Privacy Policy — How tt999 Protects Your Personal Data

Information We Collect

tt999 collects personal information when you register an account, use the platform, contact our support team, or otherwise interact with our services. The categories of data we collect include the following:

1.1 Registration and Identity Data

When you create a tt999 account, we collect your full legal name, date of birth, residential address (including city, for example Dhaka, Chittagong, Sylhet, Khulna, or Rajshahi), email address, mobile phone number, and chosen username. This information is required to create and maintain your account and to verify that you meet our minimum age requirement of 21 years.

1.2 Financial and Transaction Data

tt999 collects records of all deposits, withdrawals, wagers, winnings, and account balance movements associated with your account. We also collect the identifiers associated with the payment methods you register, including mobile wallet numbers (bKash, Nagad, Rocket, Upay) and masked card details (Visa, Mastercard). We do not store full card numbers on our servers — card processing is handled by PCI-compliant third-party payment processors.

1.3 Identity Verification (KYC) Documents

For the purpose of Know Your Customer (KYC) compliance, tt999 may request copies of government-issued identity documents such as your National Identity Card (NID), passport, or driving licence, together with proof of address documentation such as a recent utility bill or bank statement. These documents are stored securely and used solely for the purpose of verifying your identity and age.

1.4 Technical and Usage Data

When you access the tt999 platform, we automatically collect certain technical data including your IP address, device type and operating system, browser type and version, session timestamps, pages visited, games played, and in-play betting activity. This data helps us maintain platform security, detect fraud, and improve the overall user experience.

1.5 Communications Data

If you contact tt999 customer support via email at [email protected] or through any in-platform messaging feature, we retain records of that correspondence including the content of your messages, timestamps, and any attachments submitted. This data is used to resolve your query, improve support quality, and maintain an audit trail where required.

1.6 Responsible Gaming Data

Where you set deposit limits, loss limits, session time reminders, cooling-off periods, or self-exclusion parameters through your account settings, tt999 records and stores these preferences. This data category exists specifically to enable us to enforce the responsible gaming tools you have activated and to monitor compliance on your behalf.

How We Use Your Information

tt999 uses the personal data it collects for specific, legitimate purposes. The table below summarises the primary purposes for which each category of data is used:

In addition to the purposes above, tt999 may use aggregated and anonymised usage data — from which no individual player can be identified — for internal analytical and product development purposes, including identifying popular game categories, peak usage periods, and platform performance metrics.

tt999 does not use your personal data for automated profiling or decision-making that produces legal or similarly significant effects on you, unless this is required by applicable anti-money laundering or responsible gaming obligations, in which case you will be informed.

Legal Basis for Processing

tt999 processes your personal data on the following legal bases, each of which applies to one or more of the purposes described in Section 2:

• Contractual Necessity: Processing your registration data, financial transaction data, and KYC documents is necessary for tt999 to perform its contractual obligations to you as a registered player — including creating and maintaining your account, processing your deposits and withdrawals, and providing access to games and betting markets.
• Legal Obligation: tt999 is required to collect and retain certain data categories — particularly KYC identity documents and transaction records — in order to comply with applicable anti-money laundering (AML) obligations and responsible gaming requirements. This processing is mandatory and cannot be opted out of while you hold an active tt999 account.
• Legitimate Interests: tt999 processes technical and usage data on the basis of its legitimate interest in maintaining the security of the platform, detecting and preventing fraud, ensuring fair play, and improving the quality of its services. These interests are balanced against your privacy rights and do not override them.
• Consent: Where tt999 sends you optional promotional communications — such as email notifications about new game releases, seasonal promotions (for example Eid or Pohela Boishakh offers), or bonus availability — we do so only with your prior consent, which you may withdraw at any time from your account communication preferences.

