sh999 Privacy Policy

Introduction

sh999 is an online casino and sports betting platform operated for players in Bangladesh. We are committed to protecting the privacy and security of the personal information of every player who registers on or visits sh999. This Privacy Policy is provided to give you a clear and transparent account of how we handle your personal data — from the moment you first visit sh999.onl through to the closure of your account.

This Privacy Policy sets out the categories of personal data we collect, the purposes for which we use that data, the legal bases on which we rely, how we share data with third parties, how long we retain data, the security measures we apply, and the rights you hold as a data subject. It should be read alongside the sh999 Terms and Conditions, which are available at sh999.onl/terms-conditions.

The terms "sh999", "we", "our", and "us" in this Privacy Policy refer to the sh999 platform and its operator. The terms "you", "your", and "player" refer to any individual who accesses sh999, whether as a registered account holder or as a visitor. Where you use sh999 on behalf of a business or another person, you confirm that you have the authority to provide that person's data to sh999 under this Privacy Policy.

Personal Data We Collect

sh999 collects personal data from you in three ways: data you provide to us directly, data generated by your use of the platform, and data we receive from third parties who help us operate the platform. The following describes each category in detail.

Data You Provide Directly:

• Registration data: your mobile phone number, chosen username, date of birth, and any other information required to create an account on sh999. This information is mandatory — you cannot register without providing it.
• KYC verification documents: government-issued identification (such as a National Identity Card, passport, or driving licence), proof of address documents, and proof of ownership of the payment method you use on sh999 (for example, a screenshot or statement confirming ownership of your bKash or Nagad account).
• Communications data: the content of any message, complaint, or enquiry you submit to sh999 customer support via email, chat, or any other communication channel. If you contact sh999 for support, we retain records of that interaction.
• Responsible gaming data: if you set deposit limits, session time reminders, request a time-out, or submit a self-exclusion request, sh999 records this information to enforce your chosen restrictions and to prevent re-registration after self-exclusion.

Data Generated by Your Use of the Platform:

• Transaction data: records of all deposits, withdrawals, bonuses claimed, and their amounts, timestamps, and the payment method used for each transaction. This data is retained for financial record-keeping and fraud prevention purposes.
• Gaming activity data: records of each game session, including game title, stake placed, outcome, and session duration. This data is used to detect fraud, resolve disputes, and deliver personalised experiences where relevant.
• Device and technical data: IP address, device type, operating system version, browser type and version, screen resolution, and session timestamps. This technical data helps us deliver a consistent experience across devices and identify potential security risks.

Data We Receive from Third Parties:

• Payment confirmation data from bKash, Nagad, Rocket, and Upay: when you make a deposit or receive a withdrawal, the payment provider sends sh999 a confirmation that includes the transaction reference and the amount processed. sh999 does not receive or store your full mobile banking credentials.
• Identity verification data from KYC service providers: where sh999 uses a third-party identity verification service to assist with document review, that provider may return a verification result (pass or fail) along with basic extracted data points from the submitted document.
• Fraud and risk screening data: sh999 may receive risk signals from fraud prevention services that help us identify potentially fraudulent accounts or suspicious transaction patterns. These signals do not themselves constitute personal data but may be associated with your account record.
• Publicly available data: in limited circumstances, sh999 may verify information you have provided against publicly available records. sh999 does not routinely scrape public data sources about players.

How We Use Your Personal Data

sh999 uses your personal data only for the purposes set out below. We do not use personal data for purposes that are incompatible with the original purpose for which it was collected without first obtaining your consent or establishing a new legal basis for the processing.

• Account management: to create and manage your sh999 account, authenticate your identity when you log in, process password resets, and communicate important account notices to you.
• Payment processing: to process deposits and withdrawals through your chosen payment method (bKash, Nagad, Rocket, Upay, or other approved methods), verify that transactions originate from payment accounts in your name, and maintain accurate financial records.
• Identity and age verification: to verify that you are who you say you are and that you meet the 21+ age eligibility requirement. KYC verification is a mandatory part of the sh999 platform's player protection framework.
• Fraud prevention and platform security: to detect and prevent fraudulent activity, money laundering, bonus abuse, multi-accounting, and other prohibited conduct as defined in the sh999 Terms and Conditions. Your technical data (IP address, device fingerprint) is actively used in this process.
• Responsible gaming: to enforce deposit limits, time-out periods, and self-exclusion restrictions you have set, and to monitor gaming patterns that may indicate problem gambling behaviour so that sh999 can intervene appropriately.
• Customer support: to respond to your enquiries, complaints, and requests, and to maintain a record of our communications with you for quality assurance and dispute resolution purposes.
• Marketing communications: to send you promotional offers, bonus notifications, and platform updates where you have consented to receive marketing communications. You may withdraw your consent at any time by contacting sh999 support or adjusting your account notification settings.

sh999 does not use your personal data to build profiles for sale to advertisers, does not engage in targeted third-party advertising using your gaming data, and does not share your data with any organisation for their own marketing purposes.

