Data Protection Notice
Your Privacy at xx999com
At xx999com, protecting the personal data of every Bangladesh player is a core commitment. This Privacy Policy explains exactly what information we collect, why we collect it, how it is stored and protected, and the rights you hold over your own data.
SSL-Encrypted Data Transmission
Every piece of data you submit to xx999com — from registration details and bKash transaction records to live casino session activity — is transmitted over 256-bit SSL encryption, ensuring your information cannot be intercepted in transit.
No Sale of Personal Data
xx999com does not sell, rent, or trade your personal information to third-party marketers, data brokers, or advertisers under any circumstances. Your data is used solely for the purposes described in this Privacy Policy and is never monetised externally.
Identity Verification Control
KYC (Know Your Customer) verification documents submitted to xx999com — including Bangladesh national ID cards, passports, and utility bills — are stored in a dedicated, access-controlled document repository and are only reviewed by authorised compliance staff.
Transparent Cookie Use
xx999com uses cookies and similar tracking technologies strictly for platform functionality, session management, and anonymised analytics. We do not use third-party advertising cookies. You can manage your cookie preferences at any time via your browser settings.
Your Right to Access and Erasure
Bangladesh players registered with xx999com have the right to request a copy of all personal data we hold about them, to correct inaccurate data, and to request erasure of their data subject to legal retention obligations. Submit a data request via our support team at any time.
Secure Data Storage
All personal data collected by xx999com is stored on secured servers with restricted access controls, firewalls, and regular security audits. Payment transaction records processed via Nagad, Rocket, and partner banks are handled in accordance with applicable financial data security standards.
Section 1
Information We Collect
xx999com collects personal data from players registered in Bangladesh through several distinct channels: directly from you during registration and account management, automatically through your use of the platform, and in limited circumstances from trusted third-party service providers such as payment processors and identity verification partners.
The categories of personal data we collect, and the specific items within each category, are described in the table below. We collect only the data that is necessary to operate a secure, compliant, and fair gaming platform.
| Data Category | Specific Items Collected | Collection Method |
|---|---|---|
| Identity Data | Full name, date of birth, national ID number (NID), passport or driver's licence details | Registration form and KYC verification upload |
| Contact Data | Mobile phone number, email address, district of residence (e.g., Dhaka, Chittagong, Sylhet) | Registration form and account settings |
| Financial Data | bKash / Nagad / Rocket mobile wallet number, bank account details, transaction history in BDT | Deposit and withdrawal process |
| Technical Data | IP address, device type, browser type and version, operating system, screen resolution | Automatically via platform access logs |
| Usage Data | Pages visited, games played (cricket, slots, casino, fishing), session duration, bet history | Automatically via analytics and session tracking |
| Communications Data | Live chat transcripts, support ticket content, email correspondence with xx999com support | Customer support interactions |
Voluntarily Provided Data
Certain data — such as your district of residence or a preferred display name — is provided voluntarily during registration or through account settings. While not mandatory, this information helps xx999com tailor your experience and deliver Bangladesh-relevant promotions such as BPL season offers and Eid bonus campaigns.
Section 2
How We Use Your Data
xx999com processes your personal data only for specific, lawful, and clearly defined purposes. We do not process data in a manner that is incompatible with the purpose for which it was originally collected. The primary purposes for which we use your data are set out below.
- Account Management: To create, maintain, and administer your xx999com player account, including verifying your identity, processing deposits and withdrawals via bKash and Nagad, and managing account security.
- Service Delivery: To provide you with access to cricket betting markets (BPL, IPL, T20 World Cup), live casino games (Evolution Gaming, Pragmatic Play, Ezugi), slot titles, fishing games, and all other xx999com platform features.
- Payment Processing: To process deposits and withdrawals accurately, reconcile BDT transaction records, and resolve payment disputes within the timeframes stated in our Terms & Conditions.
- Legal Compliance: To fulfil our obligations under applicable anti-money laundering (AML) regulations, age verification requirements (18+), and any lawful requests from regulatory or law enforcement bodies operating in Bangladesh.
- Responsible Gaming: To monitor account activity for signs of problem gambling behaviour, enforce self-exclusion requests, apply deposit limits, and deliver responsible gaming communications to at-risk players.
