99xx Privacy Policy — How We Collect, Use & Protect Your Data
At 99xx, we treat your personal data with the same level of care we bring to every part of the platform. This Privacy Policy explains in plain English exactly what information we collect from you, why we collect it, how it is used and stored, who it may be shared with, and what rights you hold over your own data. We encourage you to read it in full before using the 99xx platform.
How 99xx Approaches Your Privacy
The following cards summarise the core principles that underpin our approach to data privacy on the 99xx platform. Full details are set out in the legal sections below.
Minimal Data Collection
99xx collects only the personal data that is strictly necessary for account management, KYC verification, transaction processing, and responsible gaming compliance. We do not collect data for the sake of it — every data point has a defined purpose.
256-Bit SSL Encryption
All data transmissions between your device and the 99xx platform are protected by industry-standard 256-bit SSL encryption. Financial data is never stored in plain text, and access to player records is restricted on a strict need-to-know basis within the organisation.
Your Rights Over Your Data
You have the right to access, correct, and request deletion of your personal data at any time. You may also withdraw consent for marketing communications, request data portability, and raise objections to specific processing activities by contacting [email protected].
No Unauthorised Third-Party Sharing
99xx does not sell, rent, or trade your personal data to third parties for their own commercial purposes. Data is only shared with carefully vetted service providers who process it strictly on our behalf, or where we are legally obligated to disclose it.
Transparent Cookie Use
99xx uses cookies and similar tracking technologies exclusively to improve platform performance, remember your preferences, and deliver a smoother gaming experience. We do not use third-party advertising cookies. Our Cookie Policy is detailed in Section 9 of this document.
Policy Updates & Notification
When this Privacy Policy is materially updated, 99xx will notify registered players by email and display a prominent notice on the platform. The effective date and version number are always shown at the top of this document so you know exactly which version applies to you.
Section 01
Who We Are
This Privacy Policy is issued by 99xx ("99xx", "we", "us", "our"), the operator of the online casino and sports betting platform available at https://99xx.io and all associated subdomains and mobile applications (collectively, the "Platform"). 99xx is committed to protecting the privacy and personal data of all users who register and interact with the Platform.
For the purposes of this Privacy Policy, 99xx acts as the data controller in respect of all personal data collected directly from users of the Platform. Where personal data is processed on our behalf by third-party service providers, those providers act as data processors and are contractually bound to process data solely in accordance with our instructions and to maintain appropriate security standards.
If you have any questions about how 99xx handles your personal data, you may contact our support team at [email protected] at any time. Our support team operates 24 hours a day, 7 days a week, in English, from Bangladesh Standard Time (BST, UTC+6).
Section 02
Personal Data We Collect
99xx collects personal data across several categories depending on your interaction with the Platform. The specific data collected in each category is set out in the table below.
| Category | Data Points Collected | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality, NID or passport number | During registration and KYC verification |
| Contact Data | Email address, mobile phone number, residential address | During registration |
| Financial Data | Payment method details (bKash/Nagad account numbers, card last 4 digits), transaction history, deposit and withdrawal records | When you make a deposit or request a withdrawal |
| Verification Data | Copies of identity documents, selfie photographs, proof of address documents | During KYC verification |
| Technical Data | IP address, device type, operating system, browser type and version, session tokens | Automatically when you access the Platform |
| Usage Data | Pages visited, games played, bet history, session duration, click patterns, login timestamps | Automatically during active sessions |
| Communications Data | Support chat transcripts, email correspondence, feedback submissions | When you contact the support team |
| Responsible Gaming Data | Self-exclusion requests, deposit limit settings, session alert preferences | When you use responsible gaming tools |
99xx does not knowingly collect special category personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data used for identification purposes) except where expressly required by applicable verification or responsible gaming obligations, and only with your explicit consent where required by law.
Section 03
How We Collect Your Data
99xx collects personal data through the following methods:
3.1 Direct Collection
Data you provide directly to us when you register an account, complete KYC verification, make deposits or withdrawals, contact the support team, submit feedback, or respond to surveys or promotional communications.