Legal Basis for Processing

Every time sh999 processes your personal data, we do so on one of the following legal bases. Understanding the legal basis for each type of processing helps you understand your rights in relation to that processing activity.

• Contractual necessity: the majority of sh999's data processing is necessary to perform the contract between sh999 and you — specifically, to operate your account, process payments, and deliver gaming services. Without this processing, sh999 cannot provide its services to you.
• Legal obligation: certain processing activities — particularly KYC verification, transaction record-keeping, and fraud reporting — are required of sh999 as a matter of applicable law and regulatory compliance. sh999 cannot waive these obligations on a player's request.
• Legitimate interests: sh999 processes certain technical and behavioural data on the basis of its legitimate interest in maintaining the security, integrity, and fair operation of the platform, and in detecting and preventing fraud and abuse. Where sh999 relies on legitimate interests, we have assessed that our interests do not override your fundamental privacy rights.
• Consent: where sh999 sends you marketing communications or uses non-essential cookies, we do so only on the basis of your prior consent. You can withdraw consent for marketing communications at any time without affecting the lawfulness of any processing that took place before withdrawal.

Sharing Your Personal Data

sh999 does not sell your personal data to any third party. sh999 shares personal data only in the limited circumstances described in this section, and only to the extent necessary for the stated purpose. All third parties with whom sh999 shares personal data are required to handle that data in a manner consistent with this Privacy Policy and applicable data protection law.

Categories of Third Parties We Share Data With:

• Payment service providers (bKash, Nagad, Rocket, Upay): sh999 shares the minimum transaction data necessary with your chosen payment provider to process deposits and withdrawals. The payment provider's own privacy policy governs their handling of your data.
• Identity verification service providers: where sh999 uses a third-party KYC service provider to assist with document review and identity checks, sh999 shares the relevant identification documents and personal data points required for that verification. These providers act as data processors on sh999's instructions and are contractually prohibited from using your data for their own purposes.
• Game and platform technology providers: sh999's casino games and sportsbook are powered by third-party providers (such as Pragmatic Play, Evolution Gaming, Spribe, and others). These providers may receive game session data including your player ID, stake amounts, and game outcomes for the purpose of game delivery, dispute resolution, and RNG certification. They do not receive your full personal profile.
• Law enforcement and regulatory authorities: sh999 may be required by law to disclose personal data to governmental authorities, law enforcement agencies, or regulators in response to a valid legal request, court order, or regulatory investigation. sh999 will disclose only the data specifically required by the legal request and will, where permitted by law, notify you of such a request.

Payment Data and Financial Information

sh999 takes the security of financial data with the utmost seriousness. When you make a deposit using bKash, Nagad, Rocket, or Upay, the actual payment transaction takes place on the payment provider's own platform — sh999 does not intercept, store, or have access to your mobile banking PIN, OTP, or account password. The only financial data sh999 receives is the payment confirmation: the transaction reference number, the amount, and the timestamp, which sh999 uses to credit your account and maintain transaction records.

Transaction records are retained by sh999 for as long as required by applicable financial record-keeping obligations and sh999's own internal audit requirements. These records include the transaction reference, amount, payment method used, and the associated account holder — they do not include full payment credentials. In the event of a disputed transaction, sh999 will use these records to investigate and resolve the dispute in cooperation with the payment provider where necessary.

Cookies and Tracking Technologies

sh999 uses cookies and similar tracking technologies to operate the platform, maintain your session, and improve your experience. A cookie is a small text file that is stored on your device when you visit a website. Cookies do not give sh999 access to your device beyond the information stored in the cookie itself.

Types of Cookies We Use:

• Strictly necessary cookies: these cookies are essential to the operation of the sh999 platform. They enable functions such as login session management, security token validation, and navigation between pages. You cannot opt out of strictly necessary cookies as the platform cannot function without them.
• Functional cookies: these cookies remember your preferences such as language settings and display options so that sh999 can deliver a personalised experience each time you visit. You may disable functional cookies through your browser settings, but doing so may affect the functionality of certain platform features.
• Analytics cookies: sh999 uses analytics tools to understand aggregate platform usage — for example, which pages are most visited, how long sessions last, and at what point users exit the platform. Analytics data is aggregated and does not identify individual players. sh999 uses this data to improve the platform experience.
• Session security cookies: sh999 uses short-lived session cookies to protect your account from cross-site request forgery and session hijacking. These cookies expire when you close your browser or log out of your sh999 account.

You can control cookies through your browser's settings. Most modern browsers allow you to block or delete cookies, or to be notified when a cookie is set. Please note that blocking all cookies will prevent you from logging in to sh999 and will significantly affect your use of the platform. sh999 does not use third-party advertising cookies or tracking pixels for cross-site behavioural profiling.

Data Security Measures

sh999 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include: SSL/TLS encryption for all data transmitted between your device and the sh999 platform; password hashing using industry-standard cryptographic algorithms so that sh999 never stores your password in plain text; access controls that restrict internal access to personal data on a need-to-know basis; regular security assessments and vulnerability testing; and a defined incident response procedure to handle suspected data breaches promptly.

