99xx Privacy Policy

1. Introduction

99xx ("we", "us", "our") operates the online casino and sports betting platform accessible at 99xx.bid (the "Platform"). We are committed to protecting the privacy and personal data of all individuals who interact with our Platform, including registered account holders, prospective players, and visitors who browse the site without registering.

This Privacy Policy sets out in clear and straightforward terms what personal data we collect about you, why we collect it, how it is used and stored, with whom it may be shared, and what rights you have in relation to your own data. We encourage you to read this policy carefully and to contact us if anything is unclear.

This policy should be read alongside our Terms & Conditions, which govern the overall relationship between you and 99xx. By registering an account or using any feature of the Platform, you confirm your acceptance of this Privacy Policy.

2. Data Controller

For the purposes of this Privacy Policy, 99xx is the data controller responsible for your personal data collected through the Platform. The data controller determines the purposes and means by which personal data is processed. All data subject requests, privacy enquiries, and complaints should be directed to our support team at [email protected].

3. Personal Data We Collect

The following table summarises the categories of personal data that 99xx may collect from or about you:

Category	Examples	When Collected
Identity Data	Full name, date of birth, nationality, NID / passport number	Registration, KYC verification
Contact Data	Email address, Bangladesh mobile number, residential address	Registration, account updates
Financial Data	bKash / Nagad / Rocket wallet numbers, Visa / Mastercard last four digits, transaction amounts in BDT	Deposit and withdrawal processing
Technical Data	IP address, browser type, device type, operating system, session timestamps	Automatically on every visit
Usage Data	Pages visited, games played, bets placed, session duration, click paths	Automatically during platform use
Communications Data	Support ticket content, live chat transcripts, email correspondence	When you contact support
Verification Documents	Scanned copies of NID, passport, utility bills, selfies for liveness checks	KYC and withdrawal verification

We do not knowingly collect special categories of sensitive personal data (such as biometric data used for identification purposes, health data, or data about religious beliefs) unless such data is incidentally contained within a document you submit for identity verification, in which case it is used solely for that verification purpose and not processed further.

4. How We Collect Your Data

4.1 Data You Provide Directly

The majority of personal data we hold about you is information that you provide directly when you register an account, complete identity verification, make a deposit or withdrawal, contact our support team, or respond to a survey or promotion. You are always in control of what information you choose to provide, though certain data is required to access specific features of the Platform.

4.2 Data Collected Automatically

When you visit or use the 99xx platform, certain technical and usage data is collected automatically through cookies, server logs, and similar technologies. This data includes your IP address, the type and version of the browser or application you are using, the pages you visit, the duration of your session, and the links you click. This data is collected in aggregate and is used primarily to maintain platform security and improve user experience.

4.3 Data from Third Parties

In limited circumstances, 99xx may receive data about you from third parties. This includes identity verification data returned by our Know Your Customer (KYC) service providers when you submit verification documents, and fraud prevention signals returned by payment processors such as bKash, Nagad, and Rocket when you initiate a transaction. We use this third-party data solely for the purposes described in this policy and do not combine it with marketing profiles.

5. How We Use Your Personal Data

99xx uses the personal data it collects for the following purposes:

• Account management: To create, maintain, and operate your 99xx account, including processing your registration, verifying your identity, and communicating important account-related notices.
• Transaction processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to maintain accurate transaction records in BDT.
• Platform security: To detect, investigate, and prevent fraudulent activity, account misuse, money laundering, and other prohibited conduct on the Platform.
• Regulatory compliance: To meet our obligations under applicable anti-money laundering (AML), know-your-customer (KYC), and responsible gaming requirements, including age verification.
• Customer support: To respond to your enquiries, resolve disputes, process account closure or self-exclusion requests, and provide general assistance.
• Service improvement: To analyse aggregate usage patterns and improve the Platform's performance, game selection, and user interface based on how players interact with the site.
• Responsible gaming: To monitor account activity for signs of problem gambling and to apply deposit limits, timeouts, or self-exclusion measures where requested or where required for player protection.
• Communications: To send you transactional messages such as deposit confirmations, withdrawal notifications, and security alerts. Promotional communications are only sent where you have opted in and may be unsubscribed at any time.

99xx will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or unless required to do so by law.

