tp999 Privacy Policy — How We Collect, Use, and Protect Your Personal Data

1 Introduction

tp999 is committed to protecting the privacy and personal data of every individual who visits or registers on our platform. This Privacy Policy applies to all personal data collected through the tp999 website at tp999.io, including all games, sportsbook features, account management functions, promotional activities, and customer support interactions.

This policy is written in English and is intended to be clear, accurate, and accessible to all tp999 players, including those based in Bangladesh. Where technical or legal terms are unavoidable, we have provided plain-language explanations. This Privacy Policy is to be read in conjunction with the tp999 Terms & Conditions and Responsible Gaming Policy, both of which are available on the tp999 website.

tp999 acts as the data controller in respect of all personal data collected via the platform. As data controller, tp999 determines the purposes and means by which personal data is processed, and bears primary responsibility for ensuring that such processing complies with applicable data protection standards.

2 Data We Collect

tp999 collects the following categories of personal data from players, prospective players, and website visitors:

2.1 Registration and Identity Data

When you create a tp999 account, we collect the personal information you provide during the registration process. This includes your full legal name, date of birth, residential address (including city — for example, Dhaka, Chittagong, Sylhet, Khulna, or Rajshahi), email address, and mobile phone number. This data is required to create and maintain a valid tp999 account and to fulfil our identity-verification obligations.

2.2 Identity Verification (KYC) Documents

To comply with our Know Your Customer obligations and to verify that players are aged 21 or above, tp999 may request copies of government-issued identification documents. These may include your National ID card, passport, or driver's licence, along with supporting proof-of-address documentation such as a utility bill or bank statement. KYC documents are stored securely and accessed only by authorised compliance personnel.

2.3 Financial and Transaction Data

tp999 collects records of all financial transactions made on the platform, including deposits and withdrawals. For mobile wallet transactions via bKash, Nagad, Rocket, and Upay, we retain tokenised transaction reference numbers and the associated BDT amounts. We do not store mobile wallet PINs, full account numbers beyond the last four digits, or any bank login credentials. For bank transfer transactions above ৳10,000, we retain the transaction reference and the name on the originating account for reconciliation purposes.

2.4 Gameplay and Betting Activity

tp999 maintains detailed records of all betting and gaming activity conducted on the platform. This includes bet amounts, game selections, wager outcomes, session durations, and betting history on all cricket sportsbook markets including BPL, IPL, T20 World Cup, and Bangladesh Tigers fixtures. This data is used to provide the platform service, settle bets accurately, detect fraud and bonus abuse, and comply with record-keeping obligations.

2.5 Technical and Device Data

When you access the tp999 platform, we automatically collect certain technical data about your device and connection. This includes your IP address, browser type and version, operating system, device identifier, screen resolution, referring URL, pages visited, and session timestamps. This data is used for platform security, fraud prevention, performance optimisation, and aggregate analytics.

2.6 Communications Data

If you contact the tp999 customer support team, we collect and retain records of all communications, including the content of support enquiry emails, live chat transcripts, and any attachments you provide. This data is used to resolve your enquiry, improve our support service, and maintain a record of interactions where relevant to account history.

2.7 Responsible Gaming Data

Where a player activates responsible gaming tools — such as deposit limits, session time limits, cooling-off periods, or self-exclusion — tp999 records the player's elections and the dates on which they took effect. This data is used solely to enforce the player's stated preferences and to monitor compliance with self-exclusion requests.

3 How We Collect Data

tp999 collects personal data through the following means:

tp999 does not purchase personal data from data brokers or acquire personal data from social media platforms without your explicit consent.

4 Legal Basis for Processing

tp999 processes personal data on the basis of one or more of the following legal grounds, depending on the specific processing activity:

• Contractual Necessity: Processing that is required to fulfil the contract between tp999 and the player — including account creation, transaction processing, bet settlement, and customer support — is carried out on the basis of contractual necessity. Without this processing, tp999 cannot provide the platform service.
• Legal Obligation: Certain processing activities — in particular KYC identity verification, financial transaction record-keeping, and responsible gaming compliance — are carried out to fulfil tp999's obligations under applicable law and regulatory requirements.
• Legitimate Interests: tp999 processes certain technical and behavioural data — including fraud detection, security monitoring, platform performance analytics, and bonus-abuse prevention — on the basis of its legitimate interests in operating a secure and commercially viable platform, provided those interests are not overridden by the rights and interests of the player.
• Consent: Where tp999 sends players optional marketing communications about promotions or new game launches, it does so only on the basis of the player's explicit prior consent. Players may withdraw marketing consent at any time by contacting [email protected].

