ten999 Privacy Policy

1. Overview & Scope

This Privacy Policy describes how ten999 ("ten999", "we", "us", "our") collects, uses, stores, and protects personal information provided by users ("you", "your", "the Player") of the ten999 platform, accessible at https://ten999.win and any associated mobile or application interfaces operated under the ten999 brand.

This Policy applies to all personal data processed in connection with your use of the ten999 website, account registration, payment transactions, customer support interactions, and any other service provided by ten999. By creating an account or continuing to use the platform, you acknowledge that you have read, understood, and accepted the practices described in this Privacy Policy.

This Privacy Policy should be read alongside the ten999 Terms & Conditions, which govern the overall relationship between you and ten999. In the event of any conflict between this Policy and the Terms & Conditions on a privacy matter, this Privacy Policy shall prevail.

2. Data We Collect

ten999 collects personal data through several channels. The categories of data we may collect are set out in the table below:

2.1 Data You Provide Voluntarily

The majority of personal data ten999 holds is provided directly by you — for example, when you complete the registration form, upload identity documents for verification, contact our support team, or set responsible gaming limits on your account. Providing accurate information in these contexts is a condition of using the platform.

2.2 Data Collected Automatically

When you access the ten999 website or application, certain technical data is collected automatically by our servers and analytics tools. This includes your IP address, device identifiers, browser configuration, and a record of the pages you visit and the actions you take. This data is used primarily for platform security, fraud detection, and service improvement purposes.

3. How We Use Your Data

ten999 processes personal data only for specified, lawful purposes. The primary purposes for which we use your data are as follows:

• Account Registration & Management: To create and maintain your ten999 account, verify your identity, and administer your account settings and preferences.
• Payment Processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, and Upay, and to maintain accurate financial records of all transactions denominated in BDT.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, bonus abuse, money laundering, and other unauthorised or illegal conduct on the platform.
• Responsible Gaming: To monitor gameplay patterns that may indicate problem gambling behaviour, to enforce self-imposed limits, and to action cooling-off or self-exclusion requests in a timely manner.
• Customer Support: To respond to your enquiries, resolve disputes, and provide assistance with account issues through our English and Bengali support channels.
• Legal & Regulatory Compliance: To meet record-keeping obligations and to respond to lawful requests from competent authorities in Bangladesh and applicable jurisdictions.
• Platform Improvement: To analyse aggregated, anonymised usage data in order to improve the design, performance, and content of the ten999 platform.
• Communications: To send you transactional notifications (e.g., deposit confirmations, withdrawal status updates, security alerts) and, where you have opted in, promotional communications about relevant offers.

4. Legal Basis for Processing

ten999 processes your personal data on the following legal bases:

• Contract Performance: Processing necessary to deliver the services you have signed up for, including account management, bet settlement, and payment processing.
• Legal Obligation: Processing required to comply with applicable laws, including anti-money-laundering (AML) requirements, age verification obligations, and responses to lawful authority requests.
• Legitimate Interests: Processing carried out in ten999's legitimate interests, such as fraud prevention, platform security, and improving the quality of the service — where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — primarily in relation to optional marketing communications. You have the right to withdraw consent at any time without affecting the lawfulness of prior processing.

5. Data Sharing & Disclosure

ten999 does not sell, rent, or trade your personal data to third parties for commercial marketing purposes. We may share your data with the following categories of recipient, strictly on a need-to-know basis and subject to appropriate confidentiality obligations:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, and any other mobile financial service used to process your deposits and withdrawals. These providers receive only the transaction data necessary to execute the payment.
• Identity Verification Partners: Third-party KYC (Know Your Customer) service providers engaged by ten999 to verify the identity and age of account holders.
• Game Content Providers: Game studios and aggregators (such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, and NetEnt) may receive anonymised session tokens to authenticate your gameplay. These providers do not receive your personal identity data.
• Technology & Infrastructure Partners: Cloud hosting, content delivery, and cybersecurity service providers who process data on ten999's behalf under strict data processing agreements.
• Legal & Regulatory Authorities: Law enforcement agencies, financial intelligence units, and regulatory bodies in Bangladesh where ten999 is required by law to disclose data. ten999 will notify you of such disclosures where legally permissible to do so.
• Professional Advisers: Lawyers, auditors, and accountants acting in an advisory capacity, subject to professional confidentiality obligations.

All third-party recipients of personal data are contractually required to process that data only for the specified purpose, to maintain appropriate security standards, and to delete or return data once the processing purpose is fulfilled.

