Privacy Policy — How pg999 Collects, Uses, and Protects Your Data

Introduction

This Privacy Policy ("Policy") is issued by pg999 ("we", "us", "our", or "the Company") and applies to all personal data collected from individuals ("you", "your", or "the Player") who access, register with, or use the pg999 online casino and sports betting platform available at pg999.online ("the Platform").

pg999 is committed to handling your personal information with transparency, integrity, and care. This Policy explains in plain language what personal data we collect, the purposes for which we use it, the legal grounds on which we process it, how long we retain it, and the rights you have in relation to your own data.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which are incorporated by reference. By registering an account or using any feature of the pg999 Platform, you confirm that you have read this Policy and that you consent to the collection and processing of your personal data as described herein.

Data We Collect

pg999 collects personal data across several categories. The specific data collected from you will depend on the features of the Platform you use and the stage of your account lifecycle. The following table sets out the categories of personal data we collect and representative examples within each category.

pg999 does not collect special categories of sensitive personal data (such as health data, biometric data, racial or ethnic origin, political opinions, or religious beliefs) except where this is strictly required to comply with responsible gaming obligations — for example, where a player voluntarily discloses a gambling-related health concern when requesting self-exclusion.

How We Collect Your Data

pg999 collects personal data through the following channels:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting our customer support team, or responding to surveys or promotions.
• Automated technologies: Technical and Usage Data collected automatically as you browse and interact with the Platform, using cookies, web beacons, server logs, and similar tracking technologies. See Section 7 (Cookies & Tracking) for full details.
• Third-party payment providers: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, and card processors when you make deposits or withdrawals. pg999 receives only the information necessary to confirm and reconcile transactions — we do not receive or store your full card number or mobile banking PIN.
• Third-party game providers: Aggregated session and game-result data returned by providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi for the purposes of account settlement and dispute resolution.
• Identity verification services: Where we use third-party KYC verification tools to confirm the authenticity of documents you submit, those services may return verification status results to us. They do not retain your documents beyond their own stated retention periods.
• Publicly available sources: In limited circumstances where fraud prevention or AML obligations require it, we may cross-reference information you have provided against publicly available databases, sanction lists, or adverse media sources.

Legal Basis for Processing

pg999 processes your personal data only where a valid legal basis exists. The legal bases we rely on are as follows:

• Contractual necessity: The majority of data processing carried out by pg999 is necessary to perform our contract with you — that is, to operate your account, process deposits and withdrawals, calculate and credit winnings, apply bonuses, and deliver customer support. Without this processing, pg999 cannot provide the Platform services.
• Legal obligation: pg999 is subject to Anti-Money Laundering (AML) obligations, Know Your Customer (KYC) requirements, and fraud prevention duties. Processing your identity, financial, and transaction data is required for us to fulfil these legal obligations. Records maintained for AML compliance are retained for defined mandatory periods regardless of your consent.
• Legitimate interests: pg999 processes Technical Data and Usage Data on the basis of our legitimate interests in operating a secure, functional, and commercially viable platform. This includes fraud detection, security monitoring, platform performance optimisation, and aggregate analytics. We balance these interests against your privacy rights and process only the minimum data necessary for each purpose.
• Consent: Where we send you promotional communications by email or in-platform notification, we do so on the basis of your consent, obtained at the time of registration or through your account marketing preferences. You may withdraw consent for marketing communications at any time via your account settings or by contacting [email protected].

How We Use Your Personal Data

pg999 uses the personal data we collect for the following specific purposes. We do not use your data for any purpose incompatible with those listed below without first providing you with notice and, where required, obtaining your consent.

• Account creation and management: To register and maintain your pg999 account, authenticate your identity at login, process account settings changes, and manage your responsible gaming preferences.
• Payment processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, and card networks; to reconcile transaction records; and to investigate payment discrepancies.
• KYC and AML compliance: To verify your identity and age (21+ requirement), to conduct anti-money laundering checks, to screen against international sanctions lists, and to maintain mandatory compliance records.
• Bonus and promotion administration: To determine your eligibility for welcome bonuses and ongoing promotions, to credit and track bonus balances, to monitor wagering requirement progress, and to detect and prevent bonus abuse.
• Customer support: To handle your enquiries, complaints, and support requests via live chat and email; to maintain a record of our communications for quality assurance and dispute resolution purposes.
• Platform security and fraud prevention: To detect and investigate suspicious account activity, unauthorised access attempts, multi-accounting, payment fraud, and other prohibited conduct described in our Terms & Conditions.
• Responsible gaming: To monitor gameplay patterns that may indicate problem gambling behaviour; to enforce deposit limits, cooling-off periods, and self-exclusion settings; and to contact players who may be at risk.
• Platform improvement: To analyse aggregated usage data and identify opportunities to improve the Platform's performance, user experience, game catalogue, and promotional offering.
• Marketing communications (consent-based): To send you personalised bonus offers, tournament announcements, and platform updates by email or in-platform notification, where you have opted in to receive such communications.

