Privacy Policy — How x99bd Collects, Uses, and Protects Your Data

For the purposes of this Privacy Policy, the data controller responsible for your personal information is x99bd, operating the online casino and sports betting platform accessible at x99bd.org. The platform serves players in Bangladesh and is operated in English.

When this Privacy Policy refers to "x99bd", "we", "us", or "our", it refers to the operator of the x99bd platform. When it refers to "you" or "the Player", it refers to any individual who accesses, registers with, or uses the x99bd platform in any capacity.

If you have any questions about how x99bd handles your personal data, or if you wish to exercise any of your privacy rights as described in this policy, you may contact the x99bd data team at [email protected]. Please use the subject line "Privacy Query" to ensure your message is directed to the appropriate team. The support team operates on Bangladesh Standard Time (BST, UTC+6), 24 hours a day.

This Privacy Policy should be read in conjunction with the x99bd Terms & Conditions, which govern the overall relationship between the Player and x99bd. Together, these documents constitute the complete framework for how your information and account are managed on the platform.

x99bd collects personal information from players through several channels: directly from you when you register an account or complete KYC verification; automatically as you use the platform; and in some cases from third-party sources such as payment service providers and fraud prevention systems. The categories of information we collect include the following:

Sensitive Document Data: Where KYC verification requires submission of a government-issued identity document, x99bd collects and stores a copy of that document solely for identity verification and anti-money laundering compliance purposes. This data is classified as sensitive and is subject to enhanced access controls within x99bd's systems.

Data You Choose Not to Provide: In certain cases, providing personal information is optional. However, failure to provide information required for KYC verification or payment processing may result in restrictions on your ability to withdraw funds or access certain platform features. x99bd will notify you at the relevant step if particular information is mandatory.

x99bd uses the personal information it collects for the following purposes. Each purpose is tied to a specific legal basis, which is described in the following section.

• Account creation and management: To register your x99bd account, verify your identity, maintain your account profile, and provide you with access to the platform's games, sports betting markets, and features.
• Payment processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and card networks; to verify that payment methods are registered in your name; and to maintain accurate transaction records in BDT.
• KYC and age verification: To confirm that you meet the minimum age requirement of 18 years and to verify that your identity matches the details provided at registration, as required for responsible gaming compliance and anti-money laundering obligations.
• Customer support: To respond to your queries, resolve disputes, process responsible gaming requests (such as deposit limits or self-exclusion), and communicate updates relevant to your account.
• Platform security and fraud prevention: To detect, investigate, and prevent fraudulent transactions, multi-accounting, bonus abuse, and other prohibited conduct. This includes automated monitoring of account behaviour and betting patterns.
• Responsible gaming compliance: To monitor gaming activity for signs of problematic gambling behaviour, to apply and enforce player-set limits, and to implement self-exclusion requests promptly and completely.
• Legal and regulatory compliance: To fulfil obligations under applicable anti-money laundering requirements, to respond to lawful requests from competent authorities, and to maintain records required by law.
• Platform improvement and analytics: To understand how players use x99bd — which games are most popular, which features are used most frequently, where navigation issues arise — and to improve the platform accordingly. This analysis is conducted on aggregated or anonymised data wherever possible.
• Service communications: To notify you of changes to your account status, amendments to Terms & Conditions or this Privacy Policy, and other operational communications directly related to your use of x99bd. These are not marketing communications and cannot be opted out of while your account remains active.

x99bd does not use your personal data for automated decision-making that produces legal or similarly significant effects on you, except where such processing is required for fraud detection or KYC verification — in which case you retain the right to request human review of the decision.

x99bd processes your personal data on the following legal bases:

• Contractual necessity: Processing your identity data, contact data, financial data, and transaction data is necessary to perform the contract between you and x99bd — that is, to operate your account, accept your deposits, settle your bets, and process your withdrawals. Without this processing, x99bd could not provide its services.
• Legal obligation: x99bd is required by applicable law to conduct identity verification, retain transaction records, monitor for money laundering activity, and cooperate with lawful authority requests. This processing is non-negotiable and cannot be restricted by the Player.
• Legitimate interests: x99bd processes technical data, usage data, and gaming activity data on the basis of its legitimate interest in maintaining platform security, preventing fraud, improving its services, and detecting prohibited conduct. This processing is carried out in a manner that minimises its privacy impact on individual players.
• Consent: Where x99bd relies on consent as the legal basis for any specific processing activity — for example, sending optional promotional communications — we will obtain your clear, affirmative consent before that processing begins. You may withdraw consent at any time by contacting support at [email protected], without affecting the lawfulness of processing carried out before withdrawal.

