999be Privacy
Policy

999be (referred to in this policy as "999be", "we", "us", or "our") operates the online casino and sports betting platform accessible at https://999be.io and its associated subpages and services. 999be acts as the data controller in respect of all personal data collected from players and visitors through the platform.

This Privacy Policy applies to all users of the 999be platform, including registered account holders, visitors to the public-facing website, and individuals who contact 999be support. By accessing the 999be platform, you confirm that you have read and understood this policy.

For all privacy-related enquiries, data subject access requests, or concerns about how your personal data is handled, you may contact our dedicated privacy team at the address provided in Section 13 of this policy.

999be collects and processes the following categories of personal data:

• Identity Data: Full legal name, date of birth, gender, nationality, and copies of identity documents such as a Bangladesh National Identity Card (NID), passport, or birth certificate.
• Contact Data: Email address, Bangladesh mobile phone number, and any alternative contact details you provide during registration or account management.
• Financial Data: Mobile financial service account references (bKash, Nagad, Rocket, Upay), bank account details where applicable, deposit and withdrawal transaction records, account balance history, and bonus transaction logs.
• Technical Data: IP address, device identifier, browser type and version, operating system, screen resolution, time zone setting, and session metadata collected automatically when you access the platform.
• Usage Data: Details of your activity on the platform, including games played, bet amounts, win/loss records, pages visited, session duration, and interaction with platform features such as the responsible gaming tools.
• Communications Data: Records of all communications between you and the 999be support team, including live chat transcripts, email correspondence, and any attachments or screenshots you submit.
• Preference Data: Your stated preferences regarding marketing communications, responsible gaming limits you have set, and any accessibility or display preferences you configure within your account.

999be collects personal data through the following methods:

• Direct interactions: Data you provide when creating an account, completing identity verification, making deposits or withdrawals, placing bets, contacting support, or updating your account profile.
• Automated technologies: Technical and usage data collected automatically when you access the platform, through server logs, session tracking, and platform analytics tools operated exclusively by 999be on its own infrastructure.
• Identity verification partners: Where 999be uses third-party identity verification services to confirm the authenticity of documents you submit, those services may return verification results and risk scores to 999be. These services do not retain copies of your documents beyond their processing function.
• Payment processors: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, and bank payment gateways following a successful deposit or withdrawal instruction.
• Fraud prevention services: Risk signals and device fingerprinting data from security services used to detect and prevent fraudulent account activity, bonus abuse, and money laundering.

999be does not purchase data about you from data brokers or marketing list providers. We do not obtain your personal data from social media platforms or public registries except where you explicitly authorise such a connection.

999be uses your personal data for the following purposes:

• Account management: To create, maintain, and administer your 999be account, including authentication, balance management, and account settings.
• Identity and age verification: To confirm that you meet the minimum age requirement of 21 years and to verify your identity as required under our Know Your Customer (KYC) obligations.
• Payment processing: To initiate, confirm, and record deposit and withdrawal transactions via your chosen payment method.
• Platform delivery: To provide access to games, sports betting markets, promotions, and all other platform features you use during your session.
• Security and fraud prevention: To monitor account activity for signs of unauthorised access, fraudulent transactions, multi-accounting, bonus abuse, and money laundering, and to take protective action where risk indicators are detected.
• Responsible gaming: To monitor usage patterns for indicators of problem gambling behaviour, to apply deposit limits and self-exclusion settings you have activated, and to contact you where our responsible gaming obligations require intervention.
• Customer support: To identify you when you contact our support team, to access relevant account history, and to resolve queries, disputes, and complaints efficiently.
• Legal compliance: To meet obligations under applicable laws including anti-money laundering (AML) requirements, to respond to lawful requests from regulatory or law enforcement authorities, and to maintain records required by law.
• Platform improvement: To analyse aggregated and anonymised usage data in order to identify performance issues, improve user experience, and develop new features.
• Service communications: To send you account-related notifications such as deposit confirmations, withdrawal status updates, security alerts, and important policy change notices. These communications are not optional as they are necessary for safe account operation.

