xx99912
Privacy Policy
At xx99912, your privacy is a foundational commitment — not an afterthought. This Privacy Policy explains exactly what personal data we collect, how we use and protect it, who we may share it with, and what rights you hold over your information as a registered player on Bangladesh's premier online betting platform.
Section 01
Information We Collect
xx99912 collects personal information from you in order to operate a safe, compliant, and high-quality gaming and betting service. The categories of information we collect fall into three broad groups: information you provide directly to us, information generated automatically through your use of the platform, and information we receive from third parties in connection with payment processing and identity verification.
Information you provide directly: When you register an account on xx99912, you provide us with personal details that are necessary to create and maintain your account. This includes your full legal name, date of birth, residential address (including city — Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or otherwise), email address, and a mobile phone number registered in Bangladesh. During the KYC (Know Your Customer) verification process, you may also provide copies of identity documents such as your National Identity Card (NID), passport, or birth certificate.
Financial and transaction data: When you make a deposit or withdrawal, xx99912 processes transactional information including the payment method used (bKash, Nagad, Rocket, Upay, Visa, Mastercard, City Bank, BRAC Bank), transaction amounts in Bangladeshi Taka (৳ BDT), transaction reference numbers, timestamps, and the outcome of each transaction. We do not store full card numbers or mobile banking PINs — these are handled directly by the payment service providers under their own security frameworks.
Automatically collected data: When you access xx99912 through any device or browser, our systems automatically record certain technical information. This includes your IP address, device type and operating system, browser type and version, the pages you visit within the platform, session duration, clickstream data, and approximate geographic location derived from your IP address. This data is used for security monitoring, fraud prevention, platform performance optimisation, and compliance purposes.
| Data Category | Examples | Collection Method |
|---|---|---|
| Identity Data | Full name, date of birth, NID / passport number | Registration form, KYC submission |
| Contact Data | Email address, mobile number, residential address | Registration form, account settings |
| Financial Data | Payment method details, deposit/withdrawal amounts, transaction IDs | Payment gateway, platform transaction logs |
| Technical Data | IP address, device ID, browser type, OS version | Automatic collection via server logs and cookies |
| Usage Data | Pages visited, games played, session duration, bet history | Platform analytics, session tracking |
| Communications Data | Support chat transcripts, email correspondence, complaint records | Support ticket system, live chat logs |
| Verification Data | KYC document scans, selfie verification images | KYC portal upload, third-party verification provider |
Section 02
How We Use Your Data
xx99912 uses the personal data we collect for specific, legitimate purposes that are necessary to deliver the service you have registered for. We do not sell your personal data to third parties for marketing purposes. Below is a comprehensive account of the purposes for which we process your information.
Account management and service delivery: Your identity and contact data are used to create and manage your xx99912 account, verify your eligibility to play (including age verification — 18+ only), process your deposits and withdrawals, and communicate account-related information such as transaction confirmations, security alerts, and account status updates.
Responsible gaming and player protection: xx99912 uses your usage data and betting history to monitor for indicators of problem gambling behaviour. Where patterns suggest a player may be experiencing difficulty with gambling, our responsible gaming team may initiate contact, apply temporary deposit limits, or flag the account for review. This processing is carried out in the interest of player welfare and is a core obligation of our responsible gaming framework.
Fraud prevention and security: Technical data including your IP address, device fingerprint, and login timestamps are processed continuously to detect and prevent fraudulent activity, account takeovers, bonus abuse, money laundering, and other prohibited conduct. This processing is essential to the security and integrity of the platform and to the protection of all players.
Legal and regulatory compliance: Certain personal data is retained and processed to fulfil our legal obligations, including maintaining transaction records, responding to lawful requests from regulatory authorities or law enforcement agencies, and fulfilling anti-money-laundering (AML) documentation requirements.
Marketing communications: With your consent, xx99912 may send you promotional communications about new games, seasonal offers (such as Eid or BPL season promotions), and personalised bonus offers. You may withdraw your consent to marketing communications at any time by contacting support at support@xx99912 or updating your communication preferences in your account settings. Withdrawal of marketing consent does not affect service communications, which are sent regardless of marketing preference.
Legal Basis for Processing: xx99912 processes your personal data on the following legal bases: (a) performance of a contract — processing necessary to provide the gaming and betting services you have contracted for; (b) legitimate interests — fraud prevention, security monitoring, and platform optimisation; (c) legal obligation — compliance with AML, KYC, and record-keeping requirements; and (d) consent — where you have explicitly opted in to marketing communications or optional data processing activities.
Section 03
Data Sharing & Disclosure
xx99912 does not sell, rent, or trade your personal data. We share your information only in the limited circumstances described below, and only to the extent necessary for each specific purpose.
Payment service providers: To process your deposits and withdrawals, xx99912 shares the minimum necessary transactional data with payment partners including bKash, Nagad, Rocket, Upay, Visa, Mastercard, City Bank, and BRAC Bank. Each payment provider operates under its own privacy policy and data protection obligations. xx99912 is not responsible for the data practices of payment service providers once data is transferred to them for transaction processing.
