Privacy Policy — How 5999 app Protects Your Data

When you register for a 5999 app account, use the platform, or interact with our customer support team, we collect personal data in several categories. The table below sets out the main categories of data we collect, the source of that data, and the legal basis on which we process it.

Data We Do Not Collect

5999 app does not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information. We also do not collect data from individuals under the age of 18. If we become aware that personal data belonging to a minor has been submitted to the platform, that data will be deleted immediately and the associated account will be closed.

5999 app does not sell, rent, or trade your personal data to any third party. We share data only in the specific circumstances described below, and only to the extent necessary for each stated purpose.

Payment Service Providers

To process your deposits and withdrawals in BDT, 5999 app shares the minimum necessary financial data with our payment processing partners, which include bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank. These providers process your data solely to facilitate the payment transaction and are not permitted to use it for any other purpose. Each payment partner maintains its own privacy policy and data security standards.

Identity Verification Partners

As part of our KYC and AML obligations, 5999 app may share identity data with accredited third-party verification service providers. These providers are engaged solely to confirm the authenticity of documents submitted by players and to screen against relevant watchlists. They are contractually prohibited from retaining or reusing your data beyond the scope of the verification task.

Game Software Providers

5999 app's platform hosts games developed and operated by third-party software providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, among others. When you play a game, certain technical data (such as a session token and anonymised player identifier) may be transmitted to the relevant game provider to enable the game to function correctly. These providers do not receive your full identity or contact data.

Legal and Regulatory Disclosure

5999 app may be required to disclose personal data to competent legal or regulatory authorities where such disclosure is mandated by applicable law, court order, or lawful regulatory request. In such cases, 5999 app will disclose only the data specifically required and will, where legally permissible, notify the affected player of the disclosure.

5999 app retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

• Account and identity data — retained for the duration of your active account relationship with 5999 app, plus a minimum of five (5) years following account closure to satisfy AML record-keeping requirements.
• Financial transaction records — retained for a minimum of five (5) years from the date of each transaction, in accordance with financial record-keeping obligations.
• KYC verification documents — retained for the duration of the account relationship plus five (5) years post-closure, or longer if required by a specific regulatory or legal hold.
• Customer support communications — retained for three (3) years from the date of the last interaction, to support dispute resolution and service quality review.
• Technical and usage data — retained in identifiable form for up to twenty-four (24) months, after which it is anonymised and retained in aggregate form for analytical purposes with no retention limit.
• Marketing consent records — retained for the duration of the consent period and for three (3) years following withdrawal of consent, as evidence of the consent history.

Data Storage Location

Player data collected by 5999 app is stored on secure servers. Where data is processed or stored by third-party service providers operating infrastructure located outside Bangladesh, 5999 app ensures that appropriate contractual safeguards are in place to protect the data to a standard equivalent to that which would apply if the data were processed domestically.

Secure Deletion

When personal data is no longer required and no legal obligation demands its continued retention, 5999 app applies secure deletion procedures to permanently remove the data from its systems. For physical documents submitted as part of KYC verification, secure destruction is applied in line with standard document disposal practices.

5999 app implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. While no online platform can guarantee absolute security, 5999 app applies the following controls as standard practice across all systems that process player data.

Technical Controls

• TLS/SSL Encryption: All data transmitted between your device and 5999 app servers is encrypted using Transport Layer Security (TLS) with a minimum of 256-bit encryption. This applies to login sessions, game play, and all deposit and withdrawal interactions via bKash, Nagad, Rocket, and Upay.
• Password Hashing: Player account passwords are never stored in plain text. They are hashed using a cryptographically secure one-way algorithm so that even 5999 app staff cannot retrieve your original password.
• Two-Factor Authentication (2FA): Players are strongly encouraged to enable SMS OTP-based two-factor authentication on their accounts. 2FA provides a second layer of verification beyond the password, significantly reducing the risk of account takeover.
• Access Controls: Internal access to player data is restricted on a strict need-to-know basis. Staff members are granted only the minimum level of data access required to perform their specific job function. Access logs are maintained and regularly audited.
• Intrusion Detection: 5999 app operates automated intrusion detection and rate-limiting systems that monitor for unusual login activity, suspicious IP addresses, and signs of credential-stuffing or brute-force attacks.

Organisational Controls

• All staff with access to player data undergo data protection and security awareness training as part of their onboarding process and on an ongoing annual basis.
• Third-party service providers who process player data on behalf of 5999 app are subject to due-diligence assessments and are contractually required to maintain security standards equivalent to those applied by 5999 app itself.
• In the event of a confirmed personal data breach that is likely to result in a risk to affected players, 5999 app will notify affected players without undue delay via the email address registered to their account.