tb999 Privacy Policy — How We Protect Your Data

1. Data We Collect

tb999 collects personal data from players in Bangladesh through several channels: directly when you register an account or contact support, automatically as you use the Platform, and occasionally from third-party sources during identity or payment verification. The categories of data we collect are as follows:

tb999 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health information, or biometric data unless explicitly required for identity verification in specific regulatory circumstances, in which case you will be notified separately before collection takes place.

Where you provide data about a third party — for example, by entering another person's mobile number as a payment contact — you confirm that you have obtained that person's consent to share their information with tb999 for the stated purpose.

2. How We Use Your Data

tb999 processes personal data only where there is a legitimate and lawful basis for doing so. The primary purposes for which we use your data are listed below:

• Account creation and management: To register your tb999 account, verify your identity and age, maintain your account settings, and communicate important account-related notices to you.
• Payment processing: To initiate and confirm deposits via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank, and to process withdrawal requests to your registered payment method.
• Platform operation and personalisation: To deliver the games, sports betting markets, and promotions available on tb999, and to personalise your experience based on your activity and preferences on the Platform.
• Responsible gaming: To monitor your gameplay patterns for signs of problem gambling behaviour and, where appropriate, to trigger responsible gaming interventions such as notifications, account reviews, or the application of player-requested deposit or loss limits.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, bonus abuse, account takeover attempts, and other unlawful or prohibited activity on the Platform.
• Customer support: To respond to your support enquiries, resolve account disputes, and maintain records of communications for quality assurance purposes.
• Marketing communications: To send you promotional offers, bonus alerts, and news about tb999 products where you have given your consent to receive such communications. You may withdraw this consent at any time by contacting support.
• Legal and regulatory compliance: To meet any applicable record-keeping, reporting, or disclosure obligations under relevant financial, anti-money laundering, or other applicable laws and regulations.

tb999 does not use automated decision-making processes — including profiling — that produce legal or similarly significant effects on players, except where required to comply with anti-fraud or anti-money laundering screening obligations. In those cases, you have the right to request human review of any automated decision affecting your account.

3. Data Sharing & Disclosure

tb999 does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial purposes. However, in order to operate the Platform, we share certain data with a limited set of trusted service providers and partners under strict confidentiality and data processing agreements:

• Payment processors: bKash, Nagad, Rocket, Upay, and partner banks receive the minimum data necessary (such as your registered mobile number or bank account reference) to execute deposit and withdrawal transactions.
• Game content providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a pseudonymous player identifier to enable fair game delivery, bet settlement, and jackpot tracking. These providers do not receive your full name, mobile number, or payment details.
• Identity verification services: Where KYC (Know Your Customer) checks are required, tb999 may share identity document images and data with regulated third-party verification platforms. These platforms operate under strict data handling standards and use the data solely for the purpose of identity confirmation.
• Analytics and platform performance tools: Aggregated and anonymised usage data may be shared with analytics providers to help us understand Platform performance, identify technical issues, and improve the player experience. No individually identifiable data is shared for analytics purposes.
• Legal and regulatory bodies: tb999 will disclose personal data to law enforcement agencies, regulatory authorities, or courts when required to do so by applicable law, or when necessary to protect the rights, property, or safety of tb999, its players, or the public.

All third-party service providers who receive personal data from tb999 are contractually obligated to process that data only for the purposes specified, to maintain appropriate technical and organisational security measures, and to delete or return the data upon termination of their engagement with tb999.

4. Cookies & Tracking

tb999 uses cookies and similar tracking technologies (including local storage objects and session tokens) to operate the Platform effectively and to improve your experience as a player. When you access the tb999 website or mobile platform, the following categories of cookies may be placed on your device:

• Strictly necessary cookies: These are essential for the Platform to function. They enable you to log in to your tb999 account, maintain your session across pages, and complete transactions securely. These cookies cannot be disabled without preventing you from using core Platform features.
• Functional cookies: These remember your preferences — such as language settings, last-played games, and display options — so that you do not need to reconfigure them on each visit.
• Performance and analytics cookies: These collect aggregated information about how players navigate the Platform, which pages are visited most frequently, and where technical errors occur. The data is used to improve Platform performance and stability. No individual player is identified through these cookies.
• Security cookies: These help tb999 detect fraudulent login attempts, unusual account activity, and bot-driven interactions with the Platform. They form part of the fraud prevention layer that protects your account.

tb999 does not deploy third-party advertising cookies or allow advertising networks to place tracking cookies on the Platform. You will not be tracked across other websites for advertising retargeting purposes as a result of visiting tb999.

You may adjust your browser settings to block or delete cookies at any time. Please note that disabling strictly necessary cookies will impair your ability to log in and use the Platform. For detailed guidance on managing cookies in your specific browser, refer to your browser's help documentation.

