th999 Privacy Policy – How We Protect Your Personal Data

01 Introduction

This Privacy Policy ("Policy") is issued by th999 ("th999", "we", "us", "our") and applies to all personal data collected through the th999 online casino and sports betting platform at https://th999.io (the "Platform"), including any related mobile experiences, customer support channels, and marketing communications. This Policy should be read alongside the th999 Terms & Conditions, which govern the overall use of the Platform.

th999 is committed to protecting the privacy of every player who registers and wagers on the Platform. We take our data protection obligations seriously and have implemented technical and organisational measures appropriate to the nature of the personal data we process. This Policy explains in plain English exactly what we collect, why we collect it, how we use it, and what choices you have.

02 Data Controller

For the purposes of this Policy, th999 acts as the data controller in respect of personal data collected from players accessing the Platform from Bangladesh. As data controller, th999 determines the purposes for which and the means by which personal data is processed. Where th999 engages third-party service providers to process data on its behalf, those providers act as data processors and are contractually bound to process data only on th999's documented instructions.

All data protection and privacy enquiries should be directed to the th999 support team at [email protected]. Requests will be acknowledged within 5 business days and resolved within 30 calendar days wherever practically possible.

03 Data We Collect

th999 collects the following categories of personal data from players:

3.1 Identity Data

Full legal name, date of birth, gender, National Identity Card (NID) number or passport number, and any other government-issued identification data provided during the Know Your Customer (KYC) verification process.

3.2 Contact Data

Residential address in Bangladesh (including district, city such as Dhaka, Chittagong, Sylhet, Khulna, or Rajshahi), email address, and mobile phone number linked to your bKash, Nagad, Rocket, or Upay mobile wallet.

3.3 Financial Data

Transaction records including deposit amounts in BDT, withdrawal requests, payment method references (wallet identifiers for bKash, Nagad, Rocket, Upay; masked card numbers for Visa and Mastercard), and the dates and times of financial activity on your account. Raw payment credentials such as full card numbers or mobile banking PINs are never stored by th999.

3.4 Account & Gaming Data

Username, encrypted password, account registration date, login history, session durations, game history (including wagers placed on cricket, slots, live dealer games, and other products), bonus claims, and any responsible gaming preferences such as deposit limits or self-exclusion settings applied to your th999 account.

3.5 Technical Data

IP address, device type, operating system, browser type and version, screen resolution, referring URL, and session identifiers collected automatically when you access the Platform.

3.6 Communications Data

Records of correspondence between you and th999 support, including live chat transcripts, email exchanges, and any complaint submissions. These records are retained to ensure continuity of service and for quality assurance purposes.

04 How We Collect Data

th999 collects personal data through the following means:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or updating your account preferences.
• Automated technologies: Technical and usage data collected automatically via cookies, web beacons, server logs, and similar tracking technologies when you browse or interact with the Platform. See Section 10 for full details on cookies.
• Third-party payment providers: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, Visa, and Mastercard processors when you initiate a deposit or withdrawal.
• Identity verification services: Where th999 engages a third-party KYC or fraud-prevention service, that provider may supply identity match scores and document authentication results, which are associated with your account record.
• Fraud and security monitoring: Device fingerprinting and behavioural analytics data generated by anti-fraud systems used to protect the integrity of the th999 platform and its players.

05 How We Use Your Data

th999 uses your personal data for the following purposes:

th999 will not use your personal data for any purpose that is materially different from those listed above without providing you with prior notice and, where required, obtaining your consent.

06 Legal Basis for Processing

th999 processes personal data on one or more of the following legal bases depending on the specific processing activity:

• Contractual necessity: Processing required to perform the contract between th999 and the player — primarily account management, payment processing, and service delivery.
• Legal obligation: Processing required to comply with applicable laws, including age verification obligations, anti-money-laundering requirements, and financial record-keeping obligations.
• Legitimate interests: Processing carried out in pursuit of th999's legitimate business interests, such as fraud prevention, platform security, and analytics, provided those interests are not overridden by your privacy rights.
• Consent: Processing based on your explicit opt-in consent, primarily in the context of marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

07 Sharing Your Data

th999 does not sell, rent, or trade personal data. We share personal data only with the following categories of recipients and only to the extent necessary for each defined purpose:

• Payment processors: bKash, Nagad, Rocket, Upay, and card-processing partners receive transaction data necessary to execute deposits and withdrawals.
• Identity verification providers: Third-party KYC services receive identity and contact data to perform document authentication and age verification checks.
• Fraud and risk management vendors: Anti-fraud platforms receive technical and behavioural data to identify and prevent fraudulent account activity.
• Game software providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive the minimum data necessary (typically a pseudonymous player identifier) to deliver game sessions.
• IT and hosting infrastructure providers: Cloud and hosting service providers who store and process Platform data under strict data processing agreements with th999.
• Legal and regulatory authorities: Where th999 is legally required to disclose data to a court, regulatory body, or law enforcement authority, we will comply with such requests to the extent mandated by applicable law.

