999bad Privacy Policy
Your privacy matters to us. This Privacy Policy explains exactly what personal data 999bad collects from Bangladesh players, how we use it, who we share it with, and the rights you hold over your own information.
1. Introduction
This Privacy Policy ("Policy") sets out the basis on which 999bad ("Company", "we", "us", "our") collects, processes, stores, and discloses personal data relating to individuals ("Players", "Users", "you") who register an account, access the Services, or otherwise interact with the 999bad platform at 999bad.pro.
999bad is committed to handling personal data responsibly, transparently, and in accordance with applicable data protection principles. We collect only the data we genuinely need, keep it only for as long as necessary, and take reasonable technical and organisational measures to protect it from unauthorised access, loss, or disclosure.
By registering an account on 999bad, depositing funds, or otherwise using the Services, you acknowledge that you have read and understood this Policy and consent to the collection, use, and processing of your personal data as described herein. If you do not agree to this Policy, you must not create an account or use the 999bad platform.
This Policy should be read alongside the 999bad Terms & Conditions and Responsible Gaming Policy. In the event of a conflict between this Policy and any other document, this Policy shall govern matters relating to data privacy and the processing of personal information.
We may update this Policy from time to time to reflect changes in our practices, technology, or applicable law. When we make material changes, we will notify registered players via email or in-platform notification. The "Last updated" date at the top of this page indicates when the Policy was most recently revised. Your continued use of the Services after any such update constitutes acceptance of the revised Policy.
2. Data We Collect
999bad collects personal data in the following categories. We collect only what is reasonably necessary for the purposes described in this Policy.
When you create a 999bad Account, we collect: your full name, date of birth, gender (optional), email address, mobile phone number (used for SMS 2FA and account communications), and a username of your choice. This information is required to open and maintain your Account and to verify that you meet our eligibility requirements, including the minimum age of 21 years.
To comply with Know Your Customer (KYC) obligations and to prevent fraud, money laundering, and underage gambling, we may request copies of government-issued identification such as a National ID Card (NID), passport, or driving licence, together with proof of address (such as a utility bill, bank statement, or bKash/Nagad transaction statement dated within 90 days). These documents are used solely for identity verification purposes and are stored securely.
We collect records of all deposits, withdrawals, bonuses, and wagers made through your 999bad Account. For payment processing via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, we receive transaction confirmation references and partial payment identifiers. 999bad does not store your bKash PIN, Nagad PIN, card numbers, or CVV codes — payment authentication occurs directly within your mobile wallet or card provider's secure environment.
When you access 999bad, our servers automatically collect certain technical information, including: your IP address, browser type and version, operating system, device model, screen resolution, mobile network operator (e.g. Grameenphone, Robi, Banglalink, Teletalk), time zone (Bangladesh Standard Time, UTC+6), and referring URL. This data helps us ensure platform stability, detect fraud, and improve the mobile experience.
We record your activity on the 999bad platform, including pages visited, games played, bet amounts and outcomes, session durations, bonus interactions, and customer support conversations. This data is used to personalise your experience, identify responsible gaming concerns, and improve our Services.
If you contact 999bad support by email or live chat, we retain records of those communications, including your name, contact details, and the content of the exchange. This allows us to resolve disputes, improve service quality, and maintain an accurate history of interactions with your Account.
999bad uses cookies, web beacons, and similar technologies to operate the platform, remember your session preferences, and analyse aggregate usage patterns. Essential cookies are required for the platform to function. Analytics cookies help us understand how players navigate the site. You may manage non-essential cookies via your browser settings, though disabling certain cookies may affect platform functionality.
3. How We Use Your Data
999bad processes personal data only where we have a lawful basis for doing so. The primary purposes for which we use your data are set out below.
Our Data Protection Commitments
All data transmitted between your device and 999bad servers is encrypted using industry-standard 256-bit SSL technology. This ensures that your personal details, payment references, and Account credentials cannot be intercepted by third parties during transmission.
Personal data is stored on secure servers with access restricted to authorised 999bad personnel on a strict need-to-know basis. KYC documents are stored in encrypted form and are not accessible to game operations or marketing teams without formal authorisation.
999bad does not sell, rent, or trade your personal data to third-party advertisers, data brokers, or marketing agencies. Your information is used exclusively to operate and improve the 999bad Services and to meet our legal obligations.
We collect only the personal data that is genuinely necessary for the purposes described in this Policy. We do not ask for information we do not need. Where data is no longer required, it is securely deleted or anonymised in accordance with our data retention schedule.
