ng999 Privacy Policy

1 Data We Collect

When you use the ng999 platform, we collect personal data across several categories depending on the nature of your interaction with our services. We collect only the minimum data necessary to operate, secure, and improve ng999. The following table summarises the categories of personal data we collect and the typical source of each category:

ng999 does not knowingly collect special-category sensitive data (such as racial or ethnic origin, political opinions, or health data) except where a player voluntarily discloses such information in the context of a responsible gaming or self-exclusion request, in which case the data is treated with the highest level of protection and used solely to give effect to the player's request.

ng999 does not knowingly collect personal data from individuals under the age of 18. If we discover that a player is under 18, the account will be closed immediately, the data deleted in accordance with our retention schedule, and any deposited funds returned after identity verification.

2 How We Use Your Data

ng999 uses your personal data only for specific, documented purposes. We do not use your data for purposes that are incompatible with the reason it was originally collected. The following describes our primary uses of each data category:

• Account Creation and Management: Identity and contact data are used to create and maintain your ng999 account, verify your identity, enforce the one-account-per-person policy, and communicate essential account updates to you.
• Age Verification and KYC Compliance: Verification data is used to confirm that you meet the 18+ age requirement and to fulfil our anti-money-laundering (AML) and Know Your Customer (KYC) obligations. ng999 is committed to ensuring that only eligible adults participate on the platform.
• Payment Processing: Financial data is used to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard. ng999 does not store full card numbers or mobile banking PINs. Payment credentials are handled via tokenised and encrypted channels.
• Fraud Prevention and Security: Technical and usage data are analysed to detect and prevent fraudulent activity, unauthorised account access, bot usage, collusion, and other security threats. ng999's security team reviews anomalous patterns to protect players and the platform.
• Platform Improvement and Personalisation: Usage data enables ng999 to understand which games and features are most popular among Bangladesh players, to improve navigation and performance, and to personalise your experience — for example, by surfacing games in categories you have engaged with before.
• Customer Support: Communication data is used to investigate and resolve support queries, complaints, and disputes efficiently. Support interactions may be reviewed for quality assurance and staff training purposes.
• Marketing and Promotions: Contact data is used to send you ng999 promotional emails and notifications about bonuses, seasonal campaigns (such as Eid specials, Pohela Boishakh offers, and BPL cricket promotions), and new game launches — but only where you have given explicit consent. You can withdraw marketing consent at any time.
• Responsible Gaming: Responsible gaming data is used to enforce self-exclusion orders, deposit limits, cooling-off periods, and reality check settings that you configure in your account. This data is treated as a player-protection priority and cannot be overridden by marketing preferences.
• Legal and Regulatory Compliance: All data categories may be used to comply with applicable legal obligations, respond to lawful requests from law enforcement or regulatory authorities, and to establish, exercise, or defend legal claims arising from your use of ng999.

3 Legal Basis for Processing

ng999 processes your personal data on one or more of the following legal bases, depending on the specific processing activity involved:

• Contractual Necessity: Processing that is necessary to perform our contract with you as an ng999 player — including account creation, game delivery, payment processing, and customer support. Without this processing, ng999 cannot provide its services to you.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including AML obligations, KYC requirements, record-keeping mandates, and responding to lawful requests from competent authorities.
• Legitimate Interests: Processing carried out for ng999's legitimate business interests, including fraud prevention, platform security, analytics, and business development — where those interests are not overridden by your fundamental rights and freedoms. You have the right to object to processing based on legitimate interests.
• Consent: Processing for purposes that require your explicit prior agreement, including sending marketing communications and setting non-essential cookies. Where consent is the legal basis, you can withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.
• Vital Interests: In exceptional circumstances, ng999 may process data to protect the vital interests of you or another person — for example, where a player's responsible gaming communication suggests a risk of serious self-harm.

Where ng999 relies on consent as the legal basis for processing, we will always make the consent request clear, specific, and separate from other terms and conditions. We will never bundle consent with acceptance of these Terms or the Terms & Conditions unless the processing is genuinely necessary for the contract.

