x99o Privacy Policy
This Privacy Policy explains how x99o collects, uses, stores, and protects the personal information of players and visitors in Bangladesh. We are committed to handling your data with care and transparency.
This Privacy Policy ("Policy") describes how x99o ("the Platform", "we", "us", "our"), accessible at x99o.pro, collects, processes, stores, and protects the personal information of individuals ("you", "your", "the Player") who register for an account, make a deposit, place a wager, or otherwise interact with the x99o platform. By accessing or using x99o, you acknowledge that you have read this Policy and consent to the collection and use of your information as described herein. If you do not agree with any part of this Policy, please discontinue use of the platform and contact us to close your account.
x99o is an online gaming platform serving players in Bangladesh. We recognise the importance of privacy to our players, and we approach data handling as a responsibility rather than a compliance formality. This Policy is written in plain language wherever possible so that players in Bangladesh can understand exactly what data we hold, why we hold it, and what their rights are in relation to it. Where legal terminology is unavoidable, we have provided plain-English explanations alongside it.
Your Privacy at a Glance
All data transmission is protected by SSL encryption. Your details travel securely between your device and our servers.
x99o does not sell, rent, or trade your personal data to third parties for their own marketing purposes.
You may request a copy of all personal data x99o holds about you at any time by contacting our support team.
Subject to legal retention requirements, you may request deletion of your personal data when you close your account.
We use essential and analytical cookies. Non-essential cookies may be managed through your browser settings at any time.
Privacy queries are handled by our support team at [email protected]. We aim to respond within 48 hours BST.
1. Information We Collect
When you register an account, use the platform, or contact our support team, you provide us with information directly. This includes:
- Registration information: your full name, date of birth, and mobile number used as your account identifier.
- Identity verification documents: national identity card (NID), passport, or other government-issued identification submitted to fulfil our KYC obligations. These documents are processed securely and retained only as long as required.
- Payment information: your bKash, Nagad, Rocket, or Upay wallet number associated with deposits and withdrawals. x99o does not store full payment credentials beyond the wallet number needed for transaction routing.
- Support communications: messages, emails, and chat logs exchanged with our customer support team. These are retained to maintain a service history and to resolve disputes.
When you access x99o, certain technical information is collected automatically by our servers and analytics systems:
- Device and connection data: IP address, device type, operating system version, browser type and version, and mobile network carrier. This information helps us detect fraud, verify account location, and optimise platform performance.
- Session data: pages visited, time spent on each page, betting or gaming activity during the session, deposit and withdrawal timestamps. This data is used to improve the user experience and to detect unusual account behaviour consistent with fraud or account compromise.
- Cookie data: information stored in cookies placed on your device. See Section 6 for a full explanation of cookie types and your options for managing them.
- Geolocation data: approximate location derived from your IP address. x99o does not access GPS-level location data from your device. IP-based geolocation is used to verify that you are accessing the platform from a permitted location.
In limited circumstances, x99o may receive information about you from third parties:
- Payment processors: transaction confirmation data from bKash, Nagad, Rocket, and Upay confirming that a deposit or withdrawal has been completed successfully.
- Identity verification partners: where x99o uses a third-party KYC service to verify identity documents, that service may provide a verification result (pass/fail) and a confidence score to x99o. The underlying document images are processed by the KYC partner under their own data processing agreement.
- Fraud and AML screening services: sanctions list checks and politically exposed persons (PEP) screening data from recognised compliance databases, used to fulfil our anti-money laundering obligations.
2. How We Use Your Information
x99o uses the personal data it collects for specific, defined purposes. The table below summarises our main processing activities. Where we rely on legitimate interests, we have balanced those interests against your rights and are satisfied that our processing does not override your fundamental privacy rights.
| Purpose | Legal Basis |
|---|---|
| Account creation and management | Contract performance |
| Payment processing and withdrawal verification | Contract performance |
| Identity verification and KYC compliance | Legal obligation |
| Fraud detection and prevention | Legitimate interests |
| Promotional communications (with your consent) | Consent |
3. Legal Basis for Processing
x99o processes your personal data under the following legal bases. Each processing activity described in this Policy is mapped to at least one of these bases:
- Contract performance: processing necessary to register your account, process your deposits and withdrawals, and operate the platform as described in our Terms & Conditions.
