999aq Privacy Policy

This Privacy Policy ("Policy") describes how 999aq ("we", "us", "the Platform") collects, processes, stores and shares personal information relating to users ("you", "Player") who access or use the 999aq website and any associated mobile platform, games, sports betting services and payment facilities. By registering an account or continuing to use the 999aq platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.

This Policy applies to all registered players accessing 999aq from Bangladesh and any other jurisdiction. We treat the protection of personal data as a fundamental obligation. 999aq does not sell personal data. We do not share personal data with advertisers or marketing networks. All data collected by 999aq is used exclusively for the purposes set out in this Policy.

Our Six Privacy Principles

Every data practice at 999aq is guided by these six principles. They represent our commitment to Bangladesh players and to responsible data stewardship.

• Account creation and management: we use identity and contact data to register your account, verify your age and identity through KYC, and maintain accurate account records throughout the account lifecycle.
• Payment processing: we use financial data (bKash, Nagad, Rocket wallet numbers and transaction IDs) to process deposits, approve withdrawals and maintain transaction audit trails required for AML compliance.
• Responsible gaming: we use gaming activity data to monitor play patterns, identify signs of problem gambling behaviour and trigger appropriate responsible gaming interventions such as spending alerts, cooling-off suggestions and self-exclusion prompts.
• Security and fraud prevention: we use technical data (IP addresses, device fingerprints, session logs) to detect unauthorised account access, identify suspicious patterns indicative of fraud, and protect the integrity of the platform for all players.
• Customer support: we use contact data and support records to respond to your enquiries, resolve disputes and improve the quality of our support service. Support interactions may be retained for quality monitoring and compliance purposes.
• Service improvements and analytics: we use aggregated, anonymised gaming and technical data to understand how the platform is used, identify performance issues and develop new features that improve the experience for Bangladesh players. Anonymised analytics data cannot be used to identify any individual.

• Contractual necessity: data required to operate your account, process your payments and deliver gaming services is processed because it is necessary to fulfil our contract with you. Without this processing, we cannot provide the service.
• Legal obligation: KYC identity and age verification, AML transaction monitoring and fraud investigation data are processed because we are required to do so to comply with applicable legal and regulatory requirements.
• Legitimate interests: fraud detection, platform security monitoring, responsible gaming analytics and customer support quality monitoring are conducted under our legitimate interest in protecting players and maintaining a safe, fair platform.
• Consent: where processing is not required by contract or law — for example sending promotional email campaigns — we will only do so with your explicit, freely given, informed consent. You may withdraw this consent at any time.

• Payment processors: bKash, Nagad, Rocket, Upay and any other supported payment provider receive only the transaction data necessary to execute your deposit or withdrawal instruction. These providers operate under their own data protection obligations and are not permitted to use your data for any other purpose.
• KYC and identity verification providers: third-party identity verification services receive the identity documents you submit during KYC for the sole purpose of authenticating your identity and confirming your age eligibility. Verified results are returned to 999aq; document images are not retained by 999aq beyond the period required by applicable law.
• Game content providers: game studios and platform providers (such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi) may receive session identifiers and wagering data necessary to operate their games within the 999aq platform. These providers do not receive your name, contact details or payment information.
• Legal and regulatory authorities: where 999aq is required by applicable law, court order or regulatory direction to disclose personal data, we will comply with that obligation. Where permitted, we will notify you before making such a disclosure. We are not required to notify you if doing so would obstruct a lawful investigation.

• Strictly necessary cookies: these are essential for the platform to function. They manage your login session, maintain your account state during play, and ensure secure payment handoffs. These cookies cannot be disabled without breaking core platform functionality.
• Functional cookies: these remember your preferences (for example preferred language, last viewed game category) to personalise your experience on return visits. They do not track activity outside the 999aq platform.
• Performance cookies: these collect anonymised, aggregated data about how pages are used — for example which pages load slowly or produce errors — to help us diagnose technical problems and improve platform stability. No individual player can be identified from performance cookie data.

Active account data is retained for the full duration your account is open and active. Following account closure, identity and KYC records are retained for a minimum of five years in compliance with standard AML record-keeping requirements. Financial transaction records (deposit and withdrawal logs) are retained for a minimum of five years following the date of the transaction. Gaming activity logs are retained for three years following account closure or the date of the last recorded activity, whichever is later. Support correspondence is retained for two years following the date of the final message in the thread. Technical logs (IP addresses, session data) are retained for twelve months on a rolling basis and then permanently deleted. When the applicable retention period expires, data is securely deleted or anonymised so that it can no longer be associated with any identifiable individual.

• Right of access: you may request a copy of all personal data 999aq holds about you, together with information about how it is being used, where it came from, and with whom it has been shared.
• Right to rectification: if any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. We will update inaccurate data promptly upon receiving a valid correction request.
• Right to erasure: subject to legal retention requirements, you may request that 999aq delete your personal data. Where erasure is not possible due to a legal obligation (for example AML retention rules), we will inform you of the specific reason and the date on which the data will be eligible for deletion.
• Right to restrict processing: in certain circumstances (for example while a correction request is being investigated), you may request that 999aq temporarily restrict processing of your data. During a restriction, we will continue to hold the data but will not actively use it.
• Right to withdraw consent: where processing is based on consent (for example promotional email communications), you may withdraw that consent at any time by contacting support. Withdrawal of consent does not affect the lawfulness of processing that took place before withdrawal.

While 999aq applies industry-standard security practices, no online platform can guarantee absolute security against all threats. If you suspect that your account has been accessed without your authorisation, contact [email protected] immediately. We will respond to all security incident reports as a priority matter and will notify affected players if a data breach occurs that is likely to result in a risk to your rights.

Contact Our Privacy Team

For any questions about this Privacy Policy, to exercise your data rights, or to report a privacy concern, please contact the 999aq support team. We aim to respond to all privacy-related enquiries within 2 business days.