cn999 Privacy
Policy

cn999 collects personal data that is necessary for the lawful and secure operation of our platform. We gather information through three primary channels: information you provide directly, information collected automatically during your use of the platform, and information received from third-party service providers.

Information You Provide Directly

When you register an account, verify your identity, or contact our support team, you may provide us with the following categories of personal data:

• Identity data: Full legal name, date of birth, gender, and government-issued identification number (National ID, passport number, or driving licence number)
• Contact data: Email address, mobile phone number registered in Bangladesh, and residential address including division, district, and upazila
• Account credentials: Username and encrypted password (cn999 never stores passwords in plain text)
• Verification documents: Scanned or photographed copies of identity documents and proof-of-address documents submitted during the Know Your Customer (KYC) process
• Financial data: Mobile wallet account references (bKash, Nagad, Rocket, Upay), bank account numbers for bank transfer processing, and transaction history on the cn999 platform
• Communications data: Content of messages sent to our customer support team via live chat or email

Information Collected Automatically

When you access the cn999 platform — whether through a web browser on desktop or mobile — certain technical data is collected automatically through server logs and cookies:

• Device data: Device type, operating system, browser type and version, screen resolution, and language settings
• Network data: IP address, approximate geographic location derived from IP (country and city level), and internet service provider (ISP)
• Usage data: Pages visited, game sessions initiated, bet history, session duration, click patterns, and navigation paths within the platform
• Cookie data: Preference cookies, session tokens, and analytics identifiers — see Section 4 (Cookies & Tracking Technologies) for full details

Information from Third Parties

cn999 may receive supplementary personal data from the following third-party sources to support identity verification, fraud prevention, and payment processing:

• Mobile financial service providers (bKash, Nagad, Rocket, Upay) — for payment confirmation and sender verification
• Identity verification service providers used in the KYC process
• Fraud detection and risk assessment partners who process anonymised or pseudonymised behavioural data
• Game content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) — for game session records and RTP audit trails

cn999 processes your personal data only for specific, lawful purposes. We do not use your data in ways that are incompatible with the purposes described at the time of collection. The following table summarises how we use the data we collect and the legal basis for each processing activity.

Purpose	Data Used	Legal Basis
Account registration and management	Identity, contact, credentials	Contract performance
Identity and age verification (18+ check)	Identity documents, date of birth	Legal obligation / Contract
Processing deposits and withdrawals in BDT	Financial data, identity data	Contract performance
Delivering game content and betting markets	Account data, usage data	Contract performance
Anti-money laundering (AML) monitoring	Transaction data, identity data	Legal obligation
Fraud detection and platform security	Device, network, usage data	Legitimate interest
Customer support and dispute resolution	Communications, account data	Contract performance
Responsible gaming monitoring	Usage, financial, session data	Legal obligation / Legitimate interest
Platform analytics and improvement	Anonymised usage data	Legitimate interest
Promotional communications (where consented)	Contact data, preference data	Consent

Marketing Communications

cn999 will only send you promotional emails or SMS messages about bonuses, seasonal offers (including Eid, Pohela Boishakh, or BPL season promotions), and new game launches if you have explicitly opted in to receive such communications during registration or through your account preferences. You may withdraw consent for marketing communications at any time by contacting our support team or updating your account settings. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before withdrawal.

Automated Decision-Making

cn999 uses automated systems to assess fraud risk, identify bonus abuse patterns, and enforce responsible gaming limits. Where an automated decision has a significant effect on your account — such as account suspension or withdrawal restriction — you have the right to request a manual review by a member of the cn999 compliance team. Contact [email protected] to submit such a request.

cn999 may share your personal data with the following categories of recipients in the circumstances described below:

Payment Service Providers

To process deposits and withdrawals in BDT, cn999 shares the minimum necessary financial and identity data with your chosen payment provider (bKash, Nagad, Rocket, Upay, or your selected Bangladeshi bank). Each payment provider operates under their own privacy policy and is independently responsible for data they hold. cn999 recommends reviewing the privacy documentation of your payment provider directly.

Game Content Providers

Game studios and live casino operators — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — receive a player session identifier and anonymised account reference to facilitate game loading, bet settlement, and RTP record-keeping. These providers do not receive your full name, contact details, or payment information from cn999.

Identity Verification Partners

During the KYC process, identity document data may be processed by a third-party verification service. This partner acts as a data processor on behalf of cn999 and is contractually prohibited from using your data for any purpose other than completing the verification check.

Fraud Prevention and Risk Management

cn999 may share device identifiers, IP addresses, and behavioural signals with fraud prevention partners to detect multi-accounting, bonus abuse, and other prohibited activity. Data shared for this purpose is pseudonymised where technically feasible.

Legal and Regulatory Disclosure

cn999 may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required to do so by applicable law, a valid court order, or a lawful regulatory request. In such cases, cn999 will disclose only the minimum data required to satisfy the legal obligation and will notify the affected player where permitted by law.

Business Transfers

In the event of a merger, acquisition, or transfer of all or part of cn999's assets, player data held by cn999 may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and of any material changes to data processing that result from it, with sufficient notice to exercise their privacy rights if desired.

cn999 uses cookies and similar tracking technologies to maintain your session, remember your preferences, and analyse how the platform is used. A cookie is a small text file placed on your device by the cn999 web server. Cookies do not contain executable code and cannot access other files on your device.

