tg999 Privacy Policy

This Privacy Policy ("Policy") describes how tg999 ("we", "us", "our") collects, processes, stores, and protects the personal data of individuals ("you", "your") who access or use the tg999 website and associated services (collectively, the "Platform"). It applies to all registered players, prospective players, and visitors to the Platform regardless of their location.

This Policy forms part of the tg999 Terms & Conditions. By registering an account, accessing the Platform, or submitting any personal information to tg999, you confirm that you have read and understood this Policy and consent to the data practices it describes. If you do not agree with this Policy, you must discontinue use of the Platform immediately.

This Policy should be read together with the Terms & Conditions and the Responsible Gaming policy, both of which contain additional provisions that are relevant to the processing of your personal data.

tg999 collects and processes different categories of personal data depending on the nature of your interaction with the Platform. The categories of data we may collect include:

tg999 does not knowingly collect sensitive personal data beyond what is strictly required for KYC and AML compliance. We do not collect biometric data beyond what is contained in identity documents you voluntarily submit.

tg999 collects personal data through the following means:

• Direct Submission: When you register an account, complete identity verification, make a deposit or withdrawal, contact customer support, or participate in a promotion, you directly provide us with personal data.
• Automated Technical Collection: When you visit or use the Platform, our servers automatically record technical data such as your IP address, device identifiers, browser information, and session activity. This data is collected via server logs, cookies, and similar tracking technologies.
• Payment Processors: When you conduct a financial transaction via bKash, Nagad, Rocket, Upay, or a banking partner, we receive transaction confirmation data from those payment processors, including transaction reference numbers and payment timestamps.
• Identity Verification Partners: Where we use third-party KYC service providers to verify identity documents, those providers may return verification results and extracted data points to us as part of the verification workflow.
• Fraud Prevention Services: We may receive data from fraud prevention and risk management service providers about device fingerprints, behavioural risk scores, and flagged indicators associated with your session or account.

tg999 uses the personal data we collect for the following specific purposes. We process data only for the purposes listed below and will not repurpose data without notifying you and, where required, obtaining your consent:

• Account Management: Creating and maintaining your registered account, authenticating your identity at login, and managing account settings and preferences.
• Transaction Processing: Processing deposits, withdrawals, and bonus payments accurately and securely, and maintaining a full transaction audit trail.
• Identity Verification (KYC): Verifying your identity and age to satisfy our internal policies, confirm eligibility, and comply with applicable legal requirements.
• Fraud and Money Laundering Prevention (AML): Monitoring transactions and account activity for patterns indicative of fraud, money laundering, or other financial crime, and taking appropriate action where such patterns are identified.
• Responsible Gaming: Monitoring your gaming activity to identify indicators of problem gambling behaviour and, where appropriate, reaching out to offer responsible gaming tools or support.
• Customer Support: Responding to your queries, resolving disputes, and maintaining a record of communications for quality assurance and audit purposes.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve Platform features, game selection, payment flows, and overall user experience.
• Marketing Communications: Sending you promotional offers, bonus notifications, and event announcements where you have opted in to receive such communications. You may withdraw this consent at any time by contacting support.
• Legal and Regulatory Compliance: Retaining records and responding to lawful requests from competent authorities where required by applicable law.

tg999 processes your personal data under one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing that is necessary to perform the contract between you and tg999 — including account creation, payment processing, and game delivery — is carried out on the basis of contractual necessity.
• Legal Obligation: Certain processing activities — including KYC verification, AML transaction monitoring, and the retention of financial records — are required by applicable legal and regulatory obligations. This processing is carried out regardless of consent.
• Legitimate Interests: Processing for fraud prevention, Platform security, technical data collection, and service improvement is carried out on the basis of our legitimate business interests, provided that those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we rely on your consent as a legal basis — primarily for marketing communications and optional analytics cookies — you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

tg999 will never sell your personal data to any third party. We share personal data only in the following limited circumstances, and only to the extent strictly necessary:

• Payment Service Providers: We share transactional data with bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank solely to execute the payment or withdrawal you have requested. These providers process your data as independent controllers under their own privacy policies.
• Game Technology Providers: We share session identifiers and game activity data with our game software providers (such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi) to deliver game content and resolve game-related disputes. These providers are contractually bound to process data only for the purpose of game delivery.
• Identity Verification Partners: We share identity document data with KYC verification service providers to authenticate your identity. These providers process data under strict confidentiality agreements and are prohibited from retaining or repurposing your documents.
• Fraud Prevention Services: We share technical and behavioural data with fraud detection platforms to identify and prevent fraudulent account activity. This processing is conducted under legitimate interests and applicable AML obligations.
• Legal and Regulatory Authorities: Where required by a lawful order, subpoena, or regulatory requirement from a competent authority, tg999 may disclose personal data without prior notice to you. Where permitted by law, we will endeavour to notify you of such disclosures.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of tg999's assets, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections. You will be notified of any such transfer in advance.

tg999 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device by a web server. Cookies allow us to recognise your browser, remember your preferences, maintain your login session, and analyse Platform usage patterns.

The types of cookies used on the tg999 Platform include:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They maintain your login session, remember your language preference, and enable security features. These cookies cannot be disabled without severely impairing Platform functionality.
• Analytics Cookies: These cookies collect aggregated, anonymised data about how visitors use the Platform — such as which pages are visited most frequently and how long sessions last. This data is used solely to improve Platform performance and user experience.
• Preference Cookies: These cookies remember your account settings and display preferences so that the Platform behaves consistently across sessions.
• Security Cookies: These cookies support fraud detection and prevention by identifying unusual patterns in session behaviour that may indicate account compromise or bot activity.