999be processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Performance of a contract: Processing necessary to create and maintain your account, process payments, and deliver platform services you have requested by registering and using 999be.
• Legal obligation: Processing required to comply with applicable laws, including KYC identity verification, AML transaction monitoring, record-keeping obligations, and responses to lawful regulatory or law enforcement requests.
• Legitimate interests: Processing for fraud detection, platform security, responsible gaming monitoring, and service improvement where those interests are not overridden by your data protection rights.
• Consent: Where 999be relies on consent as a legal basis (for example, for any optional marketing communications you have explicitly opted into), you have the right to withdraw that consent at any time by contacting support or updating your account preferences. Withdrawal of consent does not affect the lawfulness of processing prior to withdrawal.

For each processing activity listed in Section 4, the applicable legal basis or bases are identified in the data overview table in the introductory summary above. Where the legal basis is legitimate interests, 999be has assessed that our interests in secure, compliant platform operation do not override your fundamental data protection rights.

999be shares your personal data with third parties only where strictly necessary for the operation of the platform or where required by law. We do not sell your data. The categories of third parties who may receive your data are:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and other payment service providers receive the minimum data necessary to execute deposit and withdrawal transactions you initiate.
• Identity verification providers: Third-party KYC services receive copies of identity documents you submit for the purpose of authenticating them. These providers operate under strict data processing agreements and are prohibited from using your data for any purpose other than verification.
• Game technology providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive a pseudonymous player identifier and session token necessary to deliver their game content. These providers do not receive your name, contact details, or financial data.
• Fraud and security services: Specialist security vendors who process device and behavioural data to generate risk scores for fraud prevention. All such vendors operate under data processing agreements aligned with this policy.
• Legal and regulatory authorities: Where required by applicable law, court order, or lawful regulatory request, 999be will disclose personal data to relevant authorities. 999be will notify you of such disclosures where legally permitted to do so.
• Professional advisers: Lawyers, auditors, and accountants who require access to specific records in connection with legal proceedings, compliance audits, or financial reporting. All such parties are bound by professional confidentiality obligations.

999be uses cookies and similar browser storage technologies on the platform. Cookies are small text files placed on your device when you visit a website. 999be uses the following categories of cookies:

• Strictly necessary cookies: These are essential for the platform to function. They maintain your authenticated session, remember your account preferences during a session, and enable the platform's security features. These cookies cannot be disabled without breaking platform functionality.
• Performance cookies: These collect anonymised data about how visitors use the platform — such as which pages are visited most frequently and whether error messages are encountered — to help 999be improve performance and fix bugs. No personally identifiable information is collected by these cookies.
• Functional cookies: These remember choices you make during your session (such as your preferred language setting or responsible gaming reminder intervals) to provide a more personalised experience.

999be does not use advertising cookies, cross-site tracking cookies, social media tracking pixels, or any third-party analytics platform that sends your browsing data to external servers beyond 999be's own infrastructure.

You can control and delete cookies through your browser settings. Deleting session cookies will log you out of the platform. Disabling performance or functional cookies may reduce the quality of your experience but will not prevent access to the platform. Instructions for managing cookies are available in the help documentation for all major browsers.

999be implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure:

• Encryption in transit: All data transmitted between your device and 999be servers is protected by 256-bit SSL/TLS encryption, ensuring that data cannot be intercepted in readable form during transmission.
• Encryption at rest: Personal data and financial records stored on 999be servers are encrypted using AES-256, the same standard used by financial institutions and government agencies worldwide.
• Access controls: Access to personal data within 999be is restricted on a strict need-to-know basis. Staff access is logged, audited, and reviewed regularly. No individual can access customer data without a documented operational reason.
• Intrusion detection: 999be operates continuous monitoring systems that detect and alert on unusual access patterns, potential data exfiltration attempts, and other security anomalies in real time.
• Penetration testing: The 999be platform undergoes regular independent security assessments to identify and remediate vulnerabilities before they can be exploited.
• Incident response: 999be maintains a documented data breach response procedure. In the event of a confirmed breach affecting your personal data, you will be notified promptly with details of the data affected and the steps taken to contain the incident.

