Reference

How ay999 Handles Your Personal Information

When you open an account with us, we collect only what we need to run it — your contact details, payment method records (including bKash, Nagad and Rocket transactions), and session activity.

Data collected only as neededbKash, Nagad, Rocket payment records protectedYour right to access or delete your dataNo data sold to third partiesContact us to request changes
ay999 How ay999 Handles Your Personal Information
PRIVACY CONTACT PATHS

Reach Us About Your Privacy Rights

If you want to know what data we hold, request a correction, or ask us to delete your account information, our support team handles these requests directly. You can reach us through live chat on the site, by email, or through the in-account help section. We aim to respond to all data-related requests within a reasonable time, and we will confirm receipt as soon as your message comes through.

Live Chat Start a chat from inside your account dashboard. Identify yourself and state your data request clearly — our team will pick it up and respond directly.
Email Support Send your data access or deletion request by email. Include the phone number linked to your bKash, Nagad or Rocket wallet so we can locate your account.
In-Account Help The help section inside your account lets you raise a privacy ticket without leaving the platform. Responses appear in your notification tray.
DATA HANDLING PRACTICES

How We Protect and Manage Your Account Data

We use SSL encryption across every page of the site, including the deposit and withdrawal screens where your bKash, Nagad or Rocket details appear. Account passwords are stored as hashed values — we cannot read them, and neither can support staff. Session tokens expire automatically when you close the app or browser, which limits exposure on shared devices. We review our data retention schedules periodically to remove records we no longer need.

SSL Encryption Every connection to ay999 — including your payment screen and account settings — runs over SSL. Your bKash and Nagad details are never sent in plain text.
Password Security Passwords are hashed before storage. No member of our team can read your password, and we will never ask for it through chat or email.
Cookie Use We use session cookies to keep you logged in and functional cookies to remember your lobby state. We do not use cookies to track you across other websites.
Retention and Deletion Data tied to your account is kept for as long as your account is active or as local law requires. Once you request deletion and we verify your identity, we remove your records.

Common Questions About Your Data on ay999

These are the questions we hear most often about how we collect, store and share your information. If your question is not here, reach us through live chat or the in-account help section.

We collect your name, phone number, email address and the wallet reference tied to your bKash, Nagad or Rocket account. We also log your device type and session activity to keep the account secure.

We share wallet data only with the payment processor needed to complete your transaction. We do not sell, rent or share your financial details with advertisers or unrelated third parties.

Send a data access request through live chat or email. Include the phone number linked to your account wallet. We will compile your data record and send it to you directly.

Yes. Submit a deletion request through our support channel. After we verify your identity, we remove your personal records. Note that some transaction logs may be kept where local law in Bangladesh requires it.

We keep your data for as long as your account is active. After closure, retention periods follow applicable rules for your eligible region. Data no longer required under those rules is deleted on schedule.

We use session and functional cookies to keep the lobby working properly. You can adjust cookie settings in your browser at any time, though disabling session cookies may affect how your account loads.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.