9p999 Privacy Policy — Your Data, Your Rights

Privacy Essentials

The cards below summarise the most important privacy commitments 9p999 makes to every player. The full detail for each point follows in the numbered sections.

Information We Collect

9p999 collects personal data that is necessary to provide the gaming service, verify player identity, process payments, and meet our legal obligations. We collect information in the following categories:

We do not collect data that is not necessary for the purposes described above. We do not collect your physical address unless you voluntarily provide it during a KYC review. We do not collect data from your phone's contacts, camera, or microphone beyond what is required for identity verification.

How We Use Your Information

9p999 uses the personal data it collects for the following specific and limited purposes only. We do not use your data for any purpose that is incompatible with those listed below:

• To create and manage your 9p999 account, verify your age and identity, and maintain the security of your account across sessions.
• To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfer, and to maintain an accurate record of your account balance and transaction history.
• To detect and prevent fraud, money laundering, underage gambling, and other prohibited activities, including cross-referencing activity patterns against known fraud indicators.
• To send security-related communications to your registered mobile number, including OTP codes for login verification, withdrawal confirmation codes, and alerts about suspicious account activity.
• To provide customer support and respond to account queries, complaints, responsible gaming requests, or data subject access requests submitted through our support channel.
• To comply with applicable legal, regulatory, and anti-money laundering obligations, including retaining transaction records for the minimum period required by law and responding to lawful requests from competent authorities.

Legal Basis for Processing

9p999 processes your personal data only where a lawful basis exists for doing so. The following bases apply to different categories of processing activity on this platform:

• Contract performance: processing your registration data, account credentials, and payment data is necessary to provide the gaming service you have signed up for and to fulfil our contractual obligations to you as a player.
• Legal obligation: identity verification, KYC data collection, transaction record-keeping, and cooperation with lawful authority requests are required to comply with anti-money laundering and age verification obligations applicable to online gaming platforms.
• Legitimate interest: technical and usage data is processed on the basis of 9p999's legitimate interest in maintaining platform security, preventing fraud, and improving service quality — provided this does not override your fundamental privacy interests.
• Consent: where we send optional promotional communications (such as bonus offers or seasonal promotions), we do so only where you have opted in. You may withdraw consent at any time by contacting support or by following the opt-out instructions in any such message.

Sharing Your Information

9p999 does not sell, rent, or trade your personal data. We share your information only in the following limited circumstances, and only to the extent necessary for each stated purpose:

• Payment processors: transaction data is shared with bKash, Nagad, Rocket, Upay, and banking partners solely to execute and reconcile your deposit and withdrawal requests. These parties receive only the minimum data required to process the transaction.
• Game technology providers: game providers such as Pragmatic Play, Evolution Gaming, Microgaming, Spribe, and Ezugi receive a session token and your account identifier so the game client can authenticate your session. No personal contact data or payment data is passed to game providers.
• Identity verification services: where KYC checks are required, your identity document data may be shared with a regulated identity verification service provider. These providers operate under strict data processing agreements and may not use your data for any purpose other than completing the verification check for 9p999.
• Law enforcement and regulatory authorities: where we are legally required to disclose information — for example in response to a valid court order, a request from a financial intelligence unit, or a regulatory investigation — we will comply. We will notify you of such a disclosure where we are legally permitted to do so.

Cookies and Tracking Technologies

9p999 uses cookies and similar tracking technologies to operate the platform, maintain your session, and improve your experience. We do not use third-party advertising cookies or cross-site tracking pixels. The cookies we use fall into the following categories:

Most modern mobile browsers allow you to control cookies through your browser or device settings. Disabling essential cookies will prevent you from logging in and using the platform. Disabling performance or preference cookies will not affect your ability to play but may reset your display preferences on each visit.

Data Retention

9p999 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply: active account data is retained for the duration of the account's existence plus a minimum of 5 years after account closure, in order to satisfy anti-money laundering record-keeping requirements. KYC documents are retained for a minimum of 5 years from the date of collection or from the date of the last transaction on the account, whichever is later. Transaction records are retained for a minimum of 5 years. Technical and usage logs are retained for a rolling period of 12 months and are then automatically purged.

When an account is closed, 9p999 anonymises all data that does not need to be retained for legal purposes. Anonymised data cannot be used to identify you and is retained only in aggregated statistical form for internal platform analysis. If you request deletion of your account before the mandatory retention period has expired, we will anonymise your data to the maximum extent permitted by law and explain which specific data categories must be retained and for how long.

Your Privacy Rights

As a player on 9p999, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, contact us at [email protected] with the subject line "Data Request" and your registered mobile number:

• Right of access: you may request a copy of the personal data 9p999 holds about you. We will provide this within 5 business days of receiving a valid request.
• Right of rectification: if any personal data we hold about you is inaccurate or incomplete, you may request that we correct or update it.
• Right to erasure: you may request deletion of your personal data where it is no longer necessary for the purposes it was collected, subject to our legal retention obligations. We will explain clearly which data we are required to retain and why.
• Right to restrict processing: in certain circumstances, you may request that we pause processing your personal data while a query or complaint is being resolved.
• Right to withdraw consent: where processing is based on your consent (for example, for optional promotional messages), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

Security Measures

9p999 implements industry-standard technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include SSL/TLS encryption for all data in transit between your device and our servers; one-way hashing of passwords using a modern cryptographic algorithm so that passwords are never stored in recoverable form; role-based access controls ensuring that only authorised personnel can access personal data, limited to those who need it to perform their role; regular security assessments of platform infrastructure; and automatic session expiry after a period of inactivity to reduce the risk of unauthorised access on shared devices.

No security system is entirely without risk. While 9p999 takes all reasonable steps to protect your data, we cannot guarantee absolute security against all threats. In the event of a personal data breach that is likely to result in a risk to your rights, 9p999 will notify affected players without undue delay and will take immediate steps to contain and remediate the breach.

Children and Minors

9p999 is strictly an adults-only platform. Players must be 21 years of age or older to register and play. We do not knowingly collect personal data from anyone under the age of 21. If we become aware that personal data has been collected from a person under 21, we will delete that data immediately and close the associated account. If you believe that a minor has registered on 9p999, please notify us immediately at [email protected] so that we can investigate and act promptly.

Changes to This Privacy Policy

9p999 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or platform functionality. When we make material changes, we will post the updated Policy on this page with a revised "Last updated" date and, where appropriate, notify registered players via SMS to their registered mobile number.

Your continued use of 9p999 after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should stop using the platform and may request deletion of your account by contacting [email protected].

Contact Us About Privacy

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to report a privacy concern, please contact the 9p999 support team. We aim to respond to all privacy-related enquiries within 5 business days. Email addresses must be provided in plain text and are not clickable links.