Privacy Policy — How uk999 Protects Your Data

This Privacy Policy ("Policy") is published by uk999, the operator of the online betting and casino platform accessible at uk999.bio and all associated subdomains and mobile interfaces (collectively, the "Platform"). This Policy describes how uk999 collects, uses, stores, discloses, and protects personal information relating to individuals who access or use the Platform, including registered account holders, visitors who browse the Platform without registering, and any person who contacts uk999 support ("you", "your", "User").

uk999 takes data privacy seriously. We recognise that the players who use our Platform entrust us with sensitive personal and financial information, and we are committed to handling that information with care, transparency, and in accordance with applicable data protection principles. This Policy is written in plain English so that you can understand it fully, without needing specialist legal knowledge to navigate it.

By registering a uk999 account, by making a deposit or wager, or by continuing to use the Platform after this Policy has been made available to you, you acknowledge that you have read and understood this Policy and that you consent to the collection and use of your personal information as described herein. If you do not agree with any part of this Policy, you must cease using the Platform and contact support to close your account.

uk999 collects personal data that is necessary and proportionate to the purposes described in this Policy. The categories of personal data we collect are set out in the table below:

uk999 does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, or biometric data (other than photographs submitted voluntarily as part of identity documents). We do not collect or store full payment card numbers. All payment credential processing is handled directly by the relevant mobile financial service provider.

uk999 collects personal data through the following channels and mechanisms:

• Direct submission: Information you provide when creating a uk999 account, completing identity verification, making a deposit, contacting customer support, or participating in a promotion. This includes all registration form fields, support enquiries, and any documentation you upload.
• Automated technical collection: When you access the Platform, our servers automatically record technical data including your IP address, device identifiers, browser type, and usage patterns. This occurs through server logs, cookies, web beacons, and similar tracking technologies described in Section 7 of this Policy.
• Payment processing partners: When you initiate a deposit or withdrawal via bKash, Nagad, Rocket, or Upay, those providers confirm the completion and reference of the transaction to uk999. uk999 receives transaction status and reference data only — we do not receive your mobile financial service PIN or full wallet credentials.
• Third-party game studios: Game providers including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe may share session-level game data with uk999 for the purposes of account settlement, dispute resolution, and responsible gaming monitoring. Game studios do not share independent personal data with uk999 beyond what is required for these purposes.
• Identity verification services: uk999 may use third-party document verification tools to assist in confirming the authenticity of identity documents submitted during the KYC process. These providers process document images on uk999's behalf and under contractual data processing obligations.
• Publicly available sources: uk999 may, in limited circumstances and where required for fraud prevention or due diligence, cross-reference information against publicly available databases, sanctions lists, or adverse media sources.

uk999 uses the personal data we collect for clearly defined, legitimate purposes only. We do not use your data for any purpose that is incompatible with the purposes stated below without first obtaining your explicit consent.

• Account management: Creating, maintaining, and administering your uk999 account, including processing login requests, managing account balances, and applying responsible gaming settings you have selected.
• Identity and age verification: Confirming that you meet the minimum age requirement of 21 years and that the identity information you have provided is genuine. This is a legal and operational obligation that applies to all account holders.
• Payment processing: Processing deposit and withdrawal transactions via your registered mobile payment method, reconciling transaction records, and investigating payment disputes.
• Customer support: Responding to your enquiries, resolving complaints, investigating disputes related to game outcomes or payment transactions, and following up on responsible gaming requests.
• Security and fraud prevention: Detecting, investigating, and preventing fraud, money laundering, account takeover, bonus abuse, and other forms of suspicious or unlawful activity. This includes automated transaction monitoring and manual review by our security team.
• Legal and regulatory compliance: Meeting our obligations under applicable anti-money laundering (AML) requirements, retaining records as required by law, and cooperating with competent authorities where legally required to do so.
• Platform improvement: Analysing aggregated usage data to improve the performance, functionality, and content of the uk999 Platform, including game catalogue curation and user interface optimisation.
• Responsible gaming: Monitoring betting patterns for signs of problem gambling behaviour, enforcing deposit limits and self-exclusion requests, and proactively reaching out to players where our monitoring identifies patterns of concern.
• Direct marketing (where you have consented): Sending promotional communications about bonuses, new games, seasonal promotions (including those related to Eid, Pohela Boishakh, BPL, IPL, and T20 World Cup), and other uk999 offers via SMS or email. You may withdraw consent for marketing communications at any time by contacting support.

