Your Privacy Matters
at 999kk — Here's
How We Protect It

Introduction

This Privacy Policy ("Policy") explains how 999kk ("we", "us", "our") collects, uses, stores, shares, and protects the personal data of individuals ("you", "your") who access or use the 999kk platform at 999kk.io, including all associated games, betting services, support channels, and promotional features.

999kk is committed to handling your personal data with the highest standards of care, transparency, and integrity. We collect only the data necessary to provide our services, verify your identity, process your transactions, and comply with our legal obligations. We do not sell your personal data to any third party for commercial marketing purposes — ever.

This Policy is incorporated by reference into our Terms & Conditions and should be read alongside them. By creating an account or using the 999kk platform in any capacity, you acknowledge that you have read and understood this Privacy Policy in its entirety.

Data We Collect

We collect personal data in three principal ways: directly from you when you register, deposit, or contact support; automatically as you use the platform; and from trusted third-party sources such as payment processors and identity verification providers. The categories of personal data we process are set out in the table below.

We do not intentionally collect sensitive special-category personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (other than where provided in identity documents for KYC purposes), or health data. If you voluntarily disclose sensitive information in the course of a responsible gaming or support interaction, we will handle it with the highest level of care and restrict access to it accordingly.

How We Use Your Data

999kk processes your personal data only for specific, clearly defined purposes. We do not use your data for any purpose that is incompatible with the reason it was originally collected. The primary purposes for which we process personal data are as follows:

• Account creation and management: To register your account, verify your identity, maintain your account profile, and manage your account security settings and preferences.
• Service delivery: To enable you to deposit and withdraw funds, place wagers, access casino games and sports betting markets, claim bonuses, and use all features of the 999kk platform.
• Payment processing: To process deposits via bKash, Nagad, Rocket, Upay, and bank transfers, and to action withdrawal requests to your designated payment method in Bangladeshi Taka (BDT).
• Identity and age verification: To confirm that you are aged 21 or above, that you are the legitimate account holder, and that your identity documents are valid and authentic. 999kk has a strict 21+ policy and uses your identity data to enforce it rigorously.
• Legal and regulatory compliance: To comply with our obligations under applicable anti-money-laundering standards, fraud prevention requirements, and responsible gaming obligations, including monitoring for suspicious transaction patterns and maintaining required records.
• Responsible gaming: To administer deposit limits, self-exclusion agreements, cool-off periods, and session time reminders, and to identify patterns of play that may indicate a developing gambling problem so we can offer timely support.
• Customer support: To respond to your enquiries, resolve complaints, investigate disputes, and maintain records of our communications with you in support of those activities.
• Security and fraud prevention: To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, money laundering, and other forms of Prohibited Conduct as defined in our Terms & Conditions.
• Platform improvement: To analyse aggregated usage data in order to understand how players interact with the platform, identify technical issues, optimise game loading performance, and improve the overall user experience.
• Promotional communications: Where you have given your explicit consent, to send you personalised promotional offers, tournament alerts, and seasonal promotions relevant to your gaming interests and to Bangladesh-market events such as BPL, IPL, Eid, and Pohela Boishakh. You may withdraw this consent at any time.

Legal Basis for Processing

For each category of personal data we process, we rely on one or more of the following legal bases. We process your data only where at least one valid legal basis exists:

• Contractual necessity: Processing that is necessary to perform our contractual obligations to you under the Terms & Conditions — for example, creating your account, processing your deposits and withdrawals, and enabling gameplay. Without this processing, we cannot provide our services.
• Legal obligation: Processing that is required in order to comply with applicable laws, regulations, and standards — including anti-money-laundering verification, age verification, and retention of financial transaction records.
• Legitimate interests: Processing that serves a compelling legitimate interest of 999kk or a third party, provided that interest is not overridden by your fundamental rights and freedoms. Examples include fraud detection, platform security monitoring, and aggregated analytics for service improvement.
• Consent: Processing that you have explicitly agreed to, such as receiving promotional email communications. Where we rely on consent, you retain the right to withdraw it at any time by contacting [email protected] or updating your communication preferences within your account dashboard.
• Vital interests: In rare circumstances where processing is necessary to protect the vital interests of you or another person — for example, where we identify a responsible gaming concern requiring urgent intervention.