- Legal obligation: processing required to comply with anti-money laundering laws, KYC requirements, and any other applicable legal obligation. x99o cannot waive these processing activities even if requested.
- Legitimate interests: processing for fraud prevention, security monitoring, platform analytics, and responsible gaming enforcement, where x99o has assessed that these interests are not overridden by your rights. You may object to processing under this basis by contacting [email protected].
- Consent: processing for direct marketing, promotional notifications, or any non-essential cookie placement. You may withdraw consent at any time without affecting the legality of processing carried out before withdrawal.
4. Sharing Your Information
x99o does not sell your personal data. We share your data only with the following categories of third party, and only to the extent necessary for the stated purpose:
- Payment service providers (bKash, Nagad, Rocket, Upay): we share the minimum transaction data necessary to process your deposit or withdrawal. These providers operate under their own privacy policies and are independently regulated.
- Game content providers (Pragmatic Play, Evolution Gaming, Spribe, Ezugi, and others): session identifiers and game-related data may be passed to game providers to enable fair-play auditing and game state reconstruction. Game providers do not receive your financial data.
- KYC and compliance service providers: identity document data and screening results are shared with authorised KYC partners under data processing agreements that require those partners to maintain equivalent data protection standards.
- Law enforcement and regulatory bodies: where required by applicable law or a valid legal order, x99o will disclose personal data to authorities. x99o will notify you of such a disclosure unless prohibited from doing so by the terms of the legal order.
x99o does not transfer your personal data to third parties located outside Bangladesh for marketing or advertising purposes. Where data is processed by a third-party service provider located outside Bangladesh (for example, a cloud infrastructure provider), x99o ensures that appropriate data transfer safeguards are in place.
5. Payment Data and Third-Party Processors
All financial transactions on x99o are processed through third-party mobile financial service providers including bKash, Nagad, Rocket, and Upay. When you initiate a deposit or withdrawal, x99o transmits only the minimum data necessary — typically your registered wallet number and the transaction amount — to the relevant payment provider to complete the transaction. x99o does not store full MFS credentials, PINs, one-time passwords (OTPs), or bank account numbers on its servers.
Transaction records — including the date, time, amount, direction (deposit or withdrawal), and wallet number — are retained by x99o for a minimum of five years following the transaction date. This retention period is driven by our anti-money laundering compliance obligations and may be extended where a transaction is subject to an ongoing investigation or legal hold. Players who wish to query a historical transaction record should contact [email protected] with the relevant transaction date and amount.
Security reminder: x99o will never ask you for your bKash, Nagad, Rocket, or Upay PIN via chat, email, or phone. If you receive a communication claiming to be from x99o requesting your PIN or OTP, do not provide it and report it immediately to [email protected].
6. Cookies and Tracking Technologies
x99o uses the following categories of cookies and similar tracking technologies when you access the platform:
- Strictly necessary cookies: these cookies are required for the platform to function. They include session authentication tokens that keep you logged in, CSRF protection tokens, and cookies that remember your language preference. These cannot be disabled without breaking core platform functionality.
- Performance and analytics cookies: these cookies collect anonymised data about how players use x99o, including which pages are visited most frequently and how players navigate between sections. This data helps us improve platform usability and performance. No personally identifiable information is included in these analytics reports.
- Functionality cookies: these cookies remember your preferences such as display settings or recently viewed game categories so that you do not need to reconfigure them on each visit. They are not used for advertising or tracking across external sites.
You may manage or disable non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies via their privacy or settings menus. Disabling performance cookies will not prevent you from using x99o, but may limit our ability to improve the platform over time. x99o does not currently use cross-site advertising or retargeting cookies.
7. Data Retention
x99o retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply as a general guide: account registration data is retained for the duration of the account and for a minimum of five years following account closure; transaction and payment records are retained for a minimum of five years from the date of the transaction; identity verification documents are retained for a minimum of five years from the date of verification; support communications are retained for two years from the date of the last communication in the relevant conversation thread.