Data Sharing & Disclosure

pg999 does not sell, rent, or trade your personal data to third-party advertisers or data brokers under any circumstances. We share your personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

• Game providers: We share your account identifier and session data with certified game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) solely to deliver and settle the games you play. These providers process data under their own privacy policies and are contractually bound to handle data securely and use it only for game-delivery purposes.
• Payment processors: We share transaction data with mobile financial service providers (bKash, Nagad, Rocket, Upay) and card networks (Visa, Mastercard) for the sole purpose of processing your deposits and withdrawals. No additional personal data beyond what is necessary for payment execution is shared.
• KYC and identity verification providers: Where we use third-party tools to verify the authenticity of identity documents you submit, we share the document images and associated identity data with those providers under strict data processing agreements. Verification results are returned to pg999; providers may not use your data for their own purposes.
• Legal and regulatory disclosure: pg999 may be required to disclose your personal data to law enforcement agencies, financial intelligence units, courts, or regulatory bodies where we are legally obliged to do so. We will notify you of any such disclosure where legally permitted.
• Fraud prevention and AML networks: In cases of suspected fraud or money laundering, pg999 may share relevant data with other gaming operators, industry fraud-prevention consortia, or financial crime agencies as permitted or required by law.
• Corporate transactions: In the event of a merger, acquisition, restructuring, or sale of all or part of pg999's business, your personal data may be transferred to the acquiring entity. We will provide notice of any such transfer and ensure that equivalent privacy protections apply to your data in the hands of the successor entity.

All third parties with whom pg999 shares personal data are required to implement appropriate technical and organisational security measures and to process your data only for the purposes specified in our data-sharing agreements.

Cookies & Tracking Technologies

pg999 uses cookies and similar tracking technologies to operate core Platform functions, analyse usage patterns, and enhance your experience. A cookie is a small text file placed on your device when you visit the Platform. Cookies do not contain executable code and cannot access other files stored on your device.

The following categories of cookies are used on the pg999 Platform:

pg999 does not use third-party advertising cookies or retargeting pixels. We do not share cookie data with ad networks or social media platforms.

You may manage or disable non-essential cookies through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging into or using the pg999 Platform. Disabling functional cookies may result in loss of saved preferences between sessions.

Data Retention

pg999 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with our legal obligations, and to resolve any disputes that may arise. The following retention periods apply to the principal categories of personal data we hold:

• Account and identity data: Retained for the duration of your active account relationship with pg999, plus a minimum of five (5) years following account closure to satisfy AML record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with applicable AML and financial record-keeping obligations.
• KYC verification documents: Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later.
• Customer support communications: Retained for three (3) years from the date of the communication, to support dispute resolution and quality assurance.
• Technical and usage data: Aggregated analytics data is retained for up to 24 months. Raw server logs are retained for up to 90 days before automatic deletion or anonymisation.
• Marketing consent records: Retained for the duration of your account relationship and for two (2) years following account closure, as evidence of consent or opt-out status.

When retention periods expire, pg999 securely deletes or anonymises the data in question. Where data has been anonymised, it may be retained indefinitely as part of aggregated statistical datasets that cannot be used to identify any individual.

Data Security

pg999 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures in place include:

• 256-bit SSL/TLS encryption: All data transmitted between your device and the pg999 Platform is encrypted using industry-standard 256-bit SSL/TLS protocols. This applies to all Platform pages, payment flows, and API communications.
• Encrypted data storage: Sensitive personal data, including identity documents and financial records, is stored in encrypted form on secured servers. Encryption keys are managed separately from the data they protect.
• Access controls: Access to personal data within pg999's systems is restricted on a strict need-to-know basis. All staff members with data access undergo background checks and receive regular data protection training. Access logs are maintained and reviewed periodically.
• Two-factor authentication: pg999's internal administrative systems are protected by multi-factor authentication. We strongly recommend that players also enable two-factor authentication on their pg999 accounts where this feature is available.
• Intrusion detection and monitoring: pg999 operates continuous security monitoring on all Platform infrastructure, with automated alerting for suspicious access patterns, unusual traffic volumes, and potential security incidents.
• Vulnerability management: The Platform is subject to regular penetration testing and security audits by qualified independent security professionals. Identified vulnerabilities are remediated according to a risk-prioritised patching schedule.
• Data breach response: In the event of a personal data breach that poses a risk to players' rights and freedoms, pg999 will notify affected players without undue delay and will take immediate remediation steps.

