999gd Privacy Policy

This Privacy Policy ("Policy") describes how 999gd ("we", "us", or "our"), the operator of the online gaming platform accessible at https://999gd.io ("Platform"), collects, uses, stores, and discloses personal data relating to individuals ("Players", "you", or "your") who access or use our services.

999gd is committed to handling all personal data in a manner that is lawful, fair, and transparent. This Policy has been prepared in accordance with internationally recognised data protection principles and is designed to be fully comprehensible to our players based in Bangladesh and beyond.

By registering an account on the 999gd platform, making a deposit, or otherwise using our services, you acknowledge that you have read, understood, and consented to the data practices described in this Policy. If you do not agree with any aspect of this Policy, you should discontinue your use of the platform and close your account.

For the purposes of this Privacy Policy, 999gd acts as the data controller in respect of all personal data collected from Players through the platform. As data controller, 999gd determines the purposes and means by which personal data is processed.

Where 999gd engages third-party service providers to process personal data on its behalf — such as payment processors, identity verification services, or customer support platforms — those parties act as data processors and are contractually bound to process data only in accordance with 999gd's documented instructions and applicable data protection obligations.

999gd collects personal data in the following categories. We collect only data that is necessary and proportionate to the purposes described in this Policy.

We do not intentionally collect special categories of personal data (such as health data, biometric data, or data relating to religious or political beliefs) unless you voluntarily disclose such data in a support communication or responsible gaming self-assessment, in which case it will be handled with the highest level of care and used solely for the purpose for which it was disclosed.

999gd collects personal data through the following channels:

• Direct Submission: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting our support team, or responding to a survey or promotion.
• Automated Technical Collection: Data collected automatically as you interact with the platform, including through cookies, web beacons, server logs, and similar tracking technologies. See Section 8 (Cookies and Tracking) for further detail.
• Third-Party Sources: Data received from identity verification providers, fraud prevention agencies, and payment processing partners where such data is necessary to verify your identity, process a transaction, or assess risk. We may also receive updated contact or address data from our payment partners when it differs from the information held in your account.
• Publicly Available Sources: In limited circumstances relevant to fraud prevention or AML compliance, we may cross-reference publicly available sources such as government databases or sanctions lists.

999gd processes your personal data on one or more of the following legal bases depending on the specific purpose:

• Contractual Necessity: Processing that is necessary to perform the contract between you and 999gd — for example, creating and managing your account, processing deposits and withdrawals in ৳ BDT, and settling bets or game outcomes.
• Legal Obligation: Processing that is required to comply with applicable laws and regulations, including anti-money laundering (AML) obligations, age verification requirements, and tax reporting duties.
• Legitimate Interests: Processing that is necessary for the legitimate interests of 999gd, including fraud prevention, platform security, responsible gaming monitoring, and improvement of platform services, provided such interests are not overridden by your own data protection rights.
• Consent: Where we rely on your consent — for example, to send you marketing communications about promotions, new games, or seasonal offers — you may withdraw that consent at any time by contacting us at [email protected] or updating your account notification preferences.

999gd uses the personal data we collect for the following specific purposes:

• To create, verify, and manage your account on the 999gd platform.
• To process deposits and withdrawals in Bangladeshi Taka (৳ BDT) through your chosen payment method (bKash, Nagad, Rocket, Upay, bank transfer, Visa, or Mastercard).
• To conduct identity verification and age checks to ensure that all players meet the 21+ minimum age requirement.
• To carry out anti-money laundering (AML) screening and fraud prevention checks on all financial transactions.
• To provide and operate the gaming services offered on the platform, including cricket betting (BPL, IPL, T20), slot games, live casino, and all other game categories.
• To personalise your experience on the platform based on your gameplay preferences and history.
• To monitor your usage patterns in connection with our responsible gaming obligations, including identifying players who may be exhibiting signs of gambling-related harm.
• To send you transactional notifications (account activity, deposit confirmations, withdrawal status) and, where you have consented, promotional communications about bonuses and offers.
• To respond to support requests, complaints, and dispute resolution enquiries.
• To improve, test, and develop the features and security of the 999gd platform.
• To comply with our legal, regulatory, and contractual obligations.

999gd does not sell your personal data to any third party. We share personal data only in the following circumstances and only to the extent strictly necessary:

• Payment Processors: We share financial data with payment processing partners — including mobile financial service providers (bKash, Nagad, Rocket, Upay) and card networks (Visa, Mastercard) — to execute your deposit and withdrawal instructions in ৳ BDT.
• Identity Verification Services: We share identity and document data with regulated KYC and AML compliance service providers for the purpose of verifying your identity and meeting our legal obligations.
• Game Providers: Gameplay data may be shared with certified game providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) to the extent necessary to operate the games you play on the platform. These providers process data as data processors under contractual obligations consistent with this Policy.
• Fraud Prevention Agencies: In cases where fraudulent activity is suspected, we may share relevant data with fraud prevention agencies and financial crime units to protect the integrity of the platform and its players.
• Legal and Regulatory Authorities: We may disclose personal data to law enforcement agencies, regulators, or courts where we are legally compelled to do so, or where disclosure is necessary to protect the legal rights of 999gd or its players.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of the assets of 999gd, personal data held by 999gd may form part of the transferred assets. You will be notified of any such transfer and any changes to this Privacy Policy that may result from it.

