Legal · Data Privacy
x99 Privacy Policy — How We Handle Your Personal Data
This Privacy Policy explains what personal information x99 collects from players in Bangladesh, how that information is used, and the steps taken to keep it safe. We are committed to handling your data with care and transparency.
Overview
1. Introduction and Scope
x99 operates the online gaming and sports betting platform accessible at x99.bar. In the course of providing our services to players across Bangladesh — including account registration, payment processing, game delivery, customer support, and responsible gaming functions — we necessarily collect and process certain personal information. This Privacy Policy sets out in plain terms what data we collect, why we collect it, how we use it, how long we keep it, and what rights you have in relation to it.
This Privacy Policy applies to all users of the x99 platform, including registered account holders, users who browse the platform without creating an account, and users who contact x99 support. By creating an x99 account or using the x99 platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein.
x99 does not sell, rent, or trade personal data to third parties for their own marketing purposes. Your data is used solely in connection with delivering the x99 service to you.
Data We Collect
2. Information We Collect
x99 collects the following categories of personal information. Not all categories apply to every user — the specific data collected depends on how you interact with the platform.
Registration & Identity Data
Full name, date of birth, Bangladesh mobile number, and any identity verification documents (e.g. National ID, passport) provided during the KYC process. This data is collected when you register an account or when x99 initiates a verification request.
Payment & Transaction Data
Mobile wallet identifiers (bKash, Nagad, Rocket), transaction amounts, timestamps, and transaction reference numbers associated with deposits and withdrawals. x99 does not store full wallet PINs or passwords. Payment data is used for transaction processing, fraud prevention, and withdrawal verification.
Device & Technical Data
Device type, operating system version, browser type and version, IP address, mobile network operator, and screen resolution. This data is collected automatically when you access the x99 platform and is used for security monitoring, fraud detection, and platform optimisation.
Gaming & Betting Activity Data
Game session histories, bet amounts, game types played, wager outcomes, bonus usage records, and session duration data. This data is used for account management, responsible gaming monitoring, bonus administration, and dispute resolution.
Cookies & Tracking Data
Session cookies, persistent cookies, and similar tracking technologies used to maintain your login session, remember platform preferences, and analyse usage patterns. See Section 12 of this policy for full details on our cookie use.
Data Use
3. How We Use Your Information
x99 processes personal data only for specific, legitimate purposes directly related to operating a safe and fair online gaming platform for Bangladesh players. The purposes for which we use your data are:
- Account creation, verification, and ongoing management — including processing KYC documentation to confirm your identity and age.
- Processing deposits and withdrawals in BDT via bKash, Nagad, and Rocket, and maintaining accurate transaction records for accounting and dispute purposes.
- Delivering game content and betting markets, maintaining game session records, and calculating and distributing winnings correctly.
- Providing customer support via email, investigating account queries, and resolving payment disputes.
- Responsible gaming monitoring — analysing gaming activity patterns to identify players who may be exhibiting signs of problem gambling, and applying protective tools or restrictions where appropriate.
- Fraud prevention, security monitoring, and detection of prohibited account conduct including multi-accounting, collusion, and automated play.
- Sending service communications including account notifications, transaction confirmations, bonus alerts, and updates to platform policies. Marketing communications are sent only where you have provided consent and may be opted out of at any time by contacting support.
Legal Basis
4. Legal Basis for Processing
x99 processes your personal data on the following legal bases, depending on the type of data and the purpose for which it is being used:
- Contract performance — processing necessary to create and administer your account, deliver game services, process payments, and fulfil our obligations to you as a platform user.
- Legitimate interests — processing for fraud prevention, security monitoring, responsible gaming analysis, and platform improvement, where these interests are not overridden by your privacy rights.
- Legal obligation — processing required to comply with anti-money laundering obligations, age verification requirements, and any lawful request from a court, regulator, or law enforcement authority.
- Consent — processing for marketing communications and, where applicable, the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
Data Sharing
5. Sharing Your Information
x99 does not share your personal data with third parties except in the specific circumstances described below. In all cases, data sharing is limited to the minimum information necessary for the stated purpose.
Permitted Disclosures
- Payment processors — bKash, Nagad, and Rocket receive only the transaction data strictly necessary to process your deposit or withdrawal request. x99 does not share your gaming history or account balance with payment providers.
- Game providers — Pragmatic Play, Evolution Gaming, Spribe, Ezugi, and other licensed studios receive session tokens and player IDs to authenticate game sessions. They do not receive your full identity data, mobile number, or payment details.
- Identity verification services — third-party KYC providers may receive identity documents and registration data for the purpose of verifying your age and identity. These providers operate under strict confidentiality obligations.
- Law enforcement and regulatory authorities — x99 will disclose personal data to the police, courts, or other governmental bodies where required to do so by law or in response to a lawful and properly served legal process.
x99 never sells, rents, or provides personal data to advertising networks, data brokers, affiliate marketers, or any commercial third party for their independent marketing or profiling use.
