Privacy Policy at po999

1 Information We Collect

po999 collects personal information through two primary channels: information you provide directly when using the platform, and information gathered automatically as you interact with our services. The categories below describe what we collect and why.

Information You Provide Directly

When you register an account, make a deposit or withdrawal, contact support, or participate in a promotion, you may provide the following categories of personal data:

Information Collected Automatically

When you access po999 via a web browser or mobile device, we automatically receive certain technical data, including:

• Device and browser information: device type, operating system, browser version, screen resolution, and language settings.
• Network data: IP address and approximate geographic location derived from it (country/city level only).
• Usage data: pages visited, time spent on each page, game sessions initiated, bets placed, deposit and withdrawal events, and session timestamps (all in Bangladesh Standard Time, UTC+6).
• Cookie and tracking data: session identifiers, preference settings, and analytics signals — see Section 4 for full cookie details.

2 How We Use Your Information

po999 processes your personal data only where there is a lawful basis for doing so. The following table sets out our primary processing activities, the data categories involved, and the lawful basis for each.

Marketing Communications

po999 will only send you promotional emails, SMS messages, or in-platform notifications about bonuses, new games, or seasonal offers (such as Eid or Pohela Boishakh promotions) if you have explicitly opted in to receive such communications during registration or via your account settings. You may withdraw marketing consent at any time by contacting [email protected] or updating your notification preferences in your account dashboard. Withdrawal of marketing consent does not affect the lawfulness of any processing carried out prior to withdrawal.

Automated Decision-Making

po999 uses automated systems to screen transactions for fraud indicators and to enforce responsible gaming thresholds (such as deposit limit triggers). Where an automated decision has a significant effect on your account — for example, a temporary account freeze — you have the right to request human review of that decision by contacting our support team.

3 Sharing Your Information

po999 does not sell your personal data. We share your information only in the limited circumstances described below, and only to the extent necessary for each specific purpose.

Payment Processing Partners

To process your deposits and withdrawals in BDT, po999 shares the minimum necessary financial and identity data with the relevant payment service provider — for example, bKash, Nagad, Rocket, Upay, or the card networks Visa and Mastercard. These providers process your data solely to complete the transaction you have requested and are bound by their own data protection obligations.

Identity Verification and KYC Providers

po999 may use third-party identity verification services to authenticate the documents you submit during the KYC process. These providers are contractually prohibited from using your data for any purpose beyond the verification task. Verified document data is not stored by the third-party service after verification is complete.

Game Software Providers

Casino games on po999 are supplied by software providers including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming. These providers may receive a pseudonymous player identifier and wager data necessary to operate the game session. They do not receive your name, contact details, or financial data.

Legal and Regulatory Disclosure

po999 may disclose your personal data to law enforcement agencies, financial intelligence units, or other regulatory authorities where required by applicable law, a court order, or a legitimate legal investigation. In such cases, po999 will disclose only the data specifically required and will notify you of the disclosure where legally permitted to do so.

Business Transfers

In the event that po999 undergoes a corporate restructuring, merger, or acquisition, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and of any material change to this Privacy Policy that results from it, prior to the transfer taking effect.

4 Cookies and Tracking Technologies

po999 uses cookies and similar technologies to maintain your login session, remember your preferences, and understand how players use the platform so we can improve it. We do not use third-party advertising cookies or cross-site tracking pixels.

Types of Cookies We Use

Managing Your Cookie Preferences

Strictly necessary cookies cannot be disabled because the platform cannot function without them. Functional and analytics cookies may be disabled via your browser settings. Most modern browsers allow you to block or delete cookies through their privacy or settings menu. Disabling functional cookies may affect your experience — for example, your preferred payment method may not be remembered between sessions. Disabling analytics cookies has no effect on platform functionality.

po999 does not use cookies to build advertising profiles, track your browsing activity on other websites, or deliver targeted advertisements. If you have any concern about a specific cookie you have observed, contact [email protected] with the cookie name and we will respond within five business days.

5 Data Retention and Storage

po999 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal and financial record-keeping obligations. The following retention periods apply:

• Account and identity data: retained for the duration of your account and for five years after account closure, in line with anti-money laundering record-keeping requirements.
• Financial transaction records (deposits, withdrawals, wager history): retained for five years after the date of each transaction.
• KYC verification documents: retained for five years after the completion of the verification process or account closure, whichever is later.
• Support communications: retained for three years after the resolution of the relevant query or dispute.
• Marketing consent records: retained for the duration of your consent and for one year after you withdraw consent, to demonstrate compliance.
• Analytics data: retained in aggregated, anonymised form for up to 13 months, after which it cannot be linked to any individual.

