Privacy Policy

Your Privacy at a Glance

The full policy is detailed in the sections below. Here is a brief summary of the six most important privacy commitments to999 makes to every player.

1. Introduction

to999 ("we", "us", "our") operates the online gaming platform available at to999.vip. We are committed to protecting and respecting the privacy of all individuals who use our platform. This Privacy Policy explains how to999 collects, uses, stores, shares and protects personal information in connection with your use of the to999 website and all related services. It also sets out the rights you hold in relation to your personal data and how you can exercise those rights.

By registering for or using to999, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with the terms of this policy, you should not use the to999 platform. This policy applies to all users of to999, including registered account holders and unregistered visitors to our website.

2. Information We Collect

to999 collects personal information in three primary ways: information you provide directly when using the platform, information we collect automatically as you use the service, and information we receive from third parties. The specific categories are set out below.

Information You Provide Directly

• Full name and date of birth provided at registration.
• Mobile phone number used as your primary account identifier and for two-factor authentication.
• Identity documents (national ID, passport or driving licence) submitted for KYC verification.
• Payment method details — specifically the mobile wallet number (bKash, Nagad, Rocket) or bank account number used for deposits and withdrawals.
• Communications you send to our customer support team, including the content of chat messages and email correspondence.

Information Collected Automatically

• Device and browser information, including device model, operating system version, browser type and screen resolution.
• IP address and approximate geographic location (country and city level only — to999 does not use precise GPS-level location data).
• Browsing behaviour on the to999 platform, including pages visited, games launched, betting patterns and session duration.
• Cookie and tracking technology data — see the Cookies section below for full details.

Information from Third Parties

• Identity verification data from KYC service providers used to confirm your age and identity in compliance with our responsible gaming obligations.
• Payment confirmation data from bKash, Nagad, Rocket, Upay and banking partners, limited to transaction reference numbers and status indicators — to999 does not receive or store full payment credentials from these providers.
• Fraud detection signals from security partners used to identify and prevent fraudulent account activity.

3. How We Use Your Information

to999 uses personal data only for the purposes described below. We do not use your personal data for any purpose that is incompatible with the reason it was originally collected.

• To create and manage your to999 account, verify your identity, and maintain your account in a secure state.
• To process deposits and withdrawals via bKash, Nagad, Rocket and other supported payment methods, and to maintain an accurate transaction history on your account.
• To provide customer support, respond to queries, resolve disputes and investigate complaints.
• To comply with our responsible gaming obligations — including age verification, self-exclusion management and monitoring for signs of problem gambling behaviour.
• To detect and prevent fraud, money laundering, bonus abuse and other prohibited activities on the platform.
• To send you service notifications, account security alerts, and — where you have opted in — promotional communications about relevant to999 offers and events.

4. Sharing Your Information

to999 does not sell, rent or trade your personal data to third parties for their own marketing purposes. We share your data only in the limited circumstances described below, and only to the minimum extent necessary for each purpose.

Service Providers

to999 engages a limited number of trusted third-party service providers to help operate the platform — including payment processors (bKash, Nagad, Rocket and banking partners), identity verification providers, fraud detection systems, and cloud hosting infrastructure. These providers are permitted to process your data only for the specific purpose for which they were engaged and are contractually required to maintain the confidentiality and security of your data.

Legal and Regulatory Obligations

to999 may disclose your personal data to law enforcement agencies, regulatory bodies or other public authorities where we are required to do so by applicable law, court order or regulatory directive. We will notify you of any such disclosure where we are legally permitted to do so.

Business Transfers

In the event that to999 undergoes a merger, acquisition or sale of all or a portion of its assets, your personal data may be transferred as part of that transaction. You will be notified via a notice posted on this page before your personal data becomes subject to a materially different privacy policy as a result of such a transfer.

5. Cookies and Tracking Technologies

to999 uses cookies and similar tracking technologies to operate the platform, remember your session, and understand how players use the service so we can improve it. A cookie is a small text file placed on your device by the to999 website when you visit. Cookies do not contain your password or payment information. The types of cookies to999 uses are: (a) Essential cookies — required for the platform to function, including session authentication and security tokens. These cannot be disabled without impairing the platform's operation. (b) Analytics cookies — used to measure aggregate usage patterns, such as which game categories are most visited and how long sessions last on average. These help us allocate development resources to areas that matter most to players.

to999 does not use advertising cookies, retargeting pixels or third-party behavioural tracking technologies that follow you across other websites. Our analytics data is aggregated and anonymised wherever possible. You can manage or delete cookies through your mobile browser settings. Note that disabling essential cookies will prevent you from logging in to your to999 account.

6. Data Security

to999 takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, loss, alteration or disclosure. These measures include: SSL/TLS encryption on all data transmitted between your device and the to999 servers; encryption of sensitive data fields (including identity document data and payment references) at rest in our databases; strict access controls ensuring that only authorised to999 personnel with a legitimate operational need can access personal data; regular security audits and penetration testing of the platform infrastructure; and two-factor authentication available on all player accounts.

While to999 takes every reasonable precaution to safeguard your data, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, to999 will notify affected users promptly and take all necessary steps to contain and remediate the breach. If you believe your to999 account has been compromised, contact our support team immediately at [email protected].

7. Your Privacy Rights

As a to999 account holder, you hold the following rights in relation to your personal data. To exercise any of these rights, contact our support team at [email protected] with the subject line "Privacy Request". We will respond within a reasonable timeframe.

8. Data Retention

to999 retains your personal data for as long as your account remains active and for a reasonable period thereafter to allow for the resolution of any disputes, the investigation of complaints, or compliance with legal obligations. Account registration data and transaction history are retained for a minimum of five years following account closure in order to satisfy anti-money-laundering record-keeping requirements. KYC identity documents are retained for the same period. Marketing preference data is deleted within 30 days of a marketing opt-out request being confirmed. Where personal data is no longer required for any lawful purpose, to999 securely deletes or anonymises it.

9. Children and Minors

to999 is strictly an adults-only platform for players aged 21 and above. to999 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a minor, we will take immediate steps to delete that data and close any associated account. If you are a parent or guardian and believe that your child has submitted personal information to to999, please contact us immediately at [email protected] so that we can take appropriate action.

10. Changes to This Privacy Policy

to999 reserves the right to update this Privacy Policy at any time. When we make material changes, we will update the "Last updated" date at the top of this page. Where the changes are significant, we may also notify registered players via their account contact details. Your continued use of the to999 platform following the posting of any updated Privacy Policy constitutes your acceptance of those changes. We encourage you to review this page periodically to stay informed about how to999 protects your personal data.