To999 Privacy Policy — Your Information How We Protect You

1 Introduction & Scope

To999 ("we", "us", "platform") is an online gaming service provider. This Privacy Policy applies to the to999 website (to999.fun), mobile app, and all associated digital services.

This policy is designed with Bangladesh-based users in mind and complies with all applicable laws and regulations. to999 believes transparency is the foundation of trust — which is why we are open about every aspect of how we handle your data.

• This policy applies to all registered and unregistered users of to999.
• To999 reserves the right to update this policy at any time. When changes are made, the date at the top of the page will be updated accordingly.
• For significant changes, you will be notified via email or a platform notification.

2 What Data We Collect

To999 only collects information that is genuinely necessary for providing services, ensuring security, and meeting legal obligations. We never collect excessive or unnecessary data.

3 How We Collect Information

To999 collects your information through several methods. We are fully transparent about each of them, and no data is collected without your consent.

• Directly from you: Information you provide directly when registering, logging in, completing deposit forms, or contacting support.
• Automatically: Device and usage data is collected while you use the platform via cookies, log files, and tracking technologies.
• Via Third Parties: Transaction confirmation data from payment processors (bKash, Nagad, Rocket) and KYC information from identity verification service providers.
• Cookies & Similar Technologies: Session cookies (to maintain login state), performance cookies (to analyze site speed), and functional cookies (to remember your preferences).

4 Purpose of Data Use

To999 uses your information only for specific, clearly defined, and lawful purposes. Details are outlined below:

• Service Delivery: Creating accounts, managing games, and processing deposits and withdrawals.
• Identity Verification: Age verification (18+) and KYC compliance.
• Security: Prevention of fraud, money laundering, and unauthorized access.
• Customer Support: Resolving your complaints and inquiries.
• Notification: Sending bonus offers, game updates, and important system messages.
• Analytics: Monitoring platform performance and improving service quality.
• Legal Obligations: Meeting requirements from government or regulatory authorities.

5 Data Sharing & Disclosure

To999 shares data only under strictly limited circumstances and exclusively with trusted partners. Your information is not shared with anyone outside the following cases:

• Payment Processors: Necessary information is shared with bKash, Nagad, and Rocket to process transactions.
• KYC Provider: With approved third parties for identity verification purposes.
• Law Enforcement: Where required by a court order or legal obligation.
• Technology Service Providers: Those providing hosting, cloud storage, and cybersecurity services operating under strict confidentiality agreements.

When sharing your data with third parties, to999 ensures they adhere to equivalent privacy standards. No third party may use your information for their own purposes.

6 Data Protection Measures

To999 uses industry-leading technology to protect your data. Our security framework is built in multiple layers so that if one layer is compromised, the others continue to keep your information safe.

• SSL/TLS Encryption: All data transmission between users and our servers is secured with 256-bit SSL encryption.
• Data Encryption: Sensitive data stored on servers is secured with AES-256 encryption.
• Firewall & DDoS Protection: Advanced firewall and DDoS protection systems are active 24 hours a day.
• Two-Factor Verification: Two-factor authentication (2FA) is available for account login.
• Security Audit: Regular third-party security audits and penetration testing are conducted.
• Staff Training: Only authorized personnel can access user data, and they undergo strict confidentiality training.

7 Data Retention Period

To999 does not retain your data longer than necessary. Retention periods depend on the type of information and applicable legal requirements.

• Active account data: retained for the full duration the account remains active.
• After account closure: generally up to 5 years due to legal obligations.
• Financial transaction records: minimum 7 years (in accordance with anti-money laundering laws).
• Log files and technical data: up to 12 months.
• Marketing preferences: until you withdraw your consent.

Once the specified retention period expires, your data is securely deleted or anonymized so it can no longer be linked to your identity.

8 Your Rights

Under to999's Privacy Policy, you have several important rights over your own data. We respect these rights and have processes in place to help you exercise them.

• Right of AccessYou may request to view the information we hold about you at any time.
• Right to RectificationYou can contact us to correct any inaccurate or incomplete information we hold about you.
• Right to ErasureYou may request deletion of your data where there is no legal obligation to retain it.
• Right to Restrict ProcessingYou may restrict how your data is processed under certain circumstances.
• Right to PortabilityYou may request a copy of your data in a structured, machine-readable format.
• Right to ObjectYou may opt out of marketing communications or personalized advertising.

9 Cookie Policy

To999 uses cookies and similar tracking technologies to enhance your platform experience. Cookies are small text files stored in your browser.

• Essential Cookies: Essential for maintaining login sessions and security — these cannot be disabled.
• Functional Cookies: For remembering language preferences, theme settings, and similar choices.
• Analytics Cookies: To analyze site usage (anonymized data).

You can disable non-essential cookies at any time through your browser settings. Note that some features may not work as a result.

10 Privacy of Minors

To999 is strictly prohibited for anyone under the age of 18. We never knowingly collect information from minors.

• Age verification is mandatory during the registration process.
• If a user is found to be under 18 years of age, their account and all collected data will be deleted immediately.
• If parents believe their child has submitted information on our platform, they are welcome to contact us immediately.

11 International Data Transfers

To999 primarily serves users in Bangladesh. However, for technical reasons, some data may be stored on international servers.

• For international data transfers, we ensure that equivalent data protection measures are in place in the destination country.
• Strict data processing agreements are maintained with all cloud service providers.
• All data transfers are protected with encryption at all times.

12 Policy Changes & Contact

To999 may update this Privacy Policy from time to time. We will notify you before any significant changes take effect.

• The date of any changes will always be noted at the top of the page.
• For major changes, you will be notified in advance via email or platform notification.
• Continued use of the platform after changes take effect constitutes acceptance of the updated policy.

For any questions or concerns about our Privacy Policy, please get in touch with us: