999fd Privacy
Policy

For the purposes of this Privacy Policy, the data controller responsible for the personal data you provide when using the 999fd platform is 999fd, operating the website accessible at https://999fd.io ("the Platform"). References to "999fd", "we", "us", or "our" throughout this policy refer to the Platform operator in this capacity.

As data controller, 999fd determines the purposes and means by which your personal data is processed. All data processing activities carried out on the Platform are conducted in accordance with this Privacy Policy and applicable data protection principles, including purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality.

For all data-related enquiries, correction requests, deletion requests, or complaints, you may contact 999fd directly at: [email protected]

999fd collects personal data that falls into the following categories. We collect only what is necessary and proportionate to the purposes described in this policy.

We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric identifiers unless specifically required by applicable law for identity verification purposes.

999fd collects personal data through the following channels:

• Direct Interactions: Data you provide when registering an account, completing identity verification, making deposits or withdrawals, contacting our support team, or submitting a dispute.
• Automated Technologies: Technical and usage data collected automatically when you access the platform, including through cookies, server logs, and session tracking tools.
• Payment Processors: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, and other payment partners when you initiate or complete a financial transaction on the platform.
• Game Providers: Aggregated game outcome and session data shared by third-party Game Providers (including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi) for the purpose of result verification and dispute resolution.
• Identity Verification Services: Where applicable, data returned from third-party identity verification services used to confirm the accuracy of documents you submit during KYC processes.

When you provide data about a third party (for example, a contact's mobile number), you confirm that you have obtained the relevant consents from that individual to share their data with 999fd for the stated purpose.

999fd processes your personal data for the following specific purposes:

• Account Registration and Management: To create, verify, and maintain your 999fd account, authenticate your logins, and communicate account-related information to you.
• Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partner banks; to detect and prevent fraudulent or unauthorised transactions.
• Identity Verification (KYC): To verify your age (21+) and identity in compliance with our responsible gaming obligations and anti-money laundering (AML) requirements.
• Game and Betting Services: To provide access to casino games, live dealer tables, sportsbook markets (including BPL, IPL, and T20 cricket), Bingo, Mines, and Slots; to record and verify game results and bet settlements.
• Responsible Gaming: To monitor your gaming activity for signs of problem gambling, enforce deposit limits and self-exclusion periods you have set, and proactively contact you if our systems identify concerning patterns.
• Customer Support: To respond to your enquiries, resolve disputes, and maintain records of support interactions for quality assurance purposes.
• Marketing Communications: To send you promotional offers, bonus notifications, and seasonal promotions (including Eid, Pohela Boishakh, and Victory Day offers) — only where you have provided explicit consent to receive such communications. You may withdraw this consent at any time.
• Platform Security and Fraud Prevention: To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, money laundering, and other prohibited activities.
• Legal and Regulatory Compliance: To fulfil our obligations under applicable laws, respond to lawful requests from regulatory authorities, and maintain records required for audit purposes.

999fd will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or as otherwise permitted by applicable law.

999fd processes your personal data on one or more of the following legal bases:

• Performance of a Contract: Processing is necessary to fulfil the Terms & Conditions you agreed to upon registration — including account management, payment processing, and game/bet result recording.
• Legitimate Interests: Processing is necessary for 999fd's legitimate interests in operating a secure, fair, and commercially sustainable platform — including fraud prevention, platform security, and general business analytics — provided those interests are not overridden by your rights and freedoms.
• Legal Obligation: Processing is necessary to comply with applicable legal obligations, including anti-money laundering (AML) regulations, age verification requirements, and responses to lawful regulatory or governmental requests.
• Consent: Where we rely on your consent — for example, to send marketing communications or to process certain optional data — you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. Withdrawal requests should be directed to [email protected].

