Privacy Policy
99x0 — Your Data, Our Responsibility
At 99x0, protecting the personal information of our players is a core commitment. This Privacy Policy explains in plain English exactly what data we collect, why we collect it, how we use it, who we share it with, and what rights you have over your own information. We believe transparency builds trust — and trust is the foundation of every great platform.
How 99x0 Protects Your Information
These six principles summarise the way 99x0 approaches data privacy. They complement — but do not replace — the full legal text below.
We Collect Only What We Need
99x0 collects personal data strictly for the purposes of account management, identity verification, payment processing, and regulatory compliance. We do not collect data speculatively or for purposes unrelated to your use of the platform.
Your Data Is Encrypted End-to-End
All data transmitted between your device and the 99x0 platform is protected using 256-bit SSL/TLS encryption. Stored data — including identity documents and payment records — is held in encrypted, access-controlled systems.
We Never Sell Your Data
99x0 does not sell, rent, or trade your personal data to third parties for commercial marketing purposes. Data shared with third parties is limited to service partners who help us operate the platform, and is governed by strict data processing agreements.
You Control Your Data
You have the right to access, correct, export, and request deletion of your personal data at any time. Submit a data request to [email protected] and we will respond within 30 days. Certain data may be retained to fulfil legal obligations.
Defined Retention Periods
99x0 retains personal data only for as long as necessary to fulfil the purpose for which it was collected or as required by applicable law. Account data is retained for a minimum of 5 years following account closure for AML compliance purposes.
Breach Notification
In the unlikely event of a data breach that affects your personal information, 99x0 will notify affected players via their registered email address within 72 hours of becoming aware of the incident, along with guidance on protective steps to take.
Scope and Data Controller
This Privacy Policy applies to all personal data collected and processed by 99x0 (referred to throughout as "99x0", "we", "us", or "our") in connection with the operation of the online casino and sports betting platform accessible at https://99x0.io (the "Platform"). It covers all users who visit, register on, or otherwise interact with the Platform, including players based in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, and all other regions of Bangladesh.
For the purposes of this policy, 99x0 acts as the data controller — meaning we are responsible for determining the purposes and means by which your personal data is processed. Where we engage third-party service providers to process data on our behalf (for example, payment processors or game studios), those parties act as data processors under our instruction and are contractually bound by data processing agreements consistent with this policy.
This Privacy Policy should be read in conjunction with the 99x0 Terms & Conditions and our Responsible Gaming Policy.
Data We Collect
99x0 collects personal data from you in several ways: directly when you register or interact with the Platform, automatically through your use of the Platform, and from third parties such as payment processors. The categories of personal data we collect are set out below.
2.1 Registration and Account Data
- Full legal name
- Date of birth (used for mandatory age verification — players must be 21 or older)
- Residential address (including city, district, and postcode)
- Email address
- Mobile phone number
- Username and encrypted password
- Account preferences and communication settings
2.2 Identity Verification (KYC) Data
- Scanned copy or photograph of a valid National Identity Card (NID), passport, or birth certificate
- Proof of address documents (e.g., utility bill, bank statement)
- Selfie or facial photograph for liveness verification, where required
- Tax identification number, where applicable under local law
2.3 Financial and Transaction Data
- Mobile Financial Service (MFS) account numbers used for bKash, Nagad, Rocket, or Upay transactions
- Bank account details for bank transfer deposits and withdrawals
- Card details (card number, expiry date — handled via PCI-DSS compliant processors; 99x0 does not store full card numbers)
- Deposit and withdrawal history, amounts, timestamps, and method used
- Bonus transaction history
2.4 Gameplay and Betting Data
- Game session history, including game titles, stake amounts, outcomes, and session duration
- Sports betting history, including markets selected, odds accepted, and settlement results
- Bonus usage, wagering progress, and promotional participation records
2.5 Technical and Device Data
- IP address and approximate geographic location derived from IP
- Device type, operating system, and browser version
- Device fingerprint identifiers used for fraud prevention
- Session duration and pages visited within the Platform
- Referring URL (how you arrived at the Platform)
2.6 Communications Data
- Content of emails, live chat transcripts, and support tickets exchanged with the 99x0 support team
- Records of any promotional communications you have opted into or out of
How We Use Your Data
The personal data 99x0 collects is used for the following purposes:
| Purpose | Data Categories Used |
|---|---|
| Account creation and management | Registration data, KYC data |
| Age and identity verification (21+ compliance) | KYC data, date of birth |
| Processing deposits and withdrawals | Financial data, registration data |
| Delivering casino and sports betting services | Gameplay data, account data |
| Fraud detection and prevention | Technical data, financial data, gameplay data |
| Anti-money laundering (AML) monitoring | Financial data, KYC data, account data |
| Responsible gaming tools and monitoring | Gameplay data, account data, communications data |
| Customer support communications | Communications data, account data |
| Platform analytics and improvement | Technical data, gameplay data (aggregated/anonymised) |
| Promotional communications (opt-in only) | Registration data, gameplay data |
99x0 does not use personal data for automated individual decision-making that produces legal or similarly significant effects, except as part of fraud and AML monitoring systems. Where automated monitoring flags an account, a human review is conducted before any account action is taken.
