f9999 Privacy Policy — How We Protect Your Personal Data

f9999 ("we", "us", "our", or "the Platform") is committed to safeguarding the privacy and personal data of every individual who accesses or uses our online casino and sports betting services. This Privacy Policy sets out the basis on which we collect, use, store, disclose and otherwise process personal data in connection with the f9999 Platform, accessible at f9999.im.

This Policy applies to all registered players, prospective players, website visitors and any other individuals whose personal data is processed by f9999 in the course of operating the Platform. It covers personal data collected through the f9999 website, mobile-optimised site, customer support channels (email, WhatsApp, live chat) and any other touchpoints through which f9999 interacts with users.

f9999 is designed and operated specifically for the Bangladesh market. All data processing activities described in this Policy are conducted with Bangladeshi players in mind, using payment infrastructure including bKash, Nagad and Rocket, and operating under Bangladesh Standard Time (BST, UTC+6). We recognise the importance of maintaining the trust of the communities we serve across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh and beyond.

If you do not agree with any part of this Privacy Policy, you should discontinue use of the Platform. Questions about this Policy should be directed to our support team using the contact details in Section 14.

For the purposes of this Privacy Policy, f9999 acts as the data controller in respect of personal data collected from users of the Platform. As data controller, f9999 determines the purposes for which personal data is processed and the means by which such processing is carried out.

All queries, subject access requests, data deletion requests or complaints relating to data protection should be directed to the f9999 Data Protection contact point:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: "Privacy / Data Protection Request"
• Response Time: Acknowledgement within 24 hours; full response within 10 business days

Where f9999 engages third-party service providers who process personal data on our behalf (for example, payment processors, game studios, identity verification providers), those providers act as data processors and are contractually bound to process data only in accordance with f9999's instructions and to maintain appropriate security standards.

f9999 collects only the personal data that is necessary for the purposes described in Section 5 of this Policy. The categories of personal data we collect include:

3.1 Registration and Identity Data

When you create an f9999 account, we collect: your full legal name, date of birth, nationality, Bangladeshi mobile phone number, email address (if provided), chosen username, and a hashed version of your password. We do not store your password in plain text.

3.2 Identity Verification (KYC) Data

To verify your identity and confirm you meet the 21+ age requirement, we may collect copies of government-issued identification documents such as your National Identity Card (NID), passport, or driver's licence, as well as proof of address documents. These documents are processed securely and retained only for as long as required under applicable law or our own compliance obligations.

3.3 Financial and Transaction Data

We collect details of all deposits and withdrawals you make, including the payment method used (bKash, Nagad, Rocket, Dutch-Bangla Bank, BRAC Bank, City Bank), transaction reference numbers, amounts in Bangladeshi Taka (BDT), timestamps, and transaction status. We do not store your mobile banking PIN, full bank account credentials, or card numbers. Financial transaction data is retained for audit and anti-money laundering (AML) compliance purposes.

3.4 Gaming Activity Data

We maintain records of your gaming and betting activity on the Platform, including: games played, bets placed, bet outcomes, stakes, winnings, bonus usage, session durations, and responsible gaming tool activations (such as deposit limits or cooling-off periods).

3.5 Technical and Device Data

When you access f9999, we automatically collect technical data including: IP address, device type and model, operating system, browser type and version, screen resolution, time zone, referring URL, pages visited, session duration, and interaction patterns. This data helps us maintain Platform security and improve user experience.

3.6 Communications Data

We retain records of communications between you and the f9999 support team, including emails, WhatsApp messages, and live chat transcripts. This data is used for quality assurance, dispute resolution and compliance.

3.7 Marketing Preferences

If you opt in to marketing communications, we record your preferences, the channels you have consented to (SMS, email, WhatsApp), and any subsequent opt-out actions. We will never send unsolicited commercial communications without a valid consent record.

f9999 collects personal data through the following channels and mechanisms:

We may also receive personal data about you from third parties in limited circumstances, such as from our payment processing partners who confirm transaction status, or from identity verification providers who return verification results. In all such cases, data sharing with those third parties is governed by contractual data processing agreements.

f9999 processes personal data only where there is a lawful basis to do so. The purposes for which we process your personal data, along with the corresponding lawful basis, are set out below:

Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. To withdraw consent for marketing communications, contact us at [email protected] or update your preferences in your account settings.

