sc999 Privacy Policy — Your Data, Your Rights

Privacy at a Glance

The six cards below summarise the most important aspects of how sc999 handles your personal data. Please read the full policy sections below for complete details — this summary is for orientation only.

1. Information We Collect

sc999 collects personal information from you when you register an account, make deposits or withdrawals, contact customer support, or otherwise interact with the sc999 platform. The categories of personal data we collect include:

• Identity information: your full name, date of birth, and a copy of a government-issued identification document (such as a National ID card or passport) if requested during the KYC verification process.
• Contact information: your Bangladesh mobile phone number and, if provided, an email address. These are used for account notifications, two-factor authentication, and customer support communications.
• Financial information: transaction records including deposit amounts, withdrawal requests, payment method references (such as your bKash or Nagad wallet number), and account balance history. sc999 does not store full payment card numbers.
• Gaming activity data: your betting history, game preferences, session durations, win and loss records, and bonus usage. This data is used for account management, responsible gaming monitoring, and platform improvement.
• Technical data: your IP address, device type, operating system, browser type, and session logs. This information is collected automatically when you access the sc999 platform and is used for security monitoring and fraud prevention.

sc999 collects only the personal data that is necessary for the operation of the platform, fulfilment of its obligations to players, and compliance with applicable internal policies. We do not collect personal data beyond what is described in this policy.

2. How We Use Your Information

sc999 uses the personal data it collects exclusively for the following purposes. We will not use your data for any purpose that is incompatible with those listed below without first obtaining your explicit consent:

• Account creation and management: to register your sc999 account, verify your identity, process deposits and withdrawals, and manage your account settings and preferences.
• Transaction processing: to execute and record all financial transactions on your account, including deposits via bKash, Nagad, Rocket, and Upay, and to process withdrawal requests to your nominated payment method.
• Customer support: to respond to your support queries, complaints, and account-related questions via live chat and email, and to maintain a record of support interactions for quality assurance purposes.
• Responsible gaming monitoring: to identify patterns of play that may indicate problem gambling behaviour, to enforce deposit limits and self-exclusion arrangements, and to ensure compliance with the 21+ age requirement.
• Security and fraud prevention: to detect and prevent unauthorised account access, fraudulent transactions, money laundering, bonus abuse, and other prohibited conduct as defined in the sc999 Terms and Conditions.
• Platform improvement: to analyse aggregated and anonymised usage data in order to improve the sc999 platform, optimise game performance, and develop new features that benefit Bangladesh players.

3. Legal Basis for Processing Your Data

sc999 processes your personal data on the basis of one or more of the following lawful grounds, depending on the specific purpose for which the data is being processed:

• Contractual necessity: processing that is required to perform the contract between sc999 and you as a registered player — including account management, transaction processing, and customer support.
• Legitimate interests: processing that is necessary for sc999's legitimate business interests, including fraud prevention, security monitoring, responsible gaming enforcement, and platform improvement, provided that these interests are not overridden by your fundamental rights and freedoms.
• Legal obligation: processing that is necessary for sc999 to comply with applicable internal policies regarding anti-money laundering (AML) checks, age verification, and account security.
• Consent: where sc999 relies on your consent as the basis for processing — for example, for optional marketing communications — you may withdraw that consent at any time by contacting sc999 customer support.

4. Sharing Your Information

sc999 does not sell, rent, or trade your personal data to any third party for commercial purposes. sc999 may share your personal data with third parties only in the following limited circumstances:

• Payment processors: sc999 shares transaction data with payment service providers (including bKash, Nagad, Rocket, Upay, Visa, and Mastercard) solely for the purpose of processing your deposits and withdrawals. These providers are bound by their own privacy and data security obligations.
• Game providers: sc999 shares your player session data with its game providers (including Pragmatic Play, Evolution Gaming, Spribe, and Ezugi) to the extent necessary to deliver the game experience, enforce bet limits, and detect technical issues.
• IT and security service providers: sc999 may engage third-party IT infrastructure and cybersecurity vendors who process technical data on sc999's behalf under strict data processing agreements that prohibit them from using the data for any independent purpose.
• Legal and regulatory disclosures: sc999 may disclose personal data if required to do so by a valid court order, law enforcement request, or other legal process. sc999 will, where permitted by law, notify you of any such request before complying.

5. Payment Data and Financial Information

sc999 takes the security of financial information with particular seriousness. When you make a deposit via bKash, Nagad, Rocket, or Upay, the transaction is initiated through the respective provider's secure payment gateway. sc999 receives a transaction reference number and confirmation from the provider but does not receive or store your full mobile banking PIN or password.

For Visa and Mastercard transactions, card data is processed via PCI-DSS compliant payment gateways. sc999 does not store, log, or have access to your full card number, CVV, or card expiry date. All card processing is handled entirely by the payment gateway provider, and sc999 receives only a tokenised reference.

