2k999 Privacy Policy — How We Collect, Use, and Protect Your Personal Data

1 About This Policy

This Privacy Policy ("Policy") describes how 2k999 ("we", "us", "our") collects, uses, stores, shares, and protects personal information relating to individuals ("you", "the Player", "the User") who access or use the 2k999 platform, including the website at 2k999.io, all associated mobile interfaces, betting services, casino games, and related features.

2k999 is committed to handling your personal data responsibly and transparently. This Policy is designed to give you clear, complete information about your data and your rights over it. We encourage you to read this Policy carefully and to contact us if you have any questions.

By creating a 2k999 account or using the platform in any capacity, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, you must not register an account or use the 2k999 platform.

2 Data We Collect

2k999 collects personal data that falls into the following categories. We collect only the minimum data required to operate the platform safely, process payments in BDT, comply with legal obligations, and provide a high-quality experience for Bangladeshi players.

2.1 Sensitive Data

2k999 does not intentionally collect special categories of sensitive personal data (such as health data, racial or ethnic origin, political opinions, or religious beliefs) as part of the standard registration or platform usage process. If you voluntarily disclose such information — for example, when citing a medical condition in connection with a responsible gaming request — it will be used solely for the purpose for which it was provided and handled with additional care.

3 How We Collect Your Data

2k999 collects personal data through the following channels:

3.1 Direct Collection

You provide data directly to 2k999 when you register an account, complete identity verification, make a deposit or withdrawal, contact customer support, respond to a survey, or participate in a promotion. All data you submit through these interactions is collected and stored by 2k999.

3.2 Automated Collection

When you visit and use the 2k999 platform, certain technical data is collected automatically through server logs, cookies, and analytics technologies. This includes your IP address, the pages you visit, the time you spend on the platform, and your device and browser information. This automated collection happens whether or not you are logged into an account.

3.3 Third-Party Sources

In some cases, 2k999 may receive personal data from trusted third-party sources. These include:

• Payment processors (bKash, Nagad, Rocket, Upay) confirming the completion of a transaction and the mobile number associated with the wallet used.
• Identity verification service providers who may confirm the validity of documents you submit for KYC purposes.
• Fraud prevention partners who may flag device identifiers or IP addresses associated with known fraudulent activity.

Data received from third-party sources is combined with data held in your 2k999 account and handled in accordance with this Privacy Policy.

4 How We Use Your Data

2k999 uses personal data for the following purposes. All processing is carried out on a lawful basis (see Section 5) and is limited to what is necessary for the stated purpose.

• Account Management: Creating and maintaining your player account, verifying your identity and age (21+), managing your profile settings, and enabling secure login.
• Payment Processing: Facilitating BDT deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard; recording transaction history; and resolving failed payment queries.
• Platform Operations: Delivering betting markets, casino games, live dealer sessions, and crash games; processing bet placements and settlements; distributing bonuses and promotional credits.
• Security and Fraud Prevention: Detecting and preventing unauthorised account access, duplicate account creation, bonus abuse, money laundering, and other prohibited conduct as defined in the Terms & Conditions.
• Responsible Gaming: Monitoring betting patterns for signs of problem gambling; enforcing deposit limits, cooling-off periods, and self-exclusion requests; flagging accounts that may require intervention.
• Customer Support: Responding to your enquiries, complaints, and dispute requests; providing account assistance via the 2k999 support team.
• Legal Compliance: Meeting applicable legal obligations including anti-money-laundering (AML) requirements, record-keeping obligations, and responding to lawful requests from authorities.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve the platform's features, performance, and user experience for players across Bangladesh.
• Communications: Sending transactional messages such as deposit confirmations, withdrawal notifications, and security alerts. Where you have consented, sending promotional communications about new games, offers, and seasonal promotions.

