tf999 Privacy Policy — Your Data, Handled with Care

This Privacy Policy applies to all personal data collected, stored, and processed by tf999 in connection with the operation of its online casino and sports betting platform at tf999.io. It applies to all registered players, prospective players who visit the site without registering, and anyone who contacts tf999 support.

This policy should be read alongside the tf999 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. By registering an account or continuing to use the tf999 platform after the effective date of this policy, you confirm that you have read and understood how your personal data will be handled.

tf999 is the data controller for all personal information collected through the platform. This means we determine the purposes and means by which your personal data is processed. If you have any questions about this role or about this policy, please contact us using the details in Section 14.

tf999 collects the following categories of personal data about you, depending on how you interact with the platform:

tf999 does not intentionally collect any special categories of sensitive personal data (such as health information, religious beliefs, or political opinions). If you voluntarily disclose such information in a support communication, it will be handled with additional care and used only to resolve the specific matter for which it was shared.

tf999 collects personal data through the following channels:

• Directly from you: when you register an account, complete the KYC process, make a deposit or withdrawal, contact support, or update your account settings.
• Automatically: through cookies, log files, and similar tracking technologies when you visit and interact with the tf999 platform. See Section 7 for full details on cookies.
• From third-party service providers: identity verification and fraud prevention agencies may provide us with additional information to support the KYC process or to flag suspicious activity. Payment processors may share transaction status data to facilitate deposits and withdrawals.
• From publicly available sources: in certain circumstances, tf999 may cross-reference publicly available information (such as sanctions lists or adverse media databases) as part of our anti-money-laundering compliance programme.

tf999 processes personal data only where there is a valid legal basis to do so. The legal bases on which we rely are:

• Contract performance: Processing your identity, contact, financial, and account data is necessary to open and maintain your tf999 account, process deposits and withdrawals, and deliver the games and betting markets you access. Without this processing, we cannot provide the service.
• Legal obligation: tf999 is required by anti-money-laundering legislation, counter-terrorism financing rules, and general financial regulations to verify player identities, retain transaction records, and report certain activities. This processing is mandatory and cannot be opted out of.
• Legitimate interests: tf999 processes technical data, gameplay data, and certain communications data on the basis of our legitimate interest in operating a safe, fair, and commercially sustainable platform. This includes fraud detection, responsible gaming monitoring, platform security, and platform improvement. We have assessed that these interests are not overridden by your fundamental privacy rights.
• Consent: Where we send you marketing communications by email or push notification, we do so on the basis of your consent, which you may withdraw at any time through your account settings or by contacting support. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.

tf999 uses the personal data it collects for the following specific purposes:

• To verify your identity and age (21+) during registration and at any subsequent point during the account lifecycle.
• To open, manage, and maintain your tf999 account, including processing deposits, withdrawals, bonus credits, and balance adjustments.
• To provide access to casino games, live dealer games, sports betting markets, and all other platform services.
• To detect and prevent fraud, money laundering, collusion, bonus abuse, and other prohibited conduct as described in the Terms & Conditions.
• To fulfil anti-money-laundering and counter-terrorism financing obligations, including filing mandatory reports where required by law.
• To monitor gameplay for responsible gaming indicators and to apply any responsible gaming tools you have activated (deposit limits, self-exclusion, cooling-off periods).
• To communicate with you about your account, transactions, security alerts, and platform updates.
• To send you promotional offers and bonus notifications, where you have consented to receive marketing communications.
• To resolve disputes, complaints, and support enquiries.
• To analyse platform usage, improve game and product offerings, and personalise your experience where you have not opted out of such processing.
• To comply with all applicable laws, regulations, and legal processes, including responding to lawful requests from law enforcement or regulatory authorities.

tf999 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or identifying a separate legal basis for the new processing.

tf999 does not sell, rent, or trade your personal data to any third party. We share your data only in the following limited circumstances:

• Payment processors: When you make a deposit or withdrawal using bKash, Nagad, Rocket, Upay, or a Bangladeshi bank, we share the necessary financial data with the relevant payment service provider to process the transaction. These providers are contractually bound to use your data only for transaction processing.
• Identity and age verification providers: To meet our KYC obligations, we may share identity document images and personal details with accredited third-party verification services. These providers process data exclusively for verification purposes.
• Fraud prevention and anti-money-laundering agencies: We may share data with fraud intelligence networks and compliance screening services where necessary to identify and prevent financial crime.
• Game providers: Where a game is provided by a third-party studio (such as Evolution Gaming, Pragmatic Play, Ezugi, Spribe, NetEnt, or Microgaming), limited technical data (such as player session tokens) may be shared with the provider for the purpose of operating the game. Game providers do not receive your full personal profile.
• Legal and regulatory authorities: tf999 will disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by law, or where necessary to protect the rights, property, or safety of tf999, its players, or the public.
• Business transfers: In the event that tf999 is subject to a merger, acquisition, or sale of assets, your personal data may be transferred to the successor entity. You will be notified of any such transfer and of any change to this Privacy Policy that results from it.

tf999 uses cookies and similar technologies (such as web beacons, pixel tags, and local storage objects) to operate and improve the platform. The following categories of cookies are in use:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They include session authentication tokens, security cookies, and load-balancing cookies. You cannot opt out of strictly necessary cookies while using the platform.
• Functional Cookies: These cookies remember your preferences, such as your chosen language, interface settings, and responsible gaming configurations, to provide a personalised experience.
• Analytics Cookies: tf999 uses aggregated analytics data to understand how players interact with the platform — which pages are visited most often, how long sessions last, and where players encounter difficulty. This data is processed in anonymised or pseudonymised form.
• Security and Fraud Prevention Cookies: These cookies help tf999 identify suspicious login attempts, detect bot activity, and prevent account takeover attacks.

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may impair your ability to log in or use specific platform features. tf999 does not currently use third-party advertising or retargeting cookies.

tf999 maintains a comprehensive security programme designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Key security measures include:

• SSL/TLS Encryption in Transit: All data exchanged between your browser or device and tf999 servers is encrypted using SSL/TLS. Look for the padlock icon in your browser address bar when visiting tf999.io.
• AES-256 Encryption at Rest: Sensitive stored data — including identity documents, financial records, and account credentials — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to systems that store personal data is restricted to authorised tf999 personnel on a need-to-know basis. All access is logged and subject to regular audit.
• Two-Factor Authentication: tf999 encourages all players to enable two-factor authentication (2FA) on their accounts. tf999 staff accounts that can access personal data are required to use 2FA.
• Regular Security Assessments: The tf999 platform undergoes regular security assessments and penetration testing to identify and remediate vulnerabilities.
• Incident Response: tf999 maintains a documented incident response plan. In the event of a data breach, the plan sets out the steps for containment, investigation, notification of affected players, and remediation.

While tf999 takes all reasonable steps to protect your data, no internet-based platform can guarantee absolute security. You play an important role in protecting your own account by using a strong, unique password and enabling two-factor authentication.

tf999 retains personal data for no longer than is necessary to fulfil the purpose for which it was collected, subject to any longer retention periods required by applicable law. The following general retention periods apply:

• Active account data: Retained for the duration of the account relationship and for a period of five years following account closure, to satisfy anti-money-laundering record-keeping obligations.
• KYC and identity verification documents: Retained for a minimum of five years following the end of the account relationship, in compliance with applicable financial regulations.
• Transaction records: Retained for a minimum of five years from the date of the transaction.
• Support communications: Retained for three years from the date of the last communication in a support thread, unless the communication relates to a dispute or legal matter, in which case it is retained until the matter is fully resolved plus one year.
• Gameplay logs: Retained for two years from the date of the session, unless required for an ongoing dispute or audit.
• Marketing consent records: Retained from the date of consent until three years after consent is withdrawn.

At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where data is anonymised rather than deleted, it may be retained indefinitely for aggregated analytics purposes, as it can no longer be linked to any individual.

As a tf999 player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact the tf999 support team using the details in Section 14:

• Right of Access: You may request a copy of all personal data tf999 holds about you, along with information about how it is being used.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that we correct it.
• Right to Erasure ("Right to Be Forgotten"): You may request that we delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and there is no other legal basis for processing), or where the processing is unlawful. Note that we may be unable to comply fully where retention is required by law.
• Right to Restriction: You may request that we restrict the processing of your personal data in certain circumstances — for example, while you contest the accuracy of data we hold or while we assess an objection you have raised.
• Right to Data Portability: Where processing is based on your consent or on contract performance, and is carried out by automated means, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to the processing of your personal data where we rely on legitimate interests as the legal basis. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time through your account settings. Withdrawal does not affect any processing that took place before the withdrawal.

The tf999 platform is strictly for adults aged 21 and above. tf999 does not knowingly collect, process, or retain personal data relating to any individual under the age of 21. If we become aware that we have inadvertently collected data from a person under the minimum age, we will immediately delete that data and close the associated account.

If you believe that tf999 may have collected data from a person under 21, please contact us immediately at the email address in Section 14. We take underage access extremely seriously and respond to all such reports as a priority matter.

The tf999 platform may contain links to third-party websites or services — for example, links to payment provider portals accessed during a deposit or withdrawal transaction. This Privacy Policy applies solely to the tf999 platform. tf999 has no control over and accepts no responsibility for the privacy practices, data security standards, or content of any third-party website or service to which a link is provided.

We encourage you to review the privacy policy of any third-party site you visit via a link from the tf999 platform before submitting any personal data to that site.

tf999 reserves the right to update or amend this Privacy Policy at any time. When we make a material change to the policy, we will publish a notice on the tf999 platform and, where practicable, notify registered players by email. The "Effective Date" at the top of the policy will be updated to reflect the date on which the revised policy takes effect.

Your continued use of the tf999 platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the revised policy, you should cease using the platform and contact support to close your account and arrange withdrawal of any remaining balance.

We recommend that all players review this Privacy Policy periodically to stay informed about how tf999 is protecting their data. The current version of this policy will always be accessible at tf999.io/privacy-policy.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how tf999 has handled your personal data, please contact our Data Protection team using the following details:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week via the tf999 platform
• Support Hours: Around the clock, Bangladesh Standard Time (BST, UTC+6)

Please include your registered account username and a clear description of your request or concern when contacting us. This helps us locate your records and respond efficiently.

tf999 aims to resolve all privacy-related queries and complaints within 30 calendar days. If you are not satisfied with the outcome of a complaint, you may have the right to escalate the matter to an appropriate data protection authority or seek independent legal advice.