tc999 Privacy Policy

tc999 ("we", "us", "our") operates the online betting and casino platform accessible at https://tc999.io (the "Platform"). This Privacy Policy sets out how tc999 collects, uses, stores, discloses, and protects the personal information of individuals who register as members of, or otherwise interact with, the tc999 Platform.

This Privacy Policy applies to all personal data collected through the tc999 website, its mobile browser interface, customer support communications, and any other point of contact through which you provide information to tc999. It should be read in conjunction with the tc999 Terms & Conditions, which govern your use of the Platform as a whole.

tc999 is committed to handling personal data responsibly and in accordance with internationally recognised data protection principles. We have designed our data practices to align with the standards set out in the General Data Protection Regulation (GDPR) as a benchmark for responsible data handling, even where local law may not impose identical requirements.

If you have any questions about how tc999 handles your personal data, or if you wish to exercise any of the rights described in Section 9 of this Policy, please contact our Data Privacy team at [email protected].

tc999 collects the following categories of personal data from members and Platform visitors:

2.1 Registration and Identity Data. When you create a tc999 account, we collect your full legal name, date of birth, residential address, email address, and mobile phone number. This information is required to establish your identity, confirm your eligibility to use the Platform (including age verification), and administer your account.

2.2 Identity Verification Documents. In connection with our verification obligations, tc999 may collect copies of government-issued identity documents (such as a National ID card or passport), utility bills, or other documents confirming your identity and residential address. These documents are used solely for verification purposes and are handled with the highest level of security.

2.3 Financial Data. tc999 collects information about the payment methods you use to deposit and withdraw funds, including your bKash account number, Nagad account number, Rocket account number, Upay account details, bank account information, or card details (Visa/Mastercard). We do not store full card numbers on our servers; payment card data is handled directly by our PCI-compliant payment processors.

2.4 Transaction Data. We maintain records of all deposits, withdrawals, bets placed, games played, bonuses credited, and other financial transactions associated with your tc999 account. This data forms part of the account record and is used for account administration, dispute resolution, and fraud prevention.

2.5 Usage and Technical Data. When you access the tc999 Platform, we automatically collect certain technical information including your IP address, browser type and version, device type and operating system, screen resolution, referring URL, pages visited, session duration, and interaction events (such as clicks and scroll depth). This data is collected via cookies and similar technologies as described in Section 6.

2.6 Communications Data. When you contact tc999 customer support via email, live chat, or any other channel, we retain a record of the communication including the content of messages exchanged and any attachments provided. This data is used to resolve your enquiry and to improve our support quality.

2.7 Responsible Gaming Data. If you use any of tc999's responsible gaming tools — such as setting deposit limits, requesting a cooling-off period, or applying for self-exclusion — we record the details of these requests and the settings applied. This data is used solely to administer the relevant restriction and to protect your welfare.

tc999 collects personal data through the following channels:

• Directly from you — when you complete the tc999 registration form, submit verification documents, make a deposit or withdrawal request, contact customer support, or use any interactive feature of the Platform;
• Automatically through the Platform — when you browse or interact with tc999, our servers and analytics tools automatically record technical and usage data as described in Section 2.5;
• From payment service providers — when you initiate a deposit or withdrawal, your payment provider (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, Visa/Mastercard processor) shares transaction confirmation data with tc999 to facilitate the payment;
• From identity verification services — where tc999 uses third-party electronic verification tools to assist with confirming the authenticity of identity documents submitted by members;
• From fraud prevention and security partners — tc999 may receive data from fraud detection services to help identify suspicious access patterns or potentially fraudulent activity associated with an account.

tc999 does not purchase marketing lists or otherwise obtain personal data about individuals from commercial data brokers for the purpose of unsolicited outreach.

tc999 processes personal data only where we have a legitimate legal basis to do so. The following table sets out the primary purposes for which tc999 processes personal data and the corresponding legal basis for each:

Where tc999 relies on legitimate interest as the legal basis for processing, we have assessed that the processing is necessary, proportionate, and does not override your fundamental privacy rights. You may request further information about our legitimate interest assessments at any time.

