Privacy Policy — 9a9999 Data Protection

9a9999 ("we", "us", "our") is the operator of the online casino and sports betting platform accessible at https://9a9999.onl. We are committed to protecting the privacy and personal data of every player who accesses or registers on our platform. This Privacy Policy describes the categories of personal information we collect, the purposes for which we process it, the parties with whom we may share it, and the rights you hold as a data subject.

By creating a 9a9999 account, making a deposit, placing a wager, or simply browsing the platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the data practices described herein. If you do not agree with any part of this policy, you should discontinue use of the platform and contact [email protected] to request account closure.

This Privacy Policy should be read together with our Terms & Conditions and our Responsible Gaming policy, all of which form part of your agreement with 9a9999. This document is written in English and is the authoritative version of our Privacy Policy. Any translated version is provided for convenience only; where a conflict exists, the English text governs.

1 Information We Collect

9a9999 collects personal information from players at several points in the registration, verification, and gameplay lifecycle. We collect only the information that is necessary to deliver a safe, compliant, and high-quality gambling experience to players across Bangladesh.

Registration and Account Information

When you register a 9a9999 account, we collect the following information directly from you:

• Full legal name
• Date of birth (for age verification — players must be 18 years of age or older)
• Email address
• Mobile phone number
• Residential address (district, city, postal code)
• Preferred language (English is the platform default)
• Username and encrypted password

Identity Verification (KYC) Documents

In accordance with our anti-money-laundering (AML) obligations and our commitment to preventing underage gambling, we may request documentary proof of identity from account holders. Acceptable documents include:

• National Identity Card (NID) — front and back scan or photograph
• Valid passport — biographical data page
• Birth certificate (for age verification purposes where NID is unavailable)
• Recent bank statement or utility bill (for address verification)

These documents are submitted through a secure, encrypted channel and are stored in an access-controlled environment. KYC documents are reviewed by our compliance team only and are never shared with third parties for commercial purposes.

Financial and Transaction Data

When you make a deposit or request a withdrawal, we record transaction-level data including the payment method used (e.g., bKash, Nagad, Rocket, Upay, or bank transfer), transaction amount in BDT, transaction reference number, timestamp, and the outcome of the transaction. We do not store full card numbers, bKash PINs, or mobile banking passwords on our servers. Payment processing is handled through encrypted, tokenised connections.

Gameplay and Betting Data

We record a complete history of your gameplay activity on the 9a9999 platform. This includes game sessions (start time, end time, game title, game provider), wager amounts, outcomes, bonus activations, and responsible gaming tool interactions (e.g., deposit limit changes, session reminders, cooling-off periods). This data is used for dispute resolution, platform improvement, and regulatory compliance.

Technical and Device Data

When you access 9a9999 via a web browser or mobile device, our servers and analytics systems automatically record certain technical information. This includes your IP address, browser type and version, operating system, device model, screen resolution, referring URL, and session duration. This information is used for security monitoring, fraud detection, and service optimisation.

2 How We Use Your Data

9a9999 processes the personal information described in Section 1 for a defined set of purposes. We do not use personal data for any purpose that is incompatible with the purposes stated at the time of collection. The following table summarises the primary purposes for which we process personal data:

Marketing Communications

If you have opted in to receive promotional emails or SMS notifications from 9a9999, we may send you information about new games, seasonal promotions (such as BPL cricket tournaments, Eid offers, or Pohela Boishakh specials), bonus offers, and platform updates. You may withdraw your consent to marketing communications at any time by updating your communication preferences in your account settings or by emailing [email protected]. Withdrawal of marketing consent does not affect the lawfulness of prior processing.

Automated Decision-Making

9a9999 uses automated processes in certain limited contexts, including fraud scoring, responsible gaming pattern detection, and bonus eligibility assessment. Where an automated decision produces a significant effect on your account (for example, triggering an account suspension or blocking a withdrawal), you have the right to request a manual review by a member of our compliance team. To exercise this right, contact [email protected] with the subject line "Automated Decision Review Request".

3 Data Sharing and Disclosure

9a9999 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share personal data only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.

Service Providers and Technology Partners

We work with a number of carefully selected third-party service providers who process personal data on our behalf in order to deliver the 9a9999 service. These include:

• Game providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other certified studios. Game providers receive session-level data (player ID, wager, outcome) to facilitate gameplay and resolve disputes. They do not receive your full identity data.
• Payment processors: bKash, Nagad, Rocket, Upay, and bank transfer intermediaries. These partners receive the minimum data necessary to process your financial transaction securely — typically your registered mobile number or account number and transaction amount.
• Identity verification providers: Third-party KYC platforms that assist with verifying NID documents and proof-of-address submissions. These providers operate under strict data processing agreements and may not use your data for any purpose other than verification.
• Analytics and security vendors: Service providers that assist with fraud monitoring, session analytics, and platform performance. Data shared with these vendors is pseudonymised where technically feasible.

All third-party service providers engaged by 9a9999 are required to maintain appropriate technical and organisational security measures and are contractually prohibited from using your personal data for any purpose beyond the service they provide to 9a9999.

Legal and Regulatory Disclosure

9a9999 may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities where we are legally required to do so, or where disclosure is necessary to prevent, investigate, or prosecute fraud, money laundering, underage gambling, or other criminal activity. In such cases, we will disclose only the data that is strictly necessary to comply with the legal obligation or protect the rights and safety of affected individuals.

Business Transfers

In the event that 9a9999 undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, personal data held by 9a9999 may be transferred to the acquiring entity as part of that transaction. In such circumstances, 9a9999 will take reasonable steps to ensure that the acquiring entity is bound by privacy obligations at least as protective as those described in this policy, and players will be notified of any material change to how their data is processed as a result of such a transaction.

