u999 Privacy Policy

Last Updated: January 2026  |  Effective immediately upon account registration or continued use

1. Who We Are

u999 (referred to in this Policy as "u999", "we", "us", or "our") operates the online gaming and entertainment platform accessible at u999.today. u999 is the data controller responsible for the personal information collected through the Platform and any related communication channels.

This Privacy Policy applies to all individuals who visit, register with, or interact with the u999 Platform, including registered account holders, prospective players, and visitors who browse without creating an account. It covers data collected through the website, any mobile-optimised version of the Platform, and direct communications with our support team.

For any privacy-related enquiries, please contact our dedicated support team at [email protected] or via live chat from your account dashboard. Contact details are plain text — not a clickable link.

2. Personal Data We Collect

u999 collects only the personal data that is necessary and proportionate to the purpose for which it is being collected. The categories of personal data we may hold about you include:

2.1 Identity Data

• Full legal name as it appears on your government-issued identification document
• Date of birth (used for mandatory 18+ age verification)
• Gender (where voluntarily provided during registration)
• Copies of identity documents submitted during KYC verification (national ID card, passport, or driving licence)

2.2 Contact Data

• Registered email address
• Mobile phone number (used for account verification, transaction alerts, and two-factor authentication)
• Residential address in Bangladesh (required for identity verification)

2.3 Financial Data

• Mobile wallet identifiers (bKash, Nagad, Rocket, Upay account numbers) used for deposits and withdrawals in BDT
• Bank account details where bank transfer is used (Dutch-Bangla Bank, City Bank, BRAC Bank)
• Deposit and withdrawal transaction history associated with your u999 account
• Account balance and bonus balance records

2.4 Gaming & Behavioural Data

• Betting history, game session records, wager amounts, and game outcomes
• Bonus claims, wagering progress, and promotional participation records
• Responsible gaming tool settings (deposit limits, cooling-off periods, self-exclusion status)
• Customer support interaction records, including chat transcripts and email correspondence

2.5 Technical Data

• IP address and approximate geolocation at the time of login and key account actions
• Device type, operating system, and browser information
• Session duration, pages visited, and navigation patterns within the Platform
• Cookie identifiers and similar tracking technologies (see Section 7)

3. How We Collect Your Data

u999 collects personal data through the following means:

• Direct Submission: Information you provide when registering an account, completing identity verification, making a deposit or withdrawal, contacting support, or participating in a promotion.
• Automated Collection: Technical data collected automatically when you access the Platform, including IP address, device identifiers, and session logs gathered through server logs, cookies, and similar technologies.
• Third-Party Verification Providers: Identity and age verification data obtained from authorised KYC service providers when processing your verification documents.
• Payment Processors: Transaction confirmation data returned by mobile wallet operators (bKash, Nagad, Rocket, Upay) and banking partners to confirm deposit and withdrawal status.
• Game Providers: Aggregated game session and outcome data returned from licensed game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi in connection with games played on the Platform.

4. How We Use Your Personal Data

u999 uses the personal data we collect for specific, documented purposes. The table below sets out the primary uses of each category of data:

5. Legal Basis for Processing

u999 processes your personal data on one or more of the following legal bases depending on the specific processing activity:

• Contractual Necessity: Processing required to fulfil the contract between u999 and you as a registered player — including account management, payment processing, and delivery of gaming services.
• Legal Obligation: Processing required to comply with applicable legal requirements, including identity verification obligations, anti-money laundering record-keeping, and age verification duties.
• Legitimate Interests: Processing conducted for u999's legitimate business interests where those interests are not overridden by your rights — including fraud detection, platform security, and responsible gaming monitoring.
• Consent: Processing carried out only where you have given clear, informed, and freely withdrawable consent — primarily for marketing communications and non-essential cookies. You may withdraw consent at any time without detriment to your account.

6. Data Sharing & Disclosure

u999 does not sell or rent your personal data to any third party. We may share your personal data with the following categories of recipient only where strictly necessary and for the purposes described in this Policy:

6.1 Service Providers

Third-party companies engaged by u999 to provide specific operational services, including identity verification providers, payment processors (bKash, Nagad, Rocket, Upay, and banking partners), IT infrastructure and hosting providers, customer support platform operators, and game content providers. All third-party service providers are contractually required to handle your data securely and use it only for the purpose for which it was shared.

6.2 Game Studios

Licensed game providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — may receive limited player data (such as an anonymised session token or account identifier) necessary to deliver their games within the u999 platform environment. These studios operate under their own data protection obligations.

6.3 Legal & Regulatory Authorities

u999 may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required to do so by applicable law, court order, or legitimate legal process. u999 will not voluntarily disclose player data to government bodies beyond what is legally required.

6.4 Business Transfers

In the event of a merger, acquisition, or sale of all or part of u999's business, player data may be transferred to the successor entity as part of the transaction. Affected players will be notified of any such transfer and their rights in relation to the new controller.

7. Cookies & Tracking Technologies

u999 uses cookies and similar tracking technologies on the Platform to ensure its correct functionality, to analyse usage patterns, and — where you have consented — to personalise your experience. The categories of cookies used are described below:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session cookies that keep you logged in during a visit, security tokens, and cookies that remember your responsible gaming settings. These cookies cannot be disabled without impacting platform functionality.
• Functional Cookies: Store your preferences such as language settings, preferred payment method, and last-accessed game category to improve your experience on return visits. These are set on first login and persist for the duration of your session or a defined period.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players navigate and interact with the Platform — for example, which pages are visited most frequently and where technical errors occur. This data helps u999 improve the platform experience. Analytics cookies are only set with your consent.
• Marketing Cookies: Where you have explicitly opted in, marketing cookies may be used to ensure that any promotional messages you receive are relevant to your gaming interests on u999. u999 does not use marketing cookies for cross-site tracking on third-party websites.

