app999 Privacy
Policy

This Privacy Policy ("Policy") describes how app999 ("we", "us", "our", "the Platform") collects, uses, stores, discloses, and otherwise processes personal data relating to individuals ("you", "the Player", "the User") who visit, register on, or otherwise interact with the app999 website at app999.club and all associated services.

By creating an account, making a deposit, or using any feature of the app999 platform, you acknowledge that you have read this Policy and consent to the processing of your personal data in the ways described herein. If you do not agree with any part of this Policy, you must not use the Platform.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which form part of your overall agreement with app999.

app999 collects personal data across several categories depending on how you interact with the Platform. The table below provides a structured overview of the categories of personal data we process and the specific data points within each category.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic or biometric data, or health data, except where health-related information is voluntarily provided in the context of a responsible gaming request (e.g., a player disclosing a gambling addiction). Such information is handled with the utmost discretion and used solely to facilitate the requested support measure.

app999 collects personal data through the following primary channels:

• Direct provision: Data you supply when registering an account, completing identity verification, making a deposit or withdrawal, submitting a support request, or participating in a promotion.
• Automated technologies: Data collected automatically when you use the Platform, including cookies, web beacons, server logs, and similar tracking technologies. See Section 7 for full cookie details.
• Payment processors: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Visa, and Mastercard when you complete a financial transaction on the Platform.
• Third-party game providers: Aggregated gameplay statistics returned by our software partners including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe. These providers supply game logic; they do not receive your personal identity data from app999.
• Fraud prevention services: Risk signals from third-party fraud detection tools that help us protect the integrity of the Platform and the safety of all players.

app999 uses the personal data it collects for the following defined purposes. We do not use your data for any purpose that is incompatible with the purposes listed below without first obtaining your explicit consent.

• Account creation and management: To register your account, verify your identity, and maintain accurate account records.
• Transaction processing: To process deposits and withdrawals in Bangladeshi Taka (৳) via your chosen payment method and to maintain a complete transaction ledger for your account.
• Platform operation: To deliver the games, betting markets, promotions, and other features that constitute the app999 service.
• Security and fraud prevention: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, and other prohibited behaviour as defined in our Terms & Conditions.
• Responsible gaming: To monitor account activity for signs of problem gambling, to apply player-requested limits and exclusions, and to facilitate support outreach where the Platform identifies potential harm.
• Legal and regulatory compliance: To fulfil any obligations imposed on the Platform under applicable law, including record-keeping requirements and responses to lawful requests from competent authorities.
• Customer support: To respond to your queries, complaints, and support tickets in a timely and accurate manner.
• Platform improvement: To analyse usage patterns and performance data in order to improve the user experience, fix bugs, and develop new features.
• Marketing communications: To send you promotional offers, bonus notifications, and updates about new games or features — but only where you have opted in to receive such communications. You may opt out at any time.

app999 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing that is required to perform our contract with you — namely, the provision of the app999 platform services as described in our Terms & Conditions.
• Legitimate interests: Processing carried out for the purposes of fraud prevention, platform security, responsible gaming monitoring, and internal analytics, where those interests are not overridden by your fundamental rights and freedoms.
• Legal obligation: Processing required to comply with applicable laws, including record-keeping, anti-money laundering checks, and responses to lawful authority requests.
• Consent: Processing based on your freely given, specific, and informed consent — in particular, the sending of direct marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of processing that took place prior to withdrawal.

app999 does not sell, rent, or otherwise commercially transfer your personal data to third parties. We may, however, share your data with the following categories of recipients where strictly necessary:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Visa, and Mastercard receive only the transaction data necessary to process your deposit or withdrawal. They operate under their own privacy policies and are independent data controllers for their own processing activities.
• Identity verification providers: Where we are required to verify your identity, a specialist third-party KYC (Know Your Customer) provider may process a limited set of your identity documents. All such providers are bound by strict data processing agreements.
• IT and hosting providers: Our platform is hosted on secure servers. Our hosting and infrastructure partners process technical data solely as data processors acting on app999's documented instructions.
• Fraud and security services: Anonymised or pseudonymised risk signals may be shared with fraud detection service providers to protect the Platform and its players.
• Legal and regulatory authorities: app999 will disclose personal data to law enforcement, courts, or other competent authorities where required to do so by law or a valid legal order. We will endeavour to notify you of any such disclosure to the extent permitted by law.