6. Legal Basis for Processing

99xx processes your personal data on one or more of the following legal bases depending on the specific processing activity:

• Contractual necessity: Processing that is required to perform the contract between you and 99xx — for example, processing your registration data to create your account, or processing your payment data to execute a deposit.
• Legal obligation: Processing that 99xx is required to undertake in order to comply with applicable legal or regulatory requirements — for example, collecting and retaining identity documents under AML and KYC obligations.
• Legitimate interests: Processing that is necessary for 99xx's legitimate business interests, provided that those interests are not overridden by your rights and interests — for example, processing technical data to maintain platform security and prevent fraud.
• Consent: Processing that is undertaken only where you have given your explicit, informed, and freely given consent — for example, sending you marketing communications about promotions. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

7. Sharing Your Personal Data

7.1 Payment Processors

When you make a deposit or request a withdrawal, 99xx shares the minimum necessary financial and identity data with the relevant payment processor — bKash, Nagad, Rocket, Upay, Visa, or Mastercard — to execute that transaction. These processors are contractually bound to handle your data securely and to use it only for transaction processing.

7.2 Identity Verification Providers

To comply with KYC obligations, 99xx shares identity documents and related data with accredited verification service providers. These providers return a verification decision to 99xx and are not permitted to use your data for any other purpose.

7.3 Fraud Prevention and Security

99xx may share technical and account data with fraud prevention agencies and security service providers to protect the Platform and its users from fraudulent activity, unauthorised access, and abuse. Such sharing is strictly limited to the data necessary for the specific security function being performed.

7.4 Legal and Regulatory Disclosure

99xx may disclose your personal data to law enforcement agencies, regulatory authorities, or other competent bodies where required to do so by applicable law, court order, or regulatory direction. We will notify you of any such disclosure where we are legally permitted to do so.

7.5 Business Transfers

In the event that 99xx undergoes a merger, acquisition, restructuring, or sale of all or part of its assets, your personal data may be transferred to the relevant successor entity as part of that transaction. You will be notified of any such transfer and of any material changes to this Privacy Policy that result from it.

99xx does not sell, rent, or license your personal data to third-party advertisers, data brokers, or marketing companies under any circumstances.

8. International Data Transfers

The 99xx platform serves players primarily based in Bangladesh. Our core platform infrastructure is hosted on servers located within or near the Asia-Pacific region to minimise latency and comply with applicable data localisation considerations. However, some of our third-party service providers — including certain KYC verification and fraud prevention providers — may process data in other jurisdictions.

Where personal data is transferred outside Bangladesh to a jurisdiction that may not provide an equivalent level of data protection, 99xx takes appropriate safeguards to ensure that your data remains protected. These safeguards include contractual data processing agreements that require recipients to process your data in accordance with the same standards applied within Bangladesh. If you would like more information about the specific safeguards applied to international transfers, please contact us at [email protected].

9. Data Retention

99xx retains personal data only for as long as is necessary for the purposes for which it was collected, or for as long as we are required to retain it by applicable legal or regulatory obligations. The following general retention periods apply:

• Active account data: Retained for the duration of your account's active status plus a post-closure period required for legal compliance.
• Transaction records: Financial transaction records, including deposits and withdrawals in BDT, are retained for a minimum of five years from the date of the transaction to satisfy AML and accounting obligations.
• Identity verification documents: Retained for a minimum of five years from the date of submission, or longer if required by applicable regulation.
• Support communications: Retained for a period of three years from the date of the last communication in a support thread, unless the subject matter requires longer retention.
• Technical and usage data: Aggregated and anonymised data may be retained indefinitely for platform analytics; data that can be linked to an individual is deleted or anonymised within twelve months of collection.

Upon the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual.

10. Security Measures

99xx employs a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the 99xx platform.
• Encrypted storage for sensitive data at rest, including identity documents and financial credentials.
• Access controls that restrict access to personal data to only those members of the 99xx team who require it to perform their specific job functions.
• Regular security audits and penetration testing of the platform's infrastructure and application layer.
• Intrusion detection systems that monitor for unusual access patterns and alert our security team in real time.
• Two-factor authentication options available to players to further secure their accounts.

