99x09 Privacy Policy
At 99x09, protecting your personal information is a core responsibility. This Privacy Policy explains exactly what data we collect from players in Bangladesh, how we use and store that data, who we share it with, and the rights you hold over your own information at all times.
Our Privacy Commitments
Before diving into the full policy, here is a plain-English summary of the six core privacy commitments 99x09 makes to every player on the platform.
Encrypted Storage
All personal data held by 99x09 is stored on SSL-encrypted servers. Your name, mobile number, national ID details, and payment information are never stored in plain text.
No Unnecessary Sharing
99x09 does not sell, rent, or trade your personal data to advertisers or unrelated third parties. Data sharing is limited strictly to service partners required for platform operation.
Your Data, Your Control
You have the right to access, correct, and request deletion of your personal data at any time. Submit a request through our support team and we will respond within 10 business days.
KYC Data Protection
Identity documents submitted for KYC verification — including National ID Cards, passports, and driving licences — are handled with the highest level of confidentiality and used solely for age and identity verification.
Marketing Opt-Out
You may opt out of all marketing communications from 99x09 at any time. Players who have self-excluded or set responsible gaming limits are automatically removed from promotional mailing lists.
Transparent Cookie Use
99x09 uses cookies strictly for session management, platform performance, and fraud prevention. We do not use third-party advertising cookies or cross-site behavioural tracking technologies.
1. Information We Collect
99x09 collects personal information from players in Bangladesh in order to provide a safe, compliant, and fully functional online gaming service. We collect only the data that is genuinely necessary for the purposes described in this Privacy Policy. The categories of data we collect are outlined below.
| Category | Specific Data Points Collected | When Collected |
|---|---|---|
| Registration Data | Full legal name, date of birth, email address, mobile phone number, residential address (city/district in Bangladesh) | At account creation |
| Identity Verification (KYC) | Scanned copy or photograph of National ID Card (NID), passport, or driving licence; proof of residential address | Before first withdrawal; at 99x09's request |
| Financial Data | bKash / Nagad / Rocket wallet numbers; bank account details (where bank transfer is used); Visa/Mastercard last four digits (no full card numbers stored) | At deposit or withdrawal initiation |
| Gaming Activity | Bet history, game session logs, deposit and withdrawal transaction records, bonus usage history, wagering activity | Continuously during platform use |
| Technical Data | IP address, device type, browser type and version, operating system, session timestamps, cookies and session tokens | Automatically on each platform visit |
| Communications Data | Support chat transcripts, emails sent to [email protected], any information voluntarily provided to our support team | When you contact 99x09 support |
Data We Do Not Collect
99x09 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data for identification purposes, or data concerning health (beyond the self-disclosed responsible gaming information you may provide voluntarily). We do not collect data from players under the age of 18 — any account confirmed to belong to a minor will be closed and any associated data will be securely deleted.
Bangladesh Players: When you register with 99x09 from Bangladesh, your city or district (e.g., Dhaka, Chittagong, Sylhet, Khulna) is recorded as part of your residential address. This is used solely for account administration and responsible gaming monitoring. Your precise home address is never displayed publicly or shared with third parties for marketing purposes.
2. How We Use Your Data
99x09 uses your personal data only for lawful, specified, and transparent purposes. The table below maps each category of data use to its legal basis and practical purpose on the platform.
| Purpose | Data Used |
|---|---|
| Account creation and management | Registration data, technical data (device/IP) |
| Age and identity verification (KYC) | KYC documents, registration data (date of birth) |
| Processing deposits and withdrawals | Financial data, KYC data, gaming activity records |
| Delivering customer support | Communications data, registration data, gaming activity |
| Responsible gaming monitoring and intervention | Gaming activity, deposit/withdrawal patterns, session data |
| Fraud prevention and security | Technical data (IP, device fingerprint), financial data, gaming activity |
| Marketing communications (where consented) | Registration data (email, mobile), gaming preferences |
| Platform performance and analytics | Technical data, aggregated and anonymised gaming activity |
| Legal and regulatory compliance | All data categories, as required by applicable law |
Marketing Communications
With your consent at registration, 99x09 may send you promotional messages about bonuses, new game launches, and seasonal offers — for example, during BPL cricket season, Eid, or Pohela Boishakh. These messages are sent via email or SMS to the contact details registered on your 99x09 account. You may withdraw consent and opt out of all marketing communications at any time by updating your preferences in the account dashboard or by contacting our support team.
