cl999 Privacy Policy

1. About This Policy

This Privacy Policy ("Policy") applies to all personal data collected and processed by cl999 ("we", "us", "our") in connection with the cl999 platform available at https://cl999.io ("the Platform"). It applies to all registered members, prospective members, and visitors who access or browse the Platform.

By registering an account with cl999 or otherwise using the Platform, you acknowledge that you have read and understood this Policy and agree to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should cease using the Platform and, if applicable, request account closure by contacting us at [email protected].

This Policy should be read alongside the cl999 Terms & Conditions, which govern your overall use of the Platform. Where there is any inconsistency between this Policy and the Terms & Conditions on matters relating to data privacy, this Policy takes precedence.

2. Data We Collect

cl999 collects personal data from you in two primary ways: data you provide directly to us, and data generated automatically through your use of the Platform.

2.1 Data You Provide Directly

• Registration data: Full legal name, date of birth, residential address (including city — for example, Dhaka, Chittagong, Sylhet, Khulna, or Rajshahi), email address, and mobile phone number.
• Identity verification (KYC) documents: National Identity Card (NID), passport, driving licence, utility bills, bank statements, or mobile banking transaction records submitted to verify your identity and address.
• Payment data: Mobile banking account details for bKash, Nagad, Rocket, and Upay; card details for Visa and Mastercard transactions. Full payment card numbers are processed via PCI-DSS compliant payment processors and are not stored on cl999 servers.
• Communications data: The content of support tickets, live chat transcripts, emails, and any other correspondence you send to cl999.
• Responsible gaming preferences: Deposit limits, session reminders, cooling-off selections, and self-exclusion requests made through your account settings.

2.2 Data Collected Automatically

• Device and technical data: IP address, browser type and version, operating system, device identifiers, screen resolution, and referring URL.
• Usage data: Pages visited on the Platform, time and duration of visits, games launched, bets placed, search queries, and navigation paths.
• Transaction data: A full record of all deposits, withdrawals, wagers, winnings, bonus claims, and account balance changes associated with your cl999 account.
• Cookie and tracking data: Data collected via cookies and similar technologies as described in Section 6 below.

2.3 Data We Do Not Collect

cl999 does not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information unless specifically required for regulatory compliance purposes and with your explicit consent. We do not collect data from individuals under the age of 21.

3. How We Use Your Data

cl999 uses your personal data for the following purposes:

Purpose	Description
Account management	Creating, maintaining, and administering your cl999 member account, including processing deposits and withdrawals.
Identity verification	Conducting KYC checks to verify your age (21+), identity, and address in compliance with anti-money laundering obligations.
Transaction processing	Processing deposits via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and facilitating withdrawals to your nominated payment method.
Fraud prevention	Detecting and preventing unauthorised account access, bonus abuse, money laundering, and other prohibited activities.
Responsible gaming	Monitoring account activity to identify patterns consistent with problem gambling and administering self-exclusion, deposit limit, and cooling-off requests.
Customer support	Responding to your enquiries, resolving disputes, and processing complaints via email at [email protected].
Platform improvement	Analysing aggregated usage data to improve the cl999 platform, personalise your experience, and develop new features.
Marketing communications	Sending promotional offers, bonus notifications, and VIP programme updates by email or in-platform notification where you have provided consent.
Legal compliance	Meeting our obligations under applicable anti-money laundering, counter-terrorism financing, and data protection laws.

4. Legal Bases for Processing

cl999 processes your personal data under the following legal bases:

• Contractual necessity: Processing required to enter into and perform our contract with you, including account registration, payment processing, and providing access to betting and gaming services.
• Legal obligation: Processing required to comply with applicable law, including identity verification, AML record-keeping, and responsible gaming obligations.
• Legitimate interests: Processing undertaken for cl999's legitimate business interests, including fraud prevention, platform security, and improving our services — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, informed consent, including sending direct marketing communications. You may withdraw consent at any time by contacting [email protected] or adjusting your account communication preferences.

5. Sharing Your Data

cl999 does not sell or rent your personal data to third parties. We may share your data with the following categories of recipients, strictly for the purposes outlined in Section 3:

5.1 Payment Service Providers

To process deposits and withdrawals, cl999 shares relevant transaction data with licensed payment service providers including bKash, Nagad, Rocket, Upay, and card scheme processors for Visa and Mastercard. Each provider processes your data in accordance with their own privacy policies and applicable financial regulation.

5.2 Identity Verification Partners

cl999 uses third-party KYC service providers to assist with automated and manual identity verification. These partners process identity document data on our behalf under strict contractual data processing agreements and are prohibited from using your data for any purpose beyond KYC verification for cl999.

5.3 Technology and Infrastructure Providers

cl999 uses cloud hosting, database management, and security service providers to operate the Platform. These providers act as data processors and handle your data only on our documented instructions.

5.4 Game Content Providers

Certain game providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — receive limited session data required to deliver their games within the cl999 platform environment. This data is limited to what is technically necessary for game delivery and is governed by data processing agreements.

5.5 Law Enforcement and Regulatory Bodies

cl999 may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required by applicable law, legal process, or in connection with the investigation of suspected money laundering, fraud, or other criminal activity.

5.6 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of cl999's assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and the privacy terms applicable to your data under the new ownership before the transfer takes effect.

