999 com Privacy Policy

1. Overview

999 com ("we", "our", "Company") takes the privacy and security of your personal information seriously. This Privacy Policy explains how the 999 com website and mobile application ("Platform") collects, uses, discloses, and protects your personal data.

999 com is a fully licensed online betting and gaming platform regulated by the Curaçao Gaming Control Board. We comply with the European Union's General Data Protection Regulation (GDPR) and other applicable data protection laws.

By using the 999 com platform, you consent to the practices described in this Privacy Policy. If you do not agree with any part of this Privacy Policy, please do not use our services.

2. What information we collect

999 com collects various types of personal information so we can provide you with the best possible service. The information we collect falls into three main categories:

2.1 Information You Provide

When you register at 999 com or use our services, you may provide the following information:

• Identity Information: Full name, date of birth, nationality, gender
• Contact Information: Email address, phone number, postal address
• Account credentials: Username, password (encrypted)
• Financial information: Bank account details, payment card numbers (last 4 digits), mobile wallet information
• Verification Documents: Government-issued ID, proof of address, selfie photo
• Preferences and Interests: Favorite sports, betting preferences, promotional preferences
• Communication content: Customer support chats, emails, phone calls (may be recorded)

2.2 Automatically Collected Information

When you use the 999 com platform, we automatically collect certain technical information:

• Device information: IP address, device type, operating system, browser type and version
• Location data: Geographic location (IP-based), time zone
• Usage data: Page visits, clicks, scroll depth, session duration
• Transaction History: Deposits, withdrawals, bets, wins, losses
• Cookies and Tracking: Cookies, web beacons, pixels, local storage

2.3 Information from Third-Party Sources

We may obtain information from third parties to fulfill legal and regulatory obligations:

• Identity verification services: For KYC and AML checks
• Payment Processors: Transaction verification and fraud prevention
• Public Records: Where required or permitted by law
• Marketing Partners: Referral tracking and attribution

3. How your information is used

999 com uses your personal information for various legitimate purposes. Our primary use cases are:

3.1 Service Provision

• Creating and managing your 999 com account
• Providing betting and gaming services
• Processing deposits and withdrawals
• Bet settlement and payout of winnings
• Providing bonuses and promotions
• Providing customer support

3.2 Legal and regulatory compliance

• Verifying your identity and age (KYC)
• Performing Anti-Money Laundering (AML) checks
• Preventing gambling and problem gambling
• Meeting Licensing Authority Requirements
• Complying with legal obligations and court orders
• Tax and regulatory reporting

3.3 Security and Fraud Prevention

• Detecting and preventing fraudulent activity
• Detecting multiple accounts and collusion
• Preventing bonus abuse and arbitrage betting
• Protection from hacking and cyber attacks
• Maintaining platform integrity and fairness

3.4 Personalisation and Improvement

• Customizing content according to your preferences
• Recommending relevant promotions and offers
• Analyzing and improving user experience
• Testing new features and products
• Optimizing platform performance

3.5 Communications

• Sending account updates and notifications
• Informing you about promotions and offers (if consent is given)
• Notifying you of important policy changes
• Answering your questions and resolving issues
• Conducting surveys and research (optional)

4. Information Sharing and Disclosure

999 com never sells your personal information. However, we may share your information with third parties in certain circumstances and to a limited extent:

4.1 Service Providers

999 com uses trusted third-party service providers who work on our behalf:

• Payment Processors: To process deposits and withdrawals
• Identity verification services: To conduct KYC and AML checks
• Cloud hosting provider: For data storage and server management
• Customer Support Tools: For live chat and ticketing system
• Analytics and Tracking: To measure platform performance
• Email and SMS Providers: To send communications

All these service providers are bound by strict confidentiality agreements and may only use your data for specified purposes.

4.2 Legal Requirements

We may disclose your information when required by law or to:

• To respond to requests from licensing and regulatory authorities
• To comply with court orders, subpoenas, or other legal processes
• To cooperate with law enforcement or government authorities
• To investigate fraud, illegal activity, or security threats
• To protect the rights, property, and safety of 999 com or others

4.3 Business transfers

If 999 com undergoes a merger, acquisition, or asset sale, your personal information may be among the transferred assets. We will notify you before any such transaction and ensure your data remains protected.

4.4 Aggregated and Anonymous Data

999 com may share aggregated, statistical, or anonymized data that does not personally identify you. This data may be used for industry research, benchmarking, or public reporting.

