Privacy Policy — How ao9999 Protects Your Personal Data

When you register and use your ao9999 account, we collect personal data across several categories. The table below summarises what we collect and the legal basis for doing so.

ao9999 collects personal data through the following channels and mechanisms:

2.1 Direct Collection

You provide data directly to ao9999 when you complete the registration form, submit identity verification documents, make a deposit or withdrawal, contact the support team, participate in a promotion, or respond to a survey. Data provided directly by you forms the primary basis of your ao9999 account profile.

2.2 Automated Collection

When you access the ao9999 platform — whether on desktop or mobile browser — our servers automatically log technical data including your IP address, device identifiers, browser fingerprint, and session activity. This data is collected using standard server logs, session cookies, and analytics scripts operated directly by ao9999. We do not use third-party advertising trackers.

2.3 Payment Provider Data

When you initiate a deposit or withdrawal via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, the respective payment provider confirms the transaction outcome to ao9999. ao9999 receives transaction reference numbers, amounts in BDT, and success or failure status. We do not receive raw payment credentials from these providers.

2.4 Identity Verification Partners

For enhanced account verification, ao9999 may use trusted identity verification services to validate government-issued documents such as your National Identity Card (NID) or passport. These partners process document images for verification purposes only and are contractually prohibited from using your data for any other purpose.

ao9999 uses the personal data it collects for the following defined purposes only. We do not use your data for purposes that are incompatible with those disclosed here without your prior consent.

• Account creation and management: To register your ao9999 account, verify your identity, manage your login credentials, and maintain your account profile.
• Transaction processing: To process deposits and withdrawals in BDT via your selected payment method (bKash, Nagad, Rocket, Upay, Visa, Mastercard) and to maintain an accurate transaction history in your account.
• Age and identity verification: To confirm that you are at least 18 years of age and that your account is registered in your own name, in compliance with ao9999's responsible gaming obligations.
• Fraud prevention and security: To detect and investigate suspicious account activity, duplicate account registrations, bonus abuse, money laundering indicators, and unauthorised login attempts.
• Customer support: To respond to your enquiries, process dispute submissions, and provide assistance with account, payment, or game-related issues.
• Responsible gaming monitoring: To identify behavioural indicators of problem gambling and, where appropriate, apply protective tools such as deposit limits or cooling-off periods in line with our responsible gaming commitments.
• Legal and regulatory compliance: To meet ao9999's obligations under applicable laws, including anti-money laundering requirements, record-keeping obligations, and responses to lawful requests from authorities.
• Platform improvement: To analyse usage patterns, game performance data, and support trends in order to improve the ao9999 platform for Bangladeshi players.
• Marketing communications (consent-based): To send promotional offers, bonus notifications, and platform news to players who have opted in to receive marketing communications. Marketing is never sent to players who have not given explicit consent.

ao9999 does not sell, rent, or otherwise transfer your personal data to unrelated third parties for commercial purposes. We share personal data only in the limited circumstances described below, and only to the extent necessary to fulfil the stated purpose.

4.1 Payment Processors

To process deposits and withdrawals, ao9999 shares the minimum necessary data with your selected payment provider — bKash, Nagad, Rocket, Upay, Visa, or Mastercard. The data shared is limited to what is required to initiate, confirm, or reverse a specific transaction. Each payment provider is independently responsible for the data they process under their own privacy policies.

4.2 Identity Verification Services

Where ao9999 uses a third-party identity verification partner to validate your NID, passport, or other documents, the relevant document image and biographic data is shared with that partner solely for verification. The partner is contractually bound to process the data only for this purpose and to delete it once verification is complete.

4.3 IT and Hosting Infrastructure

ao9999's platform is hosted on secure server infrastructure. Our hosting and IT service providers may have technical access to data as part of their service delivery. All such providers are bound by data processing agreements that restrict their use of your data to the provision of technical services only.

4.4 Legal and Regulatory Disclosure

ao9999 may disclose your personal data to law enforcement agencies, regulatory bodies, or courts when required to do so by applicable law, a valid legal order, or in connection with the investigation of fraud, money laundering, or other criminal activity. ao9999 will notify you of any such disclosure to the extent permitted by law.

