Privacy Policy

1 Introduction and Scope

This Privacy Policy is issued by au999 ("au999", "we", "us", "our") and applies to all personal data collected from individuals ("players", "users", "you") who access, register with, or use the au999 online gaming platform accessible at au999.bio, including all associated pages, features, services, games, and communications channels.

This Privacy Policy describes the types of personal information we collect, the purposes for which that information is used, the parties with whom it may be shared, the security measures we apply to protect it, and the rights you hold as a data subject. By creating an account on au999 or by continuing to use our platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

This policy applies to all players located in Bangladesh and any other jurisdiction from which the au999 platform is lawfully accessible. It covers data collected through the au999.bio website, any future mobile applications operated by au999, communications sent to or received from players, and data obtained from third-party partners in connection with player activity on the platform.

If you do not agree with any aspect of this Privacy Policy, you should cease using the au999 platform and contact our support team to request account closure and data deletion.

2 Data Controller Information

For the purposes of data protection law, au999 is the data controller responsible for determining how and why your personal data is processed. All data-related enquiries, access requests, and formal complaints should be directed to the au999 data protection contact:

3 Personal Data We Collect

au999 collects personal data through multiple channels in the normal course of operating the platform. The categories of personal data we collect are set out below.

3.1 Registration and Identity Data

When you create an au999 account, we collect the following information:

• Full legal name as it appears on your government-issued identification document.
• Date of birth (used to verify that you meet the 21+ age requirement).
• Residential address in Bangladesh, including city or district (Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar).
• Mobile phone number registered in Bangladesh.
• Email address for account communication and password recovery.
• Chosen username and encrypted password (passwords are hashed and are never stored in plain text).

3.2 Identity Verification (KYC) Data

To comply with Know Your Customer requirements and prevent fraud, au999 may request the following documents:

• Copy of a government-issued photo identification document, such as your Bangladesh National Identity Card (NID), passport, or driving licence.
• Proof of residential address, such as a recent utility bill, bank statement, or government correspondence dated within the last three months.
• Screenshots or photographs of your registered bKash, Nagad, Rocket, or Upay account interface showing your name and registered mobile number.

These documents are collected to verify your identity, confirm your age, and ensure that deposits and withdrawals are processed to accounts registered in your own name. Uploaded verification documents are stored securely and are accessible only to authorized compliance personnel.

3.3 Payment and Financial Data

When you deposit or withdraw funds, we collect:

• Payment method details including your registered mobile banking account number (bKash, Nagad, Rocket, or Upay).
• Transaction history including deposit amounts, withdrawal amounts, timestamps, and transaction reference numbers.
• Account balance information and currency selection (Bangladeshi Taka).

Financial data is processed by our secure payment partners. au999 does not store full payment credentials such as PINs or security codes. We retain transaction records for audit, compliance, and dispute resolution purposes.

3.4 Gaming Activity Data

During your use of the au999 platform, we automatically collect data about your gaming behavior, including:

• Games played (cricket betting, slots, live casino, Tower, Sports Events, and other categories).
• Bets placed including stake amounts, odds accepted, bet types, and bet outcomes.
• Winnings, losses, and overall gaming session statistics.
• Bonus and promotion participation including bonus acceptance, wagering progress, and bonus conversion rates.
• Session duration, frequency of play, and time-of-day patterns.

This gaming activity data is used to personalize your experience, detect unusual or suspicious betting patterns, enforce responsible gaming limits, and improve platform performance. It also helps au999 identify potential problem gambling behaviors and intervene proactively to offer responsible gaming support tools.

3.5 Technical and Device Data

We automatically collect technical information when you access the au999 platform:

• IP address and approximate geolocation (city-level, not precise GPS coordinates).
• Device type, operating system, and browser information.
• Screen resolution, language preference, and time zone settings.
• Referral source (how you arrived at au999.bio, such as direct navigation, search engine, or external link).
• Pages visited, features used, and navigation patterns on the platform.
• Cookies and similar tracking technologies (see Section 9 for detailed cookie information).

This technical data allows us to optimize the platform for different devices, troubleshoot technical issues, detect fraudulent access attempts, and understand how players interact with different features. Technical data is typically aggregated and anonymized for analytical purposes.

