Your Privacy Matters at sa999

This Privacy Policy sets out the basis on which sa999 collects, processes, stores, and shares the personal data of all individuals who access and use the sa999 platform. It applies to all services offered by sa999, including sports betting (cricket, table tennis, kabaddi, football), live casino games, online slots, and any other gaming or entertainment features available through sa999.io.

sa999 is committed to handling all personal data with care, transparency, and respect. We apply internationally recognised data protection principles in the management of player information, including the principles of data minimisation, purpose limitation, storage limitation, accuracy, integrity, and confidentiality.

This policy applies to all players located in Bangladesh and any other jurisdiction from which the sa999 platform is accessed. It applies regardless of the device used to access the platform, including desktop browsers, mobile browsers, and any officially distributed sa999 application.

This policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which contain additional provisions relevant to account management and player welfare.

sa999 collects personal data through several channels, including account registration, platform activity, payment transactions, customer support interactions, and automatic technical data collection. The categories of personal data we collect are detailed in the table below.

sa999 does not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or health data, except where relevant to a responsible gaming assessment and only with your explicit consent.

sa999 uses the personal data we collect for the following purposes. We only process your data where we have a clear, legitimate purpose for doing so:

• Account creation and management — to register your account, verify your identity, maintain your account settings, and communicate account-related updates.
• Transaction processing — to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfer, and to maintain accurate financial records of all transactions.
• Platform delivery — to provide access to all betting markets, casino games, slots, live dealer games, and other features offered by sa999.
• Fraud prevention and security — to detect, investigate, and prevent fraudulent activity, money laundering, account takeover attempts, and other prohibited conduct as defined in our Terms & Conditions.
• Regulatory compliance — to fulfil anti-money laundering (AML) obligations, including Know Your Customer (KYC) verification requirements, and to respond to lawful requests from competent authorities.
• Responsible gaming — to monitor gaming patterns that may indicate problem gambling behaviour, to apply self-exclusion or deposit limit settings requested by the player, and to enforce our 21+ age requirement.
• Customer support — to respond to queries, resolve disputes, handle complaints, and maintain records of support interactions for quality assurance purposes.
• Platform improvement — to analyse aggregated and anonymised usage data in order to improve the design, performance, and content of the sa999 platform.
• Marketing communications — to send promotional offers, bonus notifications, tournament announcements, and seasonal promotions (such as BPL season offers, Eid specials, Pohela Boishakh bonuses) to players who have opted in to receive marketing communications.

sa999 does not make any automated decisions about players — including decisions that produce legal or similarly significant effects — without human review. Any automated flagging systems (for example, fraud detection algorithms) are reviewed by a member of the sa999 compliance team before any action is taken against a player's account.

sa999 processes personal data on the following legal grounds, consistent with internationally recognised data protection frameworks:

• Contractual necessity — processing required to enter into and perform the player account agreement, including identity verification, transaction processing, and platform access.
• Legal obligation — processing required to comply with applicable anti-money laundering laws, financial record-keeping requirements, and responses to lawful regulatory or law enforcement requests.
• Legitimate interests — processing carried out for purposes that are in sa999's legitimate business interest and are not overridden by your privacy rights. This includes fraud detection, platform security, and aggregate analytics for product improvement.
• Consent — processing carried out only where you have given us a clear, specific, and freely given consent. This applies primarily to marketing communications and optional data collection not required for platform operation. You may withdraw consent at any time by contacting the support team.

sa999 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. We share your data only in the following limited and controlled circumstances:

• Payment service providers — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank, solely for the purpose of processing your financial transactions on the platform.
• KYC and identity verification providers — third-party services engaged to verify the authenticity of identity documents submitted during the account verification process, in compliance with AML obligations.
• Platform technology providers — including game content suppliers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi), hosting and cloud infrastructure providers, and cybersecurity services. These providers act as data processors under contract and are not permitted to use your data for their own purposes.
• Legal and regulatory authorities — where sa999 is required by applicable law, court order, or lawful regulatory request to disclose player information. sa999 will always endeavour to notify the affected player before complying with such a request where legally permissible to do so.
• Business successors — in the event of a merger, acquisition, or sale of all or part of sa999's business, player data may be transferred to the acquiring entity, subject to the same privacy protections described in this policy.

All third parties with whom sa999 shares personal data are required to implement appropriate technical and organisational security measures to protect that data and are contractually prohibited from using it for any purpose beyond the scope agreed with sa999.

sa999 uses cookies and similar tracking technologies on the sa999.io website to deliver core platform functionality, analyse usage patterns, and improve the player experience. The types of cookies we use are as follows:

• Essential cookies — strictly necessary for the operation of the platform. These cookies enable core functions such as user authentication, session management, and security features. They cannot be disabled without impairing platform functionality.
• Analytical cookies — used to collect anonymised data about how players interact with the platform, including which pages are visited most frequently, how long sessions last, and which features generate the most engagement. This data is used exclusively for internal product improvement.
• Functional cookies — used to remember your preferences such as your preferred language, display settings, and notification preferences, so that you do not need to reconfigure them on each visit.
• Security cookies — used to detect and prevent fraudulent login attempts, bot activity, and other security threats to player accounts.

sa999 does not use third-party advertising cookies or retargeting pixels. You will not be tracked across other websites by any technology deployed by sa999.

You can manage or delete cookies via your browser settings at any time. Please note that disabling essential cookies will prevent you from logging in to your sa999 account and may significantly impair platform functionality. Disabling analytical or functional cookies will not affect your ability to use the platform but may reduce the quality of your experience.

sa999 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply:

• Active account data — retained for the full duration of the player's account, plus a minimum of 5 years following account closure, in compliance with standard financial record-keeping requirements.
• Transaction records — retained for a minimum of 5 years from the date of each transaction, in compliance with anti-money laundering record-keeping obligations.
• KYC and identity documents — retained for a minimum of 5 years following the completion of the verification process, or longer if required by applicable law.
• Support correspondence — retained for 3 years from the date of the relevant interaction, after which it is securely deleted or anonymised.
• Gaming activity logs — retained for 5 years for compliance and dispute resolution purposes, after which aggregated anonymised data may be retained indefinitely for statistical analysis.
• Marketing consent records — retained for the duration of the player's consent, plus 2 years following the withdrawal of consent or account closure, whichever is later.

When data is no longer required and no legal obligation prevents deletion, sa999 securely destroys or permanently anonymises the data using industry-standard methods, ensuring it cannot be reconstructed or attributed to any individual.

sa999 applies a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Key security measures in place include:

• 256-bit SSL/TLS encryption on all data transmissions between your browser or device and the sa999 servers. All pages on sa999.io are served exclusively over HTTPS.
• Encrypted data storage — sensitive fields including passwords, payment references, and identity document images are stored in encrypted form. Passwords are never stored in plain text and are hashed using industry-standard cryptographic algorithms.
• Access control — access to player data is strictly limited to sa999 personnel who require it to perform their job duties. All staff access is logged and reviewed regularly. Privileged access to production systems requires multi-factor authentication.
• Intrusion detection and monitoring — sa999 maintains real-time monitoring systems to detect unusual access patterns, attempted breaches, and other security anomalies. Any detected incident triggers an immediate response protocol.
• Regular security audits — the sa999 platform undergoes periodic penetration testing and security assessments by qualified security professionals to identify and remediate potential vulnerabilities.
• Staff training — all sa999 personnel who handle personal data receive regular training in data protection principles and security best practices.

Despite these measures, no internet-based service can guarantee absolute security. In the event of a data breach that is likely to result in a risk to player rights, sa999 will notify affected players promptly and take all reasonable steps to contain and remediate the breach.

As a player on the sa999 platform, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact the sa999 support team via live chat or email:

sa999 will respond to all valid data subject requests within 30 calendar days. In complex cases, this period may be extended by up to an additional 60 days, in which case we will notify you of the extension and the reason for it within the initial 30-day period. There is no charge for exercising your data rights.

The sa999 platform is strictly intended for individuals who are 21 years of age or older. sa999 does not knowingly collect, process, or store personal data relating to individuals under the age of 21. If sa999 becomes aware that personal data has been collected from a person under the age of 21, that data will be deleted immediately, the associated account will be suspended, and the matter will be handled in accordance with our Terms & Conditions and applicable child protection principles.

If you are a parent or guardian and believe that your child has registered on the sa999 platform or that their data has been collected, please contact our support team immediately via live chat. We will investigate and take appropriate action without delay.

sa999 employs age verification procedures at account registration and reserves the right to request proof of age at any point during a player's account lifecycle. Failure to provide satisfactory age verification within the required timeframe will result in account suspension pending resolution.

sa999 may send marketing communications — including promotional offers, bonus alerts, match notifications, tournament announcements, and seasonal promotions — to players who have opted in to receive them during registration or subsequently via their account settings.

Marketing communications may be delivered via the following channels, subject to your expressed preferences:

• Email to your registered email address
• SMS to your registered mobile number
• Push notifications via the sa999 platform (if enabled in your device settings)
• In-platform banners and messages displayed when you are logged in

You may unsubscribe from any or all marketing communications at any time by contacting the sa999 support team via live chat. Opt-out requests are processed within 5 working days. Withdrawing your marketing consent will not affect your ability to use the platform, receive transactional communications (such as deposit confirmations and withdrawal notifications), or access any part of the sa999 service.

sa999 does not send unsolicited commercial messages to non-registered individuals and does not purchase or use third-party marketing lists.

sa999 reserves the right to update or revise this Privacy Policy at any time. Any changes will be published on this page with a revised effective date prominently displayed at the top of the document. Where changes are material — meaning they significantly alter how we collect, use, or share your personal data — sa999 will endeavour to notify registered players in advance via their registered email address or via a platform notification when they next log in.

Your continued use of the sa999 platform following the publication of any revised Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this page periodically to stay informed about how we are protecting your personal data. If you have any questions or concerns about a change to this policy, please contact the support team before continuing to use the platform.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way sa999 handles your personal data, please contact our support team using the details below. All data protection enquiries are handled by our compliance team and will receive a response within 2 business days.

• Email: [email protected]
• Live Chat: Available 24/7 via the sa999 platform
• Response time: 2–5 minutes average (live chat), 2 business days (email)

When submitting a data subject request, please include your registered username and the email address associated with your account so that we can verify your identity and process your request efficiently. sa999 may ask for additional verification before actioning any request that affects personal data access or deletion.