999 bat Privacy Policy

When you register, verify, deposit, play, or otherwise interact with the 999 bat platform, we may collect a variety of personal data. The categories below outline what we collect, why we collect it, and at what stage of your relationship with us it is gathered.

1.1 Registration & Identity Data

When you create a 999 bat account, we collect your full legal name, date of birth, email address, mobile phone number, and the username and password you choose. This information is required to create and manage your account, verify that you meet the 18+ age requirement, and communicate important account-related information to you.

1.2 Identity Verification (KYC) Data

To comply with our Know Your Customer (KYC) and anti-money laundering (AML) obligations, we may request copies of identity documents such as your National Identity Card (NID), passport, or birth certificate. We may also request a recent utility bill or bank statement as proof of address, and in some cases a selfie photograph holding your identity document. KYC data is used solely for verification and fraud prevention purposes.

1.3 Financial & Transaction Data

When you make a deposit or withdrawal on 999 bat, we collect details of the transaction including the payment method used (e.g., bKash, Nagad, Rocket, Upay, Visa, Mastercard), transaction reference numbers, amounts in Bangladeshi Taka (৳), and timestamps. We do not store full card numbers or mobile banking PINs — payment processing is handled by our third-party payment partners using their own secure infrastructure.

1.4 Gameplay & Activity Data

We record your activity on the 999 bat platform, including the games you play, the bets you place, the amounts wagered, game outcomes, session durations, and your bonus and promotion activity. This data is used for account management, responsible gaming monitoring, dispute resolution, and fraud detection.

1.5 Technical & Device Data

We automatically collect certain technical information when you access the platform, including your IP address, device type, operating system, browser type and version, screen resolution, referring URL, and approximate geographic location derived from your IP address. This data is used to maintain platform security, detect unusual login activity, and optimise the platform for your device.

999 bat processes your personal data for the following specific, legitimate purposes. We rely on one or more legal bases for each processing activity as described below.

• Account management and service delivery: We use your registration and identity data to create and maintain your account, process your deposits and withdrawals, deliver the betting and gaming services you request, and communicate essential account information to you. This processing is necessary for the performance of our contract with you.
• Age and identity verification: We use your identity documents and date of birth to confirm that you are at least 18 years of age and that you are who you claim to be. This is both a contractual obligation and a legal requirement under applicable gaming regulations. 999 bat operates a strict 18+ only policy with no exceptions.
• Fraud prevention and platform security: We analyse your account activity, transaction patterns, device data, and IP address to detect and prevent fraud, money laundering, multiple account creation, bonus abuse, and other prohibited conduct described in our Terms & Conditions. This processing is in the legitimate interests of 999 bat and the broader player community.
• Responsible gaming monitoring: We monitor gameplay patterns, session lengths, deposit frequency, and wagering behaviour to identify signs of problem gambling. Where our systems flag a potential issue, our responsible gaming team may reach out to you proactively. This processing is in your vital interests and supports our commitment to player welfare.
• Customer support and dispute resolution: Records of your support interactions, account activity, and transaction history enable us to resolve queries, investigate complaints, and settle disputes fairly and efficiently.
• Platform improvement and analytics: Aggregated and anonymised usage data helps us understand how players interact with the platform, which games are most popular, where technical issues occur, and how the user experience can be improved. This analysis does not identify individual players.
• Marketing communications: With your explicit consent at registration (or opt-in at a later stage), we may send you promotional offers, tournament announcements, and platform news by email or SMS. You may withdraw your consent and unsubscribe from marketing communications at any time by contacting [email protected].
• Legal and regulatory compliance: We retain and process certain data to meet our obligations under applicable anti-money laundering laws, financial regulations, and any lawful requests from competent authorities in Bangladesh or other relevant jurisdictions.

999 bat does not sell, rent, or trade your personal data. We may, however, share specific categories of data with carefully selected third parties where necessary to deliver our Services or meet legal obligations. All third-party partners are contractually bound to process your data only for the stated purpose and to maintain appropriate security standards.