3.6 Communications Data

If you contact au999 support via email or in-platform chat, we collect:

• The content of your messages, questions, and support requests.
• Timestamp and channel of communication (email, chat, or feedback form).
• Any attachments, screenshots, or documents you provide to support your inquiry.

Communications data is retained for quality assurance, training purposes, and dispute resolution. Support conversations may be reviewed by supervisory personnel to ensure service quality.

4 How We Use Your Personal Data

au999 processes your personal data for the following purposes, each of which is based on a lawful ground under applicable data protection law:

Purpose	Legal Basis
To create and manage your au999 account	Performance of contract
To process deposits and withdrawals via bKash, Nagad, Rocket, and Upay	Performance of contract
To verify your identity and comply with KYC obligations	Legal obligation and legitimate interests (fraud prevention)
To enforce the 21+ age requirement	Legal obligation
To allow you to place bets and play games on the platform	Performance of contract
To detect and prevent fraud, money laundering, and collusion	Legal obligation and legitimate interests
To monitor for problem gambling and offer responsible gaming tools	Legal obligation and legitimate interests
To send service-related notifications (account confirmations, withdrawal approvals, security alerts)	Performance of contract and legitimate interests
To send marketing communications about bonuses and promotions (only with your consent)	Consent (you may withdraw at any time)
To improve platform functionality and user experience	Legitimate interests
To respond to support requests and resolve disputes	Performance of contract and legitimate interests
To comply with legal and regulatory obligations	Legal obligation

5 Data Sharing and Third-Party Disclosure

au999 does not sell or rent your personal data to third parties for their own marketing purposes. However, we may share your personal information with the following categories of recipients in limited circumstances:

5.1 Payment Service Providers

Your payment data is shared with bKash, Nagad, Rocket, and Upay as necessary to process your deposit and withdrawal transactions. These payment partners operate under their own privacy policies and security standards.

5.2 Gaming Platform and Software Providers

au999 partners with third-party game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi to deliver slots, live casino games, and other entertainment content. These providers may receive anonymized or pseudonymized gameplay data for the purposes of game delivery, fairness verification, and performance optimization. They do not receive your full personal identity data unless required for jackpot claim verification.

5.3 Fraud Prevention and Security Services

We work with specialized fraud detection and anti-money laundering service providers who analyze patterns of account activity to identify suspicious behavior. These providers process data under strict confidentiality agreements and use it solely for security and compliance purposes.

5.4 Cloud Hosting and IT Service Providers

Personal data is stored on secure cloud infrastructure provided by trusted hosting partners who maintain ISO 27001 or equivalent security certifications. These providers have access to data only to the extent necessary to deliver hosting services and are bound by data processing agreements.

5.5 Legal and Regulatory Authorities

au999 may disclose personal data to law enforcement, tax authorities, regulatory bodies, or courts if required by law, if compelled by subpoena or court order, or if disclosure is necessary to prevent imminent harm, enforce our terms, or protect the rights and safety of au999, our players, or the public.

5.6 Business Transfers

In the event that au999 undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the acquiring entity or successor as part of the business transaction. You will be notified via email or platform notice if such a transfer occurs, and the acquiring entity will be required to honor the commitments made in this Privacy Policy.

6 Data Retention

au999 retains personal data for as long as necessary to fulfill the purposes for which it was collected and to comply with legal, accounting, and regulatory requirements. Specific retention periods are as follows:

• Account registration data: Retained for the duration of your active account plus 7 years after account closure for audit and regulatory compliance purposes.
• KYC and identity verification documents: Retained for 7 years after account closure to meet anti-money laundering record-keeping obligations.
• Transaction and financial records: Retained for 7 years after the transaction date for tax reporting, dispute resolution, and accounting purposes.
• Gaming activity logs: Retained for 5 years to support game integrity investigations and responsible gaming monitoring.
• Communications records: Retained for 3 years for quality assurance and dispute resolution.
• Marketing consent records: Retained for 2 years after consent is withdrawn to demonstrate compliance with marketing regulations.

After the applicable retention period expires, personal data is securely deleted or anonymized so that it can no longer be associated with an identifiable individual. If you request data deletion before the end of the standard retention period, we will anonymize your data where legally permissible, but may need to retain certain records to comply with mandatory legal obligations.

