Privacy Policy — 999beat Bangladesh Online Casino

Section 01

Introduction and Scope

This Privacy Policy is issued by 999beat ("the Platform", "we", "us", "our") and applies to all personal data collected from individuals ("you", "the Player") who access or use the 999beat website at https://999beat.club, including all sub-pages, mobile browser interfaces, and any related services provided by the platform.

By creating a 999beat account, depositing funds, placing a bet, or otherwise using any feature of the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

// SCOPE 1.1 Who This Policy Applies To: This Privacy Policy applies to all registered players, visitors who browse the 999beat website without registering, and individuals who contact 999beat support. It applies regardless of the device or browser used to access the platform and regardless of whether the user is located in Dhaka, Chittagong, Sylhet, Khulna, or any other part of Bangladesh.

// SCOPE 1.2 Relationship to Other Documents: This Privacy Policy should be read alongside the 999beat Terms & Conditions and the Responsible Gaming Policy, both of which reference data processing activities. In the event of any conflict between those documents and this Privacy Policy on a data-protection matter, this Privacy Policy takes precedence.

// SCOPE 1.3 Language: This Privacy Policy is written in English. If you require assistance understanding any clause, please contact us at [email protected] before using the platform.

Section 02

Data We Collect

999beat collects personal data through several channels: information you provide directly during registration and account management, data generated automatically when you use the platform, and data received from third-party payment providers in the course of processing your transactions.

Data Category	Specific Data Points	Collection Method
Identity Data	Full legal name, date of birth, gender, National ID number (where provided for KYC)	Provided by player at registration or during KYC verification
Contact Data	Mobile phone number, email address	Provided by player at registration
Payment Data	bKash/Nagad/Rocket account numbers, transaction IDs, deposit and withdrawal amounts in ৳ BDT	Provided by player and received from payment processors
Account Activity Data	Bets placed, games played, session durations, bet amounts, win/loss records	Generated automatically through platform use
Device and Technical Data	IP address, device type, browser type and version, operating system, screen resolution	Collected automatically via server logs and browser signals
Communication Data	Support chat transcripts, email correspondence, feedback submissions	Provided by player through support channels
Responsible Gaming Data	Deposit limits set, self-exclusion requests, session time reminders configured	Recorded when player activates responsible gaming tools

// DATA 2.1 Data You Must Provide: Certain data is mandatory for account creation and platform use. This includes your full name, date of birth, mobile number, and a valid payment account registered in your own name. Without this information, 999beat cannot create a verified account or process financial transactions on your behalf.

// DATA 2.2 Data We Do Not Collect: 999beat does not collect biometric data (fingerprints, facial scans), does not record phone calls, and does not access your device's microphone, camera, or contacts. We do not collect sensitive personal data such as ethnicity, religion, political views, or health information unless it is directly relevant to a responsible gaming self-exclusion request you have initiated.

Section 03

How We Use Your Data

999beat processes your personal data only for specific, documented purposes. We do not use your data for any purpose that is incompatible with those listed below without first obtaining your explicit consent or providing advance notice.

// USE 3.1 Account Management: We use your identity and contact data to create and maintain your 999beat account, authenticate your login sessions, communicate account-related information, and reset credentials when requested. Your account data also enables us to enforce the single-account policy described in the Terms & Conditions.

// USE 3.2 Payment Processing: Your payment account details (bKash number, Nagad number, transaction references) are used exclusively to process deposits and withdrawals in Bangladeshi Taka (৳ BDT). Payment data is shared with the relevant mobile banking operator only to the extent necessary to complete the transaction. We do not store your full mobile banking PIN or password.

// USE 3.3 Identity Verification (KYC): We use identity and document data to verify your age (18+ requirement), confirm that your payment method is registered in your own name, and comply with anti-money laundering obligations. KYC verification may be triggered at registration or at any point during your use of the platform.

// USE 3.4 Fraud and Security: Device data, IP addresses, and account activity logs are analysed to detect and prevent fraudulent activity, account takeover attempts, bonus abuse, and money laundering. Automated systems flag unusual patterns for manual review by our security team.

