999bat Privacy Policy

Introduction

999bat ("we", "us", "our") operates the online gaming platform accessible at 999bat.biz, providing sports betting, live casino, and slot game services to English-speaking players in Bangladesh. As part of delivering these services, 999bat collects and processes certain personal data relating to its registered players and website visitors. This Privacy Policy sets out, in plain and transparent terms, what data we collect, why we collect it, how we use and protect it, and what rights you have in relation to your personal data.

This Policy applies to all personal data processed by 999bat in connection with the registration, management, and operation of player accounts on the 999bat platform, including data collected through the 999bat website, mobile browser interface, customer support channels, and payment processing integrations. It does not apply to third-party websites or services that may be linked to or accessible from the 999bat platform — those third parties operate under their own privacy policies.

Data We Collect

999bat collects personal data through several channels: directly from you when you register and use the platform, automatically through the technical operation of the platform, and from third-party payment providers and identity verification services where applicable. The categories of personal data we collect are as follows:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data unless it is voluntarily disclosed by you in a support communication and is strictly necessary to address your query.

How We Use Your Data

999bat uses the personal data we collect solely for defined, legitimate purposes directly connected to the operation of the platform and our obligations to you as a player. We do not use your data for purposes that are incompatible with those stated in this Policy. The specific purposes for which we process your personal data are:

• Account registration and management: To create, maintain, and administer your 999bat player account, verify your identity, and ensure only one account exists per individual.
• Payment processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and Dutch-Bangla Bank, and to maintain accurate transaction records.
• Fraud prevention and security: To detect and prevent fraudulent activity, account takeovers, money laundering, and other illegal conduct on the 999bat platform.
• Age and identity verification: To confirm that all players are 18 years of age or older and that the information provided at registration is accurate and verifiable.
• Responsible gaming compliance: To monitor gaming patterns that may indicate problem gambling behaviour, to enforce self-exclusion requests, and to apply deposit or session limits where instructed by the player.
• Customer support: To respond to your queries, complaints, and account-related requests through our support channels.
• Platform personalisation and improvement: To analyse aggregated usage patterns, improve the 999bat platform experience, and optimise game content delivery for players in Bangladesh.
• Legal and regulatory compliance: To meet our obligations under applicable anti-money laundering standards and data protection principles, and to respond to lawful requests from relevant authorities.
• Promotional communications: To send you details of promotions, bonuses, and platform updates, where you have provided explicit consent to receive such communications. You may withdraw this consent at any time by contacting support.

Legal Basis for Processing

999bat processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions you accepted at registration — including account management, payment processing, and service delivery.
• Legitimate interests: Processing necessary to pursue 999bat's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and internal analytics, provided those interests are not overridden by your fundamental rights and freedoms.
• Legal obligation: Processing required to comply with applicable anti-money laundering (AML) standards, age verification requirements, and any lawful order from a competent authority.
• Consent: Processing for optional purposes — specifically promotional communications — where you have given a clear, specific, and informed consent. You have the right to withdraw consent at any time without affecting the lawfulness of prior processing.

Data Sharing & Disclosure

999bat does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your data only in the following limited and controlled circumstances:

• Payment service providers: We share the minimum necessary financial data with payment processors including bKash, Nagad, Rocket, Upay, Visa, Mastercard, and Dutch-Bangla Bank for the purpose of processing your deposits and withdrawals. These providers are contractually bound to handle your data securely and only for the stated purpose.
• Identity verification partners: Where required for Know Your Customer (KYC) compliance, we may share identity documents and personal details with third-party verification service providers operating under equivalent data protection standards.
• Game software providers: Live casino and slot game providers such as Evolution Gaming, Ezugi, Pragmatic Play, and Spribe may receive anonymised session and technical data necessary to deliver their gaming services. These providers do not receive your full identity or financial data.
• Legal and regulatory authorities: We may disclose your personal data to relevant authorities, law enforcement agencies, or regulatory bodies where we are legally required to do so, or where we have a good-faith belief that disclosure is necessary to prevent fraud, illegal activity, or harm.
• Corporate restructuring: In the event of a merger, acquisition, or sale of all or part of the 999bat business, your personal data may be transferred to the relevant acquiring entity. You will be notified of such a transfer and the new entity's privacy commitments before any change takes effect.

Cookies & Tracking Technologies

999bat uses cookies and similar tracking technologies to operate the platform effectively, maintain your session state, detect fraudulent access attempts, and analyse aggregated usage patterns. A cookie is a small text file stored on your device by your web browser when you visit the 999bat platform. Cookies do not contain executable code and cannot access other data on your device.

The categories of cookies used by 999bat are as follows:

• Strictly necessary cookies: Essential for the platform to function — they maintain your login session, remember your currency preference, and enable the secure cashier. These cookies cannot be disabled without breaking the platform's core functionality.
• Performance and analytics cookies: Used to collect anonymised data about how players interact with the platform, which pages are visited most frequently, and where technical errors occur. This data helps us improve platform performance for players across Bangladesh.
• Functional cookies: Used to remember your preferences such as game category filters, notification settings, and last-visited page so that your next visit begins where you left off.
• Security cookies: Used to detect and prevent bot activity, brute-force login attempts, and cross-site request forgery (CSRF) attacks on the 999bat platform.