uk999 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing that is necessary to perform our contract with you — namely, providing access to the uk999 Platform, processing your bets, crediting your winnings, and managing your account. Without this processing, uk999 cannot provide its services to you.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering obligations, age verification duties, and record-keeping requirements.
• Legitimate interests: Processing carried out to pursue uk999's legitimate business interests where those interests are not overridden by your rights. This includes fraud detection, security monitoring, platform analytics, and responsible gaming monitoring.
• Consent: Processing based on your freely given, specific, and informed consent. This applies primarily to direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

uk999 does not sell, rent, or trade your personal data to third parties for their own commercial or marketing purposes. We share personal data only in the limited circumstances described below, and only to the extent necessary for each stated purpose.

• Payment service providers: bKash, Nagad, Rocket, and Upay receive the minimum data necessary to process your deposit and withdrawal transactions. Each provider operates under its own privacy policy and data protection obligations.
• Game studio providers: Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, Spribe, and other certified game studios receive session identifiers and game-specific data necessary to deliver game content, resolve disputes, and ensure fair play. They do not receive your full personal profile.
• Identity verification providers: Third-party KYC service providers may process your submitted identity documents under a data processing agreement with uk999. They act as data processors on our behalf and are contractually prohibited from using your data for any independent purpose.
• IT and infrastructure providers: Cloud hosting, database, and cybersecurity service providers who support the operation of the uk999 Platform. All such providers are bound by contractual obligations that restrict their use of personal data to the services they provide to uk999.
• Competent authorities: Law enforcement agencies, financial intelligence units, courts, or other government bodies where uk999 is legally obligated to disclose information — for example, in response to a valid court order, or as part of our anti-money laundering reporting obligations.
• Business transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of uk999's business, personal data held by uk999 may be transferred to the acquiring entity as part of that transaction. Affected users will be notified in advance where legally and practically possible.

uk999 uses cookies and similar tracking technologies on the Platform to deliver, maintain, and improve our services. A cookie is a small text file placed on your device by a website server. Cookies allow websites to recognise your device on return visits and to remember your preferences and session state.

uk999 uses the following categories of cookies:

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged in, cookies that maintain your account balance display, and security cookies that prevent cross-site request forgery. These cookies cannot be disabled without breaking core Platform functionality.
• Performance and analytics cookies: Used to collect aggregated, anonymised information about how visitors interact with the Platform — including which pages are visited most frequently, how long sessions last, and where users encounter errors. This data is used to improve Platform performance and content.
• Functional cookies: Used to remember your preferences — such as your preferred language setting, display settings, or responsible gaming reminders you have configured.
• Marketing and targeting cookies (where consent is given): Used to track your activity across the Platform and, where you have consented, to deliver relevant promotional content based on your interests. These cookies are only activated where you have provided explicit consent.

You may control cookie settings through your browser's privacy controls. Most modern browsers allow you to block or delete cookies. Please note that disabling strictly necessary cookies will impair your ability to use the uk999 Platform, including your ability to log in and maintain an active session. Instructions for managing cookies are available in the help documentation of your browser.

uk999 implements industry-standard technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security infrastructure includes, but is not limited to, the following measures:

• 256-bit SSL/TLS encryption: All data transmitted between your device and uk999 servers is encrypted using 256-bit Secure Socket Layer (SSL) / Transport Layer Security (TLS) protocols. This protects your login credentials, financial transactions, and personal information in transit.
• Password hashing: uk999 does not store your password in plain text. Passwords are hashed using a modern, one-way cryptographic algorithm before storage. uk999 support staff cannot view your password under any circumstances — only you know it.
• Access controls: Access to databases containing personal data is restricted to authorised personnel only, on a need-to-know basis. All internal access is logged and subject to regular audit.
• Two-factor authentication (2FA): uk999 offers SMS-based 2FA to all account holders. We strongly recommend enabling 2FA on your account to add a second layer of protection against unauthorised access.
• Intrusion detection and monitoring: uk999 operates continuous automated monitoring systems that detect and alert on unusual access patterns, potential brute-force attempts, and other indicators of compromise.
• Data minimisation: uk999 collects only the personal data that is necessary for the purposes described in this Policy. We do not store full payment card numbers or mobile wallet PINs on our servers.