// USE 3.5 Responsible Gaming Monitoring: Betting behaviour and session data are monitored to identify patterns consistent with problematic gambling. Where such patterns are identified, our responsible gaming team may proactively contact the player or apply protective limits in line with the Responsible Gaming Policy.

// USE 3.6 Platform Improvement: Aggregated and anonymised usage data (game popularity, session length distributions, deposit channel preferences) is used internally to improve the 999beat platform, optimise the user experience for Bangladeshi players, and plan new features. This analysis does not identify individual players.

// USE 3.7 Marketing Communications: With your consent, we may send you promotional emails or SMS messages about new games, bonuses, and seasonal offers (for example, Eid promotions or BPL cricket betting markets). You may withdraw marketing consent at any time by contacting [email protected]. Withdrawal of marketing consent does not affect your ability to continue using the platform.

Section 04

Legal Basis for Processing

For each category of personal data that 999beat processes, there is a documented legal basis. The four primary bases on which we rely are: (a) contractual necessity, (b) legitimate interests, (c) legal obligation, and (d) your explicit consent.

Processing Purpose	Legal Basis
Account creation and management	Contractual necessity — required to fulfil the player agreement
Payment processing (deposits and withdrawals)	Contractual necessity
Identity verification (KYC and age check)	Legal obligation and contractual necessity
Fraud prevention and security monitoring	Legitimate interests of 999beat and protection of other players
Responsible gaming monitoring	Legitimate interests and legal/ethical duty of care
Platform analytics and improvement	Legitimate interests (using anonymised/aggregated data only)
Direct marketing communications	Your explicit consent (opt-in)

ℹ Note on Legitimate Interests Where 999beat relies on legitimate interests as a legal basis, we have conducted an internal balancing assessment to confirm that our interests do not override your fundamental data privacy rights. We will provide a copy of this assessment on request by contacting [email protected].

Section 05

Data Sharing and Third Parties

999beat does not sell or rent your personal data. We share data with third parties only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.

// SHARE 5.1 Payment Processors: To complete deposits and withdrawals, we share relevant transaction data with your chosen mobile banking provider — bKash, Nagad, Rocket (Dutch-Bangla Bank), or Upay. This sharing is limited to the data required to initiate and confirm the transaction (account number, amount in ৳ BDT, transaction reference). Each payment provider operates under its own privacy policy.

// SHARE 5.2 Game Software Providers: When you play a game powered by a third-party provider — such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi — technical session data (a pseudonymous session token, game outcome data, and your currency) is shared with that provider's game server. Your real name and payment details are not shared with game providers.

// SHARE 5.3 Legal and Regulatory Disclosure: If required by a valid legal process, court order, or lawful government request, 999beat may disclose personal data to the relevant authority. We will notify you of any such disclosure to the extent permitted by law, and we will not proactively share data with authorities beyond what is legally mandated.

// SHARE 5.4 Business Transfers: In the event of a merger, acquisition, or sale of the 999beat platform, your personal data may be transferred to the acquiring entity. You will be notified in advance of any such transfer, and the acquiring party will be required to honour the commitments made in this Privacy Policy.

// SHARE 5.5 No Advertising Networks: 999beat does not share your personal data with advertising networks, data brokers, social media platforms, or any third party for the purpose of targeting you with advertisements outside of the 999beat platform.

Section 06

Cookies and Tracking Technologies

999beat uses a minimal set of cookies and similar browser-based technologies to operate the platform securely and to understand how it is being used. The following table documents every category of cookie used on the 999beat platform.

Cookie Category	Purpose	Duration	Required?
Session Cookies	Maintain your authenticated login session while you navigate the platform	Deleted when browser closes	Yes — essential
Security Cookies	CSRF token protection, fraud-signal collection, bot detection	Session or up to 24 hours	Yes — essential
Preference Cookies	Remember your language preference and display settings	Up to 12 months	No — functional
Analytics Cookies	Aggregate page-view counts, session durations, feature usage for internal reporting (no individual profiling)	Up to 6 months	No — optional

// COOKIE 6.1 Managing Cookies: You can control and delete cookies through your browser settings. Disabling essential cookies may prevent you from logging in or using platform features correctly. Disabling analytics or preference cookies will not affect your ability to place bets or manage your account. Refer to your browser's help documentation for instructions on managing cookies on your specific device.