• Payment processors: When you make a deposit or request a withdrawal, we share the minimum necessary transaction data with your chosen payment provider — such as bKash, Nagad, Rocket, Upay, Visa, or Mastercard — to process the payment. These providers operate under their own privacy policies and comply with applicable financial regulations.
• Identity verification services: Third-party KYC and AML screening providers may process copies of your identity documents to perform age verification, identity checks, and sanctions screening on behalf of 999 bat.
• Game software providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi supply the gaming software that powers the 999 bat casino. These providers may receive anonymised session data necessary to deliver fair game outcomes and maintain their own audit trails.
• IT infrastructure and hosting providers: 999 bat uses secure third-party server infrastructure to host the platform. Data stored on these servers is subject to contractual data processing agreements that mandate security standards equivalent to those applied by 999 bat directly.
• Fraud detection and analytics services: We may use third-party tools to analyse traffic patterns, detect bot activity, and monitor for suspicious account behaviour. These tools process technical data such as IP addresses and device fingerprints but do not receive personally identifying information beyond what is strictly necessary.
• Legal and regulatory authorities: Where required by law, court order, or a lawful request from a competent regulatory or law enforcement authority in Bangladesh or another relevant jurisdiction, 999 bat will disclose the data requested. We will notify you of such a disclosure unless prohibited from doing so by law.

999 bat uses cookies and similar tracking technologies to operate the platform, maintain your session, and understand how players use the site. This section explains what cookies we use, why we use them, and how you can manage your cookie preferences.

What are cookies? Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember information about your visit — such as your login session, preferred language, or gameplay preferences — so that your next visit is more efficient and personalised.

999 bat does not deploy third-party advertising cookies, retargeting pixels, or cross-site tracking technologies on the platform. Analytics cookies, where used, are configured to anonymise IP addresses and do not create individual player profiles that could be shared with advertisers.

Managing cookies: Most web browsers allow you to view, manage, and delete cookies through the browser's settings menu. Please note that disabling strictly necessary cookies may prevent you from logging in to your 999 bat account or accessing certain platform features. Functional and analytics cookies can typically be disabled without affecting core account functionality.

999 bat retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The retention periods below represent our standard practice; specific circumstances (such as an ongoing investigation or regulatory request) may require longer retention.

• Account data (active accounts): We retain your registration, identity, and transaction data for as long as your 999 bat account remains open. This ensures we can deliver the Services, resolve disputes, and respond to queries at any time during the account lifecycle.
• Account data (closed accounts): Following the closure of your account — whether voluntary or initiated by 999 bat — we retain your identity, financial, and transaction records for a minimum of five (5) years. This retention period is required to meet anti-money laundering regulations and to enable the resolution of any post-closure disputes or regulatory inquiries.
• KYC documents: Copies of identity documents submitted during the KYC process are retained for a minimum of five (5) years from the date of submission or the date of account closure, whichever is later.
• Support and communications records: Records of customer support interactions, including email correspondence and live chat transcripts, are retained for a minimum of two (2) years from the date of the interaction.
• Technical and device data: IP address logs and device fingerprint data used for fraud detection and security purposes are retained for a maximum of twelve (12) months, after which they are deleted or irreversibly anonymised.
• Marketing preferences: If you have opted in to marketing communications, your marketing preference record is retained until you withdraw consent. Following withdrawal of consent, the opt-out record itself is retained indefinitely to ensure we do not inadvertently contact you again.

When data is no longer required and no legal obligation mandates its retention, 999 bat will securely delete or anonymise it using industry-standard data destruction methods. Anonymised data, which cannot be linked back to any individual, may be retained indefinitely for aggregated analytics purposes.

Protecting your personal data is a core operational priority at 999 bat. We implement a layered security framework that combines technical, organisational, and procedural measures to guard against unauthorised access, accidental loss, alteration, or disclosure of your data.

