i899 Privacy Policy

1 Information We Collect

When you register for and use your i899 account, we collect personal information across several categories. The nature and volume of data collected depends on your level of account activity and the services you use. We collect information directly from you, automatically through your use of the platform, and occasionally from third-party verification partners.

1.1 Information You Provide Directly

The following data is collected when you register an account, complete KYC verification, contact customer support, or participate in a promotion:

1.2 Information Collected Automatically

When you access the i899 platform through a web browser or mobile device, we automatically collect certain technical information to ensure the platform functions correctly and to protect the security of your account:

• Device Information: Device type, operating system version, browser type and version, screen resolution, and device language settings.
• Network Information: IP address, approximate geolocation derived from IP (country/city level), internet service provider (ISP) name.
• Usage Data: Pages visited, games launched, session duration, bet history, search queries entered on the platform, features interacted with, and click-path data.
• Log Data: Server access logs, error reports, and timestamps of login and logout events.

1.3 Information from Third Parties

In certain circumstances, i899 may receive personal information about you from trusted third-party sources, including identity verification agencies, fraud prevention databases, payment processing partners, and game software providers. Any information received from third parties is handled in accordance with this Privacy Policy and is used solely to fulfil the purposes described herein.

2 How We Use Your Data

i899 uses the personal data we collect for specific, clearly defined purposes. We do not use your data for any purpose that is incompatible with the reason it was originally collected. The following table outlines each processing purpose, the data categories involved, and the legal basis on which we rely.

2.1 Marketing Communications

If you have provided your consent during registration or at a later point, i899 may send you promotional emails or SMS messages about new games, bonus offers, seasonal promotions (such as those tied to Eid, Pohela Boishakh, or BPL season), and platform updates. You may withdraw your consent to receive marketing communications at any time by contacting our support team at [email protected] or by following the unsubscribe instructions in any marketing message. Withdrawing consent will not affect the lawfulness of processing carried out before you withdrew it.

2.2 Automated Decision-Making

i899 uses automated systems for certain decisions related to fraud scoring, bonus eligibility, and responsible gaming interventions. These systems analyse patterns in your account activity and may trigger automated actions such as flagging a transaction for manual review or applying a temporary deposit limit. Where an automated decision has a significant effect on your account, you have the right to request a human review of that decision by contacting our compliance team.

3 Data Sharing and Disclosure

i899 does not sell your personal data. We share your information only in the limited circumstances described below, and only to the minimum extent necessary for the specified purpose.

3.1 Service Providers and Data Processors

We engage a number of carefully selected third-party service providers to help us operate the i899 platform. These providers act as data processors on our behalf and are contractually required to handle your data only according to our documented instructions and in compliance with applicable data protection standards. Categories of service providers include:

• Payment Processing Partners: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and other financial institutions that facilitate deposits and withdrawals.
• Identity Verification Providers: Third-party KYC and AML screening services used to verify your identity documents and screen against sanctions databases.
• Game Software Providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive anonymised session identifiers to deliver game content and record outcomes. They do not receive your full personal profile.
• Fraud Prevention Services: Specialist firms that analyse device fingerprints, IP reputation, and transaction patterns to detect and prevent fraudulent activity.
• Cloud Infrastructure Providers: Hosting and database services that store platform data on secure, encrypted servers.
• Customer Support Platforms: Live chat and ticketing systems used by our 24/7 support team to manage and respond to player queries.

3.2 Legal and Regulatory Disclosures

i899 may be required to disclose your personal data to regulatory authorities, law enforcement agencies, financial intelligence units, or courts where we are legally compelled to do so. This includes disclosures required in connection with AML investigations, fraud prosecution, or court-ordered subpoenas. We will notify you of any such disclosure request where we are legally permitted to do so.

3.3 Business Transfers

In the event that i899 undergoes a merger, acquisition, restructuring, or sale of all or part of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any changes to this Privacy Policy that result from it.

4 Cookies and Tracking Technologies

i899 uses cookies and similar tracking technologies to make the platform work correctly, to understand how players use the site, and to deliver a more personalised experience. A cookie is a small text file stored in your browser when you visit a website. Cookies cannot execute code or deliver viruses; they are simply data files.

4.1 Types of Cookies We Use

4.2 Managing Your Cookie Preferences

Strictly necessary cookies cannot be disabled as they are essential to the operation of the i899 platform. You may disable functional and analytics cookies by adjusting your browser settings. Please note that disabling certain cookies may affect the performance of the platform and some features may not function correctly. Standard browser settings for managing cookies can typically be found in the "Privacy" or "Security" section of your browser's preferences menu.

5 Data Retention Policy

i899 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or audit obligations. The table below sets out the standard retention periods for each category of personal data.

