ad999 Privacy Policy

ad999 operates an online casino and sports betting platform accessible at ad999.io, serving players primarily based in Bangladesh. This Privacy Policy sets out the full framework under which ad999 collects, processes, stores, and protects the personal data of individuals who interact with our Services in any capacity.

We take data privacy seriously. Every data processing activity carried out by ad999 is conducted with a defined lawful purpose, limited to what is strictly necessary, and governed by appropriate technical and organisational security measures. We do not sell personal data to third parties and we do not use personal data for purposes beyond those stated in this policy without first obtaining explicit consent where required.

This policy should be read alongside the ad999 Terms & Conditions and Responsible Gaming Policy, both of which are published on the platform and incorporate data processing activities relevant to their respective subject matter. In the event of any conflict between this Privacy Policy and a more specific data notice provided to you at the point of collection, the more specific notice shall take precedence in respect of that specific processing activity.

ad999 collects personal data across several categories depending on the nature of your interaction with the platform. The table below sets out the categories of data we collect and the context in which each category arises:

We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data beyond what is necessary for responsible gaming purposes, or biometric data. Where any sensitive data is inadvertently provided by a user in a support communication, it will be treated with the highest level of protection and will not be processed for any secondary purpose.

ad999 collects personal data through a combination of direct collection, automated technical means, and where applicable, from verified third-party sources. The primary collection channels are as follows:

Direct Collection

• When you complete the ad999 account registration form, providing your name, date of birth, email, and Bangladeshi mobile number.
• When you submit identity verification documents during the KYC process, including national ID cards and proof of payment method ownership.
• When you initiate a deposit or withdrawal transaction using bKash, Nagad, Rocket, Upay, SureCash, or a supported Bangladeshi bank transfer.
• When you contact the ad999 support team via live chat or email at [email protected].
• When you update your account profile, change your responsible gaming settings, or submit a self-exclusion request.

Automated Collection

• Technical data including your IP address, device identifiers, browser type, and operating system version is collected automatically when you access the ad999 platform.
• Usage data including pages visited, games launched, bet placement events, and session durations is captured automatically via server logs and analytics tools.
• Cookie data is collected via first-party and select third-party cookies placed on your device when you visit ad999.io. See Section 7 for a full cookie disclosure.

Third-Party Sources

• Identity verification data may be cross-referenced with legitimate third-party identity verification services to confirm the accuracy of KYC documentation submitted by users.
• Payment confirmation data is received from mobile financial service providers (bKash, Nagad, Rocket) and banking partners to confirm deposit and withdrawal transaction statuses.
• Fraud prevention and anti-money laundering screening data may be obtained from specialist compliance service providers where required by our obligations.

ad999 processes personal data only where a clear lawful purpose exists. The following table sets out the primary purposes for which we process data, the legal basis for each processing activity, and the categories of data involved:

ad999 does not sell, rent, or trade personal data to third parties for commercial purposes. We share personal data with third parties only where necessary to deliver the Services, comply with a legal obligation, or protect the legitimate interests of ad999 and its users. The categories of third party with whom data may be shared are set out below:

• Payment Service Providers: bKash, Nagad, Rocket (DBBL), Upay, SureCash, and supported Bangladeshi banks receive the minimum personal data necessary to process deposit and withdrawal transactions on your behalf. These providers are bound by their own data protection obligations.
• Identity Verification Services: Third-party KYC and document verification providers may receive identity data and document copies for the purpose of verifying account holder eligibility and age. All such providers are subject to contractual data processing agreements.
• Game Content Providers: Game studios including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised or pseudonymised session data necessary to deliver game content and calculate outcomes. These providers do not receive full identity data.
• Fraud Prevention & AML Services: Specialist compliance screening providers may receive identity and transaction data for the purpose of anti-money laundering checks and fraud pattern analysis.
• Analytics Providers: Aggregated, anonymised usage data may be shared with platform analytics tools to help ad999 understand how users interact with the platform and improve user experience. Individual users are not identifiable from such data.
• Legal & Regulatory Authorities: ad999 will disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory bodies where required to do so by applicable law, court order, or binding regulatory direction. We will notify affected users of such disclosures where legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of assets involving ad999, personal data held by the platform may be transferred to the acquiring entity as part of that transaction, subject to equivalent data protection commitments being maintained.

ad999 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or for as long as is required by applicable legal or regulatory obligations. The following general retention periods apply:

• Account Data (Identity & Contact): Retained for the lifetime of the account and for a minimum of 5 years following permanent account closure, in accordance with standard record-keeping obligations for financial services operators.
• Financial & Transaction Data: Retained for a minimum of 7 years from the date of each transaction to satisfy anti-money laundering record-keeping requirements.
• KYC Documentation: Retained for a minimum of 5 years from the date of verification completion or from account closure, whichever is later.
• Gaming & Betting History: Retained for a minimum of 3 years from the date each session or wager was placed, for dispute resolution and responsible gaming monitoring purposes.
• Support Communications: Live chat transcripts and email correspondence are retained for a minimum of 2 years from the date of each communication.
• Technical & Usage Data: Server logs and anonymised usage analytics are retained for a maximum of 13 months on a rolling basis.
• Marketing Consent Records: Consent records and opt-out logs are retained indefinitely as evidence of your marketing preferences history.

Where data is retained beyond the active account period solely to satisfy a legal obligation, it is archived in a restricted access environment and is not used for any active processing purpose. Upon expiry of the applicable retention period, data is securely deleted or anonymised in a manner that prevents reconstruction of individual identity.

ad999 uses cookies and similar tracking technologies to ensure the platform functions correctly, to maintain the security of your session, and to gather aggregated analytics that help us improve the user experience. The following categories of cookies are used on ad999.io:

• Strictly Necessary Cookies: These cookies are essential for the ad999 platform to operate. They maintain your login session, store your language and currency preferences, and enable secure payment flows. These cookies cannot be disabled without impairing core platform functionality.
• Functional Cookies: These cookies remember your preferences and personalisation settings — such as recently played games, preferred bet sizes, and responsible gaming tool configurations — so that your experience remains consistent across sessions.
• Analytics Cookies: Aggregated, anonymised analytics cookies help ad999 understand how the platform is navigated, which features are most used, and where user experience improvements are needed. Individual users are not identified through analytics data.
• Security Cookies: These cookies assist in detecting and preventing fraudulent activity, bot access, and account takeover attempts by establishing a baseline of normal device and session behaviour associated with each account.

ad999 does not use advertising or retargeting cookies that track your activity across third-party websites. Our cookie usage is limited to the categories described above and is strictly scoped to the ad999.io domain and its necessary service partners.

ad999 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, destruction, or loss. Our security framework includes the following controls:

• SSL/TLS Encryption: All data transmitted between your device and the ad999 platform is encrypted in transit using industry-standard TLS 1.2 or higher protocols. The padlock indicator in your browser confirms the presence of an active SSL certificate.
• Encryption at Rest: Sensitive personal data including identity documents, financial account details, and password hashes are stored in encrypted form using AES-256 or equivalent encryption standards.
• Access Controls: Internal access to personal data is restricted on a strict need-to-know basis. Staff with access to user data are subject to confidentiality obligations and receive regular training on data protection responsibilities.
• Two-Factor Authentication: Account holders are encouraged to enable SMS-based two-factor authentication via their registered Bangladeshi mobile number. Internal administrative systems require multi-factor authentication for all access.
• Intrusion Detection: The platform is monitored around the clock for unusual access patterns, login anomalies, and potential breach indicators. Automated alerts trigger immediate review protocols when suspicious activity is detected.
• Vulnerability Management: The ad999 platform undergoes regular security assessments and penetration testing by qualified security professionals. Identified vulnerabilities are remediated in accordance with a risk-based prioritisation process.

While ad999 takes every reasonable precaution to protect your personal data, no digital transmission or storage system can be guaranteed to be completely secure at all times. You are responsible for maintaining the security of your account credentials and for notifying us immediately at [email protected] if you suspect unauthorised access to your account.

As a user of the ad999 platform, you hold the following rights in respect of your personal data. Requests to exercise any of these rights should be submitted in English to [email protected] with the subject line "Privacy — [Right Type]". ad999 will respond to all valid requests within 30 days of receipt.

