Privacy Policy — How mg999 Collects, Uses & Protects Your Data

1 Introduction

This Privacy Policy ("Policy") describes how mg999 ("mg999", "we", "us", "our") collects, uses, stores, discloses, and protects the personal data of individuals ("you", "your", "Player", "User") who visit, register on, or otherwise interact with the mg999 platform at https://mg999.io and any associated mobile or web applications.

mg999 is committed to protecting your privacy and handling your personal data with transparency, care, and respect. This Policy is intended to help you understand what data we hold about you and why, so that you can make informed decisions about your continued use of the platform.

We may update this Policy from time to time. When material changes are made, we will notify you via email or a prominent notice on the platform. Continued use of mg999 following the effective date of any revision constitutes acceptance of the updated Policy.

2 Data Controller

For the purposes of applicable data protection law, the data controller responsible for your personal data is the mg999 platform, operating the website at https://mg999.io. As data controller, mg999 determines the purposes for which personal data is processed and the means by which that processing is carried out.

If you have any questions about this Policy or about the way in which your personal data is handled, you may contact our dedicated support team at any time via the 24/7 live chat facility on the platform, or by sending a written enquiry to:

Email: [email protected]

3 Personal Data We Collect

mg999 collects several categories of personal data depending on how you interact with the platform. The main categories are described below.

3.1 Identity & Contact Data

• Full legal name as it appears on your government-issued identification document
• Date of birth (used to verify that you meet the 21+ age requirement)
• Residential address, including city (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi)
• Email address and mobile phone number
• National Identity Card (NID) number or passport number (collected during KYC verification)

3.2 Account Data

• Username and encrypted password
• Account creation date and login history
• Account preferences, communication settings, and responsible gaming tool selections
• Correspondence you have sent to or received from our support team

3.3 Financial & Transaction Data

• Mobile financial service identifiers (e.g., bKash, Nagad, Rocket, or Upay account numbers) used for deposits and withdrawals
• Transaction amounts, timestamps, and reference numbers
• Deposit and withdrawal history
• Source-of-funds documentation where requested for AML compliance purposes

3.4 Gameplay & Betting Data

• Wagering history across casino games and sports betting markets
• Game session durations, bet sizes, and win/loss records
• Bonus and promotion redemption records

3.5 Technical & Usage Data

• IP address and approximate geolocation data
• Device type, operating system, and browser version
• Pages visited, time spent on page, and navigation patterns within the platform
• Error logs and crash reports

4 How We Collect Your Data

We collect personal data through the following means:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, placing bets, contacting support, or completing surveys and promotional forms.
• Automated technologies: As you interact with the mg999 platform, we automatically collect technical and usage data via cookies, server logs, web beacons, and similar tracking technologies. See Section 11 for more detail on our use of cookies.
• Third-party sources: We may receive identity verification data from KYC service providers, fraud-screening data from risk management partners, and payment confirmation data from mobile financial service providers such as bKash, Nagad, Rocket, and Upay.

5 Purposes of Processing

The table below sets out the primary purposes for which mg999 processes personal data, together with the categories of data used for each purpose.

mg999 does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review.

6 Legal Basis for Processing

mg999 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and mg999 — including account management, transaction processing, and delivering the games and betting services you have requested.
• Legal obligation: Processing required to comply with applicable legal and regulatory obligations, including anti-money laundering (AML) requirements, age verification obligations, and data retention mandates.
• Legitimate interests: Processing carried out for our legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and improving our services, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we rely on your consent to process personal data (for example, for optional marketing communications), you may withdraw that consent at any time by contacting support or updating your account preferences. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

7 Data Sharing & Disclosure

mg999 does not sell your personal data to third parties. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

7.1 Service Providers

We engage trusted third-party service providers who process personal data on our behalf, including identity verification and KYC providers, payment processing partners (bKash, Nagad, Rocket, Upay), cloud hosting and infrastructure providers, customer support software providers, and fraud detection and risk management vendors. All service providers are bound by data processing agreements that prohibit them from using your data for any purpose other than fulfilling the specific service for which they were engaged.

7.2 Game Providers

Game studios and providers whose titles appear on the mg999 platform (including Evolution Gaming, Ezugi, Pragmatic Play, PG Soft, NetEnt, Microgaming, and Spribe) may receive limited session and gameplay data necessary to operate and authenticate the relevant games. These providers are contractually bound to process such data only for game delivery purposes.

7.3 Legal & Regulatory Authorities

mg999 may disclose personal data to law enforcement agencies, financial intelligence units, or other competent regulatory bodies where we are legally required to do so, or where disclosure is necessary to prevent, detect, or investigate fraud, money laundering, or other criminal activity.

7.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of mg999's business assets, your personal data may be transferred to the acquiring or successor entity. We will notify affected users of any such transfer via email or a platform notice, and the transferee will be required to honour this Privacy Policy.

