Privacy Policy — Your Data, Protected by 99xq

1. Introduction

99xq is Bangladesh's trusted online betting and casino platform, offering cricket betting, live dealer casino games, slot titles, and skill-based games to adults aged 21 and above. The protection of your personal data is a core operational value at 99xq, not simply a compliance obligation. This Policy has been prepared to give you full transparency over every aspect of how your personal information is handled from the moment you visit the 99xq website to the point at which your account is eventually closed.

This Policy applies to all personal data processed in connection with your use of the 99xq platform, including data submitted during registration, data generated through your use of our services, data collected automatically through technical means, and data received from third-party payment and identity verification partners. It applies equally to access via desktop browser and mobile browser.

We are committed to ensuring that your personal data is processed lawfully, fairly, and transparently. We apply the principles of purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality in all aspects of our data processing activities.

2. Data Controller

For the purposes of this Policy, 99xq acts as the data controller in respect of all personal data collected from players and visitors using the platform at https://99xq.io. As data controller, 99xq is responsible for determining the purposes and means by which personal data is processed.

If you have any questions regarding the identity of the data controller, the lawful basis for any specific processing activity, or wish to exercise any of your data rights, please contact us in writing at:

3. Personal Data We Collect

The following table sets out the categories of personal data that 99xq collects, along with the lawful basis for collecting each category:

3.1 Special Category Data

99xq does not intentionally collect any special category personal data as defined under applicable data protection frameworks (i.e., data revealing racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data used for identification, health data, or data concerning a person's sex life or sexual orientation). If you voluntarily disclose any such information in the course of communicating with our support team, it will be treated with the strictest confidence and used only to resolve the specific matter for which it was shared.

4. How We Collect Your Data

4.1 Information You Provide Directly

The majority of personal data we hold about you is information you have provided directly to us through the following interactions:

• Completing the account registration form on 99xq
• Submitting identity verification documents during the KYC process
• Making deposits or requesting withdrawals via bKash, Nagad, Rocket, Upay, or bank transfer
• Contacting our customer support team via live chat, email, or WhatsApp
• Participating in promotions, tournaments, or bonus offers
• Updating your account profile or responsible gaming settings

4.2 Data Collected Automatically

When you access and browse the 99xq platform, certain technical and usage data is collected automatically through cookies, server logs, and related technologies. This includes your IP address, device identifiers, browser configuration, and behavioural data such as which pages you visit and how long you spend on each. This data is used for security monitoring, fraud detection, and to improve the overall performance of the platform.

4.3 Data from Third Parties

99xq may receive personal data about you from the following categories of third-party sources:

• Payment providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and other financial institutions may share transaction confirmation data and account verification status with 99xq as part of the payment processing flow.
• Identity verification services: Where 99xq uses third-party KYC tools, those providers may return identity match results and document authenticity checks to 99xq.
• Fraud prevention partners: 99xq may receive risk signals and fraud alerts from specialist third-party fraud prevention services to protect the platform and its players.
• Game studios: Providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may share game session data with 99xq as part of the integrated gaming platform.

5. How We Use Your Personal Data

99xq uses your personal data for the following specific purposes. We process data for each purpose only where we have a valid lawful basis to do so:

5.1 Account Operation and Service Delivery

Your identity, contact, account, and financial data are used to create and manage your 99xq player account, authenticate your logins, process deposits and withdrawals in BDT (৳), provide access to betting markets and casino games, and deliver the core service you have contracted us to provide. This processing is necessary for the performance of our contract with you.

5.2 Identity Verification and KYC Compliance

We use identity data, financial data, and documentation submitted by you to verify your age (minimum 21 years), confirm your identity, and comply with our anti-money laundering (AML) obligations. This processing is required by law and is a condition of maintaining your 99xq account.

5.3 Fraud Prevention and Platform Security

Technical data, transaction data, and usage data are analysed to detect and prevent fraud, money laundering, collusion, bonus abuse, and other prohibited activities. This processing is in our legitimate interests and in the interests of the wider player community to maintain a safe and fair platform.

5.4 Customer Support and Dispute Resolution

Communication data and transaction records are used to handle your enquiries, resolve betting disputes, investigate complaints, and provide evidence in the event of a formal dispute resolution process. Records of support interactions may be retained for quality assurance and staff training purposes.

5.5 Responsible Gaming

Transaction data, usage data, and account data are used to support our responsible gaming programme, including monitoring for signs of problem gambling, enforcing deposit limits and self-exclusion settings you have applied, and proactively reaching out to players who may benefit from responsible gaming support.

