Privacy Policy
for xx99bet

01 Information We Collect

When you register an account, make deposits or withdrawals, place wagers, or interact with the xx99bet platform in any other way, we collect certain categories of personal information. This section describes each category in detail, along with the lawful basis on which we collect and process it.

1.1 Registration and Identity Information

When you create your xx99bet account, we collect the following information:

• Your full legal name as it appears on your national identity card (NID) or passport.
• Your date of birth (required to verify that you meet the 18+ age requirement).
• A valid email address for account communications and notifications.
• A mobile phone number, which must be linked to your bKash, Nagad, or Rocket account for payment processing.
• A username and password of your choosing (passwords are stored as salted hashes — we never hold your password in plain text).

1.2 Identity Verification Documents

In order to comply with our anti-money laundering (AML) obligations and to verify your age, xx99bet may request copies of the following documents at any stage of your account lifecycle:

• National Identity Card (NID) — both sides
• Passport — data page and photo page
• Birth certificate issued by a recognised Bangladeshi authority
• Proof of address — a recent utility bill, bank statement, or official correspondence dated within the last 90 days

Document images are processed and stored securely. They are used exclusively for identity verification purposes and are not shared with third parties except where required by law.

1.3 Financial and Transaction Information

To facilitate deposits, withdrawals, and responsible gaming checks, we collect the following financial data:

• Transaction amounts and timestamps for all deposits and withdrawals.
• The payment method used for each transaction (e.g., bKash, Nagad, Rocket, Upay, Visa/Mastercard).
• Mobile wallet account identifiers (phone numbers associated with bKash, Nagad, Rocket, or Upay accounts).
• Partial card numbers (last four digits only) where card payments are used.

1.4 Gaming and Betting Activity

We maintain a record of your activity on the xx99bet platform, including:

• Games played, bet amounts, outcomes, and session durations.
• Sports markets wagered on (e.g., BPL, IPL, T20 World Cup, international cricket).
• Bonus offers claimed and wagering progress.
• Responsible gaming settings applied to your account (deposit limits, session limits, self-exclusion status).

This activity data is used to operate your account, calculate winnings, detect fraudulent or prohibited conduct, and provide you with a personalised gaming experience. It is also used in aggregate (anonymised) form to improve our platform and game offerings.

1.5 Technical and Device Information

When you access xx99bet through a web browser or mobile device, we automatically collect certain technical information, including:

• IP address and approximate geolocation (country and city level only).
• Browser type, version, and language settings.
• Device type, operating system, and screen resolution.
• Session start and end times, pages visited, and features used.
• Referring URL (the page you were on before arriving at xx99bet, if applicable).

Technical information is collected automatically via server logs and analytics tools. It is used to maintain platform security, detect suspicious access patterns, and improve the overall user experience.

02 How We Use Your Information

xx99bet processes your personal data for a defined set of purposes, each of which is grounded in a recognised legal basis. We do not use your data for purposes that are incompatible with the reasons for which it was originally collected.

2.1 Marketing Communications

xx99bet may send you promotional emails, SMS messages, or in-platform notifications about new games, seasonal promotions (such as Eid, Pohela Boishakh, or BPL season offers), and exclusive deposit bonuses — but only if you have explicitly opted in to receive marketing communications during registration or through your account settings. You may withdraw your consent and unsubscribe from marketing messages at any time by updating your notification preferences in your account panel or by contacting our support team.

03 Data Sharing and Disclosure

xx99bet does not sell your personal data. We share your information with third parties only in the limited circumstances described below, and always subject to contractual obligations requiring those parties to maintain appropriate security and confidentiality standards.

3.1 Payment Processing Partners

To process your deposits and withdrawals, we transmit the minimum necessary transaction data to our payment processing partners, which include bKash, Nagad, Rocket, Upay, and our card processing providers. These partners receive only the data required to complete the specific transaction requested. They are contractually prohibited from using this data for any purpose other than processing your payment.

3.2 Identity Verification Services

Where automated KYC (Know Your Customer) checks are performed, we may share identity document images and personal details with accredited third-party identity verification providers. These providers process your data solely for the purpose of verifying your identity and age on our behalf.

3.3 Technology and Infrastructure Providers

xx99bet relies on third-party technology providers for functions including cloud hosting, database management, and cybersecurity monitoring. These providers act as data processors on our behalf and are bound by strict data processing agreements. They do not have the right to use your data for their own purposes.

3.4 Game Studio Providers

Games available on xx99bet are provided by studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game from one of these providers, certain technical session data (such as your player ID, bet amounts, and game outcomes) is transmitted to that provider's platform to operate the game. This data sharing is governed by our agreements with each provider and is limited to what is strictly necessary to run the game session.

3.5 Legal and Regulatory Disclosure

We may disclose your personal data to law enforcement agencies, regulatory authorities, or courts of competent jurisdiction where we are legally required to do so, or where disclosure is necessary to:

• Comply with a legally binding request, court order, or regulatory direction.
• Protect the rights, property, or safety of xx99bet, our players, or the public.
• Investigate, prevent, or take action regarding suspected illegal activity, fraud, or breach of these Terms.

04 Cookies and Tracking Technologies

xx99bet uses cookies and similar technologies (such as local storage and session tokens) to operate the platform, maintain your login session, remember your preferences, and gather aggregate data about how players navigate and use the site. This section explains the types of cookies we use and the purpose of each.

