But 999 Privacy Policy

But 999 is an internationally licensed online betting platform committed to delivering the highest standard of privacy protection for Bangladeshi users. This Privacy Policy explains what data we collect, why we collect it, and how we use and safeguard that information.

This Privacy Policy applies to the following:

• But999.biz website and all its sub-domains
• But 999 Mobile Application (Android & iOS)
• All digital services associated with But 999
• Information provided through customer support channels

Our Privacy Policy is built in compliance with the GDPR (General Data Protection Regulation) and international data protection standards. Handling every user's data with the utmost respect and care is a core principle at But 999.

But 999 only collects information that is strictly necessary to provide our services. Collecting data beyond that goes against our principles.

Directly provided information

Automatically collected data

When you use the platform, our system automatically collects certain technical information:

• IP Address: For geo-location verification and security purposes
• Device Information: Operating system, browser type and version
• Session Data: Login activity, betting history & payment records
• Cookies & Tracking Data: To improve the user experience

But 999 uses your information only for specific, legitimate purposes. We never use your data in ways you haven't agreed to.

Primary use

• Account Management: Registration, login & profile updates
• Service Delivery: Betting, payment processing & bonus distribution
• Identity Verification: KYC process & age verification
• Customer Service: Troubleshooting & Support

Secondary use

• Fraud prevention: Detecting suspicious activity
• Service Improvement: Analyzing user experience
• Legal Compliance: Meeting regulatory requirements
• Personalised Offers: Sending promotions based on your preferences (with your consent)

But 999 never sells your personal data. However, limited information may be shared with trusted third parties where necessary to operate our services.

Data sharing scenarios

• Payment processors: Necessary information is shared with Mobile Pay, Nagad, and banks to process transactions.
• Identity verification provider: Licensed verification agencies for the KYC process
• Legal Authorities: By court order or legal obligation
• Anti-Fraud Services: Specialist providers for account security

We never do

• Selling data to third parties
• Sharing Personal Data with Advertising Companies
• Sharing data on social media without consent
• Granting access to unnecessary third parties

All information shared with third parties is governed by strict confidentiality agreements.

But 999 uses industry-leading technology to keep your data secure. Our security measures are continuously updated and regularly audited by independent third parties.

Technical Security

• 256-bit SSL/TLS encryption: All data transfers are encrypted
• Two-Factor Authentication (2FA): An added layer of protection for your account
• Firewall Protection: Advanced DDoS and cyberattack protection
• Regular security audits: Annual third-party audit
• Data Backup: Secure backup on encrypted servers

Payment Security

Payment details are never stored on But 999's servers. All financial transactions are processed through PCI-DSS certified gateways.

Data breach response

In the event of a data breach, But 999 will notify affected users within 72 hours and take immediate remedial action.

But 999 uses cookies to enhance your experience. Cookies are small text files stored on your device.

Cookie Types

• Essential Cookies: Login sessions and security tokens are essential for the site to function.
• Functional Cookies: To remember language preferences and user settings.
• Analytics Cookies: To understand which sections of the site are used most.
• Marketing cookies: To show you personalized offers (with your consent).

Cookie controls

You can disable cookies through your browser settings. Please note that turning off essential cookies may affect the functionality of certain features. You can also manage specific cookie preferences through our Cookie Settings panel.

But 999 believes every user should have full control over their own data. The following rights belong to you:

But 999 does not retain data beyond what is necessary. Information is deleted once the purpose for which it was collected has been fulfilled or the legal obligation has expired.

• Active Account Data: For the full duration your account remains active
• Transaction records: 5 years after the last transaction (as required by financial law)
• KYC Documents: 5 Years After Account Closure
• Customer support records: 2 years after last contact
• Cookies & session data: At end of session or after a maximum of 1 year

After account closure, certain data may be retained in a limited capacity to fulfil legal obligations.

But 999 strictly prohibits providing services to anyone under 18. Collecting personal information from minors is against our policy.

• Age verification is mandatory at the time of registration.
• Accounts suspected of belonging to minors are suspended immediately.
• Any minor's data collected inadvertently is deleted promptly.
• Parents can report any suspicious accounts to us.

For any privacy-related questions, requests, or complaints, please contact our Data Protection team.

• Email: support@but999.biz
• Live Chat: Available on the website 24/7
• Response Time: Typically within 24–48 hours

If you are not satisfied with the resolution we provide, you have the right to lodge a complaint with the data protection authority in your country.