Your Privacy Matters at r9999

r9999 collects personal information from you at various stages of your interaction with our platform. The categories of information we collect, and the contexts in which we collect them, are set out below.

Information you provide directly: When you register an r9999 account, you provide us with your full name, date of birth, email address, mobile phone number, and a chosen username and password. When you submit identity verification documents, you provide us with copies of government-issued identification (such as your National ID Card or passport) and proof of address. When you contact r9999 support, we retain a record of that communication and the information contained within it.

Payment and transaction data: When you make a deposit or request a withdrawal, we collect transaction identifiers, payment method references (such as the last four digits of a card or a bKash wallet number), transaction amounts in BDT, and timestamps. We do not store full card numbers or mobile banking PINs.

Information collected automatically: When you visit or use r9999, our systems automatically collect certain technical and behavioural data, including:

• Your IP address and approximate geographic location derived from it.
• Device type, operating system, and browser version.
• Pages visited, features used, games played, bets placed, and session duration.
• Referring URLs (the website or link that directed you to r9999).
• Cookie identifiers and similar tracking technology data (see the Cookies section below).

Data Category	Examples	Collection Method
Identity Data	Full name, date of birth, National ID, passport	Provided by you at registration / verification
Contact Data	Email address, mobile number	Provided by you at registration
Financial Data	Transaction IDs, payment method references, amounts	Generated during deposits and withdrawals
Technical Data	IP address, device type, browser, OS	Collected automatically on platform access
Usage Data	Games played, bets placed, session history	Collected automatically during platform use
Communications Data	Support chat logs, email correspondence	Generated when you contact r9999

r9999 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. However, to deliver our services effectively and to comply with our legal obligations, we share certain data with trusted third-party service providers and, where required, with authorities. All third parties who receive data from r9999 are contractually obligated to handle that data securely and to use it only for the specific purpose for which it was shared.

The categories of third parties with whom r9999 may share your personal data, and the reasons for doing so, are as follows:

• Payment processors and mobile financial service providers: bKash, Nagad, Rocket, Upay, and card networks (Visa, Mastercard) receive transaction data necessary to process your deposits and withdrawals. Each of these providers operates under their own privacy policies and data security standards.
• Identity verification providers: r9999 may use third-party KYC and AML screening services to verify the identity documents you submit during account verification. These providers process your identity data solely for the purpose of verification.
• Game content providers: Software studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a player session token and anonymised player identifier for the purpose of delivering game content. These providers do not receive your full name, contact details, or payment information unless strictly necessary for game-specific bonus integrations.
• Analytics and platform technology providers: r9999 uses third-party analytics tools that receive anonymised or pseudonymised usage data to help us understand platform performance. No directly identifiable personal data (such as your name or email) is shared with analytics providers.
• Regulatory and law enforcement authorities: r9999 will disclose personal data to relevant authorities when required to do so by applicable law, court order, or lawful regulatory request. r9999 will, where permitted by law, notify affected players of such disclosures.
• Business transfers: In the unlikely event that r9999 undergoes a merger, acquisition, or sale of all or substantially all of its assets, your personal data may be transferred to the acquiring entity. You will be notified in advance of any such transfer and of any changes to this Privacy Policy that may result.

r9999 implements a range of technical and organisational security measures to protect your personal data from unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and r9999 servers.
• Encryption of sensitive data fields (such as identity document copies and financial records) at rest on r9999 servers.
• Role-based access controls that limit internal access to personal data to authorised personnel only.
• Regular security audits, vulnerability assessments, and penetration testing of the r9999 platform and infrastructure.
• Multi-factor authentication requirements for r9999 administrative and operational systems.
• Incident response procedures for detecting, containing, and notifying affected parties in the event of a data breach.

Despite these measures, no online platform can guarantee absolute security. r9999 cannot be held liable for data breaches that result from factors outside its reasonable control, such as successful sophisticated cyberattacks or your own failure to protect your account credentials. If you become aware of or suspect any unauthorised access to your r9999 account, please contact us immediately at [email protected].

Data retention periods. r9999 retains your personal data only for as long as is necessary for the purposes set out in this Privacy Policy, or as required by applicable law. The general retention periods r9999 applies are as follows:

• Active account data: Retained for the duration of your active relationship with r9999 plus a minimum of five years after account closure, as required for AML and regulatory compliance purposes.
• Transaction records: Retained for a minimum of five years from the date of the transaction.
• Support communications: Retained for a minimum of three years from the date of the communication.
• Marketing consent records: Retained for the duration of your consent and for a reasonable period afterwards to demonstrate compliance.
• Anonymised analytics data: May be retained indefinitely as it contains no personally identifiable information.

r9999 is strictly an 18+ platform. We do not knowingly collect, process, or retain personal data from any person under the age of 18. Our registration process includes mandatory date-of-birth verification, and accounts are subject to age verification checks at any stage of use.

If r9999 becomes aware that personal data has been collected from a person under the age of 18, we will take immediate steps to delete that data and close the associated account. Any funds associated with a minor's account will be handled in accordance with r9999's underage gaming policy as described in the Terms & Conditions.

If you are a parent or guardian and you believe that a person under 18 in your care has registered an r9999 account, please contact us immediately at [email protected] so that we can investigate and take appropriate action. We take this obligation with the utmost seriousness and will act without delay upon receiving such a report.