999fd does not sell, rent, or trade your personal data to third parties. We share personal data only in the following limited and controlled circumstances:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank receive the minimum personal and financial data necessary to process your transactions securely.
• Game Providers: Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi, and other game technology providers receive session identifiers and game outcome data required to operate their games on the 999fd platform. They do not receive your full personal profile.
• Identity Verification Services: Third-party KYC and identity verification providers may receive copies of documents you submit for verification purposes, used solely to confirm your identity and age.
• IT and Security Service Providers: Cloud hosting, cybersecurity, and platform infrastructure providers who process data on our behalf under strict data processing agreements that prohibit any secondary use of your data.
• Legal and Regulatory Authorities: 999fd may disclose your personal data to competent authorities, law enforcement agencies, or courts where required to do so by applicable law, court order, or regulatory instruction. We will notify you of such disclosures where legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, or sale of platform assets, your personal data may be transferred to the relevant successor entity, subject to the same protections described in this Privacy Policy.

All third parties to whom 999fd discloses personal data are required to maintain appropriate technical and organisational security measures and are prohibited from using your data for their own independent marketing or commercial purposes.

The 999fd platform uses cookies and similar tracking technologies to ensure the platform functions correctly, remember your session, and gather aggregate analytics. The cookies used on the platform fall into the following categories:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during your visit. These cannot be disabled without impacting platform functionality.
• Performance & Analytics Cookies: Collect anonymised information about how users interact with the platform — such as which pages are visited most frequently and whether error messages are encountered. This data is used to improve platform performance and user experience.
• Functional Cookies: Remember your preferences such as language settings, preferred game categories, and display options to provide a more personalised experience during return visits.
• Security Cookies: Used to detect fraudulent activity, enforce session timeouts, and protect your account from unauthorised access attempts.

999fd does not use third-party advertising cookies or cross-site tracking cookies that would allow external advertising networks to build a profile of your browsing activity for targeted advertising purposes.

You may manage or disable non-essential cookies through your browser settings. Please note that disabling cookies may affect the functionality of certain platform features. Refer to your browser's help documentation for guidance on cookie management.

999fd retains personal data for as long as necessary to fulfil the purposes for which it was collected, taking into account our legal, regulatory, and operational requirements. The following retention principles apply:

• Active Accounts: Personal data associated with an active 999fd account is retained for the duration of the account relationship and for a minimum of 5 years from the date of the last account activity, in compliance with anti-money laundering record-keeping obligations.
• Closed Accounts: Upon account closure, 999fd will retain identity verification documents, transaction records, and betting history for a minimum of 5 years from the closure date for AML and regulatory audit purposes.
• Support and Communication Records: Customer support interactions and dispute correspondence are retained for 3 years from the date of the interaction.
• Marketing Data: Where you have consented to marketing communications, your contact details and preference data are retained until you withdraw consent or for a maximum of 2 years from the last engagement, whichever comes first.
• Technical and Log Data: Server logs and technical session data are retained for up to 12 months for security and fraud investigation purposes, after which they are automatically deleted.

Once the applicable retention period expires, personal data is either securely and permanently deleted from 999fd's systems or anonymised so that it can no longer be associated with any individual. Anonymised aggregate data may be retained indefinitely for statistical and platform improvement purposes.

999fd implements industry-standard technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Our security measures include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your browser or app and the 999fd servers is encrypted using 256-bit SSL/TLS protocols, preventing interception of data in transit.
• Encrypted Data Storage: Sensitive personal data — including identity documents, payment details, and login credentials — is stored in encrypted form in secure data centres. Passwords are stored as salted cryptographic hashes and are never stored in plain text.
• Access Controls: Access to personal data within 999fd is restricted on a strict need-to-know basis. Staff members are granted access only to the data necessary for their specific job function, and all access is logged and audited.
• Fraud Detection Systems: Automated fraud detection and anomaly detection systems monitor platform activity in real time to identify and respond to suspicious account behaviour, payment fraud, and unauthorised access attempts.
• Regular Security Reviews: 999fd's platform infrastructure undergoes regular security assessments to identify and remediate vulnerabilities before they can be exploited.

While 999fd takes every reasonable precaution to protect your data, no data transmission over the internet or method of electronic storage is 100% secure. In the unlikely event of a data breach that poses a risk to your rights or freedoms, 999fd will notify affected users and relevant authorities in accordance with applicable data breach notification requirements.

You also play an important role in keeping your data secure. Always use a strong, unique password for your 999fd account, never share your login credentials with anyone, and contact [email protected] immediately if you suspect unauthorised access to your account.