Data Sharing

999kk does not sell, rent, or trade your personal data to any third party for their own commercial or marketing purposes. We share your personal data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose:

• Payment processors: Your financial data (wallet identifiers, transaction references, and amounts) is shared with bKash, Nagad, Rocket, Upay, and our banking partners solely to facilitate the processing of your deposits and withdrawals in BDT. These providers process your data under their own privacy policies and applicable financial regulations.
• Identity verification providers: Where we use a third-party KYC (Know Your Customer) service to verify your identity documents, we share the relevant identity data with that provider for the sole purpose of conducting the verification check. The provider is contractually bound to process this data only for that purpose.
• Game Providers: Certain gameplay data — such as player session tokens and wager records — is transmitted to Game Providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi to enable the delivery of their games within the 999kk platform. Game Providers receive only the minimum data required to run their games correctly.
• Analytics and platform technology providers: We use trusted third-party technology vendors to support platform operations, including server infrastructure, analytics, and customer support software. These vendors act as data processors on our behalf and are contractually prohibited from using your data for any purpose other than providing services to 999kk.
• Law enforcement and regulatory authorities: We may disclose personal data to law enforcement agencies, financial intelligence authorities, or regulatory bodies where required to do so by applicable law, a court order, or a binding regulatory instruction. In such cases, we will disclose only the minimum data necessary to satisfy the legal requirement.
• Business transfers: In the unlikely event that 999kk undergoes a merger, acquisition, or sale of substantially all of its assets, your personal data may be transferred as part of that transaction. You will be notified in advance of any such transfer and of any change to the way your data will be handled as a result.

Cookies & Tracking

999kk uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your login session, and gather aggregated analytics that help us improve the user experience. Below is a summary of the categories of cookies we use:

• Strictly necessary cookies: These cookies are essential for the platform to function. They manage your login session, maintain your account security token, store your language preferences, and enable core features such as the game lobby and account dashboard. These cookies cannot be disabled without impairing your ability to use the platform.
• Functional cookies: These cookies remember your preferences — such as your preferred deposit method, recently played games, and responsible gaming settings — so that you do not have to re-enter them on each visit. They are not used for tracking across other websites.
• Analytics cookies: We use aggregated analytics tools to understand how players navigate the platform, which games are most popular, and where technical issues arise. The data collected by analytics cookies is anonymised and aggregated before analysis. It is not linked back to individual player profiles for marketing purposes.
• Security cookies: These cookies support our fraud detection and bot prevention systems. They help us distinguish between genuine human players and automated scripts that may attempt to abuse the platform.

Data Retention

999kk retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The general retention periods we apply are outlined below:

• Active account data: Identity, contact, financial, and gaming activity data is retained for the full duration of your account's active status and for a minimum period of 5 years following account closure, to satisfy our anti-money-laundering and transaction record-keeping obligations.
• KYC and identity verification documents: Copies of identity documents submitted for verification are retained for a minimum of 5 years from the date of submission or the date of account closure, whichever is later.
• Financial transaction records: All deposit and withdrawal transaction records are retained for a minimum of 5 years in line with applicable financial record-keeping standards.
• Support and communications data: Chat transcripts and email correspondence are retained for 2 years from the date of the interaction, or longer if the communication relates to an ongoing dispute, investigation, or legal matter.
• Responsible gaming records: Self-exclusion agreements, deposit limit histories, and cool-off period records are retained for the longer of 5 years or the duration of the exclusion period, to ensure that re-registration requests can be properly evaluated.
• Technical and usage data: Server log data and anonymised analytics data are retained for 13 months on a rolling basis before deletion or permanent anonymisation.

When the applicable retention period expires, your personal data is securely deleted or permanently anonymised so that it can no longer be linked to you as an individual. If you request deletion of your data before the end of the applicable retention period, we will action your request to the extent possible while retaining any data that we are legally obligated to keep.

Your Data Rights

You have a number of rights in relation to the personal data that 999kk holds about you. These rights are set out below. To exercise any of these rights, please contact us at [email protected]. We will respond to all verified data rights requests within a reasonable timeframe, typically within 30 days of receipt.

• Right of access: You have the right to request a copy of the personal data we hold about you, along with information about how we process it, the categories of data held, the purposes of processing, and the third parties with whom it has been shared.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. You may also update certain contact details directly through your account dashboard.
• Right to erasure: You have the right to request the deletion of your personal data in certain circumstances — for example, where the data is no longer needed for the purpose for which it was collected, or where you withdraw consent on which processing was based. This right is subject to our legal retention obligations, which may require us to keep certain data regardless.
• Right to restrict processing: In certain circumstances, you have the right to request that we restrict the processing of your personal data — for example, while we investigate a dispute about the accuracy of your data.
• Right to data portability: Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: Where processing is based on our legitimate interests, you have the right to object to that processing. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Data Security

The security of your personal and financial data is a primary operational priority at 999kk. We implement a comprehensive suite of technical and organisational security measures designed to protect your data against unauthorised access, accidental loss, destruction, alteration, or disclosure.