You may manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to log in and use core platform features. 999bat does not use third-party advertising or retargeting cookies.

Data Retention

999bat retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and compliance obligations. The following general retention periods apply:

• Active account data: Retained for the full duration of your active account relationship with 999bat, plus a minimum of five years following account closure to satisfy AML record-keeping requirements.
• Transaction records: Deposit and withdrawal histories are retained for a minimum of seven years from the date of the transaction to comply with financial record-keeping standards.
• Identity verification documents: Retained for five years following account closure, or longer if required by a specific legal obligation or regulatory investigation.
• Support communications: Email and live chat records are retained for three years from the date of the communication, unless they relate to an unresolved dispute or investigation.
• Technical and analytics data: Aggregated, anonymised analytics data may be retained indefinitely as it cannot be linked back to any individual player.

When personal data is no longer required for its stated purpose and no legal obligation requires its retention, 999bat will securely delete or anonymise the data so that it can no longer be associated with any identified or identifiable individual.

Security Measures

999bat takes the security of your personal data seriously and implements a range of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• 128-bit SSL/TLS encryption on all data transmitted between your device and the 999bat servers, ensuring that your login credentials, payment details, and personal information cannot be intercepted in transit.
• Two-factor authentication (2FA) via SMS OTP for account logins, providing an additional layer of security beyond your password alone.
• Hashed and salted password storage — your password is never stored in plain text. 999bat stores only a cryptographic hash of your password so that even in the unlikely event of a data breach, your actual password cannot be recovered.
• Access controls: Only authorised 999bat personnel whose job functions require access to specific categories of personal data are granted access. All access is logged and audited regularly.
• Intrusion detection systems that monitor for unusual access patterns, automated bot activity, and attempted security breaches in real time.
• Regular security reviews of the 999bat platform infrastructure, including patch management, vulnerability scanning, and periodic third-party security assessments.

Your Rights

As a 999bat player, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact us in writing at [email protected], clearly stating your full name, registered email address, and the nature of your request. We will respond within 30 days.

• Right of access: You have the right to request a copy of the personal data that 999bat holds about you, along with information about how it is being used and with whom it has been shared.
• Right to rectification: You have the right to request that inaccurate or incomplete personal data held about you be corrected or completed without undue delay.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our overriding legal obligations to retain certain records.
• Right to restriction of processing: You may request that we temporarily halt the processing of your data while the accuracy of the data or the legitimacy of processing is under dispute.
• Right to data portability: Where processing is based on your consent or a contract with you, you may request a copy of your data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing based on our legitimate interests, including profiling. We will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where we process your data on the basis of consent (e.g., for promotional communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

Children's Privacy

The 999bat platform is strictly intended for adults aged 18 years and over. We do not knowingly collect, process, or store any personal data from individuals under the age of 18. If you are a parent or guardian and you believe that a minor has provided personal data to 999bat, please contact us immediately at [email protected] so that we can take appropriate action, including the deletion of the relevant data and the closure of any associated account.

International Data Transfers

999bat is an internationally operated platform. As a result, your personal data may be stored on and processed by servers located outside Bangladesh. Where data is transferred internationally, 999bat ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that described in this Privacy Policy. These safeguards may include contractual data protection clauses with service providers, or reliance on providers that maintain internationally recognised security certifications.

By registering an account with 999bat and accepting this Privacy Policy, you consent to the transfer of your personal data to international server infrastructure as described in this section, provided that such transfers are conducted under the protective measures outlined above.

Third-Party Services

The 999bat platform integrates with third-party game providers (including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming) and payment processors (including bKash, Nagad, Rocket, Upay, Visa, and Mastercard). These third-party services operate under their own privacy policies and data processing agreements. 999bat is not responsible for the data practices of third-party providers beyond the contractual data protection obligations we impose on them as part of our service agreements.

The 999bat platform does not contain links to external third-party websites for advertising or affiliate purposes. Any integration with a third-party service is strictly functional — limited to game delivery and payment processing — and does not result in your browsing data or personal profile being shared with advertising networks.

Policy Updates

999bat reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or the scope of services offered on the platform. When material changes are made, we will notify registered players by email or through a prominent notice on the platform, giving reasonable advance notice before the changes take effect.

The date of the most recent revision is displayed at the top of this document. We encourage you to review this Privacy Policy periodically to stay informed about how 999bat protects your personal data. Continued use of the 999bat platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms.

Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about the way 999bat has handled your personal data, please contact our support team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Support Hours: 24 hours a day, 7 days a week
• Response Language: English
• Time Zone: Bangladesh Standard Time (BST, UTC+6)
• Response Timeframe: We aim to acknowledge all data rights requests within 48 hours and provide a full response within 30 days.

If you are not satisfied with our response to your privacy concern, you have the right to escalate the matter to an independent data protection authority or dispute resolution service, as applicable to your jurisdiction. Details of available escalation paths will be provided in our response to your initial complaint.