tb999 Privacy Policy — How We Protect Your Personal Data

1 Who We Are

This Privacy Policy is published by tb999 ("the Platform", "we", "us", "our"), the operator of the online casino and sports betting website located at https://tb999.io. tb999 is a digital gaming platform designed for players based in Bangladesh, offering casino games, live dealer tables, slot games, sports betting markets, and associated account and payment services.

For the purposes of this Privacy Policy, tb999 acts as the data controller in respect of all personal data collected from players and visitors to the tb999 website. As data controller, tb999 determines the purposes for which personal data is processed and the means by which that processing is carried out.

If you have any questions about this Privacy Policy or about how tb999 handles your personal data, you may contact our dedicated privacy support team at any time by writing to [email protected]. Our support team operates 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6).

2 Data We Collect

tb999 collects personal data through several channels, including the account registration process, ongoing platform use, payment transactions, customer support interactions, and automatic technical data collection. The categories of personal data collected are described below.

Where you choose not to provide personal data that is designated as mandatory during the registration or KYC process, tb999 may be unable to open or maintain an account for you or to process withdrawal requests. Mandatory fields are clearly indicated during data collection.

3 How We Use Your Data

tb999 uses the personal data collected from players for the following purposes:

• Account Creation and Management: To register your account, verify your identity, manage your profile settings, and communicate essential account-related information including password resets, security alerts, and account status updates.
• Payment Processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to maintain accurate financial records of all transactions conducted through your tb999 account.
• Platform Delivery: To provide access to casino games, live dealer tables, slot titles, and sports betting markets, and to personalise the platform experience based on your gaming history and stated preferences.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeover attempts, bonus abuse, and other conduct that violates the tb999 Terms and Conditions or applicable law.
• Legal and Regulatory Compliance: To meet obligations imposed by applicable anti-money laundering (AML) and know-your-customer (KYC) requirements, including the verification of player identity and the retention of transaction records.
• Responsible Gaming: To monitor gaming activity for signs of problem gambling behaviour, to enforce self-exclusion and deposit limit settings, and to communicate responsible gaming resources to players where appropriate.
• Marketing Communications: To send promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications. Players may withdraw their marketing consent at any time by contacting [email protected].
• Customer Support: To respond to support queries, resolve complaints, and improve the quality of assistance provided by the tb999 support team.
• Platform Analytics and Improvement: To analyse aggregated, anonymised usage patterns that help tb999 improve site performance, game selection, and the overall user experience.

4 Legal Basis for Processing

tb999 processes personal data only where a valid legal basis exists for doing so. The legal bases relied upon by tb999 are as follows:

1. Contractual Necessity: Processing that is necessary to perform the contract between you and tb999 — including account registration, payment processing, game delivery, and customer support — is carried out on the basis of contractual necessity. Without this processing, tb999 cannot provide its services to you.
2. Legal Obligation: tb999 is subject to legal obligations including KYC verification, AML record-keeping, and age verification requirements. Processing undertaken to comply with these obligations is carried out on the basis of legal obligation.
3. Legitimate Interests: tb999 processes certain data — including technical and gaming activity data — on the basis of its legitimate interests in operating a safe, secure, and commercially sustainable gaming platform. tb999 has assessed that its legitimate interests in this processing are not overridden by players' rights and interests.
4. Consent: Where tb999 processes personal data for marketing communications or optional analytics purposes, it does so on the basis of your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

5 Data Sharing

tb999 does not sell, rent, or trade your personal data. Personal data is shared with third parties only in the following limited and controlled circumstances:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, and card processing partners receive the minimum data necessary to authenticate and complete your payment transactions. These providers are bound by their own data protection obligations and are not permitted to use tb999 player data for their own marketing purposes.
• Identity Verification Services: Third-party KYC and age verification providers may receive identity documents and personal details to conduct verification checks. All such providers are engaged under binding data processing agreements and are required to handle submitted data securely and confidentially.
• Technology Infrastructure Providers: Cloud hosting, content delivery, and platform software providers may have access to personal data as part of their technical service delivery. These providers act as data processors under instruction from tb999 and are contractually prohibited from using player data for any other purpose.
• Legal and Regulatory Authorities: tb999 may disclose personal data to law enforcement agencies, financial intelligence units, or regulatory bodies where required to do so by applicable law, court order, or legitimate regulatory demand. tb999 will notify affected players of any such disclosure to the extent permitted by law.
• Business Transfers: In the event that tb999 undergoes a merger, acquisition, or sale of assets, personal data held by tb999 may be transferred to the relevant successor entity. Players will be notified of any such transfer and given the opportunity to exercise their data rights before the transfer is completed.

6 Cookies & Tracking Technologies

tb999 uses cookies and similar client-side technologies (including local storage and session storage) to support the operation of the platform, enhance player experience, and gather analytics insights. The types of cookies used by tb999 are as follows:

• Strictly Necessary Cookies: These cookies are essential for the tb999 platform to function and cannot be disabled. They include session authentication tokens that keep you logged in during an active session, CSRF protection tokens, and load-balancing cookies. No personal data is stored in these cookies beyond what is functionally required.
• Functional Cookies: These cookies remember your preferences — such as your selected language, display settings, and responsible gaming preferences — so that you do not need to re-enter them on each visit. Functional cookies do not track your activity outside the tb999 platform.
• Analytics Cookies: tb999 uses anonymised analytics tools to understand aggregate platform usage patterns, including which games are most frequently played, average session durations, and traffic source data. Analytics data is not linked to individual player identities and is used solely for platform improvement purposes.
• Fraud Detection Cookies: Certain technical cookies assist tb999's fraud detection systems by flagging unusual access patterns, device fingerprint changes, and other indicators of potentially fraudulent activity.

