tm999 Privacy Policy

1 Who We Are

tm999 is an online casino and sports betting platform operating at tm999.io, serving players primarily located in Bangladesh. References to "tm999", "we", "us", or "our" in this Privacy Policy refer to the operating entity responsible for the tm999 platform and all services available through it.

This Privacy Policy applies to all personal data collected through the tm999 website (tm999.io), its game interfaces, account management system, payment processing flows, customer support channels, and any other features of the tm999 platform. It does not apply to third-party websites, services, or game providers that may be accessible from the platform — those parties operate under their own privacy policies.

For all data protection enquiries, corrections, or erasure requests, please contact: [email protected]

2 Personal Data We Collect

tm999 collects personal data in the following categories, depending on how you interact with our platform:

2.1 Registration Data

When you create a tm999 account, we collect: full legal name, date of birth, email address, mobile phone number (registered in Bangladesh), and a self-selected username and password. This information is required to create and maintain your account.

2.2 Identity Verification (KYC) Data

To comply with age verification and fraud prevention obligations, we may request copies of one or more of the following: National ID Card (NID), Passport, Birth Registration Certificate, or a selfie photograph for facial verification. KYC documents are processed securely and retained only for as long as legally required.

2.3 Financial Data

We collect records of all deposits and withdrawals processed through your account, including the payment method used (bKash, Nagad, Rocket, or Upay), mobile wallet account numbers associated with your transactions, transaction amounts in Bangladeshi Taka (৳), and timestamps of each transaction. We do not store full card numbers or mobile banking PINs — payment authentication is handled directly by the respective payment provider.

2.4 Gameplay and Activity Data

We collect records of your gameplay activity on the tm999 platform, including games played, wagers placed, outcomes, session duration, bonus usage, and sports betting selections. This data is used for account management, responsible gaming monitoring, dispute resolution, and platform improvement purposes.

2.5 Technical and Device Data

We automatically collect certain technical information when you access the tm999 platform, including: IP address, browser type and version, operating system, device type (desktop or mobile), screen resolution, referring URL, pages visited, and session timestamps. This data is collected via server logs and cookies (see Section 6).

2.6 Communications Data

If you contact our support team by email or through our live chat interface, we retain records of that correspondence, including the content of your messages, timestamps, and the resolution of any reported issue. This helps us maintain service quality and resolve recurring issues effectively.

3 How We Use Your Personal Data

tm999 uses the personal data it collects for the following specific purposes:

• Account creation and management: To set up, maintain, and operate your tm999 player account, including processing login authentication and account settings changes.
• Identity and age verification: To verify that you are aged 21 or above and that the identity you have provided is genuine, in compliance with our responsible gaming obligations.
• Payment processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, and Upay, and to maintain accurate transaction records denominated in Bangladeshi Taka (৳).
• Game delivery and session management: To record wagers, calculate and credit winnings, manage bonus funds, and maintain an accurate account balance at all times.
• Fraud prevention and security: To detect, investigate, and prevent unauthorised access, multiple account creation, money laundering, payment fraud, and other forms of Prohibited Conduct as defined in our Terms and Conditions.
• Responsible gaming compliance: To monitor gameplay patterns for signs of problem gambling, apply self-imposed limits set by you, and action self-exclusion requests in a timely manner.
• Customer support: To respond to your enquiries, investigate complaints, resolve account disputes, and improve the quality of our support service.
• Legal and regulatory compliance: To meet any obligations imposed on tm999 by applicable law, including data retention requirements, responses to lawful requests from competent authorities, and anti-money-laundering (AML) record-keeping.
• Platform improvement: To analyse aggregated, anonymised usage data to improve the design, performance, game selection, and overall user experience of the tm999 platform.
• Marketing communications: Where you have given explicit consent, to send you personalised promotional offers, bonus announcements, and platform updates via email or SMS. You may withdraw consent at any time by contacting [email protected] or clicking the unsubscribe link in any marketing email.

4 Legal Basis for Processing

tm999 processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to perform the contract between you and tm999 — specifically, to provide the platform services described in our Terms and Conditions. This covers account management, payment processing, and game delivery.
• Legitimate interests: Processing carried out for tm999's legitimate operational interests, including fraud prevention, security monitoring, platform analytics, and responsible gaming oversight, provided those interests are not overridden by your rights and interests.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC/AML obligations and lawful requests from competent authorities.
• Consent: Processing based on your freely given, specific, and informed consent — principally for direct marketing communications. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5 Data Sharing and Disclosure

tm999 does not sell your personal data. We share personal data only in the limited circumstances described below:

5.1 Payment Providers

We share the minimum necessary transaction data with bKash, Nagad, Rocket, and Upay to process your deposits and withdrawals. Each payment provider operates under its own privacy policy and data handling terms. tm999 does not store your full mobile banking credentials.

5.2 Game and Technology Providers

Certified game studios — including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, Microgaming, and NetEnt — may receive anonymised or pseudonymised session identifiers necessary to deliver game content and record results within your account. These providers do not receive your full identity data unless required for their own regulatory compliance.

5.3 Identity Verification Services

Where third-party KYC verification services are used to authenticate identity documents, we share only the documents and data strictly required for that verification purpose. KYC providers are contractually prohibited from using your data for any purpose other than verification.

5.4 Legal and Regulatory Disclosure

We may disclose personal data to law enforcement agencies, regulatory bodies, courts, or other competent authorities where required to do so by applicable law, a valid court order, or a lawful government request. We will notify you of any such disclosure to the extent permitted by law.

