99f99 Privacy Policy — How We Handle Your Data

1.1 Information You Provide Directly

When you register an account with 99f99 or interact with the platform, you provide personal data directly to us. The categories of personal data collected directly from you include:

• Registration information: your full name, date of birth, active Bangladesh mobile phone number, and any username or display name you choose.
• Identity verification (KYC) documents: copies of your National Identity Card (NID), passport, or other government-issued identification documents submitted to verify your identity and age.
• Payment information: your bKash, Nagad, Rocket, Upay, or bank account details used to process deposits and withdrawals. 99f99 does not store full card numbers or mobile banking PINs.
• Customer support communications: the content of any messages, emails or chat conversations you have with the 99f99 support team.

1.2 Information Collected Automatically

When you use the 99f99 platform, certain data is collected automatically through your device and browser. This data is used to operate, maintain, and improve the platform and to ensure security and compliance. Automatically collected data includes:

• Device and browser information: your device type, operating system, browser type and version, screen resolution, and unique device identifiers.
• Connection information: your IP address, internet service provider, approximate geographic location derived from IP address, and connection timestamps.
• Usage data: pages visited, games played, betting activity logs, session duration, and navigation paths through the platform.

1.3 Information from Third Parties

99f99 may receive personal data about you from third-party sources in the following limited circumstances:

• Payment providers: transaction confirmation data from bKash, Nagad, Rocket, Upay or bank partners to verify and reconcile deposits and withdrawals.
• Identity verification services: confirmation responses from identity verification providers used to validate KYC documents you have submitted.
• Fraud prevention and anti-money laundering partners: risk signals shared by fraud prevention networks used to protect 99f99 and its players from fraudulent activity.

3.1 Service Providers and Partners

99f99 shares personal data with the following categories of service providers who process data on 99f99's behalf under contractual data processing agreements:

• Payment processing partners (bKash, Nagad, Rocket, Upay, and bank partners) — solely for the purpose of processing your deposits and withdrawals.
• Identity verification and KYC service providers — solely for the purpose of verifying the identity documents you submit during registration or at the request of 99f99.
• Game software providers (such as Pragmatic Play, Evolution Gaming, and others) — limited technical data required to operate game sessions is transmitted to these providers' game servers.

3.2 Legal Disclosures

99f99 may disclose personal data to law enforcement agencies, regulatory authorities, financial intelligence units, or courts of competent jurisdiction where required to do so by applicable law, court order, or regulatory direction. 99f99 will make such disclosures only to the extent required and will seek to notify you of any such disclosure where legally permitted to do so.

5.1 Security Measures

99f99 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include 256-bit SSL encryption for all data transmitted between your device and the 99f99 platform, secure encrypted storage for sensitive account and payment data, strict access controls limiting internal access to personal data on a need-to-know basis, regular security assessments and monitoring of platform infrastructure, and multi-factor authentication options for account login. While 99f99 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the security of your account login credentials.

5.2 Data Breach Response

In the event of a personal data breach that poses a risk to your rights and freedoms, 99f99 will take prompt action to contain the breach, assess its scope and impact, and notify affected players without undue delay. 99f99 will cooperate fully with any relevant regulatory or law enforcement investigation arising from a data breach. If you believe your account has been compromised, please contact the 99f99 support team immediately at [email protected].

7.1 Summary of Your Rights

• Right of access: you have the right to request a copy of the personal data 99f99 holds about you and to receive information about how that data is being used.
• Right of rectification: you have the right to request that 99f99 correct any inaccurate personal data it holds about you.
• Right to erasure: subject to legal and regulatory retention requirements, you have the right to request deletion of personal data 99f99 holds about you.
• Right to restrict processing: in certain circumstances you have the right to request that 99f99 restrict the processing of your personal data while a request for rectification or erasure is pending.
• Right to object: you have the right to object to the processing of your personal data for direct marketing purposes. You may opt out of promotional communications at any time by contacting 99f99 support.

99f99 will respond to all rights requests within a reasonable timeframe. Some rights requests may be subject to identity verification before 99f99 can action them, to ensure that personal data is only disclosed or modified at the direction of the data subject themselves.