c999 Privacy Policy — How We Collect, Use, and Protect Your Data

1 Who We Are

c999 ("we", "us", "our") operates the online betting and gaming platform accessible at https://c999.ws. c999 is a data controller in respect of the personal data collected through this website and all associated services, including sports betting, live casino, arcade games, and mobile payment integrations.

This Privacy Policy applies to all individuals who visit the c999 website, create a registered account, deposit funds, place bets, or interact with the platform in any way. By using c999, you acknowledge that you have read and understood this Privacy Policy and agree to the collection and use of your information as described herein.

This Privacy Policy should be read in conjunction with the c999 Terms & Conditions, which govern the overall agreement between c999 and its registered players. If you have any questions about this policy, please contact us at [email protected].

2 Data We Collect

c999 collects the following categories of personal data from registered players and website visitors:

3 How We Collect Your Data

c999 collects personal data through the following channels:

• Directly from you: When you complete the account registration form, submit KYC documents, make a deposit or withdrawal request, contact our support team, or update your account profile.
• Automatically via the platform: When you browse the c999 website or use the platform, we automatically collect technical data and usage data through cookies, server logs, and similar tracking technologies. See Section 8 for full cookie details.
• From payment service providers: When you initiate a transaction via bKash, Nagad, Rocket, or Upay, the relevant provider transmits transaction confirmation data to c999 so we can credit or debit your account wallet accurately.
• From identity verification partners: During the Know Your Customer (KYC) process, c999 may use third-party identity verification services to validate the authenticity of documents you submit, such as your Bangladesh National Identity Card (NID) or passport.
• From fraud prevention services: c999 may receive risk signals or flagged data from fraud detection partners to protect the platform from money laundering, underage gambling, and account takeover attempts.

4 Why We Use Your Data

c999 uses your personal data for the following specific purposes:

• Account management: To create, maintain, and operate your c999 account, including processing logins, storing account preferences, and enabling access to betting and gaming services.
• Identity verification: To confirm your age (21+), verify your identity, and comply with Know Your Customer (KYC) obligations required under anti-money-laundering frameworks.
• Payment processing: To process deposits and withdrawals via bKash, Nagad, Rocket, and Upay, reconcile your account wallet, and maintain accurate financial records.
• Fraud prevention and platform security: To detect, investigate, and prevent fraudulent activity, money laundering, underage gambling, multi-accounting, and other prohibited conduct defined in the c999 Terms & Conditions.
• Customer support: To respond to your enquiries, resolve account issues, and handle complaints submitted via live chat, email, or the support ticket system.
• Service improvement: To analyse usage patterns, identify popular sports markets (such as BPL cricket and T20 World Cup), and improve the layout, performance, and content of the c999 platform.
• Responsible gaming: To monitor betting behaviour patterns that may indicate problem gambling and to apply player protection measures such as deposit limits and self-exclusion, in line with our Responsible Gaming Policy.
• Marketing communications: To send promotional offers, seasonal bonuses (Eid, Pohela Boishakh, BPL season), and platform updates — but only where you have provided explicit marketing consent.
• Legal compliance: To comply with applicable laws, respond to lawful requests from regulatory or law enforcement authorities, and enforce the c999 Terms & Conditions.

5 Legal Basis for Processing

c999 processes your personal data under one or more of the following legal bases, depending on the specific purpose of processing:

• Contractual necessity: Processing required to fulfil the agreement between you and c999 — including account operation, payment processing, and customer support — is carried out on the basis of contractual necessity.
• Legal obligation: Processing required to comply with applicable laws — including KYC/AML verification, age verification, and responses to lawful authority requests — is carried out on the basis of legal obligation.
• Legitimate interests: Processing for fraud prevention, platform security, usage analytics, and service improvement is carried out on the basis of c999's legitimate interests, balanced against your privacy rights.
• Consent: Processing for marketing communications is carried out solely on the basis of your explicit consent. You may withdraw this consent at any time without affecting your ability to use c999.

6 Data Sharing & Disclosure

c999 does not sell your personal data to any third party. We may share your data with the following categories of recipients only where necessary and only for the purposes described in this policy:

• Payment service providers: bKash, Nagad, Rocket, and Upay receive the minimum data required to process your deposit or withdrawal transactions. These providers operate under their own privacy policies and are independently certified.
• Identity verification services: Third-party KYC partners may receive copies of your identity documents to verify authenticity. These partners are contractually bound to use your data solely for this purpose.
• Fraud prevention and AML partners: Risk signals and transaction data may be shared with fraud detection services to protect the platform and its users.
• Game content providers: Providers such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session data necessary to deliver their game content through the c999 platform. They do not receive your identity or financial data.
• IT and hosting infrastructure providers: Companies that provide server hosting, content delivery networks, and platform infrastructure may process data as part of their service delivery.
• Regulatory and law enforcement authorities: c999 will disclose personal data to competent authorities when required to do so by law, court order, or lawful regulatory direction.

All third-party service providers who process personal data on behalf of c999 are required to maintain appropriate technical and organisational security measures and to process data only on documented instructions from c999.

7 Payment Data & bKash / Nagad

c999 processes financial transactions exclusively through mobile financial services widely used in Bangladesh: bKash, Nagad, Rocket, and Upay. The following data points are collected in connection with each transaction:

• The registered mobile number associated with your bKash, Nagad, Rocket, or Upay wallet.
• The transaction amount in Bangladeshi Taka (BDT).
• The transaction reference number issued by the payment provider.
• The date, time (Bangladesh Standard Time, UTC+6), and direction (deposit or withdrawal) of the transaction.

c999 does not store the PIN, password, or authentication credentials of your mobile financial service account. These remain exclusively between you and your payment provider. All payment data transmitted between c999 and payment providers is encrypted using industry-standard TLS protocols.

