9a999 Privacy Policy — Your Data, Our Responsibility

1 Introduction & Scope

9a999 is an online cricket betting and casino platform serving players in Bangladesh. This Privacy Policy applies to all personal data collected through the 9a999 website at 9a999.io, including all sub-pages, game interfaces, payment portals, customer support channels, and any other touchpoint through which 9a999 processes personal information.

This policy applies to all registered players, prospective players who browse the platform, and individuals who contact 9a999 through its support channels. It does not apply to third-party websites or services that may be referenced on the platform — those entities operate under their own privacy policies, for which 9a999 bears no responsibility.

This Privacy Policy should be read in conjunction with the 9a999 Terms & Conditions and Responsible Gaming policy, both of which are incorporated into the overall agreement between you and 9a999.

2 Data We Collect

2.1 Data You Provide Directly

When you register a 9a999 account, submit a KYC verification request, make a deposit or withdrawal, or contact our support team, you provide personal data including but not limited to:

• Full legal name;
• Date of birth (used to verify you are aged 21 or above);
• Residential address in Bangladesh (including city, district, and postal code);
• Email address;
• Mobile phone number;
• Mobile financial service account details (bKash, Nagad, Rocket, or Upay account numbers registered to your name — not your PINs or passwords);
• Government-issued identification document number (National ID, passport, or driving licence);
• Scanned copies or photographs of identity and address documents submitted for KYC verification.

2.2 Data Collected Automatically

When you access the 9a999 platform, certain technical data is collected automatically by our systems, including:

• IP address and approximate geographic location;
• Device type, operating system, and browser version;
• Session duration, pages visited, and navigation paths within the platform;
• Game activity logs, including game types played, bet amounts, and session timestamps;
• Cookie identifiers and similar tracking technologies (see Section 6).

2.3 Data from Third Parties

9a999 may receive supplementary personal data about you from third parties in limited circumstances, including:

• Identity verification agencies used to cross-check the accuracy of documents submitted during KYC;
• Payment processing partners (bKash, Nagad, Rocket, Upay) who confirm transaction status and account ownership;
• Fraud prevention and anti-money laundering (AML) screening services that flag potential financial crime risks.

3 How We Use Your Data

9a999 processes personal data only for specific, legitimate purposes directly related to the operation of the platform and the delivery of services to players in Bangladesh. The primary purposes for which we use your data are:

• Account creation and management: To register your account, verify your identity, manage your profile, and maintain accurate player records;
• Transaction processing: To process deposits and withdrawals via bKash, Nagad, Rocket, and Upay, and to maintain an accurate transaction history in BDT;
• Age and identity verification: To confirm that all players are aged 21 or above and to fulfil our Know Your Customer (KYC) obligations;
• Customer support: To respond to enquiries, complaints, and support requests submitted through live chat or email;
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, and other forms of financial crime;
• Responsible gaming compliance: To monitor gameplay patterns and proactively identify players who may be exhibiting signs of problem gambling, in accordance with our Responsible Gaming obligations;
• Legal and regulatory compliance: To fulfil any reporting or disclosure obligations imposed on 9a999 under applicable law;
• Platform improvement: To analyse anonymised or aggregated usage data to improve the performance, design, and content of the 9a999 platform;
• Direct marketing (where consent is given): To send promotional offers, bonus notifications, or seasonal campaign communications to players who have opted in to marketing communications.

9a999 does not use personal data for automated decision-making that produces significant legal effects on players without human review, except where required by AML or fraud prevention obligations.

4 Legal Basis for Processing

9a999 processes personal data on the following legal bases:

• Contractual necessity: Processing that is required to fulfil the agreement between you and 9a999, including account management, payment processing, and KYC verification;
• Legal obligation: Processing required for 9a999 to comply with applicable laws and regulatory requirements, including AML screening and age verification;
• Legitimate interests: Processing for purposes of fraud prevention, platform security, and responsible gaming monitoring, where those interests are not overridden by your rights and freedoms;
• Consent: Processing for optional marketing communications and non-essential cookies, which you may withdraw at any time without affecting the lawfulness of prior processing.

Where 9a999 relies on your consent as the legal basis for processing, you have the right to withdraw that consent at any time by contacting the support team at [email protected]. Withdrawal of consent will not affect the validity of any processing that occurred before the withdrawal.

5 Sharing Your Data

9a999 does not sell, rent, or trade your personal data. We share personal data with third parties only in the following circumstances:

5.1 Service Providers

9a999 works with a limited number of trusted service providers who process personal data on our behalf in order to support the operation of the platform. These include:

• Payment processing partners: bKash, Nagad, Rocket, and Upay, for the purposes of executing and confirming financial transactions;
• Identity verification agencies, for KYC document checking;
• Fraud prevention and AML screening services;
• Game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) — these providers may receive pseudonymous player session data for the purpose of operating games and resolving game disputes;
• IT infrastructure and cloud hosting providers who store platform data on secured servers.

All service providers are bound by contractual data processing agreements that restrict their use of personal data to the purposes for which it was shared and require them to maintain appropriate security standards.

5.2 Legal & Regulatory Disclosure

9a999 may be required to disclose personal data to government authorities, financial intelligence units, law enforcement agencies, or courts of competent jurisdiction when required to do so by applicable law, a court order, or a lawful regulatory request. In such cases, 9a999 will disclose only the minimum data necessary to comply with the legal obligation.