3.2 Automated Collection
Data collected automatically when you access or use the Platform through cookies, web beacons, server logs, and similar technologies. This includes technical data such as your IP address, device identifiers, and session information, as well as usage data such as the pages you visit and the games you interact with.
3.3 Third-Party Sources
In limited circumstances, 99xx may receive data about you from third-party sources including:
- Payment service providers (bKash, Nagad, Rocket, Upay, Visa, Mastercard) to confirm transaction status and verify payment method ownership
- Identity verification service providers who assist with KYC document validation
- Fraud prevention and anti-money laundering screening services
- Responsible gaming databases that maintain records of self-excluded individuals
In each case, 99xx only requests and receives the minimum data necessary for the specific purpose involved and ensures that third-party sources operate under appropriate data protection obligations.
Section 04
Why We Use Your Personal Data
99xx uses the personal data we collect for the following specific purposes. We do not use your data for any purpose not listed here without first obtaining your consent or unless otherwise required by applicable law.
4.1 Account Management
We use your identity and contact data to create and manage your player account, authenticate your identity at login, communicate account-related updates, and respond to your support requests. This processing is fundamental to delivering the Platform service and cannot be opted out of while your account remains active.
4.2 KYC Identity Verification
We process identity, contact, and verification data to fulfil our obligation to verify that all players are aged 21 or above, are who they claim to be, and are eligible to use the Platform. KYC processing is a mandatory precondition for withdrawal of funds.
4.3 Payment Processing
Financial data is processed to facilitate deposits from and withdrawals to your registered payment methods, to detect and prevent fraudulent transactions, and to maintain accurate financial records as required by applicable accounting and compliance obligations.
4.4 Fraud Prevention & Platform Security
Technical and usage data is processed to monitor for suspicious activity, detect and prevent multi-accounting, identify unauthorised access attempts, and maintain the integrity of the Platform and its gaming markets. This processing is carried out in the legitimate interest of 99xx and its player community.
4.5 Responsible Gaming Compliance
Responsible gaming data and usage data are processed to monitor player behaviour for signs of problem gambling, enforce deposit limits and self-exclusion requests, and fulfil our ethical commitment to player welfare. Where a player has self-excluded, we retain a record of that exclusion to prevent re-registration.
4.6 Legal & Regulatory Compliance
We may process any category of personal data where necessary to comply with a legal obligation, respond to a lawful request from a competent authority, or pursue or defend legal claims.
4.7 Platform Improvement
Anonymised and aggregated usage data is used to analyse how players interact with the Platform, identify technical issues, and improve the overall user experience. This analysis does not involve processing your data in a way that identifies you personally.
4.8 Marketing Communications
Where you have given explicit consent, we may use your contact data to send you promotional offers, bonus notifications, and news about 99xx products and services. You may withdraw this consent at any time — see Section 12 for details.
Section 05
Legal Basis for Processing
99xx processes your personal data on one or more of the following legal bases depending on the specific processing activity involved:
- Contractual Necessity: Processing required to fulfil the Terms & Conditions you agreed to when registering your account, including account management, payment processing, and game delivery.
- Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC identity verification, anti-money laundering obligations, and age verification requirements.
- Legitimate Interests: Processing carried out to pursue the legitimate interests of 99xx and its player community, including fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your fundamental rights and freedoms.
- Consent: Processing carried out on the basis of your explicit, freely given, specific, informed, and unambiguous consent — principally for marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
Section 06
Data Sharing & Third-Party Disclosure
99xx does not sell, rent, or trade your personal data to any third party for their own commercial purposes. Personal data is only shared in the following circumstances:
6.1 Service Providers
We share personal data with carefully selected third-party service providers who perform functions on our behalf, including payment processing (bKash, Nagad, Rocket, Upay, Visa, Mastercard), KYC identity verification, IT infrastructure and hosting, customer support technology, and fraud detection. All service providers are contractually required to process your data only as instructed by 99xx and to maintain security standards equivalent to those we apply ourselves.