4.5 Business Transfers

In the event of a merger, acquisition, or sale of all or part of ao9999's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified via your registered email address in advance of any such transfer, and this Privacy Policy will continue to govern the use of your data unless you are informed otherwise.

ao9999 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

After the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be linked to your identity. Anonymised and aggregated data (such as platform-wide statistics) may be retained indefinitely for analytical purposes.

ao9999 implements a layered security architecture to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, and destruction. The following technical and organisational measures are in place at all times:

6.1 Technical Safeguards

• TLS 1.3 encryption on all data transmitted between your browser or device and the ao9999 servers, indicated by the HTTPS padlock in your browser.
• AES-256 encryption at rest for all stored personal data, financial records, and identity documents held in ao9999's data stores.
• Bcrypt password hashing ensuring that even in the unlikely event of a data breach, your password cannot be recovered in plain text.
• Firewall and intrusion detection systems monitoring ao9999's network perimeter 24 hours a day, 7 days a week.
• Regular penetration testing conducted by independent security professionals to identify and remediate vulnerabilities before they can be exploited.

6.2 Organisational Safeguards

• Strict role-based access controls ensuring staff can only access the personal data categories required for their specific job function.
• Mandatory data protection training for all ao9999 staff with access to personal data, reviewed and updated annually.
• Documented data breach response procedures with defined escalation timelines and notification obligations.
• Data processing agreements in place with all third-party service providers who handle ao9999 player data.

6.3 Your Responsibilities

While ao9999 takes extensive steps to secure your data on our end, the security of your account also depends on the steps you take to protect your login credentials. You are responsible for choosing a strong, unique password for your ao9999 account, keeping it confidential, and notifying support immediately if you suspect your account has been accessed without your authorisation.

ao9999 uses cookies and similar browser-based technologies to operate the platform, maintain your login session, and understand how players use the site. This section explains what cookies we use and how you can manage them.

7.1 Types of Cookies Used

7.2 No Third-Party Advertising Cookies

ao9999 does not deploy third-party advertising cookies, retargeting pixels, or social media tracking scripts on its platform. The cookies listed above are operated directly by ao9999 and are not shared with external advertising networks.

7.3 Managing Cookies

You can control and delete cookies through your browser settings. Please note that disabling strictly necessary cookies will prevent the ao9999 platform from functioning correctly — you will not be able to maintain a login session without session cookies. Disabling functional or analytics cookies will not prevent you from using the platform but may affect your personalised experience. Refer to your browser's help documentation for instructions on managing cookie preferences.

As a player registered on ao9999, you hold the following privacy rights in relation to your personal data. These rights can be exercised at any time by contacting ao9999 support using the email address published in the footer of this page.

• Right of access: You have the right to request a copy of the personal data ao9999 holds about you, along with information about how it is processed. ao9999 will provide this within 30 days of a verified request.
• Right to rectification: If any of the personal data ao9999 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Some data (such as your registered name and date of birth) cannot be changed unilaterally and will require identity verification documentation to update.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you have withdrawn consent, or where you object to processing and there is no overriding legitimate interest. ao9999 will action erasure requests within 30 days, subject to legal retention obligations that may require certain data to be kept for a defined period.
• Right to restriction: You have the right to request that ao9999 restrict processing of your personal data in certain circumstances — for example, while a rectification request is being reviewed, or while an objection is being assessed.
• Right to data portability: You may request that ao9999 provides your personal data in a structured, machine-readable format so that you can transfer it to another service provider. This right applies to data that was provided directly by you and processed on the basis of consent or contract.
• Right to object: You have the right to object at any time to processing of your personal data for direct marketing purposes. You also have the right to object to processing based on ao9999's legitimate interests, though such objections are subject to a balancing assessment.
• Right to withdraw consent: Where ao9999 processes your personal data on the basis of your consent (such as for marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

ao9999 does not knowingly collect personal data from individuals under the age of 18. The ao9999 platform is strictly for adults aged 18 and above. This is a firm requirement with no exceptions, and ao9999 enforces it through a mandatory age verification process applied to all new account registrations.