As a 999be player, you have the following rights in relation to your personal data. To exercise any of these rights, contact our privacy team using the details in Section 13. We will respond to all valid requests within 30 days.

• Right of access: You have the right to request a copy of all personal data 999be holds about you. We will provide this in a structured, commonly used format.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For basic account details, you can update these directly within your account profile.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to our legal obligation to retain certain records for up to 7 years after account closure.
• Right to restrict processing: You may request that 999be temporarily restrict the processing of your data while a dispute about its accuracy or the lawfulness of processing is being resolved.
• Right to data portability: You have the right to receive personal data you have provided to 999be in a machine-readable format, and to request that it be transmitted directly to another data controller where technically feasible.
• Right to object: Where 999be processes your data on the basis of legitimate interests, you have the right to object to that processing. We will cease processing unless we can demonstrate compelling legitimate grounds that override your rights.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect processing already completed on the basis of that consent.

999be retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply:

• Active account data: All personal, contact, financial, and usage data associated with an active account is retained for the full duration that your account remains open and active on the 999be platform.
• Post-closure retention: Following account closure — whether initiated by you or by 999be — identity data, financial records, KYC documentation, and communications data are retained for a period of 7 years to satisfy anti-money laundering obligations and to support any retrospective regulatory enquiry or legal proceedings.
• Technical and log data: Server logs and IP address records are retained on a rolling 13-month basis, after which they are automatically purged from active systems.
• Support communications: Live chat transcripts and email correspondence are retained for 7 years from the date of the communication where they relate to account disputes, regulatory matters, or responsible gaming interventions. General support queries are retained for 24 months.
• Anonymised analytics data: Usage data that has been irreversibly anonymised and cannot be re-linked to an individual may be retained indefinitely for platform improvement purposes.

At the end of each applicable retention period, personal data is securely and permanently deleted from all 999be systems and any third-party processors who hold it on our behalf. Deletion is conducted in accordance with industry-standard secure data destruction practices.

The 999be platform is strictly intended for adults aged 21 years and above. 999be does not knowingly collect, store, or process personal data belonging to any individual under the age of 21. Age verification is a mandatory step in the account registration process and is enforced through our KYC procedures.

If 999be becomes aware that personal data has been collected from a person under the age of 21 — whether through a fraudulent registration or any other means — we will immediately suspend the relevant account, delete all associated personal data without delay, and reverse any financial transactions where possible.

999be encourages parents and guardians to use parental control software to prevent underage individuals from accessing online gambling platforms. We support responsible gaming initiatives across Bangladesh and take underage access with the utmost seriousness.

999be reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, platform features, applicable law, or regulatory guidance. When material changes are made, we will notify registered account holders via the email address associated with their account at least 14 days before the changes take effect.

The effective date at the top of this policy document will always reflect the date on which the current version came into force. The most recent version of this policy is always available at https://999be.io/privacy-policy. We encourage you to review this page periodically to stay informed about how 999be protects your data.

Your continued use of the 999be platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes to this policy, you should cease using the platform and may request account closure by contacting our support team.

For all privacy-related queries, data subject access requests, consent withdrawals, or concerns about how 999be handles your personal data, please contact our privacy support team using the details below. All privacy enquiries are handled in English and are responded to within 30 days of receipt.

When submitting a data subject access request or a deletion request, please be prepared to provide proof of identity so that we can verify that we are disclosing or deleting data belonging to you and not a third party. Acceptable forms of identification include a copy of your NID, passport, or the email address registered to your 999be account.

If you are unsatisfied with 999be's response to a privacy enquiry, you have the right to escalate your complaint to a relevant data protection authority or to seek resolution through the dispute process described in our Terms & Conditions.