6.2 Game Content Providers
Where you play games delivered by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi, limited technical data (such as session tokens and game round identifiers) may be exchanged with the relevant provider for the purpose of delivering and settling the game. These providers do not receive your identity or financial data except as strictly necessary for regulatory compliance on their part.
6.3 Legal & Regulatory Disclosure
We may disclose personal data to competent authorities, law enforcement agencies, regulatory bodies, or courts where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of 99xx, its players, or the public.
6.4 Business Transfers
In the event of a merger, acquisition, restructuring, or sale of all or part of the 99xx business, personal data held by 99xx may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer via email and this Privacy Policy will be updated accordingly.
Section 07
Data Retention
99xx retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Identity Data | Duration of account plus 5 years after closure | Legal and regulatory compliance |
| Financial & Transaction Data | 7 years from the date of the transaction | Financial record-keeping obligations |
| KYC Verification Documents | 5 years from account closure or last transaction | Anti-money laundering compliance |
| Self-Exclusion Records | Indefinitely (minimum 12 months active) | Responsible gaming obligation |
| Support Communications | 3 years from last interaction | Legitimate interests (dispute resolution) |
| Technical & Usage Data | 13 months from collection | Platform improvement and fraud prevention |
| Marketing Consent Records | Until consent is withdrawn, plus 2 years | Legal accountability for consent |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with 99xx's internal data destruction procedures. Where data is anonymised rather than deleted, it may be retained indefinitely for statistical and analytical purposes without identifying you personally.
Section 08
Data Security Measures
99xx implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security programme includes the following measures:
- Transport Encryption: All data transmitted between your device and the 99xx platform is encrypted using 256-bit SSL/TLS protocols, ensuring that data in transit cannot be intercepted or read by unauthorised parties.
- Data Storage Security: Personal data is stored on secured servers with access controls, firewall protection, and intrusion detection systems. Financial data and sensitive personal data are stored in encrypted form.
- Access Controls: Access to personal data by 99xx personnel is restricted on a strict role-based need-to-know basis. All personnel with access to personal data are subject to confidentiality obligations and receive regular data protection training.
- Fraud Detection Systems: Real-time automated monitoring systems are in place to detect unusual account activity, suspicious transactions, and potential security breaches. Alerts are reviewed by the security team around the clock.
- Incident Response: 99xx maintains a documented data breach response procedure. In the event of a security incident that poses a risk to your personal data, we will notify affected players and, where required, the relevant authorities within the legally required timeframe.
- Third-Party Security Assessment: Service providers who process personal data on our behalf are assessed for security compliance before engagement and are required to maintain equivalent security standards to those applied by 99xx.
Section 09
Cookies & Tracking Technologies
The 99xx platform uses cookies and similar technologies to deliver a functional, personalised, and secure gaming experience. A cookie is a small text file stored on your device by your browser when you visit a website. Cookies allow the Platform to recognise your device, remember your preferences, and maintain your login session.
9.1 Types of Cookies Used
- Strictly Necessary Cookies: These are essential for the Platform to function correctly. They maintain your login session, remember your account preferences, and enable secure transactions. These cookies cannot be disabled without significantly impairing Platform functionality.
- Performance Cookies: These collect anonymised information about how players interact with the Platform — such as pages visited and error messages encountered — to help us improve Platform performance. No personally identifiable information is collected by performance cookies.
- Functionality Cookies: These remember choices you have made on the Platform (such as language preferences and responsible gaming settings) to provide a more personalised experience on return visits.
- Security Cookies: These are used to detect and prevent fraud, protect against cross-site request forgery attacks, and ensure the integrity of sessions on the Platform.
9.2 What We Do Not Use Cookies For
99xx does not use third-party advertising cookies, retargeting cookies, or tracking technologies designed to follow you across other websites on the internet. We do not share cookie data with advertisers or data brokers.
9.3 Managing Cookies
You may manage your cookie preferences through your browser settings at any time. Most browsers allow you to view, delete, and block cookies from specific websites. Please note that disabling strictly necessary cookies may prevent certain Platform features from functioning correctly, including login and payment processing. Detailed instructions for managing cookies in the most common browsers are available on the browser provider's support pages.
