s999 Privacy Policy

s999 operates a premier online casino and sports betting platform serving players across Bangladesh. As a platform that processes financial transactions, identity documents, and gameplay data, s999 recognises that data privacy is not merely a legal obligation — it is a fundamental part of the trust relationship between s999 and every player who chooses to register with us.

This Privacy Policy sets out, in clear and accessible language, the categories of personal data that s999 collects from players, the specific purposes for which that data is processed, the lawful bases on which processing is conducted, the circumstances under which data may be shared with third parties, the security measures s999 employs to protect your data, and the rights you hold as a data subject.

This Privacy Policy should be read alongside the s999 Terms & Conditions and the s999 Responsible Gaming Policy, both of which form part of the legal framework governing your use of the s999 platform. Capitalised terms not defined in this Privacy Policy have the meanings assigned to them in the Terms & Conditions.

s999 collects personal data from players through several distinct channels: directly from you during registration and account operation, automatically through your use of the platform, and from third-party service providers who assist in delivering s999 services. The categories of data collected are described below.

s999 does not knowingly collect sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, or health data) unless such data is voluntarily provided in the context of a responsible gaming self-disclosure. Where sensitive data is provided in this context, it is processed solely for the purpose of supporting that player's wellbeing.

s999 uses the personal data described in Section 2 for the following specific purposes:

• Account Creation and Management: To register your player account, verify your identity, maintain your account settings, and communicate with you about your account status.
• Transaction Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, to maintain accurate financial records, and to reconcile transaction discrepancies.
• Identity Verification (KYC): To comply with anti-money laundering obligations and to confirm that you meet the age eligibility requirement of 21 years or older before processing your first withdrawal.
• Platform Delivery: To provide access to s999's casino games, sportsbook, live dealer tables, and all other platform features, and to ensure the platform functions correctly on your device.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent account activity, money laundering, collusion, and any form of Prohibited Conduct as defined in the s999 Terms & Conditions.
• Responsible Gaming Monitoring: To monitor gameplay patterns that may indicate problem gambling behaviour, to enforce deposit limits and self-exclusion periods, and to contact players who may benefit from responsible gaming support.
• Customer Support: To respond to your queries, complaints, and requests via on-site live chat and email, and to maintain records of these interactions for quality assurance and dispute resolution.
• Platform Improvement: To analyse aggregated usage data in order to improve s999's products, game selection, user interface, and overall player experience. This analysis is conducted on anonymised or pseudonymised data wherever possible.
• Legal Compliance: To comply with applicable laws, including financial record-keeping requirements, and to respond to lawful requests from competent authorities.
• Promotional Communications: Where you have provided explicit consent, to send you information about s999 promotions, bonuses, and seasonal offers. You may withdraw this consent at any time by contacting s999 support.

s999 does not use your personal data for automated profiling that produces legal or similarly significant effects on you without your knowledge. Where automated decision-making is used in fraud detection, affected players have the right to request human review of any decision made about their account.

s999 processes personal data only where a lawful basis for doing so exists. The primary legal bases on which s999 relies are as follows:

• Contractual Necessity: The processing of identity data, contact data, and financial data is necessary for s999 to perform its contractual obligations to you under the Terms & Conditions — specifically, to operate your account and process your deposits and withdrawals.
• Legal Obligation: The processing of identity data for KYC verification and the retention of financial transaction records are required to comply with applicable anti-money laundering laws and financial record-keeping obligations.
• Legitimate Interests: s999 processes technical data, usage data, and communications data on the basis of its legitimate interests in fraud prevention, platform security, and service improvement, provided that these interests are not overridden by your data protection rights.
• Consent: The processing of data for direct marketing and promotional communications is conducted solely on the basis of your explicit consent, which you may withdraw at any time without affecting the lawfulness of processing that took place prior to withdrawal.
• Vital Interests: In limited circumstances relating to responsible gaming interventions, s999 may process sensitive personal data on the basis of protecting the vital interests of the data subject.

s999 does not sell, rent, or transfer your personal data to third parties for their own commercial or marketing purposes. However, s999 does share personal data with a limited set of third-party service providers and authorities as described below:

• Payment Processors: s999 shares the minimum necessary financial and identity data with payment service providers (including the operators of bKash, Nagad, Rocket, Upay, and card payment networks) solely for the purpose of processing your deposit and withdrawal transactions.
• Identity Verification Providers: s999 may use third-party KYC (Know Your Customer) service providers to verify the identity documents you submit during account verification. These providers process your data under strict data processing agreements with s999.
• Game Technology Providers: Game providers such as Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe may receive technical session data necessary to deliver their game content within the s999 platform. These providers do not receive your full personal profile.
• IT and Platform Infrastructure Providers: s999 uses third-party hosting, content delivery, and cybersecurity services. These providers may process technical data in the course of delivering infrastructure services to s999. All such providers operate under data processing agreements that restrict their use of your data to the provision of services to s999.
• Competent Authorities: s999 may disclose personal data to law enforcement agencies, financial intelligence units, or other government authorities where required to do so by applicable law, court order, or in the context of an investigation into suspected criminal activity including money laundering or fraud.
• Responsible Gaming Organisations: In cases where a player has enrolled in a cross-platform self-exclusion programme, s999 may share the minimum necessary data with the relevant responsible gaming organisation to give effect to that exclusion.

All third parties who receive personal data from s999 are required to handle that data in accordance with applicable data protection standards. s999 does not permit any third party to use player data for their own purposes beyond the scope of the service they provide to s999.

s999 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device by the s999 website. The following categories of cookies are used on the s999 platform:

• Strictly Necessary Cookies: These cookies are essential for the s999 platform to function. They maintain your login session, remember your account preferences, and ensure that security features operate correctly. These cookies cannot be disabled without rendering core platform features inoperable.
• Performance & Analytics Cookies: These cookies collect aggregated, anonymised information about how players use the s999 platform — such as which pages are visited most frequently and how long sessions last. This data is used solely to improve the platform experience.
• Functionality Cookies: These cookies remember your preferences (such as your preferred language and display settings) so that the platform behaves as you expect on return visits.
• Security Cookies: These cookies are used in fraud prevention and platform security monitoring. They help s999 detect unusual account activity, bot behaviour, and other technical threats to the platform.

s999 does not use advertising or retargeting cookies that track your activity across third-party websites. You can manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will affect your ability to use the s999 platform normally.

s999 retains personal data for no longer than is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

• Account and Identity Data: Retained for the duration of your active account, plus a minimum period of five years following account closure, to satisfy anti-money laundering record-keeping obligations.
• Financial Transaction Data: Retained for a minimum of five years from the date of each transaction, in accordance with standard financial record-keeping requirements.
• KYC Verification Documents: Retained for the duration of your active account, plus five years following account closure. Documents are stored in encrypted form.
• Customer Support Communications: Retained for three years from the date of each interaction, for quality assurance and dispute resolution purposes.
• Technical and Usage Data: Retained in identifiable form for up to 12 months, after which it is anonymised or deleted. Anonymised aggregate data may be retained indefinitely for platform analytics purposes.
• Responsible Gaming Data: Retained for the duration of any active self-exclusion or limit period, plus three years following the end of that period, to support ongoing responsible gaming monitoring.
• Marketing Consent Records: Retained for three years from the date consent was given or withdrawn, as evidence of consent status.

At the end of the applicable retention period, personal data is securely and permanently deleted from s999 systems, or anonymised such that it can no longer be linked to any individual player.

s999 takes the security of player personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, loss, alteration, or disclosure. These measures include:

• SSL/TLS Encryption: All data in transit between your device and the s999 platform is encrypted using industry-standard SSL/TLS protocols. s999 enforces HTTPS across all platform pages.
• Encrypted Data Storage: Sensitive personal data, including identity documents and payment identifiers, is stored in encrypted form on s999 servers. Encryption keys are managed under strict access controls.
• Access Controls: Access to personal data within s999's internal systems is restricted to authorised personnel who require that access to perform their specific job functions. All internal access is logged and monitored.
• Password Security: Player account passwords are stored using one-way cryptographic hashing. s999 does not store passwords in plaintext and cannot retrieve your password — only a reset is possible.
• Fraud Monitoring: s999 operates continuous automated fraud monitoring systems that detect unusual patterns of account activity, including login attempts from unrecognised devices and anomalous financial transactions.
• Incident Response: s999 maintains a data breach incident response plan. In the event of a confirmed breach affecting player personal data, affected players will be notified in a timely manner with details of the nature of the breach and the steps s999 is taking to address it.

