by999 Privacy Policy — How We Handle Your Data
by999 is committed to protecting your privacy. This policy explains what personal data we collect, why we collect it, and how we keep it secure on our Bangladesh-facing platform.
1. Introduction
by999 ("we", "us", "our", "Platform") operates the online casino and cricket betting platform accessible at by999.asia. We are committed to handling personal data responsibly, transparently, and in a manner consistent with good data governance practice. This Privacy Policy ("Policy") describes the types of personal information we collect from users ("you", "Player") in Bangladesh and elsewhere, the purposes for which we process that information, the circumstances under which we may share it, and the rights you hold over your own data.
By creating an account on by999, using the Services, making a deposit, or accepting any promotion, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must discontinue use of the platform immediately.
This Policy applies to all personal data collected through the by999 website, mobile interface, customer support channels, and any promotional communications. It does not apply to third-party websites or services linked from by999.
2. Information We Collect
by999 collects personal information that is necessary to provide the Services, verify player identity, process payments, detect fraud, and comply with applicable legal obligations. The categories of data we collect are described below.
3. How We Use Your Information
by999 uses personal data only for the purposes described in this Policy. We do not sell your personal data to third parties, and we do not use your data for purposes incompatible with those listed below.
- To create and manage your by999 player account, including identity verification (KYC) and age verification.
- To process deposits, withdrawals, and bonus credits via bKash, Nagad, Rocket, Upay, Visa, and Mastercard.
- To provide, maintain, and improve the betting, live casino, slots, and crash game services offered on by999.
- To detect, investigate, and prevent fraud, money laundering, multi-accounting, and other prohibited conduct.
- To send account-related communications including deposit confirmations, withdrawal notifications, and security alerts.
- To fulfil responsible gaming obligations, including monitoring gaming patterns and enforcing deposit limits or self-exclusion requests.
by999 may also use aggregated, anonymised data (from which individual players cannot be identified) for platform analytics, product development, and business reporting. Anonymised data is not personal data and is not subject to this Policy.
4. Legal Basis for Processing
by999 processes personal data only where a valid legal basis exists. The legal bases on which we rely are as follows:
- Contractual necessity — processing required to provide the Services you have signed up for, including account creation, payment processing, and game delivery.
- Legal obligation — processing required to comply with anti-money laundering (AML) laws, KYC requirements, tax reporting obligations, and any other applicable legal requirements.
- Legitimate interests — processing necessary for by999's legitimate business interests, including fraud prevention, platform security, and responsible gaming compliance, where these interests are not overridden by your data protection rights.
- Consent — where you have provided explicit consent for a specific processing activity, such as receiving marketing communications or promotional SMS messages. You may withdraw consent at any time by contacting [email protected].
5. Sharing of Personal Information
by999 does not sell or rent personal data to third parties. We may share your information with the following categories of recipient, strictly on a need-to-know basis and subject to appropriate data protection obligations:
Payment service providers (including bKash, Nagad, Rocket, Upay, Visa, and Mastercard processing networks) to facilitate deposits and withdrawals. Game content providers (including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, and others) who supply the game engines integrated into by999 — these providers receive only technical session data and do not receive your identity or payment data. Fraud prevention and AML compliance tools, which process data to detect suspicious activity. Legal and regulatory authorities, where disclosure is required by applicable law or court order.
by999 never sells your mobile number, email address, or payment details to marketing companies, data brokers, or any other commercial third party. Your financial data is transmitted over encrypted channels only and is never stored in plain text.
6. Data Security
by999 implements industry-standard technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. All data transmitted between your device and the by999 platform is encrypted using SSL (Secure Socket Layer) technology. Access to personal data within by999's systems is restricted to personnel who require it for their job function, and all staff with data access are subject to confidentiality obligations.
While by999 takes all reasonable precautions to protect your data, no internet-based system can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, by999 will notify affected players without undue delay and will take all appropriate remedial action.
by999 never stores your bKash, Nagad, Rocket, or Upay PIN. Your mobile money credentials are entered directly into your payment provider's own interface and are never transmitted to or stored by by999. Do not share your PIN with anyone, including by999 support staff.
