cy999 Privacy Policy

01 Introduction

This Privacy Policy explains how cy999 ("we", "us", "our", or the "Platform") collects, uses, stores, shares, and protects the personal data of individuals ("you", "your", or the "Player") who access or use the cy999 online casino and sports betting platform, including all associated services, support channels, and promotional communications.

cy999 is committed to protecting your privacy and to processing personal data responsibly, transparently, and in accordance with applicable data protection principles. We apply appropriate technical and organisational measures to safeguard your data against unauthorised access, loss, alteration, or disclosure.

This Privacy Policy forms part of and should be read alongside cy999's Terms & Conditions, which govern your use of the platform. By registering a Player account or using any cy999 service, you confirm that you have read this Privacy Policy and consent to the processing of your personal data as described herein.

02 Data Controller

For the purposes of data protection law, cy999 acts as the data controller in respect of all personal data collected from Players and website visitors. As data controller, cy999 determines the purposes and means by which your personal data is processed.

All data protection enquiries, rights requests, and concerns should be directed to the cy999 support team. Contact details are provided in Section 15 of this Privacy Policy.

03 Personal Data We Collect

cy999 collects the following categories of personal data, depending on how you interact with the platform:

cy999 does not knowingly collect special category data (as defined under applicable data protection law, including data revealing racial or ethnic origin, political opinions, religious beliefs, or health data) except where this is strictly required for the operation of responsible gaming tools (e.g., recording problem gambling self-assessments submitted voluntarily by the Player).

04 How We Collect Your Data

cy999 collects personal data through the following channels:

• Direct Interactions: Data you provide when creating an account, completing identity verification, making deposits or withdrawals, participating in promotions, or contacting our support team.
• Automated Technologies: Technical and usage data collected automatically when you access the cy999 platform, including through cookies, web beacons, server logs, and similar tracking technologies (see Section 8 for full details on our cookie policy).
• Third-Party Sources: Identity and verification data received from authorised third-party KYC and AML service providers engaged by cy999 to support our compliance obligations. Payment data received from payment processors such as bKash, Nagad, Rocket, and Upay in the course of processing your transactions.
• Fraud Prevention Partners: Risk-scoring and fraud signals received from third-party fraud detection services used to protect the integrity of the cy999 platform and its Players.

05 Legal Basis for Processing

cy999 processes your personal data on the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to perform the contract between you and cy999, including operating your Player account, processing deposits and withdrawals, and providing gaming services.
• Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including Know Your Customer (KYC) identity verification, Anti-Money Laundering (AML) transaction monitoring, and mandatory record-keeping obligations.
• Legitimate Interests: Processing necessary for cy999's legitimate business interests, including fraud detection, platform security, responsible gaming monitoring, platform analytics and improvement, and the prevention of prohibited conduct. cy999 balances these interests against your rights and will not rely on legitimate interests where your rights and freedoms override them.
• Consent: Processing based on your freely given, specific, and informed consent, primarily in relation to non-essential cookies and direct marketing communications. Where consent is the legal basis, you may withdraw it at any time without affecting the lawfulness of prior processing.

06 How We Use Your Personal Data

cy999 uses the personal data it collects for the following purposes:

• Account Management: Creating, operating, verifying, and maintaining your Player account, including processing password resets and account security notifications.
• Service Delivery: Providing access to casino games, sports betting markets, live dealer tables, crash games, and all other products offered on the cy999 platform.
• Payment Processing: Processing deposits and withdrawals in Bangladeshi Taka (BDT) through supported payment methods including bKash, Nagad, Rocket, Upay, Visa, and Mastercard.
• Identity Verification: Conducting KYC verification to confirm your age (21+), identity, and address in compliance with applicable legal obligations.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent transactions, account takeovers, bonus abuse, collusion, and other prohibited conduct.
• AML Compliance: Monitoring transactions and account activity to detect and report suspicious activity in accordance with applicable Anti-Money Laundering obligations.
• Responsible Gaming: Monitoring gameplay patterns to identify potential problem gambling indicators and enabling self-imposed responsible gaming controls.
• Customer Support: Responding to your enquiries, resolving disputes, processing complaints, and maintaining support records for quality assurance.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve platform performance, game selection, and user experience.
• Promotional Communications: Sending you bonus offers, tournament invitations, and promotional updates where you have opted in to receive such communications. You may opt out at any time.