Automated Decision-Making
99x09 uses automated systems for fraud detection and responsible gaming monitoring. These systems analyse betting patterns, login behaviour, and transaction history to identify potentially suspicious or problematic activity. Where an automated system flags an account for review, a member of the 99x09 team will conduct a manual assessment before any action is taken. No purely automated decision that significantly affects your account status — such as suspension or withdrawal restriction — is made without human oversight.
Responsible Gaming Data Use: Gaming activity data — including betting frequency, session duration, and deposit velocity — is monitored by our responsible gaming system. If patterns suggest a player may be experiencing gambling-related difficulties, 99x09 may proactively reach out to offer support tools. This is done in the interest of player welfare, not for marketing purposes.
3. Data Sharing & Third Parties
99x09 does not sell your personal data. We share data only with trusted service partners who are contractually bound to process your data securely and only for the specific purpose for which it was shared. The categories of third parties with whom 99x09 may share player data are described below.
Payment Processing Partners
To process deposits and withdrawals, 99x09 shares necessary financial data — such as your bKash or Nagad wallet number and transaction reference — with our payment processing partners. These partners include the operators of bKash, Nagad, Rocket, and Upay, as well as the banking institutions through which bank transfers are processed. Payment partners receive only the minimum data required to complete the transaction and are not permitted to use that data for any other purpose.
Game Technology Providers
Third-party game studios including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe may receive anonymised or pseudonymised session data (such as a session token or player ID) to deliver their games on the 99x09 platform. These providers do not receive your full name, contact details, or payment information. Game providers operate under separate data processing agreements with 99x09.
Identity Verification Services
To fulfil our KYC obligations, 99x09 may use third-party identity verification service providers to cross-reference documents submitted by players. These providers process KYC data under strict confidentiality agreements and retain no data beyond the verification outcome.
Legal and Regulatory Disclosure
99x09 may disclose player data to law enforcement agencies, financial intelligence authorities, or other regulatory bodies where we are legally required to do so — for example, in connection with anti-money laundering investigations or court orders. In such cases, data is shared only to the extent required by the applicable legal obligation.
Business Transfers
In the unlikely event of a merger, acquisition, or sale of all or part of the 99x09 business, player data may be transferred to the successor entity as part of that transaction. Players will be notified of any such change in data controller via the email address registered on their 99x09 account, with a minimum of 30 days' notice before the transfer takes effect.
No Data Sales: 99x09 has never sold player data and has no intention of doing so. Data shared with third parties is limited to what is operationally necessary and is governed by binding data processing agreements in every case.
5. Data Retention
99x09 retains personal data for as long as it is necessary to fulfil the purposes for which it was collected, to comply with our legal obligations, and to resolve any disputes or enforce our agreements. The following retention periods apply to the main categories of player data:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account Registration Data | Duration of account plus 5 years after closure | Legal compliance and dispute resolution |
| KYC Documents | Duration of account plus 5 years after closure | Anti-money laundering obligations |
| Financial Transaction Records | 7 years from transaction date | Financial record-keeping requirements |
| Gaming Activity Logs | 3 years from last gaming session | Responsible gaming monitoring and dispute resolution |
| Support Communications | 3 years from last communication | Quality assurance and dispute resolution |
| Marketing Consent Records | Until consent is withdrawn plus 2 years | Evidence of lawful marketing basis |
| Technical / Security Logs | 12 months from creation | Fraud prevention and security monitoring |
Data Deletion After Retention Period
When a data retention period expires, 99x09 will securely delete or anonymise the relevant data so that it can no longer be associated with an identifiable individual. Anonymised and aggregated data (for example, statistical reports on platform usage) may be retained indefinitely as it no longer constitutes personal data.
Self-Exclusion Records
Records of a player's self-exclusion request are retained for the full duration of the exclusion period plus 5 years after the exclusion ends. This is to prevent a self-excluded player from creating a new account during the exclusion period and to protect the player's welfare.
Right to Erasure: You may request deletion of your personal data at any time (see Section 6 below). Please note that where a legal obligation requires 99x09 to retain certain records — such as KYC documents and financial transaction logs — we are unable to delete that data before the applicable retention period has elapsed, even upon your request. We will always explain clearly what data we are obliged to retain and why.
6. Your Privacy Rights
As a registered player on 99x09, you hold the following rights over your personal data. To exercise any of these rights, contact our support team at [email protected] with the subject line "Privacy Rights Request". We will respond within 10 business days (Bangladesh Standard Time, UTC+6).
Right of Access
Request a full copy of all personal data that 99x09 holds about you, including account data, gaming history, and KYC records.
Right of Rectification
Request correction of any inaccurate or incomplete personal data held on your 99x09 account — for example, a misspelled name or outdated address.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to legal retention obligations.
