Your Privacy Matters at 99xx0
This Privacy Policy explains how 99xx0 collects, processes, stores, and protects the personal data of players registered on the platform — including those accessing from Bangladesh. We are committed to transparency, data security, and giving you full control over your information.
How 99xx0 Handles Your Data
Six core principles guide every data-related decision at 99xx0. These principles apply to all personal information collected from players, regardless of the device or network used to access the platform.
Transparency First
We tell you exactly what data we collect, why we collect it, and how long we keep it. There are no hidden data practices at 99xx0. This Privacy Policy is the single authoritative document governing how your personal information is used on the platform.
Secure Transmission
All data exchanged between your device and the 99xx0 platform is encrypted using TLS 1.3 with a 256-bit SSL certificate. Sensitive fields such as payment details and account credentials are encrypted at rest using AES-256 standards, the same level of protection used by major international financial institutions.
Minimal Data Collection
99xx0 collects only the personal data that is strictly necessary for the purpose for which it is being processed. We do not collect data speculatively or for undefined future use. Every data field requested during registration, verification, or transaction is collected for a specific, documented purpose.
Never Sold to Third Parties
Your personal data is never sold, rented, or traded to third-party marketers, data brokers, advertising networks, or any entity not directly involved in operating the 99xx0 platform. Data sharing is limited to essential service providers operating under strict data processing agreements.
Player Rights Respected
You have the right to access, correct, export, and request deletion of the personal data 99xx0 holds about you. These rights can be exercised at any time by contacting [email protected]. We process all data rights requests within 30 days of receipt.
Defined Retention Periods
We do not retain personal data indefinitely. Retention periods are defined for each data category and are based on the legal and operational necessity for keeping that data. Account data is retained for a maximum of 7 years following account closure, after which it is securely deleted or anonymised.
Contents
- 1. Introduction
- 2. Data We Collect
- 3. How We Use Your Data
- 4. Legal Basis for Processing
- 5. Data Sharing
- 6. Cookies & Tracking
- 7. Data Security
- 8. Data Retention
- 9. Your Rights
- 10. Children & Minors
- 11. Third-Party Links
- 12. Policy Amendments
- 13. Contact & Requests
Version: 2.4
Please Read Carefully: This Privacy Policy forms part of the contractual relationship between you and 99xx0. By creating an account or continuing to use the platform, you acknowledge that you have read and understood how your personal data is processed as described in this document.
1 Introduction
This Privacy Policy ("Policy") describes how 99xx0 ("the Platform", "we", "us", "our") collects, uses, stores, discloses, and protects the personal data of individuals ("you", "your", "the Player") who access or use the 99xx0 website at https://99xx0.io and all associated services, including sports betting, live casino, slots, and customer support channels.
99xx0 is an online betting and casino platform serving the Bangladesh market. All customer-facing communications are conducted in English. This Policy applies to all registered players, prospective players who browse the platform without registering, and any individual who contacts 99xx0 via email, live chat, or any other communication channel.
This Policy should be read in conjunction with 99xx0's Terms & Conditions and Responsible Gaming policy, both of which contain additional provisions that are relevant to the processing of your personal data.
This Policy was last updated in January 2026 and supersedes all prior versions. If material changes are made that affect how your data is processed, you will be notified by email at the address on record before the changes take effect.
2 Data We Collect
99xx0 collects personal data through several channels: directly from you when you register an account or complete a transaction, automatically when you interact with the platform, and from third-party service providers involved in payment processing and identity verification. The categories of personal data we collect are described below.
2.1 Registration & Identity Data
When you create a 99xx0 account, we collect your full legal name, date of birth, email address, Bangladeshi mobile phone number, and a chosen username. This information is required to establish your account and confirm that you meet the 21+ age eligibility requirement.
2.2 Identity Verification (KYC) Data
To comply with Know Your Customer (KYC) and anti-money laundering (AML) obligations, we may collect copies of identity documents including your Bangladesh National Identity Card (NID), passport, or driving licence, as well as proof-of-address documents such as a utility bill or bank statement issued within the preceding three months.
