999xo Privacy Policy – Our Commitment to Protecting Your Data

999xo collects certain information in order to provide you with its services. This data falls into two categories: what you provide directly, and what is generated automatically while you use the service.

Information you provide directly:

• Name, date of birth, gender.
• Mobile number and email address.
• Current address (division, district, thana).
• Identity verification documents (NID, passport) — required as part of the KYC process.
• Payment information (mobile banking number – full numbers are not stored).

Data collected automatically:

• IP address and device type.
• Browser type and operating system.
• Login timestamps, time spent on site, and a list of pages visited.
• Betting and gaming history (games played, duration, bet amounts).
• Transaction records (deposits, withdrawals, bonus usage).

The information above is collected to ensure 999xo operates smoothly and to improve your experience. We never ask for data that isn't necessary.

999xo uses your data only for specific and legitimate purposes. Each purpose is clearly outlined below:

999xo never uses your data beyond its original purpose. If data needs to be used for a new purpose, you will be informed in advance and fresh consent will be obtained where required.

999xo does not sell your data to third parties. However, in limited circumstances, certain information may need to be shared:

• Payment Providers: Information required to process transactions via bKash, Nagad, or Rocket is shared with those providers solely for payment processing purposes.
• Game Providers: Running third-party games on the 999xo platform may require sharing limited data with the relevant game provider. These providers are also bound by strict privacy policies.
• Regulatory Authority: Data may be required to be disclosed in response to lawful requests from licensing authorities or law enforcement agencies.
• Auditing body: Necessary technical data may be shared with independent auditors for RNG and security verification. No personal identity information is disclosed.
• Corporate restructuring: In the event of an ownership change or merger, user data may be transferred to the new entity. Users will be notified in advance if this occurs.

Outside of the situations described above, 999xo will never share your data with any advertiser, marketing company, or third party.

999xo retains your data only for as long as necessary. Retention periods by data type are outlined below:

• Account information: For the full duration of an active account and up to 5 years after account closure (as required by law).
• Transaction records: Retained for up to 7 years, as mandated by financial regulatory requirements.
• KYC Documents: Up to 5 years after verification, or as required by law.
• Gaming history: Retained for up to 2 years. Used for responsible gaming monitoring.
• Log data (IP, device): Up to 90 days. Used for security analysis.
• Marketing consent: Retained until consent is withdrawn.

Once the defined retention period expires, 999xo securely deletes or anonymises your data so that identification is no longer possible.

Cookies and similar technologies are used on the 999xo.best website and app. Cookies are small text files stored in your browser that help the site remember your preferences and session.

999xo uses three types of cookies:

• Essential Cookies: Strictly necessary to keep the site running. Used for login sessions and security purposes. These cannot be disabled.
• Performance Cookies: Helps analyse how you use the site in order to improve your experience. No personally identifiable information is collected.
• Marketing cookies: Used to show relevant ads and offers. You can disable these through your browser settings.

You can delete cookies or block new ones from being set through your browser settings. However, disabling essential cookies may affect the site's functionality.

999xo has implemented multiple layers of technical and organisational measures to ensure the security of your data:

• All data transfers are secured using TLS 1.3 protocol.
• Stored data is secured with AES-256 encryption.
• Passwords are never stored in plain text — only in hashed form.
• Option to enable two-factor authentication (2FA).
• A system that automatically detects suspicious logins and unusual account activity.
• Regular penetration testing and security audits.
• 24/7 physical and digital security monitoring at our data centres.

That said, no system on the internet is 100% secure. In the event of a security breach, 999xo will notify affected users as quickly as possible and take the necessary steps to address it.

999xo believes every user should have full control over their own data. You have the following rights:

• Right to Access: You can submit a request to view what information 999xo holds about you.
• Right to Rectification: You can request corrections to any inaccurate or outdated information.
• Right to erasure: You may request that your data be deleted under certain circumstances. However, some information may need to be retained to fulfil legal obligations.
• Right to restrict processing: You can request that we stop using your data for specific purposes.
• Right to Data Portability: You can receive your data in a structured format (CSV or JSON).
• Right to withdraw consent: Any consent given for marketing messages can be withdrawn at any time.

999xo is strictly for individuals aged 18 and above. 999xo does not collect data from or provide any services to anyone under the age of 18.

Age is verified at registration, and date of birth is confirmed during the KYC process. If a minor creates an account using false information, 999xo will close the account immediately upon discovery and review any associated balance.

If a parent or guardian discovers that their child is using 999xo, please contact us immediately at support@999xo.best.

The 999xo platform integrates certain third-party games and payment services. These services operate under their own privacy policies, which may differ from 999xo's. Please keep the following in mind:

• When making payments via bKash, Nagad, or Rocket, you will be subject to that provider's own privacy policy.
• When using third-party game provider software, that provider's own privacy policy may apply.
• 999xo is not responsible for data collected or used by third parties.
• 999xo works only with third parties that comply with strict data protection standards.

999xo reserves the right to update this Privacy Policy as needed. When changes are made:

• The "Last Updated" date at the top of this page will reflect any changes.
• For significant changes, a notice will be sent to your registered mobile number or email address.
• Notice will be posted on the site at least 7 days before any changes take effect.

Continued use of 999xo after any changes have been made will be considered acceptance of the updated privacy policy. If you do not agree with a change, you have the option to close your account.

For any questions, complaints, or data-related requests regarding this Privacy Policy, please contact 999xo through the following:

• Email: support@999xo.best (Subject line: "Privacy Policy Request").
• Live Chat: The chat widget in the bottom-right corner of 999xo.best.
• Response Time: Typically within 3 to 7 business days.

If your complaint is not resolved, you retain the right to escalate the matter to the relevant licensing authority.