99x04 Privacy Policy
— Your Data, Our Responsibility

99x04 is an online betting and casino platform operating at https://99x04.io, serving the Bangladesh market with cricket betting, sports wagering, live casino games, and slots. When this Privacy Policy refers to "99x04", "we", "us", or "our", it means the operating entity behind the 99x04 platform and brand.

For all data-related queries, complaints, or requests to exercise your data rights, you may contact us via the channels described in Section 14 of this policy. We are committed to responding to all privacy-related enquiries within a reasonable timeframe and in accordance with applicable data protection obligations.

This Privacy Policy is an integral part of the 99x04 Terms & Conditions. By accepting the Terms & Conditions, you also accept this Privacy Policy. If you do not agree with any part of this policy, you must discontinue use of the 99x04 platform immediately.

99x04 collects personal data across several categories depending on how you interact with the platform. The following table summarises the categories of data we collect and their purpose:

We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information. If you voluntarily disclose such information through support communications, we will process it only to the extent necessary to respond to your query and will not store it beyond that purpose.

99x04 collects personal data through the following methods:

• Direct interactions: When you register an account, complete our KYC verification process, make a deposit or withdrawal, contact our support team, or respond to a survey or promotional communication, you provide data to us directly.
• Automated technologies: As you navigate the 99x04 platform, we automatically collect Technical Data and Usage Data using cookies, server logs, and similar tracking technologies. Please refer to Section 7 (Cookies & Tracking) for full details.
• Payment processors: When you transact via bKash, Nagad, Rocket, Upay, or a bank transfer, we receive confirmation data from the relevant payment provider confirming transaction status, amount, and your registered wallet or account identifier. We do not receive your full payment credentials from these providers.
• Identity verification partners: Where we engage third-party KYC or identity verification services to validate the documents you submit, those services may share verification outcomes and data flags with us to assist in our compliance obligations.
• Publicly available sources: In limited circumstances, and only where relevant to fraud prevention or compliance, we may cross-reference data you have provided against publicly available records or third-party fraud databases.

99x04 uses the personal data we collect for the following specific purposes:

• Account management: To create, maintain, and administer your player account, including processing logins, managing preferences, and communicating account-related notifications.
• Payment processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, bank transfer, Visa, Mastercard, and cryptocurrency (USDT, BTC), and to maintain an accurate transaction history for your account.
• Identity verification (KYC): To verify your identity and age in compliance with our responsible gaming obligations and to prevent underage gambling. Players must be 21 years of age or older to hold an account with 99x04.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, multi-accounting, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible gaming: To monitor betting patterns and account activity for indicators of problem gambling, and to enforce self-exclusion requests, deposit limits, and session time-outs activated by you or applied by 99x04.
• Customer support: To respond to your queries, complaints, and support requests via live chat, email ([email protected]), and WhatsApp.
• Marketing communications: To send you promotional offers, bonus notifications, and news about new games or features, where you have consented to receive such communications. You may withdraw your marketing consent at any time by updating your account preferences.
• Platform improvement: To analyse Usage Data and identify trends that allow us to improve the functionality, content, and performance of the 99x04 platform.
• Legal compliance: To comply with applicable laws, regulations, and lawful requests from competent authorities.

99x04 processes your personal data on one or more of the following legal bases:

• Contractual necessity: Processing is necessary to perform the contract we have with you — specifically, operating your betting account, processing transactions, and delivering the services you have requested.
• Legal obligation: Processing is required to comply with applicable anti-money laundering (AML) obligations, age verification requirements, and other regulatory duties.
• Legitimate interests: Processing is necessary for purposes of fraud prevention, platform security, responsible gaming monitoring, and the improvement of our services, provided that such interests are not overridden by your fundamental rights and freedoms.
• Consent: For marketing communications and for the use of non-essential cookies, we rely on your explicit consent, which you may withdraw at any time without affecting the lawfulness of prior processing.

