Privacy Policy
of 999baje
At 999baje, your privacy is taken seriously. This Privacy Policy explains exactly what personal data we collect when you use our platform, how that data is used, who it may be shared with, and the rights you hold over your own information. This document applies to all registered players and visitors accessing 999baje from Bangladesh and beyond.
This Privacy Policy ("Policy") describes how 999baje ("Platform", "we", "us", "our") collects, processes, stores, and protects the personal data of individuals ("you", "Player", "User") who access and use the 999baje website at https://999baje.net, including all sub-pages, services, features, and content made available through the platform.
By registering an account on 999baje, making a deposit, placing a bet, or otherwise using any feature of the platform, you acknowledge that you have read this Privacy Policy and that you consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, you must cease using the platform immediately.
999baje is committed to protecting the privacy and personal data of its players. We apply industry-standard security measures, collect only the data necessary to deliver our services, and we do not sell your personal data to third parties for marketing purposes. We recognise that our players — located across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and other regions of Bangladesh — trust us with sensitive information, and we take that responsibility seriously.
This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, which together govern your relationship with 999baje.
Minimal Data Collection
We collect only the personal data that is strictly necessary to operate the platform, process payments, and comply with our internal policies.
SSL Encryption
All data transmitted between your device and 999baje is protected by TLS/SSL encryption, ensuring your personal information remains private in transit.
No Data Sales
999baje does not sell, rent, or trade your personal data to third-party marketers under any circumstances. Your data is yours.
Player Rights Respected
You have the right to access, correct, and request deletion of your personal data. Contact us at [email protected] to exercise your rights at any time.
Data We Collect
999baje collects personal data from you directly (when you register, deposit, or contact us), automatically (when you browse the platform), and from third parties (such as payment providers). The following table summarises the categories of data we collect and the context in which each category is gathered.
| Data Category | Specific Data Points | Collection Context |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, National ID or Passport number | Provided during account registration and KYC verification |
| Contact Data | Email address, mobile phone number, residential address (city, district, postal code) | Provided during account registration and account updates |
| Financial Data | bKash/Nagad/Rocket/Upay mobile number, transaction reference numbers, deposit/withdrawal history | Provided when making deposits or requesting withdrawals |
| Account Data | Username, account ID, login timestamps, session duration, bet history, game history, bonus activity | Generated automatically through your use of the platform |
| Technical Data | IP address, device type and model, operating system, browser type and version, screen resolution | Collected automatically via server logs and browser signals on each visit |
| Usage Data | Pages visited, features used, search queries, click paths, referral source, time on site | Collected automatically via analytics tools during platform use |
| Communications Data | Support ticket content, email correspondence, chat transcripts | Provided when you contact the 999baje support team |
| Verification Documents | Scanned or photographed National ID Card, Passport, Birth Certificate, utility bills | Provided during KYC verification process on request from 999baje |
Sensitive Data: 999baje does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health information, or biometric data, except where the collection of identity documents as part of KYC verification incidentally discloses such information. In those cases, the data is processed solely for the purpose of age and identity verification and is not retained beyond what is necessary for that purpose.
Where you choose not to provide personal data that is marked as required during registration or verification, 999baje may be unable to create your account, process your transactions, or provide certain features of the platform. Optional data fields are clearly marked as such. Providing false or misleading personal data is a breach of the Terms & Conditions and may result in account closure.
How We Use Your Data
999baje uses your personal data only for legitimate purposes that are directly connected to the delivery of our services, the security of the platform, and our internal compliance obligations. We do not use your data for any purpose incompatible with those stated below.
Account Management
Identity and contact data is used to create and manage your 999baje player account, verify your identity during KYC, authenticate your login sessions, and communicate important account-related notifications to you such as password changes, deposit confirmations, and withdrawal processing updates.
Payment Processing
Financial data and transaction records are used to process deposits and withdrawals via bKash, Nagad, Rocket, and Upay, to reconcile transaction records, to detect and prevent fraudulent payment activity, and to comply with our internal financial record-keeping obligations.
Platform Improvement
Technical and usage data is analysed in aggregate and anonymised form to understand how players interact with the platform, identify areas where user experience can be improved, optimise game loading performance, and prioritise new features and content for the Bangladeshi market.
Fraud Prevention & Security
Technical data (IP address, device fingerprint, login timestamps) and account activity data are used to detect suspicious activity, prevent multiple-account creation, identify bot or automated activity, investigate potential match-fixing or collusion, and protect the integrity of the platform for all players.
