Privacy Policy
of tt8999

1. Who We Are

1.1 tt8999 is an online casino and sports betting platform operated by an offshore entity under an international gaming licence. The platform is accessible at https://tt8999.app and is primarily aimed at adult players in Bangladesh aged 18 and above.

1.2 For the purposes of data protection, tt8999 acts as the data controller in respect of personal data collected from players via the platform. Enquiries relating to the use of your personal data should be directed to [email protected].

1.3 tt8999 is committed to handling all personal data in accordance with applicable data protection principles, including purpose limitation, data minimisation, storage limitation, integrity, and confidentiality.

2. Scope of This Policy

2.1 This Privacy Policy applies to all personal data collected through:

• The tt8999 website at https://tt8999.app and all associated pages;
• The account registration, login, and verification processes;
• Deposit and withdrawal transactions processed via bKash, Nagad, Rocket, Upay, or bank transfer;
• Customer support interactions via live chat or email;
• Participation in promotions, surveys, or feedback forms hosted by tt8999;
• Technical data automatically collected when you access or navigate the platform.

2.2 This policy does not apply to third-party websites or services that may be referenced on the platform. tt8999 is not responsible for the privacy practices of third-party game providers, payment processors, or any other external entities, each of whom operates under their own privacy documentation.

3. Data We Collect

3.1 The categories of personal data that tt8999 may collect include, but are not limited to, the following:

Category	Examples	Purpose
Identity Data	Full legal name, date of birth, nationality, gender	Account registration, KYC verification, age verification
Contact Data	Email address, mobile phone number, residential address	Account communications, withdrawal processing, security alerts
Verification Data	National ID, passport copy, utility bill, bank statement	KYC compliance, anti-money-laundering checks, fraud prevention
Financial Data	bKash/Nagad/Rocket wallet numbers, bank account details, transaction history	Processing deposits and withdrawals, anti-fraud monitoring
Gaming Data	Bet history, game activity, session duration, win/loss records	Account management, responsible gaming monitoring, dispute resolution
Technical Data	IP address, device type, browser type, operating system, session logs	Security monitoring, fraud detection, platform optimisation
Usage Data	Pages visited, features used, click patterns, time on platform	Platform improvement, personalisation, aggregate analytics
Communications Data	Support chat transcripts, email correspondence, complaint records	Customer service delivery, dispute records, quality assurance

3.2 tt8999 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic or biometric data, or health information, except where such data is voluntarily provided by a player in the context of a responsible gaming self-exclusion request (e.g., disclosure of a gambling addiction). Such sensitive data is treated with the highest level of confidentiality and processed only to the extent necessary to fulfil the responsible gaming obligation.

4. How We Collect Your Data

4.1 tt8999 collects personal data through the following primary channels:

• Direct collection: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in a promotion;
• Automated collection: Technical data collected automatically when you visit or interact with the platform, including via cookies, server logs, and session-tracking technologies;
• Third-party sources: Identity verification data from KYC service providers; fraud-screening data from risk management partners; payment confirmation data from bKash, Nagad, Rocket, Upay, and banking partners.

4.2 Where data is collected from third-party sources, tt8999 ensures that such third parties have obtained any necessary consents or have a legitimate basis to share that data with us.

5. How We Use Your Data

5.1 tt8999 uses the personal data it collects for the following purposes:

• To register and maintain your player account on the tt8999 platform;
• To verify your identity and age in compliance with KYC obligations;
• To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, bank transfer, Visa, and Mastercard;
• To detect, investigate, and prevent fraudulent transactions, cheating, and other prohibited conduct;
• To comply with anti-money-laundering (AML) and counter-terrorism financing (CTF) obligations;
• To provide customer support and resolve disputes;
• To enforce the tt8999 Terms & Conditions;
• To administer bonuses, promotions, and loyalty programmes;
• To monitor responsible gaming indicators and apply safer gambling interventions where appropriate;
• To send account-related communications such as transaction confirmations, security alerts, and policy updates;
• To send promotional communications where you have opted in to receive them (you may opt out at any time);
• To analyse platform usage in aggregate form to improve the tt8999 product and user experience;
• To meet any legal obligations imposed on tt8999 by applicable law or regulatory authority.