5. Data Protection and Security Measures

999 com implements industry-leading security measures to protect your personal information. Our multi-layered security approach is designed to safeguard your data from unauthorized access, disclosure, alteration, or destruction.

5.1 Technical Security

• 256-bit SSL/TLS Encryption: All data transmissions are encrypted
• AES-256 Database Encryption: Encrypting sensitive data at rest
• Secure Password Hashing: bcrypt or Argon2 algorithms
• Firewall and IDS/IPS: Preventing network intrusion
• DDoS Protection: Against distributed denial-of-service attacks
• Regular security patches: Keeping all systems up to date

5.2 Access Control

• Role-Based Access Control (RBAC): Employees have access only to necessary data
• Two-factor authentication (2FA): For accounts and admin panel
• IP whitelisting: Restricting access to sensitive systems
• Audit Logs: Tracking all data access and modifications
• Regular access reviews: Removing unnecessary permissions

5.3 Physical and organizational security

• Secure data centers: Tier III or Tier IV facilities
• Backup and Redundancy: Regular backups and disaster recovery plans
• Staff training: Data protection awareness and GDPR compliance
• Confidentiality agreement: All employees and contractors sign NDAs
• Incident response plan: Rapid breach detection and response

5.4 Regular security assessments

999 com conducts regular assessments to ensure security and compliance:

• Quarterly vulnerability scans and penetration testing
• Annual third-party security audits
• ISO 27001 Information Security Management System Certification
• PCI DSS compliance for payment card information

6. Cookies and Tracking Technologies

999 com uses cookies and similar tracking technologies to enhance your browsing experience, maintain platform functionality, and analyze user behavior.

6.1 Types of cookies

• Essential cookies: Required for basic site functionality (login, security)
• Functional Cookies: Remembers your preferences and settings
• Analytics Cookies: Tracking site traffic and usage (Google Analytics)
• Marketing cookies: To display personalized advertising (requires consent)

6.2 Other Tracking Technologies

• Web Beacons (Pixels): To track email opens and link clicks
• Local Storage: To store data on your device
• Fingerprinting: To detect device and browser configuration
• Session Replay: To analyse user interactions (anonymised)

6.3 Managing Cookies

You can control and delete cookies through your browser settings. However, note that disabling cookies may prevent some features of 999 com from working. Essential cookies are necessary for basic site operation and cannot be disabled.

On the 999 com platform, you can manage your cookie preferences by going to Account Settings > Privacy > Cookie Preferences.

7. Your Data Privacy Rights

Under GDPR and other data protection laws, you have several rights over your personal information. 999 com respects these rights and makes their exercise straightforward.

7.1 Right of Access

You have the right to know what personal information 999 com holds about you. You can request a copy of your data, which we will provide in a common, machine-readable format (such as JSON or CSV).

7.2 Right to Rectification

If your personal information is incorrect or incomplete, you can request to have it corrected. Most information can be updated directly through your 999 com account settings.

7.3 Right to Erasure ("Right to be Forgotten")

You can request deletion of your personal data. However, this right is not absolute and is subject to certain exceptions, such as legal obligations (KYC/AML records) or dispute resolution.

7.4 Right to restriction of processing

You may request to restrict or suspend processing of your data in certain circumstances, such as when the accuracy of your data is disputed or you challenge the legality of processing.

7.5 Right to Data Portability

You can receive your personal data in a structured, commonly used format and transfer it to another service provider where technically feasible.

7.6 Right to Object

You have the right to object to the processing of your data where we rely on legitimate interests. This includes direct marketing, which you can opt out of at any time.

7.7 Rights related to automated decision-making

You have the right not to be subject to decisions based solely on automated processing that have legal or similarly significant effects on you. At 999 com, important decisions (such as account suspensions) always involve human review.

7.8 Exercising Your Rights

To exercise your data privacy rights:

• Log in to your 999 com account settings and go to the Privacy section
• Contact our Data Protection Officer: privacy@999com.app
• Contact customer support via Live Chat or phone

We will respond to your request within 1 month. For complex requests, we may extend this by up to 2 more months, but we will inform you of the reason for the delay.

8. Data Retention and Deletion

999 com only retains your personal information for as long as necessary. Our retention periods are based on data type, purpose of use, and legal requirements.

8.1 Retention for active accounts

• Account Information: While the account remains active
• Transaction records: 7 years after account closure (AML/KYC requirements)
• Game history: 5 years after account closure (for dispute resolution)
• Communication logs: 3 years (for customer support and audits)
• Marketing data: Until consent is withdrawn or after 3 years of inactivity

8.2 Policy for inactive accounts

If your account remains inactive for 12 months, 999 com will contact you via email or SMS. If there is no response after an additional 6 months, we may close your account and decide whether to retain or delete your information. If your account holds funds, we will return them to your registered payment method.

