at999 Privacy Policy — Your Data, Your Rights
This Privacy Policy explains how at999 collects, stores, uses, and protects the personal information of players registered on our Bangladesh gaming platform.
Introduction
at999 is committed to protecting the privacy of every player who uses our platform. This Privacy Policy describes the types of personal information we collect, the purposes for which we process it, how we keep it secure, and the rights available to you as a data subject. This policy applies to all players who access at999 through the website, regardless of device type or location.
By registering an account with at999 and using our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any aspect of this policy, you should not proceed with registration or continue using the platform.
Privacy at a Glance
Six key facts about how at999 handles your personal data.
1. Information We Collect
at999 collects personal data through four primary channels: information you provide directly during registration and KYC, information generated by your activity on the platform, technical information collected automatically from your device and browser, and information provided by payment processors when you make a deposit or withdrawal.
- 1Registration data: full legal name, date of birth, mobile phone number, and the login credentials (username and hashed password) you create at the point of account opening.
- 2KYC and verification data: government-issued identity documents (national ID card or passport), proof-of-age documents, and any additional information requested during enhanced due-diligence checks.
- 3Transaction and activity data: deposit amounts, withdrawal requests, payment method identifiers (mobile wallet numbers, last four digits of cards), bet history, game session logs, bonus usage records, and account balance movements.
- 4Technical data: IP address, device type and operating system, browser type and version, session timestamps, approximate geographic location derived from IP, and referral source data collected automatically when you access the platform.
2. How We Use Your Information
The personal data collected by at999 is used solely for the following purposes. We do not process player data for purposes incompatible with those described below.
- 1Account management: to create, maintain, and administer your at999 account, process deposits and withdrawals, calculate and credit bonus entitlements, and deliver customer support.
- 2Identity and age verification: to confirm that you meet the minimum age requirement (21+) and to fulfil Know Your Customer (KYC) obligations that protect the platform and its players from fraud and financial crime.
- 3Fraud prevention and platform security: to detect and investigate suspicious activity, enforce our Terms & Conditions, prevent multi-accounting, and respond to security incidents that may affect player accounts.
- 4Platform improvement: to analyse aggregate, anonymised usage patterns that help us improve the platform's design, game selection, payment flow, and customer support quality. This analysis is conducted on data that does not identify individual players.
- 5Regulatory compliance: to retain transaction records, KYC documentation, and communication logs for the periods required by applicable anti-money-laundering, counter-terrorism-financing, and data-retention obligations.
3. Legal Basis for Processing
at999 processes personal data under three legal bases, depending on the nature of the processing activity.
- 1Contractual necessity: the processing of registration data, transaction data, and KYC data is necessary to perform the contract between at999 and each registered player. Without this processing, we cannot provide account services, process payments, or honour withdrawal requests.
- 2Legal obligation: the retention of KYC documentation, transaction records, and anti-money-laundering reports is required by applicable law. We have no discretion to delete this data before the relevant statutory retention period has expired.
- 3Legitimate interests: the processing of technical data (IP addresses, device fingerprints, session logs) for fraud prevention and platform security is conducted on the basis of at999's legitimate interest in maintaining a secure and fair gaming environment for all players.
4. Data Sharing and Third Parties
at999 does not sell or rent personal data to any third party. We share data only in the limited circumstances listed below, and only to the extent necessary for the stated purpose.
- 1Payment processors: when you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, or a card provider, we share the minimum transaction data required by that provider to authenticate and complete the payment. We do not share broader profile data with payment processors.
- 2Game software providers: game session data (bet amounts, game outcomes, session duration) is shared with providers such as Pragmatic Play, Evolution Gaming, and Spribe solely to facilitate gameplay and resolve any technical disputes. These providers receive only the data relevant to your gaming activity and are contractually prohibited from using it for any other purpose.
- 3Legal and regulatory authorities: at999 may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required to do so by applicable law, court order, or regulatory direction. We will notify the affected player of any such disclosure where we are legally permitted to do so.