x99bd does not sell your personal data to any third party. We share personal information only in the circumstances described below, and only to the extent necessary for the specific purpose:

• Payment service providers: When you make a deposit or request a withdrawal, x99bd shares the minimum necessary transaction information with the relevant payment service provider — bKash, Nagad, Rocket, Upay, Visa, or Mastercard — to process the transaction. These providers are contractually bound to use the data only for payment processing purposes.
• Game studios and technology providers: x99bd's games are supplied by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game, technical session data (such as a session token and your account currency) is shared with the relevant studio to enable gameplay. No personally identifiable financial information is shared with game studios.
• Identity verification services: x99bd may use third-party KYC service providers to assist with verification of identity documents. These providers are bound by strict confidentiality obligations and are authorised to use your data only for the specific verification task.
• Fraud prevention and security services: x99bd shares technical data (such as IP addresses and device fingerprints) with fraud prevention and anti-money laundering service providers to detect and prevent prohibited conduct across the platform.
• Legal and regulatory authorities: x99bd will disclose personal data to law enforcement agencies, regulatory bodies, or courts when required to do so by applicable law, or when x99bd reasonably believes that disclosure is necessary to protect the rights, property, or safety of x99bd, its players, or the public.
• Business transfers: In the event of a merger, acquisition, or transfer of the x99bd business, player data may be transferred to the acquiring entity as part of the transaction. Players will be notified of any such transfer and of any resulting change to this Privacy Policy.

In all cases where x99bd shares personal data with third parties, we take reasonable steps to ensure that those parties maintain appropriate data security standards and use the shared data only for the purposes for which it was disclosed.

x99bd uses cookies and similar tracking technologies to operate the platform effectively, to remember your session state, and to understand how players use the site. The following types of cookies are used on x99bd:

• Strictly necessary cookies: These cookies are essential for the platform to function. They maintain your login session, remember your account preferences during a session, and ensure that security features (such as CSRF protection) operate correctly. The platform cannot function without these cookies, and they cannot be disabled.
• Functional cookies: These cookies remember choices you make — such as your preferred language or display settings — so that you do not need to reconfigure them on each visit. They enhance your experience but are not essential to the platform's operation.
• Analytical cookies: x99bd uses analytical tools to collect aggregated data about how players navigate the platform — which pages are visited most frequently, where players encounter errors, and how long sessions last. This data is used to improve the platform. Analytical cookies do not identify individual players by name.
• Security cookies: These cookies support fraud detection and platform security by recording technical session data such as IP address, device type, and interaction patterns. They are used to identify potentially suspicious activity and to protect player accounts.

Most web browsers allow you to control cookies through their settings. You can configure your browser to refuse new cookies, to notify you when a cookie is set, or to delete existing cookies. However, disabling strictly necessary cookies will prevent you from logging into your x99bd account and using the platform's core features.

x99bd does not use third-party advertising cookies or behavioural tracking cookies for the purpose of serving targeted advertisements on external websites.

x99bd retains your personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Active account data: All personal data associated with an active x99bd account is retained for the duration of the account's active status and for a period of five (5) years following permanent account closure, to satisfy anti-money laundering record-keeping requirements.
• Transaction records: Records of deposits, withdrawals, and gaming transactions are retained for a minimum of five (5) years from the date of the transaction, in accordance with applicable financial record-keeping obligations.
• KYC documents: Identity documents submitted for KYC verification are retained for a minimum of five (5) years from the date of submission or from the date of account closure, whichever is later.
• Support communications: Records of support interactions — emails, chat transcripts, dispute records — are retained for three (3) years from the date of the interaction, or longer if the interaction relates to an unresolved dispute or legal claim.
• Technical and usage data: Technical logs, including IP address records and session data, are retained for twelve (12) months from the date of collection, unless retention for a longer period is required for security investigations or legal proceedings.

After the applicable retention period expires, x99bd will securely delete or anonymise the relevant personal data. Anonymised data — data from which all identifying information has been permanently removed — may be retained indefinitely for analytical purposes.

x99bd takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• Transport Layer Security (TLS): All data transmitted between your device and the x99bd platform is encrypted using TLS. This applies to all interactions, including account login, game sessions, and payment transactions.
• Password hashing: Account passwords are stored using one-way cryptographic hashing. x99bd never stores passwords in plain text and cannot retrieve your password — only reset it.
• Two-factor authentication (2FA): x99bd supports SMS-based 2FA for all accounts. When enabled, a time-limited one-time password (OTP) is sent to your registered Bangladesh mobile number at each login, adding a second layer of protection against unauthorised account access.
• Access controls: Access to systems containing player personal data is restricted to authorised x99bd personnel on a need-to-know basis. All internal access is logged and subject to regular review.
• Secure document storage: KYC documents are stored in an encrypted document management system with access restricted to verified compliance personnel. Documents are not accessible to general customer support agents.
• Regular security review: x99bd conducts regular reviews of its security controls and responds to identified vulnerabilities in a timely manner.

