co999 Privacy Policy — How We Protect Your Personal Data

1 Information We Collect

co999 collects personal data from users in several ways: directly when you register or interact with the platform, automatically as you navigate and use co999 services, and occasionally from trusted third parties involved in delivering those services. The categories of personal data co999 may collect are described below.

1.1 Registration & Account Data

When you create a co999 account, we collect the following information:

• Full legal name — as it appears on your government-issued identity document.
• Date of birth — used to verify that you meet the minimum age requirement of 18 years.
• Residential address — including district, division, and postal code within Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, or Mymensingh).
• Mobile phone number — used for account security, transaction notifications, and support communications.
• Email address — used for account communications, verification, and promotional correspondence where you have opted in.
• Username and encrypted password — your co999 login credentials, stored using one-way hashing.

1.2 Identity Verification (KYC) Data

To comply with our Know Your Customer (KYC) obligations and to protect all co999 players from fraud, we may request and retain copies of identity and address verification documents, including:

• National Identity Card (NID) or valid passport issued in Bangladesh.
• Proof of address documents such as utility bills, bank statements, or official government correspondence.
• Payment method verification — for example, a screenshot confirming that a bKash, Nagad, Rocket, or bank account is registered in your own name.

1.3 Transaction & Financial Data

When you make deposits or withdrawals on co999, we record transaction details including the payment method used (bKash, Nagad, Rocket, Upay, Visa, Mastercard, or bank transfer), transaction amounts in BDT, transaction timestamps, and transaction reference identifiers. co999 does not store full card numbers or mobile banking PINs — all payment processing is handled via secure, tokenised channels provided by our payment partners.

1.4 Gameplay & Betting Data

co999 records all betting and gaming activity associated with your account, including bet placement history, game sessions, wager amounts, outcomes, bonus usage, and account balance movements. This data is essential for settling disputes, detecting bonus abuse, and complying with responsible gaming obligations.

1.5 Technical & Usage Data

When you access co999, our systems automatically collect the following technical data:

• IP address and approximate geographic location (country and city level).
• Device type, operating system version, and browser type and version.
• Pages visited, navigation paths, session duration, and click interactions.
• Referring URL (the page or search result you came from before arriving at co999).
• Time zone settings and language preferences detected from your browser.

2 How We Use Your Data

co999 uses the personal data it collects for specific, legitimate purposes directly connected to the delivery of our platform and services to players in Bangladesh. We do not use your personal data for any purpose that is incompatible with the reason it was originally collected. The primary purposes for which co999 processes your personal data are set out in the table below.

Purpose	Data Used	Legal Basis
Creating and managing your co999 account	Registration data, login credentials	Contract performance
Processing deposits and withdrawals	Transaction data, payment method details	Contract performance
Identity verification (KYC)	KYC documents, registration data	Legal obligation
Fraud detection and prevention	Technical data, transaction data, gameplay data	Legitimate interest
Responsible gaming monitoring	Gameplay data, account activity patterns	Legal obligation / Legitimate interest
Customer support communications	Account data, transaction data, correspondence	Contract performance
Sending account and security notifications	Email address, mobile number	Contract performance
Promotional communications (opt-in only)	Email address, mobile number, gameplay preferences	Consent
Platform analytics and improvement	Technical and usage data (anonymised or aggregated)	Legitimate interest

co999 will never use your personal data to make fully automated decisions that produce significant legal effects on you without providing a means for human review. Where automated risk-scoring is applied (for example, in fraud detection), a co999 team member reviews flagged cases before any account action is taken.

3 Data Sharing & Disclosure

co999 does not sell, rent, or trade your personal information to third parties for their own independent marketing or commercial purposes. We may share specific categories of your personal data with carefully selected third parties only where it is necessary to deliver the co999 platform or comply with our legal obligations. All third-party data sharing is governed by contractual data processing agreements that require the recipient to protect your data to an equivalent standard.

3.1 Third-Party Service Providers

co999 works with the following categories of service provider who may process personal data on our behalf:

• Payment processors: bKash, Nagad, Rocket, Upay, and banking partners process transaction data to execute your deposits and withdrawals. These providers have their own privacy policies and are independently regulated.
• Game content providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, and Ezugi may receive anonymised session identifiers necessary to operate their games within the co999 environment. They do not receive your full name, address, or payment details.
• KYC and identity verification providers: Trusted third-party KYC services may process your identity documents to verify your age and identity on co999's behalf.
• Analytics and fraud prevention providers: Aggregated or pseudonymised usage data may be shared with analytics platforms to help co999 detect fraud and improve platform performance.
• Cloud infrastructure providers: co999's platform infrastructure is hosted on secure cloud services. Hosting providers operate under strict data processing agreements and do not access your personal data.

3.2 Legal Disclosures

co999 may disclose your personal data to law enforcement agencies, regulatory bodies, or other government authorities where we are legally required to do so, where disclosure is necessary to investigate suspected fraud or illegal activity, or where disclosure is required to protect the rights, property, or safety of co999, its players, or the public. In all such cases, co999 will disclose only the minimum personal data necessary to satisfy the specific legal requirement.

4 Cookies & Tracking Technologies

co999 uses cookies and similar tracking technologies on our platform to ensure that the website functions correctly, to remember your preferences, to keep your co999 login session secure, and to understand how players interact with different parts of the co999 platform. A cookie is a small text file placed on your device by a website server when you visit that site.

