Privacy Policy — 99xq Bangladesh

1 Data We Collect

When you register for or use the 99xq platform, we collect certain categories of personal data that are necessary to deliver our services, comply with legal obligations, and ensure platform security. The categories of data we collect, and the circumstances under which each is collected, are set out below.

Registration Data: When you create a 99xq account, we collect your full legal name, date of birth, residential address in Bangladesh, a valid email address, and a mobile phone number. This information is necessary to establish your identity, verify your eligibility to use the platform (including age verification), and maintain your account record.

Identity Verification (KYC) Documents: As part of our Know Your Customer process, we may collect scanned copies or photographs of government-issued identity documents, such as your Bangladesh National ID Card (NID) or passport, and documents confirming your residential address (such as a utility bill or bank statement). We may also collect proof of ownership of the payment method you use — for example, confirmation that a bKash or Nagad mobile number is registered in your own name.

Financial Transaction Data: We record all deposit and withdrawal transactions you make on 99xq, including the amount in Bangladeshi Taka (৳ BDT), the payment method used (bKash, Nagad, Rocket, Upay, bank transfer, Visa, Mastercard), the date and time of each transaction, and the resulting account balance. This data is necessary for account management, fraud prevention, and regulatory compliance.

Gaming and Betting Activity: We maintain a record of all games played and bets placed on your 99xq account, including game titles, stake amounts, outcomes, and timestamps. This data is used for account management, dispute resolution, responsible gaming monitoring, and improving our service offering.

Technical and Device Data: When you access the 99xq platform, our systems automatically collect certain technical data including your IP address, device type, operating system, browser type and version, screen resolution, and approximate geographic location (derived from your IP address). This information is used for fraud detection, security monitoring, and platform optimisation.

Communications Data: If you contact the 99xq customer support team via email or live chat, we retain records of those communications, including the content of your messages and any attachments. This data is used to resolve your queries and improve our customer service quality.

2 How We Use Your Data

99xq processes your personal data on the basis of the following lawful grounds: (a) performance of the contract between you and 99xq; (b) compliance with our legal and regulatory obligations; (c) our legitimate interests in operating a secure, fair, and commercially viable gaming platform; and (d) your consent, where explicitly obtained. The specific purposes for which we use your data are as follows:

Marketing Communications: 99xq will only send you promotional emails, SMS messages, or in-platform notifications about bonuses, tournaments, and seasonal offers (such as BPL season promotions, Eid special bonuses, or Pohela Boishakh offers) if you have explicitly opted in to receive such communications at registration or via your account settings. You may withdraw your consent and opt out of marketing communications at any time by contacting [email protected] or adjusting your account notification preferences.

Automated Decision-Making: 99xq uses automated systems to assist with fraud detection, age verification screening, and responsible gaming alerts. In some cases, these systems may result in automatic account restrictions. Where an automated decision has a significant effect on your account, you have the right to request human review of that decision by contacting the 99xq compliance team.

3 Data Sharing & Third Parties

99xq does not sell your personal data. We share personal data with third parties only where necessary to deliver our services, meet legal obligations, or protect the integrity of our platform. All third-party service providers who receive personal data on behalf of 99xq are contractually required to process that data only for the stated purpose and to maintain appropriate security standards. The categories of third parties who may receive your data are as follows:

• Payment Processors: To process your deposits and withdrawals, we share necessary transaction data with your chosen payment provider — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. These providers process your data under their own privacy policies and applicable financial regulations.
• Game Content Providers: When you play a game hosted by a third-party studio — such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi — certain technical session data (such as your anonymised player ID, game session token, and stake amounts) may be transmitted to that provider in order to run the game. These studios operate under their own data protection frameworks and regulatory licences.
• Identity Verification Services: We may use third-party KYC verification partners to assist with document authentication and age verification. These partners are bound by strict confidentiality obligations and may not use your identity documents for any purpose other than completing the verification requested by 99xq.
• Fraud Prevention and Security Partners: We share technical data (such as IP addresses, device fingerprints, and transaction patterns) with specialist fraud prevention services to identify and block suspicious activity that could harm you or the platform.
• Regulatory and Legal Authorities: Where required by applicable law or in response to a valid legal order, we may disclose personal data to law enforcement agencies, regulatory bodies, or courts. In such cases, we disclose only the minimum data required to comply with the legal obligation.
• IT Infrastructure and Cloud Service Providers: Our platform infrastructure, data storage, and back-end operations rely on secure third-party cloud and hosting providers. These providers act as data processors on our behalf and are contractually prohibited from accessing or using your data for any purpose beyond providing the infrastructure services 99xq has engaged them for.

International Data Transfers: Some of the third-party service providers listed above may process data outside Bangladesh. Where such transfers occur, 99xq takes reasonable steps to ensure that appropriate safeguards are in place to protect your personal data during transmission and storage, consistent with the standards applied within Bangladesh.