Identity verification providers: Where KYC verification is required, xx99912 may share your identity data (name, date of birth, document images) with a third-party identity verification service. These providers are contractually bound to use your data solely for the purpose of verifying your identity on our behalf and are prohibited from using it for any other purpose.
Game providers: When you play a game hosted by a third-party game provider (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi), your player session data and game history for that session are necessarily processed by the provider's platform. Game providers receive a session token and player ID — they do not receive your full personal profile or payment data.
Law enforcement and regulatory authorities: xx99912 will disclose personal data to competent authorities where required by law, pursuant to a valid court order, or where we reasonably believe that disclosure is necessary to prevent or investigate suspected fraud, money laundering, or other criminal activity. We will notify you of such disclosure where we are legally permitted to do so.
Industry fraud-prevention networks: In cases of confirmed fraud, bonus abuse, or identity theft, xx99912 may share relevant account data with other online gaming operators via industry-standard fraud-sharing databases. This sharing is conducted in the mutual interest of protecting players and platforms from repeat fraudulent actors.
No Cross-Border Data Transfers for Marketing: xx99912 does not transfer your personal data to third parties outside of Bangladesh for marketing or profiling purposes. Data transfers to game providers and payment processors involve servers that may be located internationally; in such cases, xx99912 ensures that contractual safeguards equivalent to applicable data protection standards are in place before any transfer occurs.
Section 04
Cookies & Tracking Technologies
xx99912 uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your session while you are logged in, and gather aggregated analytics data about how the platform is used. This section explains what cookies we use, why we use them, and how you can manage them.
What is a cookie? A cookie is a small text file placed on your device by a website when you visit it. Cookies allow the website to recognise your device on subsequent visits and to maintain state (such as keeping you logged in during a session). Cookies cannot execute code, carry viruses, or access files on your device beyond what the issuing website has stored.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Session management, authentication tokens, security CSRF protection, load balancing. Cannot be disabled without breaking platform functionality. | Session / up to 24 hours |
| Functional | Remembering language preference, currency display (BDT), game lobby view settings, and last-visited game category. | 30 days |
| Analytics | Aggregated usage statistics including page views, session duration, and navigation paths. Used to improve platform UX. No personally identifiable data is sent to analytics providers. | 13 months |
| Fraud Prevention | Device fingerprinting tokens used to detect suspicious login patterns, multi-account creation, and bot activity. Processed server-side only. | 90 days |
Managing cookies: You may configure your browser to refuse all cookies, accept only first-party cookies, or delete cookies after each browsing session. Instructions for managing cookies are available in your browser's help documentation. Please note that disabling strictly necessary cookies will prevent you from logging in to your xx99912 account and using core platform features. Disabling functional or analytics cookies will not affect your ability to place bets or access games.
No third-party advertising cookies: xx99912 does not use third-party advertising or retargeting cookies. We do not share your browsing behaviour on xx99912 with advertising networks or social media platforms for the purpose of serving targeted advertisements on other websites.
Section 05
Data Security & Retention
xx99912 applies industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures are reviewed and updated regularly to reflect the current threat landscape.
Technical security measures: All data transmitted between your device and xx99912 is encrypted in transit using TLS 1.3 (Transport Layer Security). Sensitive data at rest — including KYC documents, account credentials, and financial records — is encrypted using AES-256 encryption. Access to player personal data within xx99912's systems is restricted on a need-to-know basis, with role-based access controls and audit logging applied to all administrative access.
Password security: Your xx99912 account password is stored as a salted cryptographic hash — xx99912 staff cannot read your password in plaintext. You are solely responsible for choosing a strong, unique password and for not sharing it with any other person. xx99912 will never ask you for your password by email, phone, or chat.
Data retention periods: xx99912 retains your personal data for the period necessary to fulfil the purpose for which it was collected, and thereafter for as long as required by applicable legal, regulatory, or contractual obligations. As a general principle:
- Active account data is retained for the lifetime of your account.
- Following account closure, identity and KYC data is retained for a minimum of five (5) years to comply with AML record-keeping obligations.
- Financial transaction records are retained for a minimum of seven (7) years.
- Support communications and complaint records are retained for three (3) years from the date of resolution.
- Analytics and technical log data is retained for a maximum of thirteen (13) months before being anonymised or deleted.
Data Breach Response: In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, xx99912 will notify affected players without undue delay after becoming aware of the breach, with a description of the nature of the breach, the likely consequences, and the measures taken or proposed to address it. Contact support@xx99912 if you have any security concerns regarding your account or data.
Section 06
Your Privacy Rights
As a registered player on xx99912, you hold the following rights in relation to your personal data. To exercise any of these rights, contact xx99912's support team at support@xx99912 with the subject line "Privacy Rights Request". We will respond to all verified requests within 30 days of receipt.
Right of Access
Request a copy of all personal data xx99912 holds about you, including the purposes for which it is processed and the categories of recipients with whom it has been shared.
