99zz Privacy Policy

1 Introduction

This Privacy Policy (the "Policy") describes how 99zz (the "Platform", "we", "us", or "our") collects, processes, stores, and shares personal data in connection with your use of the online casino and sports betting services available at https://99zz.io. This Policy applies to all registered players, prospective players, and visitors to the 99zz website, regardless of the device or method used to access the platform.

99zz is committed to handling all personal data responsibly, transparently, and in accordance with internationally recognised data protection principles. By registering a 99zz account or continuing to use the platform after this Policy has been made available to you, you acknowledge that you have read and understood how your personal data will be processed as described herein.

This Privacy Policy should be read together with the 99zz Terms & Conditions and Responsible Gaming Policy, both of which form part of the binding agreement between you and the platform. If you have any questions about how your personal data is handled, please contact us at [email protected].

2 Data We Collect

99zz collects personal data through several channels during the course of your relationship with the platform. The categories of data collected are set out below.

2.1 Registration & Account Data

When you create a 99zz account, we collect the following information:

• Full legal name as it appears on your government-issued identity document
• Date of birth (used to verify the 21+ age requirement)
• Residential address, including city (e.g., Dhaka, Chittagong, Sylhet, Khulna)
• Email address and mobile phone number
• Chosen username and hashed account password
• Account currency preference (Bangladeshi Taka, ৳)

2.2 Identity Verification (KYC) Data

To comply with anti-money laundering obligations and to confirm player eligibility, we collect:

• Copies of government-issued photo identification (National ID card, passport, or driving licence)
• Proof of residential address (utility bill, bank statement, or equivalent document)
• Selfie or live video verification where enhanced identity confirmation is required
• Source of funds documentation in cases where transaction volumes require enhanced due diligence

2.3 Financial & Transaction Data

When you make deposits or request withdrawals, we collect:

• Payment method type (bKash, Nagad, Rocket, Upay, Visa, Mastercard)
• Mobile banking account numbers or partial card numbers (we do not store full card numbers)
• Transaction amounts, dates, and reference numbers
• Deposit and withdrawal history associated with your 99zz account

2.4 Gameplay & Betting Data

As part of normal platform operation, we record:

• Game sessions, wager amounts, game outcomes, and win/loss records
• Sports betting selections, stake amounts, odds accepted, and bet settlement results
• Bonus activations, wagering progress, and promotional participation history
• Session duration data used for responsible gaming monitoring

2.5 Technical & Device Data

When you access 99zz, our systems automatically collect:

• IP address and approximate geographic location (country and city level)
• Device type, operating system, and browser version
• Referring URL and pages visited within the 99zz platform
• Session timestamps and duration
• Cookie identifiers and local storage values (see Section 6)

2.6 Customer Support Data

When you contact 99zz support via email or live chat, we retain the content of your communications, including the nature of your query, our responses, and any attachments or screenshots you provide. This data is used to resolve your query and to improve support quality.

3 How We Use Your Data

The personal data collected by 99zz is used for the following purposes:

99zz does not use your personal data for automated decision-making that produces significant legal effects without human oversight. Where automated screening tools are used (for example, in fraud detection), any adverse decision affecting your account will be reviewed by a human member of the compliance team before being implemented.

4 Legal Basis for Processing

99zz processes personal data only where a valid legal basis exists. The primary legal bases applicable to our data processing activities are:

• Contractual necessity: Processing your registration data, KYC data, and transaction data is necessary for 99zz to fulfil its obligations under the Terms & Conditions agreement entered into when you create an account.
• Legal obligation: Anti-money laundering laws, financial crime regulations, and age verification requirements impose mandatory data collection and retention obligations on 99zz that we must fulfil regardless of player consent.
• Legitimate interests: Processing technical and device data for platform security, fraud prevention, and service improvement is conducted on the basis of 99zz's legitimate operational interests, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we send marketing communications (promotional emails, bonus notifications), we do so only where you have provided clear, affirmative consent at registration or through your account communication preferences. You may withdraw this consent at any time by contacting [email protected].

5 Data Sharing & Disclosure

99zz does not sell, rent, or trade your personal data to any third party. Data is shared only in the limited circumstances described below, and only to the minimum extent necessary for each purpose.

5.1 Payment Processors

To process deposits and withdrawals, 99zz shares transaction-relevant data with payment service providers including bKash, Nagad, Rocket, Upay, and card processing networks (Visa, Mastercard). These processors receive only the data required to execute and reconcile the relevant transaction and are contractually bound to process that data securely and not to use it for any other purpose.

5.2 Identity Verification Providers

KYC verification is supported by third-party identity verification specialists. Your identity documents and biometric verification data (where applicable) are shared with these providers solely for the purpose of completing the verification process. All such providers operate under data processing agreements with 99zz.

5.3 Game Studio Partners

Game studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) receive limited session data necessary to deliver their games within the 99zz platform. This typically includes a session token and account currency — it does not include your full name, address, or payment details.

5.4 Legal & Regulatory Authorities

99zz may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, court order, or lawful authority. In such cases, 99zz will disclose the minimum data necessary to comply with the legal requirement and, where legally permitted, will notify the affected player of any such disclosure.

5.5 Business Transfers

In the event of a merger, acquisition, asset sale, or restructuring involving 99zz, player personal data may be transferred to the acquiring or successor entity as part of that transaction. Players will be notified of any such transfer and of any change to the applicable privacy policy at least 30 days in advance of the change taking effect.

6 Cookies & Tracking Technologies

99zz uses cookies and similar browser-based storage mechanisms to operate the platform efficiently and to provide a secure, personalised experience. A cookie is a small data file placed on your device when you visit the 99zz website. The cookies we use fall into the following categories:

6.1 Strictly Necessary Cookies

These cookies are essential for the platform to function correctly. They maintain your login session, remember your preferences during a visit, and protect the platform against cross-site request forgery attacks. Without these cookies, key platform features cannot operate. These cookies cannot be disabled without significantly impairing your experience.

6.2 Performance & Analytics Cookies

Performance cookies collect anonymous information about how visitors use the 99zz platform — for example, which pages are most visited, how long sessions last, and where errors occur. This data is used in aggregate form to improve platform reliability and user experience. No personally identifiable information is collected through these cookies.

6.3 Functional Cookies

Functional cookies remember choices you have made on the platform, such as your preferred game view, notification settings, or responsible gaming limit configurations. These cookies enhance your experience by reducing the need to reset preferences on each visit.

6.4 Managing Cookies

You may control which non-essential cookies are active through your browser's privacy settings. Most modern browsers allow you to block or delete cookies, though doing so may affect the functionality of the 99zz platform. Disabling strictly necessary cookies will prevent you from logging in and using core platform features. For browser-specific cookie management instructions, please consult your browser's help documentation.

7 Data Security

99zz employs a layered security architecture to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Our security measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the 99zz platform
• AES-256 encryption at rest for sensitive data records including identity documents and payment references
• Role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent required for their specific function
• Multi-factor authentication requirements for all internal staff accounts with access to player data
• Regular penetration testing and vulnerability assessments conducted by qualified third-party security specialists
• Automated anomaly detection systems that flag unusual access patterns or data export activity in real time
• Incident response procedures that ensure affected players and relevant authorities are notified promptly in the event of a confirmed data breach

Whilst 99zz takes all reasonable and proportionate measures to protect your data, no online platform can guarantee absolute immunity from all security threats. You also play an important role in keeping your account secure: use a strong, unique password for your 99zz account, enable any available two-factor authentication features, and never share your login credentials with any third party.

8 Data Retention

99zz retains personal data for the minimum period necessary to fulfil the purposes described in this Policy, and no longer. The following retention schedule provides a summary of how long different categories of data are typically held:

Following the expiry of the applicable retention period, personal data is either securely and permanently deleted from all 99zz systems, or anonymised in such a way that it can no longer be associated with any individual player. Anonymised, aggregated data may be retained indefinitely for statistical analysis and platform improvement purposes.

9 International Data Transfers

As a platform serving Bangladesh players through globally distributed technical infrastructure, some personal data processed by 99zz may be transferred to, stored in, or accessed from jurisdictions outside Bangladesh. Such transfers may occur when:

• Game studio partners (operating from European, North American, or Asian data centres) process session data to deliver games
• Identity verification providers perform document authentication using infrastructure hosted in jurisdictions with robust data protection frameworks
• Cloud infrastructure providers host encrypted data in geographically distributed data centres to ensure platform resilience and uptime

Wherever personal data is transferred internationally, 99zz ensures that appropriate safeguards are in place to protect that data to a standard equivalent to the protections described in this Policy. These safeguards include contractual data processing agreements incorporating internationally recognised standard contractual clauses, and a preference for infrastructure partners operating in jurisdictions with recognised adequacy standards.

