bit999 Privacy Policy

1. Data We Collect

1.1 Registration Data

When you create an account on bit999, we collect the personal information you provide during the registration process. This includes your full legal name, date of birth, email address, mobile phone number, and residential address. This information is required to create and manage your account and to verify that you meet the minimum age requirement of 18 years.

1.2 Identity Verification (KYC) Data

To comply with anti-money laundering obligations and to process withdrawal requests, bit999 requires identity verification before your first withdrawal. During the KYC process, you may be asked to provide copies of one or more of the following documents: a valid National Identity Card (NID), a valid passport, or a valid driver's licence. You may also be asked to provide proof of address in the form of a recent utility bill, bank statement, or official government correspondence dated within the last three months.

1.3 Financial and Transaction Data

bit999 records all financial transactions conducted on the platform. This includes deposit amounts, withdrawal requests, payment method identifiers (such as bKash account numbers, Nagad account numbers, Rocket wallet identifiers, and Upay account details), transaction timestamps, and transaction reference numbers. This data is retained for financial reporting, fraud prevention, and regulatory compliance purposes.

1.4 Gameplay and Betting Activity Data

bit999 records your gameplay history, including the games you play (slots, live dealer tables, crash games), the bets you place (including cricket betting markets such as BPL, IPL, T20 World Cup, and Bangladesh Tigers fixtures), bet amounts, game outcomes, session durations, and bonus usage. This data is used to manage your account, calculate winnings and bonus eligibility, detect unusual activity, and support responsible gaming monitoring tools.

1.5 Technical and Device Data

When you access the bit999 platform, our systems automatically collect certain technical information about your device and browsing session. This includes your IP address, device type and operating system, browser type and version, screen resolution, referring URL, pages visited on the bit999 platform, time and date of access, and session duration. This data is used for platform security, fraud detection, and improving the quality of the user experience.

1.6 Communications Data

If you contact the bit999 customer support team by email or live chat, we retain records of those communications, including the content of your messages, the date and time of contact, and any supporting documents you provide. This allows us to track the resolution of any issues you have raised and to improve our support quality over time.

2. How We Use Your Data

2.1 Account Management and Service Delivery

The primary purpose for which bit999 processes your personal data is to create, maintain, and manage your player account, and to deliver the gaming and betting services you have requested. This includes processing your deposits and withdrawals in BDT via bKash, Nagad, Rocket, and Upay; crediting winnings to your account; applying and tracking bonus offers; and providing access to the full range of games and sports betting markets available on the platform.

2.2 Identity Verification and Fraud Prevention

bit999 uses your personal and financial data to verify your identity, confirm that you meet the minimum age requirement of 18 years, prevent fraudulent account activity, detect and investigate suspicious transactions, and comply with anti-money laundering obligations. Where suspicious activity is identified, bit999 may suspend your account pending investigation and may share relevant data with appropriate authorities as required by law.

2.3 Responsible Gaming Monitoring

bit999 uses your gameplay activity data — including session frequency, session duration, deposit patterns, and betting history — to monitor for signs of problem gambling. This data powers the responsible gaming tools available on the platform, including deposit limits, session time alerts, cooling-off periods, and self-exclusion functionality. For more information about these tools, visit the Responsible Gaming page.

2.4 Customer Support

We use your account data and communication history to provide effective customer support, resolve disputes, and improve the quality of our support services over time. When you contact bit999 at [email protected], we access your account information and interaction history to handle your query efficiently.

2.5 Marketing Communications

With your consent, bit999 may use your email address and mobile phone number to send you promotional communications, including information about new games, seasonal bonuses (such as Eid promotions, Pohela Boishakh free spins, and BPL cricket season special offers), and platform updates. You may withdraw your consent to receive marketing communications at any time through your account settings or by contacting the support team.

2.6 Platform Improvement and Analytics

Aggregated and anonymised technical data collected from player sessions is used to analyse platform performance, identify areas for improvement, optimise the user experience, and guide product development decisions. This analytical use of data does not involve the identification of individual players.

2.7 Legal and Regulatory Compliance

bit999 processes and retains certain categories of personal and financial data to comply with applicable legal and regulatory obligations. This includes maintaining transaction records for financial audit purposes, retaining identity verification documents as required by anti-money laundering obligations, and responding to lawful requests from competent authorities.

3. Data Sharing & Disclosure

3.1 No Sale of Personal Data

bit999 does not sell, rent, lease, or otherwise transfer your personal data to third-party marketing organisations or data brokers for commercial purposes. Your personal data is shared with third parties only in the specific, limited circumstances described in this section.