app999 uses cookies and similar technologies (web beacons, pixel tags, local storage objects) to operate and improve the Platform. The following cookie categories are used:

Strictly necessary cookies are placed automatically as they are essential for the Platform to function. All other cookie types are placed only where you have provided consent. You may manage or withdraw cookie consent at any time through your browser settings or by contacting support. Please note that disabling strictly necessary cookies will impair your ability to use the Platform.

app999 retains personal data only for as long as it is needed to fulfil the purposes set out in this Policy, or as required by applicable law. The following general retention periods apply:

• Account data: Retained for the duration of your account plus a minimum of 5 years after account closure to meet record-keeping obligations. Following this period, data is securely deleted or anonymised.
• Transaction records: Retained for a minimum of 7 years from the date of each transaction in accordance with financial record-keeping requirements.
• Support communications: Retained for 3 years from the date of the last communication unless the matter relates to an ongoing dispute, in which case data is retained until the dispute is fully resolved.
• Marketing consent records: Retained for as long as you remain subscribed to marketing communications, and for 2 years after any opt-out, as evidence of the consent or withdrawal.
• Technical and usage logs: Retained for up to 13 months for performance analysis purposes, then aggregated or deleted.

Upon account closure, app999 will process a data deletion request within 90 days, subject to the minimum retention periods described above. Certain data may be anonymised rather than deleted where deletion would result in disproportionate effort or would destroy records required by law.

app999 has implemented a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the app999 servers.
• Encryption of sensitive data fields (including financial account references and identity document data) at rest using AES-256 encryption.
• Role-based access controls ensuring that only authorised personnel with a documented business need can access personal data.
• Regular vulnerability assessments and penetration testing of Platform infrastructure.
• Monitoring systems that detect and alert on anomalous access patterns in near-real time.
• Staff training on data protection obligations and secure data handling procedures.

Despite these measures, no internet transmission or electronic storage system is completely secure. app999 cannot guarantee absolute security of your data, and the Platform is not liable for any breach that occurs as a result of circumstances outside our reasonable control. If you believe that your account has been compromised, please contact our support team immediately at [email protected].

As a player whose personal data is processed by app999, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact our support team at [email protected] with a clear description of your request. app999 will respond within 30 days.

• Right of Access: You may request a copy of all personal data that app999 holds about you, together with information about how it is being used.
• Right to Rectification: If any of your personal data is inaccurate or incomplete, you have the right to request that it be corrected without undue delay.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to any applicable legal retention obligations.
• Right to Restriction: You may request that we restrict the processing of your data in certain circumstances — for example, while the accuracy of the data is being contested.
• Right to Data Portability: Where processing is based on your consent or the performance of a contract, you may request that your data be provided to you in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing based on legitimate interests or carried out for direct marketing purposes. Where you object to direct marketing, app999 will cease such processing immediately.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

The app999 platform is strictly intended for adults aged 18 years and above. We do not knowingly collect personal data from individuals under the age of 18. If you are under 18, you are prohibited from registering an account, making a deposit, or using any game or betting service on the Platform.

If app999 discovers or is notified that personal data belonging to a person under 18 has been collected, we will immediately close the associated account, forfeit any balance in accordance with our Terms & Conditions, and securely delete the personal data without undue delay.

Parents and guardians who believe that a minor may have accessed the Platform are encouraged to contact us immediately at [email protected].

The app999 platform may contain references to third-party payment service providers (such as bKash and Nagad) and game software providers (such as Pragmatic Play and Evolution Gaming). While you interact with those services through our Platform, they are independent companies operating under their own privacy policies.

app999 is not responsible for the privacy practices of any third-party service whose offering is accessed in connection with your use of our Platform. We encourage you to review the privacy policies of any third-party service you interact with independently of app999.

app999 reserves the right to update or revise this Privacy Policy at any time. When material changes are made, we will notify registered players via the email address associated with their account and will display a prominent notice on the Platform for a period of at least 14 days prior to the change taking effect.

The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. Your continued use of the Platform following the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you must cease using the Platform and may request account closure by contacting our support team.

We recommend reviewing this Policy periodically to remain informed of how app999 protects your personal data. All previous versions of this Policy are available upon request.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which app999 processes your personal data, please contact our dedicated support team using the details below. We aim to acknowledge all privacy-related enquiries within 48 hours and to provide a substantive response within 30 days.

When submitting a data rights request, please include your registered username and a clear description of the right you wish to exercise so that our team can process your request efficiently and securely.