• Encryption in transit: All data exchanged between your browser or mobile device and the 999 bat platform is encrypted using 256-bit SSL/TLS protocols. This ensures that sensitive information such as login credentials and payment details cannot be intercepted by third parties during transmission.
• Encryption at rest: Sensitive data stored in our databases — including password hashes, identity documents, and financial records — is encrypted at rest using AES-256 encryption. Password hashes are stored using a salted one-way hashing algorithm; 999 bat staff cannot view your plain-text password.
• Access controls: Access to systems that hold personal data is restricted on a strict need-to-know basis. All internal access is authenticated, logged, and subject to periodic review. Administrative access to production systems requires multi-factor authentication.
• Automated threat detection: Our security infrastructure includes real-time intrusion detection systems, automated anomaly detection, and 24/7 monitoring by our security operations team. Suspicious activity triggers immediate alerts and automated defensive responses.
• Staff training: All 999 bat staff who handle personal data receive regular data protection and security training. Staff are bound by confidentiality obligations and are prohibited from accessing player data beyond what their role requires.
• Penetration testing: The 999 bat platform undergoes regular independent security assessments, including penetration testing, to identify and remediate vulnerabilities before they can be exploited.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, 999 bat will notify affected players promptly via the email address registered to their account. We will provide details of what data was affected, what steps we have taken to address the breach, and what actions you can take to protect yourself.

As a 999 bat player, you hold a number of rights in relation to the personal data we hold about you. We are committed to honouring these rights promptly and transparently. To exercise any of the rights described below, please contact our support team at [email protected] with the subject line "Privacy Rights Request".

• Right of access: You have the right to request a copy of the personal data 999 bat holds about you, together with information about how and why it is being processed. We will respond to verified access requests within 14 business days.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. You can update basic account details (such as your email address or phone number) directly through your account settings. For changes to identity data, please contact support with supporting documentation.
• Right to erasure: Subject to legal retention obligations (see Section 5), you have the right to request the deletion of your personal data. We will process erasure requests promptly and confirm in writing when the deletion has been completed. Note that data required for AML compliance or active dispute resolution cannot be deleted until the relevant retention period has expired.
• Right to restrict processing: You may request that we restrict the processing of your personal data in certain circumstances — for example, while we investigate a rectification request or while you contest the accuracy of data we hold.
• Right to data portability: Where processing is based on your consent or the performance of a contract, and is carried out by automated means, you may request a copy of your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON).
• Right to withdraw consent: Where we process your data on the basis of your consent (for example, marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal. To unsubscribe from marketing, contact [email protected] or use the unsubscribe link in any marketing email we send you.
• Right to object: You have the right to object to the processing of your personal data where we rely on legitimate interests as the legal basis, including profiling based on those interests. We will assess your objection and cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests.

If you have any questions, concerns, or complaints about this Privacy Policy, about how 999 bat processes your personal data, or about exercising any of your privacy rights, please reach out to our support team. We are available 24 hours a day, seven days a week, and aim to respond to all privacy-related queries within 14 business days.

How to contact us:

• Email: [email protected] — please use the subject line "Privacy Query" or "Privacy Rights Request" to ensure your message is routed to the correct team.
• Platform: You can also raise a support ticket directly through the 999 bat support chat, available when you are logged in to your account.

If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter. 999 bat takes all privacy complaints seriously and will work with you to find a resolution. Details of formal escalation procedures are available on request from our support team.

This Privacy Policy was last updated on 1 January 2026. 999 bat reserves the right to amend this policy at any time. Material changes will be communicated to registered players via the email address associated with their account. Continued use of the platform following publication of a revised Privacy Policy constitutes acceptance of the updated terms. We encourage you to review this page periodically to stay informed about how we protect your data.

This Privacy Policy applies to the 999 bat website at https://999-bat.net and all associated services. It does not apply to third-party websites or services that may be referenced or linked to from this page — those parties operate under their own privacy policies for which 999 bat accepts no responsibility.