nc999 Privacy Policy
Your privacy matters to us. This Privacy Policy explains exactly what personal data nc999 collects from players in Bangladesh, how that data is used, how it is protected, and what rights you hold over your own information.
How nc999 Protects Your Privacy
Before reading the full policy, here is a summary of the six core commitments nc999 makes to every player regarding their personal data.
End-to-End Encryption
All data transmitted between your device and nc999's servers is protected by SSL/TLS 1.3 encryption. Personal details, payment information, and account credentials are never sent over unencrypted connections.
No Unnecessary Data Collection
nc999 collects only the personal data that is strictly required to operate your account, process payments in BDT, verify your identity, and comply with applicable legal obligations. We do not collect data for its own sake.
No Sale of Personal Data
nc999 does not sell, rent, or trade your personal information to any third party for commercial or marketing purposes. Data shared with service providers is strictly limited to what is necessary for them to perform their contracted function.
Transparent Data Use
This policy clearly explains every purpose for which nc999 processes your personal data. We do not use your information for any purpose not described in this policy without first obtaining your explicit consent.
Player Control
You have the right to access, correct, and request deletion of your personal data at any time. nc999 provides clear mechanisms to exercise these rights by contacting our support team at [email protected].
Secure Payment Processing
Payment details submitted through bKash, Nagad, Rocket, Upay, and bank transfer channels are handled by certified payment processors. nc999 does not store full card numbers or mobile banking PINs on its own servers.
Information We Collect
nc999 collects personal data through several channels: directly from you during registration and account use, automatically through your interaction with the Platform, and from third-party partners where permitted by law.
1.1 Information You Provide Directly
When you register an account, complete KYC verification, make a deposit, request a withdrawal, or contact support, you provide nc999 with personal information including:
| Data Category | Specific Data Points | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, National ID (NID) number, passport number | Registration & KYC verification |
| Contact Data | Mobile number (BD), email address, residential address in Bangladesh | Registration & account updates |
| Financial Data | bKash / Nagad / Rocket / Upay account number, bank account details, deposit and withdrawal history | Payment processing |
| KYC Documents | Scanned NID, passport, driver's licence, proof of address, payment method screenshots | Identity verification |
| Communication Data | Live chat transcripts, support emails, complaint records | Customer support interactions |
| Responsible Gaming Data | Deposit limit preferences, self-exclusion requests, cooling-off period selections | Responsible gaming tool usage |
1.2 Information Collected Automatically
When you access nc999.app, our systems automatically collect certain technical and behavioural data to ensure platform stability, detect fraud, and improve the user experience. This includes:
- Device and Technical Data: IP address, device type and model, operating system and version, browser type and version, screen resolution, and hardware identifiers.
- Usage Data: Pages visited, time spent on each page, games played, bet amounts placed, session start and end times (recorded in BST, UTC+6), and navigation paths through the Platform.
- Log Data: Server access logs including timestamps, request types, referring URLs, and error codes generated during your session.
- Location Data: Country and city-level geolocation derived from your IP address, used to enforce geographic access restrictions and provide localised content for the Bangladesh market. nc999 does not collect GPS-level location data.
1.3 Information from Third-Party Sources
nc999 may receive supplementary information about you from trusted third-party sources where this is necessary to verify your identity, prevent fraud, or fulfil legal obligations. These sources may include identity verification services, fraud prevention databases, and payment processors. Any third-party data received is processed in accordance with this Privacy Policy and the applicable data sharing agreements in place with those providers.
How We Use Your Data
nc999 processes personal data only for the specific purposes set out in this article. Each processing activity is grounded in one of the following legal bases: performance of a contract with you, compliance with a legal obligation, our legitimate interests as a platform operator (where these do not override your rights), or your explicit consent where required.
2.1 Account Management and Service Delivery
The primary purpose for which nc999 processes your personal data is to create and maintain your player account, verify your identity and age (18+ requirement), process deposits and withdrawals in BDT via bKash, Nagad, Rocket, Upay, and bank transfer, and to provide access to casino games, slots, live tables, and sports betting markets. Without this processing, nc999 cannot provide you with its core service.
2.2 Fraud Prevention and Security
nc999 uses technical data, usage data, and identity data to detect and prevent fraud, money laundering, bonus abuse, multi-accounting, and other prohibited activities. This includes automated screening of account activity against known fraud patterns and cross-referencing payment details against our internal risk databases. This processing is based on our legitimate interest in protecting the integrity of the Platform and safeguarding the funds of all players.
