Your Privacy Matters at sh999

1 Information We Collect

sh999 collects personal data through several channels: directly from you when you register an account or contact support, automatically when you use the platform, and from third parties such as payment processors and identity verification services. The categories of data we collect are set out below.

You are not obligated to provide all requested data, but failure to provide information that is required for identity verification or payment processing may limit your ability to use certain sh999 features, including withdrawals.

2 How We Use Your Data

sh999 processes your personal data only for specific, legitimate purposes. We do not use your data for any purpose incompatible with the reasons set out below. The legal basis for each processing activity is noted alongside it.

• Account creation and management: To register your sh999 account, verify your identity and age, and maintain your account profile throughout your relationship with us. Legal basis: contractual necessity.
• Transaction processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, bank transfer, and cryptocurrency channels; to maintain accurate financial records; and to prevent payment fraud. Legal basis: contractual necessity and legal obligation.
• Service delivery: To enable you to access casino games, place sports bets on cricket, slots, snooker, badminton, and other markets, and use all features of the sh999 platform. Legal basis: contractual necessity.
• Customer support: To respond to your enquiries, resolve disputes, process complaints, and provide technical assistance. Legal basis: contractual necessity and legitimate interest.
• Regulatory compliance: To fulfil our anti-money laundering (AML), Know Your Customer (KYC), and responsible gaming obligations, including age verification, source of funds checks, and self-exclusion management. Legal basis: legal obligation.
• Security and fraud prevention: To detect, investigate, and prevent fraudulent transactions, account takeovers, bonus abuse, collusion, and other prohibited conduct outlined in our Terms & Conditions. Legal basis: legitimate interest.
• Platform improvement: To analyse usage patterns, test new features, optimise game performance, and improve the overall player experience. Legal basis: legitimate interest.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have provided explicit consent to receive such communications. You may withdraw consent at any time by contacting support or using the unsubscribe link in any marketing email. Legal basis: consent.

3 Data Sharing and Disclosure

sh999 does not sell your personal data. We share your data only in the limited circumstances described below, and always with appropriate safeguards in place.

• Payment service providers: We share the financial data necessary to process your transactions with our payment partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, and cryptocurrency processing services. These providers are bound by their own privacy and security standards.
• Identity verification providers: We use third-party KYC and identity verification services to validate the documents you submit during account verification. These providers process your identity data on our behalf under strict data processing agreements.
• Game technology providers: When you play games powered by third-party studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi, limited session and gameplay data may be shared with those providers for the purpose of delivering the game and ensuring fair play. Game providers do not receive your financial or contact data.
• Analytics and platform tools: sh999 uses analytics software to understand how players use the platform. Aggregated and anonymised usage data may be processed by these tools. No personally identifiable information is shared with analytics providers for advertising purposes.
• Legal and regulatory authorities: sh999 will disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory bodies where we are legally required to do so — for example, in connection with an AML investigation or a court order. We will notify you of such disclosure where legally permitted.
• Business transfers: In the event of a merger, acquisition, or sale of sh999 assets, your personal data may be transferred to the successor entity. You will be notified of any such transfer and of any material change in how your data is handled.

4 Cookies and Tracking Technologies

sh999.ws uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, and to analyse how the site is used. A cookie is a small text file placed on your device when you visit a website. You can control cookies through your browser settings, though disabling certain cookies may affect the functionality of the sh999 platform.

The types of cookies used on sh999.ws are as follows:

sh999 does not use third-party advertising cookies or cross-site tracking pixels. To manage or delete cookies, consult the help documentation for your browser (Chrome, Firefox, Safari, Edge, or the mobile browser of your choice). Clearing cookies will log you out of your sh999 session and reset any saved preferences.

5 Data Retention

sh999 retains your personal data only for as long as it is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The general retention periods applied to different categories of data are set out below.

• Account and identity data: Retained for the duration of your active account plus a minimum of 5 years after account closure, to comply with anti-money laundering record-keeping requirements.
• Financial transaction records: Retained for a minimum of 7 years from the date of the transaction, in line with standard financial record-keeping obligations.
• KYC verification documents: Retained for the duration of the account relationship plus 5 years after closure. Copies of identity documents are stored in encrypted form with access controls.
• Customer support communications: Retained for 3 years from the date of the last interaction, to enable consistent support and to resolve any future disputes that may arise from historical interactions.
• Technical and usage data (logs): Retained for up to 13 months from collection for security monitoring, fraud detection, and platform performance analysis.
• Marketing consent records: Retained for the duration of your consent plus 2 years, as evidence of your marketing preferences.

When the applicable retention period expires, personal data is either securely deleted or anonymised so that it can no longer be associated with you. Anonymised, aggregated data may be retained indefinitely for statistical and research purposes.

6 Data Security Measures

sh999 implements a layered security architecture to protect your personal data against unauthorised access, alteration, disclosure, and destruction. Our key security measures include:

• Transport Layer Security (TLS 1.3): All data in transit between your device and sh999.ws is encrypted. The platform enforces HTTPS across all pages and API endpoints.
• Data encryption at rest: Sensitive personal data, including identity documents and financial information, is encrypted at rest using AES-256 encryption within our secure data infrastructure.
• Two-factor authentication (2FA): sh999 offers 2FA for all player accounts via authenticator app or SMS verification. Players are strongly encouraged to enable 2FA through the account security settings.
• Access control and segregation: Internal access to player data is granted on a strict need-to-know basis. Role-based access controls ensure that staff members can only access the categories of data relevant to their specific responsibilities.
• Regular security audits: sh999's platform and infrastructure are subject to periodic security reviews. Vulnerability assessments and penetration testing are conducted to identify and address potential weaknesses before they can be exploited.
• Incident response: sh999 maintains a documented data breach response procedure. In the event of a confirmed breach affecting your personal data, you will be notified without undue delay, along with guidance on protective actions.

7 Your Data Rights

As a sh999 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team at [email protected] (plain text — not a clickable link) or via live chat. We will respond to all valid requests within a reasonable timeframe and, where required by law, within 30 days.

• Right of access: You have the right to request a copy of the personal data sh999 holds about you, along with information about how it is being used. This is commonly known as a Subject Access Request (SAR).
• Right to rectification: If any personal data sh999 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update certain information (such as your email address or mobile number) directly within your account settings.
• Right to erasure: You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purposes for which it was collected. This right is subject to legal retention obligations; sh999 cannot delete data that we are required to retain under AML or financial record-keeping laws.
• Right to restrict processing: You may request that sh999 restrict the processing of your data in certain situations, such as while a dispute about the accuracy of your data is being resolved.
• Right to data portability: Where technically feasible and legally applicable, you may request a copy of your personal data in a structured, commonly used, machine-readable format, for transfer to another service provider.
• Right to object: You have the right to object to the processing of your data where sh999 relies on legitimate interest as the legal basis. You also have the absolute right to opt out of marketing communications at any time.
• Right to withdraw consent: Where sh999 processes your data based on your consent (such as for marketing), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted before the withdrawal.

8 Updates to This Policy

sh999 reviews this Privacy Policy on a regular basis and will update it to reflect changes in our data practices, legal obligations, or the features and services we offer. The "Effective Date" at the top of this page indicates when the most recent substantive revision was made.

Where changes to this policy are material — for example, a change in the categories of data we collect or a new disclosure to a third party — sh999 will notify you via a banner notification on the platform and/or an email to your registered address at least 7 days before the change takes effect. Minor clarifications or corrections may be published without advance notice.

We encourage you to review this Privacy Policy periodically. Your continued use of sh999.ws following any published update constitutes your acknowledgement of the revised policy. If you have concerns about a specific change, please contact our support team before the change takes effect.

For all privacy-related enquiries, data rights requests, or concerns about how your personal data is handled, please contact the sh999 data protection team at [email protected] (plain text only — not a clickable link). Our support team is available 24/7, Bangladesh Standard Time (BST, UTC+6).