As a registered user of the 999fd platform, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact us at [email protected] with your full name, registered mobile number, and a description of your request. We will respond within 14 business days.

• Right of Access: You have the right to request a copy of the personal data that 999fd holds about you, along with information about how it is processed and with whom it is shared.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. For basic profile corrections (name spelling, contact number), you may also update these directly through your account settings.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and there is no other legal basis for processing), or where the data has been unlawfully processed. Note that this right is subject to our legal retention obligations — we cannot delete transaction or identity data we are required to retain under AML law.
• Right to Restriction of Processing: You may request that 999fd restrict processing of your data while a correction request is being verified, or where you contest the legal basis for processing.
• Right to Data Portability: You have the right to receive a copy of the personal data you have provided to 999fd in a structured, commonly used, and machine-readable format (such as CSV or JSON), and to request that we transmit this data directly to another service provider where technically feasible.
• Right to Object: You have the right to object to processing of your personal data where 999fd relies on legitimate interests as the legal basis. We will honour this objection unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (such as receiving marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

999fd will not charge a fee for processing your data rights requests in ordinary circumstances. If a request is manifestly unfounded or excessive, we reserve the right to charge a reasonable administrative fee or decline the request, in which case we will explain our reasons.

The 999fd platform is strictly intended for adults aged 21 years and above. 999fd does not knowingly collect, store, or process personal data belonging to individuals under the age of 21.

All account registration attempts are subject to mandatory age verification. Where 999fd has reasonable grounds to believe that a registered account belongs to a person under 21, that account will be immediately suspended pending identity verification. If age verification confirms that the account holder is under 21, the account will be permanently closed and any deposited funds will be returned to the originating payment method after investigation.

If you are a parent or guardian and believe that a minor in your care has registered an account on 999fd without your knowledge or consent, please contact us immediately at [email protected]. We will investigate and act promptly to close the account and delete the associated data.

999fd supports responsible gaming education and encourages parents and guardians to use parental controls and content filtering tools on shared or household devices to prevent minors from accessing online gambling platforms.

The 999fd platform integrates with third-party game providers and payment processors to deliver its services. While 999fd exercises due diligence in selecting reputable and security-conscious service partners, we are not responsible for the independent privacy practices of these third parties beyond the scope of our data processing agreements with them.

Game content delivered through the platform by providers such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi is subject to those providers' own terms of service and privacy policies to the extent that data is processed on their own systems. 999fd's agreements with Game Providers require them to process player session data only for the purpose of delivering the game and verifying results.

Payment processing via bKash, Nagad, Rocket, Upay, and partner banks is subject to those providers' own privacy policies and financial data handling practices. 999fd shares only the minimum data necessary to initiate and confirm transactions.

The 999fd platform does not contain links to third-party websites for general browsing purposes. Any external references are strictly operational (payment gateways, game studios) and governed by the data processing agreements in place between 999fd and those parties.

999fd reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or operational requirements. When material changes are made, we will notify registered users via the mobile number or email address associated with their account and/or by displaying a prominent notice on the platform.

The revised Privacy Policy will display the updated effective date at the top of this page. Your continued use of the 999fd platform after the effective date of the revised policy constitutes your acknowledgement and acceptance of the updated terms. If you do not accept the revised Privacy Policy, you must stop using the platform and may request account closure by contacting [email protected].

We encourage all users to review this Privacy Policy periodically. The current version is always accessible at https://999fd.io/privacy-policy. Previous versions of the Privacy Policy are available upon request.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 999fd handles your personal data, please contact our support team using the details below. All privacy-related correspondence will be handled with strict confidentiality.

Email: [email protected]
WhatsApp: +880-XXX-XXXXXXX
Support Hours: 24/7 (BST, UTC+6)

We aim to acknowledge all privacy-related enquiries within 48 hours (BST) and to provide a substantive response within 14 business days. For complex data access or deletion requests, we may require up to 30 days and will inform you if this extended period is necessary.

Complaints: If you believe that 999fd has not adequately addressed your privacy concern, you have the right to escalate your complaint to an independent dispute resolution body or the relevant data protection authority in your jurisdiction. 999fd will cooperate fully with any such review process.

Last Updated: January 1, 2026  |  Version: 2.4  |  Contact: [email protected]