999zz Privacy Policy — Your Data, Your Rights
This Privacy Policy explains what personal data 999zz collects from players, how that data is used, who it may be shared with, and the rights you have over your own information. We are committed to handling your data with transparency, security, and respect.
Last updated: January 2026
1. Introduction
Who we are and why this Privacy Policy exists.
999zz ("we", "us", "our") operates the online casino and sports betting platform accessible at 999zz.bio, serving players primarily located in Bangladesh. In the course of providing our services — which include live casino games, slots, crash games, fish shooting games, and sports betting — we necessarily collect and process certain personal data about the players who register and use our platform. This Privacy Policy sets out, in plain English, exactly what data we collect, why we collect it, what we do with it, and the choices and rights you have in relation to your personal data.
By registering an account on 999zz, you acknowledge that you have read this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you have any questions about how your data is handled, you may contact our support team using the email address shown in the footer of this page. We will respond to all data-related enquiries within 5 business days.
2. What Data We Collect
The categories of personal data collected by 999zz during account registration and platform use.
999zz collects personal data in several ways: directly from you when you register or interact with the platform, automatically through your use of the website (such as cookies and device data), and in some cases from third-party service providers such as payment processors. The categories of data we collect are described below.
Identity Data
Full name, date of birth, national ID or passport number collected at registration or KYC.
Contact Data
Mobile phone number and email address used to create and manage your account.
Financial Data
Payment method identifiers (bKash/Nagad wallet numbers, bank account references), transaction history, deposit and withdrawal amounts.
Technical Data
IP address, device type, browser type, operating system, session timestamps, and cookie identifiers collected automatically.
Behavioural and Gaming Data
Your activity on the 999zz platform including games played, bets placed, bet amounts, game session durations, bonus usage, and responsible gaming tool usage (e.g. deposit limit settings, self-exclusion requests). This data is collected to operate the platform, personalise your experience, detect fraud, and comply with responsible gaming obligations.
Communications Data
Records of any communications between you and 999zz, including support tickets, live chat transcripts, and emails. These records are retained for quality assurance, dispute resolution, and compliance purposes. We do not record telephone calls; all support is provided via email and written channels only.
3. How We Use Your Data
The specific purposes for which 999zz processes the personal data it collects.
Account Management and Service Delivery
We use your identity, contact, and financial data to create and maintain your account, process deposits and withdrawals, calculate and credit bonuses, enable gameplay and sports betting, and provide customer support. Without this data we cannot operate your account or deliver the core services of the 999zz platform.
Identity Verification and Fraud Prevention
We use identity and financial data to verify that players are who they say they are, to prevent fraudulent account creation, to detect and investigate suspicious betting patterns, and to identify and block unauthorised access attempts. This processing is necessary to protect both 999zz and other legitimate players from harm.
Responsible Gaming and Player Protection
We use behavioural and gaming data to monitor for signs of problem gambling, to enforce deposit limits and self-exclusion requests, to send responsible gaming reminders, and to comply with our obligations to maintain a safe gambling environment. This processing is in the legitimate interests of player welfare and platform integrity.
Legal Compliance and Regulatory Obligations
We process personal data where required to comply with applicable laws and regulations, including anti-money laundering (AML) requirements, age verification obligations, and any lawful request from a competent authority. Retention of certain financial and identity records is a legal requirement rather than a business preference, and we are obligated to retain such records for defined periods regardless of whether an account is still active.
Marketing and Promotional Communications
With your consent at registration, we may use your contact data to send you promotional offers, bonus notifications, and platform updates via SMS or email. You may withdraw your consent to marketing communications at any time by contacting our support team or by following the unsubscribe instructions included in any marketing message we send. Withdrawing marketing consent does not affect the lawfulness of processing carried out before the withdrawal.
4. Legal Basis for Processing
The lawful grounds on which 999zz processes your personal data.
