Your Privacy Matters at t8999

Data We Collect

When you interact with t8999 — whether by registering an account, making a deposit, placing a bet, or contacting customer support — we collect personal information about you. This section describes the categories of data we collect, the source of that data, and the legal basis on which we collect and process it.

t8999 collects data directly from you (via registration forms, account settings, and support communications), automatically from your device (via cookies and server logs), and from third-party identity verification providers used during KYC processing. We do not collect sensitive personal data such as racial or ethnic origin, religious beliefs, or political opinions, and we do not request such information from players.

How We Use Your Data

t8999 uses the personal data we collect for specific, legitimate, and disclosed purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The table below summarises each processing purpose, the data categories involved, and the legal basis for processing.

Where t8999 relies on your consent as the legal basis for processing — particularly for marketing communications and personalised promotional offers — you have the right to withdraw that consent at any time by updating your communication preferences in your account settings or by contacting our support team. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

t8999 does not use your personal data for automated individual decision-making that produces significant legal effects on you, except where required to do so as part of our fraud detection and responsible gaming monitoring obligations. In such cases, you have the right to request human review of any automated decision that affects your account.

Sharing Your Information

t8999 does not sell your personal data to any third party. We share personal information only where it is necessary for the delivery of our services, for compliance with legal obligations, or to protect the security and integrity of the t8999 platform. The categories of recipients with whom your data may be shared are described below.

• Payment service providers: To process deposits and withdrawals, your financial data is shared with payment partners including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank. These providers receive only the data necessary to execute the specific transaction and are bound by their own privacy and data protection obligations.
• Identity verification providers: Third-party KYC and identity verification services may process your identity documents and biometric data on behalf of t8999 to fulfil our age verification and anti-money laundering compliance obligations. These providers operate under strict data processing agreements.
• Game content providers: When you play games supplied by third-party studios such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, or Ezugi, those providers may receive technical data (such as session tokens and game round IDs) necessary to deliver and record game outcomes. They do not receive your full identity or financial profile.
• IT and infrastructure providers: t8999 uses third-party cloud hosting, database, and cybersecurity service providers to operate the platform securely. These providers act as data processors on our behalf and are contractually prohibited from using your data for any purpose other than delivering the contracted services.
• Regulatory and law enforcement authorities: t8999 may disclose personal data to competent authorities where we are legally required to do so — for example, in connection with anti-money laundering investigations, fraud proceedings, or lawful requests from regulatory bodies. Such disclosures are made strictly in accordance with applicable law.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of t8999's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such change via the email address registered to your account prior to the transfer taking effect.

Cookies & Tracking

t8999 uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your login session, analyse platform usage, and deliver relevant content. A cookie is a small text file stored on your device by your web browser when you visit t8999.org. Cookies do not contain executable code and cannot carry viruses or malware.

Strictly necessary cookies are required for the platform to function and cannot be disabled. For all other cookie categories, you may manage your preferences through your browser's settings. Most modern browsers allow you to block or delete cookies; however, disabling functional or analytical cookies may affect the performance and usability of certain t8999 features.

In addition to cookies, t8999 may use web beacons (also known as pixel tags) in account-related email communications to track whether those emails have been opened and whether links within them have been clicked. This information helps us understand the relevance of our communications to you. You can prevent web beacons in emails from functioning by disabling image loading in your email client.

Data Retention

t8999 retains personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy, and for as long as required by applicable law. We do not retain personal data indefinitely; once the retention period for a given data category has expired, that data is securely and permanently deleted or anonymised so that it can no longer be linked to any individual.

• Active account data: All personal data associated with an active t8999 account is retained for the full duration of the account's active status. This includes identity records, contact information, financial transaction history, and usage data.
• Post-closure retention: Following account closure — whether voluntary or at t8999's discretion — personal data is retained for a minimum of five (5) years to satisfy anti-money laundering, fraud prevention, and tax compliance obligations. Financial transaction records may be retained for up to seven (7) years where required by applicable financial regulation.
• KYC documents: Identity and address verification documents are retained for five (5) years from the date of submission or from the date of account closure, whichever is later.
• Support communications: Customer support chat logs and email correspondence are retained for three (3) years following the date of the interaction, after which they are deleted unless they relate to an ongoing dispute or investigation.
• Marketing data: Where you have consented to receive marketing communications, your marketing preferences and associated contact data are retained until you withdraw consent. Following withdrawal of consent, your data is removed from active marketing lists within 10 business days.
• Analytical and technical data: Anonymised or aggregated analytical data (from which no individual can be identified) may be retained indefinitely for platform improvement purposes.

Your Data Rights

As a t8999 player, you hold a number of rights in relation to the personal data we hold about you. These rights are described below. To exercise any of these rights, please contact our data team by sending a written request to [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 5 business days and provide a substantive response within 30 days of receipt.

Please note that some rights are subject to conditions and limitations under applicable law. For example, the right to erasure does not apply where t8999 is required to retain your data to comply with a legal obligation (such as anti-money laundering record-keeping requirements). Where we cannot fully comply with a data rights request, we will explain the reason clearly in our response.

Data Security

t8999 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security posture is reviewed and updated on a regular basis to address emerging threats and to align with industry best practices for online gaming platforms.

• Encryption at rest and in transit: All personal data stored on t8999 infrastructure is encrypted at rest using AES-256. All data transmitted between your device and our servers is protected by TLS 1.2 or higher, ensuring end-to-end confidentiality during every session.
• Access controls: Access to personal data within t8999's systems is restricted on a strict need-to-know basis. Staff members are granted the minimum level of data access necessary to perform their role. All access to sensitive data — including KYC documents and financial records — is logged and subject to periodic audit.
• Multi-factor authentication: t8999 uses multi-factor authentication for all internal systems that handle personal data. We strongly encourage players to enable available security features on their own accounts to further protect their login credentials.
• Penetration testing and vulnerability management: t8999 conducts regular security assessments, including penetration testing and vulnerability scanning, to identify and remediate potential weaknesses in our platform before they can be exploited.
• Incident response: t8999 maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to affected individuals, t8999 will notify the relevant authorities and affected players in accordance with applicable law and within the timeframes required.
• Staff training: All t8999 staff who handle personal data are required to complete data protection training at the time of onboarding and on a regular basis thereafter. This training covers data handling obligations, security procedures, and the correct handling of data rights requests.

Changes to This Policy

t8999 reserves the right to update or modify this Privacy Policy at any time. Changes may be made in response to updates in applicable law, changes to our business operations, new service offerings, or improvements to our data handling practices. The most current version of this Privacy Policy will always be available on this page at t8999.org/privacy-policy, along with the date on which the current version became effective.

Where a change to this Privacy Policy is material — meaning it significantly alters how we collect or use your personal data or reduces your rights under this policy — t8999 will notify you via the email address registered to your account at least 14 days before the change takes effect. For minor or clarificatory changes, we will update the effective date on this page without separate notification.

Your continued use of the t8999 platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the revised policy, you should discontinue use of the t8999 platform and may request account closure by contacting our support team at [email protected].