Where tc999 relies on your consent as the legal basis for processing (specifically, for promotional communications), you have the right to withdraw that consent at any time. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

tc999 does not sell or rent your personal data to third parties. We share personal data only in the limited circumstances described below, and only to the extent necessary for the relevant purpose:

5.1 Payment Service Providers. To process your deposits and withdrawals, tc999 shares the necessary transaction data with payment service providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and Visa/Mastercard processors. These providers act as independent data controllers in respect of the data they process for payment purposes, and their own privacy policies govern their handling of that data.

5.2 Identity Verification Providers. tc999 may share identity document data with specialist electronic verification service providers for the purpose of confirming the authenticity of documents submitted by members. These providers are bound by strict confidentiality obligations and are not permitted to use the data for any purpose other than verification on tc999's behalf.

5.3 Game Providers. Casino game studios whose games are integrated into the tc999 platform (including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi) may receive a member's account identifier and session token for the purpose of delivering the game experience. These providers do not receive your full identity or payment data.

5.4 Fraud Prevention and Security Services. tc999 may share technical data (such as IP addresses and device fingerprints) with fraud detection and cybersecurity service providers to protect the Platform and its members from unauthorised access, fraudulent activity, and other security threats.

5.5 Legal and Regulatory Disclosure. tc999 may disclose personal data to law enforcement agencies, regulatory authorities, or courts where we are required to do so by applicable law, or where disclosure is necessary to protect tc999's legal rights or the safety of our members.

5.6 Business Transfers. In the event of a merger, acquisition, or sale of all or part of tc999's business assets, personal data held by tc999 may be transferred to the acquiring entity as part of the transaction. Members will be notified of any such transfer and the privacy practices of the new data controller before the transfer takes effect.

tc999 uses cookies and similar tracking technologies (collectively, "cookies") on its Platform. Cookies are small text files placed on your device by your browser when you visit a website. They serve a range of functions that are essential to the correct operation and improvement of the tc999 Platform.

6.1 Strictly Necessary Cookies. These cookies are required for the Platform to function. They include session cookies that maintain your login state while you are using tc999, security tokens that protect against cross-site request forgery, and cookies that store your language and currency preferences. The Platform cannot operate correctly without these cookies, and they cannot be disabled.

6.2 Performance and Analytics Cookies. tc999 uses analytics cookies to understand how members interact with the Platform — including which pages are visited most frequently, how long members spend on particular sections, and where technical errors occur. This data is used in aggregated, anonymised form to improve Platform performance and the user experience. These cookies do not identify you personally.

6.3 Functional Cookies. Functional cookies allow tc999 to remember choices you have made — such as your preferred deposit method or display settings — so that your experience feels personalised and consistent across sessions.

6.4 Managing Cookies. You can manage or delete cookies at any time through your browser settings. Most modern browsers allow you to refuse all cookies, accept only first-party cookies, or delete cookies already stored on your device. Please be aware that disabling strictly necessary cookies may impair your ability to use the tc999 Platform, including preventing you from logging in or completing transactions.

For detailed guidance on managing cookies in your specific browser, refer to your browser provider's help documentation.

tc999 takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, accidental loss, alteration, or disclosure.

7.1 Encryption in Transit. All data transmitted between your device and tc999's servers is encrypted using Transport Layer Security (TLS) with 256-bit encryption. The tc999 Platform operates exclusively over HTTPS. Any attempt to access tc999 via an unencrypted HTTP connection is automatically redirected to the secure HTTPS version.

7.2 Encryption at Rest. Sensitive data stored on tc999's servers — including passwords, payment method identifiers, and identity document metadata — is encrypted at rest using industry-standard cryptographic algorithms. tc999 does not store plain-text passwords at any point.

7.3 Access Controls. Access to personal data held by tc999 is restricted on a strict need-to-know basis. Only authorised personnel with a legitimate business reason to access specific categories of data are granted that access. All access is logged and subject to periodic review.

7.4 Security Monitoring. tc999 operates continuous security monitoring of its Platform infrastructure to detect and respond to potential threats, including intrusion attempts, abnormal data access patterns, and distributed denial-of-service (DDoS) attacks.