- Fraud Prevention and Security: To detect and prevent fraudulent account activity, unauthorised access, bonus abuse, multi-accounting, and any other conduct that violates the xx999com Terms & Conditions.
- Platform Improvement: To analyse anonymised usage data in aggregate — for example, which game categories are most popular among Dhaka-based players — and use these insights to improve the xx999com platform experience.
- Marketing Communications: To send you relevant promotional offers, bonus notifications, and platform updates by email or SMS, where you have opted in to receive such communications. You may opt out at any time.
xx999com processes personal data on the following lawful bases: performance of a contract (your player agreement with us), compliance with a legal obligation, our legitimate interests in operating a secure and commercially viable platform, and — for direct marketing — your consent.
Section 3
Data Sharing and Disclosure
xx999com does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial purposes. We share your data only in the specific, limited circumstances described below, and only to the extent necessary for each purpose.
We share financial transaction data with bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and other payment partners solely to execute deposits and withdrawals in BDT. These providers are bound by their own data protection obligations.
To comply with age verification (18+) and AML requirements, we may share identity documents with third-party KYC verification providers. These providers process data under strict confidentiality agreements with xx999com.
Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive session identifiers and anonymised game-play data necessary to deliver their games within the xx999com platform. No personally identifiable information is shared beyond what is technically required.
xx999com will disclose personal data to law enforcement, financial regulators, or other competent authorities in Bangladesh when required to do so by a lawful order, court directive, or regulatory obligation. We will notify you of such disclosures where legally permitted.
In the event of suspected fraud, multi-accounting, or money laundering, we may share relevant account data with industry fraud prevention bodies to protect the integrity of the platform and other players.
In the unlikely event of a merger, acquisition, or sale of substantially all assets of xx999com, player data may be transferred to the acquiring entity. You will be notified of any such transfer and your rights with respect to your personal data will be preserved.
International Data Transfers
Some of our service providers — including certain game software partners — operate servers located outside Bangladesh. Where personal data is transferred internationally, xx999com ensures that appropriate safeguards are in place, including contractual data protection clauses, to ensure your data receives a level of protection equivalent to that applied within Bangladesh.
Section 4
Cookies and Tracking Technologies
xx999com uses cookies — small text files placed on your device — and similar tracking technologies including local storage objects and session tokens. These technologies are essential to the reliable operation of the platform and to our ability to deliver a personalised, secure gaming experience for players across Bangladesh.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Essential / Functional | Maintains your login session, remembers language preferences, enables secure navigation between cricket betting, slots, and casino sections. | Session / up to 30 days |
| Analytics | Collects anonymised data on which pages and game categories are most visited, how long players stay on each section, and platform performance metrics. No personally identifiable data is transmitted. | Up to 12 months |
| Security | Detects suspicious login activity, flags unusual IP address changes, and supports fraud prevention mechanisms to protect your xx999com account. | Session / up to 90 days |
| Preference | Stores your display preferences, default deposit method (e.g., bKash or Nagad), and favourite game category so the platform loads faster on your next visit. | Up to 180 days |
xx999com does not use third-party advertising or retargeting cookies. You will not see xx999com adverts following you across the internet as a result of cookies placed by our platform. You may disable non-essential cookies at any time through your browser settings; however, disabling essential cookies may impair your ability to log in or place bets on the platform.
Section 5
Data Security Measures
xx999com implements a multi-layered security architecture to protect the personal and financial data of all registered Bangladesh players. Our security programme is reviewed and updated on a regular basis to address evolving threats and to maintain the trust our players place in the platform.
- 256-bit SSL/TLS Encryption: All data transmitted between your device and the xx999com platform — including login credentials, deposit amounts, and game session data — is protected by industry-standard Transport Layer Security (TLS) encryption.
- Secure Server Infrastructure: Player data is stored on dedicated servers equipped with enterprise-grade firewalls, intrusion detection systems, and regular third-party penetration testing to identify and remediate vulnerabilities.
- Access Controls: Access to personal data within the xx999com organisation is restricted on a strict need-to-know basis. Staff with access to player data receive regular data protection training and are bound by confidentiality obligations.
- Audit Logging: All access to personal data records is logged and audited. Any unauthorised or anomalous data access attempt triggers an immediate internal security review.