• Encryption in transit: All data transmitted between your device and the 999kk platform is protected using 256-bit Transport Layer Security (TLS/SSL) encryption. This ensures that your account credentials, financial data, and personal information cannot be intercepted during transmission.
• Encryption at rest: Personal data stored on our servers — including identity documents, financial records, and account data — is encrypted at rest using industry-standard encryption protocols. Encryption keys are managed and rotated in accordance with security best practices.
• Access controls: Access to personal data within 999kk's internal systems is strictly controlled on a need-to-know basis. Only authorised personnel with a legitimate operational reason to access specific categories of data are granted access, and all access is logged and audited.
• Fraud detection systems: Our platform operates real-time transaction monitoring and anomaly detection systems that flag unusual patterns of activity for review. These systems help protect your account against unauthorised access attempts, fraudulent deposits, and suspicious withdrawal requests.
• Penetration testing: 999kk conducts regular security assessments, including vulnerability scanning and third-party penetration testing, to identify and remediate potential weaknesses in our platform infrastructure before they can be exploited.
• Data breach response: In the event of a personal data breach that poses a risk to your rights and freedoms, 999kk will notify affected individuals promptly and take immediate steps to contain the breach, assess its scope, and remediate the underlying cause. We take all data security incidents seriously and investigate them with full urgency.

While we employ robust technical safeguards, no system can guarantee absolute security. You also play an important role in protecting your account: choose a strong, unique password, do not share your credentials with anyone, and contact us immediately at [email protected] if you suspect that your account has been compromised.

Children's Privacy

999kk is strictly an adult platform. Access to and use of all 999kk services — including account registration, deposits, wagering, and bonus participation — is prohibited for individuals under the age of 21. We do not knowingly collect personal data from anyone under the age of 21.

During the account registration process, all applicants are required to confirm their date of birth and agree to our 21+ policy. 999kk reserves the right to request identity verification documents at any point in the account lifecycle to confirm that the account holder meets the minimum age requirement. Any account found to belong to an individual under the age of 21 will be closed immediately, all associated winnings will be voided, and any deposited funds (minus wagers placed prior to discovery of the age violation) will be returned.

Third-Party Services

The 999kk platform integrates with a number of third-party services to deliver its full range of features. While 999kk carefully selects its technology and payment partners and requires them to adhere to appropriate data protection standards, each third-party provider operates under its own privacy policy. 999kk is not responsible for the data practices of third-party providers beyond the data processing agreements we hold with them.

• Game Providers: Casino games and live dealer experiences are delivered by Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other licensed studios. These providers may process limited technical data (such as session tokens) within their own secure environments to render the games correctly. Their platforms are independently certified by recognised testing laboratories.
• Payment partners: bKash, Nagad, Rocket, and Upay process financial transactions within their own regulated environments. Please refer to the privacy policy of your chosen mobile wallet or bank for information about how they handle your financial data.
• Analytics providers: We use aggregated analytics services to understand platform usage. All data shared with analytics providers is anonymised prior to transmission and cannot be used to identify individual players.

999kk does not embed third-party social media widgets, advertising trackers, or affiliate tracking pixels that would allow external companies to monitor your behaviour on the 999kk platform without your knowledge.

Changes to This Policy

999kk reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, technology, legal obligations, or business operations. When material changes are made, we will notify registered players via the email address associated with their account and display a prominent notice on the platform.

The effective date and version number at the top of this Policy indicate when the most recent revision was made. We encourage you to review this Policy periodically. Your continued use of the 999kk platform after the effective date of any revised Policy constitutes your acceptance of the updated terms.

If you disagree with any change to this Policy and wish to close your account as a result, please contact [email protected]. We will action your account closure request and handle your data in accordance with the retention obligations described in Section 7 above.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way 999kk handles your personal data, please contact us using the details below. All privacy-related enquiries are handled confidentially and responded to within a reasonable timeframe.

• General privacy enquiries: [email protected] — for questions about this Policy, data rights requests, and general data protection matters. Please use the subject line "Privacy Enquiry" for fastest routing.
• Responsible gaming and sensitive data: [email protected] — for matters relating to responsible gaming data, self-exclusion records, or any sensitive personal information disclosed during a responsible gaming interaction.
• Response time: We aim to acknowledge all privacy-related enquiries within 24 hours (Bangladesh Standard Time, UTC+6) and to provide a substantive response within 30 days of receipt.