99ox Privacy Policy — How We Protect Your Personal Data

1. Introduction

This Privacy Policy ("Policy") describes how 99ox collects, stores, uses and shares personal information obtained from players and visitors who access the 99ox online casino and sports betting platform at https://99ox.bio (the "Platform"). This Policy applies to all personal data processed in connection with your use of the Platform, including data collected during account registration, during deposits and withdrawals via bKash, Nagad and Rocket, during gameplay sessions, and through any communications with the 99ox support team.

By registering an account, making a deposit, or using any feature of the 99ox platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described. If you do not agree with the practices described in this Policy, you should not use the 99ox platform.

2. Information We Collect

99ox collects personal data in three categories: information you provide directly during registration, information generated automatically by your use of the platform, and information received from payment providers in connection with your transactions.

We do not collect information about you from social media platforms, data brokers or other external sources unless you choose to provide such information directly to us as part of a support interaction.

3. How We Use Your Information

99ox uses personal data only for the following specific and legitimate purposes. We do not use your data for any purpose incompatible with those listed below without first obtaining your explicit consent:

• To create and manage your 99ox player account, verify your identity during registration and process your login sessions securely.
• To process deposits and withdrawals via bKash, Nagad and Rocket and maintain accurate records of your transaction history for dispute resolution and regulatory compliance.
• To detect, prevent and investigate fraud, money laundering, match-fixing, multiple account abuse and any other prohibited conduct defined in our Terms & Conditions.
• To comply with applicable legal obligations including anti-money-laundering (AML) requirements, know-your-customer (KYC) requirements and responsible gaming obligations.
• To provide customer support when you contact us with an account query, payment issue, technical problem or responsible gaming request.
• To send transactional communications — deposit confirmations, withdrawal notifications and account security alerts — necessary for the operation of your account. We do not send unsolicited marketing messages.

4. Payment Data and Financial Privacy

99ox treats payment-related personal data with particular care. When you make a deposit via bKash, Nagad or Rocket, the actual financial transaction occurs directly between you and the payment provider — not through 99ox servers. 99ox receives only a confirmation reference to credit your account with the correct deposit amount. We do not have access to your mobile banking PIN, your full bKash account history or your bank credentials.

All payment reference data retained by 99ox is stored in encrypted form. Access to payment records is restricted to authorised staff only, and only where necessary for processing a transaction, resolving a dispute or fulfilling a legal obligation. Payment records are retained for the period required by applicable law and then securely deleted.

5. Sharing of Your Personal Information

99ox does not sell, rent or trade your personal data to third parties. We share personal data only in the following limited circumstances:

• Game providers and platform technology partners — strictly limited to data necessary for game delivery, session management and technical support. These partners operate under data processing agreements prohibiting them from using your data for their own purposes.
• Payment processors — bKash, Nagad and Rocket — to the extent necessary to verify and confirm your deposit and withdrawal transactions. These providers operate under their own privacy policies and applicable financial regulations.
• Regulatory and law enforcement authorities — where required by applicable law, court order or regulatory direction. We notify you of such disclosures where legally permitted.
• Fraud prevention and AML compliance services — where necessary to detect or prevent fraud, money laundering or other financial crime. These services operate under strict confidentiality obligations.

In all cases where we share your personal data with a third party, we take reasonable steps to ensure the third party is bound by appropriate data protection obligations and uses your data only for the specific purpose for which it was shared.

6. Cookies and Tracking Technologies

The 99ox platform uses cookies and similar session tracking technologies to provide a functional, secure and personalised experience. Cookies are small data files placed on your device when you access the platform. We use the following categories:

• Essential cookies — necessary for core platform functions including your login session, account security, navigation and access to game content. These cannot be disabled without breaking platform functionality.
• Analytics cookies — used to understand how players navigate 99ox, which pages are most visited and where improvements can be made. This data is aggregated and does not identify individual players.
• Security cookies — used to identify and protect against fraud, multiple account creation and session hijacking. These contribute directly to the security and integrity of your 99ox account.

You may manage cookie preferences through your mobile browser settings. Disabling essential cookies will impair platform functionality and may prevent you from logging in. 99ox does not use cookies to serve third-party advertising.

7. Your Data Rights

As a 99ox player you hold the following rights over your personal data. To exercise any right, contact [email protected] with your registered mobile number and a description of the right you wish to exercise:

• Right of Access — request a copy of all personal data 99ox holds about you. We will provide this within 30 days of a valid request.
• Right to Correction — if any personal data we hold is inaccurate or incomplete, request that we correct or update it.
• Right to Erasure — request deletion of your personal data. Deletion requests may be subject to legal retention obligations that prevent immediate erasure of certain data categories such as payment records required for AML compliance.
• Right to Restriction — request that we restrict processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or have objected to processing.
• Right to Object — object to processing of your personal data where it is carried out on the basis of legitimate interests. We will review your objection and respond within 30 days.

99ox will not discriminate against you for exercising data rights. Exercising these rights does not affect the validity of any existing account, pending transactions or accrued winnings, subject to any applicable legal or regulatory requirements.

Our Privacy Commitments

These six commitments summarise how 99ox protects player privacy on the Bangladesh platform.

99ox implements appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration or destruction. While we maintain strong protection, no internet-based platform can guarantee absolute security. Players are encouraged to use strong, unique passwords and notify us at [email protected] immediately if they suspect unauthorised account access.

8. Data Retention

99ox retains your personal data for as long as your account remains active and for such additional period as required by applicable law. Account data — including your registration details, game history and transaction records — is retained for a minimum of five (5) years following account closure, in accordance with applicable AML regulations and financial record-keeping requirements.

Where you request erasure, we delete all data not subject to a legal retention obligation within 30 days of your request. We notify you of any data categories that cannot be deleted immediately and the legal basis for their retention. When data is no longer required, it is securely and irreversibly deleted from our systems.

9. Children's Privacy and the 21+ Policy

The 99ox platform is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from persons under 21. Registration by persons under 21 is prohibited by our Terms & Conditions. If we discover that personal data has been collected from a person under 21, we will close the account, refund any deposits and delete all associated personal data without undue delay.

10. Changes to This Privacy Policy

99ox reserves the right to update or modify this Privacy Policy at any time. Where changes are material — meaning they significantly affect how we use your personal data or the rights you hold — we will endeavour to notify you via your registered mobile number with reasonable advance notice before the changes take effect. The effective date at the top of this Policy will be updated each time it is revised. Your continued use of 99ox after the effective date of any revised Policy constitutes acceptance of the updated terms.

11. Contact — Privacy and Data Enquiries

All data rights requests, privacy queries and reports of suspected data breaches should be directed to the 99ox support team. We aim to respond to all privacy-related queries within five (5) business days. For urgent matters such as suspected account compromise, we aim to respond within two (2) hours during Bangladesh Standard Time (BST, UTC+6) business hours.

Contact email for privacy matters (plain text — not a clickable link): [email protected].