Privacy Policy

1 Data We Collect

xx99922 collects personal data from players through multiple channels, including account registration forms, identity verification submissions, payment transactions, platform usage, and communications with our support team. The categories of personal data we collect are set out below.

Account Registration Data

When you register a player account on xx99922, we collect the following information:

• Full legal name (as it appears on your government-issued ID).
• Date of birth (used to verify that you are aged 18 or above).
• Email address (used for account communications and security alerts).
• Bangladeshi mobile number (used for account verification and two-factor authentication).
• Preferred deposit and withdrawal method (bKash, Nagad, Rocket, Upay, or bank transfer).
• Username and encrypted password.

Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) obligations, we may collect:

• Copies of government-issued identification documents, including National Identity Card (NID) or passport.
• Proof of address documentation, such as a recent utility bill or bank statement.
• Selfie or video verification in some cases, to confirm document authenticity.
• bKash, Nagad, or bank account screenshots confirming payment method ownership.

Financial Transaction Data

xx99922 records the following financial data for every deposit and withdrawal:

• Transaction amount in Bangladeshi Taka (BDT).
• Transaction date, time (Bangladesh Standard Time, UTC+6), and unique reference number.
• Payment method used (e.g., bKash mobile number, Nagad account reference, bank account identifier).
• Transaction status (pending, completed, failed, reversed).

xx99922 does not store full card numbers, CVV codes, or bKash/Nagad PINs on its servers. Payment method tokenisation is used to retain only a masked reference sufficient for reconciliation and withdrawal matching.

Platform Usage Data

When you use the xx99922 platform, we automatically collect technical usage data, including:

• IP address and approximate geolocation (country and city level).
• Device type, operating system, and browser version.
• Pages visited, games played, bet amounts, session duration, and navigation path.
• Login timestamps and logout timestamps (Bangladesh Standard Time).
• Referring URL (the webpage from which you accessed xx99922).

Communications Data

If you contact xx99922 via email or live chat, we retain a record of:

• The content of your message or support ticket.
• The date and time of correspondence.
• The resolution outcome and any follow-up actions taken.

2 How We Use Your Data

xx99922 processes your personal data only for specified, explicit, and legitimate purposes. We do not process your data in any manner that is incompatible with the purposes for which it was originally collected.

Primary Purposes

• Account management: Creating and maintaining your xx99922 player account, verifying your identity, and providing access to games and betting markets.
• Payment processing: Facilitating deposits via bKash, Nagad, Rocket, and Upay, and processing withdrawal requests to your verified payment method.
• Age verification: Confirming that all registered players are aged 18 years or above, in compliance with responsible gaming obligations.
• KYC and AML compliance: Verifying identity documents and monitoring transaction patterns to detect and prevent fraud, money laundering, and terrorist financing.
• Customer support: Responding to your queries, complaints, and support requests in English via email at [email protected].
• Bonus and promotion management: Verifying eligibility for promotional offers, welcome bonuses, and the xx99922 Black Diamond VIP programme.

Secondary Purposes

• Platform security: Detecting suspicious login activity, protecting against account takeover, and monitoring for indicators of underage gambling.
• Responsible gaming: Using session data and betting patterns to identify players who may be showing signs of problem gambling, enabling timely intervention and referral to responsible gaming tools.
• Platform improvement: Analysing aggregated, anonymised usage data to improve the performance, content, and user experience of the xx99922 platform.
• Legal and regulatory compliance: Retaining records as required by applicable laws and responding to lawful requests from regulatory or law enforcement authorities.

3 Data Sharing

xx99922 does not sell, rent, or disclose your personal data to third parties for their own marketing or commercial purposes. We share personal data only in the specific, limited circumstances described in this section.

