Awareness of personal data misuse on online platforms is growing steadily in Bangladesh. Many people rightly ask — why should I give a gaming site my phone number or date of birth? It's a fair question, and to999 respects it.
Every piece of information requested at to999 has a specific reason behind it. Your mobile number is needed because payments via bKash or Nagad require one. Your date of birth is required because allowing users under 18 onto the platform is both illegal and unethical. National ID details are only requested for large withdrawals due to legal anti-money laundering requirements.
to999's technical measures for data protection
The to999 tech team has implemented several important security measures that are invisible to the average user but provide effective protection. Every password is hashed at login using the industry-standard bcrypt algorithm — meaning even to999's own servers cannot read your password in plain text. Payment data is stored on separate, isolated servers so that even if a security issue were to affect the main platform, payment data would remain secure.
The to999 security team reviews log files daily to detect unusual activity. If any suspicious login attempt is detected on your account, an alert is sent to your mobile immediately. This automated protection is active for all to999 members at no charge.
Where Your Data Is Stored
To999's servers are hosted in international data centers that comply with ISO 27001 security standards. These facilities include physical security (access restricted to authorized personnel only), power backup, fire suppression systems, and round-the-clock monitoring. Even if your data is stored outside Bangladesh, all terms of this Privacy Policy apply to it equally.
Data access is restricted even within the company. Each to999 employee can only view the information necessary for their specific role — not all staff have access to all data. This "minimum access" principle prevents misuse of information.
What Happens When the Policy Changes
The Privacy Policy may be updated due to changes in our business, new technologies, or legal requirements. to999 commits to notifying all members at least 14 days before any significant change takes effect. Minor or technical updates will be communicated 7 days in advance. Previous versions of the policy will also be archived on this page for reference.