5 How We Use Your Data

tp999 uses the personal data it collects for the following specific purposes:

• To create, verify, and maintain your tp999 player account.
• To process deposits and withdrawals in BDT via supported payment methods including bKash, Nagad, Rocket, and Upay.
• To verify your identity and age (21+) in accordance with our KYC obligations.
• To settle bets placed on casino games and cricket sportsbook markets accurately and in accordance with the applicable rules.
• To detect and investigate suspected fraudulent activity, money laundering, bonus abuse, and breaches of the tp999 Terms & Conditions.
• To enforce responsible gaming tools elected by the player, including deposit limits, cooling-off periods, and self-exclusion.
• To provide customer support and resolve account enquiries and complaints.
• To send transactional communications directly related to your account, such as deposit confirmations, withdrawal notifications, and security alerts.
• To send optional promotional communications about tp999 bonuses and new game releases, where you have provided explicit consent.
• To monitor, analyse, and improve the technical performance of the tp999 platform.
• To fulfil legal and regulatory record-keeping obligations applicable to the tp999 operation.

6 Data Sharing & Disclosure

tp999 does not sell, rent, or otherwise transfer your personal data to external parties for their own marketing or commercial purposes. tp999 may share personal data with third parties only in the following strictly defined circumstances:

6.1 Payment Processing Partners

To process your BDT deposits and withdrawals, tp999 shares the minimum necessary transaction data with licensed payment service providers including the operators of bKash, Nagad, Rocket, and Upay mobile wallet platforms, as well as partner banks including Dutch-Bangla Bank, City Bank, and BRAC Bank. These partners are bound by their own regulatory obligations and data protection commitments.

6.2 Identity Verification Services

tp999 may engage third-party KYC and identity-verification service providers to assist with document verification and age-confirmation processes. These providers process identity data strictly on tp999's behalf and under contractual obligations of confidentiality and data protection.

6.3 Technology and Infrastructure Providers

tp999 uses third-party technology providers for hosting, server infrastructure, cybersecurity monitoring, and platform analytics. These providers act as data processors operating under data-processing agreements with tp999 and are not permitted to use player data for any purpose other than the contracted service.

6.4 Game Content Providers

Games on the tp999 platform are supplied by licensed third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. In delivering their game content, these providers may receive session-level technical data necessary to render and run the game. They do not receive your full registration profile or financial account details.

6.5 Legal and Regulatory Disclosure

tp999 may disclose personal data to government authorities, law enforcement agencies, or regulatory bodies where required to do so by applicable law, court order, or other legally binding mandate. In such cases, tp999 will disclose only the minimum data necessary to comply with the legal requirement.

6.6 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of the assets of the tp999 business, player personal data may be transferred to the acquiring entity as part of the transaction, subject to equivalent data protection commitments being maintained.

7 Cookies & Tracking Technologies

The tp999 platform uses cookies and similar tracking technologies to deliver and improve the platform service. Cookies are small data files stored on your device by your browser when you visit the tp999 website.

7.1 Essential Cookies

Essential cookies are strictly necessary for the tp999 platform to function. They maintain your logged-in session, remember your language and currency preferences, and ensure that security features operate correctly. Essential cookies cannot be disabled without affecting the fundamental functionality of the platform.

7.2 Analytics Cookies

tp999 uses analytics cookies to collect aggregate, anonymised information about how visitors interact with the platform. This data helps us understand which pages and features are most used, where players encounter difficulties, and how platform performance can be improved. Analytics data is processed in aggregate form and is not linked to individual player identities.

7.3 Functional Cookies

Functional cookies remember choices you make on the platform — such as game lobby filters or display preferences — so that you do not need to reconfigure them each time you visit. These cookies improve the usability of your tp999 experience but are not strictly essential to platform operation.

7.4 Managing Cookies

You may configure your browser to refuse some or all cookies, or to alert you when cookies are being set. Please note that disabling essential cookies will impair your ability to use the tp999 platform, including the ability to log in and place bets. Instructions for managing cookies are available in the help documentation of all major browsers.