When a retention period expires and no legal hold applies, x99o will securely delete or anonymise the relevant personal data so that it can no longer be linked to an identifiable individual. Where data is anonymised rather than deleted, it may continue to be used for statistical or analytical purposes as it no longer constitutes personal data.
8. Security Measures
x99o implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include SSL/TLS encryption for all data in transit between your device and our servers, encrypted storage of sensitive data fields at rest, access controls that restrict internal access to personal data on a need-to-know basis, regular security assessments of platform infrastructure, and two-factor authentication options for player accounts.
While x99o applies industry-standard security practices, no system connected to the internet can guarantee absolute security. In the event of a personal data breach that is likely to result in a high risk to your rights, x99o will notify affected players without undue delay and will take immediate steps to contain and remediate the breach.
Your account security responsibilities: you are responsible for keeping your account login credentials confidential. Do not share your password or OTP with anyone, including people claiming to represent x99o. x99o support staff will never ask for your password. If you believe your account has been compromised, contact [email protected] immediately and we will suspend the account pending investigation.
9. Your Privacy Rights
As a player on x99o, you have the following rights in relation to your personal data. To exercise any of these rights, contact [email protected] with your registered mobile number and a description of your request. We will respond within 30 days:
- Right of access: you may request a copy of all personal data x99o holds about you. We will provide this in a structured, machine-readable format where technically feasible.
- Right to rectification: if any of the personal data x99o holds about you is inaccurate or incomplete, you may request that we correct or complete it.
- Right to erasure: you may request deletion of your personal data when it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations. This right does not apply to data we are required to retain by law.
- Right to restriction: you may request that we restrict processing of your personal data in certain circumstances, for example where you contest the accuracy of the data or where you have objected to processing under legitimate interests while we consider your objection.
- Right to object: you may object at any time to processing of your personal data for direct marketing purposes. You may also object to processing carried out under legitimate interests, in which case x99o will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
To exercise any of the above rights, please email [email protected] with the subject line 'Privacy Rights Request', your registered mobile number, and a clear description of the right you wish to exercise. x99o will verify your identity before processing the request. We will not charge a fee for handling reasonable requests, but may charge a reasonable fee for manifestly unfounded or excessive requests.
10. Children's Privacy
x99o is strictly an adults-only platform. We do not knowingly collect personal data from individuals under the age of 21. Our registration process includes a date-of-birth field and age verification step specifically to prevent underage access. If x99o becomes aware that it has inadvertently collected personal data from an individual who is under 21 years of age, we will take immediate steps to delete that data and close the associated account, and we will not process any transactions associated with that account.
If you believe that a minor has registered an account on x99o, please notify us immediately at [email protected]. Protecting minors from accessing gambling platforms is a responsibility we take seriously. Parents and guardians in Bangladesh are encouraged to use device-level parental controls to restrict access to online gaming platforms.
11. Changes to This Privacy Policy
x99o reserves the right to update or amend this Privacy Policy at any time. When we make changes, we will update the effective date at the top of this page. For material changes that significantly affect how we use your personal data, x99o will use reasonable efforts to notify registered players via their registered contact details at least 7 days before the change takes effect. Players who continue to use x99o following publication of an updated Policy are deemed to have accepted the revised terms.
We encourage you to review this Privacy Policy periodically, particularly if you receive a notification from us about an update. The current version of this Policy will always be accessible at x99o.pro/privacy-policy. If you have questions about a specific change, please contact [email protected] and we will explain what has changed and why.
12. Contact and Data Queries
If you have any questions about this Privacy Policy, wish to exercise your privacy rights, want to report a suspected data breach, or have concerns about how x99o is handling your personal data, please contact our support team at [email protected]. Include your registered mobile number in your message so we can locate your account and respond efficiently. Our support team is available 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6). We aim to acknowledge all privacy-related queries within 24 hours and to provide a substantive response within 30 days.
For responsible gaming support, self-exclusion requests, deposit limit changes, or time-out requests, please also contact [email protected] or visit our Responsible Gaming page for guidance on the tools available to you as an x99o player.
Ready to Play Responsibly?
Your privacy is protected every time you play at x99o. Explore our cricket betting markets, live casino, and certified slots — all secured with SSL encryption for players 21 and above across Bangladesh.