4.1 Types of Cookies Used by co999

• Strictly Necessary Cookies: These cookies are required for the co999 platform to function. They manage your session state, maintain your authenticated co999 login, and ensure that the deposit and withdrawal flows operate correctly. These cookies cannot be disabled without breaking core platform functionality.
• Performance & Analytics Cookies: These cookies collect anonymised information about how visitors use co999, including which pages are visited most often and whether users encounter errors. This data helps co999 improve platform performance and user experience. No personally identifiable data is collected via these cookies.
• Functional Cookies: These cookies remember your preferences — such as your preferred language, device settings, and game lobby layout — so that you do not need to re-enter them on every visit to co999.
• Targeting & Personalisation Cookies: With your consent, co999 may use cookies to deliver promotional content and bonus offers that are relevant to your gameplay activity on co999. You may withdraw this consent at any time through your account preferences.

4.2 Managing Your Cookie Preferences

You can control and manage cookies through your web browser settings. Most modern browsers allow you to view, block, or delete cookies at any time. Please note that blocking strictly necessary cookies will affect your ability to use the co999 platform, including your ability to log in and complete transactions. Instructions for managing cookies are available in the help documentation of your specific browser.

5 Data Retention & Storage

co999 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The retention periods co999 applies to the principal categories of personal data are as follows:

• Account and registration data: Retained for the lifetime of your co999 account and for a minimum of five years following permanent account closure, to satisfy anti-money-laundering record-keeping requirements.
• KYC verification documents: Retained for a minimum of five years from the date of verification or from the date of account closure, whichever is later.
• Transaction records: Retained for a minimum of five years from the date of each transaction in accordance with financial record-keeping requirements.
• Gameplay and betting history: Retained for the lifetime of your account and for two years following account closure, for dispute resolution and responsible gaming audit purposes.
• Support communications: Retained for three years from the date of the last communication in a support thread.
• Technical and usage data (anonymised): Retained for up to 24 months in anonymised or aggregated form for platform analytics purposes.

When personal data is no longer required for any of the above purposes and no legal obligation requires its continued retention, co999 will securely delete or irreversibly anonymise it in accordance with our internal data disposal procedures.

6 Data Security Measures

co999 takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, loss, alteration, or disclosure. While no digital platform can guarantee absolute security, co999 applies industry-standard protections across all layers of our infrastructure and operations.

• 256-bit SSL/TLS encryption: All data transmitted between your device and co999 servers is encrypted in transit using 256-bit SSL/TLS protocols, ensuring that your personal data and payment information cannot be intercepted.
• Password hashing: co999 login passwords are never stored in plain text. They are processed through a one-way cryptographic hashing algorithm before storage, meaning that even co999 staff cannot view your password.
• Access controls: Access to personal data within co999's systems is restricted on a strict need-to-know basis. Staff access to sensitive data is logged, monitored, and subject to regular review.
• Secure data centres: co999's platform infrastructure is hosted in secure facilities with physical access controls, environmental monitoring, and redundant systems to protect against data loss.
• Regular security assessments: co999 conducts periodic security reviews and vulnerability assessments of its platform to identify and address potential weaknesses before they can be exploited.

If co999 becomes aware of a data breach that is likely to result in a risk to the rights and freedoms of affected players, we will notify affected individuals without undue delay, providing information about the nature of the breach and the steps being taken in response.

7 Your Privacy Rights

As a co999 player whose personal data is processed under this Privacy Policy, you have a number of rights in relation to that data. co999 is committed to honouring these rights and to responding to valid requests promptly. To exercise any of the rights described below, please contact co999 at [email protected] with the subject line "Privacy Rights Request".

7.1 Right of Access

You have the right to request a copy of the personal data that co999 holds about you. co999 will provide this information in a clear, structured format within a reasonable timeframe following receipt of a verified request. We may need to confirm your identity before fulfilling an access request to ensure we do not disclose data to an unauthorised person.

7.2 Right to Rectification

If you believe that any personal data co999 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. In many cases, you can update your own account information directly through your co999 account dashboard. For data that cannot be self-updated (such as your name or date of birth after KYC verification), please contact [email protected].

7.3 Right to Erasure

You may request that co999 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn your consent and no other legal basis exists for processing, or where the data has been processed unlawfully. Please note that co999 may be unable to erase certain data that we are required to retain by applicable legal obligations — for example, transaction records required under financial regulations. In such cases, co999 will inform you of the specific legal basis for continued retention.

7.4 Right to Restrict Processing

You have the right to request that co999 restrict the processing of your personal data in certain circumstances — for example, while a query about the accuracy of your data is being resolved, or where you have objected to processing and co999 is assessing whether its legitimate interests override your objection.

7.5 Right to Withdraw Consent

Where co999 processes your personal data on the basis of your consent (for example, for promotional communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place before the withdrawal. To opt out of marketing communications from co999, you may use the unsubscribe link in any co999 promotional email or update your communication preferences in your co999 account settings.

8 Policy Updates & Contact

co999 reserves the right to update or revise this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made to this Privacy Policy, co999 will update the "Last updated" date at the top of this page and, where appropriate, notify registered players via email or a prominent notice on the co999 platform. We encourage you to review this Privacy Policy periodically to remain informed about how co999 protects your personal data.

Your continued use of the co999 platform following the publication of a revised Privacy Policy constitutes your acknowledgment of the updated terms. If you do not agree with any changes to this Privacy Policy, you should cease using co999 and may request account closure by contacting [email protected].

8.1 Contact Details

For all privacy-related queries, data access requests, or concerns about how co999 handles your personal data, please contact the co999 Data Privacy team using the details below. We aim to respond to all privacy enquiries within 3 business days.

• Email: [email protected] (subject line: "Privacy Rights Request")
• Platform: co999 — Bangladesh's Online Casino & Sports Betting Platform
• Website: https://co999.bet