9t99 Privacy Policy

9t99 collects personal information from players through several distinct channels: directly during account registration and verification, automatically through your use of the platform, and occasionally from trusted third-party service providers who assist in delivering our services. We collect only what is necessary for the purposes set out in this policy.

1.1 Information You Provide Directly

When you register a 9t99 account, make a deposit or withdrawal, contact our support team, or participate in a promotion, you voluntarily provide us with personal information, which may include:

• Identity Data: Full legal name, date of birth, gender, and National ID (NID) or passport number.
• Contact Data: Email address, mobile phone number, and residential address (including district, division, and postal code for players in Bangladesh).
• Financial Data: bKash, Nagad, Rocket, or Upay mobile wallet numbers; bank account details for players using Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, or other supported institutions; and card details where Visa or Mastercard payments are enabled.
• KYC Documents: Copies of government-issued photo identification, proof of address documents, and payment method confirmation screenshots submitted during the verification process.
• Account Preferences: Language preference, communication opt-in settings, deposit limits, and responsible gaming configurations set by you in your account dashboard.
• Support Communications: The content of any messages, complaints, or feedback submitted to the 9t99 support team via email or live chat.

1.2 Information Collected Automatically

When you access 9t99 through a browser or mobile device, certain technical and behavioural data is collected automatically as part of normal platform operations:

• Device & Technical Data: IP address, device type, operating system version, browser type and version, screen resolution, and device identifiers.
• Usage Data: Pages visited, games played, bet amounts, session duration, navigation paths, search queries entered within the platform, and feature interactions.
• Geolocation Data: Approximate geographic location derived from your IP address, used to verify that you are accessing 9t99 from a permitted jurisdiction. We do not collect precise GPS coordinates.
• Cookie and Session Data: Information stored in browser cookies and session tokens for authentication and analytics purposes — see Section 4 for full details.

1.3 Information from Third Parties

9t99 may receive supplementary personal data from third-party sources in limited circumstances, including:

• Payment processors and mobile financial service providers (bKash, Nagad, Rocket) confirming the status or ownership of a payment method.
• Identity verification service providers engaged to assist with KYC compliance, who may cross-reference submitted documents against national databases.
• Fraud detection and anti-money-laundering (AML) screening services that flag high-risk patterns or politically exposed persons (PEPs).

9t99 processes personal data only for specific, legitimate purposes. The table below sets out the primary purposes for which we use your information and the lawful basis upon which each processing activity rests.

9t99 does not use automated decision-making or profiling in any manner that produces significant legal effects on players, except for fraud-risk scoring systems which are subject to human review before any adverse action is taken on an account.

9t99 does not sell, rent, or trade personal player data to any third party for their own commercial purposes. We share personal information only in the limited circumstances described below, and only to the extent strictly necessary for each purpose.

3.1 Service Providers & Data Processors

9t99 engages trusted third-party service providers to assist in delivering the platform. These providers act as data processors under contractual data processing agreements and are permitted to use personal data only as directed by 9t99:

• Payment Processors: bKash, Nagad, Rocket, Upay, and banking partners receive transactional data necessary to process deposits and withdrawals in BDT.
• KYC Verification Providers: Identity document verification services receive copies of submitted identification documents to perform automated and manual verification checks.
• Game Software Providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised player session data for game performance monitoring and fairness auditing purposes. No directly identifiable personal data is shared with game studios.
• Cloud Hosting & Infrastructure: 9t99 uses secure cloud hosting services to store platform data. These providers operate under strict data security contracts and do not access player data for their own purposes.
• Analytics & Fraud Detection: Aggregated or pseudonymised data may be processed by analytics and security tooling to identify unusual activity patterns and improve platform security.

3.2 Legal & Regulatory Disclosure

9t99 may disclose personal data to government authorities, law enforcement agencies, or regulatory bodies where required to do so by applicable law or a valid legal order. Such disclosures will be limited to the minimum information legally required and will be documented in 9t99's internal compliance records.

3.3 Business Transfers

In the event that 9t99 undergoes a merger, acquisition, asset sale, or restructuring, player personal data may form part of the transferred assets. In such circumstances, 9t99 will provide advance notice to affected players and ensure that the successor entity is bound by privacy obligations no less protective than those set out in this policy.

9t99 uses cookies and similar browser-based technologies to operate core platform functionality, maintain your logged-in session, and gather aggregate statistics about how players navigate the site. This section explains the types of cookies we use and how you can manage them.

