x99900 Privacy Policy

x99900 ("we", "us", "our") is committed to protecting the privacy and personal data of all individuals ("Player", "User", "you", "your") who access or use the x99900 online gambling platform, accessible at https://x99900.app and all associated sub-domains, mobile interfaces, and application programming interfaces.

This Privacy Policy sets out in clear, accessible terms the categories of personal data we collect, the purposes for which we process that data, the legal bases on which processing rests, the parties with whom data may be shared, the rights available to you regarding your personal data, and the measures x99900 takes to keep your information secure.

By registering an x99900 account, making a deposit, or otherwise using the x99900 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not accept the terms of this Privacy Policy, you should not create an account or use the x99900 platform.

x99900 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered players via the contact details on file. The version of this Privacy Policy bearing the most recent effective date, as displayed at the top of this page, shall govern all processing activities from that date forward.

x99900 collects personal data in several ways: directly from you when you register and use our platform, automatically through your use of the platform, and occasionally from third-party sources such as payment processors and identity verification providers. The categories of personal data we collect include the following:

1.1 Registration and Identity Data

When you create an x99900 account, we collect: your full legal name, date of birth, mobile phone number, email address (where provided), and the details of your chosen payment method. We require this information to establish your identity, verify that you meet the minimum age requirement of 21, and operate your x99900 account.

1.2 KYC and Verification Data

As part of our know-your-customer (KYC) obligations, x99900 may request copies of identity documents such as your National Identity Card (NID), passport, or driver's licence, together with a proof-of-address document. This data is collected to comply with anti-money-laundering (AML) requirements and to protect the platform against fraud.

1.3 Financial Transaction Data

x99900 collects records of all deposits, withdrawals, and betting transactions conducted through your x99900 account. This includes transaction reference numbers, amounts in BDT, timestamps, and the payment methods used (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, Visa, or Mastercard). Financial transaction data is retained for a minimum of five years in accordance with standard financial record-keeping obligations.

1.4 Technical and Device Data

When you access the x99900 platform, we automatically collect certain technical data including: your IP address, device type and model, operating system and version, browser type and version, mobile network information, time zone setting, and pages or features accessed during your session. This data helps us deliver a reliable, secure, and optimised platform experience.

1.5 Usage and Behavioural Data

x99900 collects data about how you interact with our platform — including the games you play, the bets you place, your session duration, the features you access most frequently, and the promotional offers you engage with. This data is used to improve our services, personalise your experience, and monitor responsible gaming patterns.

1.6 Communications Data

If you contact x99900 customer support, submit a complaint, or correspond with us by any means, we will retain a record of that communication including any attachments. This data enables us to resolve your query effectively and maintain a history of interactions for quality assurance purposes.

x99900 processes your personal data only for specified, explicit, and legitimate purposes. The table below summarises our primary processing activities and the legal basis for each:

x99900 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or establishing a fresh legitimate legal basis for the new processing activity.

2.1 Marketing Communications

Where you have opted in to receive promotional communications from x99900, we may contact you via SMS or push notification to inform you of relevant bonuses, seasonal promotions, new game releases, and special events. You may withdraw your consent to marketing communications at any time by contacting x99900 customer support. Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to withdrawal, nor does it affect the delivery of essential service notifications related to your account.

x99900 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share personal data only where necessary and only with the categories of recipient described below:

3.1 Payment Service Providers

To process your deposits and withdrawals, x99900 shares relevant financial and identity data with our authorised payment partners including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, Visa, and Mastercard. Each payment partner operates under its own privacy policy and applicable financial regulations. x99900 shares only the minimum data necessary to complete each transaction.

3.2 Identity Verification Providers

x99900 may use third-party KYC and identity verification services to confirm the identity and age of registered players. These providers process identity document data solely on behalf of x99900 and are contractually prohibited from using that data for any independent purpose.

3.3 Game Content Providers

The x99900 platform integrates games from certified international studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. Limited session and gameplay data may be shared with these providers to facilitate game delivery and to support dispute resolution. Game providers do not receive personally identifiable player data beyond what is necessary for these purposes.

3.4 Fraud Prevention and AML Services

x99900 may share data with specialist fraud detection and anti-money-laundering screening services to protect the platform and its players from financial crime. Where required by applicable law, x99900 may also disclose personal data to relevant law enforcement or regulatory authorities.