2.3 Financial & Transaction Data
We collect details of all financial transactions on your account, including deposit and withdrawal amounts, transaction timestamps, and the identifiers associated with your payment method (e.g., the last four digits of a bKash or Nagad mobile number used for transactions). We do not store full payment credentials — these are held by the respective payment processors under their own security infrastructure.
2.4 Usage & Behavioural Data
We collect data about how you interact with the 99xx0 platform, including pages visited, games played, bet types and stake amounts, session durations, device type, operating system, browser type, and IP address. This data is used to improve the platform experience and to identify patterns consistent with problem gambling or fraudulent activity.
2.5 Communication Data
We retain records of communications between you and the 99xx0 support team, including live chat transcripts, email correspondence, and support ticket contents. These records are kept to ensure quality of service and to resolve any disputes that may arise.
Note on Sensitive Data: 99xx0 does not intentionally collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric identifiers. If you voluntarily disclose information of this nature in a support communication, it will be used solely for the purpose of responding to your query and will not be retained beyond the resolution of the matter.
3 How We Use Your Data
The personal data collected by 99xx0 is used for the following specific purposes. We do not use personal data for any purpose not listed here without first obtaining your explicit consent.
| Purpose | Data Categories Used |
|---|---|
| Account creation & management | Registration data, identity data |
| Age & identity verification (KYC) | KYC documents, registration data |
| Processing deposits & withdrawals | Financial & transaction data, identity data |
| Fraud detection & AML monitoring | Transaction data, usage data, identity data |
| Providing customer support | Communication data, account data |
| Responsible gaming monitoring | Usage & behavioural data, transaction data |
| Platform performance & improvement | Usage & behavioural data (anonymised) |
| Promotional communications (with consent) | Registration data, behavioural data |
| Legal & regulatory compliance | All categories as required by applicable law |
3.1 Marketing Communications
99xx0 will only send you promotional emails, SMS messages, or in-platform notifications about bonuses, promotions, and new features if you have given explicit consent at the time of registration or subsequently through your account preferences. You may withdraw consent for marketing communications at any time by updating your notification preferences in account settings or by contacting [email protected]. Withdrawal of marketing consent does not affect the processing of data for any other purpose listed above.
4 Legal Basis for Processing
Every instance of personal data processing by 99xx0 is based on one of the following legal grounds. We identify the applicable legal basis for each processing activity in the table below.
- Contractual necessity: Processing required to fulfil the Terms & Conditions agreement with you — including account management, payment processing, and bet settlement.
- Legal obligation: Processing required to comply with applicable laws and regulations — including KYC, AML obligations, and responsible gaming requirements.
- Legitimate interests: Processing necessary for 99xx0's legitimate business interests, where those interests are not overridden by your rights — including fraud prevention, platform security, and service improvement using anonymised analytics.
- Consent: Processing based on your freely given, specific, informed, and unambiguous consent — specifically for marketing communications. Consent may be withdrawn at any time.
5 Data Sharing & Third Parties
99xx0 does not sell, rent, or trade your personal data to any third party. Personal data is shared only with the following categories of service providers, each of whom is bound by a data processing agreement that restricts their use of your data to the specific purposes for which it was shared:
- Payment processors: bKash, Nagad, Rocket, and Upay — to process deposits and withdrawals. Each processor operates under its own privacy and security framework as a regulated financial services entity.
- KYC & identity verification providers: Third-party identity verification platforms used to authenticate documents submitted during the verification process.
- Game studios & content providers: Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, Spribe, and other licensed game providers receive limited technical data (e.g., anonymised player session identifiers) necessary to deliver and maintain game functionality within the 99xx0 platform.
- Cloud infrastructure providers: Hosting, database, and content delivery services used to operate the platform's technical infrastructure.
- Fraud prevention & security services: Specialist providers whose services are used to detect and prevent account fraud, money laundering, and match-fixing activity.