- Regular Security Audits: The xx999com platform undergoes periodic security assessments conducted by independent security professionals. Findings are acted upon within defined remediation timeframes.
Reporting a Security Concern
If you believe your xx999com account has been compromised, or if you discover a potential security vulnerability on our platform, please contact our support team immediately via live chat. We take all security reports seriously and respond to credible reports within 24 hours Bangladesh Standard Time (BST, UTC+6).
Section 6
Data Retention Policy
xx999com retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The retention periods we apply to different categories of data are described below.
- Active Account Data: While your xx999com account remains open and active, we retain all account registration data, transaction history, and betting records. This data is necessary for the ongoing provision of our services and for resolving any account disputes.
- Closed Account Data: Following the voluntary or involuntary closure of your account, xx999com retains your identity data, transaction history, and account correspondence for a minimum period of five (5) years. This retention period is required to comply with applicable AML regulations and to defend against potential legal claims.
- KYC Verification Documents: Identity documents submitted for age and identity verification are retained for a minimum of five (5) years following account closure, in line with financial compliance standards.
- Marketing Data: If you have opted in to marketing communications, your contact data used for that purpose is retained until you withdraw your consent or request erasure. Opt-out requests are processed within 10 working days.
- Technical and Analytics Data: Anonymised analytics data with no personally identifiable elements may be retained indefinitely for platform improvement purposes. Data that can be linked to an individual is pseudonymised after 24 months of account inactivity.
At the end of the applicable retention period, xx999com will securely delete or anonymise your personal data in accordance with our internal data destruction procedures. You may request information about the specific retention period applicable to your data by contacting our privacy team.
Section 7
Your Privacy Rights
As a registered player on xx999com, you hold a number of rights in relation to the personal data we process about you. xx999com is committed to honouring these rights promptly and without undue delay. To exercise any of the rights listed below, please contact our support team via live chat or at the email address listed in Section 8.
You have the right to request a copy of all personal data xx999com holds about you. We will provide this in a structured, commonly used format within 30 days of a verified request.
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. For example, if your registered mobile number or district of residence has changed, you may update it through account settings or by contacting support.
You may request that xx999com delete your personal data where it is no longer necessary for the purpose it was collected, or where you withdraw consent. This right is subject to overriding legal retention obligations — for example, we cannot erase transaction records required for AML compliance.
In certain circumstances — such as where you contest the accuracy of your data or object to our processing on legitimate interest grounds — you may request that we restrict how we use your personal data while the matter is investigated.
You have the right to receive the personal data you have provided to xx999com in a machine-readable format, and to request that this data be transmitted directly to another service provider where technically feasible.
Where we rely on your consent to process personal data — such as for marketing emails about xx999com promotions — you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
xx999com will not charge a fee for exercising any of the rights described above. We will respond to all verified data subject requests within 30 calendar days. In complex or high-volume cases, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it.
Please note that certain rights may be limited where their exercise would prejudice the prevention or detection of fraud, compliance with a legal obligation, or the establishment, exercise, or defence of legal claims relating to your xx999com account.
Section 8
Contact and Privacy Enquiries
If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or have a concern about how xx999com handles your personal data, please contact our dedicated privacy team using the details below. All privacy enquiries are handled in English and are treated in strict confidence.
- Privacy Email: support@xx999com — please include "Privacy Request" in the subject line of your message so it is routed to the correct team.
- Live Chat: Our customer support team is available 24 hours a day, 7 days a week via the live chat function on the xx999com platform. Privacy requests submitted via live chat will be escalated to the privacy team within one business day (Bangladesh Standard Time, UTC+6).
- Response Time: We aim to acknowledge all privacy enquiries within 48 hours and to provide a substantive response within 30 calendar days of receiving a verified request. Complex requests may take up to 60 days, with prior notice to you.
Policy Updates
xx999com reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, platform features, or applicable legal requirements. When material changes are made, we will notify registered players via the email address associated with their account at least 14 days before the changes take effect. The most current version of this Privacy Policy is always available on this page. Continued use of xx999com after the effective date of an update constitutes acceptance of the revised Privacy Policy.
Your Data Is Safe with xx999com
Now that you understand how we protect your privacy, explore the full range of cricket betting, live casino, and slot games that Bangladesh's most trusted platform has to offer.