Privacy Policy — How 999jaya Handles Your Data

01 Who We Are

999jaya is an online gaming platform operated for players in Bangladesh. When this Privacy Policy refers to "999jaya", "we", "us", or "our", it means the operator of the 999jaya platform accessible at 999jaya.io.

As the operator of 999jaya, we act as the data controller for the personal information you provide when you register, deposit, play, or contact us. This means we are responsible for deciding how and why your data is used, and we are accountable for keeping it safe.

02 What Data We Collect

999jaya collects only the personal data that is necessary to provide you with a safe, functional, and compliant gaming experience. Below is a breakdown of the categories of data we may collect:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information unless it is directly relevant to a responsible gaming assessment and you have provided it voluntarily.

03 How We Collect Your Data

999jaya collects your personal data through the following channels:

• Direct registration: When you create a 999jaya account, you provide your name, mobile number, date of birth, and payment wallet details.
• Deposits and withdrawals: When you make a transaction on 999jaya, your payment provider shares transaction data with us to confirm the transfer.
• KYC verification: When you submit identity documents for account verification, we collect and store those documents securely.
• Platform usage: As you use 999jaya, we automatically collect technical data such as your IP address, device information, and session activity.
• Support interactions: When you contact 999jaya support via live chat or email, we record those communications to help resolve your issue and improve our service.
• Cookies: 999jaya uses cookies and similar technologies to maintain your session, remember your preferences, and analyse platform performance. See Section 8 for full details.

04 Why We Use Your Data

999jaya uses your personal data for specific, legitimate purposes. We do not use your data for anything beyond what is described in this Privacy Policy. Here is why we process each type of data:

• To operate your account: Your identity and contact data are used to create and manage your 999jaya account, verify your login, and communicate important account updates.
• To process payments: Your payment wallet details are used to process deposits and withdrawals securely and accurately.
• To verify your identity: 999jaya is required by its licensing obligations to verify the identity of all players before processing withdrawals. This is a legal requirement, not optional.
• To prevent fraud and money laundering: We monitor account activity and transaction patterns to detect and prevent fraudulent behaviour, account takeovers, and financial crime.
• To provide customer support: When you contact 999jaya, we use your account data and communication history to resolve your issue efficiently.
• To improve the platform: Aggregated and anonymised usage data helps us understand how players use 999jaya so we can improve the experience for everyone.
• To send you relevant communications: With your consent, we may send you information about promotions, new games, and platform updates. You can opt out at any time.
• To comply with legal obligations: 999jaya is required to retain certain records for regulatory and legal compliance purposes.

05 Legal Basis for Processing

999jaya processes your personal data on the following legal grounds:

• Contract performance: Processing your data is necessary to fulfil our obligations to you as a 999jaya account holder — including running your account, processing transactions, and providing games.
• Legal obligation: We are required by law to verify player identities, retain transaction records, and report suspicious activity. This processing is mandatory and cannot be opted out of.
• Legitimate interests: We process certain technical and usage data to protect the security of the 999jaya platform, prevent fraud, and improve our services. We have assessed that these interests do not override your privacy rights.
• Consent: Where we send you marketing communications or use non-essential cookies, we do so only with your explicit consent. You can withdraw this consent at any time.

06 Sharing Your Data

999jaya does not sell, rent, or trade your personal data. We share your data only in the following limited circumstances, and only with parties who are contractually obligated to protect it:

• Game providers: Third-party game developers whose games are available on 999jaya may receive limited technical data (such as your player ID and session token) to deliver the game to you. They do not receive your name, payment details, or contact information.
• Payment processors: bKash and Nagad receive the transaction data necessary to process your deposits and withdrawals. 999jaya does not store your full mobile wallet credentials.
• Identity verification services: When you submit KYC documents, they may be processed by a trusted third-party verification provider. This provider is bound by strict data protection obligations.
• Legal and regulatory authorities: 999jaya may be required to disclose your data to law enforcement, regulatory bodies, or courts if required by applicable law. We will notify you of such disclosures where legally permitted to do so.
• Fraud prevention services: We may share data with fraud detection partners to identify and prevent suspicious activity on the platform.