5.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of 9a999's assets, personal data held about players may be transferred to the acquiring or successor entity. Players will be notified of any such transfer and any changes to applicable privacy terms prior to their taking effect.

6 Cookies & Tracking Technologies

9a999 uses cookies and similar tracking technologies to operate the platform, improve user experience, and analyse platform performance. A cookie is a small text file placed on your device when you visit 9a999.io. Cookies do not contain your password or payment information.

The types of cookies used by 9a999 are:

• Strictly necessary cookies: Essential for the platform to function. These include session authentication cookies and security tokens. They cannot be disabled without affecting platform functionality;
• Performance cookies: Used to collect anonymised data about how players navigate the platform, which pages are visited most frequently, and where errors occur. This data is used solely for platform improvement purposes;
• Functional cookies: Used to remember your language preferences, session settings, and responsible gaming tool configurations;
• Marketing cookies: Used only if you have given explicit consent, to deliver relevant promotional communications related to 9a999 offers and bonuses. You may opt out of marketing cookies at any time.

You may configure your browser to refuse all or certain cookies. However, disabling strictly necessary cookies will impair your ability to log in and use the 9a999 platform. Instructions for managing cookies are available in your browser's help documentation.

7 Data Retention

9a999 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

• Account data and KYC documents: Retained for the duration of the active player relationship and for a minimum period of five years following account closure, in compliance with AML obligations;
• Transaction records: Retained for a minimum of five years from the date of the transaction;
• Customer support correspondence: Retained for three years from the date of the interaction;
• Game activity logs: Retained for two years from the date of the gaming session;
• Marketing communication preferences: Retained until you withdraw consent or request deletion.

Once data is no longer required for any applicable purpose, 9a999 will securely delete or anonymise it in a manner that prevents reconstruction of the original personal data.

8 Security Measures

9a999 implements a layered approach to data security, incorporating both technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the 9a999 platform;
• Encrypted storage of sensitive account and identity data at rest on secured servers;
• Role-based access controls ensuring that only authorised 9a999 personnel can access personal data, and only to the extent required for their job function;
• Regular internal and third-party security audits and vulnerability assessments of the platform infrastructure;
• Two-factor authentication (2FA) options for player accounts to prevent unauthorised login;
• Incident response procedures for detecting, reporting, and managing any personal data breach.

9 Your Rights

As a player on the 9a999 platform, you hold the following rights in relation to your personal data:

• Right of access: You may request a copy of the personal data 9a999 holds about you at any time. We will provide this information within a reasonable timeframe;
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated;
• Right to erasure: You may request that 9a999 delete your personal data where it is no longer necessary for the purpose for which it was collected, subject to any overriding legal obligations that require us to retain it;
• Right to restriction of processing: You may request that we limit how we process your data in certain circumstances, for example while a dispute regarding its accuracy is being resolved;
• Right to data portability: Where processing is carried out by automated means on the basis of your consent or a contract, you may request that your personal data be provided to you in a structured, machine-readable format;
• Right to object: You may object to processing carried out on the basis of legitimate interests, including direct marketing. Where your objection relates to marketing, 9a999 will cease that processing immediately;
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact the 9a999 data team at [email protected], clearly stating your request and providing sufficient information to identify your account. 9a999 will respond to all verified rights requests within 30 calendar days. In complex cases, this period may be extended by a further 30 days, with notice provided to you.

10 Children & Minors

The 9a999 platform is strictly intended for adults aged 21 years and above. 9a999 does not knowingly collect personal data from individuals under the age of 21. If 9a999 becomes aware that personal data has been collected from a person under 21 years of age, that account will be immediately suspended, all associated data will be deleted, and any deposited funds will be returned via the original payment method pending verification.

If you have reason to believe that a minor has registered a 9a999 account or provided personal data to the platform, please notify us immediately at [email protected] so that appropriate action can be taken promptly.

11 International Data Transfers

9a999 primarily stores and processes player data within secured infrastructure. In limited circumstances, personal data may be transferred to or accessed by service providers located outside Bangladesh, including game providers and technology partners operating in other jurisdictions.

Where such transfers occur, 9a999 ensures that appropriate safeguards are in place to protect your personal data, including contractual data processing agreements that impose obligations equivalent to those described in this Privacy Policy. 9a999 does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without first implementing appropriate protective measures.

12 Third-Party Links & Services

The 9a999 platform may contain references to third-party game providers and payment services. While 9a999 takes reasonable care in selecting trusted partners, we are not responsible for the privacy practices of third parties. Each third-party provider — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, bKash, Nagad, Rocket, and Upay — operates under its own privacy policy.

9a999 encourages players to review the privacy policies of any third-party services they interact with, particularly in relation to game data and payment transaction data handled directly by those providers.

13 Changes to This Privacy Policy

9a999 reserves the right to update or revise this Privacy Policy at any time. Where changes are material — for example, a change in the types of data collected, the purposes for which it is used, or the parties with whom it is shared — 9a999 will notify registered players by email and/or by displaying a prominent notice on the platform prior to the changes taking effect.

The effective date shown at the top of this page will be updated each time the policy is revised. Minor clarifications or administrative corrections that do not materially affect player rights may be made without prior notice. Your continued use of the 9a999 platform following the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms.

The most current version of this Privacy Policy is always available at 9a999.io/privacy-policy.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 9a999 handles your personal data, please contact us using the details below:

For requests relating to your account, responsible gaming tools, or self-exclusion, please also visit the Responsible Gaming page for additional guidance and self-service options.