When the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be associated with any individual. Where data is anonymised rather than deleted, the resulting dataset may be retained indefinitely for aggregate statistical purposes.

6 Data Security Measures

i899 takes the security of your personal data seriously and has implemented a comprehensive set of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, destruction, and disclosure.

6.1 Technical Safeguards

• Transport Layer Security (TLS): All data in transit between your device and i899 servers is encrypted using TLS 1.2 or higher.
• Data Encryption at Rest: Sensitive data fields including payment account numbers and identity document scans are encrypted using AES-256 encryption in our database storage layer.
• Access Controls: Production systems are protected by role-based access control (RBAC). Only authorised personnel with a legitimate business need may access personal data, and all access is logged and audited.
• Intrusion Detection: Our infrastructure is monitored 24/7 by automated security systems that detect and alert on anomalous activity patterns indicative of attempted breaches.
• Penetration Testing: i899 conducts periodic security assessments and penetration tests to identify and remediate vulnerabilities before they can be exploited.

6.2 Organisational Safeguards

• All staff with access to personal data receive mandatory data protection training upon joining and on a regular ongoing basis.
• Data access is granted on a strict need-to-know basis, with access privileges reviewed and updated quarterly.
• Third-party service providers are assessed for security compliance before engagement and are contractually required to maintain appropriate security standards.
• i899 maintains an incident response plan that specifies clear procedures for identifying, containing, and reporting data security incidents.

6.3 Data Breach Notification

In the event of a personal data breach that poses a risk to your rights and freedoms, i899 will notify affected players without undue delay and, where required, will report the breach to the relevant supervisory authority. Notification will include a description of the nature of the breach, the categories and approximate number of records affected, the likely consequences, and the measures taken or proposed to address the breach.

7 Your Privacy Rights

As a user of the i899 platform, you have a number of rights regarding the personal data we hold about you. i899 is committed to honouring these rights promptly and transparently. The following rights are available to all registered players:

• Right of Access: You may request a copy of all personal data i899 holds about you. We will provide this information in a structured, commonly used, and machine-readable format within 10 business days.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay. Contact our support team with the specific correction you are requesting and any supporting evidence.
• Right to Erasure: You may request that i899 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where the data has been unlawfully processed. This right is subject to our legal retention obligations — for example, transaction records required for AML compliance cannot be deleted until the mandatory retention period expires.
• Right to Restriction of Processing: In certain circumstances, you may request that we restrict the processing of your personal data — for example, while a rectification request is being resolved.
• Right to Data Portability: Where processing is based on your consent or on a contractual basis, you may request that we provide your personal data in a portable format that you can transfer to another service provider.
• Right to Object: You may object to processing based on legitimate interests, including profiling for marketing purposes. Where you object to marketing processing, we will cease that processing immediately.
• Rights Related to Automated Decision-Making: You have the right not to be subject to a decision based solely on automated processing where that decision has a significant legal or similarly significant effect on you. You may request human review of any automated decision affecting your account.

7.1 How to Exercise Your Rights

To exercise any of the rights listed above, please contact the i899 data privacy team by email at [email protected]. Please include your full name, registered email address, and a clear description of the right you wish to exercise and any relevant details. We will acknowledge your request within 3 business days and provide a full response within 10 business days. In complex cases, we may extend this period by a further 10 business days, and we will notify you if this extension is necessary.

We may need to verify your identity before processing your request to ensure that personal data is not disclosed to or altered by an unauthorised person. Identity verification may involve asking you to confirm details already on your account.

8 Contact Us About Privacy

If you have any questions, concerns, or complaints about this Privacy Policy, about the way i899 processes your personal data, or about how to exercise your privacy rights, please get in touch with us through any of the following channels:

• Email: [email protected] — Please include "Privacy Query" in the subject line for faster routing to our data privacy team.
• Live Chat: Available 24/7 on the i899 platform. Our support agents can handle general privacy queries and will escalate data rights requests to the appropriate team.
• WhatsApp: +880 1800 000 000 — Available during support hours (00:00–24:00 BST).

We take all privacy complaints seriously and aim to resolve them promptly and fairly. If you submit a complaint about our data handling practices, we will acknowledge receipt within 3 business days, investigate the matter thoroughly, and provide a written response within 15 business days.

8.1 Updates to This Privacy Policy

i899 reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, changes in applicable laws, or improvements to our platform. When we make material changes to this policy, we will notify active players by email and by posting a prominent notice on the i899 website. The "Last updated" date at the top of this page always reflects the date of the most recent revision. We encourage you to review this page periodically to stay informed about how i899 protects your information.

Your continued use of the i899 platform after the posting of any revised Privacy Policy constitutes your acknowledgment of the changes. If you do not agree with the revised policy, you should discontinue use of the platform and contact our support team to close your account and arrange return of your available balance.