nd9999 Privacy Policy — How We Protect Your Data

The data controller responsible for personal data processed through nd9999.bet is the Operator of the nd9999 platform. As data controller, nd9999 determines the purposes and means by which your personal data is collected and processed in connection with your use of the platform.

For all privacy-related enquiries — including data subject access requests, correction requests, deletion requests, or general questions about this Privacy Policy — you may contact our support team directly:

• Email (plain text, not a link): [email protected] — use the subject line "Privacy Request" for faster routing.
• Support availability: 24/7, Bangladesh Standard Time (UTC+6), in English and Bengali.
• Response time: We acknowledge all privacy requests within 24 hours and aim to resolve them within 30 calendar days. Where a request is particularly complex, we will notify you of an extension within the initial 30-day window.

When submitting a privacy request, please include your nd9999 registered email address and, where applicable, your Account ID. This allows our team to locate your records promptly and respond accurately.

nd9999 collects only the personal data that is necessary to provide you with a safe, functional, and compliant online casino and sports betting service. The following table summarises the categories of personal data we collect, the source of that data, and the primary purpose for which it is collected.

nd9999 processes your personal data on one or more of the following legal grounds. We do not process personal data without a valid legal basis applicable to each processing activity.

3.1 Contractual Necessity

The majority of personal data processing by nd9999 is necessary to perform the contract between nd9999 and you as a registered Player — that is, to operate your Account, process your deposits and withdrawals, allow you to play games, and provide customer support. Without this processing, nd9999 would be unable to deliver its services to you.

3.2 Legal and Regulatory Obligations

Certain processing activities are required by law, including identity verification (KYC), age verification (18+ compliance), transaction record-keeping for anti-money-laundering (AML) purposes, and the retention of account records for defined statutory periods. nd9999 cannot waive or limit processing that is mandated by applicable legal or regulatory requirements.

3.3 Legitimate Interests

nd9999 processes some personal data on the basis of its legitimate business interests, such as fraud prevention, platform security monitoring, responsible gaming surveillance (to detect at-risk play patterns), and aggregate analytics for platform improvement. Where legitimate interests are relied upon, nd9999 has assessed that those interests are not overridden by your rights and freedoms, taking into account the reasonable expectations of players using an online casino platform.

3.4 Consent

Where nd9999 processes personal data on the basis of consent — for example, for sending optional promotional emails about bonuses, seasonal offers (Eid, Pohela Boishakh), or new game releases — that consent is obtained explicitly at the point of opt-in. You may withdraw your consent at any time by contacting support or updating your notification preferences in account settings. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

nd9999 uses the personal data described in Section 2 for the following specific purposes. We do not use your data for any purpose that is incompatible with the purposes listed here without first obtaining your consent or identifying a fresh legal basis.

• Account Management: Creating, maintaining, verifying, and — where requested — closing your nd9999 Account. This includes enforcing the one-account-per-player rule and preventing duplicate registrations.
• Payment Processing: Processing deposits from and withdrawals to your bKash, Nagad, Rocket, or Upay wallet, reconciling transaction records, and investigating payment disputes.
• Identity and Age Verification (KYC): Confirming that you are who you say you are and that you are at least 18 years of age before processing your first withdrawal. This is a legal requirement, not optional.
• Fraud and Security Monitoring: Detecting, investigating, and preventing fraudulent activity, account takeovers, multi-accounting, bonus abuse, money laundering, and other prohibited conduct as defined in the nd9999 Terms & Conditions.
• Responsible Gaming Monitoring: Analysing gameplay patterns to identify potential signs of problem gambling and, where appropriate, proactively contacting at-risk players to offer responsible gaming tools and support resources.
• Customer Support: Responding to your enquiries, resolving disputes, and maintaining records of communications for quality assurance and compliance purposes.
• Platform Improvement: Using aggregated and anonymised usage data to understand how players interact with nd9999, identify technical issues, and improve the platform's performance, game selection, and user experience.
• Marketing Communications (consent-based only): Sending you promotional emails about bonuses, seasonal offers, new game launches, or BPL/IPL cricket betting promotions — only where you have opted in and only until you opt out.
• Legal Compliance: Meeting nd9999's obligations under applicable anti-money-laundering legislation, data protection law, and any other relevant regulatory requirements.

nd9999 does not use personal data for automated decision-making that produces legal or similarly significant effects on players, except where specifically required by fraud prevention or AML compliance systems. Where automated decisions are applied, you have the right to request human review of that decision by contacting [email protected].

nd9999 uses cookies and similar tracking technologies to ensure the platform functions correctly, to keep your session active while you play, and to gather aggregate analytics about how the platform is used. The following table describes the categories of cookies in use on nd9999.

nd9999 does not deploy third-party advertising cookies, cross-site tracking pixels, social media tracking scripts, or retargeting technologies on the nd9999.bet domain. You will not be tracked across other websites as a result of visiting nd9999.