// COOKIE 6.2 No Third-Party Advertising Trackers: 999beat does not embed third-party advertising pixels, social media tracking scripts, or retargeting tags on any page of the platform. The cookies described in the table above are the complete set of tracking technologies we deploy.

Section 07

Data Security Measures

999beat takes the security of your personal data seriously. We implement a layered set of technical and organisational security controls designed to protect your data against unauthorised access, loss, alteration, or disclosure.

// SEC 7.1 Encryption in Transit: All data transmitted between your device and 999beat servers is encrypted using TLS 1.2 or higher. This applies to account login, payment transactions, and all API communications. You can verify the presence of encryption by confirming the HTTPS prefix and padlock indicator in your browser's address bar when visiting https://999beat.club.

// SEC 7.2 Encryption at Rest: Sensitive personal data — including identity documents submitted for KYC and payment account references — is encrypted at rest using AES-256 or equivalent encryption on our database infrastructure. Access keys are managed under a strict key rotation policy.

// SEC 7.3 Access Controls: Access to player personal data is restricted to authorised 999beat personnel on a strict need-to-know basis. All internal access to personal data is logged and subject to periodic audit. No member of the 999beat team has access to player account passwords, which are stored as one-way cryptographic hashes.

// SEC 7.4 Incident Response: In the event of a data security incident that affects your personal data, 999beat will assess the severity and scope of the breach, take immediate steps to contain it, and notify affected players via their registered contact details within a reasonable timeframe. We maintain a documented incident response procedure reviewed at least annually.

⚠ Your Role in Account Security The security measures described above protect data on 999beat's infrastructure. You are responsible for protecting your own login credentials. Never share your 999beat password with anyone. 999beat support will never ask for your password. If you believe your account has been accessed without your authorisation, contact [email protected] immediately.

Section 08

Data Retention Periods

999beat retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention schedule applies to the main categories of data we hold.

Data Category	Retention Period	Basis for Retention
Account Registration Data	Duration of account + 5 years after closure	Anti-money laundering record-keeping obligations
KYC / Identity Documents	Duration of account + 5 years after closure	Regulatory compliance and fraud investigation
Transaction Records	Duration of account + 5 years after closure	Financial record-keeping and dispute resolution
Betting and Game History	Duration of account + 3 years after closure	Dispute resolution, responsible gaming review
Support Correspondence	3 years from last interaction	Service quality review and dispute resolution
Analytics / Session Logs	Up to 12 months (anonymised after 30 days)	Platform improvement (anonymised data only)
Marketing Consent Records	Until consent is withdrawn + 1 year	Evidence of consent for compliance purposes

// RET 8.1 Deletion and Anonymisation: At the end of the applicable retention period, personal data is either securely deleted from our systems or irreversibly anonymised so that it can no longer be linked to any individual. Anonymised data may be retained indefinitely for statistical and research purposes.

// RET 8.2 Early Deletion Requests: If you request deletion of your personal data before the end of the applicable retention period, 999beat will delete or anonymise all data for which there is no overriding legal obligation to retain. Data subject to mandatory retention periods (e.g., financial records) will be retained only for the minimum period required by law and will not be used for any other purpose during that time.

Section 09

Your Rights Over Your Data

As a 999beat player, you hold a set of rights over your personal data. These rights may be exercised at any time by submitting a written request to [email protected]. We aim to respond to all data rights requests within 30 calendar days of receipt.

// RIGHT 9.1 Right of Access: You have the right to request a copy of all personal data that 999beat holds about you. This includes your registration details, transaction history, betting records, and any KYC documents on file. We will provide this data in a structured, readable format.

