999kg Privacy
Policy

999kg collects personal data from users in order to provide a safe, compliant, and personalised gaming experience. The information we collect falls into several categories, depending on how you interact with the platform.

Information You Provide Directly

When you register an account, make a deposit, request a withdrawal, or contact our support team, you voluntarily provide us with personal information. This includes:

• Registration data: Full legal name, date of birth, email address, mobile number, and preferred payment method.
• Identity verification (KYC) documents: National identity card, passport, or other government-issued photo ID; proof of address; payment account evidence (for example, a bKash or Nagad account screenshot).
• Financial data: Deposit and withdrawal history, transaction references, and payment method details. 999kg does not store full card numbers; payment processing is handled by compliant payment processors.
• Communications: Messages exchanged with our support team via live chat or email, including the content and timestamps of those communications.
• Responsible gaming declarations: Self-exclusion requests, deposit limit settings, and any voluntary statements you make regarding your gambling habits.

Information Collected Automatically

When you access the 999kg platform, certain technical data is collected automatically by our systems, including:

• Device and browser data: IP address, browser type and version, operating system, screen resolution, and device identifiers.
• Session data: Login timestamps, session duration, pages visited, game sessions started, bets placed, and navigation patterns.
• Geolocation data: Country and city-level location derived from your IP address. We use this data to verify geographic eligibility and detect potential fraud. 999kg does not collect precise GPS-level location data.
• Cookie and tracking data: Data collected via cookies and similar tracking technologies as described in Section 4 of this policy.

Information from Third Parties

In certain circumstances 999kg may receive personal data about you from third parties, including:

• Payment processors (such as bKash, Nagad, Rocket, and Upay) who confirm the outcome and reference of a transaction.
• Identity verification service providers used to cross-check the accuracy of KYC documents.
• Fraud prevention and anti-money laundering databases where we are required to screen transactions.
• Marketing affiliates who referred you to 999kg, limited to a referral identifier used for commission tracking only.

999kg processes your personal data only for specific, legitimate purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The following table summarises our primary processing activities.

Automated Decision-Making

999kg uses automated systems for fraud detection, transaction monitoring, and responsible gaming alerts. These systems may trigger automated actions such as temporary account holds or flagging a transaction for manual review. Where a significant decision affecting your account is made solely by automated means, you have the right to request human review of that decision by contacting our support team.

Marketing Communications

999kg may send promotional emails, SMS notifications, and in-platform messages about bonuses, tournaments, and seasonal promotions relevant to your account and location in Bangladesh. You may opt out of marketing communications at any time by updating your notification preferences in your account settings or by requesting opt-out via live chat. Opting out of marketing communications does not affect transactional messages (such as deposit confirmations or withdrawal notifications), which are part of the service contract.

999kg does not sell your personal data. We share data with third parties only to the extent necessary to operate the platform and fulfil our legal obligations. All third-party partners who receive personal data from 999kg are bound by contractual data-protection obligations.

Payment Processors

To process deposits and withdrawals, 999kg shares transaction data with payment service providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and USDT TRC-20 network operators. These providers receive only the minimum data necessary to execute and confirm a transaction — typically a transaction reference, amount, and account identifier. They do not receive your full game history, betting activity, or KYC documents.

Identity Verification Providers

During KYC verification, your identity documents and personal data may be shared with approved identity verification service providers who cross-check the authenticity of documents against secure databases. All such providers operate under strict data-processing agreements and may not use your data for any purpose other than the verification service they provide to 999kg.

Game Technology Providers

Game software providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive your anonymised player session data for game integrity, audit, and responsible gaming monitoring purposes. These providers do not receive your name, payment details, or contact information.

Fraud Prevention and Compliance

999kg may share data with fraud prevention databases, anti-money laundering screening services, and self-exclusion registries where we have a legal obligation or legitimate interest to do so. If criminal activity is identified or suspected, we may share relevant data with law enforcement authorities in accordance with applicable law.

