999cd Privacy Policy — Your Data, Your Rights
This policy explains what personal information 999cd collects, why we collect it, how we use it, and what rights you have over your data.
Introduction
999cd is committed to protecting the privacy of all users of its platform. This Privacy Policy sets out in detail the types of personal data that 999cd collects from users, the purposes for which that data is used, the legal basis on which it is processed, how it is stored and protected, with whom it may be shared, and the rights available to users in relation to their personal data. This policy applies to all users of the 999cd website and mobile site, regardless of how they access the platform.
By registering a 999cd account, using the platform's games or services, or continuing to browse the 999cd website, you acknowledge that you have read this Privacy Policy and agree to the collection and use of your personal information as described herein. If you do not agree with any part of this policy, please discontinue use of the platform and contact our support team to arrange closure of your account.
999cd does not sell your personal data to third parties for marketing purposes. Your data is used solely to operate and improve the platform, comply with legal obligations, and communicate with you about your account and eligible promotions.
Your Privacy at a Glance
1. Information We Collect
999cd collects personal data from users in several ways and for several distinct purposes. The categories of data we collect are described below.
2. How We Use Your Information
999cd uses the personal data it collects only for the purposes described in this policy. The primary uses of your data are as follows.
- To create, verify and maintain your 999cd account, including processing your registration details and confirming your identity and age.
- To process your deposits and withdrawals via bKash, Nagad, Rocket, Upay and supported bank transfer channels, and to maintain accurate financial records of all transactions on your account.
- To personalise the 999cd experience by surfacing games, promotions and features relevant to your usage history and preferences, so the platform remains useful and engaging for you.
- To comply with legal and regulatory obligations including anti-money laundering checks, responsible gaming requirements, and any mandatory reporting obligations applicable to online gaming platforms.
- To detect and prevent fraud, money laundering, identity theft, unauthorised account access, and other forms of prohibited conduct on the platform.
- To communicate with you about your account status, transaction confirmations, support queries, security alerts, and — where you have not opted out — information about promotions and bonuses relevant to your account.
3. Legal Basis for Processing
999cd processes your personal data on one or more of the following legal bases, depending on the specific purpose for which the data is being used.
| Legal Basis | Example Use |
|---|---|
| Contractual necessity | Processing your registration, managing your account, and handling deposits and withdrawals. |
| Legal obligation | Identity verification, age checks, anti-money laundering screening, and regulatory reporting. |
| Legitimate interests | Fraud detection, platform security monitoring, service improvement, and personalisation of the gaming experience. |
| Consent | Sending promotional communications about bonuses and offers where you have opted in to receive such communications. |
4. Sharing Your Information
999cd does not sell, rent or trade your personal data to any third party for marketing or commercial purposes. We share your personal data with third parties only in the limited circumstances described below.
5. Payment Data and Financial Privacy
All deposit and withdrawal transactions on the 999cd platform are processed through established mobile banking and payment infrastructure in Bangladesh. When you make a deposit via bKash, Nagad, Rocket or Upay, the transaction is authenticated through the relevant payment provider's own security systems. 999cd receives confirmation of successful payment and the transaction reference, but does not receive or store your full mobile banking PIN, password or account credentials for those services.
For bank transfer transactions, 999cd collects your bank account number and bank name for the purpose of processing the withdrawal to the correct account. This information is stored securely and used solely for the purpose of completing your withdrawal. 999cd does not use your bank account details for any other purpose and does not share them with any third party other than the bank or payment processor involved in completing your transaction.
6. Cookies and Tracking Technologies
The 999cd platform uses cookies and similar tracking technologies to operate correctly, improve user experience, and gather analytical data about how the platform is used. The types of cookies used by 999cd are described below.
- Essential cookies: required for the platform to function. These include session authentication cookies that keep you logged in to your account during a session. Disabling these cookies will prevent the platform from working correctly.
- Analytical cookies: used to understand how users navigate the platform, which games and pages are most visited, and where improvements can be made. This data is aggregated and anonymised where possible.
- Functional cookies: used to remember your preferences and settings, such as language preference and display settings, so you do not have to reset them each time you visit.
- Security cookies: used to detect and prevent fraudulent activity, protect against cross-site scripting, and support the integrity of account authentication processes.
Most mobile browsers and devices allow you to control cookie settings. However, disabling essential cookies will affect the functionality of the 999cd platform and may prevent you from logging in or completing transactions. By continuing to use the platform, you consent to the use of cookies as described in this policy.
7. Data Retention
999cd retains your personal data for as long as your account remains active and for a period thereafter as required by applicable law and our internal compliance obligations. Account data including registration details, identity documents and transaction records are typically retained for a minimum of five years following account closure in order to satisfy anti-money laundering, fraud prevention and regulatory record-keeping requirements.
Where personal data is no longer required for the purpose for which it was collected and no legal retention obligation applies, 999cd will securely delete or anonymise that data. If you close your 999cd account, we will begin the data retention review process at that point. Some data may be retained in anonymised or aggregated form for analytical purposes even after the standard retention period has expired.
8. Your Privacy Rights
As a user of the 999cd platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact the 999cd support team. We will respond to all valid requests within a reasonable timeframe.
- Right of access: you have the right to request a copy of the personal data that 999cd holds about you, together with information about how it is being used and with whom it has been shared.
- Right to rectification: if any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
- Right to erasure: in certain circumstances, you have the right to request that 999cd delete your personal data. This right is subject to legal retention obligations — where we are required by law to retain certain data, we cannot delete it at your request.
- Right to restriction of processing: you have the right to request that 999cd restrict the processing of your personal data in certain circumstances, for example while the accuracy of the data is being contested.
- Right to withdraw consent: where 999cd is processing your data on the basis of your consent (for example for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to the withdrawal.
To submit a data rights request, contact the 999cd support team at [email protected] with the subject line "Data Rights Request" and include your registered account username and the nature of your request. 999cd will acknowledge your request within 5 business days and aim to fulfil it within 30 days.
9. Security Measures
999cd takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction or disclosure. These measures include SSL encryption for all data transmitted between your device and the 999cd platform, access controls restricting platform data to authorised personnel only, regular internal security reviews, and monitoring for unusual access patterns that may indicate a breach or attack.
While 999cd makes every effort to protect your personal data, no platform or transmission method is completely secure. In the event of a data breach that is likely to result in a risk to your rights or interests, 999cd will take prompt action to contain the breach, assess the impact, and notify affected users as required. If you believe your account has been compromised, contact the 999cd support team immediately.
10. Children and Minors
The 999cd platform is strictly intended for adults aged 21 years and above. 999cd does not knowingly collect personal data from persons under the age of 21. If we become aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. If you believe that a person under 21 has registered a 999cd account, please notify us at [email protected] so that we can take appropriate action without delay.
11. Changes to This Privacy Policy
999cd reserves the right to update or amend this Privacy Policy at any time. When we make material changes to this policy, we will update the "Last Updated" date at the top of this page. Where the changes are significant, we may also notify registered account holders directly via email or an in-platform notification.
Continued use of the 999cd platform after any update to this Privacy Policy constitutes your acceptance of the revised policy. If you do not agree with any change to this policy, you must stop using the platform and may request closure of your account by contacting our support team.
12. Contact Us
If you have any questions, concerns or requests relating to this Privacy Policy or the way in which 999cd handles your personal data, please contact our support team. We are available 24 hours a day, 7 days a week to assist you.
Email: [email protected]