ch999 Privacy Policy

1. About This Privacy Policy

This Privacy Policy ("Policy") describes how ch999 ("ch999", "we", "us", "our") collects, uses, stores, and discloses personal data when you access or use the ch999 online casino and sports betting platform available at ch999.io ("Platform"). This Policy applies to all registered players, visitors, and any other individuals whose personal data ch999 processes in connection with the Platform.

This Policy should be read alongside the ch999 Terms & Conditions and Responsible Gaming Policy, which together form the complete legal framework governing your use of the Platform. By registering an account or continuing to use the ch999 Platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein.

ch999 acts as the data controller for the personal data collected through the Platform. This means ch999 determines the purposes for which your data is collected and the manner in which it is processed. Where third-party service providers process data on ch999's behalf, they do so as data processors under binding contractual obligations.

2. Personal Data We Collect

ch999 collects personal data through several channels — directly from you when you register or interact with the Platform, automatically through your use of the Platform, and in some cases from third-party verification or fraud-prevention services. The categories of data ch999 collects include the following:

2.1 Registration and Identity Data

• Full legal name as it appears on your official identity document;
• Date of birth (used to verify you are 21 years of age or older);
• Residential address, city, and postcode;
• Email address and mobile phone number;
• Username and encrypted password;
• National Identity Card number or passport number (where provided for KYC verification).

2.2 Financial and Transaction Data

• Deposit and withdrawal transaction records, including amounts, timestamps, and reference numbers;
• Payment method identifiers — for example, bKash account numbers, Nagad wallet references, Rocket mobile banking numbers, or masked Visa and Mastercard card numbers;
• Account balance history and wagering activity records.

2.3 Technical and Usage Data

• IP address and approximate geolocation derived from IP;
• Device type, operating system, browser type, and version;
• Session timestamps, pages visited, and features used on the Platform;
• Clickstream data and interaction logs;
• Cookie identifiers and similar tracking technologies (see Section 5).

2.4 Communications Data

• Records of your interactions with the ch999 customer support team, including live chat transcripts and email correspondence;
• Your preferences and opt-in or opt-out status for marketing communications.

3. How ch999 Uses Your Personal Data

ch999 uses the personal data it collects for the following purposes:

• Account creation and management: Processing your registration, verifying your identity, maintaining your account, and enabling you to access all ch999 Platform features;
• Payment processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and maintaining accurate transaction records;
• Identity and age verification: Confirming that you meet the minimum age requirement of 21 years and that your identity matches the information provided at registration;
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent transactions, account takeover attempts, money laundering, and other prohibited activities;
• Customer support: Responding to your queries, complaints, and data subject requests promptly and accurately;
• Responsible gaming compliance: Monitoring account activity for signs of problem gambling and enforcing self-exclusion or deposit limits where applicable;
• Platform improvement: Analysing aggregated and anonymised usage data to improve game offerings, platform performance, and the overall user experience;
• Marketing communications: Sending you promotional offers, bonus notifications, and platform updates where you have opted in to receive such communications. You may withdraw consent at any time by contacting ch999 support;
• Legal and regulatory compliance: Retaining records and disclosing data to authorities where required by applicable law.

ch999 does not use automated decision-making or algorithmic profiling in any way that produces legal effects or similarly significant consequences for players, without human oversight and an opportunity for you to seek review of such decisions.

4. Legal Basis for Processing

ch999 processes your personal data on one or more of the following legal grounds:

• Contractual necessity: Processing required to perform the ch999 Terms & Conditions contract with you — for example, creating your account, processing your deposits and withdrawals, and settling your bets;
• Legal obligation: Processing required to comply with applicable financial, anti-money-laundering, and age-verification laws;
• Legitimate interests: Processing carried out for ch999's legitimate business interests — including fraud prevention, platform security, and internal analytics — where those interests are not overridden by your rights;
• Consent: Processing carried out on the basis of your explicit consent — for example, sending marketing emails or promotional SMS messages. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

5. Cookies and Tracking Technologies

ch999 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device when you visit the ch999 website. The following types of cookies are used:

• Strictly necessary cookies: Required for the Platform to function correctly, including session management, login state, and fraud detection. These cannot be disabled without breaking core functionality;
• Functional cookies: Remember your preferences such as language settings and notification preferences to provide a more personalised experience;
• Analytical cookies: Collect anonymised data about how players use the ch999 Platform to help improve performance, navigation, and game discovery;
• Marketing cookies: Used to track the effectiveness of ch999 promotional campaigns. These are only set where you have provided consent.

You can manage or disable cookies through your browser settings at any time. Disabling strictly necessary cookies may affect your ability to use core Platform features, including logging in to your ch999 account.