8 Data Storage & Security

tp999 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Key measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and tp999 servers is encrypted using industry-standard Transport Layer Security (TLS) protocols.
• Encrypted Data at Rest: Sensitive personal data stored on tp999 servers — including KYC documents and financial transaction records — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within tp999's internal systems is restricted on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and regular data protection training.
• Firewall and Intrusion Detection: tp999's server infrastructure is protected by enterprise-grade firewalls and continuous intrusion detection monitoring.
• Regular Security Audits: tp999 conducts periodic internal security reviews and commissions independent technical assessments to identify and remediate potential vulnerabilities.
• Payment Data Tokenisation: tp999 does not store full mobile wallet account numbers or bank credentials. Payment data is represented as tokenised references provided by the respective payment partner.

While tp999 employs strong security practices, no online platform can guarantee absolute security. Players are strongly encouraged to maintain the security of their own tp999 account by using a strong, unique password and not sharing their login credentials with any third party.

9 Data Retention

tp999 retains personal data for the periods described below. After the applicable retention period expires, data is securely deleted or irreversibly anonymised.

Where a legal obligation or active dispute requires the retention of data beyond the standard period set out above, tp999 will retain the relevant data until the obligation or dispute is resolved, after which it will be deleted promptly.

10 Your Rights

As a tp999 player, you hold the following rights in respect of the personal data we hold about you. To exercise any of these rights, please contact the tp999 support team at [email protected] with the subject line "Data Rights Request" and a description of your request.

• Right of Access: You have the right to request a copy of the personal data tp999 holds about you, along with information about how it is being processed. tp999 will respond to verified access requests within 30 days.
• Right to Rectification: If any personal data tp999 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For straightforward corrections — such as updating a registered email address — this can be done via your account settings page.
• Right to Erasure: In certain circumstances, you have the right to request that tp999 delete your personal data. This right applies where the data is no longer necessary for the purpose it was collected, where you have withdrawn consent and there is no other legal basis for processing, or where the data has been unlawfully processed. The right to erasure does not apply where retention is required by legal obligation.
• Right to Restriction of Processing: You may request that tp999 restrict the processing of your personal data in certain circumstances, for example while a rectification request is being assessed or while you contest the legal basis for processing.
• Right to Data Portability: Where processing is based on your consent or on a contract between you and tp999, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: Where processing is based on tp999's legitimate interests, you have the right to object to that processing. tp999 will cease the relevant processing unless it can demonstrate compelling legitimate grounds that override your interests, or where processing is necessary for the establishment, exercise, or defence of legal claims.
• Right to Withdraw Consent: Where processing is based on your consent — for example, in respect of optional marketing communications — you may withdraw your consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

11 Children's Privacy

The tp999 platform is strictly intended for adults aged 21 years and above. tp999 does not knowingly collect, store, or process the personal data of any individual under the age of 21. If tp999 discovers that it has inadvertently collected personal data from a person under 21 years of age, it will immediately delete that data and permanently close the associated account.

If you believe that a person under the age of 21 has registered a tp999 account or provided personal data to tp999, please contact the support team immediately at [email protected] so that the matter can be investigated and resolved promptly. tp999 operates a robust age-verification process as part of its KYC procedures specifically to prevent underage individuals from accessing the platform.

12 Third-Party Links

The tp999 platform may contain references to third-party game providers, payment partners, and other services. This Privacy Policy applies exclusively to data collected directly by tp999 through the tp999 platform at tp999.io. tp999 does not control the privacy practices of third-party game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi, or of payment platform operators such as bKash, Nagad, or Rocket.

Players who interact with third-party services in connection with their tp999 account should review the privacy policies of those third parties independently. tp999 accepts no responsibility or liability for the data practices of any third-party operator.

13 Policy Amendments

tp999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or platform operations. Where material changes are made, tp999 will update the effective date displayed at the top of this page and will notify active registered players via the email address on file.

Your continued use of the tp999 platform following the publication of an updated Privacy Policy constitutes acceptance of the revised policy. If you do not agree with any amendment, you must cease using the platform and may request account closure in accordance with the tp999 Terms & Conditions.

14 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a complaint about the way tp999 has handled your personal data, please contact the tp999 Data Protection team using the details below:

tp999 takes all privacy complaints seriously. Upon receipt of a complaint, a member of the tp999 compliance team will investigate the matter and respond with a formal outcome within 30 days. Where the matter is complex, tp999 may extend this period by a further 30 days and will notify you accordingly.

If you are not satisfied with tp999's response to your complaint, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction. Players based in Bangladesh may contact the Bangladesh Telecommunication Regulatory Commission (BTRC) or seek independent legal advice regarding their data protection rights.