Privacy Policy — 8999tt Data Commitment

8999tt is an online gaming and sports betting platform serving adult players in Bangladesh. In the course of operating this platform — including registering accounts, processing deposits, settling withdrawals, and providing customer support — 8999tt necessarily collects and processes personal data belonging to its players.

This Privacy Policy has been written to be clear, direct, and readable. It tells you exactly what data we collect, why we collect it, who we share it with (and under what conditions), how long we keep it, and what controls you have over your own information. We do not sell personal data. We do not use personal data for purposes beyond those described in this policy.

This policy applies to all data collected through the 8999tt website at https://8999tt.bid, through the 8999tt mobile-optimised interface, through communications with 8999tt support, and through transactions with 8999tt payment processors. It does not apply to third-party websites or services linked to or from the 8999tt platform.

For the purposes of this Privacy Policy, the data controller responsible for your personal information is 8999tt, operating the platform at https://8999tt.bid. As data controller, 8999tt determines the purposes and means by which your personal data is processed.

All data protection enquiries, subject access requests, and privacy-related complaints should be directed to the 8999tt data protection contact at [email protected]. We will acknowledge all privacy-related correspondence within 2 business days (BST) and aim to resolve substantive requests within 30 calendar days of receipt.

8999tt collects the following categories of personal data from players:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data (except where voluntarily disclosed in the context of responsible gaming self-exclusion), or biometric identifiers.

8999tt collects personal data through the following channels:

• Direct Submission: Data you provide when completing the registration form, submitting KYC documents, contacting support via live chat or email, or filling in any other form on the 8999tt platform.
• Automated Technical Collection: Data collected automatically when you access the platform, including IP addresses, device identifiers, browser information, and session activity logs. This data is collected via server logs, cookies, and similar tracking technologies (see Section 9).
• Payment Processors: Transaction confirmation data received from mobile wallet providers (bKash, Nagad, Rocket, Upay) and banking partners when you make a deposit or receive a withdrawal. 8999tt receives confirmation and reference data only — full payment credentials are processed directly by the respective payment provider.
• Game Studios: Aggregated game session data (rounds played, outcomes, RTP figures) provided by third-party Game Studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi for the purpose of dispute resolution and responsible gaming monitoring.
• Anti-Fraud and Security Tools: Data from automated risk-scoring tools that analyse login behaviour, deposit patterns, and session characteristics to identify potentially fraudulent or problem gambling activity.

8999tt uses the personal data described in Section 3 for the following specific purposes:

• Account Management: Creating and maintaining your 8999tt player account, verifying your identity and age at registration and during ongoing KYC reviews, and managing account security including password resets and two-factor authentication.
• Transaction Processing: Executing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment methods; maintaining accurate transaction records; and conducting anti-money-laundering checks on payment activity.
• Customer Support: Responding to your support requests via live chat and email, maintaining records of past interactions to provide consistent and informed assistance, and resolving disputes regarding game outcomes or payment transactions.
• Responsible Gaming: Monitoring your gameplay patterns and deposit behaviour to identify signs of problem gambling; applying deposit limits, cooling-off periods, and self-exclusion settings you have requested; and contacting you proactively if our systems flag a potential concern.
• Platform Security and Fraud Prevention: Detecting and preventing account takeover attempts, multi-accounting, collusion, bonus abuse, money laundering, and other forms of fraud or prohibited conduct outlined in our Terms & Conditions.
• Legal and Regulatory Compliance: Maintaining records as required by applicable laws; responding to lawful requests from law enforcement or regulatory authorities; and exercising or defending legal claims.
• Marketing Communications (with consent only): Sending you promotional offers, bonus announcements, and seasonal promotions (such as BPL, Eid, or Pohela Boishakh offers) via email or SMS, where you have provided explicit consent. You may withdraw this consent at any time by contacting support.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve the 8999tt platform, optimise game selection, enhance mobile performance, and develop new features relevant to Bangladeshi players.

8999tt processes your personal data on the following legal grounds:

• Contractual Necessity: Processing required to perform the contract between you and 8999tt — including account creation, transaction processing, game delivery, and customer support.
• Legal Obligation: Processing required to comply with applicable laws, including identity verification, anti-money-laundering record-keeping, and age verification obligations.
• Legitimate Interests: Processing carried out in the legitimate interests of 8999tt or its players, including fraud prevention, platform security, responsible gaming monitoring, and service improvement — where those interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and optional personalisation features, where you have given explicit, informed, and freely withdrawable consent.

8999tt does not sell, rent, or trade your personal data to any third party. We share personal data only in the following limited and controlled circumstances:

• Game Studios and Platform Providers: Game session data is shared with third-party Game Studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) solely for the purpose of game delivery, dispute resolution, and RNG audit compliance. These studios act as data processors under contractual obligations consistent with this Privacy Policy.
• Payment Processors: Necessary transactional data is shared with payment service providers (bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and other banking partners) to execute your deposit and withdrawal requests. Each provider is subject to their own privacy and security standards.
• KYC and Fraud Prevention Partners: Identity documents and verification data may be shared with third-party KYC verification services for the purpose of confirming your identity and age. These partners are bound by strict confidentiality and data processing agreements.
• Legal and Regulatory Authorities: 8999tt may disclose personal data to law enforcement agencies, financial intelligence units, or regulatory bodies where required by applicable law, court order, or lawful government request. In such cases, 8999tt will disclose only the minimum data necessary to satisfy the legal requirement.
• Professional Advisers: Lawyers, auditors, and compliance consultants acting as data processors may access limited personal data strictly in connection with their professional engagement with 8999tt, subject to professional confidentiality obligations.

In all cases where personal data is shared with third parties acting as data processors, 8999tt ensures appropriate contractual protections are in place requiring those parties to process data only for the specified purpose and to apply security standards no less rigorous than those applied by 8999tt itself.

