Privacy Policy —
How 99xx0 Handles Your Data

When you interact with the 99xx0 platform — whether registering an account, making a deposit, placing a wager, or contacting support — we collect certain categories of personal information. The specific data collected depends on how you use the platform and is always limited to what is necessary for the purpose described.

Account Registration Data

• Full legal name, date of birth, and gender as provided during the registration process.
• Email address and mobile phone number used to create and verify your account.
• Username and encrypted password. Passwords are never stored in plain text.
• Residential address, including city (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi) and postal code, where required for verification purposes.

Identity Verification Data

• Copies of government-issued identity documents such as a national ID card, passport, or driver's licence, collected when verification is triggered under our Know Your Customer (KYC) obligations.
• Proof of address documents such as utility bills or bank statements.
• Confirmation of payment method ownership, such as a screenshot of a bKash or Nagad account screen showing the registered mobile number.

Financial Transaction Data

• Deposit and withdrawal history, including amounts (in BDT/৳), timestamps, payment method used, and transaction reference numbers.
• Partial payment account identifiers — for example, the last four digits of a card number or the registered mobile number associated with a bKash or Nagad account. Full payment credentials are never stored by 99xx0.
• Records of bonus credits, wagering activity, and balance adjustments associated with your account.

Gameplay and Behavioural Data

• Records of games played, wagers placed, results, and session durations. This data is used to settle bets, resolve disputes, and detect problem gambling patterns.
• Sports betting selections, odds accepted, and bet settlement outcomes.
• Responsible gaming tool settings, including any deposit limits, time-out periods, or self-exclusion requests you have activated on your account.

Technical and Device Data

• IP address and approximate geolocation derived from your IP at the time of login and gameplay.
• Device type, operating system, browser type and version, and screen resolution.
• Session identifiers, access timestamps, and platform navigation logs used to maintain security and diagnose technical issues.

Communications Data

• The content of any communications you send to 99xx0 via email ([email protected]) or the platform's live chat or support ticket system, including account queries, complaints, and dispute submissions.
• Records of promotional communications sent to you (where you have opted in) and your interaction with those communications.

Every piece of personal data collected by 99xx0 is used for a specific, defined purpose. We do not use your data for any purpose that is incompatible with the reason it was originally collected. The primary uses of your personal information are as follows:

Where we wish to use your data for a new purpose not listed above, we will notify you in advance and, where required by law, obtain your consent before doing so.

99xx0 processes personal data on the basis of one or more of the following legal grounds, depending on the nature of the processing activity:

• Contractual necessity: Processing that is required to fulfil our obligations under the player account agreement — including account creation, payment processing, bet settlement, and customer support.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, and record-keeping duties.
• Legitimate interests: Processing carried out in the legitimate interests of 99xx0 or third parties, provided those interests are not overridden by your rights. This includes fraud prevention, platform security, responsible gaming monitoring, and analytics used to improve the platform.
• Consent: Where we rely on your consent as the legal basis — for example, to send you promotional emails or personalised offers — you may withdraw that consent at any time by updating your communication preferences in your account settings or by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Like most online platforms, 99xx0 uses cookies and similar tracking technologies — including local storage objects and session tokens — to operate the platform, remember your preferences, and analyse usage patterns. Cookies are small text files stored on your device when you visit the 99xx0 website.

Types of Cookies We Use

• Essential cookies: These are required for the platform to function. They maintain your login session, remember your account preferences, and support security features like fraud detection. These cookies cannot be disabled without impacting core platform functionality.
• Analytical cookies: These help us understand how players navigate the 99xx0 platform — which pages are visited most, where players encounter errors, and how long sessions last. This data is used in aggregate form to improve the platform experience. No individually identifiable data is shared with third-party analytics providers.
• Functional cookies: These remember your preferences such as language settings, notification preferences, and responsible gaming tool configurations, so you do not need to re-enter them on each visit.
• Security cookies: These are used to detect and prevent fraudulent login attempts, account takeovers, and automated bot activity. They may record device fingerprint data in conjunction with your IP address.

Managing Cookies

You can control cookie behaviour through your browser settings. Most modern browsers allow you to block, delete, or receive notifications about cookies. Please note that disabling essential cookies may prevent you from logging in or using key features of the 99xx0 platform. For detailed guidance on managing cookies in your specific browser, refer to your browser's help documentation.

