Privacy Policy — How x99999 Protects Your Data

x99999 collects personal data from you in several ways: directly when you register an account, make a deposit, or contact support; automatically when you browse the x99999 platform; and from third-party sources such as payment processors during transaction verification. The categories of personal data x99999 may collect include:

x99999 does not knowingly collect sensitive personal data beyond what is required for identity verification and anti-money-laundering compliance. Where the collection of additional sensitive data becomes necessary (for example, during an enhanced due diligence review), x99999 will notify you at the time of collection and obtain your explicit consent where required by applicable law.

Players who are 18 years of age or older are the only individuals permitted to hold an x99999 account. x99999 does not knowingly collect personal data from individuals under 18. If x99999 becomes aware that data has been inadvertently collected from an underage individual, that data will be deleted and the associated account will be immediately closed.

x99999 processes your personal data only for legitimate, specified purposes. We do not use your data in ways that are incompatible with the purposes disclosed to you at the time of collection. The primary purposes for which x99999 processes personal data are:

• Account Management: To create, maintain, and administer your x99999 account, including processing registrations, verifying identity, resetting credentials, and managing account closures.
• Transaction Processing: To process deposits and withdrawals in BDT (৳) via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and bank transfer, and to maintain accurate financial records for your account.
• KYC & AML Compliance: To fulfil know-your-customer and anti-money-laundering obligations, including verifying your age (18+ requirement), identity, and the legitimate source of deposited funds.
• Platform Security: To detect, investigate, and prevent fraud, collusion, multi-account abuse, unauthorised access, and other prohibited conduct on the x99999 platform.
• Customer Support: To respond to your enquiries, resolve disputes, process responsible gaming requests (such as self-exclusion), and improve the quality of x99999 support services.
• Personalisation: To tailor the x99999 platform experience to your preferences, including displaying relevant game recommendations, promotions tied to cricket (BPL, IPL, T20), slots, or live casino, based on your activity history.
• Marketing Communications: To send you promotional offers, bonus notifications, and seasonal campaign information (Eid, Pohela Boishakh, IPL season, BPL) where you have opted in to receive such communications. You may opt out at any time.
• Legal Obligations: To comply with applicable legal and regulatory requirements, including responding to lawful requests from competent authorities.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve x99999 game performance, site usability, payment flows, and overall player experience.

x99999 processes your data on the following legal bases: performance of a contract (account and payment services), legitimate interests (fraud prevention, platform security, analytics), consent (marketing communications), and legal obligation (KYC, AML, and regulatory compliance). Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

x99999 may share your personal data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data processing agreements and confidentiality obligations:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard receive transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and regulatory frameworks.
• Identity Verification Services: Third-party KYC and age-verification providers may receive your identity documents and personal details to fulfil verification obligations. These partners are contractually bound to use your data solely for verification purposes.
• Game Technology Providers: Licensed game studios and live casino providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) may receive anonymised session identifiers to facilitate seamless game loading and fair-play certification. These providers do not receive your full personal profile.
• IT Infrastructure & Security Providers: Cloud hosting, content delivery, and cybersecurity vendors who support the operation of the x99999 platform may process technical data in the course of providing their services.
• Legal & Regulatory Authorities: x99999 may disclose personal data to law enforcement, financial intelligence units, or other competent authorities when required by law, court order, or to prevent fraud and money laundering. x99999 will notify you of such disclosure where legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of x99999's business, your personal data may be transferred to the acquiring entity. x99999 will notify affected players via email prior to any such transfer and ensure that the receiving entity is bound by equivalent data protection standards.

All third parties with whom x99999 shares personal data are required to handle that data in a manner consistent with this Privacy Policy and applicable data protection principles. x99999 does not permit its data processors or service providers to use your personal data for their own independent purposes beyond those specified in their service agreements with x99999.

x99999 uses cookies and similar tracking technologies on its website to enhance platform functionality, remember your preferences, and analyse how the platform is used. A cookie is a small text file placed on your device by the x99999 web server when you visit the platform. Cookies do not carry viruses or install malware and cannot access other files on your device.

The following categories of cookies are used on the x99999 platform:

Strictly necessary cookies cannot be disabled as they are essential to the operation of the x99999 platform. You may manage your preferences for functional, analytics, and marketing cookies through your browser settings. Most modern browsers allow you to refuse cookies, delete existing cookies, or receive a warning before a cookie is stored. Please note that disabling certain cookies may affect the functionality of the x99999 platform, including the ability to stay logged in or access personalised features.

In addition to cookies, x99999 uses server-side logging to record IP addresses, device identifiers, and browsing activity for security monitoring and fraud prevention purposes. This data is retained for a period of up to 24 months and is not used for marketing purposes.

x99999 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include, but are not limited to:

• SSL/TLS encryption for all data transmitted between your browser and the x99999 servers.
• Encryption of sensitive data fields (including financial data and identity documents) at rest in x99999 databases.
• Role-based access controls ensuring that only authorised x99999 personnel can access personal data, and only to the extent required by their specific job function.
• Regular security audits, penetration testing, and vulnerability assessments of the x99999 platform and infrastructure.
• Multi-factor authentication requirements for internal x99999 administrative systems that hold personal data.
• Documented incident response procedures for detecting, containing, and reporting data security incidents within legally required timeframes.