4 Data Sharing & Disclosure

ng999 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share your data only in the following limited and controlled circumstances:

• Game Providers: When you launch a game from Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, or any other ng999 partner studio, limited technical data (such as a session token and player ID) is passed to the game provider to initialise the game session. No full identity data is shared with game providers beyond what is technically necessary.
• Payment Processors: Financial transaction data is shared with our payment processing partners (bKash, Nagad, Rocket, Upay, and card processing gateways) to the extent necessary to execute your deposit or withdrawal. These partners are bound by their own regulatory obligations and data protection commitments.
• KYC and Identity Verification Partners: Identity and verification data may be passed to third-party KYC verification service providers engaged by ng999 to assist in document authentication and identity checks. These providers act as data processors under contract with ng999 and may not use your data for their own purposes.
• Analytics Providers: Anonymised or pseudonymised usage and technical data may be processed by analytics platform providers to help ng999 understand platform performance and player behaviour at an aggregate level. These providers do not receive data that directly identifies you.
• Legal Authorities: ng999 will disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required to do so by law, court order, or in connection with the investigation of illegal activity including money laundering, fraud, or match-fixing.
• Sports Integrity Bodies: Where ng999 detects or is notified of suspicious betting patterns that may indicate match-fixing or sports corruption, relevant betting data may be shared with recognised sports integrity organisations in accordance with applicable regulations.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of ng999's business assets, your personal data may be transferred to the acquiring entity as part of the transaction, subject to the same privacy protections outlined in this policy. You will be notified of any such transfer.

5 Cookies & Tracking Technologies

ng999 uses cookies and similar technologies (including local storage, session storage, and pixel tags) to operate and improve the platform. The following categories of cookies are used on the ng999 website:

• Strictly Necessary Cookies: These cookies are essential for the ng999 platform to function. They enable core operations such as maintaining your logged-in session, remembering items in your game history, and processing transactions. Without these cookies, the services you have specifically requested cannot be provided. These cookies do not require your consent and cannot be switched off via cookie preferences, although you may configure your browser to block them — which will impair the platform's functionality.
• Performance and Analytics Cookies: These cookies collect anonymised information about how visitors use the ng999 website — which pages are visited most often, how long sessions last, and which features are used. This information is used to improve the ng999 platform. These cookies are set only with your consent.
• Functional Cookies: These cookies allow the ng999 platform to remember choices you make — such as your preferred language, your last-viewed game category, and your display settings — to provide a more personalised experience. These cookies are set only with your consent.
• Security Cookies: ng999 sets cookies that contribute to authentication and fraud detection — for example, to remember trusted devices, to detect session hijacking attempts, and to support CSRF protection on forms. These are strictly necessary and cannot be disabled without compromising account security.

ng999 does not use third-party advertising or retargeting cookies. We do not participate in ad exchanges or cross-site tracking networks. Our analytics data is used exclusively for internal platform improvement and is not shared with advertising technology companies.

You can manage cookie preferences at any time through your browser's built-in cookie management settings. Most modern browsers allow you to view, block, or delete cookies on a per-domain basis. Note that blocking strictly necessary cookies will affect your ability to use the ng999 platform normally.

6 Data Retention

ng999 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general framework:

• Active Account Data: Identity, contact, financial, and usage data associated with your active ng999 account is retained for the full duration that your account remains open.
• Post-Closure Retention: Following voluntary or involuntary closure of your ng999 account, core identity and financial transaction data is retained for a minimum of five (5) years to satisfy AML record-keeping obligations and to defend against legal claims that may arise within the statutory limitation period.
• KYC Documents: Identity verification documents submitted during the KYC process are retained for the duration of your account plus five (5) years post-closure. Copies of documents are stored in encrypted form with access restricted to authorised compliance personnel only.
• Communication Data: Customer support transcripts and email correspondence are retained for three (3) years from the date of the interaction, unless the communication forms part of a formal dispute or legal claim in progress, in which case it is retained until the matter is fully resolved.
• Marketing Data: Marketing preferences and opt-in records are retained for the duration of your account. If you opt out of all marketing communications, your opt-out record is retained indefinitely to ensure that no further marketing is sent to you inadvertently.
• Analytics and Technical Data: Anonymised or pseudonymised analytics data may be retained for longer periods for the purpose of long-term platform analysis, as it no longer directly identifies you after anonymisation.
• Self-Exclusion Records: Records of self-exclusion requests and responsible gaming restrictions are retained for the full duration of the restriction plus five (5) years, to prevent re-registration during an active exclusion period and to support any future responsible gaming enquiries.

At the end of the applicable retention period, ng999 will securely delete or anonymise your personal data in accordance with our internal data disposal procedures. If you wish to request early deletion of your data (subject to legal retention obligations that may prevent full deletion), please contact [email protected].