// RIGHT 9.2 Right to Rectification: If any personal data 999beat holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Where a correction affects your payment details (for example, an updated bKash number), we may require you to re-verify your identity before processing the change.

// RIGHT 9.3 Right to Erasure: You have the right to request that 999beat delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where it has been processed unlawfully. Erasure requests will be fulfilled subject to any overriding legal retention obligations described in Section 08.

// RIGHT 9.4 Right to Data Portability: Where data is processed on the basis of your consent or a contractual relationship, you have the right to receive a machine-readable copy of that data for transfer to another service. We will provide data in JSON or CSV format upon request.

// RIGHT 9.5 Right to Object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling related to responsible gaming monitoring or fraud detection. Note that objecting to certain processing activities may affect our ability to provide services to you.

// RIGHT 9.6 Right to Withdraw Consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

ℹ How to Exercise Your Rights To exercise any of the rights listed above, send a written request to [email protected] with the subject line "Data Rights Request". Please include your registered account name and mobile number so we can verify your identity before processing the request. There is no fee for standard data rights requests. We reserve the right to charge a reasonable administrative fee for requests that are manifestly excessive or repetitive.

Section 10

Children's Privacy

🔞 Strict 18+ Age Policy 999beat is an adult gambling platform. Access is strictly prohibited for any individual under the age of 18 years. We do not knowingly collect, store, or process personal data belonging to anyone under 18. If you are a parent or guardian and believe that a minor has created a 999beat account or submitted personal data to the platform, please contact us immediately at [email protected].

// CHILD 10.1 Age Verification at Registration: 999beat collects date-of-birth information at the point of account registration and may request government-issued identification to verify age during the KYC process. Accounts registered with a false date of birth will be closed upon discovery, all funds will be forfeited, and the data submitted will be deleted or retained only for the minimum period necessary to document the breach.

// CHILD 10.2 Parental Controls: 999beat encourages parents and guardians in Bangladesh to use device-level content restriction tools to prevent minors from accessing online gambling platforms. If you share a mobile device with younger family members, consider enabling parental control settings to restrict access to gambling websites. Additional guidance is available on our Responsible Gaming page.

Section 11

Changes to This Policy

// CHANGE 11.1 Right to Update: 999beat reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, platform features, or applicable legal requirements. When we make material changes, we will update the "Last Revised" date at the top of this page and, where the changes are significant, notify registered players via their registered email address or mobile number.

// CHANGE 11.2 Continued Use as Acceptance: Your continued use of the 999beat platform after any revision to this Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes made, you should cease using the platform and contact [email protected] to request account closure and data deletion in accordance with Section 09.

// CHANGE 11.3 Version History: Previous versions of this Privacy Policy are available on request by contacting our support team. We maintain an internal archive of all past versions with their effective dates for compliance documentation purposes.

Section 12

Contact and Data Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 999beat handles your personal data, please contact our support team using the details below. We aim to respond to all privacy-related enquiries within 5 business days.

// CONTACT 12.1 Support Email: All privacy and data rights requests should be directed to [email protected] with the subject line "Privacy Enquiry" or "Data Rights Request". Please include your registered account mobile number so we can verify your identity.

// CONTACT 12.2 Support Hours: Our support team is available 24 hours a day, 7 days a week, operating on Bangladesh Standard Time (BST, UTC+6). You can expect an initial response to privacy enquiries within one business day.

// CONTACT 12.3 Platform Address: 999beat operates the platform at https://999beat.club and all data-related correspondence should reference this domain to ensure your enquiry is routed to the correct team.

ℹ Response Timeframe We commit to acknowledging all privacy and data rights requests within 2 business days of receipt and providing a full response within 30 calendar days. For complex requests — such as full data exports or detailed erasure requests — we may require up to 60 days and will notify you if an extension is necessary.

999beat Privacy Policy

Introduction and Scope

Data We Collect

How We Use Your Data

Legal Basis for Processing

Cookies and Tracking Technologies

Data Security Measures

Data Retention Periods

Your Rights Over Your Data

Children's Privacy

Changes to This Policy

Contact and Data Enquiries

Ready to Play Responsibly?