Privacy Policy — How m9999 Protects Your Personal Data

1. About This Policy

1.1 This Privacy Policy ("Policy") describes how m9999 ("we", "us", "our", "the Platform") collects, uses, stores and discloses personal data relating to individuals ("you", "your", "the Player") who register for and/or use the services available at m9999.io.

1.2 This Policy forms part of the overall agreement between you and m9999 and should be read alongside the Terms & Conditions and the Responsible Gaming Policy, both of which are available on this Platform.

1.3 By creating an m9999 account or by continuing to use the Platform, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein.

1.4 This Policy applies exclusively to personal data processed by m9999. It does not apply to third-party websites or services that may be linked from the Platform. m9999 accepts no responsibility for the privacy practices of any third party.

2. Data We Collect

2.1 m9999 collects the following categories of personal data in connection with the operation of the Platform:

Category	Examples	When Collected
Identity Data	Full legal name, date of birth, national ID / passport number, photograph	Registration & KYC verification
Contact Data	Email address, mobile phone number, residential address (district, division)	Registration
Financial Data	bKash / Nagad / Rocket wallet numbers, bank account details, deposit and withdrawal history	Payment processing
Transaction Data	Deposit amounts, withdrawal amounts, bonus credits, wager history, game session records	Ongoing platform use
Technical Data	IP address, device type, browser type and version, operating system, session tokens	Each platform visit
Usage Data	Pages visited, games launched, time spent per session, click patterns, search queries within the Platform	Each platform visit
Communications Data	Support ticket content, live chat transcripts, email correspondence with m9999	Customer support interactions
Responsible Gaming Data	Self-exclusion requests, deposit limit settings, cooling-off period records	Responsible gaming feature use

2.2 m9999 does not collect any special categories of sensitive personal data (such as health information, racial or ethnic origin, religious beliefs, or political opinions) unless you voluntarily disclose such information in the context of a responsible gaming or self-exclusion request, in which case it is processed solely for that purpose.

3. How We Collect Data

3.1 Directly from you — when you register an account, complete the KYC verification process, make a deposit or withdrawal, contact support, or update your account profile.

3.2 Automatically — when you access the Platform, our servers and analytics tools automatically record Technical Data and Usage Data including your IP address, device identifiers and browsing behaviour within the site.

3.3 From third-party service providers — identity verification agencies may provide confirmation of your identity and age. Payment processors (bKash, Nagad, Rocket, Upay and partner banks) provide transaction confirmation data. Fraud prevention tools may provide risk signals associated with your device or network.

3.4 From game providers — game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe and Ezugi may return game-session data to m9999 for the purposes of recording your transaction history and resolving disputes.

4. Legal Basis for Processing

4.1 m9999 processes your personal data on one or more of the following legal grounds:

• Performance of a contract: Processing is necessary to provide you with the services you have requested by creating an account and placing wagers on the Platform.
• Legal obligation: Processing is required to comply with applicable laws, including age verification obligations, anti-money-laundering (AML) requirements and responsible gaming regulations.
• Legitimate interests: Processing is necessary for m9999's legitimate interests in operating a secure, fraud-free platform, improving our services and managing business risk — provided those interests are not overridden by your fundamental rights.
• Consent: Where processing is not justified on the above grounds — for example, sending you optional promotional emails — we will rely on your freely given, specific and informed consent, which you may withdraw at any time.

5. How We Use Your Data

5.1 m9999 uses your personal data for the following purposes:

• To create and manage your m9999 account, including verifying your identity and age (21+ requirement).
• To process deposits and withdrawals through bKash, Nagad, Rocket, Upay and partner banking channels.
• To deliver the games, sports betting markets and other services available on the Platform.
• To detect, investigate and prevent fraud, money laundering, underage gambling and other prohibited conduct.
• To apply and monitor responsible gaming tools such as deposit limits, cooling-off periods and self-exclusion.
• To respond to your customer support enquiries and resolve disputes.
• To send you transactional communications — such as deposit confirmations, withdrawal updates and account security alerts — that are necessary for the operation of your account.
• To send you promotional communications about m9999 offers, tournaments and seasonal promotions (only where you have opted in to receive such communications).
• To analyse usage patterns and improve the performance, design and content of the Platform.
• To comply with record-keeping and reporting obligations under applicable law.

6. Sharing Your Data

6.1 m9999 does not sell, rent or trade your personal data to any third party for their own marketing or commercial purposes. We share data only in the circumstances described below and only to the extent strictly necessary.

6.2 Service providers and processors: We share data with third-party vendors who process it on our behalf under written data processing agreements. These include identity verification providers, payment processors (bKash, Nagad, Rocket, Upay and partner banks), fraud detection services, customer support tools and IT infrastructure providers.

6.3 Game providers: Game studios receive the minimum data required to facilitate game sessions, record outcomes and resolve disputes (typically a pseudonymous player identifier and session stake/result data). Full identity data is not transmitted to game providers.

6.4 Legal and regulatory disclosures: m9999 may disclose personal data to law enforcement authorities, regulatory bodies or courts where required to do so by applicable law, court order or other legal obligation.

6.5 Business transfers: In the event of a merger, acquisition or sale of all or part of m9999's business, personal data held by m9999 may be transferred to the acquiring entity. You will be notified of any such transfer and of any material changes to this Policy that result from it.

6.6 Responsible gaming networks: Where required by responsible gaming obligations, m9999 may share self-exclusion status data with recognised self-exclusion registries to prevent a self-excluded player from registering new accounts.