Right to Restrict Processing
Request that 99x09 suspends processing of your data while a dispute or correction request is being resolved, without deleting the data.
Right to Data Portability
Receive a copy of your personal data in a structured, machine-readable format (CSV or JSON) so you can transfer it to another service if you wish.
Right to Object
Object to the processing of your personal data for direct marketing purposes at any time. Your objection will be actioned immediately, with no questions asked.
Identity Verification for Rights Requests: To protect your privacy, 99x09 requires that all data rights requests be submitted from the email address registered on your 99x09 account. We may ask you to confirm your identity before processing any request. This step ensures that no third party can access or delete your data without your authorisation.
7. Data Security
Technical Security Measures
99x09 implements industry-standard technical security measures to protect all player data held on our platform. These measures include:
- SSL/TLS Encryption: All data transmitted between your device and the 99x09 platform is encrypted using Transport Layer Security (TLS 1.2 or above). The padlock icon in your browser confirms that your connection to 99x09.net is encrypted.
- Encrypted Data Storage: Sensitive data fields — including identity document scans, payment references, and passwords — are encrypted at rest using AES-256 encryption. Passwords are stored as one-way cryptographic hashes and cannot be retrieved in plain text, even by 99x09 staff.
- Firewalls and Intrusion Detection: Our servers are protected by enterprise-grade firewalls and real-time intrusion detection systems that monitor for unauthorised access attempts.
- Access Controls: Access to player data within 99x09 is restricted on a strict need-to-know basis. Only support staff with a legitimate operational need can access individual player records, and all access is logged and audited.
- Session Security: 99x09 automatically logs out inactive sessions after a period of inactivity to prevent unauthorised access on shared or unattended devices.
Organisational Security Measures
In addition to technical controls, 99x09 enforces strict internal data handling policies. Staff who handle player data receive data privacy training and are contractually bound to maintain confidentiality. Any third-party service provider with access to player data is required to sign a data processing agreement that mandates equivalent security standards.
Data Breach Notification
In the event of a data security breach that poses a risk to player privacy, 99x09 will notify affected players promptly via the email address registered on their account. The notification will describe the nature of the breach, the categories of data affected, the steps 99x09 has taken to contain the breach, and the recommended steps players should take to protect themselves. We are committed to full transparency in the unlikely event of a security incident.
Your Responsibility
While 99x09 takes every reasonable step to secure your data, account security is a shared responsibility. You are advised to use a strong, unique password for your 99x09 account that you do not reuse on other platforms. Do not share your login credentials with anyone. If you believe your account has been compromised, contact our support team immediately via in-platform live chat or at [email protected].
99x09 Will Never Ask for Your Password: Our support team will never ask you to reveal your account password — by email, live chat, phone, or any other channel. If you receive a message claiming to be from 99x09 and asking for your password, treat it as a phishing attempt and report it to [email protected] immediately.
8. Policy Updates & Contact
Updates to This Privacy Policy
99x09 may update this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable law, or improvements to our platform. When we make material changes to this Policy, we will update the effective date at the top of this page and notify active players via in-platform notification or email to the address registered on their 99x09 account.
We encourage you to review this Privacy Policy periodically. Your continued use of the 99x09 platform after any update constitutes your acceptance of the revised Policy. If you do not agree with any changes to this Policy, you should stop using the platform and contact our support team to request account closure.
Children's Privacy
99x09 is strictly an 18+ platform. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that a minor has registered an account, we will immediately close the account and securely delete all associated personal data. Parents or guardians who suspect that a minor has accessed the 99x09 platform should contact us immediately at [email protected].
Contact Us About Privacy
For any questions, concerns, or requests relating to your privacy or this Privacy Policy, please contact the 99x09 team using the details below. We aim to respond to all privacy enquiries within 10 business days (Bangladesh Standard Time, UTC+6):
- Email: [email protected] — Subject line: "Privacy Enquiry"
- In-Platform Support: Live chat available 24/7 via the 99x09 platform
- Support Hours: 24 hours a day, 7 days a week — Bangladesh Standard Time (UTC+6)
This Privacy Policy was last reviewed and updated on 1 January 2026. It is written in English and, in the event of any conflict with a translated or summarised version, the English text shall prevail.
18+ Only: The 99x09 platform is intended for adults aged 18 and above. By using 99x09, you confirm that you are at least 18 years of age. If you are concerned about your gambling habits, please visit our Responsible Gaming page for tools, resources, and support options available to players in Bangladesh.
Ready to Play at 99x09?
Now that you understand how 99x09 protects your data, explore our full range of games and sports betting options — all designed for players in Bangladesh.