99x Privacy Policy

This Privacy Policy ("Policy") is published by 99x ("the Company", "we", "us", "our"), the operator of the online casino and sports betting platform available at https://99x.lol (the "Platform"). This Policy applies to all users ("you", "your") who access or use the Platform, whether as a registered account holder or as a visitor browsing the site.

99x is committed to protecting the privacy and personal data of all users of our Platform. We operate in accordance with applicable data protection principles and take our obligations seriously. This Policy is designed to give you a clear understanding of our practices so that you can make informed decisions about the information you share with us.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming guidelines. Where these documents overlap, the Terms & Conditions will take precedence except on matters specifically governed by this Privacy Policy.

99x collects several categories of personal data from users of the Platform. The categories, specific data types, and the primary reason for collection are summarised in the table below:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (other than as required for mandatory identity verification), or health data, except where you have voluntarily disclosed health-related information in the context of a responsible gaming self-exclusion or support request.

99x collects personal data through the following means:

3.1 Direct Collection

You provide personal data directly to us when you register an account, complete KYC verification, make a deposit or withdrawal request, contact our support team, or respond to a promotional offer. The accuracy of this data is your responsibility, and you warrant that all information provided to 99x is true and current.

3.2 Automated Collection

When you visit or interact with the 99x Platform, we automatically collect certain technical and usage data through cookies, server logs, and similar tracking technologies. This includes your IP address, browser fingerprint, device identifiers, and behavioural patterns within the Platform. See Section 7 (Cookies & Tracking) for full details.

3.3 Third-Party Sources

We may receive data about you from third-party identity verification providers when you submit KYC documents, from payment processors such as bKash, Nagad, and Rocket when transactions are initiated, and from fraud-prevention and risk-screening services that help us maintain the security of the Platform. Data received from these sources is handled with the same care as data collected directly.

99x uses the personal data we collect for the following purposes:

• Account Management: To create, maintain, and administer your 99x account, verify your identity, and process your login credentials securely.
• Payment Processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, and Upay, and to reconcile your account balance accurately.
• Fraud & Security: To detect and prevent fraudulent activity, money laundering, multi-accounting, and other prohibited conduct as described in our Terms & Conditions.
• Responsible Gaming: To monitor betting patterns for signs of problem gambling, to apply deposit limits or self-exclusion measures you have requested, and to fulfil our duty of care to all players.
• Customer Support: To respond to your queries, resolve complaints, and maintain a record of communications for quality assurance.
• Platform Improvement: To analyse usage data and improve the design, performance, and game selection of the 99x Platform.
• Legal Compliance: To meet record-keeping, reporting, and cooperation obligations under applicable law, and to respond to lawful requests from regulatory or law enforcement authorities.
• Marketing (with consent): To send you promotional offers, bonus notifications, and platform updates via SMS or email, but only where you have explicitly opted in to receive such communications. You may opt out at any time.

99x processes your personal data on the following legal grounds:

• Contractual Necessity: Processing is necessary to perform our obligations under the Terms & Conditions you agreed to when registering your account. This covers account management, payment processing, and game operation.
• Legal Obligation: Processing is required to comply with applicable law, including anti-money laundering (AML) requirements, Know Your Customer (KYC) obligations, and cooperation with regulatory or law enforcement authorities.
• Legitimate Interests: Processing is carried out in pursuit of 99x's legitimate business interests, including fraud prevention, security monitoring, and platform improvement, where those interests are not overridden by your privacy rights.
• Consent: Where we process your data for marketing purposes or for optional features beyond what is required to operate your account, we rely on your explicit consent, which you may withdraw at any time without affecting the lawfulness of prior processing.

99x does not sell, rent, or trade your personal data. We share your data only in the limited circumstances described below:

6.1 Service Providers

We engage trusted third-party service providers to support the operation of the Platform. These include identity verification providers, payment processors (bKash, Nagad, Rocket, Upay), customer support software providers, and data hosting infrastructure providers. All service providers are contractually required to process your data only on our instructions, implement appropriate security measures, and keep it strictly confidential.

6.2 Legal & Regulatory Disclosure

We may be required to disclose personal data to government authorities, regulators, or law enforcement agencies when required by law or in response to a valid legal process. In such cases, 99x will disclose only the minimum amount of data necessary to satisfy the legal obligation and will, where legally permitted, notify the affected user of the disclosure request.

6.3 Fraud Prevention Networks

Where 99x reasonably believes that a user has engaged in fraudulent activity, we may share relevant account information with industry fraud-prevention networks and relevant authorities to protect the integrity of the Platform and the interests of legitimate players.

