ut999 Privacy Policy

ut999 ("we", "us", "our") is committed to protecting the personal data of all players who register and use the ut999 platform at ut999.io. This Privacy Policy sets out, in plain and formal English, the categories of personal data we collect, the purposes for which that data is processed, the legal basis for processing, how we store and secure data, how long we keep it, and the rights available to you as a data subject.

This Policy applies to all personal data collected through the ut999 website, mobile browser interface, customer support channels, and any related communications including email and live chat. It does not apply to third-party websites linked from the ut999 platform — those websites operate under their own independent privacy policies.

This Privacy Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference into the overall agreement between you and ut999.

For the purposes of this Privacy Policy, ut999 acts as the data controller in respect of personal data collected from players accessing the platform. As data controller, ut999 is responsible for determining the purposes and means of processing your personal data.

If you have any questions about how your personal data is handled, or wish to exercise any of your rights described in Section 10, you may contact our data protection team at the email address provided in Section 14 of this Policy. All correspondence relating to data privacy must be directed to that contact point to ensure it is handled appropriately and in a timely manner.

ut999 collects the following categories of personal data from players:

We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data. If any such data is incidentally disclosed during a support interaction, it will not be recorded or processed for any purpose.

ut999 collects personal data through the following means:

• Direct interactions: Data you provide when completing the registration form, updating your account profile, submitting a deposit or withdrawal request, or contacting support via live chat or email.
• Automated technologies: Technical and usage data collected automatically through cookies, server logs, and similar tracking technologies when you access the ut999 platform. See Section 7 for full details on cookies.
• Third-party payment processors: Transaction confirmation data received from payment partners including bKash, Nagad, Rocket, Upay, and card networks (Visa, Mastercard) when you make a deposit or withdrawal.
• Identity verification providers: Where ut999 uses a third-party KYC service to verify your identity documents, that provider may return a verification result and associated data to us.
• Fraud prevention and analytics services: Aggregated or anonymised data may be received from third-party fraud detection services to help us identify suspicious account activity.

ut999 processes your personal data for the following purposes, each supported by a corresponding legal basis:

Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time by updating your Account notification preferences or by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

6.1 Categories of Recipients. ut999 may share your personal data with the following categories of third parties, strictly on a need-to-know basis and always subject to binding data protection obligations:

• Payment processors: bKash, Nagad, Rocket, Upay, SureCash, Visa, and Mastercard — for the purpose of processing your deposits and withdrawals in BDT.
• Identity verification providers: Third-party KYC and AML compliance services engaged to verify player identity documents and screen against relevant watchlists.
• Game providers: Studios such as Evolution Gaming, Pragmatic Play, Spribe, Ezugi, NetEnt, and Microgaming receive session tokens and player identifiers to facilitate game play. They do not receive your full identity or financial data.
• IT and hosting providers: Cloud infrastructure and cybersecurity service providers who store and protect platform data on our behalf under strict data processing agreements.
• Fraud detection and analytics services: Providers who assist in identifying unusual account activity, bot behaviour, and potential money laundering patterns.

6.2 No Sale of Data. ut999 does not sell, rent, or trade your personal data to any third party for that third party's independent marketing or commercial use. Any data sharing is limited to the purposes described in this Policy.

6.3 Legal Disclosures. ut999 may disclose your personal data to law enforcement, regulatory authorities, or other government bodies where required to do so by applicable law, court order, or where we reasonably believe disclosure is necessary to prevent fraud, protect the security of the platform, or protect the rights of other players.

ut999 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit a website. The following categories of cookies are used on the ut999 platform:

• Strictly necessary cookies: Required for the platform to function. These include session authentication tokens, security cookies, and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Store your preferences such as language settings, preferred payment method, and last-used game category to improve your experience across sessions.
• Analytics cookies: Collect anonymised data about how players navigate the platform — such as pages visited, session duration, and device type — to help us identify areas for improvement. No personally identifiable information is stored in analytics cookies.
• Marketing cookies: Used only where you have opted in to receive promotional communications. These cookies help us tailor promotional content to your demonstrated interests on the platform.