6.1 Payment Service Providers

To process your deposits and withdrawals, f9999 shares necessary transaction data with payment service providers including bKash, Nagad, Rocket, Dutch-Bangla Bank, BRAC Bank and City Bank. These providers receive only the minimum data required to complete the transaction and are bound by their own data protection and financial compliance obligations.

6.2 Game Studio Providers

f9999 integrates games from third-party studios including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Ezugi and Spribe. When you play a game supplied by these studios, a session token and anonymised player identifier may be shared with the studio's platform to initialise and operate the game session. Full personal data (name, mobile number, document details) is not shared with game studios.

6.3 Identity Verification Providers

Where f9999 uses third-party identity verification services to conduct KYC checks, your identity documents and biographic data may be transmitted to and processed by those providers in a secure, encrypted format. Results are returned to f9999 as a pass/fail outcome; document images are not retained by f9999 beyond the minimum legally required retention period.

6.4 Fraud Prevention and Security

f9999 may share limited account and technical data with fraud prevention networks, device fingerprinting services, and IP intelligence providers to detect and prevent account fraud, payment fraud, multi-accounting, and other prohibited conduct. Such sharing is carried out on the basis of f9999's legitimate interest in maintaining Platform integrity.

6.5 Legal and Regulatory Disclosure

f9999 may disclose personal data to competent authorities, law enforcement agencies, or courts where required to do so by applicable law, court order, or regulatory directive. In such cases, f9999 will disclose only the minimum data necessary to satisfy the legal requirement and will notify the affected player where permitted by law.

6.6 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of assets involving f9999, personal data held by f9999 may be transferred to the acquiring entity as part of that transaction. Affected players will be notified before their data becomes subject to a different privacy policy.

f9999 retains personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, including compliance with legal, financial, and audit obligations. The following general retention periods apply:

After the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual. Anonymised data may be retained indefinitely for statistical and analytical purposes.

f9999 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, alteration, disclosure, loss or destruction. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and f9999 servers is encrypted using industry-standard TLS protocols, ensuring that your personal and financial data cannot be intercepted in transit.
• Password Hashing: Account passwords are hashed using a strong cryptographic algorithm (bcrypt or equivalent) before storage. f9999 never stores passwords in plain text and cannot retrieve your password — only reset it.
• Access Controls: Access to personal data within f9999's systems is restricted on a strict need-to-know basis. Staff members are granted access only to the data categories required for their specific role. All administrative access is logged and audited.
• Two-Factor Authentication (2FA): f9999 recommends and supports two-step verification for player accounts. Internal administrative systems require 2FA for all staff with access to player data.
• Intrusion Detection and Monitoring: f9999's infrastructure is monitored 24/7 for unusual access patterns, brute-force attempts, DDoS attacks and other security threats. Automated alerts and manual review processes are in place.
• Data Minimisation: f9999 collects only the personal data strictly necessary for the declared purposes. Payment credentials such as mobile banking PINs and full bank account numbers are never collected or stored.
• Secure Data Centres: Player data is stored on secure, access-controlled servers. Physical access to data centre facilities is restricted to authorised personnel only.
• Vendor Security Reviews: Third-party service providers who process personal data on behalf of f9999 are assessed for their security posture before onboarding and are contractually required to maintain equivalent security standards.

Despite these measures, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. If you have reason to believe that your f9999 account has been compromised, contact us immediately at [email protected]. f9999 will never contact you to request your password or mobile banking credentials.

f9999 uses cookies and similar tracking technologies (including local storage, session storage and browser fingerprinting) to operate the Platform, recognise returning users, maintain session integrity, and analyse how the Platform is used. The following categories of cookies are used:

You can manage your browser's cookie preferences through your browser settings. Disabling strictly necessary or security cookies may prevent you from logging in or using core features of the Platform. f9999 does not use third-party advertising cookies or behavioural advertising networks that track you across external websites.

