Privacy Policy

1. Introduction

Welcome to 99xx. We are committed to protecting the privacy and personal data of every user who accesses our platform. This Privacy Policy explains how 99xx collects, processes, stores, and safeguards your information when you use our website and gaming services, which are available to players in Bangladesh and other jurisdictions where we operate.

By creating an account or continuing to use 99xx, you acknowledge that you have read and understood this Privacy Policy. If you have any concerns about how your data is handled, you are encouraged to contact our support team at [email protected] before proceeding. We review and update this policy periodically to reflect changes in our practices and applicable laws.

2. Information We Collect

2.1 Information You Provide Directly

When you register an account on 99xx or interact with our services, you may provide us with the following types of personal information:

• Full name, date of birth, and contact details (email address, phone number)
• Residential address, city (e.g. Dhaka, Chittagong, Sylhet), and country of residence
• Government-issued identification documents submitted during Know Your Customer (KYC) verification
• Financial account details associated with payment methods such as bKash, Nagad, Rocket, or Upay
• Username, password (stored in encrypted form), and any preferences or settings you configure

2.2 Information Collected Automatically

When you visit or use the 99xx platform, our systems automatically record certain technical and behavioural information, including:

• IP address, browser type, operating system, and device identifiers
• Pages visited, time spent on each page, and clickstream data within the 99xx website
• Session cookies and similar tracking technologies used solely to maintain your login session and improve platform performance

3. How We Use Your Information

99xx processes personal data strictly for the purposes outlined below. We do not use your data for any purpose beyond what is described in this Privacy Policy without your prior consent:

• Account registration, identity verification (KYC), and account management throughout your time on the platform
• Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment channels
• Delivering customer support, responding to enquiries, and resolving disputes in a timely and fair manner
• Sending promotional communications and bonus offers — only if you have opted in to receive marketing messages
• Complying with legal obligations, preventing fraud, and maintaining the integrity and fairness of our gaming environment

4. Payment Data and Financial Information

99xx facilitates deposits and withdrawals through trusted mobile financial services widely used across Bangladesh, including bKash, Nagad, Rocket, and Upay. All financial transactions processed on our platform are handled through encrypted, secure payment gateways. We do not store complete mobile banking PINs, full card numbers, or other sensitive financial credentials on our servers.

We retain transaction records for the minimum period required by applicable financial regulations. These records are used solely for audit purposes, dispute resolution, and compliance with anti-money-laundering requirements. They are not shared with third parties except where required by law.

5. Cookies and Tracking Technologies

99xx uses cookies and similar lightweight tracking technologies to deliver a smooth, personalised experience. These are limited in scope and serve specific functional purposes:

• Session cookies that keep you logged in while you navigate between pages during your gaming session
• Preference cookies that remember your language selection and display settings
• Analytics cookies that help us understand aggregate usage patterns so we can improve the platform for all users
• Security cookies that detect and prevent fraudulent login attempts and protect your account from unauthorised access

6. Sharing Your Information

99xx does not sell, rent, or trade your personal data to any third party for marketing or commercial gain. We may share your data only in the following limited and controlled circumstances: with trusted payment processors (e.g. bKash, Nagad) to complete your transactions; with KYC verification partners to confirm your identity; with regulatory authorities or law enforcement agencies when required by applicable law; and with IT service providers who help us maintain and operate the 99xx platform under strict data-processing agreements.

All third-party partners with whom 99xx shares data are contractually bound to handle your personal information with the same level of care and confidentiality that we apply ourselves. We do not permit them to use your data for their own marketing activities.

7. Data Security

The security of your personal data is a core operational priority at 99xx. We employ the following technical and organisational measures to keep your information safe:

• SSL (Secure Sockets Layer) encryption for all data transmitted between your device and our servers
• Hashed and salted password storage — your login credentials are never stored in plain text
• Restricted access controls — only authorised 99xx personnel with a legitimate need can access your personal data
• Regular security audits and vulnerability assessments to identify and address potential weaknesses promptly
• Secure server infrastructure with firewalls and intrusion-detection systems operating 24 hours a day, 7 days a week

While we take all reasonable precautions to protect your data, no internet-based platform can guarantee absolute security. We encourage you to use a strong, unique password for your 99xx account and to keep your login credentials confidential.

8. Data Retention

99xx retains your personal data for as long as your account remains active and for a reasonable period thereafter, sufficient to fulfil the purposes outlined in this Privacy Policy. Specifically: account information is retained for the duration of your account's existence plus any legally mandated retention period; transaction records are retained in accordance with applicable financial record-keeping requirements; marketing preferences and communication logs are retained until you withdraw consent or unsubscribe.

When your data is no longer required, we securely delete or anonymise it in accordance with our data lifecycle management procedures. Anonymised, aggregated data that cannot be used to identify any individual may be retained indefinitely for statistical and analytical purposes.

9. Your Rights and Choices

As a 99xx user, you have specific rights regarding your personal data. You may exercise any of the following rights by contacting our support team at [email protected]:

• Right of access — request a copy of the personal data we hold about you
• Right of rectification — ask us to correct any inaccurate or incomplete personal data without undue delay
• Right of erasure — request deletion of your personal data where there is no compelling reason for its continued processing
• Right to withdraw consent — where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing

We aim to respond to all data rights requests within 30 days of receipt. In complex cases, this period may be extended by a further 30 days, and we will notify you of any such extension and its reasons.

10. Children and Age Verification

99xx is strictly an adult platform. Our services are available only to individuals who are 21 years of age or older. We do not knowingly collect personal data from anyone under the age of 21. During the registration process, all new users are required to confirm their age and submit identification documents as part of KYC verification.

If we discover that we have inadvertently collected personal data from a minor, we will immediately delete that data from our systems and, where necessary, terminate the associated account. If you believe that a minor has registered on 99xx, please contact us immediately at [email protected].

11. International Data Transfers

99xx primarily processes and stores data in secure server environments. In some cases, personal data may be transferred to or accessed from locations outside Bangladesh in connection with the third-party service providers described in Section 6. Whenever such transfers occur, we ensure that adequate data protection safeguards are in place, consistent with our obligations under applicable law.

We do not transfer your personal data to countries with inadequate data protection frameworks without first ensuring that appropriate contractual, technical, and organisational safeguards are in place to protect your rights and the confidentiality of your information.

12. Changes to This Privacy Policy

99xx reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or business operations. When we make material changes, we will post the revised policy on this page with an updated effective date and, where appropriate, notify registered users via email or an in-platform notification before the changes take effect.

We encourage you to review this Privacy Policy periodically to stay informed about how 99xx protects your personal data. Your continued use of the platform following the posting of any changes constitutes your acceptance of the revised Privacy Policy.