5.5 Business Transfers

In the event that tm999 undergoes a merger, acquisition, or sale of its operating assets, personal data held by tm999 may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any resulting changes to this Privacy Policy prior to the transfer taking effect.

6 Cookies and Tracking Technologies

The tm999 platform uses cookies and similar technologies to deliver a functional, personalised, and secure experience. The following categories of cookies are used:

• Essential Cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during an active session and security cookies that help detect and prevent fraudulent access. Essential cookies cannot be disabled without breaking core platform functionality.
• Functional Cookies: Remember your preferences such as language settings, game filters, and notification configurations. These enhance your experience but are not strictly required for core functionality.
• Analytics Cookies: Collect aggregated, anonymised data about how players use the platform — including pages visited, session duration, and navigation paths — to help us identify usability improvements. We do not use third-party advertising or cross-site tracking cookies.
• Security Cookies: Support our fraud prevention and account security systems by tracking login patterns and flagging unusual device or location activity for review.

You may manage or delete cookies through your browser settings at any time. Please note that disabling essential cookies will prevent you from logging in or using key platform features. tm999 does not use cookies to serve third-party advertising or to track your activity across websites outside the tm999 domain.

7 Data Retention

tm999 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where anonymisation is applied, the resulting data (which can no longer identify you) may be retained indefinitely for statistical and analytical purposes.

8 Data Security

tm999 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Key measures include:

• SSL/TLS encryption applied to all data in transit between your device and the tm999 platform.
• Encrypted storage for sensitive data at rest, including KYC documents and account credentials.
• Access controls limiting internal access to personal data to authorised personnel on a strict need-to-know basis, with all access events logged and reviewed.
• Two-factor authentication (2FA) available to all account holders for login security, and enforced for internal administrative access to player data systems.
• Regular security reviews of platform infrastructure, including penetration testing and vulnerability assessments conducted by qualified security professionals.
• Incident response procedures to contain, investigate, and remediate any data security breach in a timely manner, with prompt notification to affected account holders where required.

While tm999 applies these measures with diligence, no online platform can guarantee absolute security against all possible threats. You also play a role in keeping your account secure — please refer to Section 4 of the tm999 Terms and Conditions for your account security obligations.

9 Your Data Protection Rights

As a tm999 account holder, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at [email protected] from your registered email address. We will acknowledge your request within 2 business days and respond in full within 30 calendar days.

• Right of Access: You may request a copy of all personal data held about you by tm999, along with information on how it is used, where it is stored, and with whom it is shared.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data in your account at any time.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data. We will erase all data not subject to a mandatory legal retention obligation within 30 days of your verified request. Data subject to legal retention (see Section 7) will be clearly identified in our response.
• Right to Restriction: You may request that tm999 restrict the processing of your personal data in certain circumstances — for example, while a dispute about data accuracy is being resolved.
• Right to Data Portability: You may request a copy of your personal data in a structured, machine-readable format (CSV or JSON) to transfer to another service provider.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
• Right to Object: You may object to processing carried out on the basis of legitimate interests where you believe your rights and interests override tm999's legitimate interests in that specific processing activity.

10 Children and Underage Players

The tm999 platform is strictly intended for adults aged 21 years and above. tm999 does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as part of the account registration and KYC process to enforce this restriction.

If tm999 becomes aware that an account has been created by or on behalf of a person under the age of 21, we will immediately suspend the account, reverse any transactions to the extent possible, permanently delete the personal data of the underage individual, and take appropriate steps to prevent re-registration.

If you believe that a person under the age of 21 has registered a tm999 account, please notify us immediately at [email protected]. We take underage access seriously and will act on all credible reports without delay.

11 Third-Party Links and Services

The tm999 platform may reference third-party service providers — such as payment partners (bKash, Nagad, Rocket, Upay) and game studios (Pragmatic Play, Evolution Gaming, Spribe, Ezugi, Microgaming, NetEnt) — whose services are integrated into or accessible from the tm999 platform. These third parties operate under their own independent privacy policies, which tm999 does not control.

When you interact with a third-party payment provider to make a deposit or withdrawal, you are subject to that provider's own terms and privacy practices in addition to this Policy. tm999 recommends that you review the privacy policies of any third-party services you use in connection with your tm999 account.

tm999 accepts no responsibility for the data practices of third-party services accessed via links or integrations on the platform. Your interactions with those services are governed entirely by their own privacy policies.

12 Updates to This Privacy Policy

tm999 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or platform features. Where a change is material — meaning it meaningfully alters your rights or our data handling obligations — we will provide at least 14 calendar days' advance notice by posting a prominent notice on the tm999 platform and, where practicable, by sending a notification to your registered email address.

Your continued use of the tm999 platform after the effective date of any update constitutes your acceptance of the revised Privacy Policy. The effective date of the current version is clearly displayed at the top of this page and in the header of the legal document below. Previous versions of this Privacy Policy are available upon request by contacting [email protected].

This Privacy Policy was last updated on 1 January 2026. It supersedes all previous versions of the tm999 Privacy Policy.

13 Contact Us

For all data protection enquiries, rights requests, privacy complaints, or questions about this Privacy Policy, please contact the tm999 data support team using the details below. All communications must be in English.

• Email: [email protected]
• Subject line for data rights requests: "Data Rights Request"
• Subject line for privacy complaints: "Privacy Complaint"
• Support availability: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)
• Response time: Acknowledgement within 2 business days; full response within 30 calendar days