999zz processes your personal data on one or more of the following legal bases: (a) Contractual necessity — processing is required to perform our obligations under the Terms and Conditions you agreed to at registration, including account management, payment processing, and game delivery; (b) Legal obligation — processing is required to comply with applicable laws, including AML regulations and age verification requirements; (c) Consent — for marketing communications and certain cookie categories, where you have provided explicit consent; (d) Legitimate interests — where processing is necessary for our legitimate business interests, such as fraud detection, platform security, and responsible gaming monitoring, provided those interests are not overridden by your fundamental rights.
Where we rely on legitimate interests as our legal basis, we have assessed that our interests do not override your fundamental privacy rights. If you have concerns about any specific processing activity, you may contact us using the email address in the footer and we will explain the specific legal basis in more detail and address any concerns you raise.
5. Sharing Your Data
The circumstances in which 999zz shares player data with third parties.
Payment Service Providers
To process deposits and withdrawals, 999zz necessarily shares relevant financial transaction data with payment service providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Visa, and Mastercard. The data shared is limited to what is strictly necessary to complete the transaction. These providers process your data in accordance with their own privacy policies and applicable financial regulations.
Game Technology Providers
To deliver live casino, slots, and other game content, 999zz uses certified third-party game providers including Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe. These providers may receive session data necessary to authenticate your account and track game outcomes for payout calculation purposes. Game providers are contractually bound to use this data solely for game delivery and do not use it for their own marketing.
Law Enforcement and Regulatory Authorities
999zz will disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory authorities where required to do so by applicable law, court order, or where we believe in good faith that disclosure is necessary to prevent fraud, money laundering, or other serious criminal activity. In such cases we will disclose only the minimum data necessary to satisfy the legal obligation or to prevent the harm in question.
999zz does not sell your personal data to third parties. We do not share your data with advertisers, data brokers, or any organisation for commercial marketing purposes without your explicit consent. The only third parties with whom we share data are those strictly necessary to deliver the services described in these terms.
6. Cookies and Tracking Technologies
How 999zz uses cookies and similar technologies on its platform.
When you visit 999zz.bio, our platform uses cookies and similar tracking technologies (including local storage and session storage) to operate certain essential functions, remember your preferences, and analyse how the platform is used. Below is a breakdown of the types of cookies we use.
Essential Cookies
These cookies are strictly necessary to operate the 999zz platform. They include session cookies that keep you logged in during your visit, cookies that maintain your account state between pages, and cookies that enforce security measures such as CSRF protection. You cannot opt out of essential cookies while using the platform, as they are required for it to function.
Performance and Analytics Cookies
These cookies collect anonymised data about how visitors use the 999zz platform — which pages are visited most frequently, where users navigate from, and how long sessions last. This information is used to improve platform performance and user experience. Analytics data is aggregated and does not identify individual users. You may decline these cookies without affecting the core functionality of the platform.
Preference Cookies
These cookies remember choices you have made on the platform — such as your preferred language setting — so that you do not have to re-select them each time you visit. Preference cookies improve your experience by making the platform feel more personalised. You may decline these cookies, in which case you may need to re-enter your preferences on each visit.
7. Data Retention
How long 999zz retains the personal data it collects.
999zz retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by law. For active player accounts, all categories of personal data are retained for the duration of the account relationship. Following account closure — whether voluntary or enforced — we retain identity and financial data for a minimum period of 7 years in order to comply with anti-money laundering record-keeping requirements and to be able to respond to any regulatory enquiry or legal claim that may arise during that period.
Technical and behavioural data (such as device logs, click patterns, and session data) that is not required for legal compliance is retained for a shorter period — typically 24 months — after which it is deleted or anonymised. Communications data (support tickets and emails) is retained for 3 years from the date of the communication. Marketing preference data is retained until you withdraw consent, at which point it is deleted within 30 days.
8. Data Security
The technical and organisational measures 999zz applies to protect your personal data.