6. Cookies & Tracking Technologies

cl999 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Strictly necessary cookies: These are essential for the Platform to function. They maintain your login session, remember your preferences, and ensure security features operate correctly. These cookies cannot be disabled without affecting Platform functionality.
• Performance and analytics cookies: These collect anonymised information about how members use the Platform — which pages are visited most, how users navigate between sections, and where errors occur — to help us improve the cl999 experience.
• Functional cookies: These remember your preferences such as language settings, display options, and odds format selections to personalise your Platform experience across sessions.
• Marketing and retargeting cookies: These are used only where you have provided explicit consent and allow cl999 to deliver relevant promotional content on the Platform. No third-party advertising networks are used to serve off-platform advertising via cl999 cookies.

You may manage your cookie preferences at any time through your browser settings. Please note that disabling strictly necessary cookies will impair Platform functionality, including the ability to maintain your cl999 login session.

7. Data Retention

cl999 retains your personal data for the following periods:

• Active account data: Retained for the lifetime of your cl999 account and for a minimum period of five (5) years following voluntary account closure or cl999-initiated account termination, in line with standard AML record-keeping obligations.
• KYC verification documents: Retained for a minimum of five (5) years from the date of submission or from the date of account closure, whichever is later.
• Transaction records: All deposit, withdrawal, and wagering records are retained for a minimum of five (5) years following the relevant transaction date.
• Support communications: Retained for three (3) years from the date of the most recent communication in a given support thread.
• Marketing consent records: Retained until consent is withdrawn, and for a period of three (3) years thereafter as evidence of the original consent.
• Technical and usage logs: Retained for up to twelve (12) months from the date of generation, unless retained longer for security investigation purposes.

Upon expiry of the applicable retention period, cl999 will securely delete or anonymise your personal data so that it can no longer be associated with you as an identifiable individual.

8. Data Security

cl999 implements a layered approach to data security across the Platform. Key technical and organisational measures include:

• 256-bit SSL/TLS encryption for all data in transit between member devices and cl999 servers.
• Encryption of sensitive data fields at rest, including identity document references and payment method details.
• Role-based access controls ensuring that cl999 staff access only the data necessary for their specific job function.
• Multi-factor authentication requirements for all cl999 internal system access.
• Regular third-party penetration testing and vulnerability assessments of the Platform and supporting infrastructure.
• A documented incident response and breach notification procedure, reviewed and tested annually.
• Employee data protection training conducted at onboarding and refreshed annually.

While cl999 takes all reasonable technical precautions, no online platform can guarantee absolute security. Members are encouraged to use strong, unique passwords for their cl999 login credentials and to enable any additional account security features available in account settings.

9. Your Rights

Subject to applicable law, cl999 members hold the following rights in relation to their personal data:

• Right of access: You may request a copy of the personal data cl999 holds about you. We will respond to verified access requests within 30 days.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data held in your cl999 account.
• Right to erasure: In certain circumstances — where data is no longer necessary for the purpose for which it was collected and no overriding legal obligation to retain it exists — you may request deletion of your personal data.
• Right to restrict processing: You may request that cl999 temporarily restrict the processing of your personal data while a dispute about its accuracy or our legal basis for processing is resolved.
• Right to data portability: Where processing is based on consent or contractual necessity and carried out by automated means, you may request that cl999 provide your personal data in a structured, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to object: You may object to processing carried out on the basis of cl999's legitimate interests, including profiling for marketing purposes, at any time.

To exercise any of the above rights, please submit a written request to [email protected] from the email address registered to your cl999 account. cl999 may need to verify your identity before processing your request. We will respond within 30 days of receiving a complete, verifiable request.

10. Children's Privacy

The cl999 Platform is strictly intended for adults aged 21 years and over. cl999 does not knowingly collect personal data from anyone under the age of 21. If you are a parent or guardian and believe that a person under 21 in your care has provided personal data to cl999 or created a cl999 account, please contact us immediately at [email protected]. Upon verification, we will take prompt action to close the account and delete the associated personal data.

Age verification is conducted as part of the standard cl999 KYC process. Accounts where the member is found to be under 21 will be closed immediately and any account balance will be returned to the payment method on file, less any bonuses received.

11. Third-Party Links

The cl999 Platform may contain references to third-party services, including payment providers and game studios. This Privacy Policy applies solely to data processed by cl999 in connection with the cl999 Platform. cl999 is not responsible for the privacy practices of any third-party services you access independently. We encourage you to review the privacy policies of any external services before providing your personal data to them.

12. Policy Updates

cl999 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing activities, applicable law, or operational practices. Material updates will be communicated to registered members via the email address or contact method on file at least 14 days before taking effect. The revised Policy will be published on this page with an updated effective date. Your continued use of the Platform following the effective date of any update constitutes your acceptance of the revised Policy.

13. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a privacy concern, please contact the cl999 data protection team in writing. Our support team operates on Bangladesh Standard Time (BST, UTC+6).

Email: [email protected]

Please include your registered username, the nature of your enquiry, and any relevant account or transaction references when contacting us to ensure the fastest possible resolution. cl999 aims to acknowledge all privacy-related written enquiries within 48 hours and to resolve them within 30 calendar days.