07 Payment Data and Financial Security

999jaya takes the security of your financial data extremely seriously. When you make a deposit or withdrawal via bKash or Nagad, the transaction is processed directly through the payment provider's secure infrastructure. 999jaya does not store your full mobile wallet PIN or password at any point.

Transaction records — including amounts, dates, and wallet references — are retained by 999jaya for a minimum of five years as required by our anti-money laundering (AML) obligations. These records are stored in encrypted form and are accessible only to authorised 999jaya staff.

If you notice any unauthorised transaction on your 999jaya account, contact our support team immediately at [email protected]. We will investigate and, where appropriate, escalate to the relevant payment provider.

08 Cookies and Tracking Technologies

999jaya uses cookies and similar technologies to make the platform work properly and to understand how players use it. Here is a breakdown of the types of cookies we use:

• Essential cookies: These are required for the 999jaya platform to function. They keep you logged in during your session and remember your basic preferences. You cannot opt out of essential cookies without affecting your ability to use the platform.
• Analytics cookies: These help us understand how players navigate 999jaya — which pages are visited most, where players drop off, and how long sessions last. This data is aggregated and anonymised. We use this to improve the platform.
• Preference cookies: These remember your settings, such as your preferred language or display options, so you do not have to set them every time you visit 999jaya.
• Marketing cookies: With your consent, we may use cookies to understand which promotions are most relevant to you. You can withdraw this consent at any time via your account settings.

You can manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of 999jaya.

09 Data Retention

999jaya retains your personal data for as long as your account is active and for a period after closure as required by our legal and regulatory obligations. The general retention periods we apply are:

• Account data: Retained for the duration of your account and for five years after account closure.
• Transaction records: Retained for a minimum of five years from the date of the transaction, in line with AML requirements.
• KYC documents: Retained for five years after account closure or the last transaction, whichever is later.
• Support communications: Retained for two years from the date of the interaction.
• Technical and usage data: Retained for up to 12 months in identifiable form, after which it is anonymised or deleted.

When your data is no longer required, 999jaya will securely delete or anonymise it. If you request deletion of your account, we will process your request within 30 days, subject to any legal retention obligations that require us to keep certain records.

10 Your Rights Over Your Data

As a 999jaya player, you have the following rights regarding your personal data. To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

11 Children's Privacy

999jaya is strictly an adult platform. We do not knowingly collect personal data from anyone under the age of 18. If you are under 18, you must not register on or use 999jaya under any circumstances.

If 999jaya becomes aware that a person under 18 has created an account or provided personal data, we will immediately close the account, delete the data, and refund any deposits made, in accordance with our underage gambling policy.

If you believe a minor has registered on 999jaya, please contact us immediately at [email protected] so we can take prompt action.

12 Security Measures

999jaya implements a range of technical and organisational security measures to protect your personal data from unauthorised access, loss, or misuse:

• All data in transit is protected by SSL/TLS encryption.
• Passwords are stored using one-way hashing — 999jaya staff cannot see your password.
• Access to personal data is restricted to authorised staff on a need-to-know basis.
• Our systems are monitored continuously for suspicious activity and potential security threats.
• Regular security assessments and penetration testing are conducted on the 999jaya platform.
• KYC documents are stored in encrypted, access-controlled storage systems.

While 999jaya takes every reasonable precaution to protect your data, no online platform can guarantee absolute security. If you suspect your account has been compromised, change your password immediately and contact our support team.

13 Updates to This Privacy Policy

999jaya may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform features. When we make changes, the updated policy will be published on this page with a revised "Last Updated" date at the top.

For significant changes that materially affect how we use your data, 999jaya will notify registered players via the contact details on their account. We encourage you to review this page periodically to stay informed about how 999jaya protects your privacy.

Continued use of 999jaya after any update to this Privacy Policy constitutes your acknowledgement of the revised version.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or how 999jaya handles your personal data, please get in touch with our support team. We are committed to responding to all privacy-related enquiries within 30 days.

Email: [email protected]

Live Chat: Available 24/7 via the chat icon inside your 999jaya account dashboard.