- 4Fraud prevention services: where at999 has reasonable grounds to suspect fraudulent activity, technical data (IP addresses, device identifiers) may be shared with third-party fraud-detection services to verify that the suspected activity constitutes a genuine security risk. No payment data or game history is shared in this context.
5. Cookies and Tracking Technologies
at999 uses a small number of cookies and similar tracking technologies to make the platform work correctly and to collect anonymised performance data. We use two categories of cookie: strictly necessary cookies (required for session management, login persistence, and security token validation — these cannot be disabled without breaking core platform functionality) and analytics cookies (used to collect aggregate, anonymised data about how players navigate the platform, which helps us identify slow pages and improve the user experience).
at999 does not use advertising cookies, cross-site tracking cookies, or social media tracking pixels. You may configure your browser to block or delete cookies; however, doing so may affect your ability to log in and use certain platform features. Continued use of the platform constitutes your consent to the use of strictly necessary cookies. Analytics cookies are deployed only where you have not signalled a preference against tracking through your browser settings.
6. Data Retention
at999 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Registration and transaction data associated with active accounts is retained for the duration of the account relationship and for a minimum period of five years following account closure, in order to satisfy anti-money-laundering and counter-terrorism-financing record-keeping requirements.
Technical data (session logs, IP addresses) collected for fraud prevention purposes is retained for a shorter period — typically twelve months from the date of collection — unless it forms part of an active fraud investigation, in which case it may be retained until that investigation is concluded. Data held solely for analytics purposes is anonymised within ninety days of collection.
7. Your Rights
As a registered player on the at999 platform, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team using the email address in the site footer. We will respond to all valid requests within a reasonable timeframe.
- 1Right of access: you may request a copy of all personal data we hold about you. We will provide this in a commonly used electronic format within thirty days of a valid request.
- 2Right to rectification: if you believe that any personal data we hold about you is inaccurate or incomplete, you may request that we correct or supplement it. We will action valid rectification requests within fourteen days.
- 3Right to erasure: you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, and where no legal retention obligation applies. Note that KYC and transaction data subject to statutory retention periods cannot be deleted on request before those periods have expired.
- 4Right to restriction of processing: you may request that we restrict our processing of your personal data to storage only, pending resolution of a dispute about its accuracy or the lawfulness of our processing. During a restriction period we will not actively use the affected data.
- 5Right to lodge a complaint: if you believe that at999 has processed your personal data in breach of this Privacy Policy or applicable data-protection law, you have the right to raise a formal complaint by contacting our support team in the first instance. We take all privacy complaints seriously and will investigate and respond in writing.
8. Security Measures
at999 employs a range of technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include SSL/TLS encryption for all data in transit between your device and our servers; hashed storage of passwords using a one-way cryptographic algorithm so that plain-text passwords are never retained; access controls that restrict database access to authorised personnel only; routine security monitoring and logging of access to systems that hold personal data; and periodic review of our data-handling practices.
While at999 takes reasonable steps to protect your personal data, no transmission over the internet and no method of electronic storage is entirely risk-free. We cannot guarantee the absolute security of your data. In the event of a data breach that is likely to result in a high risk to your rights, at999 will notify affected players without undue delay and will take all reasonable steps to contain and remediate the incident.
9. Children's Privacy and the 21+ Requirement
The at999 platform is strictly intended for adults aged 21 and above. We do not knowingly collect or process personal data from individuals under the age of 21. If we become aware that personal data has been submitted by a person under the minimum age, we will delete that data promptly and close the associated account. If you have reason to believe that a minor has registered on the platform, please contact our support team immediately so that we can take appropriate action.
10. Changes to This Privacy Policy
at999 may update this Privacy Policy from time to time to reflect changes in our data-processing practices, changes in applicable law, or improvements to the platform. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify active players via the platform interface. Minor clarifications that do not change the substance of the policy will be published without separate notice.
Your continued use of the at999 platform after any update to this Privacy Policy constitutes your acceptance of the revised policy. We recommend reviewing this page periodically so that you remain informed about how we handle your personal data.
Have Questions About Your Privacy?
Browse our FAQ for quick answers on data and security, or visit our About Us page to learn more about the at999 platform.
Read the FAQ About Us