Legal Disclosure: In exceptional circumstances, 99xx0 may be required to disclose personal data to law enforcement authorities, regulators, or courts in response to a lawful request. Such disclosures will be made only to the extent required by the applicable legal obligation and will be documented internally.
6 Cookies & Tracking Technologies
The 99xx0 platform uses cookies and similar tracking technologies to operate essential platform functions, understand how players use the site, and deliver a personalised experience. The categories of cookies used are as follows:
- Essential cookies: Required for the platform to function correctly. These cookies manage your login session, remember your account preferences, and enable secure payment flows. They cannot be disabled without significantly impairing your use of the platform.
- Analytics cookies: Used to collect anonymised data about how players navigate the platform, which pages are visited most frequently, and where users encounter errors. This data is used to improve platform performance and user experience.
- Responsible gaming cookies: Used to track session duration and betting activity for the purpose of delivering responsible gaming alerts and enforcing player-set limits.
- Fraud prevention cookies: Used to generate a device fingerprint that helps identify and prevent account fraud, multi-accounting, and bot activity.
You may manage your cookie preferences through your browser settings. Note that disabling essential cookies will prevent you from logging in and using the platform. 99xx0 does not use third-party advertising cookies or tracking pixels for the purpose of behavioural advertising on external websites.
7 Data Security
99xx0 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures include:
- TLS 1.3 encryption for all data transmitted between your device and the 99xx0 platform
- AES-256 encryption for personal data stored in our databases
- Role-based access controls ensuring that staff can only access personal data relevant to their specific job function
- Two-factor authentication (2FA) required for all internal administrative access to systems holding personal data
- Regular third-party penetration testing of the platform's infrastructure and application layer
- Automated real-time monitoring for unusual access patterns or potential data breach indicators
- Formal incident response procedures, including a defined process for notifying affected players in the event of a data breach
While 99xx0 applies industry-standard security measures, no online platform can guarantee absolute security against all possible threats. You play an important role in keeping your account secure — please use a strong, unique password and enable 2FA on your account. Never share your login credentials with anyone, including 99xx0 staff. We will never ask for your password.
8 Data Retention
99xx0 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law. The following retention periods apply to each data category:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & registration data | Duration of account + 7 years | Legal obligation & contractual |
| KYC identity documents | Duration of account + 7 years | AML legal obligation |
| Transaction records | 7 years from transaction date | AML & financial record-keeping |
| Betting & gaming history | Duration of account + 5 years | Dispute resolution & legal |
| Support communications | 3 years from last interaction | Legitimate interests |
| Marketing consent records | Until consent withdrawn + 3 years | Legal obligation (consent proof) |
| Anonymised analytics data | Up to 36 months | Legitimate interests |
Upon expiry of the applicable retention period, personal data is either permanently deleted from all 99xx0 systems or irreversibly anonymised such that it can no longer be associated with any identifiable individual.
9 Your Rights
As a player on the 99xx0 platform, you have the following rights with respect to the personal data we hold about you. All requests are processed within 30 days of receipt.
Right of Access
You have the right to request a copy of all personal data that 99xx0 holds about you, along with information about the purposes for which it is processed and the categories of recipients with whom it has been shared.
Right to Rectification
You have the right to request the correction of any personal data that is inaccurate or incomplete. You may update certain account information directly within your account settings, or contact support for changes that cannot be made self-service.
Right to Erasure
You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected. Note that this right may be limited where retention is required by law, such as for AML record-keeping obligations.
Right to Restriction
You have the right to request that processing of your personal data be restricted in certain circumstances — for example, while the accuracy of data you have disputed is being verified.
Right to Data Portability
You have the right to receive a copy of personal data you have provided to 99xx0 in a structured, commonly used, machine-readable format (such as CSV or JSON), and to request that this data be transmitted directly to another service provider where technically feasible.