8 Cookies & Tracking Technologies

c999 uses cookies and similar tracking technologies to operate the platform, remember your session, and analyse usage patterns. The following categories of cookies are used:

• Strictly necessary cookies: Essential for the platform to function. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cookies cannot be disabled without breaking core platform functionality.
• Performance cookies: Used to collect anonymised data about how users navigate the c999 platform — including which sports markets are most visited and which games are most played. This data is used solely for internal service improvement.
• Functional cookies: Used to remember your preferences such as odds display format and language settings so you do not need to re-enter them on each visit.
• Analytics cookies: Used to understand aggregate traffic patterns and measure the effectiveness of platform improvements. Analytics data is processed in aggregated, non-identifiable form.

You can manage your cookie preferences through your browser settings. Note that disabling certain cookie categories may affect the functionality of some c999 features. Strictly necessary cookies cannot be disabled as they are required for the platform to operate securely.

9 Data Retention

c999 retains your personal data only for as long as necessary to fulfil the purposes set out in this Privacy Policy, subject to the following retention guidelines:

• Account data: Retained for the duration of your active account relationship with c999, plus a minimum of 5 years following account closure, in accordance with financial record-keeping obligations.
• KYC and identity documents: Retained for a minimum of 5 years from the date of submission, as required by anti-money-laundering record-keeping requirements.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction, in accordance with financial compliance obligations.
• Customer support communications: Retained for 3 years from the date of the relevant interaction, unless the communication relates to an ongoing dispute or compliance matter.
• Marketing consent records: Retained for as long as you hold an active c999 account, or until you withdraw consent, whichever comes first.
• Technical and usage data (logs): Retained for up to 13 months for security monitoring and fraud investigation purposes, after which they are anonymised or deleted.

When data is no longer required, c999 destroys it securely using industry-standard data erasure methods. Physical documents containing personal data are shredded; digital data is permanently deleted from all active and backup systems.

10 Your Privacy Rights

As a c999 user, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact our support team at [email protected]. Requests will be acknowledged within 5 business days and actioned within 30 calendar days.

• Right of access: You may request a copy of all personal data c999 holds about you, including the categories of data held, the purposes of processing, and any third parties with whom data has been shared.
• Right to rectification: If any personal data held by c999 is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may update basic account information directly from your account dashboard.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations outlined in Section 9.
• Right to restriction: You may request that c999 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested.
• Right to data portability: You may request your personal data in a structured, machine-readable format (CSV or JSON) for transfer to another service provider.
• Right to object: You may object to processing carried out on the basis of legitimate interests, including profiling. You may also withdraw marketing consent at any time.

11 Children's Privacy

The c999 platform is strictly intended for adults aged 21 and above. c999 does not knowingly collect personal data from individuals under the age of 21. Our registration process includes mandatory age verification checks, and c999 may request official identity documents to confirm a user's date of birth at any stage.

If c999 becomes aware that personal data has been collected from a person under 21 years of age, that account will be immediately suspended, all funds will be frozen pending investigation, and the personal data will be deleted from our systems as soon as legally permissible. If you believe a minor has created a c999 account, please notify us immediately at [email protected].

12 Security Measures

c999 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and c999 servers.
• AES-256 encryption for all sensitive data at rest, including stored identity documents and financial records.
• Bcrypt hashing with individual salts for all stored account passwords. c999 never stores passwords in plain text.
• Multi-factor authentication (2FA) available and strongly recommended for all account holders.
• Role-based access control (RBAC) ensuring that internal staff can only access data relevant to their specific job function.
• Continuous automated monitoring for suspicious login activity, unusual transaction patterns, and potential account takeover attempts.
• Regular independent security audits and penetration testing of the c999 platform infrastructure.
• Dedicated incident response procedures with defined timelines for breach detection, containment, and notification.

While c999 takes every reasonable precaution to protect your data, no online platform can guarantee absolute security against all possible threats. You also play a role in protecting your data by using a strong, unique password for your c999 account and enabling two-factor authentication.

13 International Data Transfers

c999 may transfer your personal data to servers or service providers located outside Bangladesh. Where such transfers occur, c999 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that provided under this Privacy Policy.

Safeguards used for international transfers may include contractual clauses requiring recipient parties to maintain data protection standards consistent with this policy, and data processing agreements with all third-party vendors who receive personal data originating from Bangladesh-based users.

Game content providers such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi operate their own infrastructure internationally. Where these providers process data in connection with your use of their games on c999, they do so under contractual data processing agreements and receive only the minimum anonymised session data required to deliver game functionality.

14 Updates to This Privacy Policy

c999 reserves the right to update or amend this Privacy Policy at any time. When material changes are made — such as changes to the categories of data collected, new third-party sharing arrangements, or changes to your privacy rights — c999 will notify registered account holders by email and via an in-platform notice at least 7 days before the revised policy takes effect.

The "Last Updated" date shown at the top of this document indicates when the current version of the Privacy Policy was published. Your continued use of the c999 platform after a revised Privacy Policy takes effect constitutes your acceptance of the updated terms. If you do not agree with the changes, you should stop using c999 and may request account closure in accordance with the Terms & Conditions.

The most current version of this Privacy Policy is always available at https://c999.ws/privacy-policy.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way c999 handles your personal data, please contact our Data Support team using the details below:

• Email: [email protected] — please use the subject line "Privacy Request" for data-related enquiries.
• Live chat: Available 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6) via your account dashboard after login.
• Response time: All privacy-related enquiries will be acknowledged within 5 business days and fully resolved within 30 calendar days of receipt.

For general account support, game-related questions, or payment enquiries that are not privacy-related, please use the standard c999 support channels accessible from your account dashboard after logging in.