5 Legal Basis for Processing

2k999 processes your personal data on one or more of the following legal bases, depending on the nature of the processing activity:

• Contractual Necessity: Processing that is necessary to fulfil our contractual obligations to you as a registered 2k999 player — including account management, payment processing, and bet settlement.
• Legal Obligation: Processing required to comply with applicable laws, including AML obligations, identity verification requirements, and lawful authority requests.
• Legitimate Interests: Processing carried out for 2k999's legitimate business interests, provided those interests do not override your rights. This includes fraud detection, platform security, and aggregated analytics.
• Consent: Processing for which you have given us your explicit, freely-given consent — primarily marketing communications and optional analytics cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6 Sharing Your Data

2k999 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. We share data only where necessary to operate the platform and as described in this section.

6.1 Service Providers

We share data with carefully selected service providers who process data on our behalf and under our instruction. These include:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard for the purpose of processing your BDT deposits and withdrawals.
• Game technology providers: Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, Spribe, and Play'n GO — to facilitate the delivery of casino games, slots, and crash game sessions. These providers receive only the minimum data required (typically a pseudonymous player identifier) to run game sessions.
• Identity verification providers: Third-party KYC services used to verify identity documents submitted during account registration or withdrawal processing.
• Technology infrastructure providers: Cloud hosting and CDN partners who store and serve platform data under strict data processing agreements.

6.2 Legal Disclosures

2k999 may disclose personal data to government bodies, law enforcement agencies, or regulatory authorities where required to do so by applicable law or in response to a valid legal process. We will make reasonable efforts to notify you of such a request where permitted by law.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of 2k999's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified via the contact details registered on your account prior to any such transfer taking effect.

7 Payment Data

Given that 2k999 processes financial transactions in Bangladeshi Taka (BDT) via local mobile wallets and international card networks, the security of payment data is a top priority. The following specific measures and policies apply to financial data:

7.1 Mobile Wallet Transactions

When you make a deposit or withdrawal via bKash, Nagad, Rocket, or Upay, your mobile wallet number is recorded alongside the transaction amount and reference in your 2k999 account history. This number is used to verify that withdrawals are returned to the same wallet used for the original deposit, in line with our anti-money-laundering policy.

7.2 Card Transactions

For Visa and Mastercard deposits, 2k999 does not store your full card number, CVV, or card expiry date. Card payments are processed entirely through PCI-DSS compliant payment gateways. 2k999 retains only a masked card reference (typically the last 4 digits and card type) for record-keeping purposes.

7.3 Transaction Records

A complete record of all deposits, withdrawals, and bet transactions is maintained in your 2k999 account for a minimum of five years from the date of the transaction. This retention period is required for AML compliance and dispute resolution purposes.

8 Cookies & Tracking Technologies

2k999 uses cookies and similar tracking technologies on the platform to support essential functionality, maintain your session, and understand how the platform is used. The following types of cookies are in use:

8.1 Essential Cookies

These cookies are strictly necessary for the platform to function. They maintain your logged-in session, remember your account preferences, and protect against cross-site request forgery (CSRF) attacks. You cannot opt out of essential cookies while using the 2k999 platform — without them, the platform will not operate correctly.

8.2 Analytics Cookies

2k999 uses privacy-respecting, first-party analytics to understand how players navigate the platform — which pages are visited most frequently, where players exit, and how different features are used. This data is collected in aggregate and anonymised form. It is used solely to improve the platform and is not shared with third-party advertising networks.

8.3 Managing Cookies

You can control and delete cookies through your browser settings at any time. Note that disabling certain cookies may affect your experience on the 2k999 platform. For instructions on managing cookies in your browser, refer to your browser's help documentation.

9 Data Retention

2k999 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including compliance with legal retention obligations. The following general retention periods apply:

• Active account data: Retained for the full duration of your account's active status plus a minimum of five years following account closure.
• Transaction records: Retained for a minimum of five years from the date of each transaction, in line with AML record-keeping requirements.
• Identity verification documents: Retained for the duration of your account plus five years following closure, or longer if required by applicable law.
• Customer support records: Retained for three years from the date of the interaction, or longer if the interaction relates to an unresolved dispute or legal matter.
• Analytics data: Retained in anonymised, aggregated form for up to 24 months for platform improvement purposes.

