999jaya Privacy Policy – Your Data, Protected

999jaya is an online gaming platform operating at https://999jaya.club, offering arcade games, slots, and video poker to players in Bangladesh. For the purposes of this Privacy Policy, 999jaya is the data controller — meaning we are responsible for deciding how and why your personal data is processed.

This Privacy Policy applies to all personal data collected through the 999jaya website, mobile browser version, and the 999jaya app. By registering an account or using any part of the 999jaya platform, you acknowledge that you have read and understood this policy.

999jaya collects personal data in two ways: information you provide directly when registering or using the platform, and information collected automatically when you browse or play.

Information you provide directly:

• Full name and date of birth (required for account registration and age verification).
• Mobile phone number linked to your bKash, Nagad, or Rocket account.
• Username and password (your password is stored in hashed form and is never visible to 999jaya staff).
• Identity documents submitted for verification purposes (e.g. National ID card).
• Communications you send to 999jaya support, including chat logs and emails.

Information collected automatically:

• IP address and approximate geographic location.
• Device type, operating system, and browser version.
• Pages visited on the 999jaya platform and time spent on each page.
• Game session data including bets placed, game outcomes, and session duration.
• Deposit and withdrawal transaction records.
• Cookie and session data (see Section 6 for details).

999jaya uses the personal data we collect for the following purposes:

• Account management: To create, maintain, and secure your 999jaya account, including verifying your identity and age.
• Payment processing: To process deposits and withdrawals via bKash, Nagad, and Rocket, and to maintain accurate financial records.
• Customer support: To respond to your queries, resolve disputes, and provide assistance when you contact the 999jaya support team.
• Fraud prevention and security: To detect and prevent fraudulent activity, money laundering, and unauthorised account access.
• Responsible gaming: To monitor gameplay patterns and identify players who may be showing signs of problem gambling, so we can offer appropriate support tools.
• Platform improvement: To analyse how players use 999jaya and to improve the performance, design, and game selection of the platform.
• Legal compliance: To meet our obligations under applicable laws and regulations, including record-keeping requirements.
• Marketing communications: To send you promotional offers and updates about 999jaya — but only if you have opted in to receive them. You can opt out at any time.

999jaya processes your personal data on the following legal grounds:

• Contract performance: Processing your registration data, payment information, and game session data is necessary to fulfil our contractual obligations to you as a 999jaya account holder.
• Legal obligation: Certain data processing activities — such as identity verification and financial record-keeping — are required by law.
• Legitimate interests: We process technical and usage data to protect the security of the 999jaya platform, prevent fraud, and improve our services. These interests do not override your privacy rights.
• Consent: Where we rely on your consent — for example, to send marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

999jaya does not sell your personal data. We may share your data with third parties only in the following limited circumstances:

• Payment providers: bKash, Nagad, and Rocket receive the transaction data necessary to process your deposits and withdrawals. These providers have their own privacy policies governing how they handle your data.
• Identity verification services: Where required, we may share identity documents with third-party KYC (Know Your Customer) verification providers to confirm your age and identity.
• Technology service providers: We use third-party providers for hosting, analytics, and customer support tools. These providers are contractually bound to process your data only on our instructions and to maintain appropriate security standards.
• Legal and regulatory authorities: We may disclose your data to law enforcement, regulatory bodies, or courts where we are legally required to do so, or where disclosure is necessary to protect the rights and safety of 999jaya or its players.

999jaya uses cookies and similar tracking technologies to operate the platform and improve your experience. A cookie is a small text file stored on your device when you visit a website.

We use the following types of cookies:

• Essential cookies: Required for the 999jaya platform to function. These include session cookies that keep you logged in during your visit. You cannot opt out of essential cookies without disabling the platform entirely.
• Analytics cookies: Help us understand how players use 999jaya — which pages are visited most, where players drop off, and how long sessions last. This data is aggregated and anonymised.
• Preference cookies: Remember your settings and preferences, such as your preferred language or display options.
• Security cookies: Used to detect and prevent fraudulent activity and unauthorised account access.

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the 999jaya platform. For more information on managing cookies, refer to your browser's help documentation.

999jaya retains your personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy, or as required by law. The following retention periods apply:

• Account data: Retained for the duration of your account and for a period of five years after account closure, to meet financial record-keeping obligations.
• Transaction records: Retained for a minimum of five years from the date of the transaction, in line with standard financial compliance requirements.
• Identity verification documents: Retained for the duration of your account and for five years after closure.
• Support communications: Retained for two years from the date of the last communication.
• Technical and usage data: Typically retained for 12 months, after which it is aggregated or deleted.

When your data is no longer required, 999jaya will securely delete or anonymise it. If you request account closure, we will process the deletion of your personal data in accordance with the above retention periods and applicable legal requirements.

As a 999jaya player, you have the following rights regarding your personal data. To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

999jaya implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, or disclosure:

• Encryption: All data transmitted between your device and the 999jaya platform is encrypted using TLS (Transport Layer Security). Stored data is encrypted at rest.
• Access controls: Access to personal data within 999jaya is restricted to staff who need it to perform their job functions. All staff with data access are subject to confidentiality obligations.
• Password hashing: Your 999jaya account password is stored as a one-way hash. Even 999jaya staff cannot see your password in plain text.
• Security monitoring: We monitor the 999jaya platform continuously for suspicious activity, unauthorised access attempts, and potential data breaches.
• Incident response: In the event of a data breach that affects your personal data, 999jaya will notify you promptly and take immediate steps to contain and remediate the incident.

While 999jaya takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You also play a role in keeping your account secure — use a strong, unique password and do not share your login credentials with anyone.

The 999jaya platform is strictly for users aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. If you are a parent or guardian and believe that a minor has registered an account at 999jaya, please contact us immediately at [email protected].

Upon receiving a verified report of an underage account, 999jaya will close the account, delete the associated personal data, and return any deposits to the original payment source. We take underage access seriously and act on all reports promptly.

999jaya may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform features. When we make changes, we will update the "Last Updated" date at the top of this page.

For significant changes that materially affect how we process your personal data, we will notify registered players via email or an in-platform notification before the changes take effect. Your continued use of 999jaya after a policy update constitutes acceptance of the revised Privacy Policy.

We recommend reviewing this page periodically. If you have any concerns about a change to this Privacy Policy, contact our support team before continuing to use the platform.

If you have any questions about this Privacy Policy, want to exercise your data rights, or have a concern about how 999jaya handles your personal information, please get in touch:

• Email: [email protected]
• Subject line for data requests: "Privacy Request"
• Support hours: 24 hours a day, 7 days a week
• Response time: We aim to respond to all privacy-related requests within 30 days.

For general questions about your account, payments, or games, you can also visit our FAQ page or review our Terms and Conditions.