99bk Privacy Policy

1 Introduction

99bk is Bangladesh's trusted online casino and sports betting platform, accessible at https://99bk.io. We are committed to protecting the privacy and personal data of every member who interacts with our platform. This Privacy Policy sets out, in plain and transparent terms, the full scope of our data practices — from initial collection through to final deletion.

We understand that trust is foundational to the relationship between a gaming platform and its members. When you register with 99bk, deposit funds via bKash, Nagad, or Rocket, place a cricket bet, or play a live dealer game, you share personal information with us. We take that responsibility seriously. This document is our commitment to you that your data will be handled with care, stored securely, and used only for the purposes stated here.

This Privacy Policy applies to all 99bk members, including registered account holders, visitors who browse the platform without registering, and individuals who contact our support team. It applies regardless of whether you access the platform via a desktop browser or a mobile device. All processing of personal data by 99bk is governed by this policy.

2 Personal Data We Collect

99bk collects personal data across several categories, depending on your interaction with the platform. The following table summarises the categories of data we collect and the specific data points within each category:

We do not collect sensitive personal data categories such as health information, biometric data, racial or ethnic origin, political opinions, religious beliefs, or sexual orientation. If such data is inadvertently disclosed to us (for example, in a support communication), it will not be processed or retained beyond what is strictly necessary to resolve the matter at hand.

3 How We Collect Your Data

99bk collects personal data through the following channels and mechanisms:

• Direct registration: When you create a 99bk account, you provide identity data, contact data, and initial preferences directly via the registration form.
• KYC submission: When you submit identity verification documents to complete the KYC process, we receive and store identity data and proof-of-address documents.
• Payment transactions: When you make a deposit or request a withdrawal via bKash, Nagad, Rocket, Upay, Visa, Mastercard, or Dutch-Bangla Bank, our payment processing partners transmit relevant financial reference data to confirm transaction completion.
• Platform usage: As you use the 99bk platform — browsing game lobbies, placing bets, participating in live casino tables, and navigating account settings — our systems automatically record technical data and gaming activity data as described in Section 2.
• Cookies and tracking technologies: 99bk uses cookies and similar client-side technologies to collect technical data. Full details are provided in Section 7 of this policy.
• Support interactions: When you contact 99bk via live chat, email, or WhatsApp, we collect and retain the content of those communications for service quality and dispute resolution purposes.
• Third-party verification providers: For identity and age verification purposes, 99bk may use third-party KYC service providers who return a verification status and associated identity data confirmation to 99bk. We do not receive raw biometric data from these providers.

4 Legal Basis for Processing

99bk processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

1. Contractual necessity: Processing required to perform our contractual obligations to you as a member — including account management, payment processing, game delivery, and customer support. Without this processing, we cannot provide the services you have registered for.
2. Legal obligation: Processing required to comply with applicable legal obligations, including anti-money laundering (AML) obligations, age verification requirements (21+), fraud prevention mandates, and financial record-keeping obligations.
3. Legitimate interests: Processing carried out for 99bk's legitimate business interests, including platform security, fraud detection, abuse prevention, responsible gaming monitoring, and aggregate analytics for service improvement — where such interests are not overridden by your fundamental privacy rights.
4. Consent: Processing activities for which we have obtained your explicit consent, primarily marketing communications (email, SMS, push notifications). You may withdraw consent for consent-based processing at any time without affecting the lawfulness of processing carried out before withdrawal.

5 How We Use Your Personal Data

The personal data collected by 99bk is used exclusively for the following purposes:

• Account creation and management: To create, maintain, and administer your 99bk member account, including password resets, account settings updates, and profile management.
• Identity verification (KYC): To verify your age (21+), identity, and residential address as required by responsible gaming and anti-fraud obligations before processing withdrawals or activating full account functionality.
• Payment processing: To facilitate deposits and withdrawals via your chosen payment method (bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank), including communicating with payment processor APIs to confirm transaction status.
• Game and betting service delivery: To provide access to casino games, live dealer tables, sports betting markets (including BPL cricket, IPL, T20 World Cup, football, and kabaddi markets), and to record and settle bets accurately.
• Responsible gaming: To monitor gaming behaviour patterns, apply deposit limits, loss limits, session time reminders, cool-off periods, and self-exclusion restrictions as requested by members or as proactively applied by 99bk where problem gambling indicators are identified.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, money laundering, automated bot usage, and other prohibited conduct as defined in the 99bk Terms and Conditions.
• Customer support: To respond to your support requests, resolve disputes, and improve the quality of our support service.
• Marketing communications (with consent): To send you promotional offers, bonus notifications, tournament announcements, and personalised recommendations via email, SMS, or in-platform notifications — only where you have provided explicit consent.
• Analytics and improvement: To analyse aggregated, anonymised usage data to understand how members navigate the platform and to improve game offerings, user experience, and support quality.
• Legal compliance: To meet record-keeping, reporting, and cooperation obligations under applicable law.