7.5 Data Breach Response. In the event of a personal data breach that poses a risk to your rights and freedoms, tc999 will notify affected members without undue delay, providing information about the nature of the breach, the data affected, and the steps we have taken to mitigate its impact.

tc999 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with tc999's data disposal procedures. Anonymised data that no longer identifies any individual may be retained indefinitely for statistical analysis and Platform improvement purposes.

As a tc999 member, you hold the following rights with respect to your personal data. tc999 will respond to all data rights requests within thirty (30) days of receipt, unless the request is complex or numerous, in which case the period may be extended by a further two months with prior notice.

• Right of Access. You have the right to request a copy of the personal data tc999 holds about you, together with information about how that data is being used.
• Right to Rectification. If any personal data tc999 holds about you is inaccurate or incomplete, you have the right to request that it be corrected without undue delay.
• Right to Erasure. You have the right to request that tc999 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (where consent was the legal basis), or where it has been processed unlawfully. This right is subject to tc999's legal and regulatory obligations to retain certain data.
• Right to Restrict Processing. You have the right to request that tc999 restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where you have objected to processing and the outcome of that objection is pending.
• Right to Data Portability. Where tc999 processes your data on the basis of consent or contract performance, you have the right to receive a copy of that data in a structured, commonly used, machine-readable format.
• Right to Object. You have the right to object at any time to tc999 processing your personal data on the basis of legitimate interest, including for profiling or direct marketing purposes. tc999 will cease the relevant processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent. Where tc999 relies on your consent as the legal basis for processing (e.g., for promotional communications), you may withdraw that consent at any time by contacting us or using the unsubscribe mechanism in any marketing communication.

To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Data Rights Request". tc999 may require you to verify your identity before processing the request, to protect your data from unauthorised access by third parties.

The tc999 Platform is strictly intended for use by adults aged 21 years and above. tc999 does not knowingly collect or process personal data from individuals under the age of 21.

If tc999 becomes aware that personal data has been collected from an individual under the age of 21, the relevant account will be suspended immediately, any deposits and winnings will be subject to review, and all personal data associated with the underage registration will be securely deleted.

tc999 primarily serves members based in Bangladesh and processes the majority of personal data within its core infrastructure. However, some of tc999's third-party service providers — including game studios and analytics tools — may process data in jurisdictions outside Bangladesh.

Where personal data is transferred to a third-party processor operating in another jurisdiction, tc999 takes appropriate steps to ensure that the transfer is subject to adequate safeguards. These safeguards may include standard contractual clauses, processor agreements that impose GDPR-equivalent obligations, or transfers to jurisdictions that offer an adequate level of data protection as recognised by established international standards.

By using the tc999 Platform and accepting this Privacy Policy, you acknowledge that your data may be transferred to and processed in jurisdictions other than Bangladesh where such processing is necessary for the delivery of our services. tc999 will not facilitate transfers that expose your data to materially lower standards of protection than those described in this Privacy Policy.

The tc999 Platform does not contain links to external third-party websites as a matter of policy. All navigation within tc999 is contained within the tc999.io domain. However, in the event that any third-party content or service is ever integrated or referenced, please be aware that tc999 has no control over the data practices of third-party websites and is not responsible for their privacy policies or data handling procedures.

tc999 encourages members to review the privacy policies of any external service — such as their bKash, Nagad, or bank payment app — when using those services in connection with tc999 transactions. Those services operate independently under their own privacy frameworks.

tc999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the services we offer. When material changes are made, tc999 will post a notice on the Platform and, where reasonably practicable, notify affected members by email to their registered address.

The version number and effective date displayed at the top of this document indicate the currently applicable version. Members are encouraged to review this Privacy Policy periodically. Continued use of the tc999 Platform after the effective date of a revised Privacy Policy constitutes acceptance of the updated terms.

If you do not agree with an updated Privacy Policy, you should cease using the Platform and may request account closure in accordance with Section 4.4 of the tc999 Terms & Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way tc999 handles your personal data, please contact our Data Privacy team using the details below. We handle all privacy enquiries with strict confidentiality and in accordance with the timelines set out in Section 9.

tc999 is committed to resolving all privacy-related concerns promptly and fairly. If you are not satisfied with our response, you retain the right to escalate the matter to the relevant data protection authority in your jurisdiction.