Marketing Affiliates

If you arrived at 999kg through an affiliate referral link, we share a confirmation of your registration and deposit activity — expressed as aggregated commission-qualifying events — with the referring affiliate. We do not share your name, contact details, or any personal identifiers with affiliates beyond the minimum needed for commission tracking.

Corporate Transfers

In the event of a merger, acquisition, or sale of all or part of the 999kg business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the applicable privacy protections will remain in effect.

999kg uses cookies and similar tracking technologies to ensure the platform functions correctly, to keep your session secure, and to understand how users navigate the site so we can improve the experience. This section explains the types of cookies we use and how you can manage them.

What Are Cookies?

Cookies are small text files stored on your device by your web browser when you visit a website. They allow the website to remember information about your visit — such as your language preference or login state — so you do not have to re-enter it each time. Cookies cannot execute code or deliver viruses; they are purely data-storage files.

Types of Cookies We Use

Managing Your Cookie Preferences

You can control cookie behaviour through your web browser settings. Most modern browsers allow you to view, block, or delete cookies stored by specific websites. Blocking essential cookies will impair your ability to log in and use real-money features on the 999kg platform. Instructions for managing cookies are available in the help documentation for Chrome, Firefox, Safari, Edge, and other major browsers.

No Cross-Site Tracking

999kg does not use third-party advertising cookies or tracking pixels to follow your activity outside of the 999kg platform. We do not participate in cross-site behavioural advertising networks. Any analytics data we collect is anonymised and used solely to improve the 999kg service.

999kg retains your personal data for as long as necessary to fulfil the purposes for which it was collected, to comply with our legal and regulatory obligations, and to resolve disputes or enforce agreements. We apply the principle of data minimisation: once data is no longer required, it is securely deleted or anonymised.

Account Data

Personal data associated with your 999kg account is retained for the duration of your account's active life, plus a minimum of 5 years following account closure. This extended retention period is required for anti-money laundering compliance and to support any post-closure dispute resolution processes.

KYC Documents

Identity verification documents submitted for KYC purposes are retained for a minimum of 5 years from the date of submission or from the date of account closure, whichever is later. Documents are stored in encrypted form with access strictly limited to compliance personnel.

Transaction Records

All deposit, withdrawal, and betting transaction records are retained for a minimum of 7 years from the date of the transaction. This retention period satisfies financial record-keeping requirements and supports long-term fraud investigations where necessary.

Support Communications

Live chat transcripts and email correspondence are retained for a period of 3 years from the date of the interaction. This allows us to investigate complaints and disputes that may arise after the original conversation took place.

Analytics Data

Anonymised platform analytics data (from which no individual user can be identified) is retained indefinitely for platform improvement purposes. Non-anonymised session logs are deleted within 90 days of collection.

Data Location

999kg stores user data on secure servers. Where data is processed or stored outside of Bangladesh, 999kg ensures that appropriate contractual safeguards are in place to protect your data to an equivalent standard as would apply domestically. If you wish to know more about where your specific data is stored, contact our support team.

999kg is committed to respecting and upholding your rights over your personal data. The following rights are available to all registered users of the 999kg platform. To exercise any of these rights, contact our support team via live chat and our compliance team will respond within 5 business days.

Right of Access

You have the right to request a copy of all personal data that 999kg holds about you. Upon a verified request, we will provide a structured summary of your account data, transaction history, KYC records, and any other personal information associated with your account. We will respond to access requests within 30 days of receipt.

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For minor corrections such as a misspelled address or outdated phone number, contact support directly. For changes to core identity data (name, date of birth), updated KYC documentation will be required.

Right to Erasure

You may request that 999kg delete your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been processed unlawfully. Please note that certain data — particularly KYC documents and transaction records — must be retained for the minimum periods described in Section 5 to satisfy our legal obligations. Erasure requests will be assessed on a case-by-case basis.

Right to Restrict Processing

You have the right to request that 999kg restricts the processing of your personal data in certain circumstances, such as while the accuracy of data is being contested, or while a complaint is being investigated. During a restriction period, 999kg will continue to store your data but will not use it for processing beyond what is strictly necessary.