Types of Cookies Used

Cookie Type	Purpose	Duration
Strictly Necessary	Session authentication, security tokens, CSRF protection, load balancing	Session / up to 24 hours
Functional	Language preference, currency display (BDT), game lobby layout preferences	Up to 12 months
Analytics	Anonymised page view tracking, session duration, navigation path analysis for platform improvement	Up to 24 months
Fraud Detection	Device fingerprinting signals used to identify duplicate accounts and suspicious access patterns	Up to 12 months

Managing Your Cookie Preferences

Strictly necessary cookies cannot be disabled without affecting your ability to use the cn999 platform — they are essential for logging in and maintaining a secure session. Functional and analytics cookies can be managed through your browser settings. Most modern browsers allow you to block or delete cookies through their privacy or settings menus. Note that disabling functional cookies may affect your gameplay experience — for example, your preferred language and lobby layout may not be remembered between sessions.

cn999 does not use cookies for the purpose of serving third-party advertising or tracking your activity on other websites outside of the cn999 domain.

Technical Safeguards

• 256-bit SSL/TLS encryption on all data in transit between your browser and cn999 servers
• Encrypted storage for sensitive fields including passwords (bcrypt hashing), identity document copies, and financial references
• Firewalls and intrusion detection systems monitoring network traffic in real time
• Two-factor authentication (2FA) available to all player accounts via SMS verification
• Automated session timeout after periods of inactivity to prevent unauthorised access from unattended devices

Organisational Safeguards

• Access to player personal data is restricted to cn999 staff who require it to perform their job function
• All staff and contractors with data access are subject to confidentiality obligations
• Regular internal security reviews and access audits are conducted to ensure data access controls remain appropriate
• Third-party service providers are assessed for security compliance before being granted access to any cn999 player data

Data Breach Response

In the event of a confirmed personal data breach that poses a risk to affected players, cn999 will notify impacted players as promptly as practicable, providing details of the nature of the breach, the categories of data affected, and the steps taken to mitigate the impact. Players are encouraged to report any suspected unauthorised access to their account immediately by contacting [email protected].

While cn999 takes all reasonable steps to protect your data, no internet-based platform can guarantee absolute security. Players are advised to use a strong, unique password for their cn999 account, enable 2FA where available, and avoid accessing their account on shared or public devices.

cn999 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

Data Category	Retention Period	Reason
Account registration data	Duration of account + 5 years after closure	AML compliance, dispute resolution
Identity verification documents	Duration of account + 5 years after closure	KYC / AML legal obligation
Transaction and betting records	Duration of account + 5 years after closure	AML monitoring, tax records, disputes
Customer support communications	3 years from last interaction	Dispute resolution, quality assurance
Analytics and usage data (anonymised)	Up to 24 months	Platform performance analysis
Marketing consent records	Until consent is withdrawn + 1 year	Proof of consent basis
Self-exclusion records	Permanent	Responsible gaming obligations

After the applicable retention period has elapsed, personal data is securely deleted or irreversibly anonymised. Where deletion is not technically possible for operational reasons (for example, data held in encrypted backup archives), cn999 ensures that such data is isolated from active processing and will be deleted at the earliest opportunity during the next scheduled backup cycle.

If you request deletion of your personal data before the applicable retention period has elapsed — for example, following voluntary account closure — cn999 will action your request to the extent permitted by law, retaining only the minimum data required to satisfy ongoing legal obligations such as AML record-keeping requirements.

As a cn999 player, you have the following rights in relation to your personal data. These rights may be exercised by contacting our support team at [email protected] with a clear description of your request. cn999 will respond within a reasonable timeframe and without undue delay.

Right of Access

You have the right to request a copy of the personal data cn999 holds about you. This is sometimes called a Subject Access Request (SAR). Upon receipt of a verified request, cn999 will provide a structured summary of your personal data, the purposes for which it is processed, and the categories of recipients with whom it has been shared.

Right to Rectification

If any personal data cn999 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. Where correction of identity or financial data is requested, cn999 may require supporting documentation before actioning the change.

Right to Erasure

You may request that cn999 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been processed unlawfully. This right is subject to the data retention obligations described in Section 6 — cn999 cannot delete data that it is legally required to retain.

Right to Restrict Processing

You may request that cn999 temporarily suspend the processing of your personal data — for example, while the accuracy of your data is under dispute or while you have objected to processing based on legitimate interests.

Right to Object

Where cn999 processes your data on the basis of legitimate interests (for example, fraud detection or platform analytics), you have the right to object to that processing. cn999 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, or where processing is necessary for the establishment, exercise, or defence of legal claims.

Right to Withdraw Consent

Where processing is based on your consent — for example, for marketing communications — you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of any processing carried out prior to withdrawal.

Right to Data Portability

For data you have provided directly and that cn999 processes by automated means on the basis of contract or consent, you may request a copy of that data in a structured, commonly used, machine-readable format (such as CSV or JSON) for the purpose of transmitting it to another service provider.

If you have any questions, concerns, or complaints about how cn999 handles your personal data, or if you wish to exercise any of the privacy rights described in Section 7, please contact our support team using the details below. All privacy enquiries are handled with care and responded to promptly.

• Email: [email protected] (Subject: "Privacy Rights Request" or "Privacy Enquiry")
• Support hours: 24/7 — live chat and email support available around the clock
• Response time: We aim to acknowledge all privacy requests within 2 business days and resolve them within 30 calendar days
• Service area: Bangladesh — Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar

Changes to This Privacy Policy

cn999 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, the updated policy will be posted on this page with a revised "Last updated" date at the top. Your continued use of cn999 after such changes are posted constitutes acceptance of the revised policy. We encourage you to review this page periodically to stay informed about how we protect your personal data.

This policy should be read alongside the Terms & Conditions and the Responsible Gaming policy, both of which form part of the overall framework governing your use of cn999. If you have concerns about your gambling behaviour, please visit our Responsible Gaming page for guidance and self-help tools. For general questions about the platform, visit our FAQ page.