99x04 does not sell your personal data. We share personal data only in the following limited and controlled circumstances:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, Mastercard, and cryptocurrency payment processors receive the minimum data necessary to process your transactions. These providers operate under their own privacy policies and are bound by contractual obligations to protect your data.
• Game studio providers: Third-party game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — may receive anonymised or pseudonymised session data necessary to deliver their games within the 99x04 platform. They do not receive your identity or payment data.
• Identity verification services: KYC and fraud prevention partners receive the identity documents and data you submit during verification. These partners are contractually bound to use your data only for the specific verification purpose and to delete it after the retention period agreed with 99x04.
• Technology and hosting providers: Our platform infrastructure and data storage rely on trusted technology partners who process data on our behalf under strict data processing agreements. These providers have no independent right to use your data.
• Legal and regulatory authorities: We may disclose your personal data to law enforcement agencies, regulatory bodies, or courts where we are legally required to do so, or where disclosure is necessary to prevent or investigate fraud, money laundering, or other serious offences.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of 99x04's assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and your rights will be preserved.

All third parties with whom we share personal data are required to implement appropriate technical and organisational security measures to protect your information. We do not permit any third party to use your data for their own marketing purposes.

99x04 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit a website. The following categories of cookies are used:

• Strictly necessary cookies: These cookies are essential for the platform to function. They enable you to log in, maintain your session, and navigate between pages securely. You cannot opt out of these cookies while using the platform.
• Analytical / performance cookies: These cookies collect anonymised information about how users interact with the 99x04 platform — for example, which games are most visited, where users navigate after the homepage, and how long sessions last. This data is used solely to improve platform performance and user experience.
• Functional cookies: These cookies remember your preferences — such as your selected language, preferred payment method, or notification settings — to personalise your experience on return visits.
• Marketing cookies: With your consent, we may use cookies to deliver relevant promotional content and to measure the effectiveness of marketing campaigns. You may withdraw your consent to marketing cookies at any time through your account settings.

We do not use cookies to collect personally identifiable information without your knowledge, and we do not use third-party advertising networks that would track your behaviour across unrelated websites.

99x04 takes the security of your personal data seriously and implements a multi-layered technical and organisational security framework to protect it from unauthorised access, loss, disclosure, or destruction. Our security measures include:

• 256-bit TLS/SSL encryption for all data transmitted between your device and our servers, ensuring that your login credentials, payment details, and personal information cannot be intercepted in transit.
• Encryption at rest for sensitive data stored in our databases, including identity documents, financial records, and contact information.
• Access controls: Personal data is accessible only to authorised 99x04 personnel who require it to perform their specific job functions. Access rights are reviewed regularly and revoked immediately upon change of role or departure.
• Two-factor authentication (2FA) available for all player accounts, strongly recommended as an additional layer of account protection.
• Regular security audits and penetration testing conducted by independent security specialists to identify and remediate vulnerabilities in our platform infrastructure.
• Incident response procedures: In the event of a data breach that is likely to affect your rights and freedoms, 99x04 will notify you and the relevant authorities within the timeframes required by applicable law.

While we implement rigorous security measures, no system is entirely immune to security threats. You are responsible for maintaining the confidentiality of your own account credentials. 99x04 will never ask you for your password via email, live chat, or any other channel. If you believe your account has been compromised, contact our support team immediately.

99x04 retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, unless a longer retention period is required or permitted by applicable law. Our general retention guidelines are as follows:

• Active account data: Retained for the duration of your account and for a period of five (5) years following account closure, in accordance with standard record-keeping requirements for financial services.
• KYC and identity verification documents: Retained for a minimum of five (5) years from the date of verification, consistent with anti-money laundering obligations.
• Transaction records: Retained for five (5) years from the date of each transaction to support financial audit trails and dispute resolution.
• Support communications: Retained for two (2) years from the date of the last interaction, to assist with ongoing or future support queries and dispute resolution.
• Marketing consent records: Retained for three (3) years from the date consent was granted or withdrawn, to demonstrate compliance with consent obligations.
• Analytical and usage data: Anonymised after thirteen (13) months and thereafter retained in aggregate form with no link to individual identity.

