sky999 Privacy Policy

1.1 Registration & Account Data

When you register a sky999 account, we collect the following information which you provide directly:

• Full legal name (as it appears on your national ID card or passport).
• Bangladesh mobile phone number (used as your primary account identifier).
• Email address (used for account communications and security alerts).
• Date of birth (collected to verify that you meet the 21+ age requirement).
• Preferred username and hashed password (your password is never stored in plain text).
• City or district of residence (e.g., Dhaka, Chittagong, Sylhet, Khulna).

1.2 Payment & Transaction Data

When you make a deposit or withdrawal, sky999 records the following data necessary to process and reconcile the transaction:

• Mobile wallet account number (bKash, Nagad, Rocket, or Upay) or card type (Visa / Mastercard) — we do not store full card numbers.
• Transaction reference numbers generated by the payment provider.
• Deposit and withdrawal amounts in Bangladeshi Taka (৳).
• Date, time, and status of each transaction.

sky999 does not directly process or store card payment data. Card transactions are handled entirely by PCI-DSS compliant payment gateways and sky999 receives only a tokenised reference.

1.3 Device & Usage Data

When you access sky999, our servers automatically record certain technical data including:

• IP address and approximate geographic location derived from it.
• Browser type, version, and operating system.
• Device type (mobile, tablet) and screen resolution.
• Pages visited, games played, session start and end times, and in-game actions.
• Referral URL (the page you visited immediately before arriving at sky999).

This data is used to maintain platform security, detect fraud, optimise the gaming experience for mobile users in Bangladesh, and fulfil responsible gaming monitoring obligations.

1.4 Identity Verification (KYC) Documents

sky999 may request identity verification documents at the time of first withdrawal or at any time we are required to verify your identity under our anti-money-laundering obligations. Documents that may be requested include:

• A copy of your Bangladesh National ID Card (NID) or passport.
• A selfie photograph or a photograph of you holding your ID document.
• Proof of payment method ownership (e.g., screenshot of your bKash or Nagad registered number).
• Proof of address (utility bill or bank statement, not older than 3 months).

KYC documents are stored in an encrypted document vault with access restricted to authorised compliance personnel only.

1.5 Communications Data

If you contact the sky999 support team by email, live chat, or any other channel, we retain a record of that correspondence including your name, contact details, the content of your message, and our response. This data is retained for the purposes of resolving your query, improving our support quality, and maintaining a complaint history where applicable.

3.1 What Are Cookies

Cookies are small text files placed on your device by a website to store session and preference information. sky999 uses cookies and similar technologies (including local storage and session storage) to maintain your login session, remember your language and display preferences, and collect anonymised usage analytics to improve the platform.

3.2 Types of Cookies We Use

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies and security tokens. They cannot be disabled without preventing you from using sky999.
• Performance Cookies: Collect anonymised data about how players interact with the site (pages visited, error messages encountered, load times). Used solely to improve platform performance for Bangladesh mobile users.
• Functional Cookies: Remember preferences such as your last-visited game category or display settings to provide a more personalised experience.

sky999 does not currently use third-party advertising or tracking cookies for retargeting purposes. If this changes, this Policy will be updated and players will be notified.

4.1 Payment Service Providers

To process your deposits and withdrawals, sky999 shares the minimum necessary transaction data with your chosen payment provider (bKash, Nagad, Rocket, Upay, Visa gateway, or Mastercard gateway). These providers process this data under their own privacy policies and are independently responsible for their data handling practices. sky999 is not liable for the data processing activities of third-party payment providers.

4.2 Game Providers

To deliver casino games and live betting content, sky999 operates games provided by certified third-party studios including Evolution Gaming, Ezugi, Pragmatic Play, Microgaming, NetEnt, and Spribe. These providers may receive anonymised session identifiers to manage game state and RNG certification. No directly personally identifiable information (such as your name or mobile number) is shared with game providers.

4.3 Fraud Prevention & Identity Verification Partners

sky999 may share identity verification documents and transaction data with certified KYC and fraud-screening service providers to fulfil our anti-money-laundering and responsible gaming obligations. These partners are bound by strict data processing agreements and may only use your data for the specific purpose for which it was shared.

4.4 Legal & Regulatory Disclosure

sky999 may disclose your personal data to law enforcement authorities, regulatory bodies, or courts where we are required to do so by applicable law, court order, or lawful regulatory request. In such cases, sky999 will disclose only the minimum data required to satisfy the legal obligation and will notify you of the disclosure where permitted by law.