6 Data Sharing & Third Parties

99bk does not sell, rent, lease, or otherwise transfer your personal data to unaffiliated third parties for their own independent marketing or commercial purposes. Data sharing is limited to the categories of partners described below, all of whom are bound by confidentiality and data protection obligations consistent with this Privacy Policy:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and Dutch-Bangla Bank receive the minimum transaction-reference data necessary to process deposits and withdrawals. These providers maintain their own privacy policies governing their processing of transaction data.
• KYC and identity verification providers: Third-party identity verification services receive identity documents for the purpose of confirming a member's age, name, and address. These providers are contractually prohibited from using your data for any purpose other than verification on behalf of 99bk.
• Game content providers: Licensed game studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) receive a session token and player identifier to initialise and record game sessions. These providers do not receive your full name, address, or payment details.
• Sports data feed providers: Providers of live odds, match data, and results feeds for cricket (BPL, IPL, T20 World Cup, Bangladesh Tigers matches), football, and other sports receive only the data required to settle bets accurately.
• Cloud hosting and infrastructure providers: 99bk uses secure cloud infrastructure services to host the platform and store data. These providers act as data processors and process data solely on our instructions.
• Legal and regulatory authorities: Where required by applicable law, court order, or regulatory authority directive, 99bk may disclose personal data to law enforcement agencies or other authorities. We will notify you of such disclosures where legally permitted to do so.

All third-party data processors engaged by 99bk are selected on the basis of their data security standards and their commitment to handling personal data in a manner consistent with this Privacy Policy. 99bk conducts periodic reviews of third-party data processing arrangements.

7 Cookies & Tracking Technologies

99bk uses cookies and similar client-side technologies to enhance your experience on the platform, maintain session state, and collect anonymised usage analytics. The following categories of cookies are used:

• Strictly necessary cookies: These cookies are required for the platform to function. They maintain your login session, remember your account preferences, and enable secure payment flows. These cookies cannot be disabled without affecting core platform functionality.
• Performance and analytics cookies: These cookies collect anonymised data about how members navigate the platform — which pages are visited most, how long sessions last, and where users encounter errors. This data is used in aggregate form only to improve the platform. Individual users are not identifiable from this data.
• Functionality cookies: These cookies remember choices you make (such as preferred language, notification settings, and game lobby filters) to provide a more personalised experience on return visits.
• Marketing cookies: Where you have consented to marketing communications, these cookies help us deliver relevant promotional content and measure the effectiveness of marketing campaigns. Marketing cookies are only active where explicit consent has been provided.

You can manage cookie preferences through your browser settings. Most modern browsers allow you to refuse new cookies, delete existing cookies, or receive alerts when new cookies are set. Please note that disabling strictly necessary cookies will impair your ability to use the 99bk platform.

8 Data Security

99bk implements a multi-layered approach to data security, combining technical, organisational, and procedural controls to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security measures include:

• SSL/TLS encryption: All data transmitted between your device and 99bk servers is encrypted using TLS 1.2 or higher. Our platform enforces HTTPS across all pages and API endpoints.
• Data-at-rest encryption: Sensitive personal data stored on 99bk infrastructure — including identity documents, financial records, and password hashes — is encrypted using AES-256 or equivalent standards.
• Access controls: Access to personal data within 99bk's internal systems is restricted on a strict need-to-know basis. Staff access to member data is logged, monitored, and subject to regular audit.
• Password security: Member passwords are stored as salted cryptographic hashes. Plain-text passwords are never stored or transmitted. We recommend members use strong, unique passwords and enable two-factor authentication (2FA) on their accounts.
• Vulnerability management: 99bk conducts regular security assessments and penetration tests on its platform infrastructure. Critical vulnerabilities are remediated within defined SLA timelines.
• Incident response: In the event of a data security incident that poses a risk to member data, 99bk has an incident response plan that includes containment, assessment, notification, and remediation steps. Affected members will be notified promptly where their data has been compromised.

While 99bk takes every reasonable precaution to protect your data, no online platform can guarantee absolute security. You play an important role in keeping your account secure: protect your password, enable 2FA, and contact support immediately at [email protected] if you suspect unauthorised access to your account.