Managing Your Cookie Preferences

You can control which non-essential cookies are active on your device through your browser's privacy settings. Most modern browsers allow you to block or delete cookies, or to be prompted before a new cookie is stored. Please note that disabling essential session cookies will prevent you from logging in to your 9t99 account.

• Google Chrome: Settings → Privacy and Security → Cookies and other site data.
• Mozilla Firefox: Preferences → Privacy & Security → Cookies and Site Data.
• Samsung Internet (common on Android devices in Bangladesh): Settings → Privacy → Smart Anti-Tracking.

9t99 takes the security of your personal data seriously and implements a layered set of technical and organisational safeguards to protect it from unauthorised access, accidental loss, alteration, or disclosure.

Security Measures

• Transport Encryption: All communications between your browser or app and the 9t99 servers are encrypted using TLS 1.2 or higher with 256-bit AES encryption.
• Data-at-Rest Encryption: Sensitive data fields, including payment account details and KYC document files, are encrypted at rest within 9t99's database infrastructure.
• Access Controls: Internal access to personal data is restricted to authorised 9t99 staff on a strict need-to-know basis. Access logs are maintained and reviewed regularly.
• Two-Factor Authentication: Players are encouraged to enable SMS OTP two-factor authentication on their accounts, and internal staff accounts require 2FA for all data-access systems.
• Penetration Testing: 9t99 conducts periodic security assessments and penetration tests to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the event of a confirmed personal data breach that poses a risk to players, 9t99 will notify affected account holders within 72 hours of becoming aware of the incident, detailing the nature of the breach, data affected, and steps taken to mitigate the impact.

Data Retention Schedule

9t99 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

On expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with an identified or identifiable individual.

As a 9t99 player, you hold the following rights in relation to your personal data. These rights may be exercised at any time by contacting our privacy team at [email protected] with the subject line "Privacy Rights Request". We aim to acknowledge all rights requests within 5 business days and to provide a substantive response within 30 calendar days.

Where a rights request relates to data that 9t99 is legally required to retain — for instance, transaction records subject to AML obligations — we will explain the applicable legal basis and provide the broadest response possible within those constraints.

The 9t99 platform integrates with a number of third-party services to deliver its full range of features. While 9t99 takes care in selecting reputable partners, we are not responsible for the privacy practices of independent third parties. This section provides transparency about the main third-party integrations and their data implications.

Game Software Providers

9t99 hosts games developed by leading providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you launch a game, a connection is established directly with the game provider's servers. These providers may collect anonymised session data for the purpose of game performance monitoring, RNG certification compliance, and responsible gaming auditing. 9t99 does not share your name, contact details, or financial information with game providers.

Payment Service Providers

Transactions processed via bKash, Nagad, Rocket, Upay, Visa, or Mastercard are handled through the respective payment provider's own secure infrastructure. These providers operate under their own privacy policies and are independently responsible for how they handle transaction data on their end. 9t99 shares only the minimum transaction data necessary to complete payment processing.

Platform Security Tools

9t99 uses third-party security and fraud detection services that may set security cookies or collect device fingerprinting data on the 9t99 domain. This data is used exclusively for the purpose of identifying suspicious activity and protecting player accounts — it is not used for advertising or profiling.

Updates to This Privacy Policy

9t99 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, applicable law, or platform features. When material changes are made — for example, changes affecting what data we collect, how we share it, or your rights — we will notify registered players by email at the address associated with their account at least seven (7) days before the updated policy takes effect.

Non-material clarifications or corrections may be published without advance notice. The "Last Updated" date at the top of this page always reflects the most recent revision. Your continued use of 9t99 after a policy update constitutes your acceptance of the revised terms. We encourage you to review this page periodically to stay informed.

How to Contact Us

If you have any question, concern, or complaint regarding 9t99's handling of your personal data, or if you wish to exercise any of your privacy rights, please contact our privacy team using the details below. All privacy-related correspondence is handled with strict confidentiality by our compliance team.

Complaints

If you are not satisfied with how 9t99 has handled a privacy concern, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction. 9t99 encourages players to contact us directly in the first instance so that we have the opportunity to address the matter promptly and fairly.

This Privacy Policy was last reviewed and updated in January 2026. All previous versions of this policy are superseded by this document. Players who registered prior to this date are subject to this updated policy as of the effective date stated above.