5.6 Marketing and Promotional Communications

Where you have given your explicit consent to receive marketing communications, we use your contact data and usage data to send you personalised offers, bonus notifications, tournament announcements, and seasonal promotions relevant to the Bangladesh market (including cricket season offers, Eid promotions, and Pohela Boishakh bonuses). You may withdraw your marketing consent at any time by contacting [email protected] or updating your account notification preferences.

5.7 Platform Analytics and Improvement

Anonymised and aggregated usage data is used to analyse platform performance, understand how players navigate the site, identify technical issues, and make improvements to the user experience. Where possible, this analysis is conducted on anonymised data sets that cannot be linked back to individual players.

6. Data Sharing and Disclosure

99xq does not sell, rent, or trade your personal data to any third party. We share personal data only where necessary and only with the following categories of recipients:

6.1 Payment Processing Partners

To process deposits and withdrawals, we share the minimum necessary financial data with our payment partners including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and card processors. These partners are contractually bound to use your data solely for the purpose of processing your transaction and are prohibited from using it for any other purpose.

6.2 Identity Verification and KYC Providers

Where required for age verification or identity checking, we share identity documents and personal details with accredited KYC service providers. All KYC partners are subject to data processing agreements and are required to maintain standards equivalent to those set out in this Policy.

6.3 Game Studio Providers

To deliver casino and slot content from Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other integrated game studios, we share a session token and anonymised player identifier with the relevant provider. We do not share your full name, email address, or financial data with game studios as part of normal gameplay.

6.4 Fraud Prevention and Security Services

Technical identifiers such as IP addresses and device fingerprints may be shared with specialist fraud prevention services to identify and prevent fraudulent activity. These services act on our behalf and are bound by strict data processing terms.

6.5 Legal and Regulatory Authorities

99xq may disclose personal data to law enforcement agencies, regulatory bodies, or judicial authorities where required to do so by applicable law, court order, or where we have a good-faith belief that disclosure is necessary to prevent criminal activity, protect the safety of players, or comply with a legal obligation. We will notify affected players of such disclosures where we are legally permitted to do so.

6.6 Business Transfers

In the event of a merger, acquisition, asset sale, or corporate restructuring involving 99xq, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified by email prior to any such transfer, and the acquiring entity will be required to honour the commitments set out in this Policy.

7. Data Retention

99xq retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, to satisfy legal and regulatory obligations, and to resolve disputes. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised so that it can no longer be associated with any identifiable individual. Anonymised aggregate data may be retained indefinitely for statistical and analytical purposes.

8. Security Measures

99xq maintains a comprehensive information security programme designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures include, but are not limited to:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the 99xq platform
• Password hashing using industry-standard one-way cryptographic algorithms — your password is never stored in plain text
• Encryption at rest for all sensitive personal and financial data stored in our database infrastructure
• Two-factor authentication (2FA) via OTP, strongly recommended for all accounts and available to all players
• Role-based access controls ensuring that only authorised personnel with a business need can access player data
• Regular security audits and penetration testing conducted by independent third-party security specialists
• 24/7 security monitoring of all platform systems with automated alerts for suspicious activity
• Secure development practices including code reviews, input validation, and protection against common web application vulnerabilities

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 99xq will notify affected players without undue delay and will take all reasonable steps to contain and remediate the breach. We will also report the breach to competent authorities as required by applicable law.

While we take every reasonable precaution to protect your data, no online platform can guarantee absolute security. You are also responsible for maintaining the security of your account credentials and for notifying us immediately if you suspect any unauthorised access to your account.

9. Cookies and Tracking Technologies

9.1 What Are Cookies

Cookies are small text files placed on your device by the 99xq platform when you visit our website. They allow the platform to remember your preferences, maintain your login session, and collect anonymised data about how the site is used. 99xq uses both session cookies (which expire when you close your browser) and persistent cookies (which remain on your device for a defined period).

9.2 Categories of Cookies We Use

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies, security tokens, and cookies that remember your language and currency preferences. You cannot opt out of these cookies while using the platform.
• Performance and Analytics Cookies: Used to collect anonymised data about how visitors use the 99xq site, which pages are most visited, and where errors occur. This data is used solely to improve platform performance and does not identify individual users.
• Fraud Prevention Cookies: Used to detect and prevent fraudulent activity, including bot detection and multi-accounting checks. These are necessary for platform security and cannot be disabled.
• Functional Cookies: Used to remember your personalised settings such as game preferences, responsible gaming settings, and notification preferences.