• Right of Access: You have the right to request a copy of the personal data that ad999 holds about you, together with information about how it is used, where it is stored, and with whom it has been shared. Access requests are provided free of charge for the first request in any 12-month period.
• Right to Rectification: You have the right to request that inaccurate or incomplete personal data held by ad999 be corrected or updated. Many data fields — such as your registered email address and mobile number — can be updated directly via your account settings without contacting support.
• Right to Erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been unlawfully processed. Note that this right is subject to overriding legal obligations — for example, transaction records subject to AML retention requirements cannot be erased before the applicable retention period expires.
• Right to Restrict Processing: You have the right to request that ad999 temporarily suspend the active processing of your personal data in certain circumstances, such as while the accuracy of data is being contested or while an objection is being considered.
• Right to Data Portability: You have the right to receive a copy of personal data you have provided to ad999 in a structured, commonly used, machine-readable format, and to request that it be transmitted directly to another service provider where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data where ad999 relies on legitimate interests as the legal basis. ad999 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, or where processing is necessary for the establishment, exercise, or defence of legal claims.
• Right to Withdraw Consent: Where processing is based solely on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

ad999 operates a strict minimum age requirement of 21 years. The platform is not directed at, marketed to, or intended for use by any person under the age of 21. ad999 does not knowingly collect personal data from any person under the age of 21.

If ad999 becomes aware that personal data has been collected from a person who is under the age of 21 — whether through registration, KYC review, or any other means — the account will be immediately suspended, all personal data associated with that account will be deleted in accordance with applicable legal requirements, and the matter will be referred to relevant child protection authorities where required by law.

If you are a parent or guardian and believe that a person under 21 in your care has registered an account or provided personal data to ad999, please contact us immediately at [email protected] with the subject line "Privacy — Minor Account Report". We will investigate and take appropriate action without undue delay.

ad999 primarily processes and stores personal data within data centre infrastructure serving the Bangladesh and South Asia region. However, certain third-party service providers engaged by ad999 — including game content studios, KYC verification services, and cloud infrastructure partners — may process data in jurisdictions outside Bangladesh.

Where personal data is transferred to a third country, ad999 ensures that appropriate safeguards are in place to protect the data to a standard equivalent to that applied within the platform's primary operating jurisdiction. Safeguards may include:

• Contractual data processing agreements incorporating standard data protection clauses that bind the receiving party to equivalent protection obligations.
• Use of third-party providers who maintain internationally recognised data security certifications such as ISO 27001.
• Transfer only of the minimum data necessary for the specific processing purpose, with recipient access strictly limited to that purpose.

By using the ad999 platform, you acknowledge that your personal data may be transferred to and processed in countries outside Bangladesh in the circumstances described above, subject to the safeguards outlined in this section.

The ad999 platform does not contain outbound links to third-party websites for general browsing purposes. However, certain integrated service elements — such as game launch interfaces provided by third-party studios — may involve interactions with systems operated by those third parties.

ad999 is not responsible for the privacy practices of any third-party game studios, payment processors, or other service providers whose systems you interact with as part of using the platform. Where such providers have their own published privacy policies, those policies govern the data processing activities of that provider in respect of any data collected directly by their systems.

We encourage you to review the privacy policies of any third-party service providers whose systems you interact with via the ad999 platform, including your chosen mobile financial service provider (bKash, Nagad, Rocket, Upay) and your banking partner. ad999's Privacy Policy applies exclusively to data processing carried out by ad999 itself.

ad999 reserves the right to update or amend this Privacy Policy at any time. Updates may be made to reflect changes in applicable law, changes in our data processing practices, the introduction of new platform features, or feedback received from users or regulatory bodies.

When a material change is made to this Privacy Policy, ad999 will notify registered account holders via the email address associated with their account and will display a prominent notice on the platform for a minimum of 30 days following the update. The effective date at the top of this document will be revised to reflect the date on which the updated policy takes effect.

Your continued use of the ad999 platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with the updated policy, you must cease using the platform and may request account closure by contacting [email protected]. Continued use of the platform after the effective date will be treated as acceptance of the revised terms.

We recommend that you review this Privacy Policy periodically to stay informed about how ad999 handles your personal data. Archived versions of previous Privacy Policy documents are available on request by contacting our support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way in which ad999 processes your personal data, please contact us using the details below. All privacy-related communications should be submitted in English to ensure the fastest possible response from our data protection team.

• Email: [email protected] — use the subject line "Privacy — [Your Request Type]" for fastest routing.
• Live Chat: Available 24/7 via the platform at ad999.io. Average response time under 3 minutes. Live chat is suitable for general privacy enquiries and initial contact; formal data rights requests should be submitted by email to create a documented record.
• Response Time: ad999 aims to acknowledge all privacy-related enquiries within 1 business day (Bangladesh Standard Time, UTC+6) and to provide a substantive response within 30 days of receipt of a complete and verified request.