Most web browsers allow you to control cookie settings through the browser's privacy or security settings menu. Disabling strictly necessary cookies may impair your ability to log in or use core platform features. tb999 does not use third-party advertising cookies or cross-site tracking technologies.

7 Data Retention

tb999 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to any overriding legal or regulatory retention obligations. The following retention periods apply:

• Account Data: Retained for the duration of your active account relationship with tb999, plus a period of five years following account closure, to meet anti-money laundering record-keeping obligations.
• Transaction Records: Financial transaction records are retained for a minimum of five years following the date of the transaction, in accordance with applicable financial record-keeping requirements.
• KYC Documents: Identity documents submitted for verification purposes are retained for five years following account closure and are stored in an encrypted document management environment with restricted access.
• Support Communications: Records of customer support interactions are retained for three years following the closure of the relevant support case, to allow for complaint review and quality assurance purposes.
• Marketing Data: Marketing preference records are retained until you withdraw consent or request deletion, at which point they are removed from all active marketing lists within 30 days.
• Technical and Analytics Data: Anonymised analytics data has no defined retention limit as it cannot be linked to an individual. IP address logs are retained for 90 days for fraud detection purposes and then deleted.

On expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data.

8 Your Rights

As a data subject, you hold the following rights in respect of your personal data processed by tb999. To exercise any of these rights, please contact [email protected] with your account username and a description of your request. tb999 will respond to all valid data rights requests within 30 days of receipt.

• Right of Access: You may request a copy of all personal data that tb999 holds about you, together with information about the purposes for which it is processed and the categories of recipients to whom it has been disclosed.
• Right to Rectification: If any personal data held about you is inaccurate or incomplete, you may request that it be corrected or supplemented. Identity data corrections may require the submission of supporting documentation.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been unlawfully processed. Erasure requests are subject to tb999's legal retention obligations, which may require certain data to be retained notwithstanding your request.
• Right to Restriction: You may request that tb999 restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data or where you have objected to processing pending a determination of whether tb999's legitimate interests override your rights.
• Right to Data Portability: Where processing is carried out on the basis of consent or contractual necessity using automated means, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to the processing of your personal data where tb999 relies on its legitimate interests as the legal basis for processing. tb999 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

9 Children & Minors

The tb999 platform is strictly intended for adults aged 21 and above. tb999 does not knowingly collect personal data from individuals under the age of 21. The collection of data from minors is prohibited, and tb999 employs age verification procedures during the registration process to prevent access by underage individuals.

If tb999 becomes aware that personal data has been collected from a person under the age of 21 without appropriate parental or guardian consent, it will take immediate steps to delete that data and to close the relevant account. If you believe that a minor may have registered an account on tb999, please notify us immediately at [email protected] so that we can investigate and take appropriate action.

10 Security Measures

tb999 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or alteration. Key security controls include:

• Transport Layer Security: All communications between player devices and tb999 servers are encrypted using TLS 1.2 or higher with 256-bit encryption keys. Outdated or insecure protocol versions are disabled.
• Access Controls: Access to personal data within tb999's internal systems is restricted on a role-based, need-to-know basis. All internal access to player data is authenticated, logged, and subject to periodic access review.
• Password Security: Player account passwords are stored using a one-way cryptographic hashing algorithm with per-account salting. Plaintext passwords are never stored or transmitted by tb999.
• Intrusion Detection: tb999 operates continuous network monitoring and intrusion detection systems that generate automated alerts for anomalous access patterns and potential security incidents.
• Penetration Testing: tb999 engages qualified external security professionals to conduct periodic penetration testing of the platform infrastructure and application layer to identify and remediate potential vulnerabilities.
• Incident Response: In the event of a personal data breach that poses a risk to players, tb999 will notify affected individuals and take all necessary steps to contain and remediate the incident within the shortest practicable timeframe.

While tb999 takes all reasonable and commercially practicable measures to safeguard personal data, no internet-based platform can guarantee absolute security against all possible threats. Players are also responsible for maintaining the security of their own account credentials and for reporting any suspected unauthorised access to their account immediately.

11 International Data Transfers

tb999 primarily stores and processes personal data on servers located within or serving the Asia-Pacific region. However, certain technology service providers engaged by tb999 — including cloud infrastructure partners and identity verification services — may process data on servers located in other jurisdictions.

Where personal data is transferred to a jurisdiction that does not provide an equivalent level of data protection to that applicable in Bangladesh, tb999 ensures that appropriate safeguards are in place before the transfer is made. These safeguards may include:

• Contractual clauses that impose data protection obligations on the receiving party that are equivalent in substance to those applicable to tb999.
• Technical measures such as encryption and pseudonymisation that limit the exposure of identifiable personal data to receiving parties.
• Restrictions on the receiving party's ability to use transferred data for any purpose other than delivering the contracted service to tb999.

Players who wish to obtain further information about the safeguards applied to international data transfers may submit a request to [email protected].

12 Policy Updates & Contact

tb999 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. The updated policy will be published at https://tb999.io/privacy-policy with a revised effective date. Where changes are material, tb999 will provide advance notice to registered players via email or an in-platform notification before the revised policy takes effect.

Your continued use of the tb999 platform following the publication of a revised Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with a material change to this Privacy Policy, you may request account closure and the return of any available balance before the revised policy takes effect by contacting [email protected].

For any questions, concerns, or requests relating to this Privacy Policy or to the personal data tb999 holds about you, please contact our privacy support team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Response Time: tb999 aims to respond to all privacy-related enquiries within 5 business days. Data rights requests will be actioned within 30 days of receipt of a valid, verified request.
• Support Hours: 24/7, Bangladesh Standard Time (BST, UTC+6)