Data Storage Location

po999 stores player data on secure servers. Where data is processed by third-party service providers (such as payment processors or KYC verification services), those providers are contractually required to maintain equivalent data security standards and to process data only in accordance with po999's instructions. po999 takes reasonable steps to ensure that any cross-border data transfer is protected by appropriate safeguards.

Data Deletion

Once a retention period expires, po999 securely deletes or irreversibly anonymises the relevant data. Anonymised data — which can no longer be used to identify you — may be retained indefinitely for statistical and service improvement purposes. If you request deletion of your data before a retention period has elapsed and no legal obligation requires continued retention, po999 will honour that request within 30 days and confirm the deletion in writing.

6 Your Privacy Rights

As a po999 player, you hold the following rights in relation to the personal data we process about you. These rights may be exercised at any time by contacting [email protected] with the subject line "Data Rights Request".

Right of Access

You may request a copy of all personal data that po999 holds about you, along with information about how it is being used, who it has been shared with, and how long it will be retained. po999 will provide this information within 30 days of receiving a valid request. The first copy is provided free of charge; additional copies may incur a reasonable administrative fee.

Right to Rectification

If any personal data po999 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (such as updating a phone number) can typically be made directly through your account settings. More significant changes (such as correcting your legal name) will require supporting documentation.

Right to Erasure

You may request that po999 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent and no other lawful basis applies, or where you object to processing based on legitimate interest and that interest does not override your rights. Note that erasure requests cannot be fulfilled where retention is required by law — for example, financial transaction records subject to anti-money laundering obligations must be retained for five years regardless of an erasure request.

Right to Restriction of Processing

You may request that po999 restrict processing of your data — meaning we store it but do not actively use it — while a dispute over accuracy or a legitimate interest objection is being resolved.

Right to Data Portability

Where processing is based on your consent or on contract performance, and is carried out by automated means, you may request that po999 provide your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON) so that you can transfer it to another service provider.

Right to Object

You may object to processing carried out on the basis of po999's legitimate interest, including profiling for fraud prevention purposes. po999 will cease that processing unless it can demonstrate compelling legitimate grounds that override your rights, or where the processing is necessary for the establishment, exercise, or defence of a legal claim.

7 Security Measures

po999 implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Key measures include:

• 256-bit SSL/TLS encryption applied to all data in transit between your device and po999 servers, covering login, account management, game sessions, and financial transactions.
• Encryption at rest for all sensitive data stored in our databases, including financial records and identity documents.
• Password hashing using industry-standard one-way hashing algorithms. po999 never stores your password in plain text and cannot retrieve it — only reset it.
• Access controls: po999 staff access to player data is governed by role-based permissions. Only personnel with a clear operational need may access personal data, and all access is logged and audited.
• Session management: account sessions expire automatically after a defined period of inactivity. Suspicious login activity (such as a new device or unusual geographic location) may trigger additional verification steps.
• Penetration testing and security audits conducted periodically to identify and remediate vulnerabilities in the platform infrastructure.

Data Breach Response

In the unlikely event of a personal data breach that poses a risk to affected players, po999 will notify impacted account holders without undue delay and within 72 hours of becoming aware of the breach, where feasible. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the steps po999 has taken or intends to take to address it.

Your Role in Account Security

While po999 takes all reasonable steps to secure the platform, account security is a shared responsibility. You should use a strong, unique password for your po999 account, never share your credentials with anyone, and contact support immediately if you suspect unauthorised access. po999 will never ask for your password via email, telephone, or live chat.

8 Updates to This Policy

po999 may update this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable law, or improvements to the platform. The effective date at the top of this page always reflects the date of the most recent revision.

Where a change is material — for example, a new category of data being collected, a new sharing arrangement with a third party, or a change to your rights — po999 will notify registered players via the email address associated with their account or via a prominent notice displayed upon login, at least 14 days before the change takes effect. Your continued use of po999 following the effective date of an updated Privacy Policy constitutes your acknowledgement of the revised terms.

If you have any questions about this Privacy Policy or about how po999 handles your personal data, please contact our support team at [email protected]. We aim to respond to all privacy-related enquiries within 5 business days (Bangladesh Standard Time, UTC+6).