7 International Data Transfers

au999 primarily stores player data on servers located within secure data centers that may be physically located outside Bangladesh. If your personal data is transferred to jurisdictions outside Bangladesh, we ensure that adequate safeguards are in place, such as:

• Execution of Standard Contractual Clauses approved for international data transfers.
• Selection of data processors that maintain certifications equivalent to international data protection standards.
• Implementation of technical and organizational measures to protect data in transit and at rest.

You have the right to request information about the specific safeguards applied to your data transfers by contacting [email protected].

8 Your Data Protection Rights

As a player on the au999 platform, you have the following rights with respect to your personal data:

8.1 Right of Access

You have the right to request a copy of the personal data that au999 holds about you. We will provide this information in a structured, commonly used, and machine-readable format within 14 business days of your request.

8.2 Right of Rectification

If any personal information we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update many details directly in your account settings, or contact support for assistance.

8.3 Right to Erasure

You may request that au999 delete your personal data. We will comply with erasure requests unless we are required to retain the data for legal, accounting, or regulatory reasons. Note that exercising the right to erasure will result in permanent account closure.

8.4 Right to Restriction of Processing

You may request that we temporarily suspend processing of your data in certain circumstances, such as when you are disputing the accuracy of your data or challenging the lawfulness of processing.

8.5 Right to Data Portability

You have the right to receive a copy of the personal data you provided to au999 in a portable format, and to request that it be transmitted to another service provider where technically feasible.

8.6 Right to Object

You may object to processing of your data where we rely on legitimate interests as the legal basis. You can also object to marketing communications at any time by clicking the unsubscribe link in promotional emails or adjusting your account preferences.

8.7 Right to Withdraw Consent

Where processing is based on your consent (such as marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

To exercise any of these rights, please contact [email protected] with "Data Subject Request" in the subject line. We will respond within 14 business days and may request additional information to verify your identity before fulfilling the request.

9 Cookies and Tracking Technologies

au999 uses cookies, web beacons, and similar tracking technologies to enhance platform functionality, personalize your experience, and analyze usage patterns. Cookies are small text files stored on your device that allow the platform to recognize you on subsequent visits.

Types of Cookies We Use:

• Essential cookies: Required for platform functionality such as login sessions, account access, and shopping cart behavior. These cannot be disabled without severely impairing platform usability.
• Performance cookies: Collect anonymized information about how players use the platform to identify performance bottlenecks and optimize loading times.
• Functional cookies: Remember your preferences such as language selection, game favorites, and display settings.
• Targeting cookies: Track your browsing activity to deliver relevant promotional content and measure the effectiveness of marketing campaigns (only placed with your consent).

You may disable cookies through your browser settings, but this may reduce the functionality of the au999 platform. Most browsers accept cookies automatically; consult your browser's help documentation to learn how to modify cookie preferences.

10 Data Security Measures

au999 implements comprehensive technical and organizational security measures to protect your personal data against unauthorized access, loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Encrypted storage of sensitive data fields including passwords (hashed using bcrypt or equivalent) and payment credentials.
• Firewall protection and intrusion detection systems to prevent unauthorized network access.
• Regular security audits, vulnerability assessments, and penetration testing conducted by independent cybersecurity firms.
• Role-based access controls limiting employee access to personal data based on job function necessity.
• Mandatory security awareness training for all au999 staff who handle personal data.
• Secure backup procedures to prevent data loss while ensuring backups are also encrypted.

While we employ industry-leading security practices, no method of electronic storage or internet transmission is 100% secure. Players are encouraged to use strong, unique passwords, enable two-factor authentication where available, and never share login credentials with third parties.

11 Children's Privacy

The au999 platform is strictly intended for adults aged 21 years and older. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that a person under 21 has registered an account or provided personal information, we will immediately suspend the account, void all bets and transactions, and delete the associated personal data. Parents or guardians who believe that a minor has accessed the au999 platform should contact [email protected] immediately.

12 Changes to This Privacy Policy

au999 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or operational requirements. When we make material changes, we will notify registered players via email to the address on file and display a prominent notice on the au999.bio website. The "Last Updated" date at the top of this policy indicates when the most recent revision was made. Your continued use of the platform after a policy update constitutes acceptance of the revised terms. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.

13 Contact and Complaints

If you have questions, concerns, or complaints regarding this Privacy Policy or our data handling practices, please contact our data protection team at [email protected]. We will acknowledge your inquiry within 3 business days and provide a substantive response within 14 business days. If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority or supervisory body.