Data Sharing and Disclosure

tt999 does not sell, rent, or share your personal information with third parties for their own marketing purposes. We may, however, disclose your personal data to the following categories of recipient, strictly as necessary for the operation of your account and the tt999 platform:

• Payment Processing Partners: bKash, Nagad, Rocket, Upay, and our card processing providers (Visa/Mastercard acquirers) receive the minimum transaction data necessary to process your deposits and withdrawals. These partners operate under their own privacy policies and are bound by data processing agreements with tt999.
• Identity Verification Services: Third-party KYC and identity verification service providers may receive copies of your identity documents for the purpose of performing automated or manual age and identity checks on behalf of tt999.
• Game Providers: Certified game studios and content providers — including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe — may receive pseudonymous player session identifiers necessary to launch and operate game rounds in your account. These providers do not receive your full name, contact details, or financial account information.
• Analytics and Security Providers: tt999 may use third-party analytics and cybersecurity tools that receive aggregated or pseudonymised usage data for the purpose of fraud detection, bot prevention, and platform performance monitoring.
• Legal and Regulatory Disclosure: tt999 may disclose personal data to competent authorities, law enforcement agencies, or regulatory bodies where required to do so by applicable law, court order, or in response to a lawful request in connection with a criminal investigation or AML inquiry.

All third-party recipients of personal data from tt999 are required — either by contractual obligation or applicable law — to protect that data and to use it only for the specific purposes for which it was shared. tt999 does not authorise any recipient to further transfer your personal data to additional third parties without a lawful basis for doing so.

Cookies and Tracking Technologies

The tt999 platform uses cookies — small text files stored on your device — and similar technologies including session tokens and local storage objects. The cookies deployed by tt999 fall into the following categories:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They maintain your logged-in session, remember your account preferences, and enable the game client to communicate securely with tt999 servers. You cannot opt out of strictly necessary cookies while using the platform.
• Performance and Analytics Cookies: These cookies collect anonymised data about how players navigate the tt999 platform — including which pages are visited most frequently and how long players spend in different game categories. This data helps tt999 identify areas for improvement. No personally identifiable information is collected via these cookies.
• Functional Cookies: These cookies remember your display preferences, such as language and notification settings, so that you do not need to reconfigure them on each visit.

tt999 does not deploy third-party advertising cookies, retargeting pixels, or social media tracking technologies that would allow external platforms to profile your browsing behaviour across other websites. Your on-platform activity data is not shared with social media networks or advertising exchanges.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from remaining logged in to your tt999 account and may cause certain platform features to function incorrectly.

Data Retention

tt999 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following retention guidelines:

• Active Account Data: Registration details, transaction records, and KYC documents associated with an active tt999 account are retained for the lifetime of the account and for a minimum period after account closure as required by applicable AML and financial record-keeping obligations.
• Closed Account Data: Following account closure — whether requested by the player or initiated by tt999 — personal data necessary for legal compliance, dispute resolution, or fraud prevention is retained for the applicable statutory retention period. After this period, personal data is either securely deleted or anonymised.
• Support Communications: Records of customer support interactions are retained for a period sufficient to resolve related disputes and to maintain a historical service record. These records are then archived or deleted in accordance with tt999's internal data management schedule.
• Technical Logs: IP address logs, session logs, and security event logs are retained for a shorter period consistent with their operational purpose — typically no longer than 12 months from the date of recording — unless a specific security or legal reason requires longer retention.

When personal data is no longer required and the applicable retention period has expired, tt999 will securely destroy or anonymise that data so that it can no longer be linked to any individual player.

Data Security

tt999 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS Encryption: All data transmitted between your browser or mobile device and the tt999 platform is encrypted using SSL/TLS protocols, ensuring that your credentials and financial details cannot be read in transit.
• Password Hashing: Account passwords are stored exclusively as one-way cryptographic hashes. tt999 staff cannot retrieve your password in plain-text form. If you forget your password, a secure reset process is used rather than password retrieval.
• Access Controls: Access to systems holding personal data is restricted on a need-to-know basis. tt999 staff members are granted the minimum level of data access required to perform their specific job functions, and all access is logged and audited.
• Two-Factor Authentication: tt999 offers optional SMS-based two-factor authentication (2FA) for all registered players. Enabling 2FA significantly reduces the risk of unauthorised account access even if your password is compromised.
• Security Monitoring: tt999 operates continuous security monitoring of its platform infrastructure to detect anomalous access patterns, brute-force attempts, and other indicators of compromise. Suspected security incidents are investigated promptly.

