99x99 Privacy Policy — How We Protect Your Data

1. Information We Collect

1.1 Registration Data

When you create a 99x99 account, we collect the personal details you provide during registration. This includes your full legal name, date of birth, email address, mobile phone number, and a username and password of your choice. This information is required to establish your identity, ensure you meet the 18+ age requirement, and communicate with you about your account.

1.2 Identity Verification (KYC) Data

To comply with our fraud prevention and responsible gaming obligations, we may request documentary evidence of your identity and address. This can include a government-issued photo ID (National Identity Card, passport, or driving licence), a utility bill or bank statement dated within three months, and proof of ownership of your payment method. KYC documents are processed securely and retained only for as long as required under applicable law.

1.3 Financial & Transaction Data

We collect records of every financial transaction conducted on the platform — including deposits, withdrawals, wagers, bonuses credited, and winnings paid. This includes the payment method used (e.g., bKash mobile number, Nagad account reference, Visa card last four digits), transaction amounts in BDT, and timestamps. Full card numbers and mobile banking PINs are never stored by 99x99; these are handled exclusively by the relevant payment service provider.

1.4 Usage & Behavioural Data

We automatically collect data about how you interact with the 99x99 platform. This includes pages visited, games played, bet amounts and outcomes, session duration, features accessed, and navigation paths. This data helps us personalise your experience, improve the platform, and identify potential responsible gaming concerns — for example, changes in playing patterns that may indicate problem gambling behaviour.

1.5 Technical Data

We collect standard technical data from your device and browser, including your IP address, device type and model, operating system, browser type and version, screen resolution, and time-zone setting. This data is used for security purposes (detecting unusual login locations), fraud prevention, and improving platform compatibility across devices commonly used in Bangladesh — including mid-range Android smartphones and entry-level tablet devices.

1.6 Communications Data

When you contact 99x99's support team via live chat, email, or any other channel, we retain a record of that correspondence. This includes the content of messages, timestamps, and the support agent's responses. Communications data is used to resolve disputes, improve service quality, and train support staff.

2. How We Use Your Data

99x99 uses the personal data we collect for a defined set of legitimate purposes. We do not use your data for any purpose incompatible with those stated at the time of collection. The table below sets out the primary purposes for which we process personal data, together with the legal basis for each.

2.1 Personalisation

Based on your playing history and preferences, 99x99 may personalise the content shown to you — including game recommendations, featured markets (such as upcoming BPL or IPL cricket matches), and promotional offers. Personalisation is conducted using aggregated and pseudonymised data where possible. You may opt out of personalised recommendations via your account settings at any time.

2.2 Promotional Communications

If you have opted in to receive marketing communications, 99x99 may contact you by email or SMS with information about bonuses, new games, seasonal promotions (such as Eid or Pohela Boishakh offers), and platform updates. You may withdraw your consent to receive marketing communications at any time by updating your notification preferences in your account settings, or by contacting support. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

3. Third-Party Sharing & Disclosure

3.1 Service Providers

99x99 shares limited personal data with carefully selected third-party service providers who perform functions essential to platform operation. These providers are contractually bound to process data only on our instructions and to maintain appropriate security standards. Categories of service provider include:

• Payment processors: bKash, Nagad, Rocket, Upay, and card networks (Visa, Mastercard) — for processing deposits and withdrawals.
• Game providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — who receive a pseudonymised player identifier necessary to deliver game services.
• Identity verification providers: Third-party KYC services used to verify identity documents and perform age checks.
• Analytics providers: Aggregated, anonymised usage data may be shared with analytics platforms to support platform improvement.
• Cloud infrastructure providers: Our platform infrastructure runs on secure, enterprise-grade cloud services with servers located in jurisdictions with adequate data protection standards.

3.2 Legal Disclosures

99x99 may disclose your personal data to law enforcement, regulatory bodies, or other authorities where we are required to do so by applicable law, court order, or where we have a good-faith belief that disclosure is necessary to prevent fraud, protect the safety of any person, or enforce our Terms & Conditions. We will notify you of any such disclosure where we are legally permitted to do so.

3.3 Business Transfers

In the event that 99x99 undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the relevant successor entity as part of that transaction. Where such a transfer would materially affect your rights under this Privacy Policy, we will provide advance notice and, where required by law, seek your consent.

4. Cookies & Tracking Technologies

4.1 What Are Cookies

Cookies are small text files placed on your device by a website when you visit it. 99x99 uses cookies and similar tracking technologies (such as local storage tokens and session identifiers) to enable core platform functionality, maintain your login session, remember your preferences, and gather anonymised analytics data about how the platform is used.

