Privacy Policy — xx999bet

Section 1

Data We Collect

When you register an account with xx999bet, use our casino or sportsbook products, or contact our support team, we collect a range of personal data. The categories below summarise what we collect, why we collect it, and the circumstances under which each category of data is gathered.

We do not intentionally collect data from individuals under the age of 18. If we become aware that a minor has provided personal data in order to access the Platform, we will immediately close the relevant account and delete all associated personal data from our records. Players in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar are all subject to the same data collection practices without regional variation.

Section 2

How We Use Your Data

xx999bet processes personal data only for clearly defined, lawful purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The following list describes each purpose and the lawful basis under which the processing is carried out.

1. Account creation and management: We use your identity and contact data to create and maintain your player account, verify your credentials on login, and communicate account-related notices such as security alerts, password resets, and policy updates.
2. Payment processing and fraud prevention: Financial data and identity data are used to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard in Bangladeshi Taka (৳), and to apply anti-money laundering and fraud detection protocols as required by responsible business practice.
3. KYC compliance: Document data and identity data are processed to verify that players are who they claim to be, that they meet the 18+ age requirement, and that their payment methods are registered in their own name. KYC is a prerequisite for enhanced withdrawal privileges.
4. Responsible gaming obligations: Usage data and financial data are analysed to identify behavioural patterns associated with problem gambling, such as rapidly escalating deposit frequency, session duration anomalies, or repeated loss-chasing patterns. This analysis is used to trigger responsible gaming interventions, including deposit limit recommendations and self-exclusion prompts.
5. Platform improvement and analytics: Aggregated and anonymised technical and usage data are used to understand how players interact with the Platform, identify areas for product improvement, optimise game lobby layouts, and enhance the overall user experience for players across Bangladesh.
6. Customer support: Communication data (live chat transcripts and support emails) is retained for quality assurance purposes, dispute resolution, and staff training. Support records are associated with your account for the duration of the retention period described in Section 5.
7. Marketing communications: Where you have provided explicit opt-in consent, we may use your contact data to send promotional offers, bonus announcements, seasonal promotions (e.g., BPL cricket season offers, Eid promotions, Pohela Boishakh specials), and product updates. You may withdraw marketing consent at any time via your account settings without any negative consequence to your account status.
8. Legal and regulatory compliance: In certain circumstances, we are required to process and retain personal data to comply with legal obligations, including responding to valid court orders, regulatory inquiries, or financial intelligence authority requests. In such cases, data processing is mandated by law and is not subject to player opt-out.

Section 3

Data Sharing & Disclosure

xx999bet does not sell, rent, or trade personal data. However, in order to provide a fully functional gaming and payments platform, we work with a limited set of trusted third-party service providers. Data shared with these providers is governed by strict data processing agreements that restrict use of the data to the specific purpose for which it was shared.

Categories of third parties we share data with:

• Payment processors: Transaction data is shared with bKash, Nagad, Rocket, Upay, and card network processors (Visa, Mastercard) solely to facilitate the processing of deposits and withdrawals on your behalf. These providers operate under their own privacy frameworks and are bound by Bangladesh Bank regulations governing mobile financial services.
• Identity verification providers: During the KYC process, identity documents may be processed by a third-party verification service that cross-references document data against public and proprietary databases to confirm authenticity. Document images are not stored by the verification provider beyond the duration of the check.
• Game studio providers: When you play casino games supplied by studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi, limited session and account data (player ID, balance, game result) is exchanged with the relevant studio's game server in real time to enable gameplay. Game studios do not receive your full personal profile or payment details.
• Analytics and platform performance providers: Aggregated, anonymised technical and usage data may be processed by infrastructure analytics tools to monitor Platform performance, uptime, and security. Individual player identities are not exposed to analytics platforms.
• Legal and regulatory authorities: xx999bet may disclose personal data to law enforcement agencies, financial intelligence units, or regulatory bodies when required to do so by a valid legal instrument. We will notify affected players of such disclosures where we are legally permitted to do so.

No personal data is transferred to recipients in jurisdictions that do not provide an adequate level of data protection without the implementation of appropriate safeguards, such as contractual data protection clauses binding the recipient to standards equivalent to those described in this Privacy Policy.

Section 4

Cookies & Tracking Technologies

xx999bet uses cookies and similar tracking technologies to ensure the Platform functions correctly, to remember your preferences, and to understand how players interact with the site. A cookie is a small text file stored on your device by your browser when you visit a website. Cookies set by xx999bet cannot access other files on your device and do not contain executable code.

Types of cookies we use:

• Strictly necessary cookies: These cookies are essential for the Platform to function. They maintain your login session, preserve your account balance state across page navigations, and enable secure communication between your browser and our servers. These cookies cannot be disabled without breaking core Platform functionality.
• Functional cookies: These cookies remember your preferences such as preferred language settings, display configurations, and notification preferences. They persist across sessions so that you do not need to re-enter your preferences each time you log in.
• Performance and analytics cookies: These cookies collect anonymised data about how players use the Platform — for example, which game categories are visited most frequently, average session duration, and error rates. This data helps us improve the Platform experience for players across Bangladesh.
• Session identification cookies: Short-lived session cookies are used to maintain the integrity of your active gaming session. These cookies expire automatically when you close your browser or log out of your account and do not persist beyond a single session.