99xx0 does not sell or rent your personal data to any third party. We share personal information only in the limited circumstances described below, and only to the extent necessary for each specific purpose:

• Payment processors: To complete deposits and withdrawals, we share the minimum necessary transaction data with our payment partners — including bKash, Nagad, Rocket, Upay, Visa, and Mastercard. These partners are bound by their own privacy and data security obligations.
• Identity verification providers: Where a third-party KYC service is used to verify identity documents, relevant personal data is shared with that provider under a strict data processing agreement that prohibits secondary use.
• Fraud prevention and security services: We may share device fingerprint data, IP address information, and transaction patterns with fraud detection partners to protect the platform and its players from criminal activity.
• Game content providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session data necessary to deliver their game content via the 99xx0 platform. These providers do not receive your name, contact details, or financial information.
• Legal and regulatory authorities: We will disclose personal data to law enforcement agencies, financial intelligence units, or regulatory bodies where required by law, court order, or binding regulatory direction — and only to the extent mandated by that legal obligation.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of the 99xx0 business, your personal data may be transferred to the successor entity. You will be notified of any such transfer and of any material change to how your data is processed as a result.

All third parties with whom 99xx0 shares personal data are required to implement appropriate technical and organisational measures to protect that data and are prohibited from using it for any purpose other than the one for which it was shared.

99xx0 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

When the applicable retention period expires and there is no overriding legal reason to retain data further, 99xx0 will securely delete or anonymise the relevant personal information so that it can no longer be attributed to an identified individual.

99xx0 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Key measures include:

• SSL/TLS encryption: All data in transit between your device and 99xx0 servers is encrypted using current SSL/TLS standards. This applies to login sessions, account management actions, and payment flows.
• Encrypted storage: Sensitive data at rest — including identity documents and payment identifiers — is stored in encrypted form. Database access is restricted to authorised personnel only, with role-based access controls in place.
• Password hashing: Account passwords are hashed using a strong, salted algorithm before storage. The original password is never retained in a recoverable form.
• Two-factor authentication (2FA): 99xx0 offers 2FA for all registered accounts. Players are strongly encouraged to enable this feature, which adds a second verification step to the login process and significantly reduces the risk of unauthorised access.
• Intrusion detection: The platform employs automated systems to monitor for suspicious login patterns, unusual transaction activity, and signs of account takeover attempts, triggering alerts and temporary access locks where anomalies are detected.
• Internal access controls: Access to player personal data by 99xx0 staff is strictly limited to those roles where it is necessary to fulfil job responsibilities — for example, the support team and compliance team. All staff with data access receive regular data protection training.
• Security audits: 99xx0 conducts periodic internal reviews of its data handling practices and security infrastructure to identify and address vulnerabilities before they can be exploited.

As a 99xx0 player, you hold the following rights in relation to the personal data we hold about you. To exercise any of these rights, submit a written request to [email protected] with sufficient detail to identify your account. We will respond within 30 calendar days of receipt of a verified request.

• Right of access: You may request a copy of all personal data we hold about you, along with information about how it is processed, who it is shared with, and how long it is retained.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where you object to processing based on legitimate interests. Note that this right is subject to overriding legal retention obligations — for example, we cannot erase KYC records that we are legally required to retain for five years.
• Right to restriction of processing: You may request that we restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified, or where you have objected to processing based on legitimate interests and the outcome of that objection is pending.
• Right to data portability: Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you may request that we provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
• Right to object: You have the right to object at any time to processing of your personal data carried out on the basis of legitimate interests, including profiling. You also have the absolute right to object to processing of your data for direct marketing purposes, and we will cease such processing immediately upon receipt of a valid objection.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time by updating your account settings or contacting [email protected]. Withdrawal does not affect the lawfulness of any processing carried out prior to withdrawal.
• Rights related to automated decision-making: Where 99xx0 uses automated systems to make decisions that have a significant effect on you — such as account suspension triggered by fraud detection algorithms — you have the right to request human review of that decision and to challenge the outcome.

We will not charge a fee for processing your rights request unless the request is manifestly unfounded or excessive, in which case we may charge a reasonable administrative fee or decline to act. We will always explain our reasoning if we are unable to fulfil a request in whole or in part.

Changes to This Privacy Policy

99xx0 reserves the right to update or revise this Privacy Policy at any time. When material changes are made — for example, a new category of data being collected, a new sharing arrangement with a third party, or a change in the legal basis for processing — we will publish a clear notice on the platform and, where practical, notify registered players via their registered email address at least seven days before the change takes effect.

The "Effective" date at the top of this policy will be updated whenever the document is revised. We encourage you to review this page periodically so that you remain informed about how 99xx0 handles your personal information. Continued use of the platform after the effective date of an update constitutes acceptance of the revised policy.

Previous versions of this Privacy Policy are available on request by contacting [email protected].

How to Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or have a concern about the way your personal data has been handled, please reach out to us using the contact details below. All privacy-related communications are handled by our dedicated data protection team, who aim to respond within two business days for general enquiries and within 30 calendar days for formal data rights requests.

This Privacy Policy was last reviewed and updated in January 2026. It applies to all personal data collected by 99xx0 in connection with the provision of online casino gaming, sports betting, and related services to players based in Bangladesh and other jurisdictions where the platform operates.