5.1 Technical Safeguards

sky999 implements the following technical security measures to protect your personal data:

• 256-bit SSL/TLS encryption on all data transmitted between your device and sky999 servers.
• Encrypted storage for all sensitive account data, including hashed and salted passwords using industry-standard algorithms.
• Encrypted document vault for KYC identity documents with access restricted to authorised compliance staff only.
• Regular security audits and penetration testing conducted by independent third-party security professionals.
• Automated intrusion detection systems monitoring for unusual access patterns in real time.
• Multi-factor authentication available for player accounts and mandatory for all sky999 internal staff accounts.

5.2 Organisational Safeguards

Access to player personal data within sky999 is governed by a strict role-based access control policy. Only personnel who require access to player data to perform their specific job function are granted that access. All staff with access to personal data receive data protection training on joining sky999 and annually thereafter. Data access events are logged and audited on a regular basis.

5.3 Data Breach Response

In the event of a personal data breach that poses a risk to the rights and freedoms of affected players, sky999 will notify affected players without undue delay. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the steps sky999 has taken or proposes to take in response. Players will be notified via the email address registered to their account.

6.1 Retention Periods

sky999 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected or to comply with applicable legal obligations. The following standard retention periods apply:

• Account & transaction data: Retained for a minimum of 5 years from the date of account closure, in compliance with anti-money-laundering record-keeping requirements.
• KYC identity documents: Retained for the duration of your active account and for 5 years following account closure.
• Device & usage data: Retained for a maximum of 24 months, after which it is anonymised or deleted.
• Customer support communications: Retained for 3 years from the date of the last communication in the thread.
• Marketing consent records: Retained for the duration of your consent and for 2 years after withdrawal of consent as evidence of the consent having been obtained.

6.2 Secure Deletion

When the applicable retention period expires, personal data is securely deleted from sky999 systems using industry-standard data destruction methods. Where complete deletion is not technically feasible (for example, in backup systems), the data will be isolated and protected from further processing until deletion is possible. Anonymised or aggregated data that cannot be used to identify you may be retained indefinitely for statistical analysis.

Right of Access

You have the right to request a copy of all personal data that sky999 holds about you. We will provide this in a structured, commonly used, and machine-readable format within 30 days of your verified request. We may request proof of identity before releasing this information to protect against unauthorised access to your data.

Right to Rectification

If any personal data sky999 holds about you is inaccurate or incomplete, you have the right to request that we correct it. You may also update certain account details (such as your email address or mobile number) directly through your sky999 account settings. For changes to identity-verified data (such as your legal name or date of birth), we may require supporting documentation.

Right to Erasure

You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and there is no other legal basis for processing), or where you object to processing and there are no overriding legitimate grounds. This right is subject to sky999's legal obligations to retain certain data as described in Section 6 above.

Right to Object & Withdraw Consent

You have the right to object to the processing of your personal data for direct marketing purposes at any time. Where processing is based on your consent (for example, opt-in marketing communications), you may withdraw that consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing that took place before the withdrawal.

8.1 Strict 21+ Policy

sky999 does not knowingly collect personal data from any person under the age of 21. Our platform is intended exclusively for adults aged 21 and above. During registration, all players must confirm their date of birth and agree that they meet the 21+ requirement. sky999 reserves the right to request documentary age verification at any time and to close accounts where the age requirement cannot be confirmed.

If sky999 discovers that personal data has been collected from a person under 21, that data will be deleted immediately and the associated account will be closed without notice. Any funds held in the account of an underage player may be forfeited in accordance with our Terms & Conditions.

9.1 Policy Amendments

sky999 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, changes in our data processing practices, or changes to the services we provide. When we make material changes to this Policy, we will update the "Last Reviewed" date at the top of this page and, where the changes are significant, notify registered players by email to the address registered on their account.

Your continued use of the sky999 platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated Policy. We encourage you to review this page periodically to stay informed of how sky999 protects your personal data.

9.2 Contact for Privacy Matters

For any questions, concerns, or requests relating to this Privacy Policy or the personal data sky999 holds about you, please contact our Data Privacy team. All privacy-related communications must be sent to the following address as plain text — do not send sensitive documents via unsecured channels:

Privacy contact: [email protected] — please use the subject line "Privacy Policy Enquiry" or "Data Rights Request" so your message is routed to the correct team.