All third-party data processors engaged by th999 are subject to contractual data protection obligations and are permitted to use your personal data only in accordance with th999's instructions and for no other purpose.

08 Data Retention

th999 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by law. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual. Where data is anonymised rather than deleted, the resulting anonymised dataset may be retained and used for analytical and product development purposes indefinitely.

09 Data Security

th999 has implemented a range of technical and organisational security measures designed to protect personal data against accidental loss, unauthorised access, misuse, alteration, and disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between player devices and th999 servers.
• Encryption at rest for sensitive data stored in th999 databases, including identity documents and financial records.
• Role-based access controls ensuring that only authorised th999 personnel with a legitimate business need can access personal data.
• Multi-factor authentication requirements for all internal systems handling personal data.
• Regular penetration testing and vulnerability assessments conducted by independent security professionals.
• Automated monitoring and alerting for anomalous access patterns or potential data breach indicators.
• Staff training on data protection obligations and secure data handling procedures.

Notwithstanding these measures, no data transmission over the internet or storage system can be guaranteed to be completely secure. In the event of a data breach that is likely to result in a risk to player rights, th999 will notify affected players and take all practicable remediation steps without undue delay.

10 Cookies & Tracking Technologies

th999 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit a website. The following categories of cookies are used on the th999 Platform:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in during your visit and security tokens that protect against cross-site request forgery. These cookies cannot be disabled without impairing Platform functionality.
• Functional cookies: Store your preferences such as your chosen language, last viewed game category, and responsible gaming settings so the Platform can deliver a more personalised experience on return visits.
• Analytics cookies: Collect aggregated, anonymised data about how players navigate the Platform — which pages are visited, how long sessions last, and where players exit — to help th999 identify and fix usability issues.
• Fraud prevention cookies: Support th999's anti-fraud systems by helping to distinguish legitimate player sessions from automated or suspicious access attempts.

th999 does not use third-party advertising or retargeting cookies. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will prevent you from logging in or using core Platform features. Continued use of the Platform following the display of any cookie notice constitutes acceptance of the cookies described in this section.

11 Your Privacy Rights

As a th999 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact [email protected] with the subject line "Privacy Rights Request" and include your registered account username.

• Right of access: You may request a copy of the personal data th999 holds about you. We will provide this within 30 calendar days of a valid request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected. Account details such as email address and mobile number can also be updated directly within your account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, you have withdrawn consent (where consent was the basis for processing), or you object to processing and no overriding legitimate interest applies. This right is subject to legal retention obligations — for example, financial records must be retained for statutory periods regardless of an erasure request.
• Right to restrict processing: You may request that th999 suspend processing of your data in certain circumstances, such as while an accuracy dispute is being resolved.
• Right to object: You may object to processing based on th999's legitimate interests, including any profiling carried out for Platform personalisation purposes. You may also withdraw marketing consent at any time.
• Right to data portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request a structured, machine-readable copy of the personal data you provided to th999.

12 Minors

The th999 Platform is strictly intended for adults aged 21 years and above. th999 does not knowingly collect personal data from individuals under the age of 21. Age is verified as part of the account registration and KYC process, and th999 reserves the right to request additional proof of age at any point during the account lifecycle.

If th999 discovers or is notified that an account belongs to an individual under the age of 21, all personal data associated with that account will be deleted, the account will be permanently closed, and any deposits will be returned to the payment method of origin. If you believe a minor has registered an account on th999, please notify us immediately at [email protected].

13 International Data Transfers

th999 operates with the support of technology partners and service providers whose infrastructure may be located outside Bangladesh. Where personal data is transferred to a recipient in another country, th999 ensures that appropriate safeguards are in place to protect the data to a standard at least equivalent to the protections described in this Policy. Such safeguards include contractual data protection clauses incorporated into all data processing agreements with international providers.

th999 does not transfer personal data to any jurisdiction where adequate protections cannot be ensured. Game software providers such as Pragmatic Play, Evolution Gaming, and similar studios operate under their own data protection policies in respect of pseudonymous game session data.

14 Changes to This Policy

th999 reviews this Privacy Policy regularly and may update it to reflect changes in our data practices, the services we offer, or applicable legal requirements. When material changes are made, th999 will notify active players by email to the address registered on the account and will update the effective date at the top of this document. The most current version of the Policy will always be accessible at https://th999.io/privacy-policy.

Your continued use of the th999 Platform after any updated Policy takes effect constitutes your acceptance of the revised terms. If you do not accept the changes, you should stop using the Platform and contact support to close your account and exercise any applicable data rights.

15 Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the personal data th999 holds about you, please contact the th999 Data Protection team using the details below. All privacy-related correspondence is treated with strict confidentiality.

If you have a concern about responsible gaming that relates to your personal data — for example, a request to apply a self-exclusion that involves processing sensitive information — please also visit the Responsible Gaming page for dedicated guidance and tools.