9.1 Age Verification Process

During registration, all players are required to confirm that they are 18 years of age or older. ao9999 may request government-issued identity documents — including a Bangladesh National Identity Card (NID), passport, or birth certificate — to verify the declared date of birth. Accounts where age cannot be confirmed to ao9999's satisfaction will be suspended and all balances frozen until the verification process is completed.

9.2 Discovery of Underage Account

If ao9999 discovers or is notified that a registered account belongs to an individual under 18 years of age, the account will be closed immediately. Any deposits made to the account will be returned via the original payment method after deducting any bonuses received. Winnings accumulated on an underage account are void and will not be paid out.

9.3 Parental Guidance

Parents and guardians who are concerned about a minor accessing online gambling platforms are encouraged to use available parental control and content filtering software. If you believe a minor has registered an account on ao9999 using false age information, contact support immediately at the email address in the footer. ao9999 will investigate and close the account without delay.

Given the sensitivity of financial data, ao9999 applies heightened standards to the handling of payment-related information. The following principles govern how ao9999 manages data associated with your deposits and withdrawals.

10.1 Payment Method References

When you make a deposit via bKash, Nagad, Rocket, or Upay, ao9999 stores a reference identifier (such as a transaction ID or wallet reference number) alongside the amount and timestamp. ao9999 does not store your full mobile wallet PIN, your bKash/Nagad/Rocket account PIN, or any authentication credential used to initiate the payment on the provider's platform.

10.2 Card Payment Security

Visa and Mastercard card transactions are processed by a PCI-DSS Level 1 compliant payment processor. ao9999 does not receive, process, or store your full card number, expiry date, or CVV/CVC code at any stage of the transaction. ao9999 receives only a tokenised payment reference and the transaction outcome from the payment processor.

10.3 Withdrawal Verification

To protect against unauthorised withdrawals, ao9999 verifies that withdrawal requests are directed to a payment method previously used by the account holder, or to a newly added method that has been verified through ao9999's identity confirmation process. This verification step uses the identity data already held in your account and does not require you to submit additional payment credentials.

ao9999 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, changes in applicable law, or improvements to our platform. The effective date at the top of this page will always reflect when the current version came into force.

11.1 Notification of Material Changes

Where a change to this Privacy Policy is material — that is, where it affects the types of data we collect, the purposes for which we use it, the parties with whom we share it, or your privacy rights — ao9999 will notify registered account holders via their registered email address at least 14 days before the change takes effect. The notification will summarise what has changed and why.

11.2 Continued Use as Acceptance

By continuing to use the ao9999 platform after a revised Privacy Policy has come into effect, you confirm your acceptance of the updated terms. If you do not agree with a material change to this Privacy Policy, you should close your ao9999 account before the change takes effect. Account closure requests can be submitted to the support team at the email address in the footer.

All privacy-related enquiries, requests to exercise your data rights, or concerns about ao9999's data practices should be directed to the ao9999 support team using the contact details published in the footer of this page.

12.1 How to Submit a Data Request

To submit a privacy rights request — such as a request for access, rectification, erasure, or data portability — please email ao9999 support with the following information:

1. Your full registered name and ao9999 account username.
2. The specific right you wish to exercise (e.g., "Right of Access", "Right to Erasure").
3. A brief description of the data or processing activity your request relates to.
4. A copy of a valid government-issued identity document (NID or passport) to verify your identity before the request is processed. This step is required to prevent unauthorised access to another person's data.

12.2 Response Timelines

ao9999 acknowledges all data requests within 5 business days (Bangladesh Standard Time, UTC+6). The full response will be provided within 30 calendar days of receipt of the verified request. Where additional time is required — for example, in the case of complex erasure requests involving multiple data systems — ao9999 will notify you of the extended timeline and the reason for it.

12.3 Contact Details

All privacy enquiries and data requests should be sent to the ao9999 support team by email. The support email address is displayed in plain text in the footer of every page on this site. ao9999 does not operate a dedicated data protection telephone line. Email is the sole channel for privacy requests, ensuring a clear written record of all communications.