affected individuals, 999ok will notify affected users without undue delay and in any case within 72 hours of becoming aware of the breach. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the steps 999ok has taken or intends to take to address it. If you suspect that your 999ok account has been compromised, please contact [email protected] immediately so that protective action can be taken.

8. Policy Updates & Contact

8.1 Changes to This Privacy Policy

999ok may update this Privacy Policy from time to time to reflect changes in our data practices, the services we offer, or applicable legal requirements. When we make a material change to this policy, we will update the effective date displayed at the top of this page and, where appropriate, notify registered users by email or via an in-platform notification. We encourage you to review this Privacy Policy periodically. Your continued use of the 999ok platform following a policy update constitutes acceptance of the revised policy.

8.2 Children's Privacy

The 999ok platform is strictly for adults aged 18 and above. We do not knowingly collect personal data from any person under the age of 18. If we become aware that personal data has been submitted by a person who is underage, we will delete that data promptly and permanently close the associated account. If you believe a minor has registered an account on 999ok, please notify us immediately at [email protected].

8.3 Links to Third-Party Sites

The 999ok platform may reference third-party services — such as payment providers like bKash and Nagad — that operate their own independent privacy policies. 999ok is not responsible for the privacy practices of any third-party website or service. We encourage you to review the privacy policy of any external service before providing your personal data to it.

8.4 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 999ok handles your personal data, please contact our Data Support team:

• Email: [email protected]
• Subject line for data queries: "Privacy Policy Enquiry" or "Data Rights Request"
• Support Hours: 6:00 AM – 12:00 AM BST (UTC+6, Bangladesh Standard Time)
• Response Time: Acknowledgement within 2 business days; full response within 14 business days