07 Sharing Your Personal Data

cy999 does not sell your personal data. We share your personal data only in the following circumstances and only with the categories of recipients described below:

• Payment Processors: Personal and financial data shared with payment service providers (including bKash, Nagad, Rocket, Upay, and card processing networks) solely for the purpose of processing your transactions.
• KYC and AML Providers: Identity and verification documents shared with authorised third-party identity verification and anti-money laundering compliance service providers engaged by cy999 to meet regulatory obligations.
• Game Software Providers: Limited technical session data shared with game providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) where necessary to deliver game functionality. These providers are bound by contractual data processing agreements.
• Fraud and Security Services: Technical and usage data shared with fraud detection and cybersecurity service providers to protect the platform and its Players.
• Legal and Regulatory Authorities: Personal data disclosed to government bodies, law enforcement agencies, or regulatory authorities where required by law or a valid court order, or where cy999 has a good-faith belief that disclosure is necessary to prevent serious harm.
• Group Companies: Personal data shared with affiliated entities within the cy999 corporate group where necessary for internal administrative, compliance, or operational purposes, subject to the same data protection standards described in this Privacy Policy.

08 Cookies and Tracking Technologies

cy999 uses cookies and similar tracking technologies to operate the platform, improve performance, and — where you have consented — to deliver relevant promotional content. The following types of cookies are used:

• Strictly Necessary Cookies: Essential for the operation of the cy999 platform. These cookies enable core functions such as session management, account login, and security. They cannot be disabled without significantly affecting platform functionality. No consent is required for strictly necessary cookies.
• Functional Cookies: Used to remember your preferences — such as language settings and responsible gaming controls — to provide a more personalised platform experience.
• Analytics Cookies: Used to collect aggregated, anonymised information about how Players use the cy999 platform, enabling us to identify performance improvements and optimise the user experience. These cookies are only set with your consent.
• Marketing Cookies: Used to deliver promotional content relevant to your interests. Marketing cookies are only set where you have given explicit consent and can be withdrawn at any time.

Most web browsers allow you to control cookies through browser settings, including blocking or deleting cookies. Please note that disabling strictly necessary cookies will impair your ability to use the cy999 platform. Detailed browser-level cookie management instructions are available in your browser's help documentation.

09 Data Retention

cy999 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Active Account Data: Retained for the full duration of your Player account and for a period following account closure as required by applicable KYC, AML, and financial record-keeping obligations.
• Transaction Records: Financial transaction records are retained for a minimum period as mandated by applicable anti-money laundering and financial crime prevention regulations.
• Identity Verification Documents: KYC documents are retained for the legally mandated period following account closure or the completion of the relevant verification process.
• Support Communications: Customer support records are retained for a defined period to enable quality assurance, dispute resolution, and regulatory audit purposes.
• Responsible Gaming Records: Self-exclusion and other responsible gaming intervention records are retained for the full duration of the exclusion period and for a period thereafter to prevent re-registration in breach of the exclusion.
• Technical and Usage Data: Anonymised and aggregated analytics data may be retained indefinitely for platform improvement purposes. Personal identifiers are removed from such data once no longer required.

Upon expiry of the applicable retention period, cy999 will securely delete or irreversibly anonymise your personal data unless a longer retention period is required or permitted by law.

10 Data Security

cy999 takes the security of your personal data seriously and implements a comprehensive set of technical and organisational measures to protect it against accidental loss, unauthorised access, disclosure, alteration, and destruction. Our security measures include:

• Encryption in Transit: All data transmitted between your device and cy999's servers is encrypted using 256-bit SSL/TLS protocols. This applies to all platform interactions, including login, deposits, withdrawals, and account management.
• Encryption at Rest: Sensitive personal data stored on cy999's servers is encrypted at rest using industry-standard encryption protocols, ensuring that data remains protected even in the event of a physical server compromise.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. cy999 staff are granted only the minimum level of data access required to fulfil their specific operational responsibilities.
• Multi-Factor Authentication: Administrative access to systems holding personal data requires multi-factor authentication, reducing the risk of unauthorised access through compromised credentials.
• Intrusion Detection: cy999's infrastructure is protected by real-time intrusion detection and prevention systems that monitor for and respond to anomalous activity.
• Regular Security Audits: cy999 conducts regular internal and third-party security assessments, penetration tests, and vulnerability scans to identify and remediate potential security weaknesses.

11 Your Data Rights

Subject to applicable data protection law and certain exceptions, you hold the following rights in relation to your personal data held by cy999. To exercise any of these rights, please contact our support team using the details in Section 15.

cy999 will respond to all valid rights requests within a reasonable timeframe and without charge. In certain circumstances, we may be required to retain data despite an erasure request — for example, where retention is mandated by AML or KYC legal obligations. In such cases, we will explain the legal basis for retention clearly.

12 Minors and Age Restriction

cy999 strictly prohibits the use of its platform by persons under the age of 21. The cy999 platform is intended exclusively for adult Players aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21.

As part of our registration process, all Players are required to confirm that they are 21 or older, and are subject to mandatory age and identity verification procedures. Where cy999 discovers or has reasonable grounds to believe that personal data has been collected from an individual under the age of 21, we will:

• Immediately suspend the relevant Player account pending investigation.
• Permanently close the account upon confirmation that the Player is under 21.
• Delete the personal data of the underage individual as promptly as possible, subject to any mandatory retention obligations.
• Return any deposited real-money funds to the deposit source after deducting any bonuses claimed.

13 International Data Transfers

cy999 operates a platform accessible to Players in Bangladesh and may, in the ordinary course of providing its services, transfer personal data to third-party service providers whose servers or operations are located outside Bangladesh. Such transfers may occur in connection with payment processing, identity verification, game delivery, and fraud prevention services.

Where personal data is transferred outside Bangladesh, cy999 takes appropriate steps to ensure that such transfers are conducted in a manner that maintains an equivalent level of data protection to that described in this Privacy Policy. These steps include:

• Contractual Safeguards: Requiring all international data processors to enter into binding data processing agreements that impose data protection obligations equivalent to those applied within cy999's own operations.
• Processor Due Diligence: Assessing the data protection practices of all third-party processors prior to engagement and on an ongoing basis, to ensure that appropriate security and privacy standards are maintained.
• Minimisation: Transferring only the minimum personal data necessary for the specific processing purpose when engaging cross-border service providers.

By using the cy999 platform, you acknowledge that your personal data may be transferred internationally as described above, subject to the safeguards set out in this section.

14 Changes to This Privacy Policy

cy999 reserves the right to update or amend this Privacy Policy at any time. Changes may be made to reflect updates in applicable law, changes in our data processing practices, the introduction of new platform features, or improvements in our data governance framework.

When material changes are made to this Privacy Policy, cy999 will notify registered Players via email to the address registered on their account, and will update the "Last Updated" date at the top of this document. We may also display a prominent notice on the cy999 platform for a defined period following material changes.

Your continued use of the cy999 platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the updated Privacy Policy, you must discontinue use of the platform and may request account closure and data erasure as described in Section 11.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way cy999 processes your personal data, please contact our support team using any of the following channels. All privacy enquiries are handled in English and are responded to as promptly as possible.

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 directly on the cy999 platform
• Support Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (UTC+6)

When submitting a data rights request or privacy enquiry, please include your registered Player username and the email address associated with your cy999 account to allow us to locate and verify your account efficiently. cy999 aims to acknowledge all privacy requests within 2 business days and to fully resolve requests within 30 calendar days, except where additional time is required for complex requests.