6. Third-Party Disclosure

ch999 may share your personal data with the following categories of third parties:

• Payment service providers: bKash, Nagad, Rocket, Upay, Visa, and Mastercard processors require transaction data to facilitate deposits and withdrawals. These providers have their own privacy policies and are independently responsible for their data handling practices;
• Identity verification services: Third-party KYC providers that assist ch999 in verifying player identity and age in compliance with applicable requirements;
• Fraud prevention platforms: Services that help ch999 detect and prevent fraudulent account activity, unauthorised access, and financial crime;
• Game technology providers: Casino game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may process technical session data to deliver their games. No financial or identity data is shared with game studios beyond what is technically necessary;
• Legal and regulatory authorities: ch999 will disclose personal data to law enforcement agencies, financial intelligence units, or courts where required by a valid legal order or where disclosure is necessary to prevent serious harm.

All third-party processors engaged by ch999 are bound by written data processing agreements requiring them to maintain the confidentiality and security of your personal data and to process it only on ch999's documented instructions.

7. International Data Transfers

Some of the third-party service providers used by ch999 may process personal data in countries outside Bangladesh. Where personal data is transferred internationally, ch999 takes reasonable steps to ensure that an adequate level of protection is in place, including requiring recipient third parties to maintain data security standards equivalent to those applied within the ch999 Platform.

By using the ch999 Platform and accepting this Privacy Policy, you consent to the transfer of your personal data to ch999's international service providers for the purposes described in this Policy.

8. Data Retention

ch999 retains personal data for the period necessary to fulfil the purpose for which it was collected, and for any additional period required by applicable law or regulation. The following general retention periods apply:

• Account and identity data: Retained for the duration of your active account and for a minimum of five years following account closure, to satisfy financial record-keeping and anti-money-laundering compliance obligations;
• Transaction records: Retained for a minimum of five years following the date of each transaction;
• Support and communications records: Retained for three years from the date of the last communication;
• Technical and usage logs: Retained for up to 12 months for security and performance analysis purposes, after which they are anonymised or deleted;
• Marketing consent records: Retained for the period during which your consent is active, plus a further 12 months to demonstrate compliance in the event of a complaint.

Once the applicable retention period expires, ch999 will securely delete or anonymise your personal data so that it can no longer be associated with you as an individual.

9. Your Privacy Rights

As a player on the ch999 platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact ch999 support via live chat or by emailing support at ch999.io. ch999 will acknowledge your request within 24 hours and provide a substantive response within 5 Bangladesh Standard Time business days.

• Right of access: You may request a copy of the personal data ch999 holds about you, along with information about how it is used and with whom it has been shared;
• Right of rectification: You may request correction of any personal data that is inaccurate, incomplete, or out of date;
• Right of erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to ch999's legal retention obligations;
• Right to restrict processing: You may request that ch999 restrict the processing of your personal data in certain circumstances — for example, while a rectification request is being assessed;
• Right to data portability: You may request a structured, machine-readable copy of personal data you have provided to ch999, for transfer to another service provider where technically feasible;
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal;
• Right to object: You may object to processing carried out on the basis of ch999's legitimate interests, including direct marketing, at any time.

10. Children and Minors

ch999 implements age verification controls at the point of registration and reserves the right to request documentary proof of age at any time. Parents or guardians who believe their minor child has registered on the ch999 Platform should contact the support team immediately at support at ch999.io so that the account can be reviewed and closed without delay.

11. Security Measures

ch999 implements a layered security architecture to protect personal data against unauthorised access, disclosure, alteration, or destruction. Key security measures in place include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the ch999 Platform;
• AES-256 encryption at rest for all stored personal and financial data;
• Role-based access controls ensuring that personal data is accessible only to ch999 staff with a legitimate operational need;
• Two-factor authentication options available for player accounts to provide an additional layer of login security;
• Regular security assessments including penetration testing and vulnerability scanning conducted by qualified security professionals;
• Fraud monitoring systems that continuously analyse account activity for indicators of unauthorised access or suspicious behaviour.

Despite these measures, no internet-based system can guarantee absolute security. ch999 encourages all players to use strong, unique passwords for their ch999 accounts and to enable two-factor authentication where available. If you suspect a security breach affecting your account, contact the ch999 support team immediately.

12. Amendments to This Policy

ch999 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, the "Last Updated" date at the top of this document will be revised and, where appropriate, ch999 will notify registered players via email or an in-platform notification. Your continued use of the ch999 Platform following publication of a revised Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you should cease using the Platform and request account closure.

ch999 recommends that players review this Privacy Policy periodically to remain informed about how their personal data is being protected and used.

13. Contact Us

If you have any questions about this Privacy Policy, wish to exercise a data subject right, or want to raise a concern about how ch999 handles your personal data, please contact the ch999 Data Protection team through any of the following channels:

• Live chat: Available 24/7 directly from within the ch999 Platform;
• Email (plain text — not a link): support at ch999.io

Support is available in English 24 hours a day, 7 days a week, including all Bangladesh public holidays, in Bangladesh Standard Time (BST, UTC+6). ch999 will acknowledge all privacy-related enquiries within 24 hours and aim to resolve them within 5 BST business days.

ch999 will never ask for your account password or full payment credentials through any support channel. Any communication requesting such information should be treated as fraudulent and reported to the ch999 security team immediately.