Responsible Gaming
Betting history, session data, and deposit/withdrawal patterns are monitored as part of our responsible gaming obligations to identify players who may be exhibiting signs of problem gambling behaviour, so that appropriate support tools — such as deposit limits, cooling-off periods, and self-exclusion — can be offered or applied.
Promotions & Communications
With your consent, contact data and account activity data may be used to send you information about relevant promotions, bonus offers, and seasonal campaigns (such as Eid, Pohela Boishakh, or BPL cricket season offers). You may withdraw this consent at any time by contacting [email protected].
Marketing Communications: 999baje will only send you promotional emails or messages if you have opted in to receive them during registration or via your account settings. Each marketing message will include clear instructions for opting out. If you no longer wish to receive promotional communications, you may unsubscribe at any time. Opting out of marketing communications does not affect your ability to use the platform.
Data Sharing & Disclosure
999baje does not sell your personal data to third parties. We share data only where it is necessary to deliver our services, where you have given consent, or where we are required to do so under applicable platform policy or internal compliance frameworks.
The following categories of third parties may receive limited personal data from 999baje in the circumstances described. In all cases, third parties are required to process your data only for the specified purpose and to maintain appropriate security standards.
Payment Providers
bKash, Nagad, Rocket, and Upay receive transaction data necessary to process your deposits and withdrawals. Each provider operates under their own privacy framework. We share only the minimum data required for the transaction.
KYC Verification Partners
Where identity documents are verified through third-party verification services, those partners receive only the specific documents and data required for the verification check. They are contractually prohibited from using the data for any other purpose.
Analytics Providers
Anonymised and aggregated usage data may be shared with analytics service providers to help us understand platform performance. No personally identifiable data is included in analytics data sets that leave the 999baje environment.
Hosting & Infrastructure
Data may be stored on servers operated by our hosting and cloud infrastructure partners. These partners provide data storage and processing services only and have no independent right to access or use your personal data.
Internal Compliance
Where required by 999baje's internal compliance and anti-fraud policies, account data and transaction records may be reviewed by our internal compliance team or shared with specialist fraud prevention partners engaged on our behalf.
Platform Integrity Partners
In cases of suspected match-fixing, collusion, or betting integrity violations, relevant data may be shared with sports integrity monitoring bodies or partner platforms as part of our commitment to fair play.
Business Transfers: In the event that 999baje undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may form part of the transferred assets. In such circumstances, 999baje will take reasonable steps to ensure that the recipient organisation commits to protecting your personal data in a manner consistent with this Privacy Policy, and will notify affected players as appropriate.
Data Retention
999baje retains your personal data only for as long as is necessary for the purposes for which it was collected, or for as long as required by our internal record-keeping and compliance obligations. The following principles govern our data retention practices.
Active Accounts: While your 999baje account is active, we retain all personal data associated with that account, including identity data, contact data, financial records, betting history, and session logs. This data is necessary to deliver the service, process transactions, apply responsible gaming measures, and handle any disputes or queries that arise.
Closed Accounts: Following the closure of your account — whether initiated by you or by 999baje — we retain your personal data for a period of five (5) years from the date of closure. This retention period is applied to ensure that we can: resolve any outstanding disputes; respond to queries or complaints raised after account closure; meet our internal anti-fraud and security record-keeping requirements; and conduct historical analysis to identify and prevent future fraudulent activity patterns.
Financial Records: Transaction records (deposit and withdrawal history, payment references) are retained for a minimum of five (5) years from the date of each transaction, consistent with standard financial record-keeping practices.
Communications Data: Support communications (emails, chat transcripts, ticket records) are retained for up to three (3) years from the date of the communication, to support dispute resolution and service quality monitoring.
Anonymised Data: We may retain anonymised and aggregated data derived from your usage of the platform indefinitely for statistical and analytical purposes. Anonymised data cannot be used to identify you and is not subject to the retention limits above.
Retention Summary
- Active account data — retained throughout the life of the account
- Post-closure personal data — retained for 5 years from account closure date
- Financial transaction records — retained for a minimum of 5 years
- KYC verification documents — retained for 5 years from account closure
- Support communications — retained for up to 3 years
- Analytics / usage data — retained in anonymised form indefinitely
- Security and fraud logs — retained for up to 5 years
Deletion Requests: Where you request deletion of your personal data, 999baje will delete or anonymise all data that is not subject to a mandatory retention obligation. Data that must be retained for fraud prevention, dispute resolution, or record-keeping purposes will be retained for the minimum period required and then securely deleted.
Your Privacy Rights
As a player on 999baje, you hold a number of rights in relation to your personal data. The following rights are available to all registered players and may be exercised by contacting our support team at [email protected].