10 Your Rights

As a player whose personal data is processed by 99zz, you hold the following rights in respect of that data. To exercise any of these rights, please submit a written request to [email protected], including your registered account username and a description of the right you wish to exercise.

• Right of access: You may request a copy of all personal data that 99zz holds about you, along with information about how it is used and with whom it is shared. We will respond to access requests within 30 calendar days.
• Right to rectification: If any personal data held about you is inaccurate or incomplete, you have the right to request that it be corrected. For account details such as address or contact number, you may also update these directly through your account settings.
• Right to erasure: In certain circumstances, you may request that 99zz delete the personal data it holds about you. This right is subject to limitations where retention is required by law — for example, financial transaction records must be retained for regulatory purposes even after account closure.
• Right to restriction: You may request that 99zz restrict the processing of your personal data in specific circumstances, such as where you contest the accuracy of the data or where you have objected to processing pending verification of legitimate grounds.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you may request a copy of your personal data in a structured, machine-readable format suitable for transfer to another service provider.
• Right to object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling for fraud prevention purposes. 99zz will cease the processing in question unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to withdraw consent: Where processing is based on your consent (such as receipt of marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing. Withdrawal of marketing consent does not affect your ability to use the 99zz platform.

11 Children & Minors

The 99zz platform is strictly intended for adults aged 21 years and above. 99zz does not knowingly collect personal data from any individual under the age of 21. The age verification process conducted at the point of registration is specifically designed to prevent minors from creating accounts on the platform.

If 99zz becomes aware, through any means, that personal data has been collected from an individual who was under 21 years of age at the time of collection, we will immediately suspend the relevant account, delete all associated personal data without delay, and reverse any financial transactions associated with that account to the extent technically and legally possible.

Parents and guardians who believe that a minor in their care may have created a 99zz account are encouraged to contact [email protected] immediately. We take such reports seriously and will investigate and act on them promptly. We also strongly encourage the use of parental control software and internet filtering tools to restrict minors' access to gambling websites.

12 Third-Party Links

The 99zz platform may, from time to time, contain references to third-party services such as payment providers (bKash, Nagad, Rocket, Upay) or game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi). Where interaction with such services is necessary for platform functionality, data is shared only to the minimum extent described in Section 5 of this Policy.

99zz does not control the privacy practices of third-party service providers and is not responsible for the content or data handling of any external website or service. Players who interact directly with third-party platforms — for example, by accessing their bKash app or bank portal independently — should review those providers' own privacy policies. The 99zz Privacy Policy applies exclusively to data collected and processed within the 99zz platform environment.

13 Policy Updates

99zz reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform features. When material changes are made to this Policy, we will notify registered players by email to the address on file and by posting a prominent notice on the 99zz platform for a period of at least 14 days prior to the changes taking effect.

The "Last Updated" date shown at the top of this page and in the table of contents sidebar will be revised each time this Policy is updated. Continued use of the 99zz platform following the effective date of a revised Policy constitutes acceptance of the updated terms. If you do not agree to a material change, you may close your account by contacting [email protected] prior to the change taking effect.

Minor updates — such as corrections to typographical errors, clarifications of existing practices, or formatting changes that do not affect the substance of the Policy — may be made without prior notice, though the Last Updated date will still be revised accordingly.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way 99zz handles your personal data, please contact our dedicated data protection team using the details below. All enquiries are handled by a qualified member of our compliance team and will receive a substantive response within 5 business days.

• Email: [email protected]
• Support hours: 24 hours a day, 7 days a week
• Time zone: Bangladesh Standard Time (BST, UTC+6)
• Response commitment: Acknowledgement within 5 business days; full response within 30 calendar days

When contacting us regarding a data rights request (Section 10), please include your registered account username and a clear description of the specific right you wish to exercise. This helps us locate your records promptly and respond with full accuracy. For security purposes, we may ask you to verify your identity before disclosing any personal data in response to an access request.

This Privacy Policy was last reviewed and updated on 1 January 2026. 99zz is committed to maintaining clear, honest, and up-to-date communication with all Bangladesh players about how their personal data is managed on this platform.