4.1 Types of Cookies We Use

4.2 What We Do Not Use

xx99bet does not deploy advertising cookies, retargeting pixels, social media tracking tags, or any cross-site tracking technology that follows your activity beyond the xx99bet domain. We do not participate in any third-party advertising network or data exchange.

4.3 Managing Your Cookie Preferences

Strictly necessary cookies cannot be disabled, as they are required for the platform to function correctly. Functional and analytics cookies may be disabled through your browser settings. Please note that disabling functional cookies may affect your experience on the platform — for example, your display preferences may not be remembered between sessions.

05 Data Retention

xx99bet retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Once your data is no longer needed, it is securely deleted or anonymised so that it can no longer be associated with you as an individual.

5.1 Retention Periods by Data Category

• Account registration data — retained for the duration of your account plus a minimum of 5 years after account closure, to meet AML and financial record-keeping obligations.
• Identity verification documents — retained for a minimum of 5 years from the date of verification, in line with standard AML compliance requirements.
• Transaction and financial records — retained for a minimum of 5 years from the date of each transaction.
• Betting and gaming activity logs — retained for 2 years, after which they are anonymised for aggregate reporting purposes.
• Customer support communications — retained for 2 years from the date of the last interaction.
• Technical and access logs — retained for 90 days for security monitoring purposes, then deleted.
• Marketing consent records — retained until you withdraw consent, plus 1 year thereafter as evidence of the consent.

5.2 Retention After Account Closure

If you close your xx99bet account, we will retain certain categories of your personal data for the minimum periods described above. This is required to comply with financial regulations, respond to any disputes that arise after account closure, and maintain audit trails for regulatory purposes. Data that is no longer required after these periods will be securely and permanently deleted from all xx99bet systems.

06 Your Privacy Rights

As a player on xx99bet, you have a number of rights in relation to your personal data. We are committed to honouring these rights and will respond to all verifiable requests within 30 calendar days of receipt.

6.1 Summary of Your Rights

• Right of Access: You may request a copy of the personal data we hold about you at any time. We will provide this in a commonly used, machine-readable format where possible.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. Minor corrections (such as updating your phone number or email address) can be made directly through your account settings.
• Right to Erasure: You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations described in Section 05.
• Right to Restriction: You may request that we temporarily restrict the processing of your data in certain circumstances — for example, while you contest the accuracy of data we hold about you.
• Right to Data Portability: Where we process your data by automated means on the basis of your consent or a contract, you may request that we provide your data in a structured, portable format so that you can transfer it to another service provider.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time, with no need to provide justification. You may also object to processing carried out on the basis of legitimate interests, though this right is subject to our demonstrating that our interests override yours.
• Right to Withdraw Consent: Where we process your data on the basis of your consent (e.g., for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of any processing that took place before the withdrawal.

6.2 How to Exercise Your Rights

To exercise any of the rights described above, please contact our Data Privacy team by email at the address below. To protect your privacy, we will need to verify your identity before processing any data request. We may ask you to provide a copy of your NID or other identifying document as part of this verification step.

07 Data Security Measures

Protecting your personal and financial data is a core operational priority at xx99bet. We have implemented a multi-layered security framework that covers data in transit, data at rest, access controls, and incident response.

7.1 Technical Safeguards

• All data transmitted between your device and xx99bet is encrypted using TLS 1.2 or higher (256-bit SSL).
• Personal data stored on our servers is encrypted at rest using AES-256 encryption.
• Passwords are stored exclusively as salted cryptographic hashes. Even xx99bet staff cannot read your password.
• Payment credentials (PINs, card numbers) are never stored on xx99bet infrastructure — they are tokenised at the point of entry and processed by our PCI-DSS-compliant payment partners.
• Our platform infrastructure is protected by enterprise-grade firewalls, intrusion detection systems, and continuous security monitoring.

7.2 Organisational Safeguards

• Access to personal data is restricted to xx99bet staff who have a genuine operational need to access it, on a strict least-privilege basis.
• All staff with access to personal data receive regular data protection and security training.
• Third-party data processors are subject to due diligence reviews and contractual data processing agreements before being granted access to any player data.

7.3 Security Incident Response

Despite our best efforts, no platform can guarantee absolute security against all possible threats. In the event of a data breach that is likely to result in a risk to your rights and freedoms as an individual, xx99bet will notify affected players without undue delay — and in any event within 72 hours of becoming aware of the breach — providing details of the nature of the incident, the data categories affected, and the steps we are taking to mitigate the impact.

08 Changes to This Policy

xx99bet reserves the right to update or amend this Privacy Policy at any time. When we make changes that are material to the way we collect or use your personal data, we will notify registered players by email or via an in-platform notification prior to the changes taking effect. The updated Policy will be published on this page with a revised effective date.

8.1 Continued Use as Acceptance

Your continued use of the xx99bet platform after a revised Privacy Policy has been published and notified constitutes your acceptance of the updated terms. If you do not agree with the changes, you may close your account at any time by contacting our support team. Closing your account does not affect your right to request access to or deletion of the personal data we hold about you.

8.2 Contact for Privacy Enquiries

If you have any questions, concerns, or feedback regarding this Privacy Policy or the way xx99bet handles your personal data, please do not hesitate to contact us. Our support team is available 24 hours a day, 7 days a week, and our Data Privacy team will respond to formal written enquiries within 5 business days.

This Privacy Policy was last reviewed and updated on 1 January 2026. xx99bet is committed to keeping this document accurate and up to date. Players are encouraged to review this page periodically to stay informed of how we protect their data.