4 Cookies & Tracking Technologies

The 99xq platform uses cookies and similar technologies to provide a functional, secure, and optimised user experience. A cookie is a small text file placed on your device by our servers when you access the platform. Cookies do not contain viruses or executable code, and they cannot access other files stored on your device.

Categories of cookies used by 99xq:

Third-Party Cookies: Live casino games streamed from studios operated by Evolution Gaming, Ezugi, and Pragmatic Play Live may set their own session-management cookies on your device while the game stream is active. These are functional cookies required to maintain the game session and do not track your activity outside the game window.

Managing Cookies: You can control or delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will prevent you from logging in to your 99xq account and using core platform features. Disabling functional or analytics cookies will not prevent access to the platform but may reduce the quality of your experience.

5 Data Security Measures

99xq implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. While no online platform can guarantee absolute security, we maintain the following safeguards as standard:

• Transport Layer Security (TLS/SSL): All data transmitted between your device and 99xq servers is encrypted using 256-bit TLS encryption. This applies to all platform pages, payment flows, and API communications.
• Encryption at Rest: Sensitive personal data stored in our databases — including identity documents, financial transaction records, and contact details — is encrypted at rest using industry-standard encryption protocols.
• Access Controls: Access to systems containing personal data is restricted on a strict need-to-know basis. Staff who handle personal data are subject to confidentiality obligations. Administrative access to production systems requires multi-factor authentication.
• Network Security: Our platform is protected by enterprise-grade firewalls, intrusion detection systems, and regular penetration testing by qualified security professionals.
• Password Security: Account passwords are stored using strong one-way hashing algorithms. 99xq staff cannot view your plain-text password. We strongly encourage players to use a unique, complex password for their 99xq account and to enable two-factor authentication where available.
• Incident Response: In the event of a data security incident that may affect your personal data, 99xq will notify affected players without undue delay and take immediate remedial steps to contain and investigate the incident.

Players are also responsible for their own account security. You should never share your 99xq login credentials with anyone, access your account on shared or public devices without taking appropriate precautions, or click on links in unsolicited emails claiming to be from 99xq. If you receive a suspicious communication purportedly from 99xq, please report it to [email protected] immediately.

6 Data Retention Policy

99xq retains personal data for defined periods that reflect the purpose for which the data was collected and any applicable legal retention requirements. The general retention periods applicable to the main categories of personal data are as follows:

Once the applicable retention period expires, personal data is either securely deleted from our systems or irreversibly anonymised so that it can no longer be associated with you as an individual. Anonymised, aggregated data (such as platform-wide statistical analysis) may be retained indefinitely as it no longer constitutes personal data.

Where you request deletion of your data before the end of an applicable retention period, we will action your request to the fullest extent possible. However, we are required by law to retain certain categories of data (particularly financial and KYC records) for the statutory periods listed above and cannot delete these earlier, even on request.

7 Your Privacy Rights

As a 99xq account holder, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact the 99xq data team at [email protected] with the subject line "Privacy Rights Request". We will acknowledge your request within 5 business days and aim to fulfil it within 30 calendar days.

Withdrawing Consent: Where we process your data based on your consent (e.g., for marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to the withdrawal. To withdraw consent for marketing communications, contact [email protected] or update your account notification preferences.

Children's Privacy: 99xq does not knowingly collect personal data from individuals under 18 years of age. If you believe that a minor has registered on the platform, please notify us immediately at [email protected]. Any account confirmed to belong to a person under 18 will be closed immediately and all associated data will be deleted as promptly as legally permissible.

8 Policy Updates & Contact

99xq reviews this Privacy Policy periodically and will update it to reflect changes in our data processing practices, applicable law, or the services we offer. When we make material changes to this policy, we will notify registered players by posting a prominent notice on the 99xq platform and, where appropriate, by sending a notification to the email address registered to your account. The effective date at the top of this policy will be updated accordingly.

We encourage you to review this Privacy Policy each time you visit the 99xq platform. Continued use of the platform following a policy update constitutes your acknowledgement of the revised terms. If you do not agree to any update, you should discontinue use of the platform and contact us to close your account.

Previous Versions: Where it is required by applicable law, 99xq will maintain an archive of previous versions of this Privacy Policy. If you require access to a prior version of this policy, please contact our support team and state the approximate date of the version you require.

Contact the 99xq Privacy Team: For all privacy-related enquiries, data rights requests, or concerns about how your personal data is handled, please contact the 99xq data team using the details below. We are committed to responding to all legitimate enquiries promptly and transparently.

• Email: [email protected] (subject line: "Privacy Rights Request" or "Privacy Enquiry")
• Platform: https://99xq.app
• Response Time: Acknowledgement within 5 business days; full response within 30 calendar days
• Language: All privacy communications are handled in English
• Market: Bangladesh (BST, UTC+6)

This Privacy Policy was last reviewed and updated in January 2026. It is written and published in English. In the event of any conflict between this English version and any translation, the English version shall prevail.