Legal Basis for Processing
99x0 processes your personal data on the following legal grounds:
- Contractual necessity: Processing required to perform the contract between you and 99x0 — including account creation, payment processing, and delivery of gaming services.
- Legal obligation: Processing required to comply with applicable laws — including age verification (21+ requirement), AML obligations, and KYC regulations.
- Legitimate interests: Processing carried out for 99x0's legitimate business interests, including fraud prevention, platform security, gameplay analytics, and responsible gaming monitoring, provided these interests are not overridden by your rights and interests.
- Consent: Processing based on your explicit consent, primarily for optional promotional communications. You may withdraw consent at any time by updating your account preferences or contacting [email protected].
Cookies and Tracking Technologies
99x0 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small data files stored on your device when you visit the Platform. The following categories of cookies are used:
- Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies and security tokens. They cannot be disabled without breaking the Platform.
- Functional Cookies: Used to remember your preferences such as language, display settings, and responsible gaming tool configurations.
- Analytics Cookies: Used to collect aggregated, anonymised data about how players navigate and use the Platform. This helps us identify popular games, improve page performance, and fix usability issues.
- Fraud Prevention Cookies: Used as part of our device fingerprinting system to detect suspicious activity, duplicate accounts, and bot access attempts.
You can manage cookie preferences through your browser settings. Note that disabling non-essential cookies may affect certain Platform features. 99x0 does not use third-party advertising cookies or cross-site tracking pixels for external ad targeting.
Data Sharing and Disclosure
99x0 does not sell your personal data. We share data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:
- Payment Processors: We share financial data with payment service providers — including bKash, Nagad, Rocket, Upay, and card processing partners — to facilitate deposits and withdrawals. These providers receive only the data necessary to process the specific transaction.
- Game Providers: When you play a game developed by a third-party studio (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi), a session token and anonymised player identifier are shared with the provider's systems to enable gameplay. Full personal data is not shared with game studios.
- KYC and Identity Verification Partners: Where 99x0 uses a third-party KYC platform to verify identity documents, the minimum required data is shared under a data processing agreement.
- Fraud and Security Providers: Technical data including IP addresses and device fingerprints may be shared with fraud prevention services to protect the Platform and its players.
- Legal and Regulatory Authorities: 99x0 will disclose personal data to law enforcement agencies, financial intelligence units, or regulatory authorities where required to do so by applicable law, court order, or where we have a good-faith belief that disclosure is necessary to prevent fraud, money laundering, or harm to persons.
- Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of 99x0's assets, player data may be transferred to the acquiring entity, subject to equivalent data protection obligations.
All third-party data processors engaged by 99x0 are subject to contractual data processing agreements that require them to process personal data only on our instructions, maintain appropriate security standards, and not use the data for their own independent purposes.
International Data Transfers
The 99x0 Platform serves players primarily based in Bangladesh. Certain third-party service partners — including game providers and technical infrastructure providers — may process or store data on servers located outside Bangladesh. Where such transfers occur, 99x0 takes steps to ensure that your personal data receives an equivalent level of protection regardless of where it is processed.
Safeguards for international transfers include:
- Data processing agreements containing standard contractual data protection clauses
- Transfer only to countries or organisations with recognised adequate data protection standards
- Technical measures including encryption in transit and at rest, applied consistently regardless of server location
If you have questions about where your data is stored or processed, please contact us at [email protected].
