sp999 Privacy Policy — Your Data, Your Rights

When you register an account or use certain features of sp999, you provide personal data to us directly. This includes:

• Identity information: your full legal name, date of birth, and national identity number as required for KYC verification.
• Contact information: your mobile phone number (Bangladesh), email address, and residential address.
• Payment information: the mobile financial service account (bKash, Nagad, Rocket, Upay) or bank account details you use for deposits and withdrawals. sp999 does not store full card numbers; payment data is processed via secure third-party payment processors.
• Identity verification documents: copies of national identity card, passport, or other government-issued photo ID as required for KYC compliance.

When you use sp999, certain data is collected automatically through your device and browser. This includes:

• Technical data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage data: pages visited, features used, games played, bets placed, session duration, login timestamps, and clickstream data.
• Cookie and tracking data: session cookies, persistent cookies, and similar tracking technologies as described in Section 5 of this Policy.

In limited circumstances, sp999 may receive personal data about you from third parties, including:

• Identity verification providers: third-party KYC and AML screening services used to verify the identity and background of new account holders.
• Payment processors: transaction confirmation data and payment status information received from bKash, Nagad, and other payment service providers.
• Fraud prevention services: data from fraud detection and prevention service providers used to protect the integrity of the platform.

sp999 uses your personal data for the following purposes:

• Account management: to create, verify, and maintain your sp999 account, including processing your identity documents during KYC review.
• Service delivery: to provide the games, sports betting markets, live casino, deposits, withdrawals, bonus crediting, and customer support services you request.
• Security and fraud prevention: to detect, prevent, and investigate suspicious activity, account fraud, bonus abuse, money laundering, and other prohibited conduct.
• Responsible gaming: to monitor gaming behaviour and enforce responsible gaming tools including deposit limits, session reminders, and self-exclusion where applicable.
• Legal and regulatory compliance: to comply with applicable anti-money laundering laws, age verification obligations, and any lawful requests from regulatory or law enforcement authorities.
• Communications: to send you transactional notifications (deposit confirmations, withdrawal updates, security alerts), service announcements, and — where you have opted in — promotional communications about bonuses and offers.

sp999 will only send you promotional and marketing communications if you have expressly opted in to receive them at registration or via your account settings. You may withdraw consent for marketing communications at any time by updating your notification preferences in your account settings or by contacting the support team at [email protected]. Withdrawal of consent for marketing does not affect the lawfulness of any processing carried out before consent was withdrawn, and it does not affect transactional notifications which are sent as part of the service.

sp999 processes your personal data on the following legal grounds depending on the purpose of processing:

• Contractual necessity: processing required to perform the contract between you and sp999 — including account creation, game access, payment processing, and customer support.
• Legal obligation: processing required to comply with applicable law, including KYC/AML obligations, age verification, and responding to lawful requests from authorities.
• Legitimate interests: processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement — where these interests are not overridden by your fundamental rights.
• Consent: processing for marketing communications and non-essential cookies — where you have given your express consent, and which you may withdraw at any time.

sp999 does not sell your personal data. We share personal data only in the following circumstances and with the following categories of recipients:

• Payment service providers: bKash, Nagad, Rocket, Upay, and partner banks — to process your deposits and withdrawals. These providers receive only the data necessary to complete the transaction.
• Identity verification and KYC/AML providers: third-party services used to verify your identity and screen for financial crime risk as required by applicable compliance obligations.
• Technology and infrastructure providers: cloud hosting, security, and platform technology providers that process data on our behalf under strict contractual data processing agreements.
• Regulatory and law enforcement authorities: where required by applicable law, court order, or lawful request from a regulatory or law enforcement body. sp999 will notify you of such a disclosure where it is legally permitted to do so.

Where personal data is transferred to service providers located outside Bangladesh, sp999 ensures that adequate safeguards are in place to protect your data, including contractual protections that require those providers to handle your data to the same standard as sp999 does under this Policy. sp999 does not transfer personal data internationally without first ensuring that appropriate data protection measures are in place.

sp999 uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyse usage patterns. We use the following categories of cookies:

• Strictly necessary cookies: essential for the platform to function — these include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
• Performance and analytics cookies: used to understand how players interact with sp999 — including which pages are most visited, how long sessions last, and where errors occur. This data is aggregated and anonymised where possible.
• Functional cookies: used to remember your preferences such as language settings, game display options, and responsible gaming limits you have set during your session.

You may manage your cookie preferences through your browser settings. Please note that disabling certain categories of cookies may affect the functionality of some features on sp999. Strictly necessary cookies cannot be disabled via browser settings as they are essential to deliver the service.

sp999 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include SSL/TLS encryption for all data in transit, encrypted storage for sensitive personal data at rest, strict access controls limiting data access to authorised personnel only, regular security audits and penetration testing, and multi-factor authentication for administrative access to systems holding personal data.

Despite these measures, no data transmission over the internet or electronic storage system is completely secure. sp999 cannot guarantee absolute security of your personal data. In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, sp999 will notify you without undue delay and will take all reasonable steps to contain and remediate the breach.

sp999 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. Account data is retained for the duration of your account's active status and for a period of up to 7 years after account closure to comply with applicable AML record-keeping obligations. Transaction records are retained for a minimum of 5 years in accordance with financial crime prevention standards.

Where personal data is no longer required for any lawful purpose, sp999 will securely delete or anonymise it. Anonymised data (data from which all identifying information has been permanently removed) may be retained indefinitely for statistical and analytical purposes without restriction, as it no longer constitutes personal data.

sp999 is strictly an adults-only platform for players aged 21 and above. We do not knowingly collect, store, or process personal data from any individual under the age of 21. Age verification is a mandatory part of the account registration process. If sp999 becomes aware that personal data has been inadvertently collected from a person under the age of 21, that data will be deleted immediately and the account will be closed. If you believe that a person under 21 has registered on sp999, please contact us at [email protected] immediately.

The sp999 platform may integrate with or reference third-party services, including payment processors (bKash, Nagad) and game content providers. These third parties operate under their own independent privacy policies, and sp999 is not responsible for the data practices of any third party. When you interact with a third-party service through sp999, you do so subject to that third party's own terms and privacy policy. sp999 recommends that you review the privacy policies of all third-party services you interact with.

sp999 reserves the right to update or amend this Privacy Policy at any time. The most current version of this Policy will always be available at sp999.net/privacy-policy, with the effective date noted at the top of the page. Where changes are material, sp999 will endeavour to notify registered users via email or an on-platform notification before the changes take effect. Your continued use of sp999 after a revised Policy has been published constitutes your acceptance of the updated Policy. If you do not agree with any update to this Policy, you must stop using sp999 and may request account closure.