Privacy Policy – How sb999 Collects, Uses, and Protects Your Data

1 Information We Collect

sb999 collects personal data from members through several distinct channels. The categories of information we collect, and the context in which each is collected, are described below. We collect only the data that is genuinely necessary for the stated purpose and do not request information beyond what is required to operate the platform safely and in compliance with applicable standards.

1.1 Registration Data

When you create an sb999 account, we collect your full legal name, date of birth, mobile phone number, and a unique username of your choosing. This information is used to establish your identity, prevent duplicate account creation, and communicate account-related updates to you. You are responsible for ensuring that all registration data provided is accurate and current.

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) obligations, we may request copies of government-issued identification documents, including your National Identity Card (NID), passport, or driving licence. We may also request documentary evidence of payment method ownership, such as a screenshot of your registered bKash or Nagad wallet profile. This data is used exclusively for identity verification purposes and is stored in encrypted form.

1.3 Financial Transaction Data

sb999 records the details of all deposit and withdrawal transactions associated with your account, including the payment method used, transaction amounts in Bangladeshi Taka (BDT), timestamps, and transaction reference numbers. This information is required for financial recordkeeping, dispute resolution, and compliance with anti-money-laundering standards. sb999 does not store complete mobile banking credentials or full payment card numbers.

1.4 Device and Usage Data

When you access sb999 through a web browser or mobile device, we automatically collect certain technical data, including your IP address, browser type and version, operating system, device type, referring URL, pages visited within the platform, session duration, and in-platform actions such as game launches and bet placements. This data is used to maintain platform security, detect suspicious activity, improve user experience, and compile aggregated analytics reports.

1.5 Communications Data

If you contact sb999 support via live chat, email, or any other channel, we retain records of those communications including the content of messages, timestamps, and any attachments provided. This data is used to resolve your enquiry, train our support team, and maintain an audit trail of account-related decisions.

2 How We Use Your Data

sb999 processes personal data only for defined, legitimate purposes. We do not use member data for purposes that are incompatible with those originally stated at the point of collection. The primary purposes for which we process your data are as follows:

Where we rely on your consent as the legal basis for processing — for example, sending promotional messages about bonus offers, seasonal promotions tied to BPL season, Eid, or Pohela Boishakh — you may withdraw that consent at any time by contacting our support team. Withdrawal of consent will not affect the lawfulness of any processing carried out before the withdrawal.

3 Data Sharing and Disclosure

sb999 does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial use. We share data only in the following limited and defined circumstances:

3.1 Service Providers and Technology Partners

To operate the sb999 platform, we engage third-party service providers including game software providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi), payment processing partners (including the providers behind bKash, Nagad, Rocket, and Upay integrations), identity verification services, and cloud infrastructure providers. These parties receive only the minimum data necessary to perform their contracted function and are bound by data processing agreements that prohibit them from using your data for any purpose other than the contracted service.

3.2 Legal and Regulatory Disclosure

sb999 may disclose personal data to law enforcement agencies, financial intelligence bodies, or other governmental authorities in Bangladesh when required to do so by a valid legal order, court ruling, or statutory obligation. We will, where legally permissible, notify the affected member of any such disclosure request before complying with it.

3.3 Anti-Money-Laundering Compliance

As part of our anti-money-laundering and counter-financing-of-terrorism (AML/CFT) obligations, sb999 may be required to share transaction records and identity data with financial compliance authorities. This sharing is governed by applicable law and is not subject to member consent. All such disclosures are logged and audited by our compliance team.

3.4 Business Transfers

In the event that sb999 undergoes a merger, acquisition, or transfer of all or part of its assets, member data may be transferred as part of that transaction. In such a scenario, sb999 will notify affected members in advance and ensure that the receiving entity is bound by privacy obligations at least as protective as those set out in this Policy.

4 Cookies and Tracking Technologies

sb999 uses cookies and similar local storage technologies to support the operation of the platform. A cookie is a small text file placed on your device by a web server. The following categories of cookies are used on the sb999 platform:

4.1 Strictly Necessary Cookies

These cookies are essential for the platform to function correctly. They maintain your login session across page navigations, store your in-session preferences such as odds format, and ensure that your account balance and bet slip remain consistent as you move through the site. Without these cookies, the sb999 platform cannot operate as intended. Because they are strictly necessary, they do not require your separate consent.

4.2 Performance and Analytics Cookies

sb999 uses first-party analytics cookies to measure aggregate platform usage, including which game categories are most visited, average session durations, and common navigation paths. This data is processed in aggregated, anonymised form and is used solely to improve platform performance and content layout. These cookies do not identify you personally and do not track your activity outside the sb999 website.

4.3 Preference Cookies

Preference cookies remember choices you make on the platform — such as your preferred display language and notification settings — so that you do not need to reconfigure them on every visit. These cookies improve your experience but are not critical to platform functionality. You may disable them through your browser settings without affecting your ability to use the platform.

4.4 Managing Cookies

You can manage, restrict, or delete cookies through your browser settings at any time. Most modern browsers provide detailed cookie management controls, including the ability to block all cookies, accept only first-party cookies, or clear cookies on browser close. Please note that disabling strictly necessary cookies will impair your ability to log in and use key platform features. Instructions for managing cookies are available in the help documentation of all major browsers.

5 Data Retention and Storage

sb999 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply to the main categories of data we hold:

• Active account data — retained for the full duration of your membership with sb999, plus a minimum of five years following permanent account closure, to satisfy financial and compliance recordkeeping requirements.
• KYC and identity documents — retained for a minimum of five years from the date of the most recent transaction on the account, in accordance with anti-money-laundering regulations applicable in Bangladesh.
• Transaction records — retained for five years from the date of each transaction, to support financial auditing, dispute resolution, and regulatory reporting.
• Support communications — retained for three years from the date of each interaction, to maintain an audit trail of account decisions and support quality assurance processes.
• Device and session logs — retained for 12 months from collection, after which they are aggregated or deleted unless required for an ongoing investigation.
• Marketing consent records — retained for as long as the consent remains active, plus one year following withdrawal of consent, to evidence compliance.

At the end of each applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with an identifiable individual. Where data is anonymised rather than deleted, it may continue to be used in aggregate analytics without restriction.

6 Data Security Measures

sb999 takes the security of member data seriously and maintains a layered set of technical and organisational controls to protect personal information against unauthorised access, disclosure, alteration, or destruction. Our current security measures include, but are not limited to, the following:

6.1 Technical Controls

• 256-bit SSL/TLS encryption for all data transmitted between member devices and the sb999 platform.
• AES-256 encryption applied to all personally identifiable data and financial records at rest.
• Two-factor authentication (2FA) available for all member accounts as an additional login security layer.
• Automated intrusion detection and real-time alerting systems to identify and respond to potential security incidents within minutes.
• Regular automated vulnerability scanning and periodic penetration testing conducted by qualified security professionals.
• Strict role-based access control (RBAC) ensuring that staff members can only access the data required for their specific job function.

6.2 Organisational Controls

• All staff with access to member data are required to complete data protection training before being granted system access and annually thereafter.
• Access to production data systems is restricted to a small number of specifically authorised personnel and is subject to multi-factor authentication.
• All data access events are logged and subject to periodic audit review to detect any unauthorised or anomalous access patterns.
• A formal data breach response procedure is maintained, which includes notification to affected members without undue delay in the event of a breach that may affect their rights or freedoms.

7 Your Rights Over Your Data

As a member of sb999, you hold the following rights with respect to the personal data we process about you. These rights may be exercised at any time by contacting our support team using the contact details provided in Section 8 of this Policy.

7.1 Right of Access

You have the right to request a copy of the personal data that sb999 holds about you. We will provide this information in a structured, commonly used format within 30 days of receiving a verified request. We may ask you to confirm your identity before fulfilling an access request, to protect against unauthorised data disclosure.

7.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections — such as updating your registered mobile number — can be made directly through your account settings. More substantive corrections, such as a legal name change, may require you to provide supporting documentation.

7.3 Right to Erasure

You have the right to request the deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis exists for continued processing. Please note that erasure requests cannot be fulfilled where retention is required by law — for instance, transaction records that must be retained to comply with anti-money-laundering regulations will not be deleted at member request during the mandatory retention period.

7.4 Right to Object

You have the right to object to the processing of your personal data where sb999 relies on legitimate interest as the legal basis. Upon receiving an objection, sb999 will cease the processing in question unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or unless processing is necessary for the establishment or defence of legal claims.

7.5 Right to Withdraw Marketing Consent

If you have previously consented to receiving promotional communications from sb999 — such as bonus offer notifications, seasonal promotions for BPL or Eid, or new game launch alerts — you may withdraw that consent at any time. Withdrawing consent will result in you no longer receiving promotional messages. It will not affect your ability to use the platform or your entitlement to standard account communications such as transaction confirmations and security alerts.

8 Contact and Complaints

If you have any question about this Privacy Policy, wish to exercise a data right, or believe that sb999 has not handled your personal data in accordance with this Policy, please contact our support team using the details below. All data-related enquiries are handled by our dedicated privacy team and will be treated with appropriate confidentiality.

8.1 Contact Details

You may contact sb999 regarding data privacy matters by emailing us at the address below. Please include your registered username and a brief description of your enquiry so that we can route it to the correct team promptly.

Email: [email protected] (plain text — not a clickable link)

Our support team is available 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6). For privacy-specific requests, please mark the subject line of your message with the phrase "Data Privacy Request" to ensure prompt handling.

8.2 Complaints

If you are dissatisfied with the manner in which sb999 has responded to a data rights request or has handled your personal data, you may raise a formal complaint with us by emailing [email protected] and marking your message "Formal Privacy Complaint". We will acknowledge your complaint within 5 business days and provide a full written response within 28 days of acknowledgement. Where your complaint cannot be resolved within that timeframe, we will update you on progress at regular intervals until resolution is reached.

8.3 Policy Updates

sb999 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform functionality. When we make material changes to this Policy, we will update the effective date shown at the top of this page and, where the changes are significant, notify members via their registered mobile number or within the platform. Your continued use of sb999 following the publication of an updated Privacy Policy constitutes acceptance of the revised terms. We recommend reviewing this page periodically to stay informed of how we protect your data.