5.2 tt8999 does not use personal data for automated decision-making that produces legal effects or similarly significant consequences for players, except in the context of fraud-detection systems where automated flags are always reviewed by a human agent before any account action is taken.

6. Legal Bases for Processing

6.1 tt8999 processes personal data under one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to enter into or perform the player account contract — including registration, payment processing, and account management;
• Legal obligation: Processing required to comply with applicable laws — including KYC, AML, CTF, and record-keeping requirements;
• Legitimate interests: Processing in pursuit of tt8999's legitimate business interests — including fraud prevention, platform security, and product improvement — where those interests are not overridden by your privacy rights;
• Consent: Processing based on your freely given, specific, and informed consent — principally for the receipt of marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

7. Data Sharing & Third Parties

7.1 tt8999 may share your personal data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate confidentiality obligations:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — to process your financial transactions;
• Identity verification providers: Third-party KYC and AML screening services that assist tt8999 in verifying player identity and detecting suspicious financial activity;
• Game software providers: Licensed studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — who may receive technical session data necessary to deliver their games;
• IT and hosting service providers: Cloud infrastructure and server management partners who process data on tt8999's behalf under binding data processing agreements;
• Legal and regulatory authorities: Law enforcement agencies, licensing bodies, or courts where disclosure is required by applicable law or a valid legal process;
• Professional advisers: Lawyers, auditors, and insurers, where necessary in the context of legal proceedings or regulatory compliance.

7.2 tt8999 does not sell, rent, or trade personal data to third-party marketers, data brokers, or advertising networks under any circumstances.

7.3 In the event that tt8999 undergoes a merger, acquisition, or sale of assets, player data may be transferred to the successor entity subject to the same privacy protections described in this policy. Players will be notified of any such transfer via the email address on their account.

8. Cookies & Tracking Technologies

8.1 tt8999 uses cookies and similar technologies (collectively "cookies") to operate the platform, maintain session state, and analyse usage patterns. Cookies are small text files stored on your device when you visit the platform.

8.2 The following categories of cookies are used on tt8999:

• Strictly necessary cookies: Essential for the platform to function. These enable session management, security enforcement, and login state. They cannot be disabled without preventing core platform functions from operating.
• Performance cookies: Used to collect anonymised data about how players navigate the platform — pages visited, time spent, error encounters. This data is used in aggregate to improve platform performance and is not linked to individual player profiles.
• Functional cookies: Enable the platform to remember preferences such as language settings, preferred games, and display options to provide a more personalised experience.
• Security cookies: Support fraud detection and login anomaly monitoring. These cookies help identify suspicious session behaviour consistent with unauthorised account access.

8.3 tt8999 does not use third-party advertising cookies, retargeting pixels, or social media tracking scripts. Your browsing behaviour on the tt8999 platform is not shared with ad networks.

8.4 You may control or delete cookies through your browser settings. Please note that disabling strictly necessary cookies may impair the functionality of the tt8999 platform, including the ability to log in and place wagers.

9. Data Security

9.1 tt8999 implements a range of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers;
• At-rest encryption for databases containing personal and financial data;
• Cryptographic hashing (bcrypt) for all stored account passwords;
• Two-factor authentication for logins from unrecognised devices;
• Role-based access controls limiting internal staff access to personal data on a strict need-to-know basis;
• Regular penetration testing and vulnerability assessments conducted by independent security specialists;
• Automated anomaly detection systems to identify and flag unusual account or transaction behaviour in real time;
• Comprehensive audit logging of all access to and modifications of personal data records.

9.2 Despite these measures, no data transmission over the internet is entirely risk-free. tt8999 cannot guarantee absolute security and players are encouraged to use strong, unique passwords and to keep their login credentials confidential.

9.3 In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, tt8999 will notify affected players without undue delay via the email address on their account, and will take all reasonable steps to mitigate the impact of the breach.

10. Data Retention

10.1 tt8999 retains personal data for the periods set out below, or for longer periods where required by applicable law:

• Account data (identity, contact, verification documents): Retained for the duration of the account relationship and for a minimum of 5 years following account closure, to satisfy anti-money-laundering and licensing record-keeping obligations;
• Financial transaction data: Retained for a minimum of 5 years from the date of each transaction, in accordance with financial record-keeping requirements;
• Gaming activity data: Retained for the duration of the account relationship and for 2 years following account closure, for the purposes of dispute resolution and responsible gaming monitoring;
• Customer support communications: Retained for 3 years from the date of the interaction, for quality assurance and dispute resolution purposes;
• Technical and usage data (server logs, IP records): Retained for a maximum of 12 months, after which they are deleted or anonymised;
• Marketing consent records: Retained for the duration of the consent and for 12 months following withdrawal of consent, as evidence of compliance.

