u999 Privacy Policy

1 Introduction

u999 ("we", "us", "our") is the operator of the online betting and casino platform available at u999.im (the "Platform"). We are committed to protecting the privacy and personal data of every individual who visits, registers on, or interacts with the Platform.

This Privacy Policy sets out the basis on which personal data we collect from you, or that you provide to us, will be processed by us. It applies to all Players registered on the u999 Platform and to any visitor who browses u999.im, regardless of whether they hold a registered Account.

This policy should be read in conjunction with our Terms & Conditions, which are available at u999.im/terms-conditions and are incorporated herein by reference. Defined terms used in this Privacy Policy have the same meaning as in the Terms & Conditions unless the context requires otherwise.

2 Personal Data We Collect

u999 collects personal data that is necessary to provide you with a safe, compliant, and high-quality betting and gaming experience. The categories of personal data we collect include:

We collect only the minimum data necessary for the stated purposes. We do not collect sensitive personal data such as racial or ethnic origin, religious beliefs, or health data unless it is directly relevant to a responsible gaming assessment you have requested.

3 How We Collect Your Data

u999 collects personal data through the following channels:

• Direct interactions: Data you provide when registering an Account, completing KYC verification, making a deposit or withdrawal, placing a bet, contacting customer support, or responding to a survey or promotion.
• Automated technologies: When you visit u999.im, we automatically collect Technical Data and Usage Data through cookies, web beacons, server logs, and similar tracking technologies. See Section 7 (Cookies & Tracking) for full details.
• Payment processors: When you transact via bKash, Nagad, Rocket, Upay, or a partner bank, we receive transaction confirmation data from that processor, which may include your registered mobile number or bank account reference.
• Identity verification partners: Where we use third-party KYC or fraud-prevention services to verify documents you submit, those services may return verification status data and risk scores to us.
• Publicly available sources: In limited circumstances related to fraud prevention or regulatory compliance, we may cross-reference data you have provided against publicly available records.

4 Legal Basis for Processing

u999 processes your personal data only where we have a valid legal basis to do so. The primary legal bases we rely on are:

• Performance of a contract: Processing that is necessary to register your Account, process your deposits and withdrawals, settle your bets, and deliver the core services you have signed up for.
• Legal obligation: Processing required to comply with applicable anti-money laundering (AML), know-your-customer (KYC), and fraud-prevention obligations, including identity verification and transaction monitoring.
• Legitimate interests: Processing for the purposes of preventing fraud, improving Platform security, analysing usage patterns to enhance the user experience, and managing responsible gaming obligations — where those interests are not overridden by your data protection rights.
• Consent: Where we rely on your consent — for example, to send you marketing communications or to place non-essential cookies — you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5 How We Use Your Personal Data

u999 uses the personal data it collects for the following purposes:

• To register and maintain your u999 Account, including verifying your identity and age (21+ requirement) during onboarding.
• To process deposits and withdrawals in BDT via your registered payment methods (bKash, Nagad, Rocket, Upay, and partner banks).
• To settle bets and credit winnings to your Account Balance following confirmation of results from governing bodies such as the ICC, BPL Governing Council, or FIFA.
• To carry out KYC and anti-money laundering checks as required to ensure the integrity of the Platform and compliance with applicable regulations.
• To detect and prevent fraud, collusion, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions.
• To personalise your experience on the Platform, including surfacing cricket markets, slot games, or casino content relevant to your activity history.
• To communicate with you about your Account, including transactional notifications, security alerts, and support responses.
• To send you marketing communications about u999 promotions, seasonal offers (such as Eid or BPL tournament specials), and new features — only where you have given explicit consent.
• To comply with responsible gaming obligations, including monitoring for signs of problem gambling and activating self-exclusion or account restrictions where requested or required.
• To analyse aggregated, anonymised usage data to improve the Platform's performance, design, and feature set.

6 Data Sharing & Disclosure

u999 does not sell or rent your personal data to third parties. We share personal data only in the following limited circumstances:

• Payment processors: We share the minimum financial data required to process your bKash, Nagad, Rocket, Upay, or bank transaction. These processors act under strict data processing agreements and are prohibited from using your data for any purpose beyond processing your transaction.
• Identity verification providers: Where third-party KYC services are used to verify documents you submit, those providers receive the documents and return a verification result. They are contractually bound to keep your data confidential.
• Fraud prevention and security services: We may share Technical Data and Usage Data with fraud detection partners to identify and prevent unauthorised Account access or suspicious betting patterns.
• Legal and regulatory authorities: We will disclose personal data to law enforcement, regulators, or other government authorities where we are legally required to do so, including in response to anti-money laundering reporting obligations.
• Professional advisers: Our legal counsel, auditors, and other professional advisers may access personal data on a need-to-know basis, subject to binding confidentiality obligations.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of the u999 business, personal data held by u999 may be transferred to the acquiring entity, subject to equivalent privacy protections.

In all cases, data shared with third parties is limited to the minimum necessary for the stated purpose, and those third parties are required to handle it in accordance with applicable data protection standards.