3.2 Payment Service Providers

To process deposits and withdrawals on your behalf, bit999 shares the minimum necessary transaction data with our payment partners, including bKash, Nagad, Rocket (Dutch-Bangla Bank), Upay, City Bank, BRAC Bank, Islami Bank, Sonali Bank, and Dutch-Bangla Bank. These partners process transaction data solely for the purpose of completing financial transfers and are bound by their own privacy and data security obligations.

3.3 Game Technology Providers

Games on the bit999 platform are powered by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, Habanero, and Playtech. These providers may receive anonymised session and gameplay data to facilitate game delivery and verify the integrity of game outcomes. No directly identifiable personal data (such as your full name or payment details) is shared with game providers.

3.4 Legal and Regulatory Authorities

bit999 may disclose your personal data to government agencies, regulatory bodies, law enforcement authorities, or financial intelligence units where we are required to do so by law, or where we have reasonable grounds to believe that such disclosure is necessary to prevent fraud, money laundering, or other serious criminal activity. Where legally permissible, bit999 will endeavour to notify you of any such disclosure.

3.5 Service Providers and Technology Partners

bit999 engages certain third-party service providers to support platform operations, including hosting and cloud infrastructure providers, cybersecurity service providers, and customer support technology platforms. These service providers access your data only to the extent necessary to perform their contracted functions and are bound by strict data processing agreements that prohibit the use of your data for any other purpose.

3.6 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of the bit999 business, your personal data may be transferred to the acquiring or successor entity as part of that transaction. In such an event, bit999 will notify affected users and ensure that the privacy protections described in this policy continue to apply to your data following any such transfer.

4. Cookies & Tracking

4.1 What Are Cookies

Cookies are small text files that are placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits, remember your preferences, and provide a more consistent and personalised user experience. bit999 uses cookies and similar tracking technologies (including web beacons and local storage) on the bit999 platform.

4.2 Types of Cookies Used

bit999 uses the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They enable core features such as account login, session management, and security. You cannot opt out of strictly necessary cookies while using the platform.
• Functional Cookies: These cookies remember your preferences and settings — such as your chosen language, display settings, and game preferences — to provide a more personalised experience across sessions.
• Analytics Cookies: These cookies collect anonymised data about how players interact with the bit999 platform, including which pages are visited most frequently, how long players spend on each section, and where users exit the platform. This data helps us improve the platform experience.
• Marketing Cookies: With your consent, these cookies track your interaction with promotional content on the bit999 platform to help us deliver more relevant offers and communications. They do not track your activity on third-party websites.

4.3 Managing Cookies

You can manage cookie preferences through your browser settings. Most browsers allow you to view, delete, and block cookies from specific websites or all websites. Please note that disabling certain categories of cookies — particularly strictly necessary and functional cookies — may affect the performance and features of the bit999 platform. Instructions for managing cookies in the most commonly used browsers are available through the respective browser's help documentation.

4.4 Session Cookies and Persistent Cookies

bit999 uses both session cookies (which expire when you close your browser) and persistent cookies (which remain on your device for a defined period, or until you delete them). Persistent cookies are used to remember your login state, preferences, and account settings between sessions, so you do not need to re-enter them on each visit.

5. Data Security

5.1 Technical Security Measures

bit999 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include SSL/TLS encryption for all data transmitted between your device and the platform, encrypted storage of sensitive personal and financial data at rest, two-factor authentication options for player accounts, regular security audits and vulnerability assessments, and intrusion detection systems that monitor for suspicious access attempts.

5.2 Access Controls

Access to personal data held by bit999 is restricted on a strict need-to-know basis. Only authorised members of the bit999 team whose role requires access to specific categories of data are permitted to view or process that data. All team members with access to personal data are subject to confidentiality obligations and receive regular data security training.

5.3 Payment Security

Financial transactions processed via bKash, Nagad, Rocket, Upay, and banking partners are handled through secure, encrypted payment channels. bit999 does not store full payment account credentials on its servers. Payment identifiers (such as partial mobile wallet numbers) are stored in encrypted form and used only for transaction verification and fraud detection purposes.

5.4 Data Breach Response

In the event of a confirmed personal data breach that is likely to result in a risk to your rights and freedoms, bit999 will take prompt action to contain the breach, assess its scope and impact, and notify affected users without undue delay. Notification will be provided via the email address associated with your account. bit999 will also take remedial action to prevent a recurrence of any confirmed breach.