Your Privacy Rights

As a registered player on the tt999 platform, you hold the following rights with respect to your personal data. To exercise any of these rights, contact our support team at [email protected] with a clear description of your request:

• Right of Access: You may request a copy of the personal data tt999 holds about you, together with information about how it is being used and with whom it has been shared.
• Right to Rectification: If any personal data tt999 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may update certain details directly from within your account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to tt999's legal obligation to retain certain data categories for compliance purposes. Where a legal retention obligation applies, tt999 will inform you of this and of the applicable retention period.
• Right to Restrict Processing: In certain circumstances — for example where you contest the accuracy of data held about you — you may request that tt999 restrict its processing of that data while the dispute is investigated.
• Right to Data Portability: Where processing is based on your consent or on a contractual relationship, and is carried out by automated means, you may request that tt999 provide your personal data in a structured, commonly used, and machine-readable format.
• Right to Withdraw Consent: Where tt999 processes your data on the basis of consent — for example, for the receipt of promotional communications — you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
• Right to Object: You have the right to object to processing of your personal data where it is based on tt999's legitimate interests. tt999 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

tt999 will respond to all valid privacy rights requests within a reasonable period. In complex cases, this period may be extended, and you will be notified of the extension and the reason for it. There is no charge for submitting a reasonable privacy rights request.

Third-Party Services

The tt999 platform integrates services provided by third parties including game studios, payment processors, and analytics tools. While tt999 carefully vets all third-party partners and requires them to maintain appropriate data protection standards, please be aware of the following:

Each third-party provider operates under its own privacy policy and data processing practices. tt999 is not responsible for the privacy practices of third-party providers beyond the scope of the data processing agreements it holds with them. The game providers whose titles are accessible through tt999 — including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe — process player session data under their own data protection frameworks, which are separate from this Privacy Policy.

Payment partners including bKash, Nagad, Rocket, Upay, and card processing networks (Visa, Mastercard) handle financial transaction data under their own published privacy and security policies. tt999 recommends that you review the privacy policies of any payment partner whose service you use in connection with your tt999 account.

The tt999 platform does not contain embedded social media share buttons, external advertisement units, or third-party tracking pixels that would allow external platforms to collect data about your visit without your knowledge.

Children's Privacy

The tt999 platform is strictly intended for adults aged 21 years and above. tt999 does not knowingly collect personal data from individuals under the age of 21. The platform employs age verification mechanisms at the point of registration, and KYC verification may be used to confirm age where there is reasonable doubt about an account holder's eligibility.

If tt999 becomes aware that personal data has been collected from an individual who does not meet the minimum age requirement of 21 years, that account will be immediately suspended, all funds on the account will be handled in accordance with tt999's underage gambling policy, and the personal data of the underage individual will be securely deleted as soon as practicable.

If you are a parent or guardian and believe that a person under 21 in your care has registered an account on the tt999 platform, please contact us immediately at [email protected] so that we can take prompt corrective action.

Changes to This Policy

tt999 reserves the right to amend this Privacy Policy at any time. When a material change is made to the policy — for example, a change to the categories of data collected, a new third-party data recipient, or a change in retention periods — tt999 will notify registered players via their registered email address and/or through a prominent notice displayed on the tt999 platform.

The effective date at the top of this document will be updated to reflect the date on which the revised policy takes effect. Your continued use of the tt999 platform following the publication of a revised Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with any material change to this policy, you should cease using the platform and may request account closure in accordance with the process described in the tt999 Terms and Conditions.

We encourage you to review this Privacy Policy periodically so that you remain informed about how tt999 is protecting your personal information.

Contact and Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or to tt999's handling of your personal data, please contact our data support team using the following details:

• Email: [email protected] (plain text — not a clickable link)
• Response Hours: 24 hours a day, 7 days a week
• Response Language: English

tt999 is committed to resolving all privacy-related queries and complaints promptly and fairly. If you submit a complaint, tt999 will acknowledge receipt and provide a substantive response within a reasonable timeframe. Where a complaint cannot be resolved to your satisfaction through the tt999 internal process, you may seek further recourse through applicable regulatory channels in your jurisdiction.