6. Payment Data

Financial transactions on the ten999 platform are processed exclusively through regulated mobile financial service providers operating in Bangladesh. ten999 does not store complete mobile wallet credentials or bank account numbers on its own servers. Payment data shared with ten999 is limited to wallet-number references, transaction reference IDs, amounts in BDT, and timestamps — the minimum required to maintain accurate account balance records and to resolve any payment disputes.

All payment data is encrypted at rest and in transit. Access to payment records is restricted to authorised finance and compliance personnel and is subject to full audit logging. ten999 retains payment transaction records for a minimum period of five (5) years in accordance with applicable financial record-keeping requirements.

7. Cookies & Tracking Technologies

The ten999 website uses cookies and similar tracking technologies to deliver a functional, secure, and personalised experience. The categories of cookies used are described below:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies that keep you logged in, security tokens, and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
• Functional Cookies: Used to remember your preferences, such as your selected language, notification settings, and responsible gaming limit configurations.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players navigate the platform. This data helps ten999 identify usability issues and improve the overall experience. No personally identifiable data is included in analytics reports.
• Security Cookies: Used to detect and prevent fraudulent activity, automated bot access, and credential-stuffing attacks. These cookies record technical signals (e.g., mouse-movement patterns, keystroke timing) for anomaly detection purposes only.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to access the ten999 platform.

8. Data Retention

ten999 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by law. The following general retention periods apply:

• Account Data: Retained for the duration of your active account relationship with ten999, plus a minimum of five (5) years following account closure.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction.
• Identity Verification Documents: Retained for a minimum of five (5) years following account closure or the completion of the verification process, whichever is later.
• Customer Support Records: Retained for three (3) years from the date of the most recent interaction.
• Technical / Log Data: Retained for a maximum of twelve (12) months, after which it is automatically deleted or anonymised.
• Marketing Preferences: Retained for the duration of your account, or until you withdraw consent for marketing communications.

Where retention beyond these periods is required to respond to an ongoing legal dispute, regulatory investigation, or fraud inquiry, ten999 may extend retention for the duration of the relevant proceedings.

9. Security Measures

ten999 implements a multi-layered security architecture to protect your personal data against unauthorised access, loss, alteration, and disclosure. Key security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and ten999 servers.
• Encryption at rest for all databases containing personal, financial, and identity data.
• Role-based access controls (RBAC) ensuring that only authorised personnel can access specific categories of personal data, strictly limited to what is necessary for their job function.
• Multi-factor authentication (MFA) required for all ten999 staff accessing internal systems that hold personal data.
• Automated intrusion detection and prevention systems (IDS/IPS) monitoring all network traffic in real time.
• Regular penetration testing and vulnerability assessments conducted by qualified third-party security professionals.
• Full audit trails maintained for all access to and modifications of personal data records.

10. Your Rights

As a ten999 account holder, you have the following rights in relation to your personal data. To exercise any of these rights, submit a written request to [email protected] from the email address registered to your account:

• Right of Access: You may request a copy of all personal data ten999 holds about you. Requests will be fulfilled within thirty (30) calendar days.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data. Minor corrections (e.g., contact details) may be made directly through your account settings panel.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to applicable legal retention obligations. Note that data required for AML compliance, fraud prevention, or active dispute resolution cannot be deleted until the relevant obligation is fulfilled.
• Right to Restrict Processing: You may request that ten999 restrict the processing of your data in certain circumstances, for example while an accuracy dispute is being resolved.
• Right to Data Portability: You may request a machine-readable copy of the personal data you have provided to ten999, in a structured and commonly used format.
• Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes. Objections to marketing will be actioned immediately; objections to other processing will be assessed on a case-by-case basis.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

11. Minors & Age Verification

The ten999 platform is strictly intended for use by adults aged 18 and above. ten999 does not knowingly collect, store, or process personal data relating to individuals under the age of 18. Age verification is conducted as part of the account registration process, and accounts where the player is found to be under 18 will be immediately closed and any balance returned or forfeited in accordance with the Terms & Conditions.

If you have reason to believe that a minor has created a ten999 account or has provided personal data to the platform, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

12. Changes to This Privacy Policy

ten999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. Material changes will be communicated to registered players via the email address on record or through a prominent notice on the ten999 platform, no less than seven (7) days before the change takes effect.

The "Last Updated" date at the top of this document indicates when the most recent revision was made. We encourage you to review this Privacy Policy periodically. Continued use of the ten999 platform after the effective date of any amendment constitutes your acceptance of the revised Policy.

13. Contact & Data Requests

For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact the ten999 Data Support team using the details below. All enquiries are acknowledged within 24 hours and resolved as promptly as circumstances allow.

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: Please use "Privacy Request — [Your Username]" for data subject requests
• Response Time: Acknowledgement within 24 hours; full response within 30 calendar days
• Support Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)
• Response Language: English and Bengali