Managing cookies. Most modern browsers allow you to view, block, or delete cookies through the browser's privacy or settings menu. Blocking strictly necessary cookies will prevent you from logging in to your xx999bet account. Blocking functional or analytics cookies will not prevent login but may degrade your experience on the Platform. For detailed guidance on cookie management in your specific browser, refer to your browser's official help documentation.

Do Not Track. The Platform acknowledges browser-level Do Not Track (DNT) signals where they are technically detectable. When a DNT signal is detected, analytics and performance tracking is suppressed for that session. Strictly necessary and functional cookies remain active regardless of DNT status, as they are required for the Platform to operate.

Section 5

Data Retention

xx999bet retains personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable legal, regulatory, or contractual obligations. The retention periods below reflect the standard schedules applied to each category of data.

Upon expiry of the relevant retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Where data is anonymised rather than deleted, the anonymised dataset may be retained indefinitely for aggregate statistical analysis without constituting personal data processing under applicable privacy frameworks.

Players who request voluntary account closure retain the right to request deletion of their personal data. However, deletion requests that conflict with active legal retention obligations (for example, financial records during the mandatory seven-year retention window) will be partially fulfilled — the Platform will delete non-obligatory data immediately while retaining only the legally required records until their mandatory retention period expires.

Section 6

Your Privacy Rights

As a player on xx999bet, you hold a number of rights with respect to the personal data we hold about you. These rights are described below. To exercise any of these rights, contact our support team via live chat or email at support@xx999bet (plain text — not a link). We will respond to all valid requests within 30 calendar days of receipt.

xx999bet will verify your identity before processing any data subject request to ensure that personal data is not disclosed to or amended by an unauthorised party. For complex or high-volume requests, we may extend the response period by up to an additional 30 days, in which case we will notify you of the extension and the reason for it within the initial 30-day window.

Section 7

Data Security Measures

xx999bet implements a layered security architecture designed to protect player data against unauthorised access, accidental loss, alteration, or disclosure. Our security programme includes both technical controls and organisational policies, and is reviewed on a regular basis to account for emerging threats and industry best practice developments.

Technical controls in place include:

• Transport Layer Security (TLS): All data in transit between your browser and our servers is encrypted using TLS 1.2 or higher. Our SSL certificate is verified and maintained at all times to prevent man-in-the-middle attacks.
• Data encryption at rest: Sensitive data fields — including identity document scans, financial records, and password hashes — are encrypted at the database level using AES-256 encryption. Passwords are hashed using a one-way cryptographic function; they are never stored in plain text and cannot be recovered by Platform staff.
• Access controls: Internal access to player personal data is restricted on a strict need-to-know basis. Staff are assigned the minimum level of data access required to perform their specific role. Access logs are maintained and reviewed regularly for anomalous activity.
• Intrusion detection and monitoring: The Platform operates continuous network monitoring and intrusion detection systems. Anomalous traffic patterns, login attempts from unusual locations, and API abuse patterns trigger automated alerts for immediate investigation by the security team.
• KYC document vault: Identity documents submitted during verification are stored in an isolated, encrypted document vault that is physically and logically separated from the main Platform database. Access to the vault is restricted to authorised compliance personnel and is logged on every access event.
• Two-factor authentication: Players are strongly encouraged to enable two-factor authentication (2FA) on their accounts via the security settings panel. 2FA adds a second verification layer beyond the password, significantly reducing the risk of unauthorised account access.

In the event of a data breach, xx999bet will follow a documented incident response procedure. Affected players will be notified without undue delay where the breach is reasonably likely to result in a risk to their rights or interests. Notifications will be sent to the registered email address or mobile number on the account and will include a description of the breach, the categories of data involved, and the steps taken or recommended to mitigate potential harm.

Player responsibilities. While xx999bet implements robust platform-level security controls, players are responsible for maintaining the security of their own login credentials. You should use a strong, unique password for your xx999bet account, enable 2FA, and never share your login details with any third party. xx999bet staff will never ask for your password via email, live chat, SMS, or any other communication channel.

Section 8

Policy Updates & Contact

xx999bet reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or Platform functionality. When material changes are made, registered players will be notified via email or in-platform notification at least seven days before the revised policy takes effect. The updated effective date will be displayed prominently at the top of this page.

Continued use of the Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you should discontinue use of the Platform and contact our support team to request account closure and data deletion in accordance with your rights under Section 6.

The current version of this Privacy Policy supersedes all previous versions. It is your responsibility to review this page periodically. The most current version is always accessible at /privacy-policy.

Contact our Privacy team. For any questions, concerns, or formal requests related to this Privacy Policy or the personal data xx999bet holds about you, please contact our support team using one of the following methods:

• Live chat: Available 24/7 directly within the Platform. Average response time is 2–5 minutes. Our support agents operate on Bangladesh Standard Time (BST, UTC+6).
• Support email: support@xx999bet (plain text — not a clickable link). Email responses are typically provided within one business day.

We take all privacy-related inquiries seriously and are committed to resolving them promptly, professionally, and in accordance with the commitments set out in this policy. Players located across Bangladesh — whether in Dhaka, Chittagong, Sylhet, Khulna, or elsewhere — are entitled to the same level of privacy protection and the same responsiveness from our support team.