8999tt applies heightened protection to financial data given its sensitivity. The following specific practices apply to payment-related personal data:

• Full payment credentials (bKash PINs, bank passwords, card CVVs) are never stored by 8999tt. These are entered directly into the relevant payment provider's interface and processed entirely on their infrastructure.
• 8999tt stores only the minimum payment reference data necessary to verify transactions and match deposits to player accounts — typically a wallet number (partially masked), transaction reference ID, and amount.
• All financial data in transit between your device and the 8999tt platform is encrypted using 256-bit SSL/TLS protocols. Data at rest is stored in encrypted form on secured servers with restricted access controls.
• Payment data is used exclusively for transaction processing, fraud detection, withdrawal verification, and regulatory compliance. It is never used for marketing profiling or shared with advertising networks.

8999tt uses cookies and similar tracking technologies on the platform. These are small data files stored on your device that help the platform function correctly, remember your session preferences, and analyse usage patterns. The categories of cookies used by 8999tt are as follows:

• Essential Cookies: Required for the platform to operate — including session authentication, security tokens, and language preference storage. These cannot be disabled without impairing platform functionality.
• Analytical Cookies: Used to understand how players interact with the 8999tt platform in aggregate — including pages visited, session duration, and device type. This data is anonymised and used solely for platform improvement. No individual player profile is built from this data.
• Functional Cookies: Store non-essential preferences such as your last-visited game category, display settings, and notification preferences to improve your platform experience across sessions.

8999tt does not use third-party advertising cookies or behavioural targeting cookies that track your activity outside the 8999tt platform. You can manage cookie preferences through your browser settings. Note that disabling essential cookies will prevent you from logging in or using core platform features.

8999tt retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and Identity Data: Retained for the duration of the account relationship plus a minimum of 5 years following account closure, to satisfy anti-money-laundering record-keeping requirements.
• Transaction Records: Retained for a minimum of 5 years from the date of each transaction, in accordance with applicable financial record-keeping obligations.
• KYC Verification Documents: Retained for a minimum of 5 years following account closure or the date of the last verification review, whichever is later.
• Customer Support Communications: Retained for 3 years from the date of the last interaction, to support dispute resolution and service quality review.
• Marketing Consent Records: Retained for the duration of consent plus 2 years following withdrawal of consent, as evidence of lawful processing.
• Technical and Session Logs: Retained for 12 months from the date of generation, then securely deleted unless retained longer for an active security investigation.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where data cannot be immediately deleted due to backup schedules or archival processes, it is isolated from active processing until deletion is completed.

8999tt implements a multi-layered security architecture to protect your personal data against unauthorised access, loss, alteration, or disclosure. Our key security measures include:

• Encryption in Transit: All data exchanged between your device and the 8999tt platform is encrypted using 256-bit SSL/TLS. The platform enforces HTTPS-only connections; unencrypted HTTP access is automatically redirected.
• Encryption at Rest: Sensitive personal data fields (identity documents, financial references, contact details) are encrypted at rest using industry-standard encryption algorithms on 8999tt's secured server infrastructure.
• Access Controls: Access to personal data within 8999tt's internal systems is restricted to authorised personnel on a strict need-to-know basis. Access privileges are role-based and regularly reviewed.
• Two-Factor Authentication: Player accounts are protected by optional SMS OTP-based two-factor authentication. Internal staff accounts with access to personal data require mandatory multi-factor authentication.
• Intrusion Detection: 8999tt operates automated systems that monitor for unusual login activity, brute-force attempts, and anomalous data access patterns, with real-time alerting to the security team.
• Incident Response: In the event of a confirmed personal data breach that presents a risk to affected players, 8999tt will notify affected players via email within 72 hours of confirming the breach and will take all necessary remediation steps.

While 8999tt applies rigorous security practices, no online platform can guarantee absolute protection against all possible threats. Players are encouraged to maintain strong, unique passwords and to enable two-factor authentication to maximise the security of their own accounts.

As a player on the 8999tt platform, you hold the following rights with respect to your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Privacy Rights Request".

The 8999tt platform is strictly for adults aged 18 and above. 8999tt does not knowingly collect personal data from any person under the age of 18. If 8999tt discovers or is notified that an account has been registered by a person under 18, all personal data associated with that account will be securely deleted, the account will be closed, and any funds held in the account will be dealt with in accordance with applicable policies.

Parents and guardians who believe that a minor may have registered on the 8999tt platform are urged to contact [email protected] immediately. 8999tt will treat all such reports as a priority and will act swiftly to investigate and, if confirmed, close the account and delete the associated data.

8999tt reserves the right to update this Privacy Policy at any time. When material changes are made — for example, changes to the categories of data collected, new third-party sharing arrangements, or changes to retention periods — 8999tt will notify registered players by displaying a prominent notice on the platform and, where practicable, by sending an email to the address registered on the player's account.

The effective date at the top of this policy will be updated to reflect the date of the most recent revision. We encourage you to review this page periodically. Continued use of the 8999tt platform after the effective date of any amendment constitutes acceptance of the revised Privacy Policy.

For any questions, concerns, or formal requests relating to this Privacy Policy or the handling of your personal data by 8999tt, please contact our data protection team using the details below:

• Email: [email protected] — Subject line: "Privacy Rights Request" or "Data Protection Enquiry"
• Live Chat: Available 24/7 via the live chat function on the 8999tt platform.
• Response Time: We will acknowledge all privacy-related requests within 2 business days (BST) and provide a substantive response within 30 calendar days of receipt.

If you are dissatisfied with how 8999tt has handled a privacy concern after raising it directly with our support team, you retain the right to escalate the matter to the appropriate data protection authority or seek legal redress through the applicable courts.