i899 Privacy Policy

1. Introduction

i899 ("we", "us", "our") operates the online betting and casino platform accessible at i899.io (the "Platform"). This Privacy Policy describes how i899 collects, uses, stores, discloses, and protects the personal information of individuals who register and use the Platform, with specific reference to players based in Bangladesh.

We recognise that privacy is important to our users. We are committed to handling your personal data responsibly, with transparency, and in a manner consistent with the purposes for which it was provided. This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which are incorporated by reference.

This Policy applies to all personal data collected through the Platform, including data provided during account registration, data generated through your use of betting and casino services, and data collected automatically through your interactions with the Platform's technical infrastructure.

2. Data We Collect

2.1 Information You Provide Directly

When you register, verify your identity, make a deposit or withdrawal, or contact our support team, you may provide us with some or all of the following categories of personal data:

• Identity Data: Full legal name, date of birth, National ID Card number or passport number, and any other government-issued identification documents submitted for KYC (Know Your Customer) verification.
• Contact Data: Residential address in Bangladesh (including city — Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar), mobile phone number, and email address.
• Account Data: Username, hashed password, account preferences, and communication preferences.
• Financial Data: Mobile wallet numbers (bKash, Nagad, Rocket, Upay), bank account details where bank transfer is used, and transaction history records denominated in BDT.
• Communications Data: Records of correspondence with our support team, including any complaints or dispute records.

2.2 Data Collected Automatically

When you access and use the Platform, certain technical and behavioural data is collected automatically by our systems:

• Device and Technical Data: IP address, browser type and version, operating system, device type, screen resolution, and language settings.
• Usage Data: Pages visited, time spent on the Platform, games played, bet amounts, bet outcomes, navigation paths, and feature interactions.
• Log Data: Server access logs, error logs, and security event logs associated with your account sessions.
• Location Data: General geographic location inferred from your IP address, used to verify regional eligibility and detect suspicious access.

2.3 Data from Third Parties

We may receive personal data about you from third-party sources in specific circumstances, including identity verification providers used during KYC checks, payment processing partners who confirm the status of your mobile wallet or bank account, and fraud detection and anti-money laundering screening services.

3. How We Use Your Data

The table below summarises the primary purposes for which i899 processes your personal data:

i899 does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review, except where automated checks are required for fraud prevention or regulatory compliance, in which case you may request human review by contacting [email protected].

4. Legal Basis for Processing

i899 processes your personal data on the following legal grounds:

• Contractual Necessity: Processing is necessary to perform our contract with you — specifically to operate your account, execute bets, process payments, and provide customer support.
• Legal Obligation: Processing is required to comply with applicable legal and regulatory obligations, including identity verification, anti-money laundering checks, and responsible gaming duties.
• Legitimate Interests: Processing is necessary for the legitimate interests of i899, including fraud prevention, platform security, abuse detection, and service improvement, provided those interests are not overridden by your privacy rights.
• Consent: Where processing is based on your consent (for example, optional marketing communications), you may withdraw that consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

5. Sharing Your Personal Data

i899 does not sell your personal data. We share your data only in the following limited circumstances and with the following categories of recipients:

5.1 Service Providers

We engage carefully selected third-party service providers who process data on our behalf to deliver specific platform functions. These include identity verification and KYC providers, payment processing partners (including mobile financial service providers such as bKash, Nagad, Rocket, and Upay), game technology providers (including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Ezugi, and Spribe), fraud detection and security services, and cloud hosting and infrastructure providers. All such providers are contractually obligated to process your data only on our instructions and to maintain appropriate security standards.

5.2 Legal and Regulatory Disclosure

We may disclose your personal data to law enforcement agencies, regulatory authorities, or courts where we are legally required to do so, where disclosure is necessary to protect the rights, property, or safety of i899 or its users, or where disclosure is necessary to prevent or detect fraud or other criminal activity.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of i899's business, your personal data may be transferred to the relevant successor entity as part of that transaction. We will notify you via email prior to any such transfer and will ensure that the receiving entity provides equivalent privacy protections.

6. Cookies and Tracking Technologies

i899 uses cookies and similar tracking technologies to operate the Platform and improve your experience. The categories of cookies used include:

• Essential Cookies: Strictly necessary for the Platform to function. These include session management cookies, authentication tokens, and security cookies. These cannot be disabled.
• Functional Cookies: Used to remember your preferences such as language settings, display preferences, and last-visited game categories.
• Analytics Cookies: Used to collect aggregated, anonymised data about how users interact with the Platform, helping us identify technical issues and improve navigation.
• Security Cookies: Used to detect and prevent fraudulent activity, including bot detection, duplicate session identification, and suspicious login pattern analysis.

