ac999 Privacy Policy — How We Protect Your Personal Data

1Introduction

ac999 operates the online casino and sports betting platform available at https://ac999.vu (the "Platform"). This Privacy Policy describes how ac999 collects, uses, processes, stores, and protects personal data relating to registered players, visitors, and prospective customers in Bangladesh and internationally. The policy is written in plain English so that it can be understood by any reader, regardless of prior knowledge of data protection law.

By registering an account, making a deposit, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices it describes. If you do not consent to any part of this policy, you must not use the Platform and should contact us to have your account closed and your data deleted where legally permissible.

ac999 takes its responsibilities as a data controller seriously. We apply the principle of data minimisation — collecting only what is genuinely necessary — and the principle of purpose limitation, meaning we will not use your data for purposes beyond those described in this policy without first obtaining your specific consent.

2Personal Data We Collect

ac999 collects personal data in three broad categories: data you provide directly, data generated by your use of the Platform, and data received from third parties such as payment processors and identity verification services.

Data you provide directly:

• Full name, date of birth, and residential address (required for KYC verification).
• Email address and Bangladesh mobile number used for account registration.
• Government-issued photo ID such as your National Identity Card (NID) or passport, submitted during KYC.
• Communications you send to ac999 support, including email, live chat transcripts, and any attachments.

Data generated by your use of the Platform:

• Device information including device type, operating system version, browser type, and screen resolution.
• IP address and approximate geolocation derived from IP address at the time of each login session.
• Betting history, game activity logs, deposit and withdrawal transaction records, and session duration data.

Data received from third parties:

• Transaction confirmation and status data from bKash, Nagad, Rocket, Upay, and crypto payment networks.
• Identity verification results from third-party KYC service providers used to confirm your identity documents are genuine.
• Fraud risk scores or alerts from anti-fraud and anti-money-laundering screening services where applicable law requires such checks.

3How We Use Your Personal Data

ac999 uses the personal data it collects for the following specific purposes only:

• Account creation, authentication, and management — to register your account, verify your identity at login, and allow you to access your account securely.
• Payment processing — to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, USDT, BTC, and ETH, and to maintain accurate financial records.
• KYC and regulatory compliance — to verify your age, identity, and source of funds as required by anti-money-laundering obligations and responsible gaming requirements.
• Responsible gaming monitoring — to detect patterns of play that may indicate problem gambling, and to apply deposit limits, session time-outs, or self-exclusion restrictions where requested or required.
• Customer support — to respond to your questions, resolve disputes, investigate complaints, and communicate important account notifications.
• Fraud and security monitoring — to detect, investigate, and prevent fraudulent transactions, account takeovers, bonus abuse, and other prohibited activities described in our Terms & Conditions.

4Legal Basis for Processing

ac999 processes personal data only where a valid legal basis exists for doing so. The legal bases we rely on are:

• Contract performance — processing that is necessary to provide you with the Platform services you have requested, including account management, payment processing, and access to games.
• Legal obligation — processing required to comply with anti-money-laundering laws, age verification requirements, tax reporting obligations, and other applicable regulations.
• Legitimate interests — processing for fraud prevention, security monitoring, platform improvement, and responsible gaming purposes, where these interests are not overridden by your privacy rights.
• Consent — where we send you optional marketing communications or use non-essential cookies. You may withdraw consent for these activities at any time without affecting the lawfulness of processing carried out before withdrawal.

5Sharing Your Personal Data

ac999 does not sell your personal data. We share your data only in the following limited circumstances, and only to the extent necessary for each specific purpose:

• Payment processors — bKash, Nagad, Rocket, Upay, Visa, Mastercard, and crypto network intermediaries receive only the transaction data required to process your deposit or withdrawal.
• KYC and identity verification providers — third-party services that verify your NID, passport, or other identity documents receive the minimum data required to complete the verification check.
• Regulatory and law enforcement authorities — where ac999 is legally required to disclose data by a court order, regulatory investigation, or applicable law (for example, anti-money-laundering reporting obligations), ac999 will comply with such requests.
• Business successors — in the event of a merger, acquisition, or sale of ac999's business or assets, your personal data may be transferred to the acquiring entity, subject to that entity being bound by equivalent privacy commitments.

All third parties with whom ac999 shares personal data are required to process that data only for the purposes for which it was shared, to maintain appropriate security standards, and to delete the data when it is no longer needed for those purposes.

6Payment Data and Financial Records

Payment data — including bKash transaction reference numbers, Nagad wallet numbers, bank account details used for withdrawals, and crypto wallet addresses — is processed solely to complete the transaction you have requested. ac999 does not store full payment credentials after a transaction is finalised. Partial transaction references may be retained in our financial records for the minimum period required by applicable accounting and anti-money-laundering regulations.