All third parties with whom 999gd shares personal data are required to maintain appropriate technical and organisational security measures and to process that data only for the specified purpose in accordance with 999gd's instructions.

999gd uses cookies and similar tracking technologies to operate the platform, enhance your experience, and gather analytics data that helps us improve our services. The following categories of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They enable core features such as account login sessions, security token management, and language preferences. These cookies cannot be disabled without affecting your ability to use the platform.
• Performance and Analytics Cookies: These cookies collect anonymised information about how players interact with the platform — such as which pages are visited most frequently, how long players spend in certain game categories, and which features are most used. This data helps us prioritise improvements to the 999gd experience.
• Functional Cookies: These cookies remember your preferences and settings — such as your preferred deposit method (bKash, Nagad, etc.), your preferred game category, and any display settings you have customised — to provide a more personalised experience on return visits.
• Marketing and Targeting Cookies: Where you have provided consent, these cookies may be used to deliver promotional content that is relevant to your gameplay history and preferences. You may withdraw consent for marketing cookies at any time.

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair or prevent your use of the 999gd platform. Disabling other cookie categories will not affect your ability to play games or process transactions but may reduce the personalisation of your experience.

999gd implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include, but are not limited to:

• 256-bit SSL (Secure Sockets Layer) encryption on all data transmitted between your device and the 999gd platform.
• Encryption of sensitive data fields (including identity document data and financial records) at rest within our secure database infrastructure.
• Role-based access controls ensuring that internal personnel can only access personal data to the extent required for their specific role and responsibilities.
• Automated fraud detection and anomaly monitoring systems that flag unusual account activity for review.
• Regular security assessments and penetration testing of platform infrastructure.
• Mandatory data protection training for all personnel who handle player data.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 999gd will take all reasonable steps to notify you without undue delay and will implement measures to contain and remediate the breach as promptly as possible.

999gd retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following general retention principles apply:

• Active Account Data: Personal data associated with an active account is retained for the duration of your account's existence on the platform.
• Closed Account Data: Following the closure of an account — whether at your request or due to a breach of our Terms and Conditions — certain categories of data (including identity verification documents, transaction records, and KYC files) are retained for a minimum period of five years to comply with AML legislation and other applicable regulatory requirements.
• Communications Data: Support communications and dispute records are retained for a period of three years following the resolution of the relevant matter.
• Marketing Consent Records: Records of marketing consent and opt-out requests are retained indefinitely to demonstrate compliance with our consent obligations.
• Technical and Log Data: Server logs, IP address records, and session data are retained for up to 12 months, after which they are anonymised or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with you as an individual. Anonymised data may be retained indefinitely for statistical and research purposes.

Subject to applicable law, you have the following rights in respect of the personal data that 999gd holds about you:

• Right of Access: You have the right to request a copy of the personal data 999gd holds about you, along with information about how it is being processed. Requests will be fulfilled within 30 calendar days.
• Right to Rectification: You have the right to request the correction of inaccurate or incomplete personal data held about you. Where possible, corrections will be applied promptly upon verification of your identity.
• Right to Erasure: In certain circumstances, you may request the deletion of your personal data. This right is subject to limitations where retention is required by law (for example, to satisfy AML record-keeping obligations).
• Right to Restriction of Processing: You may request that 999gd restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of data or have objected to processing pending a determination of our legitimate interests.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, and processing is carried out by automated means, you may request a structured, machine-readable copy of the personal data you provided to us.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests. 999gd will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

The 999gd platform may contain links to third-party websites or services for informational or operational purposes. This Privacy Policy applies solely to data collected and processed by 999gd through the 999gd.io platform. It does not apply to any third-party website, application, or service that you may access via a link on our platform.

999gd has no control over the data practices of third-party operators and accepts no responsibility for the privacy policies or data handling practices of any external website or service. We encourage you to review the privacy policy of any third-party site you visit independently of the 999gd platform.

The 999gd platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or retain personal data from any individual under the age of 21. The platform employs age verification procedures at the point of registration and during the KYC process to enforce this restriction.

If 999gd becomes aware that personal data has been collected from a person under the age of 21, we will immediately suspend the associated account, delete the relevant data, and, where appropriate, report the matter to relevant authorities.

999gd reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform services. When we make material changes to this Policy, we will notify active account holders via email or through an on-platform notification prior to the changes taking effect.

The date of the most recent revision is always displayed at the top of this page. We encourage you to review this Policy periodically to stay informed about how we are protecting your personal data. Your continued use of the 999gd platform following the publication of any revised Policy constitutes your acceptance of the updated terms.

If you have objections to any revised version of this Policy, you should cease using the platform and contact us at [email protected] to close your account and request deletion of your data where applicable.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which 999gd processes your personal data, please contact our Data Protection team using the details below. We are committed to addressing all data-related enquiries promptly and professionally.

• Email: [email protected]
• Website: https://999gd.io
• Support Hours: 24/7, Bangladesh Standard Time (BST, UTC+6)
• Response Time: Data protection enquiries are acknowledged within 5 business days and resolved within 30 calendar days.

This Privacy Policy was last reviewed and updated on 1 January 2026 and supersedes all prior versions of the 999gd Privacy Policy.