Right to Object
You have the right to object to processing of your personal data where that processing is based on legitimate interests or for direct marketing purposes. Marketing objections are actioned immediately upon receipt. Objections to legitimate interest processing will be considered and a written response provided.
To exercise any of the rights above, please contact the 99xx0 privacy team at [email protected] with the subject line "Data Rights Request". Please include your registered email address and the specific right you wish to exercise. We may need to verify your identity before processing the request.
10 Children & Minors
The 99xx0 platform is strictly for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If you are under 21, you must not register an account, access the platform, or attempt to place any bets or wagers on the platform.
Age verification is conducted as part of the mandatory KYC process. Where there is reasonable suspicion that a registered player may be under the age of 21, 99xx0 reserves the right to suspend the account and request additional age verification documentation before permitting further access. Any account found to have been opened by a person under the age of 21 will be closed immediately and all funds returned, subject to verification of the true account holder's identity.
If you are a parent or guardian and believe that a minor in your care has accessed or registered on the 99xx0 platform, please contact us immediately at [email protected]. We will investigate and take immediate action, including permanent closure of the account and secure deletion of all data associated with the minor.
21+ Only: This platform is intended for adults aged 21 and above. Gambling is not a suitable activity for minors. If you are concerned about underage access in your household, we strongly recommend using parental control software to restrict access to online gambling platforms.
11 Third-Party Links
The 99xx0 platform may contain references to third-party services such as payment providers (bKash, Nagad, Rocket, Upay) or game studios (Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, Spribe). When you interact with these third-party services — for example, by completing a bKash payment — you are subject to that third party's own privacy policy and data practices.
99xx0 is not responsible for the privacy practices of any third-party service provider. We encourage you to review the privacy policies of any third party whose services you use in connection with the 99xx0 platform. The inclusion of a reference to a third-party service within the 99xx0 platform does not constitute an endorsement of that third party's data practices.
12 Policy Amendments
99xx0 reserves the right to update or amend this Privacy Policy at any time. The current version of the Policy will always be published at https://99xx0.io/privacy-policy, together with the date on which it was last updated and the current version number.
Where amendments are material — meaning they significantly change how your personal data is collected, used, or shared — 99xx0 will notify you by email to the address registered on your account at least 14 days before the changes take effect. Your continued use of the platform after the effective date of the revised Policy constitutes acceptance of the amended terms.
If you do not agree with a material amendment to this Policy, you may request account closure by contacting [email protected] before the effective date. Account closure requests submitted in response to a Policy amendment will be processed without penalty, and any withdrawable balance will be returned to you via your registered payment method.
Version History: Prior versions of this Privacy Policy are retained by 99xx0 for internal record-keeping purposes. If you require a copy of a previous version of the Policy that was in effect during a specific period, please submit a written request to [email protected] and we will provide it within 10 business days.
13 Contact & Data Rights Requests
All privacy-related enquiries, data rights requests, and concerns regarding this Privacy Policy should be directed to the 99xx0 privacy team using the contact details below. All communications are handled in English and are specifically staffed to assist Bangladesh-based players.
- Email: [email protected] — use subject line "Privacy Policy Enquiry" or "Data Rights Request"
- Live Chat: Available 24 hours a day, 7 days a week via the 99xx0 platform
- Response Time: Data rights requests acknowledged within 3 business days; completed within 30 calendar days (Bangladesh Standard Time, UTC+6)
When submitting a data rights request by email, please include your registered email address, a brief description of the right you wish to exercise, and any relevant account details that will help us locate your records promptly. For security purposes, we may ask you to verify your identity before processing the request.
Complaints: If you are dissatisfied with how 99xx0 has handled your personal data or responded to a data rights request, you have the right to raise a formal complaint by emailing [email protected] with the subject line "Formal Privacy Complaint". We will acknowledge your complaint within 24 hours and provide a full written response within 10 business days.
Have Questions About Your Data?
Our support team is available around the clock to help Bangladesh players with privacy queries, data rights requests, and account security. You can also explore our other policy pages for a complete picture of how 99xx0 operates.