6.4 Business Transfers

In the event of a merger, acquisition, or sale of all or part of 99x's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. In such circumstances, we will provide advance notice to registered users and ensure that the receiving entity is bound by data protection obligations no less stringent than those in this Policy.

The 99x Platform uses cookies and similar tracking technologies to deliver, maintain, and improve your experience. Cookies are small text files stored on your device by your browser when you visit the Platform. The following categories of cookies are used:

You can control cookie settings through your browser preferences. Disabling strictly necessary cookies will impair your ability to use core features of the Platform, including logging in. Disabling analytics cookies will not affect your ability to play games or make transactions.

99x retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by law. The following retention periods apply as a general guide:

• Account and Identity Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with anti-money laundering record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction.
• Support Communications: Retained for three (3) years from the date of the communication, or until any associated dispute is resolved, whichever is later.
• Technical and Usage Data: Aggregated analytics data may be retained indefinitely in anonymised form. Identifiable usage logs are retained for up to twelve (12) months.
• Marketing Consent Records: Retained for as long as your account is active plus two (2) years, to demonstrate consent compliance.

When data is no longer required, it is securely deleted or anonymised in accordance with our data disposal procedures. Where legal obligations require us to retain data beyond the standard periods above, we will retain only the minimum data necessary to satisfy those obligations.

99x implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS Encryption: All data in transit between your device and the 99x Platform is encrypted using industry-standard SSL/TLS protocols.
• Password Hashing: Account passwords are stored using strong cryptographic hashing algorithms. 99x staff cannot view your password in plain text.
• Access Controls: Access to personal data within our organisation is restricted to staff who have a legitimate operational need to process it, and all access is logged and audited.
• Infrastructure Security: Our platform infrastructure is hosted in secure data centres with physical and logical access controls, firewalls, intrusion detection systems, and regular vulnerability assessments.
• Incident Response: In the event of a data security incident that is likely to result in a risk to your rights and freedoms, 99x will notify affected users as promptly as is practicable, providing details of the nature of the incident and the steps being taken to address it.

As a user of the 99x Platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request" and include your registered mobile number for verification purposes. We will respond within thirty (30) days.

• Right of Access: You have the right to request a copy of the personal data 99x holds about you and to receive information about how it is processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Restriction: You have the right to request that we restrict the processing of your personal data in certain circumstances, such as while a dispute over the accuracy of your data is being resolved.
• Right to Data Portability: You have the right to receive a copy of the personal data you have provided to 99x in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where it is based on legitimate interests, including processing for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Please note that certain rights are subject to exemptions. For example, we cannot delete data we are legally obliged to retain under anti-money laundering regulations. Where an exemption applies, we will explain this clearly in our response to your request.

The 99x Platform is strictly intended for adults aged 18 and above. We do not knowingly collect personal data from any person under the age of 18. Our registration process includes age verification steps, and we reserve the right to request documentary proof of age from any user at any time.

The 99x Platform integrates with third-party services to deliver its full range of features. These include live casino game studios (such as Evolution Gaming, Ezugi, and Pragmatic Play), payment processors (bKash, Nagad, Rocket, Upay), and identity verification providers. When you interact with these third-party services through the Platform, they may process certain data about you under their own privacy policies.

99x is not responsible for the privacy practices of third-party game providers or payment processors. We recommend that you review the privacy policies of any third-party service you interact with. Our agreements with all integrated service providers include contractual data protection requirements to ensure your information is handled responsibly.

The 99x Platform does not contain links to third-party websites outside of the services directly integrated into the Platform. You should not encounter outbound links to external sites during your normal use of 99x. If you do encounter a suspicious link, please report it to our support team immediately.

99x reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made to this Policy, we will notify registered users via the mobile number or email address associated with their account at least seven (7) days before the changes take effect, where practicable.

The "Last Updated" date at the top of this Policy will always reflect the date of the most recent revision. We encourage you to review this Policy periodically to stay informed about how 99x protects your personal data. Your continued use of the Platform after the effective date of any revised Policy constitutes your acceptance of the updated terms.

If you have any objections to material changes in how we process your personal data, you have the right to close your account and request deletion of your data in accordance with Section 10 of this Policy, subject to our legal retention obligations.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 99x handles your personal data, please contact our support team through any of the following channels. All data rights requests should include your registered mobile number for identity verification.

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 directly from the 99x Platform
• WhatsApp: +880 1700-000000
• Subject Line for Data Requests: "Data Rights Request — [Your Registered Mobile Number]"
• Response Time: 99x aims to acknowledge all privacy-related queries within 48 hours and to provide a full response within thirty (30) days (Bangladesh Standard Time, UTC+6)