You may manage your cookie preferences at any time through your browser settings. Please note that disabling certain cookies may affect the functionality of the u999 Platform.

8. Data Retention

u999 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal or regulatory obligations. The following general retention periods apply:

• Account Data (identity, contact): Retained for the lifetime of your account and for a minimum of five (5) years following permanent account closure, in accordance with standard record-keeping requirements.
• Financial & Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in line with anti-money laundering guidelines applicable to financial service providers.
• KYC Verification Documents: Retained for the duration of your account relationship and for five (5) years after account closure. Physical copies are not retained; only secure digital records.
• Customer Support Records: Chat transcripts and email correspondence are retained for three (3) years from the date of the interaction to support complaint resolution and quality assurance.
• Technical & Log Data: Server logs and session data are retained for up to twelve (12) months for security monitoring and fraud prevention purposes.
• Marketing Consent Records: Records of marketing consent and withdrawal of consent are retained indefinitely to demonstrate compliance with consent obligations.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data.

9. Data Security

u999 implements a range of technical and organisational measures designed to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data in transit between your device and u999's servers
• Encryption of sensitive data fields (including payment identifiers) within our database systems
• Access controls ensuring that only authorised personnel with a documented business need can access personal player data
• Regular internal security reviews and system audits
• Secure data centres with physical access restrictions
• Staff training on data protection obligations and secure data handling procedures

While u999 takes data security seriously and maintains robust protective measures, no online system can guarantee absolute security against all possible threats. You also play a role in keeping your data safe: use a strong, unique password for your u999 account, do not share your login credentials with anyone, and notify us immediately at [email protected] if you suspect your account has been compromised.

10. Your Privacy Rights

As a registered player on u999, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact our support team via live chat or at [email protected]:

• Right of Access: You may request a copy of the personal data u999 holds about you. We will respond to verified access requests within 30 days.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor updates (such as a change of mobile number) can be made directly through your account settings.
• Right to Erasure: You may request that u999 delete your personal data. This right is subject to legal retention obligations — for example, we are required to retain transaction records for a minimum period. Where deletion is not possible in full, we will inform you of which data must be retained and why.
• Right to Restrict Processing: In certain circumstances, you may request that u999 restrict the processing of your personal data — for example, while a correction request is being verified.
• Right to Data Portability: Where processing is based on consent or contractual necessity and carried out by automated means, you may request a machine-readable copy of your personal data to transfer to another service.
• Right to Object: You may object to the processing of your personal data where u999 relies on legitimate interests as its legal basis. u999 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

u999 will not charge a fee for exercising any of your privacy rights, except in cases of manifestly unfounded or excessive requests where a reasonable administrative fee may apply. We aim to respond to all valid requests within 30 calendar days.

11. Children's Privacy

u999 operates a strict 18+ age policy. The Platform is not directed at, and is not intended for use by, individuals under the age of 18. u999 does not knowingly collect personal data from anyone under 18 years of age.

During account registration and identity verification, u999 requires all applicants to confirm that they are aged 18 or above. Where u999 has reasonable grounds to suspect that an account holder may be under 18, the account will be immediately suspended pending age verification. If it is confirmed that an account holder is under 18, the account will be permanently closed and any funds deposited will be returned to the payment source, less any amounts already wagered.

If you have reason to believe that a minor has registered an account on u999, please notify us immediately at [email protected] so that we can take appropriate action promptly.

12. Third-Party Services & Links

The u999 Platform integrates content and services from third-party game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers operate their own platforms and may have their own data practices in relation to game session data generated within their software environments.

u999 is not responsible for the privacy practices of third-party game studios, payment partners, or any other external service whose software or infrastructure is integrated into the Platform. We encourage you to review the privacy policies of any third-party service provider where you believe your data may be independently processed by that provider.

Payment partners such as bKash, Nagad, Rocket, and Upay are independent data controllers in respect of transaction data processed through their own platforms. Their handling of your payment data is governed by their respective privacy policies and terms of service.

13. Changes to This Privacy Policy

u999 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or the services we provide. Where a change is material — meaning it significantly affects how we use your personal data or the rights you hold — we will provide advance notice to registered players via the email address or mobile number registered to their account, or via a prominent notice on the Platform.

Minor or clarificatory amendments that do not materially affect your rights may be made without advance notice. The "Last Updated" date at the top of this document will always reflect the date of the most recent revision.

Your continued use of u999 after the effective date of any revised Privacy Policy constitutes your acceptance of the updated practices. If you do not accept a material change, you should contact our support team to discuss your options, including account closure and withdrawal of any remaining balance, before the revised Policy takes effect.

The current version of this Privacy Policy is always accessible at u999.today/privacy-policy.

14. Contact & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or u999's data handling practices, please reach out to our dedicated support team through any of the following channels:

• Email: [email protected] — please include "Privacy Request" in the subject line for faster routing. (Plain text — not a clickable link.)
• Live Chat: Available 24 hours a day, 7 days a week via your u999 account dashboard. Average response time under 2 minutes for general queries; privacy-specific requests are escalated to our data team within 24 hours.

u999 takes all privacy complaints seriously. Upon receipt of a formal privacy complaint, we will acknowledge it within 48 hours and aim to provide a full written response within 14 calendar days. Where a complaint requires extended investigation — for example, a data access request that involves retrieving records from multiple systems — we will keep you informed of progress and provide a final response within 30 calendar days.

If you are not satisfied with u999's response to your privacy complaint, you have the right to escalate the matter to the relevant data protection authority or seek independent legal advice.