Financial Data
6. Payment Data and Financial Privacy
All payment transactions on x99 are processed through the official APIs of bKash, Nagad, and Rocket. x99 does not store your mobile wallet PIN, OTP codes, or full wallet account credentials on its servers. The transaction data x99 retains — which includes wallet identifiers, transaction amounts, and reference numbers — is stored in encrypted form and is accessible only to authorised x99 personnel for the purposes of payment reconciliation, fraud investigation, and withdrawal verification.
x99 is committed to financial data minimisation. We collect only the transaction data that is strictly necessary for the stated purposes. Deposit and withdrawal records are retained for a minimum of 5 years from the date of the transaction for accounting, audit, and legal compliance purposes. After the applicable retention period expires, financial records are securely deleted or anonymised.
Retention
7. How Long We Keep Your Data
x99 does not retain personal data for longer than is necessary for the purpose for which it was collected. The following retention periods apply:
- Account data — retained for the lifetime of your account and for a period of 5 years following account closure, to satisfy anti-money laundering record-keeping obligations and to resolve any outstanding disputes.
- Transaction and payment records — retained for a minimum of 5 years from the date of the transaction for financial audit and legal compliance purposes.
- Device and session logs — retained for up to 12 months for security monitoring and fraud investigation purposes, then deleted or anonymised.
Security
8. How We Protect Your Data
x99 employs a range of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. While no online platform can guarantee absolute security, x99 takes the following steps to keep your data safe:
SSL Encryption
All data transmitted between your device and the x99 platform is encrypted using industry-standard SSL (Secure Socket Layer) technology. This ensures that your personal and payment data cannot be intercepted in transit.
Access Controls
Access to personal data within x99's systems is restricted to authorised personnel on a strict need-to-know basis. All staff with access to player data are subject to confidentiality obligations and receive regular data security training.
Password Security
Account passwords are stored in hashed and salted form using modern cryptographic algorithms. x99 never stores passwords in plaintext and will never ask you to share your password via email or chat.
Your Rights
9. Your Data Rights
x99 respects your rights in relation to your personal data. You may exercise any of the following rights at any time by contacting the x99 support team at [email protected]:
Right of Access
Request a copy of the personal data x99 holds about you.
Right to Rectification
Request that inaccurate or incomplete personal data be corrected.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
Right to Portability
Request a structured, machine-readable copy of the personal data you have provided to x99.
Right to Object
Object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
Right to Withdraw Consent
Withdraw previously given consent for marketing communications or non-essential cookies at any time without penalty.
To exercise any of these rights, email [email protected] with your full name, registered mobile number, and a description of your request. x99 will respond within 30 days. Some requests may be subject to identity verification before they can be fulfilled.
Cookies
10. Cookies and Tracking Technologies
x99 uses cookies and similar technologies to provide a functional, personalised, and secure platform experience. The following types of cookies are used on x99.bar:
- Essential cookies — strictly necessary to operate the platform, maintain your login session, and process transactions. These cannot be disabled without impairing core platform functionality.
- Analytics cookies — used to understand how players interact with the platform, which pages are visited most frequently, and where technical errors occur. This data is aggregated and anonymised. Analytics cookies are used only where consent has been given.
- Preference cookies — used to remember your platform settings such as language preference and display settings, so that you do not need to re-configure them each time you visit.
You may manage your cookie preferences through your device browser settings at any time. Disabling essential cookies may prevent the platform from functioning correctly. x99 does not use cookies for cross-site tracking or for sharing data with advertising networks.
Age Protection
11. Protection of Minors
x99 is an adult gaming platform and does not knowingly collect personal data from persons under the age of 21. Registration on the x99 platform requires confirmation that the user is aged 21 or above. Where x99 discovers that personal data has been collected from a person under the age of 21, that data will be deleted immediately and the associated account will be closed without notice.
21+ only. x99 enforces strict age verification as part of the account registration process. If you are a parent or guardian and believe that a person under 21 has created an account on x99, please contact [email protected] immediately.
Policy Updates
12. Changes to This Privacy Policy
x99 reserves the right to update this Privacy Policy at any time. When material changes are made, the updated policy will be published at x99.bar/privacy-policy with a revised effective date. We encourage you to review this page periodically to stay informed about how your data is being protected.
Where a change to this Privacy Policy materially affects the way in which x99 processes your personal data — particularly where it involves a new category of data, a new purpose, or a new third-party recipient — x99 will make reasonable efforts to notify registered account holders by posting a prominent notice on the platform prior to the change taking effect.
Contact
13. Contact Our Data Team
For all privacy-related enquiries, data subject access requests, or complaints regarding x99's handling of your personal data, please contact the x99 support team. We aim to respond to all privacy enquiries within 30 days. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days, in which case we will notify you of the extension.
Privacy Enquiries
Your Privacy Matters to x99
We are committed to keeping your data safe. If you have questions about this policy, want to exercise your data rights, or simply want to explore x99 with confidence, our team is here to help.