You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect your experience on the ut999 platform. Most modern browsers (Chrome, Firefox, Edge, Safari) provide cookie management options in their privacy or settings menus.

ut999 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and the ut999 servers.
• Encrypted storage of sensitive data fields including passwords (hashed and salted) and financial data.
• Role-based access controls that restrict database and system access to authorised personnel only.
• Regular independent security audits and penetration testing of platform infrastructure.
• Intrusion detection systems and automated alerting for suspicious access patterns.
• Secure and audited deletion procedures for data that has reached the end of its retention period.

Despite these measures, no online platform can guarantee absolute security. In the unlikely event of a data breach that poses a risk to your rights or freedoms, ut999 will notify affected players without undue delay and take immediate steps to contain and remediate the breach.

ut999 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or compliance obligations. The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of the account relationship and for a period of five (5) years following account closure, to satisfy anti-money-laundering record-keeping obligations.
• Financial transaction records: Retained for a minimum of five (5) years following each transaction, in line with financial compliance requirements.
• Communications data (support chat / email): Retained for two (2) years from the date of the interaction, unless the data is required in connection with an ongoing dispute or investigation.
• Technical and usage data: Retained in identifiable form for up to twelve (12) months, after which it is anonymised and may be retained indefinitely for statistical analysis.
• Marketing consent records: Retained for the duration of the account relationship as evidence of consent or opt-out status.

Following the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with an identifiable individual.

As a player on the ut999 platform, you hold the following rights in respect of your personal data:

• Right of Access: You may request a copy of the personal data that ut999 holds about you. We will respond to such requests within a reasonable timeframe.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you withdraw consent, or where processing is unlawful. This right is subject to overriding legal obligations (for example, AML record-keeping requirements) that may require us to retain certain data.
• Right to Restrict Processing: You may request that ut999 restrict processing of your data in certain circumstances, such as where you contest the accuracy of data or where processing is unlawful but you prefer restriction to deletion.
• Right to Data Portability: Where processing is based on your consent or on performance of a contract, you may request that your data be provided to you in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing of your data carried out on the basis of legitimate interests, including profiling for marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. This does not affect the lawfulness of processing prior to withdrawal.

To exercise any of the above rights, please contact our support team at [email protected] with the subject line "Data Rights Request". We will acknowledge your request promptly and aim to fulfil it within 30 days. In complex cases, we may extend this period by a further 30 days, in which case we will inform you of the extension and the reason for it.

The ut999 platform is strictly intended for adults aged 21 years and above. ut999 does not knowingly collect personal data from any individual under the age of 21. If we become aware that personal data has been collected from a minor, that Account will be immediately suspended, all associated data will be securely deleted, and any deposits or winnings will be dealt with in accordance with our Terms & Conditions.

If you have reason to believe that a minor has registered an account on the ut999 platform using false information, please report this to [email protected] immediately so that we may take prompt remedial action.

ut999 may send you promotional communications about bonuses, new games, seasonal offers (for example, Eid promotions, Pohela Boishakh specials, or BPL season offers), and platform updates, subject to your having opted in to receive such communications at registration or through your Account notification settings.

You may opt out of marketing communications at any time by:

• Updating your notification preferences in your Account settings following ut999 login.
• Clicking the unsubscribe link included at the bottom of any promotional email sent by ut999.
• Contacting [email protected] with the subject line "Marketing Opt-Out".

Please note that opting out of marketing communications does not affect the delivery of transactional communications, such as deposit confirmations, withdrawal notifications, security alerts, and account verification requests. These service communications are necessary for the operation of your Account and cannot be opted out of while your Account remains active.

ut999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we provide. When material changes are made, we will notify registered players by email and by posting a prominent notice on the ut999 platform prior to the changes taking effect. The updated Policy will display the revised effective date at the top of this page.

Your continued use of the ut999 platform following the effective date of any revised Privacy Policy constitutes your acknowledgement of the updated Policy. If you do not agree with the changes, you must cease using the platform and may request account closure by contacting [email protected].

We encourage you to review this Privacy Policy periodically so that you remain informed about how ut999 is protecting your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by ut999, please contact our data protection team using the details below. All privacy-related correspondence is handled in English and responded to during Bangladesh Standard Time (BST, UTC+6) business hours, though our support team is available 24 hours a day, 7 days a week via live chat on the platform.

For general account support, including questions about your deposits and withdrawals via bKash, Nagad, or Rocket, please use the live chat feature on the ut999 platform or visit our FAQ page for quick answers to common questions.