2.3 Legal and Regulatory Compliance
nc999 processes identity documents and financial transaction records to meet its legal obligations, including Know Your Customer (KYC) requirements, anti-money-laundering (AML) obligations, and responses to lawful requests from competent authorities. Compliance-related data is retained for the minimum periods required by applicable law, as detailed in Article 6.
2.4 Customer Support
When you contact nc999 support by email or live chat, the content of your communications, along with relevant account data, is processed to resolve your query or complaint. Support records are retained for quality assurance, staff training, and to maintain an accurate history of any dispute resolution processes.
2.5 Responsible Gaming
nc999 uses your gaming activity data, deposit and withdrawal history, and any responsible gaming preferences you have set to monitor for indicators of problem gambling and to enforce any limits, time-outs, or self-exclusions you have requested. This processing is conducted in your best interests and is a core component of nc999's commitment to player welfare.
2.6 Platform Improvement and Analytics
Aggregated, anonymised usage data is analysed to understand how players interact with nc999, identify technical issues, optimise game loading performance, and improve the overall platform experience for the Bangladesh market. Where analytics tools involve personal data, these are processed under nc999's legitimate interest in improving its service, subject always to your right to object.
2.7 Marketing Communications
With your explicit consent, nc999 may send you promotional communications about bonuses, seasonal offers (such as Eid promotions, Pohela Boishakh specials, BPL season offers, and IPL betting promotions), and new game releases. You may withdraw consent for marketing communications at any time by updating your account preferences or by contacting support at [email protected]. Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to withdrawal.
Data Sharing & Third Parties
nc999 does not sell, rent, or trade your personal data. Data is shared with third parties only in the specific, limited circumstances described below. All third-party recipients of nc999 player data are subject to contractual data processing agreements that require them to protect your information to standards consistent with this Privacy Policy.
3.1 Payment Service Providers
To process deposits and withdrawals in BDT, nc999 shares the minimum necessary financial data with our payment processing partners including bKash, Nagad, Rocket, Upay, and Bangladeshi banking institutions. These providers receive only the data required to execute and verify the specific transaction. nc999 does not share your gaming history, betting patterns, or account balance information with payment providers.
3.2 Identity Verification Services
nc999 uses certified third-party identity verification providers to perform KYC checks. These providers may receive copies of your identity documents and contact details solely for the purpose of verifying your identity and age. Verification providers are contractually prohibited from using your data for any purpose other than the verification service they provide to nc999.
3.3 Game Technology Providers
Games available on nc999 are supplied by third-party game studios and live casino providers including Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, Spribe, and others. These providers' servers record game round data (stakes, outcomes, timestamps) for the purpose of game integrity verification and dispute resolution. Game providers operate under their own privacy policies and data processing agreements with nc999.
3.4 Analytics and Platform Technology Providers
nc999 uses technology service providers to support platform infrastructure, security monitoring, and aggregated analytics. These providers process technical and usage data on nc999's behalf and are contractually restricted from using that data for their own independent purposes.
3.5 Legal and Regulatory Authorities
nc999 will disclose personal data to competent authorities, law enforcement agencies, or courts where required to do so by applicable law, court order, or regulatory direction. In such cases, nc999 will disclose only the minimum data required to satisfy the legal obligation and will notify the affected player where it is legally permissible to do so.
Data Security Measures
nc999 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures are reviewed and updated regularly to reflect current best practices in information security.
Technical Security Controls
- Transport Security: All data in transit between your device and nc999's servers is encrypted using TLS 1.3 with strong cipher suites. HTTP connections are automatically redirected to HTTPS.
- Data at Rest: Personal data and financial records stored on nc999's infrastructure are encrypted at rest using AES-256 encryption.
- Access Controls: Access to personal data within nc999's systems is granted on a strict need-to-know basis. All staff access is logged, audited, and subject to multi-factor authentication.
- Intrusion Detection: nc999's infrastructure is protected by real-time intrusion detection and prevention systems (IDS/IPS) and 24/7 security monitoring.
- Penetration Testing: nc999 commissions independent security assessments of its platform infrastructure on a regular basis to identify and remediate vulnerabilities.
Organisational Security Measures
- All nc999 staff with access to personal data receive mandatory data protection training upon joining and annually thereafter.
- nc999 maintains a documented data breach response plan. In the event of a breach affecting player data, affected players will be notified without undue delay in accordance with applicable requirements.
- Third-party service providers are vetted for security compliance before being granted access to any nc999 player data.