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will affect your ability to use core Platform features, including account login and payment processing. Analytics and preference cookies may be disabled without affecting core functionality.

tg999 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Our security infrastructure includes:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted in transit using industry-standard SSL/TLS protocols.
• Encrypted Data Storage: Sensitive personal data — including identity documents, financial account numbers, and authentication credentials — is stored in encrypted form at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. Only authorised tg999 personnel with a defined operational requirement may access personal data, and all access events are logged for audit purposes.
• Two-Factor Authentication (2FA): Internal tg999 systems that process personal data are protected by multi-factor authentication for all staff accounts.
• Penetration Testing: The Platform and its underlying infrastructure undergo regular third-party penetration testing and vulnerability assessments to identify and remediate security weaknesses.
• Incident Response: tg999 maintains a documented data breach response procedure. In the event of a security incident involving personal data, affected players will be notified within 72 hours where required by applicable law.

While tg999 takes every reasonable precaution to protect your data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials. tg999 will never ask for your password via email, live chat, or any other communication channel.

tg999 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. Once the applicable retention period has expired, data is securely deleted or anonymised.

Our standard retention periods are as follows:

• Account Data: Retained for the duration of your active account relationship with tg999, plus a minimum of 5 years following account closure to satisfy legal and AML record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of 7 years from the date of the transaction, in accordance with financial record-keeping requirements applicable to payment service activities.
• KYC and Identity Verification Documents: Retained for the duration of your active account plus a minimum of 5 years following account closure.
• Customer Support Communications: Retained for 3 years from the date of the most recent interaction, or longer where the communications are relevant to an ongoing dispute or legal proceeding.
• Technical and Log Data: Server logs and session data are retained for a rolling period of 12 months, after which they are automatically deleted or anonymised.
• Marketing Consent Records: Retained for the duration of your marketing consent, plus 2 years following withdrawal of consent, as evidence of the consent history.

As a user of the tg999 Platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact the tg999 support team at [email protected]. We will respond to all valid requests within 30 calendar days.

• Right of Access: You have the right to request a copy of all personal data that tg999 holds about you, along with information about the purposes for which it is processed and the categories of recipients with whom it has been shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. You may update basic account details directly from your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where: it is no longer necessary for the purpose for which it was collected; you withdraw the consent on which processing was based; or the processing was unlawful. Erasure requests are subject to our legal retention obligations.
• Right to Restriction of Processing: You may request that tg999 restricts the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or where processing is unlawful but you prefer restriction over deletion.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling for fraud prevention purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent — such as marketing communications — you may withdraw that consent at any time without detriment. Withdrawal does not affect the lawfulness of prior processing.

The tg999 Platform is strictly intended for adults aged 21 and above. tg999 does not knowingly collect, process, or store the personal data of any person under the age of 21. Age verification is a mandatory step in the account registration process and is enforced throughout a player's account lifecycle.

If tg999 discovers or has reason to believe that an account has been registered by, or personal data has been submitted by, a person under the age of 21, the account will be immediately suspended, all associated personal data will be deleted, and any funds in the account will be handled in accordance with applicable legal obligations.

If you are a parent or guardian and believe that a minor in your care has registered an account or submitted personal data to tg999, please contact our support team immediately at [email protected]. We will investigate and act promptly.

The tg999 Platform may contain references to third-party services such as payment providers (bKash, Nagad, Rocket, Upay) and game studios. These third parties operate their own websites and platforms, which are governed by their own independent privacy policies. tg999 has no control over, and accepts no responsibility for, the data practices of any third-party platform.

We strongly encourage you to review the privacy policies of any third-party service you interact with in connection with your use of the tg999 Platform — particularly mobile financial service providers through which you make deposits or withdrawals. tg999's obligations under this Privacy Policy extend only to data processed directly by tg999 or its authorised data processors acting on our behalf.

The inclusion of a reference to a third-party service on the tg999 Platform does not constitute an endorsement of that service's privacy practices or data handling standards.

tg999 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, operational requirements, or applicable legal obligations. When we make changes to this Policy, the revised version will be published on this page with an updated effective date displayed at the top of the document.

Where changes are material — meaning they significantly affect how we process your personal data or alter your rights — we will notify you in advance via email or an in-Platform notification, providing you with a reasonable period to review the changes before they take effect.

Your continued use of the tg999 Platform following the effective date of a revised Policy constitutes your acceptance of the updated terms. If you do not agree with any revision to this Policy, you must cease using the Platform and may request account closure by contacting the tg999 support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data by tg999, please contact our support team using the following channels:

• Email: [email protected] — for data rights requests, privacy concerns, and policy enquiries. Responses within 30 calendar days for data rights matters, and within 24 hours for general enquiries.
• Live Chat: Available 24 hours a day, 7 days a week, directly within the tg999 Platform after login. Average response time under 5 minutes.
• Postal Address: All written correspondence related to data privacy should be addressed to the tg999 Privacy and Data Protection Team at the registered address provided during the account registration process.

When submitting a data rights request, please include your registered account username and a clear description of the right you wish to exercise. We will verify your identity before processing the request to ensure the security of your personal data.