xx999b Privacy Policy

1. Information We Collect

xx999b collects personal data from users in Bangladesh and elsewhere through several means: directly from you when you register and use the platform, automatically through the technology that powers the platform, and from trusted third-party verification and payment service providers. We collect only the minimum data necessary to provide our services safely, legally, and effectively.

1.1 Data You Provide Directly

When you create an account, complete identity verification (KYC), make a deposit or withdrawal, or contact our support team, you provide us with information that may include:

• Identity data: Full legal name, date of birth, gender, nationality.
• Contact data: Email address, mobile phone number, and residential address in Bangladesh (including district, city, and postal code).
• Identity documents: Scanned or photographed copies of your Bangladesh National Identity (NID) card, passport, or driving licence submitted for KYC verification.
• Payment data: Your bKash or Nagad mobile account number, Rocket (Dutch-Bangla Bank) number, bank account details for City Bank, BRAC Bank, Islami Bank, Sonali Bank, Dutch-Bangla Bank, Upay, or Visa/Mastercard card details (card number, expiry, cardholder name). Full payment card numbers are never stored on xx999b's servers — card processing is handled by our PCI-DSS-compliant payment partners.
• Support communications: Any messages, emails, or live chat transcripts you exchange with our support team, including details of any complaints or disputes you raise.
• Responsible gaming data: Self-exclusion requests, deposit limit settings, session time preferences, and cooling-off period instructions you submit.

1.2 Data Collected Automatically

When you access the xx999b platform through a web browser or mobile device, we automatically collect certain technical and behavioural data, including:

• Device and browser data: IP address, device type, operating system version, browser type and version, screen resolution, language setting.
• Usage data: Pages visited, games played, session start and end times, wager amounts, bet histories, game outcomes, and navigation paths through the platform.
• Geolocation data: Approximate geographic location derived from your IP address, used to verify that you are accessing the platform from a permitted region.
• Cookie and tracking data: Data stored by cookies and similar technologies as described in Section 5 of this policy.

1.3 Data From Third Parties

We may receive data about you from third-party identity verification providers, payment processors, fraud prevention services, and, where applicable, publicly available sources such as sanctions lists and politically exposed persons (PEP) databases. This data is used solely to comply with our anti-money laundering (AML) and know-your-customer (KYC) obligations, and to protect the security and integrity of the platform.

2. How We Use Your Data

xx999b uses the personal data we collect for the following purposes:

• Account creation and management: To register your account, authenticate your identity at login, and manage your account settings and preferences.
• KYC and regulatory compliance: To verify your identity and age (18+), comply with anti-money laundering regulations, and respond to lawful requests from relevant financial intelligence units or other competent authorities.
• Transaction processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, bank transfers, Visa, and Mastercard, and to maintain accurate records of your BDT transaction history.
• Platform operation and game delivery: To deliver casino games from our provider partners (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others), record game histories, and resolve any disputes arising from game outcomes.
• Customer support: To respond to your support requests, resolve complaints, and communicate with you about your account in English via email.
• Responsible gaming: To apply deposit limits, session controls, self-exclusion orders, and cooling-off periods that you have requested, and to proactively identify patterns of play that may indicate problem gambling behaviour.
• Fraud and security: To detect, investigate, and prevent fraudulent transactions, bonus abuse, multi-accounting, money laundering, and other prohibited conduct described in our Terms & Conditions.
• Marketing and promotions: Where you have given explicit consent, to send you information about xx999b promotions, BPL cricket season offers, Eid and Pohela Boishakh seasonal bonuses, and other personalised offers by email or SMS. You may withdraw this consent at any time.
• Platform improvement: To analyse aggregated, anonymised usage statistics that help us improve platform performance, game selection, and the overall player experience for our Bangladesh audience.