Where 999bad engages third-party service providers (such as game studios like Pragmatic Play, Evolution Gaming, and Spribe, or payment processors), those providers are contractually required to process your data only on our instructions and to maintain appropriate security standards. We do not permit third-party providers to use your data for their own independent purposes.
999bad primarily serves players based in Bangladesh, including those in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. Our data handling practices are designed with the Bangladesh player in mind, including compatibility with local payment systems such as bKash, Nagad, and Rocket.
4. Data Sharing & Disclosure
999bad does not share your personal data with third parties except in the limited circumstances described below. In all cases, data sharing is governed by appropriate contractual safeguards.
To process deposits and withdrawals, 999bad shares transaction references and account identifiers with our payment partners, including bKash, Nagad, Rocket, Upay, Visa, and Mastercard. These providers receive only the minimum data necessary to complete the transaction and are bound by their own privacy and security policies.
999bad may use third-party identity verification services to assist with KYC checks. These providers process your identity documents and biometric data (where applicable) solely for the purpose of verifying your identity and are prohibited from retaining or using your data for any other purpose.
Game studios and platform technology partners (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may receive anonymised or pseudonymised session data to ensure game integrity, resolve technical disputes, and deliver live game experiences. These providers do not receive your full name, NID, or financial account details.
999bad may disclose personal data to law enforcement agencies, courts, or regulatory bodies where we are legally required to do so, where we believe disclosure is necessary to prevent fraud or criminal activity, or where we are responding to a valid legal process such as a court order or official government request.
In the event of a merger, acquisition, restructuring, or sale of assets involving 999bad, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and the successor entity will be required to honour the commitments made in this Policy.
5. Data Retention
999bad retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.
As a general rule, Account data is retained for the duration of the Account's active status and for a period of five (5) years following Account closure. This extended retention period reflects our obligations with respect to anti-money laundering record-keeping and the potential for post-closure disputes or regulatory enquiries.
KYC documents are retained for a minimum of five years following the completion of the verification process or the closure of the Account, whichever is later. Transaction records are retained for a minimum of five years from the date of the relevant transaction. Communications with our support team are retained for three years from the date of the interaction.
Where data is no longer required for any legitimate purpose, it is securely deleted or anonymised so that it can no longer be linked back to any individual. Anonymised aggregated data (such as platform-wide betting statistics) may be retained indefinitely for analytical and business intelligence purposes.
6. Your Privacy Rights
As a 999bad player, you hold the following rights with respect to your personal data. To exercise any of these rights, contact our Data Privacy team at [email protected] with the subject line "Data Privacy Request". We will respond within a reasonable timeframe consistent with applicable law.
7. Cookies Policy
999bad uses the following categories of cookies on its platform. You can manage your cookie preferences at any time through your browser settings.
These cookies are strictly necessary for the 999bad platform to function. They enable session management, login authentication, and security features such as CSRF protection. Essential cookies cannot be disabled without breaking core platform functionality. No consent is required for these cookies.
Analytics cookies help us understand how players interact with 999bad — which pages are most visited, where players encounter friction, and how mobile performance can be improved. Data collected by analytics cookies is aggregated and anonymised. You may opt out of analytics cookies via your browser settings without affecting your ability to use the platform.
Preference cookies remember your settings, such as your preferred language, display preferences, and notification choices, so you do not need to reconfigure them each time you visit. These cookies improve convenience but are not essential to platform operation.
Security cookies support our fraud detection systems by flagging unusual login patterns, detecting bot activity, and verifying that actions taken on your Account originate from a trusted device. These cookies are an important part of how 999bad keeps your Account safe and cannot be disabled for active users.
8. Minors & Age Restriction
The 999bad platform is strictly intended for adults aged 21 years and above. 999bad does not knowingly collect personal data from individuals under the age of 21. If you are under 21, you must not register an Account, deposit funds, or place wagers on 999bad.
If 999bad discovers that personal data has been collected from an individual who is under 21, we will immediately close the relevant Account, forfeit any associated balance in accordance with our Terms & Conditions, and permanently delete all personal data relating to that individual from our systems.
Parents and guardians who believe a minor may have created an account on 999bad should contact us immediately at [email protected]. We take underage gambling extremely seriously and will act swiftly on any such report.
9. Contact & Complaints
If you have any questions, concerns, or complaints regarding this Privacy Policy or the way 999bad handles your personal data, please contact our Data Privacy team:
Email: [email protected]
Subject line: "Data Privacy Request"
Response time: Within 5 Business Days (Bangladesh Standard Time, UTC+6)
Please include your registered Account username and a clear description of your request or concern. We may ask you to verify your identity before actioning any data-related request to ensure your personal data is not disclosed to an unauthorised third party.