5.5 Player Responsibility

While bit999 takes extensive measures to secure your data on the platform side, the security of your account also depends on the strength and confidentiality of your login credentials. You are responsible for choosing a strong, unique password for your bit999 account, keeping that password confidential, and logging out of your account when using a shared or public device. bit999 cannot be held liable for data breaches resulting from your failure to maintain adequate account credential security.

6. Data Retention

6.1 Retention Periods

bit999 retains your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Active Account Data: Retained for the full duration of your account's active status on the bit999 platform.
• KYC and Identity Documents: Retained for a minimum of five years from the date of account closure or the date the document was submitted, whichever is later, in accordance with anti-money laundering record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of five years from the date of each transaction for financial audit and anti-money laundering compliance purposes.
• Gameplay and Betting History: Retained for a minimum of three years from the date of each game session or bet, or for the duration of the account's active status, whichever is longer.
• Customer Support Communications: Retained for a minimum of two years from the date of the last communication in each support thread.
• Technical and Device Logs: Retained for up to 12 months from the date of each log entry, unless extended retention is required for an ongoing security investigation.

6.2 Deletion and Anonymisation

Upon the expiry of the applicable retention period, personal data is either securely deleted or anonymised so that it can no longer be linked to you as an individual. Anonymised and aggregated data may be retained indefinitely for analytical and statistical purposes, as it no longer constitutes personal data.

6.3 Account Closure and Data Retention

Closing your bit999 account does not result in the immediate deletion of all data associated with that account. Data subject to mandatory legal retention periods — including KYC documents and financial transaction records — will be retained for the full periods specified above, even after account closure. Data that is not subject to a mandatory retention period will be deleted within 90 days of account closure.

7. Your Privacy Rights

7.1 Right of Access

You have the right to request a copy of the personal data that bit999 holds about you. Access requests should be submitted in writing to [email protected] with the subject line "Data Access Request". bit999 will respond to verified access requests within 30 days of receipt. In cases where the volume of data requested is large or the request is complex, this period may be extended by a further 30 days, and you will be notified accordingly.

7.2 Right to Correction

If any of the personal data that bit999 holds about you is inaccurate or incomplete, you have the right to request its correction. You may update certain account details directly through your account profile. For corrections to data that cannot be updated through the account profile — such as KYC documents or financial records — please contact the support team at [email protected].

7.3 Right to Deletion

You may request the deletion of personal data that bit999 holds about you. bit999 will action deletion requests subject to any overriding legal or regulatory retention obligations. Data that is subject to a mandatory retention period — such as KYC documents and financial transaction records — cannot be deleted before the end of that period. Data that is not subject to such an obligation will be deleted within a reasonable time following a verified deletion request.

7.4 Right to Restrict Processing

In certain circumstances, you have the right to request that bit999 restricts the processing of your personal data — for example, while the accuracy of that data is being verified following a correction request, or while a complaint about our processing practices is being investigated.

7.5 Right to Object to Marketing

You have the right to object to the use of your personal data for direct marketing purposes at any time. To opt out of marketing communications from bit999, update your communication preferences in your account settings or contact the support team at [email protected]. Marketing opt-outs will be processed within 5 business days.

7.6 How to Exercise Your Rights

To exercise any of the rights described in this section, please contact the bit999 data support team by email at [email protected]. To protect your privacy, all rights requests must be submitted from the email address registered to your bit999 account, and bit999 may request additional identity verification before processing any request.

8. Policy Updates & Contact

8.1 Changes to This Privacy Policy

bit999 reserves the right to update, amend, or replace this Privacy Policy at any time. The most current version of the Privacy Policy is always available at bit999.club/privacy-policy. The date at the top of this policy indicates when it was last updated. Where material changes are made to this policy — changes that significantly affect how we collect, use, or share your data — bit999 will notify registered players by email to the address associated with their account at least 7 days before the changes take effect.

8.2 Continued Use as Acceptance

Your continued use of the bit999 platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes made to this policy, you should cease using the platform and contact the support team to discuss your options, including account closure.

8.3 Contact for Privacy Matters

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way bit999 handles your personal data, please contact the support team. All privacy-related correspondence should be sent to:

• Email: [email protected]
• Subject Line for Data Requests: "Data Access Request" / "Data Correction Request" / "Data Deletion Request"
• Subject Line for Complaints: "Privacy Complaint"
• Response Time: bit999 acknowledges all privacy correspondence within 24 hours and provides a substantive response within 5 business days (Bangladesh Standard Time, UTC+6).

8.4 Governing Language

This Privacy Policy is published in English. The English version is the authoritative and binding version of this policy. Any translated version provided for convenience does not constitute a legally binding document and shall not be used to interpret the provisions of this policy.