Your Privacy Matters at 99xo

1. Introduction

This Privacy Policy describes how 99xo ("we", "us", "our") collects, uses, stores, and protects the personal information you provide when you register for an account, use any feature of the 99xo platform at 99xo.vu, or otherwise interact with our services. It also sets out your rights in relation to that data and how you may exercise them.

We are committed to handling your personal data with care, transparency, and in full compliance with applicable data protection principles. By creating an account on 99xo or continuing to use the platform after this Policy is published or updated, you acknowledge that you have read and understood how your data is processed as described herein.

This Policy should be read in conjunction with our Terms & Conditions, which govern your overall use of the 99xo platform. In the event of any conflict between this Privacy Policy and the Terms & Conditions on data-related matters, this Privacy Policy shall take precedence.

2. Data Controller

For the purposes of this Privacy Policy, the data controller responsible for your personal information is 99xo, the operator of the online betting and casino platform available at 99xo.vu. We determine the purposes and means by which your personal data is processed in connection with your use of the platform.

If you have any questions about how your data is processed or wish to exercise any of your rights described in this Policy, please contact our data protection team using the details provided in Section 15 of this document.

3. Data We Collect

99xo collects the following categories of personal data, depending on how you interact with the platform:

3.1 Identity & Contact Data

• Full legal name
• Date of birth
• Residential address (including city — Dhaka, Chittagong, Sylhet, Khulna, or other)
• Email address
• Mobile phone number
• Government-issued photo ID document details (collected during KYC verification)

3.2 Account Data

• Username and encrypted password hash
• Account registration date and time
• Account preferences and communication settings
• Responsible gaming settings (deposit limits, self-exclusion status)

3.3 Financial & Transaction Data

• Payment method type (e.g., bKash, Nagad, Rocket, Upay, bank transfer)
• Mobile wallet number or bank account reference (masked — full account numbers are not stored)
• Deposit amounts, withdrawal amounts, and transaction timestamps
• Wagering history, game session records, and win/loss records
• Bonus credits received and wagering requirement progress

3.4 Technical & Usage Data

• IP address and approximate geolocation
• Device type, operating system, and browser version
• Session duration, pages visited, and features accessed
• Referring URL and platform entry point
• Cookie identifiers and session tokens

3.5 Communications Data

• Records of live chat conversations with our support team
• Email correspondence sent to or received from 99xo
• Feedback, complaints, and dispute records

4. How We Collect Data

We collect personal data through the following means:

• Direct submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, or contacting our support team.
• Automated collection: Technical data gathered automatically when you visit the platform, including IP address, device information, session data, and cookie identifiers.
• Payment providers: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, and banking partners after you authorise a payment.
• Third-party identity verification services: Where applicable, identity data confirmed through KYC verification partners used to validate government-issued identification documents.
• Game providers: Game session outcome data and RNG results provided by our integrated game studio partners including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi.

5. How We Use Your Data

99xo uses the personal data it collects for the following purposes:

6. Legal Basis for Processing

We process your personal data on the following legal grounds:

• Contractual necessity: Processing required to provide the 99xo service to you, including account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering obligations, age verification requirements, and record-keeping duties.
• Legitimate interests: Processing carried out to protect the platform from fraud, maintain platform security, and improve service quality — provided these interests are not overridden by your fundamental rights.
• Consent: Processing for marketing communications and non-essential cookies, where we have obtained your explicit prior consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

7. Data Sharing

99xo does not sell your personal data to any third party. We may, however, share data with the following categories of recipient where strictly necessary:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and other payment partners, solely for the purpose of processing your authorised transactions.
• KYC and identity verification providers: Third-party services used to verify your identity and age as required for account compliance.
• Game studio providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other integrated studios that require session data to deliver game outcomes.
• IT infrastructure and hosting providers: Secure server and cloud infrastructure providers that host the 99xo platform under strict data processing agreements.
• Law enforcement and regulatory bodies: Where we are required by law or a valid legal order to disclose personal data to a competent authority.

All third-party processors are required to handle your data in accordance with applicable data protection principles and are prohibited from using it for any purpose beyond the specific service they provide to 99xo.