3. Legal Basis for Processing

xx999b processes your personal data on the following legal grounds:

Processing Purpose	Legal Basis
Account registration and service delivery	Performance of a contract — necessary to provide the xx999b service you have requested.
KYC identity and age (18+) verification	Legal obligation — required to comply with AML regulations and age-restriction rules.
Payment processing (bKash, Nagad, bank transfers, Visa/Mastercard)	Performance of a contract — necessary to process your BDT deposits and withdrawals.
Fraud detection and security monitoring	Legitimate interests — to protect the platform and its players from fraud and abuse.
Responsible gaming controls and self-exclusion	Legal obligation and legitimate interests — to protect player welfare and comply with responsible gaming standards.
Marketing communications	Consent — only where you have explicitly opted in to receive promotional messages from xx999b.
Analytics and platform improvement	Legitimate interests — to improve our services using anonymised, aggregated data that cannot identify individual players.

4. Data Sharing & Disclosure

xx999b does not sell, rent, or trade your personal data to any third party for their own marketing purposes. We share your data only in the following limited circumstances:

4.1 Payment Service Providers

We share the minimum necessary payment data with bKash, Nagad, Rocket (Dutch-Bangla Bank), Upay, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Dutch-Bangla Bank, Visa, and Mastercard solely for the purpose of processing your deposits and withdrawals. Each of these providers operates under its own privacy and data-security obligations.

4.2 Game Software Providers

To deliver casino and sports products, certain technical identifiers (such as your anonymised player ID and session token) are shared with game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers do not receive your full personal profile, contact details, or payment information.

4.3 Identity Verification Providers

When you submit KYC documents, they are processed by our contracted identity verification partner. This partner is bound by strict confidentiality obligations and uses your documents only to confirm your identity and age for xx999b's compliance purposes.

4.4 Legal and Regulatory Obligations

We may disclose your personal data to relevant government authorities, financial intelligence units, law enforcement agencies, or courts when we are legally required to do so, or when we reasonably believe that disclosure is necessary to prevent imminent harm, fraud, or criminal activity. Where legally permitted, we will notify you before making such a disclosure.

4.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of xx999b's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material changes to this Privacy Policy that may result from it.

5. Cookies & Tracking Technologies

xx999b uses cookies and similar technologies (such as web beacons and local storage) on the xx999b.app platform. These technologies help us keep you logged in, remember your preferences, analyse platform usage, and deliver relevant promotional content to Bangladesh players.

5.1 Types of Cookies We Use

Cookie Type	Purpose	Duration
Strictly Necessary	Session management, login authentication, security tokens. Without these cookies the platform cannot function.	Session / up to 24 hours
Functional	Remembering your language preference (English), preferred game lobby view, and responsible gaming settings.	Up to 12 months
Analytics	Aggregated, anonymised data about page views, game engagement, and navigation patterns used to improve the platform.	Up to 24 months
Marketing	Tracking whether you arrived at xx999b via a promotional link, used only to measure the effectiveness of our BDT bonus campaigns.	Up to 30 days

You can manage or disable non-essential cookies at any time through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in or using the platform. For detailed guidance on managing cookies, refer to your browser's help documentation.

6. Data Retention

xx999b retains your personal data for as long as your account is active and for such additional periods as are required by applicable law or legitimate business necessity. The following retention guidelines apply:

• Active account data: Retained for the full duration of your account relationship with xx999b.
• Transaction records (deposits, withdrawals, wager histories): Retained for a minimum of 5 years after the date of each transaction to satisfy financial record-keeping obligations.
• KYC documents (NID, passport, proof of address): Retained for a minimum of 5 years after account closure or last transaction, whichever is later, in line with AML compliance requirements.
• Support communications: Retained for 3 years after the resolution of the relevant support request or dispute.
• Self-exclusion records: Retained indefinitely to ensure that re-registration is blocked during an active exclusion period and to maintain an audit trail of responsible gaming commitments.
• Marketing consent records: Retained for the duration of the consent plus 1 year after withdrawal of consent to provide a compliance record.
• Anonymised analytics data: May be retained indefinitely as it cannot be linked back to an identifiable individual.