f9999 respects your rights over your personal data. Depending on the nature of your request and applicable law, you may be entitled to exercise the following rights:

• Right of Access: You have the right to request a copy of the personal data f9999 holds about you. We will provide this within 10 business days of receiving a verified request, free of charge for the first request in any 12-month period.
• Right to Rectification: If the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (such as updating your phone number) can be made directly in your account settings.
• Right to Erasure ("Right to Be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and there is no other lawful basis for processing. Note that certain data categories (such as financial transaction records and KYC documents) must be retained for specified periods to satisfy legal and audit obligations, even after account closure.
• Right to Restriction of Processing: In certain circumstances, you may request that f9999 restrict the processing of your personal data — for example, while a dispute about accuracy is being resolved.
• Right to Data Portability: Where processing is based on your consent or a contract, and is carried out by automated means, you may request a machine-readable copy of the personal data you have provided to f9999.
• Right to Object: You have the right to object to processing based on legitimate interests, including profiling. You also have an absolute right to opt out of direct marketing communications at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of any processing that occurred before the withdrawal.

To exercise any of the above rights, submit a request to [email protected] with the subject line "Privacy / Data Protection Request" and include your registered username and a brief description of your request. We may need to verify your identity before processing the request.

f9999 strictly prohibits individuals under the age of 21 from registering or using the Platform in any capacity. This is both a legal compliance requirement and a responsible gaming commitment. f9999 does not knowingly collect personal data from anyone under 21 years of age.

Age verification is conducted at the point of registration and may be repeated at the withdrawal stage or whenever suspicious account activity is detected. Acceptable forms of age verification include a valid National Identity Card (NID), passport, or other government-issued document confirming date of birth.

If f9999 becomes aware that personal data has been collected from a person under the age of 21, that account will be immediately suspended, all associated balances will be voided, and the data will be securely deleted except where retention is required by law for anti-fraud or AML compliance purposes. If you are a parent or guardian and believe your child has registered on f9999, please contact us immediately at [email protected].

f9999 operates as a platform serving the Bangladesh market. However, some of our third-party service providers — including game studios, fraud prevention vendors, and infrastructure providers — may be located in or operate servers in countries outside Bangladesh. Where personal data is transferred to a country that does not provide an equivalent level of data protection, f9999 puts in place appropriate safeguards, such as:

• Contractual clauses requiring the recipient to process data to at least the standard described in this Privacy Policy.
• Technical controls including encryption in transit and at rest.
• Data minimisation, ensuring that only the minimum necessary data is transferred and that full player profiles are not exposed to overseas processors.

By using f9999 and consenting to this Privacy Policy, you acknowledge that your data may be processed in this manner. If you have concerns about a specific international transfer, contact us at [email protected] for more information about the safeguards in place.

f9999 may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or the services we offer. The "Last Updated" date at the top of this Policy will always reflect the date of the most recent revision.

Where changes are material — for example, where we introduce a new category of data collection, change our sharing practices, or alter the legal basis on which we process your data — we will notify registered players via email or SMS with at least 14 days' advance notice before the updated Policy takes effect. For minor, non-material corrections (such as typographical fixes or clarifications that do not alter the substance of any provision), the Policy may be updated immediately without individual notification.

Your continued use of f9999 after the effective date of any update to this Policy constitutes your acceptance of the revised terms. If you do not accept the revised Privacy Policy, please stop using the Platform and contact our support team to arrange account closure.

If you have any questions, concerns or requests relating to this Privacy Policy or the way f9999 handles your personal data, please get in touch with us through one of the following channels. All privacy-related communications should be in English and should include your registered f9999 username for faster identification and processing.

• Email: [email protected] — Subject: "Privacy / Data Protection Request"
• WhatsApp: +880 1800 999000 (available 24/7)
• Live Chat: Available directly on the f9999 Platform, 24 hours a day, 7 days a week
• Response Time: Acknowledgement within 24 hours; full written response within 10 business days

We take every privacy inquiry seriously. Whether you want to understand what data we hold, exercise a data subject right, report a suspected data breach, or simply ask a question about our practices, our team is ready to assist. f9999 is committed to resolving privacy concerns promptly, transparently and in good faith.