Right to Rectification
Request correction of any inaccurate or incomplete personal data held in your account. You may update certain details (such as email address) directly from your account settings panel.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations (e.g., AML records).
Right to Restriction
Request that xx99912 restricts processing of your data in certain circumstances — for example, while the accuracy of data you have contested is being verified.
Right to Portability
Request your personal data in a structured, commonly used, machine-readable format (CSV or JSON) to the extent technically feasible, covering data you provided directly to xx99912.
Right to Object
Object to processing of your personal data based on legitimate interests, including profiling for responsible gaming monitoring. Note that objecting to security processing may result in account suspension.
Withdraw Consent
Where processing is based solely on your consent (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
Automated Decision-Making
Request human review of any significant decision made about your account (such as a bonus restriction or account flag) that was determined solely by automated processing.
xx99912 will not charge a fee for handling privacy rights requests unless a request is manifestly unfounded or excessive. In such cases, a reasonable administrative fee may be applied, or the request may be refused — in either case, we will explain our reasoning in writing.
Section 07
Third-Party Game Providers
xx99912's game library is powered by leading international game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you launch and play a game developed by one of these providers, your gameplay session is processed in part on the provider's own servers. The following points clarify the privacy implications of this arrangement.
What data game providers receive: Game providers receive a session token, an anonymised player identifier, and the in-game actions necessary to run the game (e.g., bet amounts, spin results, hand outcomes). They do not receive your full name, NID number, mobile number, or payment method details. The player ID passed to game providers is internal to xx99912 and cannot be used independently to identify you.
Game provider data processing: Each game provider is independently responsible for the data processed within its own game engine. Game providers are contractually required by xx99912 to process player session data solely for the purpose of delivering and certifying fair game outcomes, and are prohibited from using session data for their own marketing or profiling purposes. For further information about how a specific game provider processes data, refer to that provider's own privacy documentation.
RNG certification and fairness auditing: Game outcomes across xx99912's casino library are produced by certified Random Number Generator software. RNG certifications are issued by independent testing laboratories and attest to the statistical randomness and correct payout rates of each game. xx99912 does not have access to or control over the RNG seed values — this independence is a core component of the fairness guarantee.
Links to external content: xx99912 does not include links to external websites in its platform content. If you navigate away from xx99912 to any third-party website independently, xx99912 has no responsibility for the privacy practices or content of that external site.
Section 08
Policy Updates & Contact
xx99912 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, operational requirements, or applicable law. When material changes are made to this policy, we will notify registered players via the email address on their account at least 7 days before the updated policy takes effect. The effective date at the top of this page will be updated to reflect the date on which the revised policy comes into force.
Minor updates: Non-material changes — such as corrections of typographical errors, clarifications of existing language that do not alter the substance of the policy, or updates to contact details — may be made without advance notice. Players are encouraged to review this page periodically to remain informed of their privacy rights and our current data practices.
Continued use as acceptance: Your continued use of the xx99912 platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the revised policy, you should contact support to request account closure before the new policy takes effect.
Privacy Contact: For any privacy-related enquiries, rights requests, or data protection concerns, contact the xx99912 privacy team directly at support@xx99912 with the subject line "Privacy Enquiry". Our team is available 24/7 with peak support hours from 18:00 to 02:00 BST (UTC+6). Email responses are provided within 4 hours during peak hours and within 24 hours at all other times. This Privacy Policy was last reviewed and updated in January 2026.
Our Privacy Commitments
Six Pillars of Data Protection
How xx99912 safeguards your personal information every day
AES-256 Encryption at Rest
All sensitive player data stored on xx99912 servers — including KYC documents, account credentials, and financial records — is encrypted using AES-256, the same standard used by financial institutions worldwide.
TLS 1.3 Encrypted Transmission
Every connection between your device and xx99912 is protected by TLS 1.3. Your login credentials, payment details, and personal information travel over an encrypted channel that cannot be intercepted in transit.
Role-Based Data Access Controls
Access to player personal data within xx99912's internal systems is restricted on a strict need-to-know basis. Every access event is audit-logged. No staff member has unrestricted access to the full player database.
No Data Selling — Ever
xx99912 does not sell, rent, or trade your personal data to any third party for marketing, advertising, or commercial profiling purposes. Your data is used exclusively to operate and improve the service you have contracted for.
Defined Retention Limits
xx99912 does not hold your data indefinitely. Clear retention windows are defined for each data category — from 13-month analytics logs to 7-year financial records required by AML obligations — and enforced automatically.
Full Player Rights Support
xx99912 supports all eight privacy rights outlined in this policy — including access, rectification, erasure, portability, and objection. Submit a rights request to support@xx99912 and receive a full response within 30 days.
Continue Exploring
Your Privacy is Protected. Now Explore the Platform.
With a clear understanding of how xx99912 handles your data, dive into the full game library, check the FAQ for quick answers, or head to the casino to get started. For adults aged 18 and above.