10.2 On expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised data — which can no longer be linked to any individual — may be retained indefinitely for statistical and analytical purposes.

11. Your Data Rights

11.1 As a data subject, you have the following rights in respect of your personal data held by tt8999. To exercise any of these rights, please contact us at [email protected]. We will respond to all valid requests within 30 calendar days.

• Right of Access: You have the right to request a copy of the personal data tt8999 holds about you, along with information about how and why it is being processed;
• Right to Rectification: You have the right to request correction of any personal data held by tt8999 that is inaccurate or incomplete;
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to overriding legal obligations that require retention;
• Right to Restriction of Processing: You may request that tt8999 restrict the processing of your personal data in certain circumstances, for example while the accuracy of the data is contested;
• Right to Data Portability: Where processing is based on consent or contractual necessity, you have the right to receive your personal data in a structured, machine-readable format;
• Right to Object: You have the right to object to processing based on legitimate interests, including profiling, and to withdraw consent for marketing communications at any time;
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

11.2 Please note that some of these rights are qualified and may not apply in every circumstance. Where a right cannot be exercised in full due to a competing legal obligation, tt8999 will explain the reasons in its response to your request.

12. Children's Privacy

12.1 The tt8999 platform is strictly intended for adults aged 18 years and above. tt8999 does not knowingly collect personal data from any individual under the age of 18. If you are a parent or guardian and believe that a minor in your care has registered an account or submitted personal data to tt8999, please contact us immediately at [email protected].

12.2 Upon confirmation that an account holder is under 18 years of age, tt8999 will immediately close the account, delete all associated personal data as soon as legally permissible, void all wagers placed, and return any deposits made to the original payment method.

12.3 tt8999 recommends that parents and guardians use parental control software to prevent minors from accessing online gambling platforms.

13. International Data Transfers

13.1 tt8999 operates under an offshore gaming licence and its servers and data processing infrastructure may be located in jurisdictions outside Bangladesh. By using the platform, you acknowledge that your personal data may be transferred to and processed in countries that may have different data protection laws from those in your country of residence.

13.2 Where personal data is transferred internationally, tt8999 takes appropriate safeguards to ensure that your data receives a level of protection equivalent to that described in this policy. These safeguards may include contractual data processing agreements incorporating standard data protection clauses.

13.3 tt8999 does not transfer personal data to third parties in jurisdictions with no recognised data protection framework without additional safeguards.

14. Third-Party Links

14.1 The tt8999 platform may contain hyperlinks to third-party game interfaces, payment provider portals, or other external resources. These third-party services operate independently of tt8999 and under their own privacy policies.

14.2 tt8999 is not responsible for the privacy practices of any third party and encourages players to review the privacy documentation of any external service they access. The presence of a link to a third-party service on the tt8999 platform does not constitute an endorsement of that service's privacy practices.

15. Changes to This Privacy Policy

15.1 tt8999 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. Material changes will be communicated to registered players by email at least 14 days before they take effect, unless immediate amendment is required for security or legal reasons.

15.2 The current version of this Privacy Policy, with its effective date, is always published at https://tt8999.app/privacy-policy. It is your responsibility to review this page periodically to stay informed of any updates.

15.3 Continued use of the tt8999 platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms.

16. Contact Us

16.1 If you have any questions, concerns, or requests relating to this Privacy Policy or to the way tt8999 handles your personal data, please contact our data support team using the details below:

• Email: [email protected]
• Response time: We aim to respond to all data-related enquiries within 5 business days and to all formal data rights requests within 30 calendar days.
• Postal correspondence: Where written correspondence is required, please use the contact details provided via the live support chat on the platform.

16.2 tt8999 is committed to resolving all privacy-related concerns fairly and transparently. If you are not satisfied with our response to your enquiry, you may have the right to lodge a complaint with a competent supervisory authority in your jurisdiction.