Crypto wallet addresses used for deposits and withdrawals are treated as personal data under this policy. ac999 does not share crypto wallet addresses with any third party other than the relevant blockchain network intermediaries necessary to complete the transaction.

7Cookies and Tracking Technologies

The ac999 Platform uses cookies and similar tracking technologies to support core platform functionality, maintain your logged-in session, and improve platform performance. We use the following categories of cookies:

• Essential cookies — necessary for the Platform to function. These include session authentication cookies that keep you logged in and security cookies that help prevent cross-site request forgery. These cannot be disabled without breaking core platform functionality.
• Performance cookies — used to collect anonymous data about how players use the Platform, such as which pages are visited most frequently and where errors occur. This data is used to improve platform reliability and user experience.
• Marketing cookies — used only with your explicit consent to deliver personalised promotions and track the effectiveness of ac999's marketing campaigns. You may opt out of marketing cookies at any time by contacting support.

You can manage cookie preferences through your browser settings. Disabling essential cookies may prevent parts of the Platform from functioning correctly. Disabling performance or marketing cookies will not affect your ability to use the Platform's core features.

8Data Retention

ac999 retains personal data only for as long as it is necessary for the purposes for which it was collected, or as required by applicable law. The following general retention periods apply: active account data is retained for the lifetime of the account plus 5 years after account closure; KYC documents and identity verification records are retained for a minimum of 5 years from the date of verification or account closure, whichever is later, as required by anti-money-laundering regulations; financial transaction records are retained for a minimum of 5 years from the date of the transaction; customer support communications are retained for 2 years from the date of the last interaction.

When personal data is no longer required, ac999 will securely delete or anonymise it so that it can no longer be linked to an identifiable individual. Where full deletion is not immediately possible (for example, because data exists in backup systems), ac999 will isolate the data from further processing until deletion is possible.

9Your Rights Over Your Personal Data

You have the following rights in relation to the personal data ac999 holds about you. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request". We will respond within 10 business days (Bangladesh Standard Time, UTC+6).

• Right of access — you may request a copy of all personal data ac999 holds about you, together with information about how it is used and with whom it is shared.
• Right to rectification — if any personal data ac999 holds about you is inaccurate or incomplete, you may request that it be corrected or completed.
• Right to erasure — you may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to ac999's legal obligations to retain certain data.
• Right to restriction — you may request that ac999 restrict the processing of your personal data in certain circumstances, for example while a rectification request is being assessed.
• Right to data portability — where processing is based on your consent or on a contract, and is carried out by automated means, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to object — you may object to processing based on legitimate interests, including for direct marketing purposes. Where you object to marketing, ac999 will cease using your data for that purpose immediately.

ac999 will not charge a fee for handling data rights requests unless a request is manifestly unfounded or excessive. In such cases, a reasonable administrative fee may be applied. ac999 reserves the right to verify your identity before processing a data rights request to prevent unauthorised disclosure of personal data.

10Data Security

ac999 implements a range of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include SSL/TLS encryption for all data transmitted between your device and ac999 servers; encrypted storage for sensitive data at rest; access controls that restrict internal access to personal data on a strict need-to-know basis; regular security assessments and vulnerability testing; and secure disposal procedures for data that is no longer required.

No method of electronic transmission or storage is 100% secure. While ac999 takes all reasonable steps to protect your personal data, we cannot guarantee absolute security. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, ac999 will notify affected users without undue delay and take all steps necessary to contain the breach and minimise its impact.

11Children and Underage Users

The ac999 Platform is strictly intended for adults aged 21 and above. ac999 does not knowingly collect personal data from any person under the age of 21. If ac999 becomes aware that personal data has been collected from an underage individual, that data will be deleted immediately and the associated account will be permanently closed. If you are a parent or guardian and believe that a person under 21 in your care has registered on ac999, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

12Links to Other Websites

The ac999 Platform does not contain links to third-party websites. ac999 is not responsible for the privacy practices of any external websites that players may visit independently. This Privacy Policy applies solely to the ac999 Platform at https://ac999.vu and to data collected directly by ac999 in connection with your use of that Platform.

13Changes to This Privacy Policy

ac999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, or our data processing practices. When a material change is made, ac999 will notify registered players via the email address or mobile number held on their account, or by displaying a prominent notice on the Platform, prior to the change taking effect. The date of the most recent revision is shown at the top of this page.

Your continued use of the ac999 Platform after any update to this Privacy Policy constitutes your acceptance of the revised policy. If you do not accept the revised policy, you should stop using the Platform and contact support to request account closure and data deletion where permissible.

14Contact Us — Privacy Queries

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data ac999 holds about you, please contact the ac999 data team. All privacy-related requests and complaints will be acknowledged within 2 business days and responded to in full within 10 business days (Bangladesh Standard Time, UTC+6).

Email (plain text — not a link): [email protected]