Right to Data Portability

Where data has been provided by you and processed on the basis of your consent or a contract, you have the right to receive that data in a structured, commonly used, machine-readable format (such as CSV or JSON). You may also request that we transmit it directly to another controller where technically feasible.

Right to Object

You have the right to object to the processing of your personal data where that processing is based on legitimate interests. In particular, you have an unconditional right to object to direct marketing communications. Where you object to processing for legitimate interests, 999kg will cease that processing unless we can demonstrate compelling legitimate grounds that override your rights.

Rights Related to Automated Decision-Making

Where a decision that significantly affects you has been made solely by automated means, you have the right to request human review of that decision, to express your point of view, and to challenge the outcome. This applies, for example, to automated account holds triggered by our fraud detection systems.

Protecting your personal data from unauthorised access, loss, or misuse is a core operational priority at 999kg. We implement a layered security architecture that combines technical, administrative, and physical controls.

Technical Controls

• Transport encryption: All data transmitted between your browser or app and 999kg servers is encrypted using TLS 1.2 or higher with 256-bit AES ciphers.
• At-rest encryption: Sensitive database fields — including identity document references, payment account details, and personal identifiers — are encrypted at rest using AES-256.
• Two-factor authentication (2FA): 999kg supports 2FA for user accounts and enforces it for all internal administrative access.
• Intrusion detection: Our infrastructure is monitored 24/7 by automated intrusion detection systems that flag and respond to anomalous access patterns in real time.
• DDoS protection: The 999kg platform is protected against distributed denial-of-service attacks via enterprise-grade network filtering.
• Regular penetration testing: 999kg engages independent security professionals to conduct penetration tests on a periodic basis to identify and remediate vulnerabilities before they can be exploited.

Administrative Controls

• Access to personal data is restricted on a need-to-know basis. Staff members are granted only the minimum access level required for their role.
• All staff with access to personal data undergo regular data protection training.
• Access credentials are subject to periodic review and are immediately revoked when a staff member's role changes or they leave the organisation.
• Data processing activities are documented and subject to internal audit on a regular basis.

Breach Response

In the event of a personal data breach that poses a risk to users, 999kg will notify affected users without undue delay and will take immediate remedial action to contain the breach and prevent further exposure. Our incident response team is on standby 24 hours a day to manage security events.

Your Role in Security

While 999kg takes extensive measures to protect your data, you also play an important role. We recommend that you use a strong, unique password for your 999kg account, enable two-factor authentication where available, never share your login credentials with anyone, and log out of your account when using shared devices. If you suspect that your account has been compromised, contact our support team immediately via live chat.

999kg reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or the services we offer. When we make a material change to this policy, we will notify registered users via email or an in-platform notification at least 7 days before the change takes effect.

How We Notify You

Material updates to this Privacy Policy will be communicated by:

• A notification banner displayed when you next log in to your 999kg account.
• An email sent to the address registered on your account.
• An updated "Effective Date" and "Last Updated" date at the top of this page.

We encourage you to review this Privacy Policy periodically to stay informed about how 999kg protects your data. Continued use of the platform after a notified policy update constitutes acceptance of the revised terms.

Minor Updates

Non-material changes — such as clarifications of existing language, corrections of typographical errors, or administrative updates — may be made without prior notice. The "Last Updated" date at the top of this document will always reflect the most recent revision, whether material or minor.

Contact Our Privacy Team

If you have any questions, concerns, or complaints about this Privacy Policy or about how 999kg handles your personal data, please contact our support team. We are available 24 hours a day, 7 days a week via live chat, and our average response time is 2–5 minutes. You may also contact us by email at [email protected] — this is displayed as plain text and is not a clickable link. For formal data subject requests, please have your account username and registered mobile number ready to facilitate identity verification.

Children's Privacy

The 999kg platform is strictly for adults aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. If we become aware that a user is under 18, the account will be immediately suspended, all associated data will be securely deleted, and any deposits made will be refunded to the originating payment method after verification. If you believe a minor has created a 999kg account, please notify our support team immediately.