Privacy Policy

This Privacy Policy ("Policy") describes how po999 ("we", "us", "our") collects, uses, stores, and shares personal information about you ("you", "your", "Player") when you access or use the po999 website and all associated services (collectively, the "Platform"). The Platform is designed for use by eligible players in Bangladesh. By registering an account or using the Platform in any way, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.

This Policy should be read alongside the po999 Terms & Conditions. Where there is any conflict between this Policy and the Terms & Conditions regarding the handling of your personal data, this Policy shall prevail in respect of data privacy matters. We may update this Policy from time to time; the most current version will always be available on this page, and we will notify you of material changes in accordance with Section 13 below.

When you register for and use a po999 account, we collect the following categories of personal information:

• Identity data: full name, date of birth, and a copy of your national identity document (NID) or passport where required for KYC verification.
• Contact data: your registered Bangladeshi mobile number and, where provided, your email address. These are used for account verification, transaction notifications, and support communications.
• Financial data: your registered bKash, Nagad, Rocket, or Upay mobile wallet number, and where applicable, your Visa or Mastercard details. po999 does not store full card numbers; card data is processed through PCI-DSS compliant payment processors.
• Transaction data: records of all deposits, withdrawals, wagers placed, games played, bonuses claimed, and account balance history. This data is retained for regulatory compliance and dispute resolution purposes.
• Technical and usage data: IP address, device type and operating system, browser type, pages visited, session duration, and referring URL. This data is collected automatically when you access the Platform and is used for security monitoring, fraud detection, and service improvement.

We collect information directly from you when you register, make deposits or withdrawals, contact support, or update your account profile. We also collect information automatically as you use the Platform through cookies and server logs, and from third-party payment and identity verification providers where necessary.

po999 uses the personal information we collect for the following purposes:

• Account management: to create, verify, and maintain your po999 account, including processing your registration, verifying your age and identity, and managing your account preferences and settings.
• Transaction processing: to process deposits, withdrawals, and wagers, including communicating with bKash, Nagad, Rocket, Upay, Visa, and Mastercard payment processors to complete transactions securely and accurately.
• Regulatory compliance: to meet our obligations under applicable anti-money laundering (AML) requirements, Know Your Customer (KYC) rules, and any other legal or regulatory requirements applicable to the operation of an online gaming platform serving Bangladesh.
• Responsible gaming: to monitor gaming activity for signs of problem gambling, enforce self-exclusion and account restriction requests, and apply responsible gaming tools such as deposit limits and session time-outs in accordance with player settings.
• Customer support: to respond to your inquiries, resolve disputes, investigate complaints, and provide technical assistance. Support interactions, including chat and email records, are retained to maintain a record of resolved issues and improve service quality.
• Service improvement and security: to analyse Platform usage patterns, detect and prevent fraud, money laundering, and unauthorised access, and improve the features and performance of the Platform for all Bangladesh players.

po999 processes your personal data on one or more of the following legal bases:

• Contractual necessity: processing is necessary to perform the contract between you and po999 — specifically, to operate your account, process your transactions, and provide the gaming and betting services you have registered to use.
• Legal obligation: processing is necessary for po999 to comply with applicable laws, including AML regulations, KYC requirements, and data retention laws.
• Legitimate interests: processing is necessary for po999's legitimate interests in preventing fraud and financial crime, securing the Platform, improving our services, and operating a responsible gaming environment — provided these interests are not overridden by your own rights and interests.
• Consent: where you have given your explicit consent to a specific processing activity — for example, opting in to receive marketing communications — we process your data on the basis of that consent, which you may withdraw at any time.

When you make a deposit or request a withdrawal on po999, your transaction is routed through our payment processing partners. Depending on the method used — bKash, Nagad, Rocket, Upay, Visa, or Mastercard — your payment details are shared with the relevant payment provider solely for the purpose of completing the transaction. po999 does not store complete card numbers. Mobile wallet numbers are stored in encrypted form and are used only to match your po999 account to your registered payment method.

KYC verification may require you to submit a copy of your national identity card (NID), passport, or other government-issued identification, along with proof of the payment method used. This documentation is used solely to verify your identity and age as required by applicable regulations. KYC documents are stored securely, access is restricted to authorised compliance personnel, and they are deleted in accordance with our data retention schedule once the relevant retention period has expired.

po999 uses cookies and similar technologies (including web beacons and local storage) to operate the Platform, remember your preferences, and analyse usage. The table below summarises the types of cookies we use:

You can manage or delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will prevent you from logging in and using the Platform. For instructions on managing cookies in popular browsers, please refer to your browser's help documentation.

po999 does not sell your personal data. We may share your information with third parties only in the following circumstances:

• Payment processors: we share necessary financial data with bKash, Nagad, Rocket, Upay, Visa, and Mastercard processing partners to complete deposit and withdrawal transactions. These partners are contractually required to handle your data securely and only for the purpose of processing your transactions.
• Identity verification providers: we may share identity and document data with third-party KYC service providers to verify your age and identity. These providers operate under strict data processing agreements and may not use your data for any purpose other than identity verification.
• Game providers: we share anonymised session and wagering data with our licensed game providers — including Pragmatic Play, Evolution Gaming, Spribe, and Ezugi — solely to facilitate gameplay, resolve disputes, and comply with their own regulatory requirements. Game providers do not receive your full personal profile.
• Law enforcement and regulatory authorities: we may disclose your personal data to law enforcement agencies, regulatory bodies, or other authorities when required by applicable law, court order, or when we believe in good faith that disclosure is necessary to prevent fraud, money laundering, or other serious criminal activity.