Right to Access
You have the right to request a copy of the personal data that 999baje holds about you. We will respond to verified access requests within a reasonable timeframe.
Right to Correction
If any personal data we hold about you is inaccurate or out of date, you have the right to request that it be corrected. You may update certain data directly via your account settings.
Right to Deletion
You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our applicable retention obligations.
Right to Object
You have the right to object to the processing of your personal data for direct marketing purposes. You may exercise this right at any time without affecting your account status.
Right to Restriction
You may request that we restrict the processing of your personal data in certain circumstances, for example while a correction request is being investigated or a deletion request is being assessed.
Right to Portability
Where technically feasible, you may request that your personal data be provided to you in a structured, commonly used, machine-readable format so that it can be transferred to another service.
Right to Withdraw Consent
Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
How to Exercise Your Rights
To exercise any of the rights listed above, contact the 999baje support team at [email protected]. We will verify your identity before processing any data rights request and will respond within a reasonable timeframe.
Identity Verification Required: To protect your personal data from unauthorised access, 999baje will require you to verify your identity before acting on any data rights request. This verification process may involve confirming account details, providing a registered email response, or submitting a copy of an identity document. We will not action data rights requests received from unverified contacts.
Data Security
999baje implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure.
TLS / SSL Encryption
All data transmitted between your browser or mobile device and the 999baje platform is encrypted using TLS (Transport Layer Security) with industry-standard cipher suites, ensuring that your data cannot be intercepted in transit.
Password Security
Player passwords are stored using one-way cryptographic hashing. 999baje staff cannot view your password in plain text. You are encouraged to use a strong, unique password for your 999baje account and to enable any available two-factor authentication features.
Access Controls
Access to personal data within 999baje's internal systems is restricted on a need-to-know basis. Only authorised staff members whose role requires access to specific categories of data are granted that access, and all access events are logged.
Secure Infrastructure
The 999baje platform is hosted on secure server infrastructure with firewall protection, intrusion detection systems, and regular vulnerability assessments. Physical access to server hardware is restricted and monitored.
Fraud Detection Systems
Automated fraud detection systems continuously monitor account activity, login patterns, and transaction behaviour for signs of unauthorised access or fraudulent use. Suspicious activity triggers immediate review and, where necessary, account suspension.
Regular Security Reviews
999baje conducts periodic internal security reviews and assessments to identify and remediate vulnerabilities in our data processing environment. Security policies are updated in line with evolving best practices in the online gaming industry.
While 999baje takes all reasonable precautions to secure your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials, including your username and password. If you believe your account has been compromised or you notice suspicious activity, please contact us immediately at [email protected]. 999baje will never contact you to ask for your password by email or chat.
Data Breach Notification: In the event of a data breach that is likely to result in a risk to your rights and freedoms, 999baje will take prompt action to contain the breach and will notify affected players as soon as reasonably practicable, providing details of the nature of the breach, the data affected, and the steps being taken in response.
Policy Updates
999baje reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, platform features, or internal compliance requirements. The following explains how we manage and communicate policy changes.
When a material change is made to this Privacy Policy, 999baje will update the "Effective Date" displayed at the top of this page and will post a prominent notice on the platform informing players of the change. For significant changes that materially affect how your personal data is used, we will also send a notification to the email address registered to your account, where possible.
Continued use of the 999baje platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you must stop using the platform and may request account closure by contacting [email protected]. We encourage you to review this Privacy Policy periodically so that you remain informed about how your data is being protected and used.
Minor updates — such as clarifications of existing language, corrections of typographical errors, or formatting adjustments that do not alter the substance of the Policy — may be made without formal notice. The current version of this Policy is always accessible at https://999baje.net/privacy-policy.
How You Will Be Notified
- Updated "Effective Date" shown at the top of this page
- Platform-wide notice displayed on the 999baje homepage
- Email notification to your registered address for material changes
- In-platform notification on your next login session after a significant update
Questions About This Policy
If you have any questions, concerns, or requests relating to this Privacy Policy or the way 999baje handles your personal data, please contact our support team directly:
- Email: [email protected]
- Support Hours: 24/7 (Bangladesh Standard Time, UTC+6)
- Response Time: Privacy queries answered within 48 hours
Related Documents
This Privacy Policy forms part of the 999baje legal framework alongside our Terms & Conditions and Responsible Gaming Policy. Players are encouraged to read all three documents to fully understand their rights, obligations, and the protections in place when using 999baje.
Ready to Play at 999baje?
Your data is protected, your rights are respected, and the games are waiting. Explore cricket, slots, Dragon Tiger, and more — all in Bangladeshi Taka via bKash, Nagad, and Rocket.