9.3 Cookies We Do Not Use

99xq does not deploy third-party advertising cookies, retargeting pixels, social media tracking scripts, or any tracking technology that follows your behaviour across other websites. We do not use Google Ads remarketing tags, Facebook Pixel, or equivalent third-party advertising trackers on the 99xq platform.

9.4 Managing Cookies

You can control and delete cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or alert you when a new cookie is being set. Please note that disabling strictly necessary cookies will affect the functionality of the 99xq platform and may prevent you from accessing certain features. Detailed instructions for managing cookies in common browsers are available in each browser's help documentation.

10. Your Data Rights

As a registered player or visitor to the 99xq platform, you hold the following rights in respect of your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request — [Your Account Username]":

10.1 Right of Access

You have the right to request a copy of all personal data that 99xq holds about you. We will provide this information in a structured, commonly used, machine-readable format within five Bangladesh business days of receiving your verified request.

10.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You may update many of your account details directly within your account settings. For changes to identity data (name, date of birth, NID number), please contact support with the relevant documentation.

10.3 Right to Erasure

You have the right to request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent and there is no other lawful basis for processing. Please note that we may be required to retain certain data for legal and regulatory compliance purposes (see Section 7) even following an erasure request. In such cases, we will inform you of the data we are legally obliged to retain and the applicable retention period.

10.4 Right to Restriction of Processing

In certain circumstances — such as while a dispute over data accuracy is being resolved, or where you have objected to processing and we are assessing that objection — you have the right to request that we restrict our processing of your data to storage only.

10.5 Right to Data Portability

Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to transmit that data to another controller. Contact [email protected] to request a data export.

10.6 Right to Object

You have the right to object at any time to the processing of your personal data for direct marketing purposes. You may also object to processing carried out on the basis of our legitimate interests, though we may demonstrate compelling legitimate grounds that override your objection in certain circumstances.

10.7 Withdrawing Consent

Where processing is based on your consent (for example, marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal. To withdraw marketing consent, update your notification preferences in your account settings or email [email protected].

11. Protection of Minors

The 99xq platform is strictly for adults aged 21 years and above. We do not knowingly collect or process personal data from individuals under the age of 21. If we become aware that a registered account belongs to a person under the minimum age, we will immediately close the account, void all bets placed during the underage period, and delete all personal data associated with that account to the extent required by law.

If you are a parent or guardian and believe that a minor has registered an account on 99xq, please contact us immediately at [email protected] with the subject line "Underage Account Report". We take underage gambling extremely seriously and will investigate all such reports as a matter of highest priority.

99xq also supports parental control software and filtering tools that can be used to restrict access to gambling websites. If you are concerned about a young person in your household accessing online gambling content, we recommend installing an appropriate content filtering solution on shared devices.

12. International Data Transfers

99xq's primary operations and player data are held on servers serving the Bangladesh market. In limited circumstances, personal data may be processed by third-party service providers (such as cloud infrastructure providers, fraud prevention services, or KYC vendors) whose systems may be located outside Bangladesh.

Where personal data is transferred to a third party outside Bangladesh, 99xq ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to that required under applicable Bangladeshi data protection law. These safeguards may include contractual data processing agreements, standard contractual clauses, or equivalent binding commitments from the recipient.

We do not transfer personal data to any country or territory that does not provide an adequate level of data protection without first putting appropriate contractual safeguards in place.

13. Changes to This Privacy Policy

99xq reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. Where changes are material, we will publish the updated Policy on the 99xq platform and notify registered players by email at least 14 days before the changes take effect.

The date of the most recent update to this Policy is displayed at the top of this document. We recommend that you review this Policy periodically to stay informed of how we are protecting your personal data. Your continued use of the 99xq platform after the effective date of any amendment to this Policy constitutes your acceptance of the updated terms.

Previous versions of this Privacy Policy are available upon request by contacting [email protected].

14. Contact Us Regarding Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which 99xq handles your personal data, please contact our dedicated privacy team through any of the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: "Privacy Policy Enquiry — [Your Account Username]"
• Live Chat: Available 24/7 via the platform interface
• WhatsApp: Contact details available within the platform support section
• Response Time: Within 5 Bangladesh business days for written enquiries
• Time Zone: Bangladesh Standard Time (BST, UTC+6)

All formal data protection complaints will be acknowledged within 2 Bangladesh business days and resolved within 15 business days wherever possible. If you are not satisfied with our response, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.