All third parties with whom po999 shares personal data are required to maintain adequate technical and organisational security measures and to process your data only in accordance with our instructions and applicable data protection law. We do not permit our third-party service providers to use your personal data for their own marketing or commercial purposes.

po999 retains your personal data for as long as your account remains open and for a period thereafter as required by applicable law and our internal policies. Specifically: account and identity data is retained for a minimum of five (5) years following account closure to comply with AML and KYC record-keeping requirements; transaction records are retained for a minimum of five (5) years from the date of the transaction; support interaction records are retained for three (3) years; and analytics data is retained in anonymised form for up to two (2) years.

When the applicable retention period expires, po999 will securely delete or anonymise your personal data. Please note that even if you request account closure and erasure of your data, we are legally required to retain certain categories of data (particularly transaction records and KYC documentation) for the minimum periods set out above. We will inform you of any such retention obligation at the time you submit a deletion request.

po999 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• SSL/TLS encryption on all data transmitted between your device and our servers, ensuring that your account credentials, payment details, and personal information are protected in transit.
• Encryption of sensitive data at rest, including hashed and salted password storage, encrypted storage of mobile wallet numbers, and secure storage of KYC document copies with access restricted to authorised compliance personnel only.
• Access controls and authentication systems to ensure that only authorised po999 personnel can access personal data, with all access logged and regularly audited. Staff who handle personal data receive training on data protection obligations.

While po999 takes all reasonable precautions to protect your personal data, no internet transmission or electronic storage system is completely secure. If you believe your po999 account has been compromised, please contact our support team immediately at [email protected] and change your password without delay.

As a user of the po999 Platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team using the email address in Section 14:

• Right of access: you may request a copy of all personal data po999 holds about you. We will provide this within a reasonable time frame following identity verification.
• Right of rectification: if any personal data we hold about you is inaccurate or incomplete, you may request that we correct or complete it.
• Right of erasure: subject to our legal retention obligations, you may request deletion of your personal data. We will action erasure requests within a reasonable period and confirm completion.
• Right to restrict processing: in certain circumstances you may ask us to restrict the way we process your data — for example, while you contest the accuracy of data we hold, or while a complaint is being investigated.
• Right to withdraw consent: where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

po999 will respond to all privacy rights requests within a reasonable time frame. We may need to verify your identity before processing a request. If we are unable to fulfil a request — for example, because doing so would conflict with a legal retention obligation — we will explain why and advise on alternative options where available.

po999 may send you promotional communications about bonuses, new games, seasonal promotions such as Eid and Pohela Boishakh specials, and other offers relevant to Bangladesh players, but only where you have opted in to receive such communications or where we are permitted to contact you under applicable law. Marketing communications will be sent via SMS to your registered mobile number and, where provided, to your email address.

You may opt out of marketing communications at any time by contacting our support team at [email protected] and requesting to be removed from our marketing list. Opting out of marketing communications will not affect the sending of transactional communications such as deposit confirmations, withdrawal notifications, and account security alerts, which are necessary for the operation of your account.

The po999 Platform integrates with third-party services including game providers such as Pragmatic Play, Evolution Gaming, Spribe, Netent, Microgaming, and Ezugi, as well as payment processing services. When you interact with games provided by these third parties, limited session and transaction data is shared with them as described in Section 6. Each third-party provider operates under its own privacy policy, and po999 is not responsible for the data practices of these providers beyond the contractual obligations we impose on them.

po999 does not control and is not responsible for the privacy practices or content of any third-party service. We encourage you to review the privacy policies of any third-party services that you interact with through the Platform. This Policy applies solely to data processed by po999 directly.

po999 is strictly an adults-only platform for players aged 21 and above. We do not knowingly collect, store, or process personal data from individuals under the age of 21. If po999 becomes aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data, close the associated account, and return any funds held in the account balance to the payment method on record, subject to our standard identity verification process. If you believe a minor has registered on po999, please notify us immediately at [email protected].

po999 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or the services we offer. When we make material changes to this Policy — such as changes to the categories of data we collect, the purposes for which we use it, or the third parties with whom we share it — we will endeavour to notify registered players via SMS or email at least seven (7) days before the changes take effect, and we will post the revised Policy on this page with an updated effective date.

Non-material changes — such as minor clarifications, corrections of typographical errors, or updates to contact information — may take effect immediately upon posting without prior notice. Your continued use of the Platform after any update to this Policy constitutes your acceptance of the revised Policy. We therefore encourage you to review this page periodically to stay informed about how po999 protects your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way po999 handles your personal data, please contact our support team. We aim to respond to all privacy-related inquiries within a reasonable time frame. All support communications are handled in English.