9 Data Retention

99bk retains personal data for as long as necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable law. The following retention periods apply as a general guide:

At the end of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Where data is anonymised rather than deleted, the resulting anonymised dataset is no longer personal data and is not subject to this Privacy Policy.

10 Your Data Rights

As a 99bk member, you hold the following rights in relation to your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request". We will respond within 30 days of receiving a verified request.

1. Right of Access: You have the right to request confirmation of whether 99bk processes personal data about you and, if so, to receive a copy of that data along with information about how it is used, stored, and shared.
2. Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held about you. For most contact and preference data, you can make corrections directly within your Account settings.
3. Right to Erasure ("Right to Be Forgotten"): You have the right to request deletion of your personal data where it is no longer necessary for the purposes it was collected, where you withdraw consent (for consent-based processing), or where you object to processing based on legitimate interests. This right is subject to legal retention obligations — for example, financial records required by law cannot be deleted on request.
4. Right to Restriction of Processing: You have the right to request that 99bk restrict processing of your personal data in certain circumstances, such as while the accuracy of data is being contested or while an objection to processing is being assessed.
5. Right to Data Portability: Where processing is based on consent or contractual necessity, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format (e.g., CSV or JSON) so that it can be transferred to another service.
6. Right to Object: You have the right to object to processing of your personal data based on legitimate interests, including profiling for responsible gaming or marketing purposes. You may also withdraw consent for marketing communications at any time through your Account settings or by contacting support.
7. Right to Human Review of Automated Decisions: Where an automated decision has a significant effect on your account (such as an automated account suspension or restriction), you have the right to request that a human member of the 99bk team reviews that decision.

11 Children & Minors

99bk maintains a strict 21+ age policy across all of its services. The platform is not directed at, and does not knowingly collect personal data from, individuals under the age of 21. Registration is not permitted for individuals under 21 years of age.

All members are required to confirm their age at registration and to complete identity verification (KYC) confirming they meet the 21+ age requirement before withdrawals are processed. If 99bk discovers that a member has provided false date-of-birth information and is under the age of 21, the account will be immediately closed, all winnings voided, and any deposited funds returned subject to the verification process described in the Terms and Conditions.

If you believe that a person under the age of 21 has created an account on 99bk, please contact us immediately at [email protected]. We will investigate and take appropriate action promptly.

12 International Data Transfers

99bk's primary operations and member base are focused on the Bangladesh market. However, some of our third-party service providers — including cloud infrastructure partners, game studio providers, and KYC verification services — may process data on servers located outside Bangladesh. Where such international transfers occur, 99bk takes steps to ensure that your personal data receives an equivalent level of protection to that described in this Privacy Policy. These steps include:

• Contractual safeguards: We require all international data processors to enter into data processing agreements that mandate equivalent data protection standards, confidentiality obligations, and security controls to those applied by 99bk.
• Vendor due diligence: Before engaging any third-party processor that handles personal data outside Bangladesh, 99bk conducts a data protection assessment to evaluate the processor's security posture, privacy practices, and compliance record.
• Data minimisation in transfers: Where data is transferred internationally, we ensure that only the minimum data necessary for the specific processing purpose is transferred. Full member profiles are not transmitted to international processors unless strictly required.

By using the 99bk platform, you acknowledge that your personal data may be processed in jurisdictions outside Bangladesh as described in this section, subject to the safeguards outlined above.

13 Changes to This Privacy Policy

99bk reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform services. When material changes are made, we will provide notice through one or more of the following channels:

• A notice displayed prominently on the 99bk platform for a minimum of 14 days following the change;
• A notification to your registered email address where the change materially affects your rights or how your data is used; or
• An update to the "Last Updated" date shown at the top of this Privacy Policy.

Your continued use of the 99bk platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you must discontinue use of the platform and may request account closure by contacting our support team.

We encourage you to review this Privacy Policy periodically to stay informed about how 99bk protects your data. The current version of the policy is always available at https://99bk.io/privacy-policy.

14 Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data by 99bk, you may contact us through the following channels. All privacy-related communications must be sent in writing:

• Email (plain text — not a link): [email protected] — use subject line "Privacy Policy Enquiry" or "Data Rights Request" as appropriate.
• WhatsApp Support: +880 1700 000000 — available 24/7 for general enquiries; data rights requests must be submitted via email for documentation purposes.
• Response time: We aim to acknowledge all privacy-related enquiries within 2 business days (Bangladesh Standard Time, UTC+6) and to provide a full response within 30 calendar days of receiving a verified request.