When the applicable retention period expires, personal data is securely deleted or anonymised in accordance with 2k999's data disposal procedures.

10 Data Security

2k999 takes the security of your personal data seriously. We implement a range of technical and organisational security measures to protect your data against unauthorised access, disclosure, alteration, or destruction.

10.1 Encryption

All data transmitted between your device and the 2k999 platform is encrypted using 256-bit SSL/TLS encryption. Sensitive data stored in our systems — including identity documents and payment references — is encrypted at rest using industry-standard encryption algorithms.

10.2 Access Controls

Access to player personal data within 2k999 is restricted to authorised personnel on a strict need-to-know basis. All internal access to sensitive data is logged and subject to regular review. Employees with access to personal data are required to complete data protection training.

10.3 Security Monitoring

2k999 maintains continuous security monitoring of its platform infrastructure. Suspicious activity — including unusual login patterns, multiple failed authentication attempts, and abnormal transaction behaviour — triggers automated alerts and human review. In the event of a confirmed data breach that poses a risk to your rights and freedoms, 2k999 will notify affected players promptly.

10.4 Your Responsibility

While 2k999 implements strong security measures at the platform level, you are responsible for maintaining the security of your own account credentials. Use a strong, unique password for your 2k999 account, do not share your login details with anyone, and contact support immediately at [email protected] if you suspect unauthorised access to your account.

11 Your Rights Over Your Data

As a 2k999 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact the 2k999 support team at [email protected] with the subject line "Data Rights Request". We will respond within 30 days of receiving a valid request.

• Right of Access: You have the right to request a copy of the personal data that 2k999 holds about you, including your account data, transaction history, and any identity documents on file.
• Right to Rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. For account details such as your mobile number, you can update these directly from your account settings.
• Right to Erasure: You may request the deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected. Note that this right is subject to our legal retention obligations; we cannot delete transaction records that we are required by law to retain.
• Right to Restriction: In certain circumstances, you may request that we restrict the processing of your data — for example, while a dispute is being resolved.
• Right to Data Portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format for transfer to another service provider.
• Right to Object: You have the right to object to certain types of processing, including direct marketing communications. You may withdraw consent for marketing at any time with no effect on your ability to use the platform.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

12 Children & Minors

The 2k999 platform is strictly for individuals aged 21 years and above. 2k999 does not knowingly collect personal data from anyone under the age of 21. If you are a parent or guardian and you believe that a minor has registered a 2k999 account or provided personal data to 2k999 without your knowledge, please contact us immediately at [email protected].

Upon receiving a verified report of a minor's account, 2k999 will immediately close the account, cease processing the associated personal data, and arrange for any deposited funds to be returned to the original payment channel. Device-level parental controls are recommended to prevent minors from accessing online gambling platforms.

13 Third-Party Links

The 2k999 platform may contain references to third-party game providers, payment services, or other external entities. Where such references include links (for example, links to a payment provider's own terms of service), those external websites are governed by their own privacy policies. 2k999 is not responsible for the privacy practices of any third-party website or service. We encourage you to review the privacy policy of any external site before providing personal data to it.

14 Updates to This Privacy Policy

2k999 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. When a material update is made, we will notify registered players via the mobile number or email address on their account, and we will publish the revised Policy on this page with an updated effective date.

Your continued use of the 2k999 platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with a revised Policy, you must cease using the platform and request account closure in accordance with the Terms & Conditions.

We recommend reviewing this page periodically to stay informed about how 2k999 handles your personal data. The version number and last-updated date at the top of this Policy indicate when the most recent revision was made.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or 2k999's data processing practices, please contact us using the following details:

• Email: [email protected] (plain text — this is not a clickable link)
• Subject Line for Data Requests: "Data Rights Request" or "Privacy Enquiry"
• Response Time: Within 30 days for data rights requests; within 24 hours for general privacy enquiries
• Support Language: English
• Hours: 24 hours a day, 7 days a week

For urgent account security concerns — such as suspected unauthorised access or a data breach affecting your account — please mark your message as urgent and include "URGENT — Security" in the subject line for priority handling.