5. Data Security

tb999 takes the security of your personal data seriously and has implemented a layered set of technical and organisational controls to protect it from unauthorised access, loss, alteration, or disclosure:

• Transport encryption: All data in transit between your device and tb999 servers is encrypted using TLS 1.2 or higher, maintaining 256-bit encryption strength across all connections.
• Data-at-rest encryption: Personally identifiable information and payment references stored on tb999 servers are encrypted using AES-256. Raw payment credentials such as full mobile wallet PINs are never stored by tb999.
• Access controls: Access to personal data within tb999's internal systems is restricted on a strict need-to-know basis. Staff who handle player data undergo regular security training and are bound by confidentiality obligations.
• Fraud monitoring: Automated systems monitor all account logins, transactions, and gameplay activity in real time for anomalous patterns that may indicate unauthorised access or fraudulent behaviour. Suspicious events trigger immediate investigation and, where necessary, account protection measures.
• Vulnerability management: tb999's technical infrastructure is subject to periodic security assessments. Identified vulnerabilities are prioritised and remediated according to their severity.

While tb999 employs robust security measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, tb999 will notify affected players promptly and take all reasonable steps to mitigate any harm. You are advised to use a strong, unique password for your tb999 account and to contact support immediately if you suspect that your account has been accessed without your authorisation.

6. Data Retention

tb999 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following considerations:

• Active accounts: Personal data associated with an active tb999 account is retained for the duration of your account relationship with tb999, plus a minimum period after closure as required by applicable financial record-keeping obligations.
• Closed accounts: Following account closure, tb999 retains identity data, transaction records, and KYC documentation for a minimum period of five (5) years to satisfy anti-money laundering record-keeping requirements. After this period, data is securely deleted or irreversibly anonymised.
• Support communications: Live chat transcripts and email correspondence with the tb999 support team are retained for up to two (2) years from the date of the interaction, for quality assurance and dispute resolution purposes.
• Marketing data: If you have consented to receive marketing communications from tb999, your contact details for this purpose are retained until you withdraw your consent or until twelve (12) months of inactivity, whichever occurs first.
• Technical and usage logs: Server logs and session data are typically retained for ninety (90) days for security monitoring purposes, after which they are deleted or aggregated into anonymised statistics.

tb999 reviews its data retention schedules periodically and adjusts them where legal, regulatory, or operational requirements change. Where data is no longer needed and no legal basis for retention exists, it is deleted using secure erasure methods that prevent recovery.

7. Your Privacy Rights

As a player whose personal data is processed by tb999, you have the following rights, which you may exercise by contacting the tb999 support team:

• Right of access: You may request a copy of the personal data tb999 holds about you, along with information about how it is used, where it came from, and with whom it has been shared.
• Right to rectification: If any personal data held by tb999 is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may also update certain details — such as your contact email or mobile number — directly through your tb999 account settings.
• Right to erasure: In certain circumstances — for example, where data is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis for processing applies — you may request that tb999 delete your personal data. Please note that this right is subject to overriding legal obligations, such as the requirement to retain transaction records for anti-money laundering compliance.
• Right to restriction of processing: Where you contest the accuracy of your data, or where you have objected to processing and we are considering your objection, you may request that tb999 restrict processing of your data to storage only while the matter is resolved.
• Right to data portability: Where processing is based on your consent or on a contract, you may request a copy of your personal data in a structured, machine-readable format, suitable for transfer to another service provider if you wish.
• Right to object: You have the right to object at any time to the processing of your personal data for direct marketing purposes. You may also object to other processing based on tb999's legitimate interests, subject to tb999 demonstrating compelling grounds that override your interests.
• Right to withdraw consent: Where tb999 processes your data on the basis of your consent — for example, for marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing that took place before the withdrawal.

To exercise any of the above rights, please contact the tb999 support team via 24/7 live chat or by emailing the address listed in the footer of this page. tb999 will respond to all verified data rights requests within ten (10) business days of receipt. We may need to verify your identity before processing your request to protect against unauthorised access to another player's data.

8. Policy Updates & Contact

tb999 reviews this Privacy Policy regularly and may update it from time to time to reflect changes in our practices, the services we offer, or applicable legal requirements. When we make material changes, we will update the effective date shown at the top of this page and, where the changes are significant, notify registered account holders via their registered email address or through a notice displayed upon login.

We encourage you to review this Privacy Policy periodically so that you remain informed about how tb999 is protecting your data. Your continued use of the Platform after any changes have been published constitutes your acknowledgement of the updated Policy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which tb999 handles your personal data, please contact our dedicated support team. We take all privacy concerns seriously and aim to resolve them promptly and transparently.