Privacy Policy

Welcome to 99xo. This Privacy Policy explains how 99xo ("we", "us", or "our") collects, uses, stores, and discloses information about you when you access or use our website, mobile experience, and related services (collectively, the "Platform"). By registering an account or using the Platform, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy.

This Policy applies to all users of the 99xo Platform, including players located in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, and all other regions of Bangladesh. We are committed to ensuring your personal data is handled with transparency, integrity, and care, in accordance with applicable data protection principles.

1. Information We Collect

We collect various categories of information to provide you with a secure and enjoyable gaming experience. The types of data we gather fall into the following categories:

Personal Identification Data

• Full name, date of birth, and nationality, collected during account registration to verify your age (players must be 21+) and identity.
• Government-issued ID documents (such as National ID Card, passport, or driving licence) for identity verification and KYC compliance.
• Email address and phone number for account communications, security alerts, and support.
• Residential address, including city and district within Bangladesh, used for regulatory and fraud-prevention purposes.

Financial and Transaction Data

• Deposit and withdrawal records, including transaction amounts in BDT, timestamps, and payment method identifiers (e.g., bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank).
• Partial payment account details (such as the last four digits of a linked card or mobile wallet token) — we do not store full card numbers on our servers.
• Bonus and promotion usage history, including wagering records, free spin redemptions, and rollover progress.

Technical and Usage Data

• IP address, device type, operating system, browser type, and screen resolution, used to optimize the mobile experience and detect unusual access patterns.
• Game session logs, including games played, bets placed, results, session start/end times (Bangladesh Standard Time, UTC+6), and in-game events.
• Cookies, local storage, and session tokens used to maintain your login state and personalise your experience across visits.

2. How We Use Your Information

We process your personal data only for lawful, specific, and legitimate purposes directly related to the provision of our Platform and ancillary services. The primary purposes include:

• Account creation, verification, and ongoing management, including identity checks (KYC) to ensure players are aged 21 or older and to prevent fraudulent registrations.
• Processing deposits and withdrawals securely, including transactions via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and maintaining accurate financial records.
• Delivering personalised promotions, bonus offers, and game recommendations relevant to your playing history and preferences.
• Providing customer support and resolving disputes, complaints, or queries raised by email at [email protected].
• Monitoring platform activity to detect and prevent fraud, money laundering, account takeovers, and other prohibited activities.
• Improving our Platform's performance, security, game offerings, and user interface through aggregated analytics and A/B testing.

3. Sharing of Your Information

99xo does not sell, rent, or trade your personal information to third parties for their own marketing purposes. We may share your data only in the following limited circumstances:

• Service Providers: Trusted third-party vendors who process data strictly on our behalf, including payment processors, game studios (such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi), IT infrastructure providers, and fraud detection services. All such vendors are contractually obligated to maintain the confidentiality and security of your data.
• Legal and Regulatory Obligations: Where we are compelled by applicable law, court order, or lawful authority to disclose data, including disclosures made to prevent fraud, money laundering, or other criminal activity.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via the registered email address before your personal data becomes subject to a different privacy policy.
• Aggregated and Anonymised Data: We may share de-identified, statistical, or aggregated information with analytics partners, advertisers, and research organisations. Such information cannot be used to identify you individually.

4. Cookies and Tracking Technologies

99xo uses cookies and similar tracking technologies (such as local storage, session tokens, and pixel tags) to operate core Platform functions, remember your session preferences, serve relevant promotional content, and analyse traffic patterns. Cookies are small data files placed on your device; they do not carry viruses or malware.

You may configure your browser to decline cookies; however, doing so may affect the functionality of certain Platform features, including session persistence and payment flows. By continuing to use the Platform, you consent to our use of essential cookies.

5. Data Retention

We retain your personal data for as long as your account remains active or as required to fulfil the purposes outlined in this Privacy Policy. In particular, financial transaction records and KYC documentation are retained for a minimum period to comply with anti-money laundering and fraud-prevention obligations.

When your account is closed, we will delete or anonymise your personal data within a reasonable timeframe, except where retention is required by law or where data forms part of an ongoing investigation or legal proceeding. Backup copies may persist for a limited period as part of our disaster recovery procedures.

6. Data Security

99xo employs industry-standard security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These measures include SSL/TLS encryption for all data in transit, encrypted storage for sensitive fields, access controls and role-based permissions for internal staff, and regular security audits.

While we take every reasonable precaution to secure your data, no transmission over the internet or electronic storage system is completely immune to risk. We encourage you to use a strong, unique password for your 99xo account, to enable any available two-factor authentication, and to log out after each session, particularly on shared devices.

7. Your Rights and Choices

We respect your rights in relation to the personal data we hold about you. Subject to verification of your identity, you may exercise the following rights by contacting us at [email protected]:

• Right to Access: Request a copy of the personal data we hold about you and information about how it is processed.
• Right to Rectification: Request correction of inaccurate or incomplete personal data held in your account profile.
• Right to Erasure: Request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to legal retention obligations.
• Right to Object: Object to the processing of your data for direct marketing purposes or where processing is based on our legitimate interests.
• Right to Restriction: Request that we limit our processing of your data in certain circumstances, for example while a complaint is being investigated.

We will endeavour to respond to all verified requests within 30 days. In certain complex cases, this period may be extended, and we will notify you accordingly.

8. Payment Data and Financial Security

All deposit and withdrawal transactions processed through the 99xo Platform are handled via established payment gateways and mobile financial service providers operating in Bangladesh, including bKash, Nagad, Rocket, and Upay. Card-based transactions are processed in accordance with applicable card network security standards.

We do not store full payment card numbers or mobile wallet PINs on our servers. Financial data is transmitted using end-to-end SSL encryption. In the event of any suspicious transaction, our fraud prevention systems will flag the activity and may temporarily suspend account access to protect your funds.

9. Third-Party Services and External Links

Our Platform integrates with third-party game providers such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming. These providers operate under their own privacy and data handling policies. When you play a game served by a third-party provider, that provider may independently collect technical data about your session. We recommend reviewing the privacy practices of any third-party provider whose games you play. 99xo does not control and is not responsible for the privacy practices of external services integrated into or linked from the Platform.

10. Changes to This Privacy Policy

99xo reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or other operational factors. When we make material changes to this Policy, we will update the "Last updated" date at the top of this page and, where appropriate, notify registered users via email.

Your continued use of the Platform after any such update constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your information.

11. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which 99xo handles your personal data, please contact our support team. We aim to respond to all privacy-related enquiries within a reasonable timeframe.

You may reach us by email at [email protected]. Please include your registered account username and a clear description of your request to help us process it efficiently.