While s999 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. Players are advised to use a strong, unique password for their s999 account and to never share their login credentials with any third party.

As a player on the s999 platform, you hold the following rights in relation to your personal data. These rights may be exercised at any time by contacting s999 support via on-site live chat or email:

• Right to Access: You have the right to request a copy of the personal data s999 holds about you. s999 will respond to verified access requests within 30 days of receipt.
• Right to Rectification: If any personal data s999 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update many of your account details directly through your account dashboard.
• Right to Erasure: You have the right to request that s999 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other lawful basis applies), or where the data has been processed unlawfully. Please note that s999 may be required by law to retain certain data (such as financial transaction records) for a specified period even after you request erasure.
• Right to Restriction of Processing: You have the right to request that s999 restrict the processing of your personal data in certain circumstances, such as while the accuracy of data is being contested or while an objection to processing is being assessed.
• Right to Data Portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format, and to have that data transmitted to another controller where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data where s999 relies on legitimate interests as its lawful basis for processing, and where you believe your interests or fundamental rights override those legitimate interests.
• Right to Withdraw Consent: Where processing is based on your consent (such as for marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal.

To exercise any of the rights listed above, please contact s999 support via on-site live chat or at [email protected]. s999 may ask you to verify your identity before processing a rights request. s999 will respond to all verified requests within 30 days, or will notify you if additional time is required due to the complexity of the request.

The s999 platform is strictly intended for adults aged 21 years and above. s999 does not knowingly collect personal data from persons under the age of 21. Age verification is a mandatory part of the s999 account registration and withdrawal verification process.

If s999 becomes aware that personal data has been collected from a person under the age of 21, that account will be immediately suspended, all balances will be frozen pending investigation, and the data will be securely deleted in accordance with s999's data retention and responsible gaming obligations.

Parents and guardians who believe that a minor may have registered an account on the s999 platform are urged to contact s999 support immediately via on-site live chat so that appropriate action can be taken without delay.

The s999 platform may contain references to third-party game providers and payment service partners. While s999 takes care to work only with reputable third-party providers, s999 is not responsible for the privacy practices of any third-party website or service that operates independently of the s999 platform.

This Privacy Policy applies solely to the s999 platform at https://s999.io and to data collected directly by s999 in the course of operating that platform. Players are encouraged to review the privacy policies of any third-party services they use in connection with their s999 account, including their mobile financial services provider (such as bKash or Nagad).

s999 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, data processing practices, or platform functionality. When material changes are made to this Privacy Policy, s999 will update the effective date at the top of the policy and, where the changes are significant, will provide registered players with notice via an on-platform notification upon their next login.

Your continued use of the s999 platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with any change to this Privacy Policy, you should discontinue use of the s999 platform and request account closure via s999 support.

Players are encouraged to review this Privacy Policy periodically. The most current version of this policy is always available at https://s999.io/privacy-policy.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about the way s999 is handling your personal data, please contact the s999 Privacy team through any of the following channels:

• Email: [email protected] — please include "Privacy Request" in the subject line so your message is routed to the correct team.
• Live Chat: The on-site live chat feature is available 24 hours a day, 7 days a week. Average response time is 2–5 minutes. Live chat is the fastest route for urgent privacy concerns.
• Response Time: s999 aims to acknowledge all privacy-related enquiries within 48 hours and to provide a full response within 30 calendar days. Where a request is complex or involves a large volume of data, s999 will notify you of any extension to this timeline.

s999 is committed to resolving all privacy concerns fairly and promptly. If you feel that your concern has not been adequately addressed after contacting s999 support, you retain the right to escalate the matter to the relevant data protection authority in your jurisdiction.