Most browsers allow you to control cookies through their settings. Blocking strictly necessary cookies will prevent nd9999 from functioning correctly. To manage your browser's cookie settings, refer to your browser's official help documentation. Clearing cookies will log you out of your nd9999 Account and may reset your saved preferences.

nd9999 shares personal data with the following categories of third parties in the circumstances described below:

6.1 Payment Service Providers

When you make a deposit or withdrawal, your relevant transaction data (wallet number, amount in BDT, transaction reference) is shared with bKash, Nagad, Rocket, or Upay as required to process that payment. These providers operate under their own privacy policies and security standards. nd9999 does not share your full KYC identity documents with payment providers — only the minimum transaction data needed to execute the payment.

6.2 Game Technology Providers

Games on nd9999 are powered by third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game, a session token and your Account ID are passed to the relevant provider to load and operate the game. Game providers do not receive your name, contact details, or financial data — only the technical identifiers needed to run the game session.

6.3 Identity Verification Services

nd9999 uses specialist KYC verification partners to process identity documents submitted during account verification. These partners are bound by strict confidentiality agreements and process identity data solely for the purpose of verifying the authenticity and age-compliance of the submitted documents.

6.4 Legal and Regulatory Disclosure

nd9999 may disclose personal data to law enforcement agencies, regulatory authorities, or courts where required to do so by applicable law, court order, or regulatory direction. nd9999 will, where legally permitted, notify the affected player before making such a disclosure.

6.5 Business Transfers

In the event of a merger, acquisition, or sale of all or part of the Operator's business, player personal data may be transferred to the acquiring entity as part of that transaction. nd9999 will notify affected players of any such transfer and the privacy practices of the acquiring entity before the transfer takes effect, where practicable.

In all cases of data sharing, nd9999 requires the recipient to maintain appropriate technical and organisational security measures consistent with the sensitivity of the data shared. nd9999 does not transfer personal data internationally to jurisdictions outside the Operator's operational territory without applying appropriate safeguards.

nd9999 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, to comply with applicable legal obligations, or to resolve disputes and enforce agreements. The following retention schedule applies to the principal data categories held by nd9999:

When personal data reaches the end of its applicable retention period, nd9999 will securely delete or irreversibly anonymise that data. Deletion is performed in a manner that makes recovery of the data technically infeasible. Where anonymisation is applied, the resulting data contains no information that could reasonably be used to identify you as an individual and is no longer subject to this Privacy Policy.

As an nd9999 player, you hold the following rights in relation to your personal data. To exercise any of these rights, contact our support team at [email protected] with the subject line "Privacy Request". We will respond within 30 calendar days.

The principal security controls nd9999 maintains to protect your personal data include:

• TLS/SSL Encryption in Transit: All data transmitted between your browser or app and nd9999's servers is encrypted using current TLS protocols. Certificate validity is monitored continuously.
• Encryption at Rest: Sensitive personal data stored in nd9999's databases — including identity documents and payment references — is encrypted using AES-256 or equivalent standards.
• Access Controls: Access to personal data within nd9999's organisation is restricted on a strict need-to-know basis. Staff with access to player data undergo background checks and receive data protection training.
• Multi-Factor Authentication (MFA): Administrative access to nd9999's backend systems requires multi-factor authentication. Players are strongly encouraged to enable two-step verification on their own accounts where available.
• Intrusion Detection and Monitoring: nd9999 operates 24/7 automated monitoring of platform infrastructure to detect unusual access patterns, brute-force attempts, and other indicators of compromise.
• Penetration Testing: nd9999's platform infrastructure undergoes regular security assessments by independent specialists to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the event of a confirmed personal data breach affecting player data, nd9999 will notify affected players promptly, describing the nature of the breach, the data involved, and the steps being taken to mitigate impact.

While nd9999 takes all reasonable steps to protect your data, you also play an important role in account security. Keep your nd9999 password unique and confidential, enable any available two-step verification, use trusted and secure devices when accessing nd9999, and notify our support team immediately if you suspect unauthorised access to your Account.

nd9999 reviews this Privacy Policy periodically and updates it whenever our data practices change, new services are introduced, or applicable legal requirements evolve. The effective date at the top of this page always reflects when the current version came into force.

When material changes are made — such as a new category of data being collected, a new purpose being added, or a change to how long data is retained — nd9999 will notify registered players by email at least 14 days before those changes take effect. For minor amendments, such as typographical corrections or clarifications that do not alter the substance of the policy, the updated version will be published on this page without advance notice.

Your continued use of nd9999 after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with a material change to this Privacy Policy, you may request Account closure by contacting [email protected] before the revised policy takes effect. Account closure requests submitted for this reason will be processed without penalty.

nd9999 recommends that all players review this Privacy Policy periodically. The most current version is always available at nd9999.bet/privacy-policy. Archived versions of previous Privacy Policies are available on request from our support team.

If you have questions about any aspect of this Privacy Policy — including how a specific piece of your personal data is used, who has access to it, or how long it will be kept — please do not hesitate to contact our support team at [email protected]. We are committed to providing clear, honest answers to all privacy-related enquiries from nd9999 players across Bangladesh, including players based in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar.