ov999 Privacy Policy — How We Handle Your Data

This Privacy Policy ("Policy") describes how ov999 ("we", "us", "the Platform") collects, processes, stores and discloses personal information obtained from users ("you", "Player") who access or use the ov999 website and its associated services. By creating an account, making a deposit or otherwise using ov999, you acknowledge that you have read and accepted this Policy in its entirety.

ov999 serves players across Bangladesh, including Dhaka, Chittagong, Sylhet, Rajshahi, Khulna, Barisal, Rangpur and Mymensingh. We recognise that the privacy and security of personal data belonging to our players is a fundamental obligation, and we take every reasonable step to protect it. This Policy is written in plain language so that every player can understand how their data is handled.

This Policy should be read alongside ov999's Terms and Conditions, which form part of the agreement between you and ov999. If you do not agree with any part of this Policy, you should discontinue using ov999 immediately. We may update this Policy from time to time. When we make material changes, we will update the "Last Updated" date at the top of this page. Continued use of ov999 following any update constitutes acceptance of the revised Policy.

ov999 uses the personal data we collect solely for the following purposes: (a) Account creation and verification — to set up your player account, verify your identity and confirm that you meet the minimum age requirement of 21 years; (b) Service delivery — to process your deposits and withdrawals via bKash, Nagad, Rocket and other payment channels, to make games available to you, and to credit bonuses and promotions to your account; (c) Security and fraud prevention — to detect unusual account activity, prevent money laundering, identify and block multiple accounts operated by the same individual, and protect the integrity of the platform.

(d) Responsible gaming compliance — to monitor your gaming activity for signs of problem gambling, to apply your chosen deposit limits and session timers, and to enforce self-exclusion periods you have requested; (e) Legal and regulatory compliance — to fulfil our obligations under applicable anti-money laundering (AML) rules, to respond to lawful requests from law enforcement authorities, and to retain records as required by applicable law; (f) Customer support — to respond to your queries, investigate complaints, and maintain a record of support interactions for quality assurance purposes.

ov999 does not use your personal data to build advertising profiles, sell your data to third-party marketers, or share your data with any entity that does not have a direct operational role in delivering the ov999 service. We do not use your gaming activity data to send you unsolicited promotional communications from third parties. Any promotional communications from ov999 itself (such as bonus notifications or seasonal promotions) are sent only where you have not opted out, and you may opt out at any time by contacting [email protected].

ov999 does not sell, rent or trade your personal data. We share your data only with trusted third-party service providers who perform specific functions necessary for the operation of the ov999 platform, and only to the extent required for those functions. All third-party service providers who handle ov999 player data are contractually required to process that data only for the purpose specified, to maintain appropriate security standards, and to delete or return the data once their engagement ends.

The categories of third parties with whom ov999 may share player data include: (a) Payment processors — bKash, Nagad, Rocket, Upay and card payment networks receive transaction data necessary to process your deposits and withdrawals; (b) Game content providers — Pragmatic Play, Evolution Gaming, Spribe, Ezugi and other licensed studios may receive anonymised session identifiers to authenticate game sessions; (c) Identity verification providers — our KYC partner receives your NID or passport image and personal details solely for age and identity verification purposes; (d) Cloud infrastructure providers — our hosting and database partners store encrypted player data on secure servers.

ov999 may also disclose player data to law enforcement, regulatory authorities or courts when legally required to do so — for example in response to a court order, a formal request from a Bangladeshi law enforcement body, or an obligation under applicable anti-money laundering regulations. In all other circumstances, your data is not disclosed to any party outside ov999 and its contracted service providers without your explicit consent.

ov999 protects player data using industry-standard security measures. All data transmitted between your device and our servers is encrypted using SSL (Secure Socket Layer) technology. Our databases are hosted on secure, access-controlled servers. Access to player personal data within ov999 is restricted on a need-to-know basis — only staff who require access to perform their specific function are granted it, and all access is logged and audited.

ov999 retains personal data for as long as is necessary to fulfil the purposes set out in this Policy, or as required by applicable law. In practice, this means: account data and transaction records are retained for a minimum of five years after account closure to meet anti-money laundering and financial record-keeping obligations; KYC documents are retained for the same period; gaming activity logs are retained for three years for dispute resolution and responsible gaming monitoring purposes.

When a player requests account closure, their active account data is deactivated immediately. However, financial transaction records and KYC documentation are archived in encrypted storage for the mandatory retention period before being permanently deleted. Players who request deletion of their data before the retention period has elapsed will be informed of the specific data categories that must be retained and the expected deletion date.

ov999 may update this Privacy Policy at any time. We will indicate the date of the most recent revision at the top of this page. Where changes are material, we will take reasonable steps to notify active players — for example by displaying a prominent notice on the ov999 platform for a defined period following the update. Your continued use of ov999 after any update constitutes acceptance of the revised Policy. If you do not agree with the updated Policy, you must stop using ov999 and contact support to request account closure.

If you have any questions, concerns or requests relating to this Privacy Policy or the way ov999 handles your personal data, please contact our support team in writing. We aim to acknowledge all privacy-related requests within 72 hours and to resolve them within 30 days. Please include your registered mobile number and a clear description of your request so we can handle it efficiently.