8.3 After Account Closure

When you close your 999 com account:

• Your personal profile and preferences are deleted immediately
• Transaction and game records retained for the periods mentioned above
• Your email and phone will be removed from marketing databases
• Your KYC documents are securely stored in accordance with legal requirements
• Any remaining bonus and promotional credits will be forfeited

8.4 Backup and Archival Data

999 com creates regular backups to prevent data loss. Deleted data may remain in our backup systems for up to 90 days, after which it is permanently overwritten. Archival data (for legal/regulatory purposes) is kept in offline secure storage and accessed only when required.

9. Children's Privacy

999 com is an adult-only online betting and gaming platform. Our services are not intended for individuals under 18 years of age, and we do not knowingly collect personal information from minors.

9.1 Age Verification

999 com enforces strict age verification during registration:

• All users must provide their date of birth
• Government-issued photo ID verification is mandatory
• Third-party age verification services are used
• Suspicious accounts are suspended and investigated immediately

9.2 Action in Case of Minor Discovery

If 999 com becomes aware that a minor has used our services or provided personal information:

• Account will be closed immediately
• Any deposits will be refunded (winnings may be forfeited)
• The child's personal information will be deleted from our systems
• Parents will be notified immediately (if identifiable)
• Incidents will be reported to our compliance team and, where necessary, to the authorities

9.3 Parental Guidance

999 com encourages parents to monitor their children's online activities. If you believe a child has provided personal information on our platform, please contact us immediately at privacy@999com.app. We will investigate promptly and take appropriate action.

10. International Data Transfers

999 com is an international online betting platform and we serve users worldwide. As a result, your personal information may be processed and stored outside your country of residence.

10.1 Data Transfer Mechanisms

When 999 com transfers your data internationally, we ensure appropriate safeguards:

• EU Standard Contractual Clauses (SCCs): GDPR-compliant data transfer agreements
• Adequacy Decision: Transfers to countries approved by the European Commission
• Binding Corporate Rules (BCRs): Within our corporate group
• Data Encryption: All international data in transit and at rest

10.2 Data Storage Location

999 com primarily stores data in the following regions:

• European Union (primary data center)
• Singapore (Asia-Pacific server)
• Canada (Backup and Disaster Recovery)

All storage locations are in ISO 27001 certified and GDPR-compliant data centers.

10.3 Your Rights

Regardless of where your data is processed, you retain the same data protection rights described in this Privacy Policy. 999 com ensures that all data processors and third parties adhere to the same high standards.

11. Changes to Privacy Policy

999 com may update this Privacy Policy from time to time to reflect new legal requirements, technological developments, or business practices. The "Last Updated" date at the top of the page always indicates the current version.

11.1 How You Will Be Notified

• Minor changes: Will be posted on this page and take effect immediately
• Significant Changes: 30 days' notice will be given via email or platform notification
• Material changes: Your explicit consent may be required to continue using the service

11.2 Acceptance of Changes

Continued use of 999 com after the updated Privacy Policy takes effect means you accept the changes. If you do not agree to the new terms, please stop using the service immediately and close your account.

11.3 Historical Versions

999 com archives previous versions of this Privacy Policy. You can request earlier versions by emailing privacy@999com.app.

12. Contact and Complaints

If you have any questions, concerns, or complaints about this Privacy Policy, your personal information, or 999 com's data practices, please contact us.

12.1 Data Protection Officer

999 com has appointed a dedicated Data Protection Officer (DPO) who oversees all privacy-related matters:

• Email: privacy@999com.app
• Subject line: Include "Data Privacy Request"
• Response time: Initial response within 5 business days

12.2 General support channels

• Live Chat: Available 24/7 on 999 com website and app
• Email: support@999com.app (general inquiries)
• Help Center: For detailed guides and FAQs Help Center View

12.3 Complaints Process

If you wish to make a complaint about 999 com's data practices:

1. Write to our DPO at the email provided above
2. We will acknowledge your complaint within 5 business days
3. We will conduct a full investigation within 30 days
4. You will receive a detailed response regarding our decision and proposed resolution

12.4 Regulatory authorities

If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority:

• European Union: The supervisory authority in your member state
• United Kingdom: Information Commissioner's Office (ICO)
• Other Regions: Relevant national data protection authorities