op999 Privacy Policy
At op999, your privacy is a core commitment, not an afterthought. This Privacy Policy explains exactly what personal information we collect, how we use it, who we share it with, and the rights you hold over your own data as a member of Bangladesh's trusted online casino platform.
Your privacy matters to us. This Privacy Policy describes how op999 collects, processes, stores, and protects the personal data of all members and visitors who access the op999 platform at op999.io. By registering an account or using any part of the platform, you acknowledge that you have read and understood this policy in full.
Introduction
op999 ("we", "us", "our", "the Platform") is an online casino and sports betting platform serving the Bangladesh market at op999.io. We are committed to safeguarding the privacy and personal data of every individual who interacts with our platform, whether as a registered member, a prospective player browsing the site, or a visitor to any of our support or information pages.
This Privacy Policy ("Policy") sets out in plain, transparent terms: what categories of personal data op999 collects; the purposes for which that data is used; the legal basis on which it is processed; who it may be shared with; how long it is retained; and the rights available to you as a data subject. This Policy is incorporated by reference into the op999 Terms and Conditions and should be read alongside them.
op999 operates in accordance with applicable data protection principles including purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality. Where we collect personal data, we do so only to the extent necessary for the purposes described in this Policy.
Effective Date: This Privacy Policy takes effect from January 2026 and supersedes all prior versions. The most current version is always published at op999.io/privacy-policy.
Data We Collect
op999 collects personal data through several channels: directly from you when you register and use the platform, automatically when you access our services, and from third-party sources where necessary to verify your identity or comply with our obligations. The categories of personal data we collect are described below.
| Category | Examples | Collection Method |
|---|---|---|
| Identity Data | Full name, date of birth, gender, National ID (NID) number, passport number | Registration form, KYC verification |
| Contact Data | Email address, mobile phone number (Bangladesh), city of residence (e.g., Dhaka, Chittagong, Sylhet) | Registration form, account settings |
| Financial Data | bKash account number, Nagad number, Rocket number, Upay number, bank account details, transaction history | Cashier / payment processing |
| Technical Data | IP address, device type, browser type and version, operating system, screen resolution, session duration | Automatic (server logs, cookies) |
| Usage Data | Games played, bets placed, wager amounts, session timestamps, login history, pages visited | Automatic (platform activity logs) |
| Communications Data | Live chat transcripts, email correspondence, support ticket content | Customer support interactions |
| Verification Data | Copies of government-issued photo ID, selfie images submitted for identity verification | KYC verification process |
op999 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (beyond identity photographs submitted for KYC), or health information, except where disclosure of health-related information is voluntarily made by a member in the context of a responsible gaming self-exclusion request.
How We Use Your Data
op999 processes personal data only for legitimate, defined purposes. We do not use your data for purposes incompatible with those disclosed in this Policy. The primary purposes for which we use personal data collected from you are as follows:
- Account Creation and Administration: To register your account, verify your identity, manage your profile settings, and maintain accurate records of your membership with op999.
- Payment Processing: To process deposits made via bKash, Nagad, Rocket, Upay, and supported bank transfer methods, and to process withdrawal requests to your verified payment method, including performing fraud checks on financial transactions.
- Service Delivery: To provide you with access to casino games, live sports betting markets, promotional offers, and all other features of the op999 platform.
- Identity Verification (KYC): To confirm that you meet the eligibility criteria to use the platform, including age verification (21+), and to satisfy our obligations relating to the prevention of financial crime.
- Responsible Gaming Monitoring: To track your gaming activity and identify patterns that may indicate problem gambling behaviour, and to facilitate the use of responsible gaming tools including deposit limits, cooling-off periods, and self-exclusion.
- Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, account abuse, money laundering, and other activities that breach our Terms and Conditions or applicable law.
- Customer Support: To respond to your enquiries, resolve disputes, process complaints, and provide technical assistance relating to your account or transactions.
- Marketing Communications: Where you have given your consent, to send you promotional emails, SMS messages, or in-platform notifications about bonuses, new games, seasonal promotions, and special events relevant to Bangladesh (such as BPL cricket season offers or Eid promotions). You may withdraw this consent at any time.
- Platform Improvement: To analyse aggregated, anonymised usage data to improve the performance, design, and content of the op999 platform over time.
- Legal Compliance: To meet our obligations under applicable financial record-keeping, anti-money laundering, and data protection requirements.
No Automated Decision-Making: op999 does not make decisions that produce significant legal effects for you based solely on automated processing of your personal data without human review. Where automated systems flag an account for review, a member of the op999 compliance team assesses the matter before any action is taken.
Legal Basis for Processing
op999 processes your personal data on one or more of the following legal bases, depending on the specific purpose and context of the processing activity:
- Contractual Necessity: Processing is necessary to perform the contract between you and op999 — specifically, to operate your account, process your transactions, and deliver the gaming services you have requested.
- Legal Obligation: Processing is required to comply with applicable legal and regulatory obligations, including financial record-keeping requirements and the prevention of money laundering and financial crime.