Despite these measures, no data transmission over the internet or storage system can be guaranteed as completely secure. If you have reason to believe that your uk999 account has been compromised — for example, if you notice unrecognised login activity or unexpected account changes — please contact uk999 support immediately via live chat so that we can take prompt protective action.

uk999 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law or regulation. The retention periods applied to the main categories of personal data are as follows:

• Account and identity data: Retained for the duration of your active account, plus a minimum of five (5) years following account closure. This retention period reflects our obligations under anti-money laundering regulations, which require records to be maintained for a defined period after the end of a customer relationship.
• Financial transaction data: Retained for a minimum of five (5) years from the date of each transaction, in accordance with applicable financial record-keeping requirements.
• Betting and wagering history: Retained for five (5) years from the date of each bet, to support dispute resolution, account auditing, and responsible gaming monitoring.
• Customer support communications: Retained for three (3) years from the date of the final communication in each support case, to support quality assurance, dispute resolution, and staff training.
• Technical and usage data (logs): Standard server access logs are retained for up to twelve (12) months. Security event logs relevant to a specific incident may be retained for longer if required for an ongoing investigation.
• Marketing consent records: Retained for the duration of your account, or until you withdraw consent, whichever is earlier, plus three (3) years thereafter as evidence of the consent history.

When personal data is no longer required for the purpose for which it was collected, and no legal retention obligation requires its continued storage, uk999 will securely delete or anonymise that data in a manner that prevents reconstruction or re-identification.

uk999 respects your rights in relation to the personal data we hold about you. The following rights are available to you as a uk999 account holder or Platform user:

To exercise any of these rights, please contact uk999 via live chat or email at [email protected]. We may ask you to verify your identity before processing a rights request to ensure that we disclose or modify data only to the account holder it belongs to. uk999 will respond to all verified rights requests within thirty (30) days. If we require additional time to respond, we will notify you of the reason and expected completion date.

The uk999 Platform is strictly intended for adults aged 21 years and above. uk999 does not knowingly collect personal data from individuals under the age of 21. If you are under 21 years of age, you must not register an account, access the Platform, or provide any personal information to uk999.

If uk999 discovers or has reasonable grounds to believe that personal data has been collected from a person under the age of 21 — whether as a result of age verification failure, a report from a third party, or internal monitoring — uk999 will immediately suspend the account, delete the associated personal data to the extent permitted by law, and return any deposited funds via the original payment method where verification allows it.

If you are a parent or guardian and believe that a person under your care has registered a uk999 account without your knowledge, please contact uk999 support immediately via live chat or email so that we can investigate and take appropriate action promptly.

uk999 may revise this Privacy Policy periodically to reflect changes in our data processing practices, updates to applicable law or regulation, changes in the services we offer, or improvements to our privacy governance. The "Last Updated" date at the top of this Policy indicates when the most recent revision was made.

Where changes are material — meaning they significantly affect how uk999 uses your personal data or alter your rights under this Policy — we will provide advance notice to registered account holders via the mobile number or email address associated with their account, at least seven (7) days before the revised Policy takes effect. For minor or administrative changes that do not materially affect your rights, uk999 may update the Policy without individual notification.

Your continued use of the uk999 Platform following the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you must cease using the Platform and contact support to request account closure. We recommend bookmarking this page and reviewing it periodically to stay informed of how uk999 handles your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or to uk999's handling of your personal data, please contact us using the channels below. All privacy enquiries are handled by uk999's dedicated support team and are treated with strict confidentiality.

• Live Chat: Available 24 hours a day, 7 days a week, directly from the uk999 Platform interface. This is the fastest channel for urgent privacy matters, including suspected data breaches or unauthorised account access.
• Email: [email protected] (plain text only — this address is not a clickable link). Please include "Privacy Enquiry" in the subject line of your email for faster routing. Standard response time: within 24 hours under normal operating conditions.

uk999 will acknowledge all privacy enquiries within 48 hours and will provide a substantive response within ten (10) business days. For formal rights requests (as described in Section 10), uk999 will respond within thirty (30) days of identity verification being completed.