Despite these measures, no internet-based platform can guarantee absolute security against all possible threats. If sh999 becomes aware of a security incident that is reasonably likely to result in a risk to your personal data, sh999 will take prompt steps to contain the incident, assess its scope, and notify affected players in accordance with applicable legal obligations. If you believe your sh999 account has been compromised, contact sh999 support immediately at [email protected] so that we can secure your account without delay.

Data Retention

sh999 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide: account data (registration details, KYC documents) is retained for the duration of your account and for a period after account closure as required by applicable financial and anti-money-laundering regulations; transaction records are retained for the period required by applicable financial record-keeping law; marketing consent records are retained until you withdraw consent plus a short additional period to demonstrate compliance; and support communications are retained for the period reasonably necessary to resolve disputes and demonstrate compliance with consumer protection obligations.

When personal data is no longer required for any legitimate purpose or legal obligation, sh999 will securely delete or anonymise that data. Anonymised data (data from which all identifying information has been removed such that re-identification is not reasonably possible) may be retained indefinitely for statistical and platform improvement purposes. If you close your sh999 account, sh999 will retain the minimum data required by law and will delete all non-mandatory data within a reasonable timeframe.

Your Data Rights

As a player on sh999, you hold the following rights in relation to your personal data. To exercise any of these rights, contact sh999 support at [email protected] with a clear description of your request. sh999 will respond within a reasonable timeframe and will not charge a fee for handling data rights requests except in cases of manifestly unfounded or excessive requests.

• 👁️
  Right to AccessYou have the right to request a copy of the personal data sh999 holds about you, together with information about how it is used and with whom it is shared.
• ✏️
  Right to RectificationIf any personal data sh999 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
• 🗑️
  Right to ErasureYou have the right to request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been unlawfully processed. This right is subject to sh999's legal obligations to retain certain data.
• ⛔
  Right to Restrict ProcessingIn certain circumstances — for example, where you contest the accuracy of data or where you have objected to processing — you have the right to request that sh999 restrict further processing of your data while the matter is being resolved.
• 📦
  Right to Data PortabilityWhere sh999 processes your data on the basis of your consent or contractual necessity, and the processing is carried out by automated means, you have the right to receive a copy of your data in a structured, commonly used, machine-readable format.
• ↩️
  Right to Withdraw ConsentWhere sh999 processes your data on the basis of your consent (such as for marketing communications), you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.

sh999 will respond to all valid data rights requests within a reasonable timeframe. In some cases — particularly for complex requests, requests that require verification of identity, or requests that involve large volumes of data — sh999 may require additional time. sh999 will notify you promptly if additional time is needed and will explain the reason for the delay.

Children and Minors

sh999 is strictly for adults aged 21 and above. sh999 does not knowingly collect personal data from individuals under the age of 21. If sh999 discovers or is informed that personal data has been collected from a person under 21 — whether through a misrepresentation during registration or any other means — sh999 will immediately close the relevant account, delete all associated personal data, and return any deposited funds (less any applicable bonuses) to the originating payment account. If you are a parent or guardian and believe that a minor has registered on sh999 using false information, please contact sh999 support immediately at [email protected] so that the account can be closed promptly.

Marketing Communications

sh999 may send you promotional emails, SMS messages, or in-platform notifications about bonuses, new games, seasonal promotions, and platform updates — but only where you have given your prior consent to receive such communications during registration or in your account settings. sh999 does not send unsolicited marketing communications. Every marketing communication from sh999 includes a clear and functional unsubscribe option. If you opt out of marketing communications, you will continue to receive essential account communications (such as transaction confirmations, KYC requests, and security alerts) which are necessary for the operation of your account.

If you wish to withdraw your consent to marketing communications at any time, you may do so by: contacting sh999 customer support at [email protected] and requesting removal from marketing lists; or adjusting your notification preferences directly within your sh999 account settings. sh999 will process your opt-out request within a reasonable timeframe. Please note that due to the nature of messaging systems, you may receive one or two further marketing communications after submitting your opt-out request while your preference is being updated across all channels.

Changes to This Privacy Policy

sh999 may update this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable law, or improvements to the platform. When we make material changes — changes that significantly affect how we collect or use your personal data — we will notify you by updating the "Last Updated" date at the top of this page and, where appropriate, by sending a notification to your registered contact details.

Your continued use of sh999 following the publication of an updated Privacy Policy constitutes your acceptance of the revised policy. If you do not agree with the revised Privacy Policy, you must stop using sh999 and may request account closure by contacting sh999 support. The most current version of this Privacy Policy is always available at sh999.onl/privacy-policy.

Contact Us About Privacy

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, want to make a complaint about how sh999 has handled your personal data, or need any other assistance relating to your privacy on the sh999 platform, please contact the sh999 support team. We are available 24 hours a day, 7 days a week and will handle all privacy-related enquiries with care and confidentiality.

Email (plain text — not a link): [email protected]