While pg999 employs robust security measures, no digital system can be guaranteed entirely free of risk. You are responsible for maintaining the security of your own account credentials. If you suspect your account has been compromised, contact our support team immediately at [email protected].

Your Privacy Rights

As a pg999 player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request", your pg999 account username, and a description of the right you wish to exercise. We will respond within thirty (30) calendar days of receiving your request.

• Right of access: You have the right to request a copy of the personal data pg999 holds about you, together with information about how it is being used. We will provide this in a clear, readable format.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For basic contact information, you may update data directly through your account settings without needing to contact us.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn your consent (and no other legal basis applies), or where the data has been processed unlawfully. This right is subject to our mandatory AML and legal retention obligations described in Section 8.
• Right to restrict processing: You may request that pg999 restrict the processing of your data in certain circumstances — for example, where you contest the accuracy of the data or where you have objected to processing pending verification of our legitimate grounds.
• Right to data portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, machine-readable format and to transmit it to another controller.
• Right to object: You have the right to object to processing based on our legitimate interests. We will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests, or where processing is necessary for the establishment, exercise, or defence of legal claims.
• Right to withdraw consent: Where processing is based on your consent (in particular, marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.

Children's Privacy

The pg999 Platform is strictly intended for individuals aged 21 years and above. pg999 does not knowingly collect personal data from any person under the age of 21. Our age verification procedures — implemented at the point of registration and reinforced by our KYC process — are designed to prevent access by underage individuals.

If pg999 becomes aware that personal data has been collected from an individual under the age of 21 without appropriate verification having occurred, we will:

• Immediately suspend the relevant account pending investigation.
• Delete all personal data associated with the underage account, except where retention is required for AML or legal compliance purposes.
• Return any deposits made to the payment method used for the original transaction.
• Void all wagers placed and confiscate any winnings generated during the underage player's use of the Platform.

If you believe a person under 21 has registered or is using a pg999 account, please report this to us immediately at [email protected]. We will investigate all such reports promptly and confidentially.

Third-Party Services & Links

The pg999 Platform integrates with third-party services — including game providers, payment processors, and analytics tools — that may process personal data independently under their own privacy policies. pg999 is not responsible for the privacy practices of these third parties beyond the data-processing agreements we hold with them.

Third-party game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi operate their game software under their own end-user terms. While we integrate their games into the pg999 Platform, each provider may collect limited technical data (such as session IDs and game-result data) directly via their game clients. We recommend reviewing the privacy policies of these providers if you have specific concerns about their data-handling practices.

pg999 does not embed third-party advertising networks, social media plugins, or tracking pixels on the Platform. Any links to external websites (where present) are provided solely for reference, and visiting those external sites is at your own risk. pg999 has no control over and accepts no responsibility for the content or privacy practices of any external website.

International Data Transfers

pg999 operates infrastructure and engages service providers that may be located in jurisdictions outside Bangladesh. Where personal data is transferred internationally — for example, to game provider servers or KYC verification tools hosted in other countries — pg999 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that which applies within Bangladesh.

Safeguards employed for international data transfers include:

• Contractual data processing agreements incorporating standard data protection clauses with all international service providers.
• Transfer-impact assessments conducted before entering into any new international data-sharing relationship.
• Restrictions on onward transfers by recipient parties without prior written authorisation from pg999.
• Periodic review of international transfer arrangements to ensure continued adequacy of protection.

pg999 does not transfer personal data to jurisdictions assessed to provide inadequate data protection without implementing additional compensatory safeguards. If you have concerns about any specific international transfer arrangement, please contact us at [email protected].

Amendments to This Policy

pg999 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data-processing practices, new legal obligations, or improvements to our Platform. When material changes are made, we will update the "Last Updated" date displayed at the top of this page and, where practicable, notify registered players via email or an in-platform notification.

We encourage all players to review this Policy periodically to remain informed of how we handle personal data. Your continued use of the pg999 Platform following the publication of a revised Policy constitutes your acceptance of the updated terms. If you do not agree with any amended provisions, you should discontinue use of the Platform and may request account closure by contacting [email protected].

Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have concerns about how pg999 has handled your personal data, please contact our Data Protection team using the details below. All correspondence should clearly include your pg999 account username and the nature of your query or concern.

• Email: [email protected] (plain text — not a clickable link)
• Subject line for data rights requests: "Data Rights Request — [Your Username]"
• Subject line for privacy complaints: "Privacy Complaint — [Your Username]"
• Live Chat: Available 24/7 via the pg999 Platform for general queries
• Response time: Acknowledgement within 5 business days; substantive response within 30 calendar days

pg999 takes all privacy complaints seriously and will investigate each one thoroughly and impartially. If you are not satisfied with our response to your complaint, you have the right to escalate the matter to the relevant data protection or privacy authority in your jurisdiction.