7 Cookies & Tracking Technologies

u999 uses cookies and similar tracking technologies to operate the Platform effectively, maintain your session, and understand how users interact with our pages. The types of cookies we use are:

• Essential cookies: Strictly necessary for the Platform to function. They enable core features such as Account login sessions, security tokens, and shopping-basket equivalents for bet slips. These cannot be disabled without impairing Platform functionality.
• Performance cookies: Collect anonymised data about how visitors use u999.im — which pages are visited most, where users navigate from, and which features are used. This data helps us improve the Platform experience.
• Functionality cookies: Remember your preferences such as preferred payment method, language settings, and odds format so that your experience is consistent across sessions.
• Analytics cookies: Used by our analytics tools to generate aggregated reports on Platform traffic and user behaviour. No individual user is identified in these reports.

You can manage your cookie preferences through your browser settings. Please note that disabling essential cookies will affect your ability to use certain features of the Platform, including maintaining a logged-in session.

8 Data Retention

u999 retains personal data only for as long as it is necessary for the purposes set out in this Privacy Policy, or as required by applicable legal and regulatory obligations.

• Account data: Retained for the duration of your Account's active status, plus a minimum of five (5) years following Account closure, in accordance with standard anti-money laundering record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required by financial compliance standards.
• KYC and verification documents: Retained for the period required by applicable AML regulations, typically five (5) years from the end of the business relationship.
• Support communications: Retained for up to three (3) years from the date of the last communication, to allow reference in the event of follow-up queries or disputes.
• Marketing consent records: Retained until you withdraw consent or close your Account, plus a reasonable period thereafter to evidence the consent history.

When personal data is no longer required for any retention purpose, it is securely deleted or anonymised in accordance with our internal data disposal procedures.

9 Data Security

u999 implements appropriate technical and organisational measures to protect personal data against accidental loss, unauthorised access, disclosure, alteration, or destruction. Our security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your browser or device and our servers.
• Encryption at rest for sensitive stored data including passwords (which are hashed and salted and never stored in plain text) and financial account references.
• Role-based access controls ensuring that only authorised personnel with a documented operational need can access personal data.
• Regular internal security assessments and vulnerability testing of the Platform infrastructure.
• Incident response procedures to detect, contain, and notify affected parties in the event of a data breach, within timeframes consistent with applicable law.

While u999 takes all reasonable steps to protect your data, no internet transmission or electronic storage system is completely secure. You are encouraged to use a strong, unique password for your u999 Account and to notify us immediately at [email protected] if you suspect any unauthorised access to your Account.

10 Your Data Rights

Subject to applicable law, you have the following rights in relation to the personal data that u999 holds about you:

• Right of access: You may request a copy of the personal data u999 holds about you, together with information about how it is processed.
• Right to rectification: You may request that inaccurate or incomplete personal data held by u999 be corrected or completed.
• Right to erasure: In certain circumstances, you may request that u999 delete your personal data. This right is subject to our legal retention obligations — for example, we cannot delete transaction records that we are required to retain under AML law.
• Right to restriction: You may ask us to restrict the processing of your personal data in certain circumstances, for example while a correction request is being verified.
• Right to data portability: Where technically feasible and legally applicable, you may request that personal data you have provided to u999 be transferred to you in a structured, machine-readable format.
• Right to object: You may object to the processing of your personal data where we rely on legitimate interests as the legal basis, unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Data Rights Request". u999 will respond within 30 days of receiving a valid request. We may ask you to verify your identity before processing your request.

11 Children & Minors

The u999 Platform is strictly intended for adults aged 21 years and above. u999 does not knowingly collect personal data from individuals under the age of 21. If you are under 21, you must not use the Platform, register an Account, or provide any personal data to u999.

If u999 becomes aware that personal data has been collected from an individual under the age of 21 without appropriate verification, that Account will be immediately suspended, all associated data will be reviewed, and the Account will be permanently closed in accordance with our Terms & Conditions. Any funds held in such an Account will be handled in accordance with applicable law.

If you believe that a minor has registered on the u999 Platform, please contact us immediately at [email protected] so that we may take prompt action.

12 Third-Party Links

The u999 Platform does not contain links to external third-party websites as a matter of policy. However, where any such links appear — for example, within third-party game content provided by studios such as Pragmatic Play, Evolution Gaming, NetEnt, or Spribe — u999 has no control over the content, privacy practices, or data collection activities of those external sites.

u999 accepts no responsibility or liability for the privacy policies or data handling practices of any third-party game providers whose content is hosted or embedded within the Platform. We encourage you to review the privacy policy of any third-party service before providing personal data to it.

13 Updates to This Privacy Policy

u999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, operational requirements, or applicable legal obligations. The date of the most recent revision is displayed prominently at the top of this document.

Where changes to this Privacy Policy are material — meaning they significantly affect your rights or the way we process your personal data — u999 will notify registered Players via email to their registered address and/or via a prominent notice on the Platform prior to the changes taking effect. The notification will summarise the key changes and their effective date.

Your continued use of the Platform following the effective date of any revised Privacy Policy constitutes your acceptance of those changes. If you do not agree with the revised policy, you should cease using the Platform and may request Account closure by contacting [email protected].

14 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way u999 handles your personal data, please contact our support team using the details below. All data-related communications should be made in English.

• Email: [email protected]
• Subject line for data requests: "Data Rights Request" or "Privacy Enquiry"
• Support hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (UTC+6)
• Response time: u999 aims to respond to all privacy-related enquiries within 30 calendar days of receipt.

For responsible gaming concerns, please use the subject line "Responsible Gaming Request" so our dedicated team can prioritise your case. Further information is available on our Responsible Gaming page at u999.im/responsible-gaming.