Section 10
Your Data Protection Rights
As a player on the 99xx platform, you hold a number of rights in relation to your personal data. 99xx is committed to respecting and facilitating these rights. To exercise any of the rights listed below, please contact [email protected] with your full name, registered email address, and a description of the right you wish to exercise.
- Right of Access: You have the right to request a copy of all personal data that 99xx holds about you. We will provide this in a structured, commonly used, machine-readable format within 30 days of your verified request.
- Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. We will action verified correction requests within 14 days.
- Right to Erasure: In certain circumstances, you have the right to request that we delete your personal data. This right is subject to exceptions where processing is required to fulfil legal obligations (such as AML data retention requirements) or to establish, exercise, or defend legal claims.
- Right to Restriction of Processing: You may request that we temporarily restrict the processing of your personal data while a dispute about its accuracy or lawfulness is being resolved.
- Right to Data Portability: Where processing is based on your consent or on contractual necessity, you have the right to receive your personal data in a structured format and to transmit it to another service provider.
- Right to Object: You have the right to object to processing carried out on the basis of legitimate interests. We will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
- Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before the withdrawal.
Section 11
Children's Privacy & Age Restriction
The 99xx platform is strictly for adults aged 21 and above. 99xx does not knowingly collect personal data from any person under the age of 21 and takes active steps to detect and prevent underage access through mandatory age verification during registration and KYC processes.
If 99xx becomes aware that personal data has been collected from a person under the age of 21 — whether through registration fraud, misrepresentation, or any other means — we will immediately suspend the relevant account, delete all personal data associated with that account to the extent permitted by law, and forfeit any balance in accordance with the Terms & Conditions.
Parents and guardians who believe that a minor may have registered on the 99xx platform are urged to contact [email protected] immediately with details of the concern. 99xx will treat all such reports with the highest priority and will take immediate protective action.
Section 12
Marketing Communications & Opt-Out
99xx may send you promotional emails, SMS notifications, and in-platform messages about bonuses, new games, seasonal promotions, and other 99xx products and services where you have explicitly opted in to receiving such communications during registration or at a later point through your account settings.
You may opt out of marketing communications at any time through any of the following methods:
- Clicking the unsubscribe link included in any marketing email sent by 99xx
- Updating your communication preferences in your account settings on the Platform
- Contacting the support team at [email protected] and requesting removal from all marketing lists
Opt-out requests will be processed within 5 business days. Please note that opting out of marketing communications does not affect transactional communications such as account verification emails, deposit confirmations, withdrawal notifications, and security alerts — these are sent as part of the core Platform service and cannot be disabled while your account is active.
Section 13
Changes to This Privacy Policy
99xx reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, our data processing practices, or the features and services offered on the Platform. The effective date and version number at the top of this document will be updated whenever a change is made.
Where changes are material — meaning they significantly affect your rights or how we use your personal data — 99xx will notify registered players by email at least 14 days before the changes take effect. Continued use of the Platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms.
We encourage you to review this Privacy Policy periodically to stay informed about how 99xx is protecting your data. Archived versions of previous Privacy Policy documents are available upon request by contacting [email protected].
Section 14
Contact & Data Enquiries
If you have any questions, concerns, or requests relating to this Privacy Policy or the way 99xx processes your personal data, please contact us using the details below. All data-related enquiries are handled by our dedicated support team and are treated with strict confidentiality.
- Email: [email protected] (plain text — not a clickable link)
- Support Hours: 24/7, Bangladesh Standard Time (BST, UTC+6)
- Average Response Time: Under 5 minutes during BST business hours; under 2 hours at all other times
- Subject Line Recommended: "Privacy Policy Enquiry — [Your Registered Email]"
For responsible gaming related data concerns — such as requests relating to self-exclusion records or responsible gaming history — please also visit the Responsible Gaming page for additional guidance and tooling.
Questions About Your 99xx Privacy? We Are Here 24/7
Our English-speaking support team is available around the clock to address any data privacy concern, help you exercise your data rights, or simply answer questions about how 99xx protects your personal information. You can also review our FAQ, explore the full game lobby, or check our Responsible Gaming page.