4.2 Categories of Cookies We Use

• Strictly necessary cookies: These are essential to the operation of the platform. They include session cookies that keep you logged in, security tokens that protect against cross-site request forgery (CSRF), and cookies that remember items in a bet slip. These cannot be disabled without breaking core platform functionality.
• Functional cookies: These remember your preferences — such as your chosen language (English), display settings, and notification preferences — so you do not need to reconfigure them on each visit.
• Analytics cookies: Anonymised cookies that help us understand how players navigate the platform — which pages are most visited, where users drop off, and how long sessions typically last. This data is aggregated and cannot be used to identify you personally.
• Responsible gaming cookies: Session data used to track playing time and spending patterns in real time, supporting responsible gaming monitoring and limit enforcement tools.

4.3 Managing Cookies

You may control cookie settings through your browser preferences. Most modern browsers allow you to block or delete cookies, though disabling strictly necessary cookies will prevent you from logging in to your 99x99 account. Instructions for managing cookies are available in your browser's help documentation. Please note that 99x99 does not currently respond to "Do Not Track" browser signals, as no universally accepted standard for these signals has been established.

5. Data Retention & Storage

99x99 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

Once the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be associated with you as an individual. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.

6. Security Measures

6.1 Technical Safeguards

99x99 implements a comprehensive set of technical security measures to protect your personal data from unauthorised access, disclosure, alteration, and destruction. These include 256-bit SSL/TLS encryption for all data in transit, AES-256 encryption for sensitive data at rest, multi-factor authentication options for player accounts, and regular penetration testing of platform infrastructure.

6.2 Organisational Safeguards

Access to personal data within 99x99 is restricted on a strict need-to-know basis. Support agents have access only to the account information necessary to resolve your query. Administrative access to back-end systems is protected by strong authentication controls and audit logging. All staff who handle personal data receive regular training on data protection obligations and security best practices.

6.3 Data Breach Response

In the event of a personal data breach that poses a risk to your rights and freedoms, 99x99 will notify affected players without undue delay, and in any case within 72 hours of becoming aware of the breach, where technically feasible. Notification will be sent to the email address registered on your account and will describe the nature of the breach, the data affected, the likely consequences, and the steps we have taken or propose to take to address it.

6.4 Your Responsibility

While 99x99 takes extensive measures to protect your data, the security of your account also depends on you. You must keep your login credentials confidential, use a strong and unique password, and notify 99x99 support immediately if you suspect unauthorised access to your account. 99x99 will never ask you to provide your password via live chat or email.

7. Your Rights & Choices

As a player on the 99x99 platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team via live chat. We will respond to all verified requests within 30 days. There is no charge for exercising these rights unless requests are manifestly unfounded or excessive.

7.1 Right of Access

You have the right to request a copy of the personal data that 99x99 holds about you. Upon verified request, we will provide you with a summary of the data categories we hold, the purposes for which it is processed, and a copy of the underlying data in a commonly used electronic format.

7.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For minor corrections (such as a misspelled name), you may be able to make changes directly via your account settings. For corrections to KYC-verified data, you will be required to provide updated documentary evidence.

7.3 Right to Erasure

You may request that 99x99 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where you object to processing and there are no overriding legitimate grounds to continue. Please note that erasure requests cannot be fulfilled for data that we are legally required to retain — for example, transaction records subject to financial record-keeping obligations.

7.4 Right to Restrict Processing

In certain circumstances — for example, while a rectification request is being reviewed — you have the right to request that we restrict our processing of your personal data to storage only, pending resolution of the relevant issue.

7.5 Right to Object

Where processing is based on our legitimate interests, you have the right to object to that processing. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms. You may object to direct marketing processing at any time, with immediate effect, by updating your notification preferences or contacting support.

7.6 Right to Data Portability

Where processing is based on your consent or on contract performance, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format. You may also request that we transmit that data directly to another controller where technically feasible.

8. Policy Updates & Contact

8.1 Changes to This Policy

99x99 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or platform features. When material changes are made, we will post a prominent notice on the platform and, where appropriate, notify you by email to your registered address. The effective date at the top of this document indicates when the policy was last revised. We encourage you to review this page periodically to stay informed about how we protect your data.

8.2 Minor Players

The 99x99 platform is strictly an 18+ service. We do not knowingly collect or process personal data from individuals under the age of 18. If we become aware that personal data has been collected from a person under 18, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered an account on the platform, please notify our support team immediately.

8.3 Links to Third-Party Services

The 99x99 platform may contain references to third-party payment providers (such as bKash, Nagad, Visa, and Mastercard) whose own privacy practices govern the data they collect in connection with your payment transactions. 99x99 is not responsible for the privacy practices of these third-party services. We encourage you to review the privacy policies of any payment provider you use in connection with your 99x99 account.

8.4 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data that 99x99 holds about you, please contact our support team. Our customer support team is available 24 hours a day, every day of the year, in English, via live chat on the platform. For written enquiries, you may also reach us at the support email address displayed in the footer of this page. We take all privacy enquiries seriously and will respond promptly.