Despite these measures, no online platform can guarantee absolute security. x99999 strongly encourages all players to use a strong, unique password for their x99999 account, enable any available two-factor authentication, and report any suspected unauthorised access to [email protected] immediately.

x99999 retains your personal data for as long as your account remains active and for a defined period thereafter, in accordance with legal and regulatory obligations. The general retention periods applied by x99999 are:

• Account and identity data: Retained for the duration of the account relationship and for a minimum of five (5) years following account closure, in accordance with anti-money-laundering record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Gaming activity logs: Retained for a minimum of three (3) years from the date of each session.
• Customer support communications: Retained for two (2) years from the date of each interaction.
• Marketing consent records: Retained until consent is withdrawn plus one (1) year for audit purposes.
• Technical and server log data: Retained for up to twenty-four (24) months.

After the applicable retention period has elapsed, personal data is securely deleted or anonymised so that it can no longer be associated with any individual player. Anonymised, aggregated data (from which no individual can be identified) may be retained indefinitely for statistical and platform improvement purposes.

As a player registered on the x99999 platform, you hold the following rights with respect to your personal data:

• Right of Access: You may request a copy of the personal data that x99999 holds about you, along with information about how it is processed and the legal basis for processing.
• Right to Rectification: If any personal data x99999 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may update basic account details (such as your contact email or mobile number) directly through your x99999 account settings.
• Right to Erasure: Subject to applicable legal and regulatory retention obligations, you may request the deletion of your personal data from x99999 systems. Note that data required to be retained for AML, KYC, or legal compliance purposes cannot be deleted until the mandatory retention period has expired.
• Right to Restrict Processing: You may request that x99999 restrict the processing of your personal data in certain circumstances — for example, while a dispute about data accuracy is under review.
• Right to Data Portability: Where data is processed on the basis of your consent or for the performance of a contract, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing based on legitimate interests — including direct marketing — at any time. Where you object to marketing, x99999 will cease sending promotional communications to you immediately.
• Right to Withdraw Consent: Where x99999 processes your data on the basis of your consent (primarily for marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

x99999 will not discriminate against you, restrict your access to games, or apply less favourable terms for exercising any of the rights described above. If you are not satisfied with x99999's response to a privacy request, you may escalate the matter by submitting a formal complaint to the x99999 support team, which maintains a dedicated data protection escalation process.

The x99999 platform integrates with third-party services to deliver its full range of casino and sports betting functionality. These integrations are necessary to provide live casino games, sports odds, payment processing, and platform security. Each third-party provider operates under its own privacy policy and is independently responsible for its data practices.

The main categories of third-party services integrated with x99999 include:

• Game Providers: Licensed studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi supply casino games and live dealer tables. These providers receive anonymised session tokens to facilitate gameplay and do not receive your full personal profile from x99999.
• Payment Gateways: bKash, Nagad, Rocket, Upay, and partner banks process BDT transactions on behalf of x99999. When you initiate a payment, your financial data is transmitted directly to the relevant payment provider over an encrypted connection.
• Analytics Services: x99999 uses privacy-respecting analytics tools to collect aggregated, anonymised data on platform usage. Individual players are not identified in analytics reports.
• Security & Fraud Prevention: Specialist third-party security services may process technical identifiers (such as IP addresses and device fingerprints) to detect and prevent fraudulent activity on the x99999 platform.

x99999 is not responsible for the privacy practices of third-party providers once data has been transmitted to them in the course of a transaction or service interaction. Players who have concerns about the data practices of a specific payment provider (such as bKash or Nagad) should review that provider's applicable privacy policy directly.

The x99999 website does not contain links to external third-party websites other than those necessary for platform functionality. x99999 is not responsible for the content or privacy practices of any external website that a player may independently navigate to.

x99999 reserves the right to update or revise this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, platform functionality, or data processing practices. When a material change is made, x99999 will update the "Effective Date" displayed at the top of this page and, where the change significantly affects the way your data is processed, will notify registered players via the email address on their x99999 account.

Your continued use of the x99999 platform after the updated Privacy Policy has been published constitutes your acceptance of the revised terms. If you do not agree to a revised Privacy Policy, you should discontinue use of the x99999 platform and contact support to request account closure and data deletion in accordance with your rights under Section 6 of this policy.

This Privacy Policy was last updated on 1 January 2026 and supersedes all previous versions. If you have any questions, concerns, or requests relating to this Privacy Policy or to the way x99999 handles your personal data, please contact the x99999 data protection team using the following details:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 via the x99999 platform (BST, UTC+6)
• Response Time: x99999 aims to acknowledge all privacy-related requests within two (2) business days and to resolve them within thirty (30) days.

All privacy correspondence should include your registered x99999 account username and the nature of your request. For security purposes, x99999 will verify your identity before processing any request that involves access to, correction of, or deletion of personal data.