Service Providers and Technology Partners

xx99922 works with a limited number of trusted third-party service providers who process personal data on our behalf under strict contractual data processing agreements. These include:

• Game content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi supply certified game content and their platforms may record gameplay sessions for fairness audit purposes. These providers operate under their own privacy frameworks and are certified by independent gaming laboratories.
• Payment processors: bKash, Nagad, Rocket, Upay, and partnered Bangladeshi banks (including Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank) receive the minimum transaction data necessary to process your deposits and withdrawals.
• Identity verification services: KYC document processing may involve third-party identity verification technology to authenticate submitted documents. These providers are contractually prohibited from using your documents for any purpose other than the verification requested by xx99922.
• Analytics providers: Aggregated, anonymised platform usage data may be shared with analytics providers to support platform performance optimisation. No personally identifiable information is included in analytics data.

Legal Disclosure

xx99922 may disclose personal data to law enforcement agencies, regulatory bodies, or other government authorities where required to do so by law, court order, or legal process. In such cases, xx99922 will disclose only the minimum data necessary to comply with the legal obligation and will, where legally permissible, inform the affected player of the disclosure.

Business Transfers

In the event of a merger, acquisition, or sale of all or part of xx99922's assets, personal data held by xx99922 may be transferred to the acquiring entity as part of the transaction. Affected players will be notified via their registered email address prior to any transfer of personal data in such circumstances, and the same privacy protections will apply under the successor entity.

4 Cookies & Tracking

xx99922 uses cookies and similar tracking technologies to deliver a functional, personalised, and secure experience on the platform. This section explains what cookies we use, why we use them, and how you can manage your cookie preferences.

What Are Cookies?

Cookies are small text files that are placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits, remember your preferences, keep your session active, and collect anonymised usage data. Cookies cannot access other files on your device or execute code.

Types of Cookies Used by xx99922

Cookie Type	Purpose	Retention
Essential / Session	Maintain your login session, keep your account authenticated, and remember your basket/bet slip during an active session.	Session (deleted on browser close)
Functional / Preference	Remember your platform preferences such as language setting (English), preferred game category, and display settings.	Up to 12 months
Performance / Analytics	Collect anonymised data on page visits, session duration, navigation paths, and game engagement to improve platform performance.	Up to 24 months
Security	Detect fraudulent login attempts, identify suspicious device behaviour, and support multi-factor authentication workflows.	Up to 30 days

Managing Your Cookie Preferences

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling essential session cookies will prevent you from logging into your xx99922 account and using core platform features. Instructions for managing cookies are available in the help documentation of all major browsers, including Chrome, Firefox, Safari, and Edge.

Third-Party Cookies

Some game content delivered by Pragmatic Play, Evolution Gaming, and other certified providers may place their own functional cookies on your device to deliver the game experience. These cookies are governed by the respective provider's privacy policy and are used solely for game delivery and session continuity purposes.

5 Data Retention

xx99922 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply to the main categories of personal data held by xx99922.

Data Category	Retention Period	Basis for Retention
Account registration data	Duration of account + 5 years post-closure	Legal obligation / AML requirements
KYC identity documents	Duration of account + 5 years post-closure	Legal obligation (KYC/AML)
Financial transaction records	7 years from transaction date	Financial record-keeping regulations
Platform usage / session logs	13 months from collection	Legitimate interest (security & fraud)
Support communications	3 years from last interaction	Legitimate interest (dispute resolution)
Self-exclusion records	Minimum 7 years from exclusion date	Responsible gaming obligations
Cookie / analytics data	Up to 24 months	Consent

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual player. Where data is anonymised rather than deleted, the anonymised dataset may be retained indefinitely for statistical and platform improvement purposes.

6 Data Security

xx99922 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. Our security infrastructure is reviewed and updated regularly in line with industry best practices.