999zz takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, loss, destruction, or disclosure. These measures include SSL/TLS encryption for all data transmitted between your device and our platform, encrypted storage of sensitive personal data and financial records, access controls that restrict internal access to personal data on a need-to-know basis, regular security reviews of our platform and third-party integrations, and staff training on data handling and security obligations. No system is completely immune to security risks, and we cannot guarantee absolute security. However, we commit to notifying affected players without undue delay in the event of a data breach that poses a significant risk to their rights or interests.
All connections to 999zz.bio are protected by SSL encryption. Your financial data — including bKash, Nagad, and bank account details — is stored in encrypted form and is never transmitted in plain text. Our internal access controls ensure that only authorised personnel with a legitimate operational need can access personal data, and all such access is logged and audited.
9. Your Data Rights
The rights you have in relation to your personal data held by 999zz.
Right of Access
You have the right to request a copy of the personal data that 999zz holds about you. We will provide this information in a clear, accessible format within 30 days of receiving your verified request. To submit an access request, contact our support team via the email address shown in the footer of this page and include your registered mobile number so we can locate your account.
Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. Please contact our support team with the specific details you believe are incorrect and the correct information you would like substituted. We will action valid rectification requests within 14 days.
Right to Erasure
In certain circumstances you have the right to request that 999zz deletes your personal data. This right applies where the data is no longer necessary for the purpose it was collected, where you withdraw consent and there is no other legal basis for processing, or where you object to processing and there are no overriding legitimate grounds. Note that this right is not absolute: where we are legally required to retain data (e.g. for AML compliance), we are unable to erase it even upon request, and will explain the specific retention obligation that applies.
Right to Object to Processing
You have the right to object to 999zz processing your personal data where we rely on legitimate interests as our legal basis. If you raise an objection, we will stop processing the relevant data unless we can demonstrate compelling legitimate grounds for the processing that override your interests and rights. You also have an absolute right to object to processing your data for direct marketing purposes, and we will action such objections immediately.
Right to Data Portability
Where we process your personal data on the basis of your consent or to perform a contract, and where that processing is carried out by automated means, you have the right to request that we provide your data to you in a structured, commonly used, machine-readable format. You may also request that we transmit your data directly to another controller where technically feasible. To exercise this right, please contact our support team via the footer email address.
10. Children and Minors
999zz's policy regarding the collection of data from persons under the minimum age.
The 999zz platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from persons under the age of 21. Our registration process includes an age declaration step and we use available verification tools to enforce this requirement. If we become aware that personal data has been collected from a person under the age of 21, we will delete that data promptly, close the associated account, and return any funds deposited in accordance with our responsible gaming procedures.
If you are a parent or guardian and believe that a person under the age of 21 in your care has registered an account on 999zz, please contact our support team immediately via the email address in the footer of this page. We will prioritise your request and take all necessary steps to close the account, delete the associated data, and return any deposited funds as quickly as possible.
11. Policy Changes and Contact Details
How we notify you of updates to this Privacy Policy and how to contact us with data questions.
999zz reserves the right to update or amend this Privacy Policy at any time. When we make material changes to this policy, we will notify registered players via their registered mobile number or email address and will post the revised policy on this page with an updated effective date. Your continued use of the 999zz platform after the effective date of any revision constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically so that you remain informed about how we handle your personal data.
To exercise any of your data rights described in Section 9, or to raise a concern about how 999zz handles your personal data, please contact our support team using the email address displayed in the footer of this website. Please include your full registered name and the mobile number associated with your account so we can locate your records and respond accurately. We aim to respond to all data rights requests within 30 days. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days, in which case we will notify you of the extension before the initial 30-day period expires.
Privacy questions? Email the 999zz support team at the address shown in the footer. Please state your query clearly, include your registered mobile number, and specify which right or concern you are raising. We treat all privacy enquiries with strict confidentiality and will never share the content of your enquiry with any third party except where required by law.
Know Your Rights. Play With Confidence.
Your privacy matters to us. Learn more about 999zz, visit our FAQ for common questions, or head to the casino to start playing. 21+ only.