7. Cookies and Tracking Technologies
by999 uses cookies and similar tracking technologies to operate the platform, maintain your session, personalise your experience, and support fraud detection. A cookie is a small text file placed on your device by the by999 website when you visit. Cookies do not contain your name, payment details, or other directly identifying information.
by999 uses three categories of cookie on the platform:
- Essential cookies — required for the platform to function. These include session authentication cookies that keep you logged in. They cannot be disabled without breaking the site's core functionality.
- Analytics cookies — used to measure how players navigate and use by999, which pages are most visited, and where users encounter difficulties. Analytics data is aggregated and anonymised; it is not used to build individual player profiles.
- Fraud prevention cookies — used to detect and block suspicious behaviour patterns such as bot activity, rapid account switching, and bonus abuse. These are essential for platform integrity and cannot be disabled.
8. Your Data Rights
As a by999 player, you hold the following rights over your personal data. To exercise any of these rights, contact us at [email protected] with your registered mobile number and the specific request. by999 will respond within 30 days.
Right of Access
You may request a copy of the personal data by999 holds about you, including your account details, gaming history, and any KYC documents on file.
Right of Rectification
If any personal data held by by999 is inaccurate or incomplete, you have the right to request that it be corrected. Where a correction requires re-verification (e.g. updating your name requires re-submission of ID), by999 will guide you through the process.
Right of Erasure
You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. Note: by999 is required to retain certain data (e.g. transaction records and KYC files) for legal compliance periods and cannot erase this data upon request.
Right to Object
You may object to the processing of your personal data where by999 is relying on legitimate interests as its legal basis. You may also object to receiving marketing communications at any time by contacting [email protected].
Right to Data Portability
Where technically feasible, you may request a copy of your personal data in a structured, commonly used, machine-readable format so that it can be transferred to another provider.
To exercise any of your data rights, email [email protected] with your registered mobile number and a description of your request. by999 will acknowledge your request within 48 hours and respond in full within 30 calendar days.
9. Data Retention
by999 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply: account identity and KYC data is retained for a minimum of 5 years from the date of account closure, in line with standard AML compliance requirements. Transaction records (deposit and withdrawal history) are retained for a minimum of 5 years. Gaming session logs are retained for 2 years. Marketing consent records are retained for 3 years from the date consent was given or last renewed.
After the applicable retention period has expired, by999 will securely delete or anonymise your personal data. You may request early deletion of data that is not subject to a mandatory retention requirement by contacting [email protected], and by999 will consider such requests on a case-by-case basis.
10. Third-Party Links
The by999 platform does not contain outbound links to third-party websites in its navigation or footer. If by999 ever references an external resource in a content area, that resource's privacy practices are governed by its own privacy policy, not this one. by999 has no control over and accepts no responsibility for the privacy practices of any third-party website or service.
11. Children's Privacy
by999 is strictly an adult-only platform. We do not knowingly collect personal data from individuals under the age of 21. If you are under 21, you must not use by999 or provide any personal information to us. If by999 becomes aware that personal data has been collected from a person under 21, we will delete that data promptly and close the associated account.
21+ only. by999 implements age-verification checks at registration to prevent underage access. If you believe a minor has registered on by999, please notify us immediately at [email protected]. We take underage gambling reports very seriously and will investigate and act within 24 hours.
12. Changes to This Privacy Policy
by999 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or platform features. When material changes are made, we will publish the revised Policy on this page with an updated "Last Updated" date and, where appropriate, notify registered players via SMS or email. It is your responsibility to review this Policy periodically.
Continued use of by999 following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you must stop using the platform and may request account closure by contacting [email protected].
13. Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the way by999 handles your personal data, please contact our data team using the details below. We aim to respond to all privacy-related enquiries within 48 hours.
Data enquiries: [email protected] — please include your registered mobile number and the subject line "Privacy Request" so we can handle your query efficiently. Our team is available 24/7 and responds to privacy requests within 48 hours.
Ready to Experience by999?
Your data is protected. Now it's time to enjoy cricket betting, live casino, and slots — all on Bangladesh's most trusted platform.
Explore by999 Casino Read the FAQ