Privacy Policy —
Your Data at to999
100% Secure

To999 (to999.xyz) is fully committed to protecting your privacy. This Privacy Policy explains what information we collect, why we collect it, how it is stored, and what rights you have over your data.

By using the to999 website or mobile platform, you agree to the terms of this Privacy Policy. If you do not agree, please refrain from using our platform.

To999 may update this Privacy Policy from time to time. When changes are made, the "Last Updated" date at the top of the page will be revised. We recommend checking this page regularly.

To999 collects three types of information: what you provide directly, what is collected automatically while you use the platform, and information received from third parties.

• Name, date of birth, nationality
• Email Address & Mobile Number
• Residential Address
• National ID or passport details (for KYC verification)
• Payment method details (bKash / Nagad number)

• IP Address & Device Information
• Browser Type & Operating System
• Session duration, page visits & click patterns
• Login History & Gaming Logs
• Cookie & Local Storage Data

To999 uses your information only for specific, legitimate purposes. The table below provides full details:

To999 uses industry-leading technology to protect your privacy. Every piece of your data is wrapped in multiple layers of security.

• 256-bit SSL/TLS Encryption: All data transmissions take place over encrypted channels.
• AES-256 Storage Encryption: All sensitive data stored on our servers is encrypted.
• Firewall & DDoS Protection: Multi-layered security measures at the server level.
• Regular Security Audits: Regular system audits conducted by independent third-party experts.
• Restricted Access Control: Only authorized personnel may access data on a need-to-know basis.

To999 retains your information only for as long as necessary. After account closure, data is generally archived for up to 5 years due to legal obligations. Once that period expires and no specific reason exists to retain it, the data is permanently deleted.

To999 never sells your data. However, in certain circumstances, limited information may be shared with trusted partners:

• Payment Processors: bKash, Nagad, Rocket — only the minimum required information is shared to complete transactions.
• Game Providers: Minimum data required for game operation is shared with licensed providers.
• Law Enforcement Agencies: Data may be disclosed when required by a court order or valid legal process.
• Fraud Prevention Agencies: With relevant regulatory authorities for the prevention of money laundering or fraud.

All third-party partners are contractually bound to uphold the same privacy standards. to999 ensures your data is used solely for its intended purpose.

To999 uses cookies primarily to enhance the user experience and ensure the safe operation of the platform.

• Essential Cookies: Used to maintain login sessions and keep core platform functions running. These cannot be disabled.
• Performance Cookies: Measures site speed and performance. Does not identify individual users.
• Preference Cookies: Stores your language, theme, and other personal preferences.

You can manage cookies at any time through your browser settings. Note that disabling essential cookies may cause some features to stop working.

You have the following rights regarding your personal information at to999:

• Right to Know: You may request to know what information we hold about you.
• Right to Rectification: You may request corrections to any inaccurate or outdated information.
• Right to Erasure: Under specific conditions, you may request the complete deletion of your data.
• Right to Restrict Processing: You may request that the processing of your data be restricted under certain circumstances.
• Right to Portability: You may request a copy of your data in a portable format.
• Right to Object: You may opt out of marketing communications at any time.

To999 strictly prohibits account registration and gaming for anyone under the age of 18. We do not knowingly collect any information from minors.

Age verification is carried out at the time of registration. If an account is identified as belonging to a minor, that account and all associated data will be deleted immediately.

To999 is an international platform. Your data may be transferred to servers located in different countries as needed. to999 ensures that all such transfers are carried out securely and in accordance with international data protection standards.

For data transfers outside the European Union, GDPR Standard Contractual Clauses (SCCs) are used to ensure the protection of your information.

To999 reserves the right to update this Privacy Policy at any time. For significant changes, we will notify you via your registered email or display an announcement on the platform.

If you have any questions or concerns about this Privacy Policy, please contact our Data Protection Team. We typically respond within 48 hours.