- Legitimate Interests: Processing is necessary for purposes of the legitimate interests pursued by op999, including fraud prevention, platform security, responsible gaming monitoring, and the improvement of our services, where these interests are not overridden by your fundamental rights and freedoms.
- Consent: Where we rely on consent as the legal basis (for example, for direct marketing communications), we will obtain your explicit agreement before processing your data for that purpose. You have the right to withdraw your consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.
Data Sharing
op999 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. We may, however, share your personal data with the following categories of recipients where necessary to deliver our services or meet our obligations:
- Payment Service Providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank — shared to the minimum extent necessary to process your deposits and withdrawals. Each provider operates under its own privacy policy and data security standards.
- Game Technology Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Jili, Spribe, and Ezugi — these providers may receive anonymised session data (e.g., game round IDs, timestamps) to operate their certified RNG systems and resolve game disputes. They do not receive your identity or financial data.
- Identity Verification Services: Third-party KYC service providers who assist us in verifying government-issued identification documents and confirming that members meet the 21+ age requirement.
- Fraud Prevention Platforms: Technology partners who assist op999 in detecting and preventing fraudulent account activity, multi-accounting, and financial crime.
- IT Infrastructure and Hosting Providers: Secure cloud hosting and infrastructure service providers who store platform data on op999's behalf under strict data processing agreements.
- Legal and Regulatory Authorities: Law enforcement agencies, financial intelligence units, or courts of competent jurisdiction where we are required by law to disclose personal data, or where disclosure is necessary to protect the rights, property, or safety of op999 or its members.
All third-party recipients of your personal data are contractually required to process it only for the specific purpose for which it was shared, to maintain appropriate technical and organisational security measures, and to delete or return data when the purpose has been fulfilled. op999 does not transfer personal data to recipients in jurisdictions that do not provide adequate data protection standards without appropriate safeguards in place.
Cookies & Tracking Technologies
op999 uses cookies and similar tracking technologies to operate the platform, improve user experience, and gather anonymised analytics data. A cookie is a small text file placed on your device when you visit op999.io. The types of cookies we use are described below:
- Strictly Necessary Cookies: These cookies are essential for the platform to function. They maintain your login session, remember your preferences within a session, and protect the platform against cross-site request forgery (CSRF) attacks. These cookies cannot be disabled without breaking core platform functionality.
- Performance and Analytics Cookies: These cookies collect anonymised information about how visitors use op999.io — such as which pages are visited most frequently, average session duration, and error rates — to help us improve platform performance. This data is aggregated and does not identify individual users.
- Functional Cookies: These cookies remember your preferences (such as your preferred language setting and display options) to provide a more personalised experience during your visit.
- Marketing Cookies: Where you have consented, these cookies track your interaction with op999 promotional content to allow us to measure the effectiveness of marketing campaigns and deliver relevant promotional communications. You may withdraw consent for marketing cookies at any time via your account settings.
You may manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of some platform features. For a complete list of the specific cookies used on op999.io and their individual retention periods, please contact [email protected].
Data Retention
op999 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to any longer retention periods required by applicable legal or regulatory obligations. Our standard data retention periods are as follows:
- Account and Identity Data: Retained for the duration of your active membership and for a minimum of five (5) years following account closure, to meet financial record-keeping and anti-money laundering obligations.
- Transaction Records: All deposit and withdrawal records are retained for a minimum of five (5) years from the date of the transaction, in accordance with financial record-keeping requirements applicable to the payments industry in Bangladesh.
- KYC Verification Documents: Copies of identity documents and verification data are retained for a minimum of five (5) years following the date of verification or account closure, whichever is later.
- Customer Support Communications: Live chat transcripts and email correspondence are retained for two (2) years from the date of the interaction, to support dispute resolution and quality monitoring.
- Technical and Usage Logs: Server access logs, IP address records, and session logs are retained for up to twelve (12) months for security monitoring and fraud prevention purposes.
- Marketing Consent Records: Records of your marketing consent preferences are retained for the duration of your membership and for one (1) year following account closure.
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual. You may request early deletion of specific categories of your personal data in accordance with your rights described in Section 9 of this Policy, subject to any overriding legal obligations that require retention.
Data Security
op999 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security framework includes the following key controls:
- SSL/TLS Encryption: All data transmitted between your device and the op999 platform is encrypted using SSL/TLS protocols. The padlock icon visible in your browser confirms that an encrypted connection is active at all times during your session.
- Password Security: Member account passwords are stored using strong, industry-standard cryptographic hashing algorithms. op999 never stores passwords in plain text, and no member of our staff can retrieve your password — only a secure reset process is available.
- Access Controls: Access to personal data held by op999 is restricted on a strict need-to-know basis. Internal staff access is governed by role-based access controls and is subject to logging and regular audit.
- Login Activity Monitoring: op999 monitors login activity for suspicious patterns, including unusual geographic locations, multiple failed login attempts, and concurrent sessions from different devices. Suspicious activity triggers an automatic account security review.
- Infrastructure Security: Platform infrastructure is hosted in secure data centres with physical access controls, redundant network architecture, and regular independent security assessments.