Data Retention
nc999 retains personal data only for as long as it is necessary for the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention schedule applies to the main categories of personal data held by nc999:
| Data Category | Retention Period | Basis for Retention |
|---|---|---|
| Account and Identity Data | Duration of account + 5 years after account closure | Legal / AML compliance obligation |
| Financial Transaction Records | 7 years from the date of the transaction | Legal / financial record-keeping obligation |
| KYC Documents | 5 years from the date of verification or account closure (whichever is later) | Legal / AML compliance obligation |
| Game History and Bet Records | 3 years from the date of the game round | Dispute resolution / legitimate interest |
| Customer Support Communications | 3 years from the date of the final response | Dispute resolution / legitimate interest |
| Marketing Consent Records | 3 years from consent or withdrawal of consent | Legal obligation to evidence consent |
| Analytics Data (anonymised) | Up to 26 months (aggregated, non-personal) | Legitimate interest in platform improvement |
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where anonymisation is applied, the resulting data no longer constitutes personal data and may be retained indefinitely for statistical or analytical purposes.
If you request deletion of your personal data (see Article 7), nc999 will process your request subject to any overriding legal obligation to retain specific data categories for the periods described above. Where a legal retention obligation applies, nc999 will clearly explain this to you and will restrict the processing of your data to only those purposes required by law until the retention period expires.
Your Privacy Rights
nc999 recognises and respects your rights over your personal data. The following rights are available to all nc999 players. To exercise any of these rights, contact us at [email protected] with the subject line "Privacy Rights Request".
Right of Access
You may request a copy of all personal data nc999 holds about you. nc999 will provide this in a structured, readable format within 30 days of a verified request.
Right to Rectification
If any personal data held by nc999 is inaccurate or incomplete, you have the right to request that it be corrected. Some corrections (e.g., name changes) will require supporting documentation.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for its original purpose and where no legal retention obligation applies. Erasure requests are processed within 30 days.
Right to Restrict Processing
In certain circumstances — such as where you contest the accuracy of data or have objected to processing — you may request that nc999 restrict how your data is used while the matter is under review.
Right to Data Portability
You may request your personal data in a machine-readable format (JSON or CSV) so that it can be transferred to another service provider. This right applies to data you have provided directly to nc999.
Right to Object
You may object to nc999 processing your personal data for direct marketing at any time, with immediate effect. You may also object to processing based on nc999's legitimate interests, subject to nc999 demonstrating compelling grounds.
nc999 will respond to all verified privacy rights requests within 30 calendar days. In complex cases, this period may be extended by a further 30 days, in which case nc999 will notify you of the extension and the reason for it within the initial 30-day window. nc999 will not charge a fee for responding to privacy rights requests unless a request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.
To verify your identity before processing any privacy rights request, nc999 may ask you to confirm details associated with your account. This step is taken to protect your data from being disclosed to or altered by unauthorised third parties.
Policy Updates & Contact
8.1 Changes to This Policy
nc999 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or Platform features. The effective date at the top of this policy will be updated whenever a material change is made. For significant changes — particularly those that affect the legal basis for processing or introduce new categories of data sharing — nc999 will notify registered players via their registered email address or via a prominent notice on the Platform at least 14 days before the change takes effect.
Your continued use of nc999 after the effective date of any updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with any update to this policy, you should close your account and cease using the Platform before the effective date of the change.
8.2 Minor and Non-Material Changes
nc999 may make minor, non-material updates to this policy from time to time — for example, to correct typographical errors, update contact details, or clarify existing language without changing its substance. Such changes will be reflected in the updated effective date but will not trigger a separate player notification. We encourage you to review this page periodically to stay informed of the current policy.
8.3 Contact the nc999 Privacy Team
If you have any questions about this Privacy Policy, wish to exercise a privacy right, or have a concern about how nc999 handles your personal data, please contact our privacy team using the following details:
- Email: [email protected] (subject line: "Privacy Enquiry")
- Response Time: nc999 aims to acknowledge all privacy enquiries within 48 hours and to provide a substantive response within 14 business days.
- Language: Privacy enquiries may be submitted in English. Our support team is available in English and Bengali.
- Hours: Support is available 24 hours a day, 7 days a week. Privacy-specific requests are handled by a dedicated team during business hours (09:00–18:00 BST, Monday to Friday).
Our support team is available around the clock to help with any privacy-related queries. You can also review our full Terms & Conditions or explore the nc999 Casino to see what awaits you on Bangladesh's premier gaming platform.
18+ only. Gambling involves financial risk. Please play responsibly. Privacy Policy last updated: 1 January 2026.