Upon expiry of the applicable retention period, personal data is securely deleted using methods that prevent recovery. Where complete deletion is not technically feasible (for example, in backup archives), the data is isolated and protected from further active processing until it can be permanently deleted at the next scheduled backup purge cycle.

As a 99x04 player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us via the channels described in Section 14. We will respond to all verified requests within 30 days.

• Right of access: You have the right to request a copy of the personal data that 99x04 holds about you, together with information about how it is used and with whom it is shared.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated promptly.
• Right to erasure: Also known as the "right to be forgotten", this allows you to request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you have withdrawn your consent. This right is subject to our legal retention obligations — we cannot delete data we are required by law to retain.
• Right to restriction of processing: You may request that we restrict the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of the data is being resolved.
• Right to data portability: You have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format, and to transmit that data to another service provider where technically feasible.
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on our legitimate interests, although we may be entitled to override that objection in certain circumstances.
• Rights related to automated decision-making: Where 99x04 makes decisions about your account (such as fraud risk assessments) through automated means that produce legal or similarly significant effects, you have the right to request human review of that decision.

The 99x04 platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that a user under the age of 21 has registered an account or provided personal data to us, we will immediately close the account, delete all associated personal data, and return any legitimately deposited funds (net of any bonus-derived component) to the appropriate payment method.

During the account registration and KYC verification process, we require all users to confirm their date of birth and, where triggered, to provide documentary proof of age in the form of a valid National Identity Card (NID), passport, or birth certificate. We treat the protection of minors from gambling-related harm as a paramount obligation.

If you are a parent or guardian and believe that your child or a minor under your care has registered an account with 99x04 without your knowledge, please contact us immediately at [email protected] so that we can take immediate protective action. For further information on our approach to protecting minors, please refer to our Responsible Gaming page.

The 99x04 website may contain references to third-party game studios, payment providers, and sports organisations. While we do not include external hyperlinks in the body of this privacy policy or elsewhere on the platform where they are not necessary, you should be aware that any external services you access through third-party payment apps — such as bKash, Nagad, or Rocket — operate under their own independent privacy policies.

99x04 is not responsible for the privacy practices or the content of any third-party services. We encourage you to read the privacy policies of any external services you use in connection with your 99x04 account, particularly those of your payment provider, before sharing personal information with them.

The inclusion of references to third-party providers in this policy or on the 99x04 platform does not constitute an endorsement of those providers' data practices, and 99x04 accepts no liability for any data handling by those providers that occurs outside the scope of their contractual obligations to us.

99x04 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. When a material change is made to this policy, we will notify registered users by displaying a prominent notice on the platform homepage and, where possible, by sending a notification to your registered email address.

The "Last Updated" date at the top of this page will always indicate when the most recent revision was made. Minor amendments — such as corrections of typographical errors or clarifications that do not alter the substance of the policy — may be made without individual notification.

Your continued use of the 99x04 platform following the effective date of any revision to this Privacy Policy constitutes your acknowledgement of the updated policy. If you do not agree with any change to this policy, you must cease using the platform and contact our support team to close your account and request the deletion of your personal data, subject to our legal retention obligations as described in Section 9.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way 99x04 handles your personal data, please reach out to our support team through any of the following channels:

• Live Chat : Available 24/7 directly inside the 99x04 platform. Live chat is the fastest way to reach our support team for urgent privacy-related matters.
• Email: [email protected] — for formal data rights requests, complaints, or detailed privacy enquiries. Please write "Privacy Request" in the subject line of your message so our data team can prioritise your query appropriately.
• WhatsApp: Available from 08:00 to 00:00 Bangladesh Standard Time (BST, UTC+6) for general support queries including privacy-related questions.

We aim to acknowledge all privacy-related communications within 5 business days and to provide a substantive response within 30 days. For complex requests — such as full data export or account deletion — the response period may be extended by an additional 30 days where justified, in which case we will notify you of the extension and the reason for it.