7. Cookies & Tracking Technologies

7.1 m9999 uses cookies and similar tracking technologies (including local storage and session tokens) to operate the Platform, maintain your logged-in session, remember your preferences, prevent fraud and analyse how the site is used.

7.2 The following types of cookies are used on the m9999 Platform:

• Essential cookies: Required for the Platform to function. These include session authentication tokens and security cookies. They cannot be disabled without preventing you from using the Platform.
• Functional cookies: Store your preferences such as language, display settings and responsible gaming limit configurations so they persist between sessions.
• Analytics cookies: Collect anonymised usage data to help us understand which pages and games are most popular and how players navigate the site. This data is aggregated and does not identify you personally.
• Security and fraud prevention cookies: Help us identify suspicious activity, detect bots and protect against account takeover attempts.

7.3 You can control non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the Platform. m9999 does not use third-party advertising cookies or cross-site tracking pixels.

8. Data Retention

8.1 m9999 retains your personal data for as long as your account remains active and for a period following account closure as required by applicable law and legitimate operational needs.

8.2 As a general guide, the following retention periods apply:

• Account and identity data: Retained for the duration of the account and for a minimum of five (5) years following permanent account closure, in line with AML record-keeping obligations.
• Transaction and financial data: Retained for a minimum of five (5) years following the date of each transaction, for accounting and AML compliance purposes.
• Responsible gaming data: Self-exclusion and limit records are retained for the duration of the restriction and for five (5) years thereafter to prevent circumvention.
• Customer support communications: Retained for three (3) years from the date of the most recent interaction, for dispute resolution purposes.
• Technical and usage data: Retained in aggregated or anonymised form indefinitely for platform improvement purposes. Identifiable technical logs are deleted after thirteen (13) months.

8.3 Once the applicable retention period expires, personal data is securely deleted or irreversibly anonymised so that it can no longer be linked to an identifiable individual.

9. Data Security

9.1 m9999 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction or disclosure. These measures include:

• TLS 1.2/1.3 encryption for all data transmitted between your browser and the m9999 Platform.
• Encryption at rest for sensitive data fields including financial data and identity documents.
• Role-based access controls that limit employee access to personal data strictly on a need-to-know basis.
• Multi-factor authentication requirements for all internal administrative access to production systems.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Incident response procedures that include notification to affected players in the event of a data breach that poses a risk to their rights and freedoms.

9.2 While m9999 takes every reasonable precaution to protect your data, no online system can guarantee absolute security. You are responsible for keeping your account credentials confidential and for notifying us immediately at [email protected] if you believe your account has been compromised.

10. Your Rights

10.1 As a player on the m9999 Platform, you have the following rights in respect of your personal data. To exercise any of these rights, please contact us at [email protected]. We will respond to all valid requests within thirty (30) days.

11. Children's Privacy

11.1 The m9999 Platform is strictly intended for adults aged 21 years and older. m9999 does not knowingly collect personal data from any person under the age of 21.

11.2 If m9999 discovers that it has inadvertently collected personal data from a person under 21, that data will be deleted immediately and the associated account will be closed. Any balance in the account will be returned to the verified payment source after deducting Bonus Funds and bonus-derived winnings.

11.3 If you are a parent or guardian and believe that a minor in your care has registered an account on m9999, please contact us immediately at [email protected] so that we can take prompt action.

12. Third-Party Links

12.1 The m9999 Platform may, from time to time, contain references to third-party services such as payment gateways (bKash, Nagad, Rocket) that operate under their own separate privacy policies. When you follow a link to a third-party site or use a third-party payment interface, you leave the m9999 environment.

12.2 m9999 accepts no responsibility or liability for the privacy practices or content of any third-party platform. We encourage you to read the privacy policy of any third-party service before submitting personal data to it.

13. Marketing Communications

13.1 m9999 may send you promotional emails, SMS messages or in-platform notifications about bonuses, seasonal promotions (such as Eid, Pohela Boishakh or IPL/BPL tournaments), new game launches and exclusive offers — but only where you have provided explicit opt-in consent during registration or subsequently through your account settings.

13.2 Transactional messages — including deposit and withdrawal confirmations, account security alerts and responsible gaming notifications — are not marketing communications and will be sent regardless of your marketing preferences, as they are necessary for the operation of your account.

13.3 You may withdraw your consent to receive marketing communications at any time without affecting your ability to use the Platform. To opt out, click the unsubscribe link in any marketing email or contact [email protected].

14. Changes to This Policy

14.1 m9999 reserves the right to update or amend this Privacy Policy at any time. The current version of the Policy, including its effective date, will always be accessible on this page.

14.2 Where changes are material — for example, where we add a new category of data collection or a new purpose for processing — we will notify registered players by email at least seven (7) days before the changes take effect.

14.3 Your continued use of the m9999 Platform after the effective date of any amended Policy constitutes your acceptance of the revised terms. If you do not agree with the updated Policy, you should cease using the Platform and may request account closure.

15. Contact & Complaints

15.1 If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a privacy complaint, please contact the m9999 data team at [email protected]. All privacy enquiries will be acknowledged within 48 hours and resolved within thirty (30) days.

15.2 If you are not satisfied with m9999's response to a privacy complaint, you have the right to escalate the matter to the relevant data protection authority or regulatory body in your jurisdiction.

15.3 For responsible gaming concerns — including requests to activate self-exclusion, deposit limits or cooling-off periods — please visit the Responsible Gaming page or contact support directly. These requests are actioned with the highest priority.