3.5 Professional Advisers

x99900 may share personal data with legal advisers, auditors, and other professional service providers on a strictly confidential, need-to-know basis for the purposes of operating and protecting our business.

x99900 uses cookies and similar tracking technologies to operate core platform functionality, remember your session and preferences, analyse platform performance, and deliver a personalised experience. Cookies are small text files placed on your device when you visit the x99900 platform.

4.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the platform to function correctly. These include session authentication cookies and security tokens. They cannot be disabled without rendering the platform inoperable.
• Functional Cookies: Remember your preferences such as language settings and notification preferences to provide a more personalised experience.
• Analytics Cookies: Collect aggregated, anonymised data about how players use the x99900 platform, helping us identify performance issues and improve features over time.
• Session Cookies: Temporary cookies deleted when you close your browser, used to maintain your logged-in state during a single platform session.

By continuing to use the x99900 platform after being presented with cookie information, you consent to the use of cookies as described above. You may manage or disable non-essential cookies through your device or browser settings; however, disabling certain cookies may affect your ability to use some features of the x99900 platform.

x99900 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law, whichever is longer. The following general retention periods apply:

• Account and identity data: Retained for the duration of your active x99900 account plus a minimum of five (5) years following account closure, in accordance with standard financial record-keeping obligations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction.
• KYC and verification documents: Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later.
• Customer support communications: Retained for a minimum of two (2) years from the date of the last interaction.
• Marketing consent records: Retained for as long as you remain subscribed, plus one (1) year following opt-out, to demonstrate compliance.
• Technical and device data (logs): Retained for up to twelve (12) months on a rolling basis.

Upon the expiry of the applicable retention period, x99900 will securely delete or anonymise your personal data so that it can no longer be associated with your identity.

x99900 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include:

• Industry-standard SSL/TLS encryption for all data transmitted between your device and the x99900 platform.
• Encryption of sensitive data fields at rest, including identity document data and payment information.
• Role-based access controls ensuring that personal data is accessible only to x99900 staff who genuinely require it to perform their duties.
• Regular security assessments, penetration testing, and vulnerability scanning of the x99900 platform infrastructure.
• Multi-factor authentication requirements for all x99900 administrative systems.
• Incident response procedures designed to detect, contain, and report any data security breach within the shortest practicable timeframe.

While x99900 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security against all possible threats. You are responsible for keeping your x99900 account credentials confidential and for notifying us immediately if you suspect any unauthorised access to your account.

As a registered x99900 player, you have the following rights with respect to your personal data. To exercise any of these rights, please contact x99900 customer support using the contact details at the bottom of this page.

• Right of Access: You may request a copy of the personal data x99900 holds about you, together with information about how that data is processed.
• Right to Rectification: You may request that x99900 correct any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: In certain circumstances, you may request that x99900 delete your personal data. This right is subject to overriding legal obligations — for example, we cannot delete financial transaction records that we are required to retain for AML compliance purposes.
• Right to Restrict Processing: You may request that x99900 restrict the processing of your personal data in certain circumstances, such as while a dispute about data accuracy is being resolved.
• Right to Data Portability: Where processing is based on your consent or a contract, you may request that x99900 provide your personal data in a structured, machine-readable format.
• Right to Object: You may object to the processing of your personal data where x99900 relies on legitimate interest as the legal basis, including profiling for direct marketing.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

x99900 will respond to all verified data rights requests within 30 days of receipt. In complex cases, this period may be extended by a further 30 days, and you will be notified of any extension together with the reason for the delay.

The x99900 platform is strictly intended for individuals aged 21 and above. x99900 does not knowingly collect or process the personal data of anyone under the age of 21. If x99900 becomes aware that personal data has been collected from a person under the age of 21, that data will be deleted immediately and the associated account will be closed.

If you believe that x99900 may have inadvertently collected personal data from an underage individual, please contact us immediately at [email protected] so that we can take prompt corrective action.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by x99900, please contact our data team using the details below. All privacy-related correspondence should be directed to:

x99900 Data & Privacy Team
Email: [email protected]

Please note that the email address above is displayed as plain text only and is not a clickable link. Copy the address manually into your email client to reach us.

x99900 aims to acknowledge all privacy-related enquiries within 24 hours and to provide a substantive response within 30 days of receipt.