8 International Data Transfers

Some of mg999's service providers and game partners operate from locations outside of Bangladesh. Where personal data is transferred internationally, mg999 ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to that required under applicable data protection principles. Such safeguards include contractual data protection clauses incorporated into agreements with the relevant service providers.

If you have concerns about international data transfers involving your personal data, please contact our support team for further information.

9 Data Retention

mg999 retains personal data for as long as is necessary to fulfil the purposes set out in this Policy, and in any event for a minimum period required by applicable legal and regulatory obligations. The following general retention guidelines apply:

• Account and identity data: Retained for the lifetime of your active account, plus a minimum of five (5) years following account closure, to comply with AML and record-keeping requirements.
• Financial and transaction data: Retained for a minimum of five (5) years from the date of each transaction, in line with financial record-keeping obligations.
• KYC verification documents: Retained for the period required by applicable law, typically five (5) years from the date of verification or account closure, whichever is later.
• Technical and usage data: Retained for up to thirteen (13) months from collection, after which it is aggregated or anonymised.
• Support correspondence: Retained for three (3) years from the date of the last interaction, unless a longer period is required for an ongoing dispute or legal matter.

Once data reaches the end of its applicable retention period, it is securely deleted, destroyed, or irreversibly anonymised so that it can no longer be linked to any individual.

10 Security Measures

mg999 implements a comprehensive suite of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers
• Encryption of sensitive data at rest within our database infrastructure
• Access controls ensuring that only authorised personnel can access personal data, on a strict need-to-know basis
• Multi-factor authentication requirements for administrative and system access
• Regular security assessments, penetration testing, and vulnerability scanning
• Intrusion detection systems and real-time security monitoring
• Staff training on data protection and information security best practices

11 Cookies & Tracking Technologies

mg999 uses cookies and similar tracking technologies to operate and improve the platform, remember your preferences, and analyse how the platform is used. The main categories of cookies we use are as follows:

11.1 Strictly Necessary Cookies

These cookies are essential for the platform to function and cannot be disabled. They are used to maintain your login session, remember your account preferences, and ensure platform security. No personally identifiable information is shared with third parties via strictly necessary cookies.

11.2 Performance & Analytics Cookies

These cookies collect anonymised or aggregated data about how players navigate and use the mg999 platform. This information helps us identify areas for improvement, optimise page load times, and better understand which features are most valuable to our users. Data collected through performance cookies does not directly identify any individual user.

11.3 Functional Cookies

Functional cookies allow the platform to remember choices you have made — such as your preferred language, game display settings, or responsible gaming tool selections — and provide enhanced, personalised features as a result. Disabling functional cookies may affect your experience on the platform.

You can manage your cookie preferences through your browser settings. Please note that disabling certain categories of cookies may impact the functionality of the mg999 platform.

12 Your Data Rights

Subject to applicable law, you have the following rights with respect to the personal data mg999 holds about you:

• Right of access: You may request a copy of the personal data we hold about you, together with information about how it is being processed.
• Right to rectification: You may request that inaccurate or incomplete personal data be corrected or updated.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to restrict processing: You may request that we limit the way we process your data in certain circumstances, for example while a dispute regarding its accuracy is resolved.
• Right to data portability: You may request that personal data you have provided to us be transferred to you or to another controller in a structured, commonly used, machine-readable format.
• Right to object: You may object to processing of your personal data where we rely on legitimate interests as our legal basis, and where your particular circumstances mean that the processing causes disproportionate impact on your rights.
• Right to withdraw consent: Where we process your data based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact our support team via the live chat facility or by emailing [email protected]. We will respond to all valid requests within 30 days. We may ask you to verify your identity before processing your request.

13 Minors & Age Policy

The mg999 platform is strictly intended for individuals aged 21 years and over. We do not knowingly collect personal data from anyone below the age of 21. If we become aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that your child has provided personal data to mg999, please contact our support team immediately so that we can take appropriate action.

14 Third-Party Links

The mg999 platform may contain references or links to third-party game providers, payment processors, or other external services. These third parties operate under their own privacy policies, which are independent of this Policy. mg999 is not responsible for the privacy practices or content of any third-party websites or services. We encourage you to review the privacy policies of any third parties whose services you access in connection with your use of mg999.

15 Changes to This Policy

mg999 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform features. When we make material changes, we will notify you by email to the address associated with your account, or by displaying a prominent notice on the platform, at least 14 days before the changes take effect.

The date at the top of this Policy indicates when it was last revised. We encourage you to review this Policy periodically to stay informed about how mg999 protects your personal data. Your continued use of the platform after any changes become effective constitutes your acceptance of the revised Policy.

16 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data mg999 holds about you, please contact our support team through any of the following channels:

• Live Chat: Available 24/7 directly within the mg999 platform
• Email: [email protected]
• Operating Hours: 24/7 — Bangladesh Standard Time (BST, UTC+6)

We aim to acknowledge all privacy-related enquiries within 24 hours and to provide a substantive response within 30 calendar days. Where a request is particularly complex or where you have submitted multiple requests, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.