8. Data Retention

We retain personal data for the following periods, unless a longer retention period is required by applicable law:

• Active account data: Retained for the duration of your account's active status plus a period of five (5) years following account closure, to satisfy anti-money laundering record-keeping requirements.
• Transaction and wagering records: Retained for a minimum of five (5) years from the date of the transaction.
• KYC documents: Retained for five (5) years following the completion of verification or account closure, whichever is later.
• Support communications: Retained for two (2) years from the date of the last communication, unless related to an unresolved dispute.
• Technical and usage logs: Retained for up to twelve (12) months on active systems, then archived or deleted.
• Marketing consent records: Retained for the period your consent remains active, plus two (2) years as an audit record following withdrawal.

Once the applicable retention period has expired, personal data is securely deleted or irreversibly anonymised so that it can no longer be attributed to any identifiable individual.

9. Data Security

99xo implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the 99xo platform.
• Encryption of sensitive stored data, including password hashes and identity document references, using industry-standard algorithms.
• Role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent required for their specific function.
• Regular internal security audits and vulnerability assessments of platform infrastructure.
• Automated monitoring and alerting systems for unusual access patterns or potential data breach events.
• Strict data processing agreements with all third-party service providers who handle personal data on our behalf.

While we take every reasonable precaution to protect your data, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights, we will notify affected users as promptly as reasonably practicable.

10. Cookies

99xo uses cookies and similar tracking technologies to operate core platform functionality, remember your preferences, and analyse how the platform is used. The following types of cookies are used:

99xo does not use third-party advertising cookies or behavioural profiling trackers. You may manage cookie preferences through your browser settings. Disabling essential cookies will impair or prevent your ability to log in and use the platform.

11. Your Rights

Subject to applicable law, you have the following rights in relation to your personal data held by 99xo:

• Right of Access: You may request a copy of the personal data we hold about you. We will provide this within 30 days of a verified request.
• Right to Rectification: You may ask us to correct any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: You may request deletion of your personal data where we no longer have a legitimate basis to retain it. Note that some data must be retained for legal compliance purposes even after account closure.
• Right to Restrict Processing: You may request that we limit our use of your data in certain circumstances, for example while a correction request is being assessed.
• Right to Data Portability: Where processing is based on your consent or a contract, you may request that your data be provided to you in a commonly used, machine-readable format.
• Right to Object: You may object to processing based on our legitimate interests at any time. You may also withdraw your consent to marketing communications at any time without affecting your account status.

To exercise any of these rights, please contact our support team via live chat or email at [email protected]. We will acknowledge your request within 5 business days and aim to fulfil it within 30 calendar days. Complex requests may require additional time, in which case we will inform you of the expected timeline.

12. Children & Minors

The 99xo platform is strictly restricted to individuals who are 21 years of age or older. We do not knowingly collect personal data from any person under the age of 21. If we discover or have reasonable grounds to believe that personal data has been submitted by an individual under 21, we will immediately suspend the associated account, freeze any balance, and delete the personal data in accordance with our data retention procedures.

If you are a parent or guardian and believe that your child has registered on the 99xo platform, please contact us immediately at [email protected]. We will investigate and take appropriate action promptly.

13. International Data Transfers

Your personal data may be processed on servers or by service providers located outside of Bangladesh, including in other countries where data protection laws may differ. Where such transfers occur, 99xo ensures that appropriate safeguards are in place — such as data processing agreements that require the recipient to maintain data protection standards equivalent to those described in this Policy — prior to any transfer taking place.

We take all reasonably practicable steps to ensure your data receives an adequate level of protection regardless of where it is processed. If you have questions about specific international transfer arrangements, please contact our support team.

14. Policy Changes

99xo reserves the right to update or revise this Privacy Policy at any time. When material changes are made, we will notify registered users by email to the address associated with their account and by posting a prominent notice on the platform for a reasonable period following the update. The "Last Updated" date at the top of this Policy will reflect the date on which the most recent revision was published.

Your continued use of the 99xo platform after any revision to this Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you should discontinue use of the platform and close your account. We recommend reviewing this page periodically to remain informed of how your data is being handled.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 99xo handles your personal data, please contact our team through any of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the support widget on the 99xo platform.
• Email: [email protected] (plain text only — not a clickable link)

All privacy-related enquiries are handled in English. We aim to acknowledge your message within 24 hours and to resolve data access or deletion requests within 30 calendar days. For general account or payment queries, please use the same contact channels and our support team will direct your enquiry appropriately.