7 Your Data Rights

ng999 respects your rights in relation to your personal data. Subject to applicable law and our legal obligations, you have the following rights with respect to your ng999 data:

• Right of Access: You have the right to request a copy of all personal data that ng999 holds about you. We will provide this information in a structured, commonly used format within a reasonable timeframe of receiving your verified request.
• Right to Rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You can update basic account information (such as your email address or phone number) directly from your ng999 account settings panel.
• Right to Erasure ("Right to be Forgotten"): You may request that ng999 delete your personal data where it is no longer necessary for the purpose it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been unlawfully processed. Please note that ng999 may be unable to delete data that we are legally obliged to retain — for example, financial transaction records and KYC documents subject to AML retention requirements. In such cases, we will explain clearly which data cannot be deleted and why.
• Right to Restrict Processing: You may request that ng999 restrict the processing of your personal data in certain circumstances — for example, while a dispute about its accuracy is being resolved, or where you have objected to processing and we are considering your objection.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you have the right to receive a copy of your personal data in a portable, machine-readable format, and to request that ng999 transmit it directly to another service provider where technically feasible.
• Right to Object: You have the right to object to ng999's processing of your personal data where that processing is based on legitimate interests. ng999 will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications, non-essential cookies), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.

To exercise any of the above rights, please submit a written request to [email protected] from the email address registered to your ng999 account. We may need to verify your identity before processing your request. ng999 aims to acknowledge all data rights requests within 48 hours and to provide a substantive response within 30 days. Where a request is complex or involves a large volume of data, we may extend this period by up to a further 30 days, and we will notify you of any extension in advance.

8 Data Security Measures

ng999 employs a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security framework includes the following measures:

• TLS/SSL Encryption in Transit: All data transmitted between your browser or mobile device and the ng999 platform is encrypted using industry-standard Transport Layer Security (TLS). This prevents interception or eavesdropping of your data in transit over public or shared networks.
• Encryption at Rest: Sensitive data stored in ng999's databases — including identity verification documents, financial records, and account credentials — is encrypted at rest using strong cryptographic algorithms. Encryption keys are managed through a dedicated key management system with strict access controls.
• Access Control and Least Privilege: Access to personal data within ng999 is governed by a role-based access control policy. Staff members can access only the data necessary for their specific job function. Access privileges are reviewed regularly and revoked promptly when no longer required.
• Secure Password Storage: ng999 account passwords are never stored in plaintext. They are hashed using a strong, slow cryptographic hashing algorithm with per-user salting, ensuring that even in the event of an infrastructure compromise, passwords cannot be recovered in plaintext.
• Intrusion Detection and Monitoring: ng999's infrastructure is monitored around the clock for unusual access patterns, anomalous traffic, and potential security incidents. Automated alerting systems escalate suspicious events to our security team for immediate investigation.
• Regular Security Assessments: ng999 undergoes periodic security assessments and vulnerability scanning to identify and remediate potential weaknesses in our platform before they can be exploited. Critical vulnerabilities are patched on an emergency basis without waiting for scheduled maintenance windows.
• Data Breach Response: In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, ng999 will notify affected players without undue delay, providing details of the nature of the breach, the data involved, the likely consequences, and the steps we have taken or are taking to address it. You should immediately change your ng999 account password and monitor your payment accounts if you receive a breach notification from us.
• Employee Training: All ng999 staff members who handle personal data receive data protection and security awareness training. This training covers secure data handling procedures, phishing awareness, and the correct process for responding to data rights requests and suspected incidents.

While ng999 takes all reasonable and commercially practicable steps to protect your personal data, no internet-based system can guarantee absolute security. You also have an important role in keeping your data safe: use a strong, unique password for your ng999 account, do not share your login credentials with any third party, and contact [email protected] immediately if you suspect unauthorised access to your account.

This Privacy Policy was last reviewed and updated on 1 January 2026. ng999 reserves the right to amend this Privacy Policy at any time. Material changes will be communicated to registered players via email and a prominent notice on the ng999 website prior to the changes taking effect. Your continued use of the ng999 platform following notification of changes constitutes acceptance of the revised Privacy Policy.

For all privacy-related enquiries, data rights requests, or concerns about how ng999 handles your personal data, please contact us at [email protected]. Our support team operates 24 hours a day, 7 days a week, in English, on Bangladesh Standard Time (BST, UTC+6).