4 Cookies and Tracking Technologies

The 9a9999 website uses cookies and similar tracking technologies to deliver a functional, secure, and personalised experience. A cookie is a small text file that is stored on your device when you visit a website. Cookies allow the website to recognise your device on subsequent visits and to remember preferences and session state.

Categories of Cookies We Use

Managing Your Cookie Preferences

You may control non-essential cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies via the browser's privacy or settings menu. Please note that disabling strictly necessary cookies will impair the functionality of the 9a9999 platform and may prevent you from logging in or completing transactions.

Mobile device users may also manage app-level tracking preferences through their device operating system settings (iOS Privacy Settings or Android Permissions Manager). Opting out of analytical cookies does not affect your ability to play games, make deposits, or withdraw winnings.

5 Data Security Measures

9a9999 takes the security of your personal information seriously and implements a range of technical and organisational measures designed to protect personal data against unauthorised access, disclosure, alteration, or destruction. While no system can guarantee absolute security, we are committed to maintaining industry-standard protections across all layers of the 9a9999 platform.

Technical Safeguards

• SSL/TLS Encryption: All data transmitted between your device and the 9a9999 servers is encrypted using SSL/TLS protocols. The padlock icon in your browser confirms that the connection is secure at all times during your session.
• Encrypted Data Storage: Sensitive account data — including passwords, identity documents, and payment details — is stored in encrypted form using industry-standard encryption algorithms. Passwords are hashed and salted; they are never stored or transmitted in plain text.
• Access Controls: Access to personal data within 9a9999's systems is restricted on a strict need-to-know basis. Team members who handle personal data are subject to confidentiality obligations and receive regular data-protection training.
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA on their 9a9999 accounts. 2FA adds a second layer of identity verification at login, significantly reducing the risk of unauthorised access even if a password is compromised.
• Intrusion Detection: 9a9999 employs automated intrusion detection systems that monitor platform activity in real time for indicators of compromise, unauthorised access attempts, and suspicious patterns.

Incident Response

In the unlikely event of a data security incident that affects the personal information of 9a9999 players, we maintain a documented incident response procedure. Affected players will be notified as promptly as is practicable following discovery of a breach that poses a risk to their rights or interests. Notification will be sent to the email address registered on the affected account and will include a description of the incident, the categories of data affected, and the steps we are taking to address it.

To report a suspected security vulnerability or data incident involving the 9a9999 platform, please contact [email protected] immediately with the subject line "Security Report". All reports are treated confidentially and investigated promptly.

6 Data Retention

9a9999 retains personal data only for as long as it is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following retention guidelines apply:

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data disposal procedures. Anonymised data (from which it is not possible to identify an individual) may be retained indefinitely for statistical and analytical purposes.

7 Your Rights Over Your Data

As a player on the 9a9999 platform, you have a set of rights in relation to the personal data we hold about you. 9a9999 is committed to honouring these rights promptly and transparently. To exercise any of the rights described below, please contact our support team at [email protected] with the subject line "Data Rights Request" and a clear description of the right you wish to exercise. We will respond within 10 business days.

Right of Access

You have the right to request a copy of the personal data that 9a9999 holds about you. This is sometimes called a Subject Access Request (SAR). We will provide you with a structured summary of your personal data in a readable format, along with information about how it is being processed and the purposes for which it is held.

Right to Rectification

If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. You may also update certain account details (such as your email address or phone number) directly through your account settings page.

Right to Erasure

In certain circumstances, you have the right to request that 9a9999 delete the personal data we hold about you. This right is not absolute — we may be required to retain certain data to comply with legal obligations (such as AML and financial record-keeping requirements) even after you request erasure. Where erasure is not possible in full, we will inform you of what data must be retained and why, and will erase all other data that is no longer necessary.

Right to Restrict Processing

You may request that 9a9999 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is under dispute, or while an objection to processing is being considered. During a restriction period, we will continue to store your data but will not actively process it except as required by law.

Right to Data Portability

Where processing is carried out on the basis of your consent or in connection with the performance of a contract, and where the processing is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format (such as CSV or JSON).

Right to Object

You have the right to object to the processing of your personal data where processing is based on legitimate interest, including where personal data is used for direct marketing purposes. Where you object to direct marketing, we will cease processing your data for that purpose immediately.

Rights Related to Automated Decision-Making

As described in Section 2, 9a9999 uses automated processes in certain contexts. You have the right not to be subject to a decision that produces a significant legal or similarly significant effect on you based solely on automated processing, unless such processing is necessary for the performance of a contract or is required by law. Where automated decisions are made, you have the right to request human review by contacting [email protected].

8 Changes to This Privacy Policy

9a9999 reserves the right to update, amend, or replace this Privacy Policy at any time. Changes may be made in response to updates in applicable law, changes to our data processing practices, new product features, or revised guidance from regulatory bodies. The most current version of this Privacy Policy will always be available at https://9a9999.onl/privacy-policy.

When we make material changes to this policy — meaning changes that significantly affect how we collect, use, or share your personal data — we will notify active account holders via the email address registered on their 9a9999 account. The notification will describe the nature of the change and, where required by applicable law, will request renewed consent before the change takes effect in relation to your account.

Non-material changes (such as editorial corrections, clarifications, or formatting updates that do not alter the substance of the policy) will be made without individual notification, though the "Last Updated" date at the top of this page will be revised to reflect the change. We encourage all players to review this page periodically to remain informed of how 9a9999 handles personal data.

By continuing to use the 9a9999 platform after the publication of an updated Privacy Policy, you confirm your acceptance of the revised terms. If you do not accept the changes, you should discontinue use of the platform and request account closure by writing to [email protected].