You may manage non-essential cookie preferences through your browser settings. However, disabling certain cookies may affect the functionality of parts of the Platform. i899 does not use third-party advertising or retargeting cookies.

7. Data Security

i899 implements a range of technical and organisational security measures to protect your personal data from unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and our servers.
• Encryption of sensitive data fields (including financial data and authentication credentials) at rest.
• Role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent required for their specific job functions.
• Regular security testing and vulnerability assessments of the Platform's infrastructure.
• Monitoring systems that detect and alert on unusual account activity or access patterns.
• Secure data disposal procedures for data that has reached the end of its retention period.

While i899 takes data security seriously and applies reasonable industry-standard protections, no online system can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials. If you suspect unauthorised access to your account, contact [email protected] immediately.

8. Data Retention

i899 retains personal data only for as long as it is necessary to fulfil the purposes described in this Policy, or as required by applicable legal or regulatory obligations. The general retention framework we apply is as follows:

• Active Account Data: Retained for the full duration your account is active on the Platform.
• Post-Closure Data: Following account closure, core identity and transaction records are retained for a minimum of five (5) years to meet anti-money laundering, fraud prevention, and legal compliance requirements.
• Support Communications: Retained for three (3) years from the date of the last interaction to facilitate dispute resolution and quality assurance.
• Technical and Log Data: Retained for up to twelve (12) months, after which it is anonymised or securely deleted.
• Marketing Consent Records: Retained for the period your consent remains active plus two (2) years following withdrawal, to demonstrate compliance.

When data reaches the end of its applicable retention period, it is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual.

9. Your Data Rights

Subject to applicable law, you have the following rights in relation to the personal data i899 holds about you:

• Right of Access: You may request a copy of the personal data we hold about you, along with information about how it is being processed.
• Right to Rectification: You may request that we correct any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our overriding legal obligations to retain certain records.
• Right to Restriction: You may request that we restrict the processing of your data in certain circumstances, for example while a correction request is being assessed.
• Right to Object: You may object to processing carried out on the basis of legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request — [Your Username]". i899 will acknowledge your request within 72 hours and provide a substantive response within 30 days. We may ask you to verify your identity before processing certain types of requests.

10. Children's Privacy

The i899 Platform is strictly intended for adults aged 21 years or older. We do not knowingly collect or process the personal data of anyone under the age of 21. If we become aware that personal data has been submitted by or on behalf of a person under 21, we will take immediate steps to delete that data and close the associated account.

If you believe that a minor has registered an account on i899 or that their personal data has been collected without appropriate consent, please contact us immediately at [email protected]. i899 takes its obligations regarding the protection of minors seriously and will act on any such report without delay.

11. Third-Party Links

The i899 Platform may from time to time contain references to third-party services, including game provider platforms and payment service providers. Please be aware that these third parties operate under their own independent privacy policies, and i899 has no control over how they collect, process, or use your data. We recommend reviewing the privacy policy of any third-party service before engaging with it. i899 is not responsible for the privacy practices of third-party operators.

12. Changes to This Privacy Policy

i899 reserves the right to update or amend this Privacy Policy at any time. Any material changes — meaning changes that significantly affect how we collect, use, or share your personal data — will be communicated to registered users via the email address on their account at least seven (7) days before the changes take effect. The revised Policy will also be published at /privacy-policy with an updated effective date.

For minor or non-material changes (such as corrections to typographical errors or clarifications that do not alter the substance of the Policy), we will update the document and revise the effective date without separate notification. We encourage you to review this Policy periodically to remain informed of how we protect your data.

Your continued use of the i899 Platform following the effective date of any revision constitutes your acceptance of the updated Privacy Policy.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way i899 processes your personal data, please contact our data support team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line for Data Requests: "Privacy Enquiry — [Your Username]"
• Response Target: Acknowledgement within 72 hours; full response within 30 days
• Support Hours: 24 hours a day, 7 days a week, including all Bangladesh public holidays

All data protection enquiries are handled by our dedicated compliance team. We treat every privacy request with the seriousness it deserves and will not use contact information provided in privacy requests for any marketing or unrelated communication purposes.