While 99xx takes all reasonable steps to protect your personal data, no internet transmission or electronic storage system is entirely immune to risk. You play an important role in keeping your account secure by maintaining a strong, unique password, not sharing your credentials, and notifying us immediately if you suspect any unauthorised access to your account.

11. Cookies and Tracking Technologies

11.1 What Are Cookies?

Cookies are small text files that are placed on your device by a website when you visit it. They allow the website to remember your actions and preferences over time, and to distinguish your device from others visiting the same site. Cookies are widely used across the internet to make websites function properly and to provide reporting information to site operators.

11.2 Cookies Used by 99xx

99xx uses the following categories of cookies on the Platform:

• Essential cookies: These are strictly necessary for the Platform to function. They include session authentication cookies that keep you logged in during a visit and security cookies that protect against cross-site request forgery. These cookies cannot be disabled without impairing core platform functionality.
• Performance cookies: These cookies collect aggregated, anonymised data about how visitors use the Platform — for example, which pages are visited most frequently and whether users encounter error messages. This information helps us improve the Platform's performance and reliability. No personally identifiable information is collected by these cookies.
• Functional cookies: These cookies remember your preferences — such as your preferred language or display settings — so that you do not need to re-enter them each time you visit. They make your experience on the Platform more convenient and personalised.

99xx does not use third-party advertising cookies, social media tracking pixels, or cross-site behavioural profiling technologies on this Platform. Your browsing activity on 99xx is not shared with advertising networks.

11.3 Managing Cookies

Most web browsers allow you to control cookies through their settings. You can typically configure your browser to refuse all cookies, to accept only certain cookies, or to alert you whenever a cookie is placed. Please note that disabling essential cookies may prevent you from logging into your account or using certain features of the Platform. Instructions for managing cookies vary by browser; please refer to your browser's help documentation for guidance.

12. Your Data Subject Rights

As an individual whose personal data is processed by 99xx, you have the following rights in relation to that data. To exercise any of these rights, please contact us at [email protected] with your registered account username and a description of your request. We will respond within a reasonable timeframe, ordinarily within 30 days.

• Right of access: You have the right to request a copy of the personal data that 99xx holds about you, together with information about how it is processed.
• Right to rectification: You have the right to request the correction of inaccurate or incomplete personal data held about you. For account details, you can update many fields directly within your account settings.
• Right to erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis for processing applies. Note that certain data may be retained where required by legal or regulatory obligations.
• Right to restriction: You have the right to request that 99xx restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified.
• Right to data portability: Where processing is based on your consent or on a contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller.
• Right to object: You have the right to object to the processing of your personal data where that processing is based on our legitimate interests, including profiling for fraud prevention. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

13. Minors and Age Restriction

The 99xx platform is strictly intended for adults aged 18 years and above. We do not knowingly collect personal data from individuals under the age of 18. As part of our registration and verification processes, 99xx takes active steps to confirm the age of all users. If we become aware that a registered account belongs to a person under the age of 18, we will immediately suspend the account, void any associated balances, and delete the personal data of the minor in accordance with applicable data protection obligations.

If you are a parent or guardian and you believe that your child has provided personal data to 99xx without your knowledge, please contact us immediately at [email protected] so that we can investigate and take appropriate action. All such reports are treated as high priority and will be investigated and resolved within 48 hours of receipt.

14. Amendments to This Privacy Policy

99xx reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, the services we offer, applicable law, or regulatory guidance. The date of the most recent revision is shown at the top of this page. Where changes are material, we will provide reasonable advance notice to registered users via their registered email address or through an on-platform notification. Minor clarifications or corrections may be made without advance notice.

Your continued use of the 99xx platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the updated policy. If you do not agree to the revised policy, you should cease using the Platform and may request account closure in accordance with Section 12.1 of the Terms & Conditions.

15. Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy, about the personal data 99xx holds about you, or about our data processing practices in general, please contact our support team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Response time: We aim to respond to all privacy-related enquiries within 48 hours, Bangladesh Standard Time (UTC+6).
• Availability: Our support team is available 24 hours a day, 7 days a week.

When submitting a data subject rights request or a privacy complaint, please include your registered username and a clear description of your request or concern. This will allow us to locate your records and process your request as efficiently as possible. All privacy communications are handled by our dedicated support staff and treated with strict confidentiality.