Cy999 Privacy Policy

Cy999 is a licensed online gaming platform operating under the domain https://cy999.onl. We believe protecting your privacy is one of our core responsibilities. This Privacy Policy ("Policy") explains how cy999 collects your personal information, the purposes for which it is used, and the measures taken to keep it safe.

By using cy999's website, app, or any of our services, you are deemed to have agreed to this Privacy Policy. If you disagree with any part of this Policy, we recommend that you discontinue use of our services.

We process data in accordance with Bangladesh and international data protection regulations. cy999 will never sell your information to third parties without your consent.

Cy999 collects certain information to improve your experience and meet legal obligations. This data falls into two categories: information you provide directly, and information collected automatically.

Cy999 uses your information only for specific, legitimate, and transparent purposes. We do not use your data for anything beyond what is described below.

• Account Management: To secure registration, login, password recovery, and overall account safety.
• KYC & Identity Verification: To prevent fraud, verify age, and fulfill legal obligations.
• Payment Processing: To accurately process deposits, withdrawals, and refunds.
• Customer Support: To address your complaints, questions, and issues.
• Promotional Communications: To inform you about bonuses, offers, and updates — with your consent.
• Responsible Gaming: To identify unusual gaming behavior and provide support to members.
• Platform Development: To analyze user experience and improve our service quality.
• Legal Compliance: To comply with Anti-Money Laundering (AML) regulations and regulatory guidelines.

Cy999 treats your privacy with the utmost respect. We believe your information should only be shared when absolutely necessary. Data sharing is limited strictly to the circumstances outlined below.

• Payment Processors: Minimum information required to process transactions with payment partners like bKash, Nagad, and Rocket.
• KYC Provider: With trusted third-party verification services for identity authentication.
• Legal Authorities: As required by regulatory authorities under Bangladesh law or international mandates.
• Technology Partners: Hosting, analytics, and cybersecurity providers — only the data necessary for their work.
• Audit & Compliance: For routine audits conducted by the licensing authority.

Cy999 uses cookies and similar tracking technologies on its website. Cookies are small data files stored in your browser that help improve the user experience.

• Essential Cookies: For login sessions, security tokens, and core platform functionality. These cannot be disabled.
• Functionality Cookies: To remember your language preferences and display settings.
• Analytics Cookies: To analyze page views, session duration, and usage patterns.
• Performance Cookies: To identify site speed issues and technical problems.

You can disable analytics and performance cookies through your browser settings. Please note that disabling essential cookies may affect the availability of certain platform features.

Cy999 protects your data using industry-standard security technology. Our servers are hosted in secure data centers and undergo regular security audits.

• SSL/TLS Encryption: All data transfers are encrypted with 256-bit SSL.
• Database Encryption: Stored sensitive data is kept in encrypted format.
• Access Controls: Staff are granted access only to the information required for their specific role.
• Regular Audits: Regular penetration testing conducted by third-party cybersecurity specialists.
• Data Backup: Encrypted backups are maintained regularly to prevent data loss.
• Breach Notification: In the event of a data breach, affected members will be notified within 72 hours.

Retention periods vary depending on the type of data. Even after account closure, certain data may be retained for up to 5 years to meet legal obligations.

As a cy999 member, you have important rights regarding your personal information. We respect these rights and are here to help you exercise them.

• Right to Access Your Data: You may request to know what information we hold about you.
• Right to Rectification: You may request that any incorrect or outdated information be corrected.
• Right to Erasure: You may request the deletion of your data under certain circumstances.
• Right to Restrict Processing: Request to temporarily pause the processing of your data in certain circumstances.
• Right to Data Portability: You may request a copy of your data in a standard format.
• Right to Object: You may object to the use of your data for specific purposes.
• Right to Withdraw Consent: You may withdraw your consent to marketing communications at any time.

Please note that certain data may not be erasable due to legal obligations, fraud prevention requirements, or contractual necessity.

All cy999 services are strictly for individuals aged 18 and above. We do not knowingly collect data from minors. Age is verified at registration, and proof of age is required as part of the KYC process.

If a parent or guardian believes their child has registered on cy999, please contact us immediately at [email protected]. We will resolve the matter promptly.

Cy999 may update this Privacy Policy from time to time. Changes may be driven by new services, updates to applicable law, or security improvements.

• Major Changes: For major changes, advance notice will be sent to your registered email address.
• Minor Changes: Only this page will be updated for linguistic or technical corrections.
• Effective Date: Each change will include the date it takes effect.
• Continued Use: Continued use of the platform after any changes takes effect will be considered acceptance of the updated policy.

If you have any questions, concerns, or objections regarding this Privacy Policy, please contact cy999's data protection team. We take all requests seriously.

If you believe your rights have been violated and we have been unable to resolve the matter, you may file a complaint with the relevant data protection authority.