Technical Security Measures

• 256-bit TLS encryption: All data in transit between your device and xx99922 servers is encrypted using TLS 1.2 or higher.
• Data encryption at rest: Sensitive personal data stored on xx99922 servers — including KYC documents and payment references — is encrypted at rest using AES-256.
• Password hashing: Account passwords are never stored in plaintext. They are hashed using a secure one-way algorithm with per-user salting.
• Two-factor authentication (2FA): xx99922 supports two-factor authentication for all player accounts, adding an additional layer of protection against unauthorised account access.
• Intrusion detection: Automated systems monitor network traffic and login patterns for anomalous activity indicative of brute-force attacks, credential stuffing, or account takeover attempts.
• Payment tokenisation: Full payment method details (card numbers, bKash PINs, Nagad PINs) are never stored on xx99922 servers. Only tokenised references are retained for withdrawal matching.

Organisational Security Measures

• Access to personal data is restricted to xx99922 staff members who require it to perform their specific job function — a principle of minimum necessary access.
• All xx99922 staff with access to personal data are subject to confidentiality obligations and receive regular data protection training.
• Third-party service providers are subject to contractual data security requirements and are assessed for security compliance prior to engagement.
• xx99922 maintains an internal incident response procedure. In the event of a data breach that poses a risk to player rights, affected players will be notified promptly via their registered email address.

7 Your Privacy Rights

As a player on the xx99922 platform, you have a number of rights in relation to the personal data we hold about you. These rights are set out below. To exercise any of these rights, please contact the xx99922 support team in English at [email protected]. We will respond to all valid requests within 30 days of receipt.

Right of Access

You have the right to request a copy of the personal data xx99922 holds about you. Upon receipt of a verified access request, we will provide you with a summary of the data categories held, the purposes for which they are processed, and the retention periods applicable to your data.

Right to Rectification

If any personal data xx99922 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Please note that changes to identity data (name, date of birth) will require additional KYC verification to ensure the integrity of your account record.

Right to Erasure

You have the right to request the deletion of your personal data held by xx99922. This right is subject to important limitations — in particular, xx99922 is legally required to retain KYC documents and financial transaction records for the statutory periods specified in Section 5. Where deletion is not possible due to a legal obligation, xx99922 will inform you of the specific retention requirement that applies.

Right to Restriction of Processing

You may request that xx99922 restricts the processing of your personal data in certain circumstances — for example, while a rectification request is being assessed, or where you contest the legal basis for processing. During a restriction period, xx99922 will continue to store your data but will not actively process it for other purposes.

Right to Data Portability

Where personal data has been provided by you directly and processed on the basis of consent or contract performance, you have the right to receive that data in a structured, commonly used, and machine-readable format. Contact our support team to request a data export.

Right to Object

You have the right to object to the processing of your personal data where that processing is based on xx99922's legitimate interests. Upon receipt of an objection, xx99922 will assess whether compelling legitimate grounds exist that override your individual rights and interests.

Rights Related to Automated Decision-Making

xx99922 does not use fully automated decision-making that produces legal effects on players. Where automated fraud-detection screening flags an account for review, that decision is subject to human assessment. You have the right to request human review of any automated flag that has resulted in a restriction on your account.

8 Contact & DPO

xx99922 takes its data protection responsibilities seriously. If you have any questions, concerns, or complaints about the way in which xx99922 handles your personal data, or if you wish to exercise any of your privacy rights as described in Section 7, please contact us using the details below.

Data Controller

The data controller responsible for your personal data is xx99922, operating the platform at xx99922.bet. The platform serves Bangladeshi players in the English language, with all support and correspondence conducted in English via email.

Privacy Enquiries and Support

For all privacy-related enquiries, data subject access requests, rectification requests, or complaints, please contact the xx99922 support team in English at [email protected]. Include "Privacy Enquiry" or "Data Rights Request" in your subject line. Our team aims to acknowledge all privacy-related correspondence within 48 hours (Bangladesh Standard Time, UTC+6) and to resolve requests within 30 days.

Complaints

If you are dissatisfied with xx99922's handling of your personal data or the response to a privacy rights request, you have the right to escalate your complaint by contacting the xx99922 support team directly at [email protected]. All formal complaints are reviewed by senior management and a substantive written response will be provided within 30 days of escalation. xx99922 is committed to resolving privacy complaints fairly and transparently.