- Incident Response: op999 maintains a documented data breach incident response procedure. In the event of a confirmed breach that creates a significant risk to affected members, we will notify impacted members and take appropriate remediation steps without undue delay.
Your Responsibility: While op999 takes extensive measures to protect your data, the security of your account also depends on the strength and confidentiality of your login credentials. Use a unique, strong password for your op999 account and never share it with any third party. If you suspect your account has been compromised, contact support immediately at [email protected].
Your Rights
As a data subject, you hold a set of rights in relation to the personal data op999 holds about you. op999 is committed to facilitating the exercise of these rights in a straightforward and timely manner. To submit any data rights request, contact [email protected] with the subject line "Data Rights Request — [Your Username]".
Right of Access
You may request a copy of all personal data op999 holds about you, along with details of how it is processed and with whom it is shared.
Right to Rectification
If any personal data op999 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
Right to Restrict Processing
You may request that op999 restrict the processing of your personal data in certain circumstances, such as while a dispute about its accuracy is being resolved.
Right to Data Portability
You may request a copy of your personal data in a structured, machine-readable format (e.g., CSV or JSON) to transfer to another service provider.
Right to Object
You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests where your specific situation warrants it.
op999 will respond to all data rights requests within 30 days of receipt. In complex cases, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reason for the delay. op999 will not charge a fee for processing data rights requests unless a request is manifestly unfounded or excessive.
Children & Minors
op999 is strictly an adult platform. Access to and use of any op999 service is limited to individuals who are 21 years of age or older. op999 does not knowingly collect personal data from anyone under the age of 21.
If op999 discovers or receives credible notice that personal data has been collected from an individual under the age of 21, we will take immediate steps to delete that data permanently, close the associated account, return any deposits made, and forfeit any associated winnings in accordance with our Terms and Conditions.
If you are a parent or guardian and believe that a minor in your care has created an op999 account or submitted personal data to our platform, please contact us immediately at [email protected]. We treat all reports of underage registration with the highest priority and will act without delay.
Third-Party Links
The op999 platform may contain references to third-party services, game providers, or payment partners. Where such references include links to external websites or applications (for example, a payment provider's own help page), please be aware that op999 does not operate, control, or take responsibility for the privacy practices or data handling of those external services.
This Privacy Policy applies solely to personal data processed by op999 in connection with the op999.io platform. We encourage you to review the privacy policies of any third-party service you choose to interact with, including your chosen payment provider (bKash, Nagad, Rocket, or other), independently of this Policy.
Policy Updates
op999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or platform features. When material changes are made to this Policy, we will notify registered members by publishing the revised Policy at op999.io/privacy-policy and, where practicable, by sending a notification to the email address on record for your account.
The updated Policy will take effect from the date specified in the revision notice. Your continued use of the op999 platform following the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not agree with any changes, you should cease using the platform and contact support to request account closure.
The version date displayed at the top of this Policy reflects the date of the most recent revision. We recommend reviewing this page periodically to stay informed of how op999 handles your personal data.
Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the way op999 handles your personal data, please contact our support team using the details below. We are committed to addressing all privacy-related enquiries promptly and transparently.
Data Enquiries: For all data rights requests, privacy concerns, or questions about this Policy, please email [email protected] with the subject line "Privacy Enquiry — [Your Username]". Our team operates Bangladesh Standard Time (BST, UTC+6) and aims to respond within 2 business days for general enquiries and within 30 days for formal data rights requests.
When submitting a data rights request, please include your registered username, the email address associated with your op999 account, and a clear description of your request. We may ask for additional information to verify your identity before processing the request — this is to protect your data from unauthorised access by third parties.
How op999 Protects Your Privacy
Every measure listed below is actively maintained and reviewed by the op999 security and compliance team to keep your personal data safe.
End-to-End Encryption
Every byte of data transmitted between your device and op999 is protected by SSL/TLS encryption. Your login credentials, financial data, and personal details are never exposed in transit.
Zero Data Selling
op999 has a strict no-sale policy on member data. We do not sell, rent, or share your personal information with advertisers, data brokers, or any commercial third party for marketing gain.
Verified Identity Protection
KYC documents submitted to op999 are handled by accredited verification partners, stored securely, and never used beyond the identity-check purpose for which they were provided.
Secure BDT Transactions
Deposits and withdrawals via bKash, Nagad, Rocket, and Upay are processed through encrypted payment channels. Financial data is shared with payment providers only to the minimum extent required.
Defined Retention Limits
op999 does not hold your data indefinitely. Clear retention schedules govern every data category, and data is securely deleted or anonymised as soon as the retention period expires.
Full Data Rights Access
Access, correct, export, or request deletion of your personal data at any time by contacting our support team. op999 processes all data rights requests within the guaranteed 30-day window.
Ready to Experience op999?
Now that you understand how op999 protects your personal data, explore 500+ casino games, live cricket betting on BPL and IPL, and instant BDT payments via bKash and Nagad. For adults aged 21 and above only. Please play responsibly.
Have questions? Visit our FAQ page or review our Responsible Gaming policy.