Data Retention
99x0 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following general retention periods apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | AML and KYC legal obligation |
| KYC / identity documents | Duration of account + 5 years post-closure | Regulatory and legal compliance |
| Financial transaction records | 7 years from transaction date | Financial record-keeping obligations |
| Gameplay and betting history | Duration of account + 3 years post-closure | Dispute resolution and fraud prevention |
| Support communications | 3 years from last interaction | Dispute resolution and quality assurance |
| Technical/device logs | 12 months from collection | Security monitoring and fraud prevention |
| Marketing preferences | Until consent withdrawn or account closed | Consent-based processing |
Following the expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be linked to you as an individual.
Your Data Rights
As a player on the 99x0 Platform, you have the following rights regarding your personal data. To exercise any of these rights, please submit a written request to [email protected]. We will respond within 30 calendar days.
To submit a data rights request, email [email protected] with the subject line "Data Rights Request" and your registered account username. We may need to verify your identity before processing the request.
Children's Privacy
The 99x0 Platform is strictly for adults aged 21 and above. We do not knowingly collect or process personal data belonging to any person under the age of 21. If we discover that personal data has been submitted by or on behalf of a person under 21, we will immediately delete that data, close the associated account, and return any deposited funds to the originating payment source.
99x0 encourages parents and guardians to use parental control software to restrict access to gambling websites from devices used by minors. Resources and guidance on parental controls are available from major internet service providers and device manufacturers.
Security Measures
99x0 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:
- 256-bit SSL/TLS encryption on all data transmitted between your browser or app and our servers
- Encryption at rest for all stored personal data and financial records using industry-standard encryption algorithms
- Access controls limiting internal access to personal data to authorised personnel on a need-to-know basis, enforced through role-based permissions and multi-factor authentication
- Network security including firewalls, intrusion detection systems, and regular vulnerability scanning
- PCI-DSS compliance for all payment card data handling, managed through certified third-party payment processors
- Regular security audits and penetration testing conducted by independent security professionals
- Incident response procedures enabling rapid containment and notification in the event of a security breach
While 99x0 takes every reasonable precaution to protect your data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the security of your own account credentials. If you suspect that your account has been compromised, contact [email protected] immediately.
Third-Party Links and Services
The 99x0 Platform does not contain links to third-party websites for general browsing purposes. However, game content delivered by third-party studios (such as Pragmatic Play, Evolution Gaming, Spribe, and others) is embedded within the Platform. When you load and play a game from a third-party provider, a direct connection is established between your device and that provider's servers for the purpose of delivering the game content.
The data practices of these game providers within their own game environments are governed by their own privacy policies. 99x0 is not responsible for the data handling practices of third-party game studios beyond the contractual obligations imposed via our data processing agreements. We recommend reviewing the privacy documentation of any game provider if you have specific concerns about in-game data collection.
Updates to This Privacy Policy
99x0 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, changes in applicable law, or improvements to the Platform. The effective date shown at the top of this page will be updated whenever a revision is published.
Where we make a material change to this Privacy Policy — meaning a change that significantly affects your rights or the way we use your personal data — we will notify registered players via the email address associated with their account at least 7 calendar days before the change takes effect. We may also display a notice within the Platform to draw attention to important updates.
Your continued use of the 99x0 Platform after any update to this Privacy Policy constitutes your acceptance of the revised policy. If you do not agree with the updated terms, you should stop using the Platform and may close your account by contacting [email protected].
We recommend reviewing this Privacy Policy periodically to stay informed about how 99x0 handles your personal data. Previous versions of this policy are available on request by contacting our support team.
Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the way 99x0 handles your personal data, please contact our dedicated privacy support team using the details below:
Email: [email protected]
Subject Line: "Privacy Policy Enquiry" or "Data Rights Request"
Availability: 24 hours a day, 7 days a week
Response Time: Within 30 calendar days for data rights requests; within 24 hours for general queries
Language: English
Please note that the email address above is displayed as plain text only and is not a clickable link. To contact us, copy the address into your email client manually. 99x0 support staff will never ask for your account password or full payment card number in any communication.
Questions About Your Privacy or Account Data?
Our English-language support team is online 24/7. You can also explore our FAQ, review our Responsible Gaming tools, or head straight to the casino.
21+ only. Gambling involves financial risk. Please play responsibly.