999nd Privacy Policy

This Privacy Policy explains how 999nd (referred to in this document as "999nd", "we", "us", or "our") collects, uses, stores, and protects the personal data of individuals who access or use the 999nd platform, available at https://999nd.io and any associated mobile interfaces or sub-domains (collectively, the "Platform").

This Policy applies to all registered account holders, visitors browsing the Platform without an account, and any individual whose data 999nd processes in connection with the operation of its online casino and sports betting services in Bangladesh. By registering an account or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy.

999nd collects personal data in the following categories. We collect only what is necessary and proportionate to the specific purpose identified for each category.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data for identification purposes, or health data, except where a player voluntarily discloses health-related information in the context of a responsible gaming self-exclusion request.

999nd collects personal data through the following channels:

• Direct interactions: Data you provide when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or respond to a survey or promotion.
• Automated technologies: Technical and usage data collected automatically as you browse and interact with the Platform, including via cookies, server logs, and analytics tools.
• Third-party sources: Identity and fraud-screening data received from KYC verification providers; payment confirmation data from bKash, Nagad, Rocket, Upay, and participating Bangladeshi banks; and risk-scoring data from fraud prevention service providers.
• Responsible gaming systems: Data generated when you use responsible gaming tools such as deposit limits, session reminders, or self-exclusion requests.

999nd processes personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions, including operating your account, processing transactions, and delivering gaming services.
• Legal obligation: Processing required to comply with applicable anti-money laundering (AML) obligations, age verification requirements, and other legal duties.
• Legitimate interests: Processing carried out for purposes such as fraud prevention, platform security, responsible gaming monitoring, and improving the quality of our services, where these interests are not overridden by your fundamental rights.
• Consent: Processing for optional purposes such as marketing communications, where we have obtained your prior explicit consent. You may withdraw consent at any time by contacting [email protected].

999nd uses personal data for the following specific purposes:

• Creating and managing your 999nd account, verifying your identity, and confirming your eligibility to use the Platform (including the 21+ age requirement).
• Processing deposits and withdrawals in Bangladeshi Taka (৳) via bKash, Nagad, Rocket, Upay, and bank transfers, and maintaining accurate financial records for each transaction.
• Settling bets, crediting winnings, and maintaining a complete and auditable record of your gaming history on 999nd.
• Preventing, detecting, and investigating fraud, money laundering, account abuse, and other prohibited conduct as defined in the Terms & Conditions.
• Monitoring platform usage to identify potentially problematic gambling behaviour and, where appropriate, proactively offering responsible gaming tools or support.
• Sending transactional communications such as deposit confirmations, withdrawal notifications, account security alerts, and mandatory policy update notices.
• Sending promotional communications about 999nd bonuses, cricket betting markets, slot tournaments, and other offers — only where you have provided consent, and only until consent is withdrawn.
• Improving the design, functionality, and content of the 999nd Platform based on aggregated, anonymised usage analytics.
• Resolving disputes, responding to support requests, and maintaining records of customer communications for quality and compliance purposes.

999nd uses cookies and similar tracking technologies to provide a functional, secure, and personalised experience on the Platform. A cookie is a small text file stored on your device by your browser when you visit a website. We use the following categories of cookies:

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication cookies, CSRF protection tokens, and load-balancing identifiers. These cannot be disabled without breaking Platform functionality.
• Functional cookies: Store your preferences such as language settings, responsible gaming tool configurations, and game layout preferences to improve your experience across sessions.
• Analytics cookies: Collect anonymised data about how players interact with the Platform, which pages are most visited, and where errors occur. This data is used solely to improve Platform performance.
• Security cookies: Help detect and prevent fraudulent account access and unusual session behaviour.

Most browsers allow you to refuse or delete cookies through their settings. Disabling strictly necessary cookies may prevent you from logging in or using core Platform features. Analytics and functional cookies can be disabled without affecting your ability to access the Platform.

999nd does not sell personal data to third parties. We share personal data only in the following specific circumstances, and only to the extent necessary for each purpose:

• Payment processors: bKash, Nagad, Rocket, Upay, and participating Bangladeshi banks receive transaction data necessary to process deposits and withdrawals on your behalf.
• KYC and identity verification providers: Identity documents and personal details are shared with certified third-party KYC providers to verify your age and identity as required for account registration.
• Game content providers: Technical session data (not personally identifiable financial data) is shared with game studios including Pragmatic Play, Evolution Gaming, Spribe, and Ezugi to facilitate game delivery and RNG certification.
• Fraud prevention and AML providers: Risk-related data is shared with specialist providers to detect suspicious patterns and meet anti-money laundering obligations.
• Legal and regulatory authorities: 999nd will disclose personal data to law enforcement or regulatory bodies where required to do so by applicable law, court order, or legitimate legal process.

All third-party service providers who receive personal data from 999nd are required to process that data only for the specified purpose, to maintain appropriate security standards, and to comply with applicable data protection obligations. 999nd does not transfer personal data to parties located outside of its operational region without implementing appropriate safeguards.

999nd retains personal data for as long as is necessary to fulfil the purpose for which it was collected, subject to any legal obligation requiring longer retention. Our standard retention periods are as follows:

When personal data reaches the end of its retention period, it is securely deleted or irreversibly anonymised. Anonymised aggregate data may be retained indefinitely for statistical purposes, as it can no longer be linked to any individual.

As a 999nd account holder or platform visitor, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request".

999nd will acknowledge all data rights requests within 5 Bangladesh Standard Time (BST, UTC+6) business days and will aim to fulfil verified requests within 30 calendar days. We may ask you to verify your identity before processing a request to ensure the security of your data.

The 999nd platform is strictly intended for adults aged 21 and over. 999nd does not knowingly collect, process, or store personal data belonging to individuals under the age of 21. All accounts are subject to mandatory age verification as part of the KYC process, and any account found to belong to a person under the age of 21 will be immediately suspended.

If you believe that a minor has created an account on 999nd or that their personal data has been submitted to the Platform without appropriate consent, please notify us immediately at [email protected]. We will investigate and delete any data relating to minors as quickly as possible upon confirmation.

999nd implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the 999nd platform.
• AES-256 encryption for sensitive data stored at rest, including identity documents and financial records.
• Role-based access controls ensuring that only authorised personnel with a defined business need can access personal data.
• Multi-factor authentication requirements for all internal system access by 999nd staff.
• Regular penetration testing and vulnerability assessments of the Platform infrastructure.
• Automated anomaly detection to identify unusual login patterns, access attempts, or data queries.
• Contractual security obligations imposed on all third-party data processors, with periodic review of their compliance.

In the unlikely event of a data breach that poses a risk to your rights, 999nd will notify affected account holders without undue delay, describing the nature of the breach, the data affected, and the steps being taken to address it.

999nd reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the services we offer. When a material change is made, we will notify registered account holders via the email address or mobile number associated with their 999nd account at least 7 days before the change takes effect. The date of the most recent revision is displayed at the top of this page.

Continued use of the 999nd platform following the effective date of any update to this Privacy Policy constitutes your acknowledgement of the revised terms. We encourage you to review this page periodically to stay informed about how we protect your personal data.

If you have any questions about this Privacy Policy, wish to exercise a data right, or want to raise a privacy-related concern, please contact the 999nd data protection team using the details below. All correspondence on privacy matters should be submitted in writing via email for record-keeping purposes.

This Privacy Policy was last reviewed and updated on 1 January 2026. This English-language version is the authoritative version for all players accessing the 999nd platform from Bangladesh.