6. Data Retention

sc999 retains your personal data only for as long as is necessary for the purposes described in this Privacy Policy or as required by applicable internal policies. The following retention periods apply:

• Active account data: personal data associated with an active sc999 account is retained for the duration of the account's existence and for a period of up to five years following permanent account closure, in accordance with internal anti-money laundering record-keeping requirements.
• Transaction records: financial transaction records are retained for a minimum of five years following the date of the transaction, consistent with internal financial record-keeping requirements.
• Technical and security logs: IP address logs, session data, and security event records are retained for up to 12 months and then securely deleted unless they are required in connection with an ongoing investigation or dispute resolution process.

7. How We Secure Your Data

sc999 applies a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include: SSL/TLS encryption for all data transmitted between your device and the sc999 platform; password hashing using industry-standard algorithms so that sc999 staff cannot read your password in plain text; access controls that restrict account data to authorised personnel only; and regular security reviews of the sc999 platform and its supporting infrastructure.

While sc999 takes the security of your personal data seriously and implements appropriate technical measures, no internet-based platform can guarantee absolute security . You also play an important role in keeping your account secure by choosing a strong, unique password and never sharing your login credentials with anyone else.

8. Cookies and Tracking Technologies

sc999 uses cookies and similar tracking technologies on the sc999 platform. A cookie is a small text file placed on your device by a website when you visit it. sc999 uses the following types of cookies:

• Essential session cookies: these cookies are strictly necessary to keep you logged in to your sc999 account during a browsing session. Without these cookies, the sc999 platform cannot function correctly. They are automatically deleted when you close your browser.
• Preference cookies: these cookies remember your platform settings and preferences (such as your chosen language and display options) so that you do not need to re-enter them on every visit. They persist between sessions but can be cleared via your browser settings.
• Analytics cookies: sc999 may use anonymised analytics data to understand how players navigate the platform and to identify areas for improvement. This data is aggregated and does not identify you personally. You may opt out of analytics cookie collection by adjusting your browser settings.

You can control and delete cookies through your browser settings. Please note that disabling essential cookies will prevent you from logging in to your sc999 account and using the platform. sc999 does not use cookies to track your browsing activity on other websites or to serve targeted advertising.

9. Your Data Rights

As a player registered with sc999, you have the following rights in relation to your personal data. To exercise any of these rights, please contact the sc999 customer support team at [email protected]. sc999 will respond to all valid data rights requests within 5 business days:

• Right of access: you have the right to request a copy of the personal data that sc999 holds about you, along with information about how it is being used and who it has been shared with.
• Right to rectification: if any personal data sc999 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed.
• Right to erasure: in certain circumstances, you have the right to request that sc999 delete the personal data it holds about you. This right is subject to sc999's legal obligations, including its record-keeping requirements under applicable internal anti-money laundering policies.
• Right to restrict processing: you have the right to request that sc999 restrict the processing of your personal data in certain circumstances — for example, if you contest the accuracy of the data or object to its processing on legitimate interests grounds.
• Right to data portability: where sc999 processes your personal data on the basis of your consent or a contract with you, you have the right to receive a copy of that data in a structured, commonly used, and machine-readable format.
• Right to withdraw consent: where sc999 relies on your consent as the legal basis for processing your personal data (for example, for optional marketing messages), you have the right to withdraw that consent at any time. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

sc999 will not charge any fee for handling a data rights request unless the request is manifestly unfounded or excessive. In such cases, sc999 may charge a reasonable administrative fee or refuse to act on the request, and will notify you of the reason for doing so.

10. Children's Privacy and the 21+ Requirement

The sc999 platform is intended exclusively for adults aged 21 years and older. sc999 does not knowingly collect personal data from individuals under the age of 21. If sc999 discovers that personal data has been collected from a person who is under 21, that account will be immediately suspended, any funds may be forfeited, and the personal data will be securely deleted as soon as practicable. If you are a parent or guardian and you believe that your child has registered an sc999 account, please contact sc999 customer support immediately at [email protected] so that appropriate action can be taken.

11. Changes to This Privacy Policy

sc999 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, sc999 will notify registered players via an on-platform notification or by email prior to the changes taking effect. The date of the most recent revision is displayed at the top of this page. Your continued use of the sc999 platform after any changes to this Privacy Policy constitutes your acceptance of the revised policy. If you do not accept the revised policy, you must stop using the sc999 platform and may request account closure by contacting customer support.

12. Contact and Data Requests

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or need to report a privacy concern, please contact the sc999 customer support team. All privacy-related enquiries are handled by our dedicated support team, and we aim to respond to all requests within 5 business days. For formal data rights requests, we recommend contacting us by email so that a written record is created for both parties.