Despite these measures, no platform is entirely immune to security risks. You are responsible for maintaining the confidentiality of your own login credentials. If you believe your x99bd account has been compromised, contact support immediately at [email protected].

As a player whose personal data is processed by x99bd, you have the following rights in relation to your personal information. To exercise any of these rights, contact x99bd at [email protected] with the subject line "Privacy Rights Request".

• Right of access: You may request a copy of the personal data that x99bd holds about you. x99bd will provide this information within a reasonable timeframe following receipt of a valid request and identity verification.
• Right to rectification: If any personal data x99bd holds about you is inaccurate or incomplete, you may request that it be corrected. For account details such as your registered name or mobile number, you may also update these directly through your account settings.
• Right to erasure: In certain circumstances — for example, where your data is no longer necessary for the purpose for which it was collected, or where you withdraw consent on which processing is based — you may request that x99bd delete your personal data. This right is subject to legal retention obligations; x99bd cannot delete data it is legally required to retain.
• Right to restrict processing: In certain circumstances, you may request that x99bd limit the processing of your personal data — for example, while a dispute about the accuracy of your data is being resolved.
• Right to object: Where x99bd processes your data on the basis of its legitimate interests, you may object to that processing. x99bd will consider your objection and cease the processing unless there are compelling legitimate grounds for it to continue.
• Right to data portability: Where processing is based on your consent or on the performance of a contract, and is carried out by automated means, you may request that x99bd provide your personal data in a structured, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.

x99bd will not charge a fee for processing legitimate privacy rights requests. However, where requests are manifestly unfounded or excessive — in particular because of their repetitive character — x99bd reserves the right to charge a reasonable administrative fee or decline to respond.

x99bd is strictly an adult platform. Players must be at least 18 years of age to register an account or use any feature of the x99bd platform. x99bd does not knowingly collect, store, or process personal data belonging to individuals under the age of 18.

If x99bd becomes aware, or has reasonable grounds to suspect, that an account has been registered by or is being used by an individual under the age of 18, the account will be suspended immediately pending age verification. If the account is confirmed to belong to a minor, it will be closed, all accrued balances and winnings will be forfeited, and any personal data collected in connection with the account will be deleted to the extent permitted by applicable legal obligations.

If you are a parent or guardian and believe that a minor in your care has registered an x99bd account, please contact us immediately at [email protected] so that we can take prompt action. x99bd takes its age restriction obligations seriously and supports responsible gaming at every level of the platform.

x99bd reserves the right to update this Privacy Policy at any time. When material changes are made — meaning changes that significantly affect how your personal data is collected, used, or shared — x99bd will notify registered players via the registered mobile number or by displaying a prominent notice on the platform before the changes take effect.

Non-material changes — such as typographical corrections, clarifications of existing provisions, or updates required by changes in applicable law — may take effect without prior individual notice. The "Effective Date" at the top of this policy will be updated to reflect the date of the most recent revision.

Your continued use of x99bd following the effective date of any update to this Privacy Policy constitutes your acknowledgement of the revised policy. The most current version of this Privacy Policy is always available on this page at x99bd.org/privacy-policy. We encourage you to review this policy periodically to stay informed about how your personal data is being handled.

If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or have a concern about how x99bd has handled your personal data, please contact the x99bd support and data team using the details below.

Email: [email protected] — Please use the subject line "Privacy Query" or "Privacy Rights Request" as appropriate.

Response time: x99bd aims to acknowledge all privacy queries within 2 business days and to resolve them within 30 calendar days of receipt. Complex requests may require additional time, in which case x99bd will notify you of the expected resolution timeline.

Support hours: The x99bd support team operates 24 hours a day, 7 days a week, on Bangladesh Standard Time (BST, UTC+6). English is the supported language for all privacy communications.

x99bd is committed to resolving privacy concerns directly and promptly. If you are not satisfied with x99bd's response to your privacy query, you retain the right to escalate your concern to the appropriate data protection authority under applicable law.