When the applicable retention period expires, personal data is securely deleted or anonymised in accordance with our internal data disposal procedures.

7. Your Data Rights

As a user of the xx999b platform, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request". We aim to respond to all data rights requests within 30 days.

• Right of Access: You have the right to request a copy of the personal data xx999b holds about you, along with information about how it is used and with whom it has been shared.
• Right to Rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update basic profile details directly through your account settings.
• Right to Erasure ("Right to Be Forgotten"): You may request that xx999b delete your personal data where it is no longer necessary for the purpose for which it was collected. Please note that this right is subject to our legal obligation to retain certain records (such as transaction histories and KYC documents) for the periods described in Section 6 above.
• Right to Restriction of Processing: In certain circumstances — for example, where you contest the accuracy of your data or have objected to processing — you may request that we restrict how we use your data while the matter is resolved.
• Right to Data Portability: Where processing is based on your consent or on a contract, you may request that we provide your personal data in a structured, commonly used, machine-readable format so that it can be transferred to another service provider.
• Right to Object: You may object to processing carried out on the basis of legitimate interests, including direct marketing. Upon receipt of a valid objection to marketing, we will stop sending you promotional communications immediately.
• Right to Withdraw Consent: Where processing is based on your consent (for example, receipt of marketing emails), you may withdraw that consent at any time by contacting [email protected] or by using the unsubscribe link in any promotional email.

8. Data Security

xx999b takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure:

• SSL/TLS Encryption: All data transmitted between your device and xx999b.app is encrypted using industry-standard SSL/TLS protocols. You can verify this by checking for the padlock icon in your browser's address bar when visiting the platform.
• Password Hashing: Account passwords are never stored in plain text. They are processed using a one-way cryptographic hash function so that even internal staff cannot read your password.
• Two-Factor Authentication (2FA): xx999b strongly recommends that all players enable 2FA on their accounts. With 2FA active, a secondary verification code (sent to your registered mobile number) is required at each login in addition to your password.
• Access Controls: Access to personal data within xx999b's internal systems is restricted on a strict need-to-know basis. Staff members can access only the data required to perform their specific job functions.
• Payment Data Security: Full payment card details are never stored on xx999b servers. Card transactions are processed exclusively by our PCI-DSS-compliant payment partners. bKash and Nagad transactions are processed through the official APIs of those providers.
• Incident Response: In the event of a personal data breach that poses a risk to your rights and freedoms, xx999b will notify affected users without undue delay and will take immediate remedial action.

While we take every reasonable precaution, no online platform can guarantee absolute security. You are responsible for keeping your own login credentials confidential and for notifying us promptly at [email protected] if you suspect any unauthorised access to your account.

9. International Data Transfers

xx999b's primary operations and player data storage are focused on serving the Bangladesh market. In some cases, however, your data may be processed by our third-party service providers — such as game studios or identity verification partners — whose infrastructure is located outside Bangladesh. When such international transfers occur, xx999b takes steps to ensure that your data receives a level of protection consistent with the standards described in this Privacy Policy.

These steps may include entering into data processing agreements with the relevant third parties that include appropriate data transfer safeguards, and selecting service providers that implement recognised security certifications and frameworks. If you have questions about the specific safeguards applied to any particular international transfer of your data, you may contact us at [email protected].

10. Policy Updates & Contact

xx999b reserves the right to update this Privacy Policy at any time. Changes will be published on this page with a revised "Last Updated" date. For material changes that significantly affect how we handle your personal data, we will make reasonable efforts to notify registered players via email to their registered address or via an in-platform notification.

Your continued use of the xx999b platform after the effective date of any update constitutes your acknowledgement of the revised Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact the xx999b privacy team at:

• Email: [email protected] (subject line: "Privacy Enquiry")
• Support hours: 24/7, with response times optimised for Bangladesh Standard Time (BST, UTC+6).
• Response target: We aim to acknowledge all privacy-related enquiries within 48 hours and to resolve them fully within 30 days.