Privacy Policy — Your Data, Protected by 99db

1. Data We Collect

When you interact with the 99db platform — whether as a visitor browsing the site or as a fully registered and verified member — we may collect and process several categories of personal data. The specific data collected depends on how you use the Service and at what stage of your relationship with 99db you are.

1.1 Registration & Account Data

When you create a 99db account, we collect the information you provide in the registration form. This includes your full legal name, date of birth, residential address in Bangladesh, email address, and mobile phone number. This data is required to establish your account identity and is used throughout your membership for communication, transaction processing, and fraud prevention.

1.2 Identity Verification (KYC) Data

As part of the Know Your Customer process required before withdrawals are processed, we collect copies of government-issued identity documents such as your National ID Card (NID) or passport, proof of address documents such as utility bills or bank statements, and where required, selfie photographs taken alongside your identity document. These documents are used solely for identity verification and anti-money-laundering compliance purposes.

1.3 Financial Transaction Data

We collect records of all financial transactions conducted through your 99db account, including deposit amounts and timestamps, withdrawal requests and processing records, payment method references (such as your registered bKash or Nagad mobile number), and bonus credit and wagering activity. This data is retained for compliance, dispute resolution, and audit purposes.

1.4 Gameplay & Betting Activity Data

We collect detailed records of your gameplay and betting activity on the 99db platform. This includes game session logs, bet amounts, game outcomes, sports markets wagered on, and session durations. This data is used for responsible gaming monitoring, fraud detection, and platform improvement.

1.5 Technical & Device Data

When you access 99db through a browser or mobile device, we automatically collect certain technical data, including your IP address, device type and operating system, browser type and version, preferred language settings, and session timestamps. This information is used for security monitoring, fraud prevention, and to ensure the platform displays and functions correctly on your device.

1.6 Communications Data

If you contact 99db support via email or WhatsApp, we retain records of that correspondence. This includes the content of your messages, the date and time of contact, and any attachments or screenshots you share with us. These records are kept for quality assurance, dispute resolution, and compliance purposes.

2. How We Use Your Data

The personal data collected by 99db is used exclusively for the purposes described below. We do not use your data for purposes that are incompatible with those for which it was originally collected without first seeking your explicit consent.

Purpose	Data Categories Used
Account creation and management	Registration data, device/technical data
Identity and age verification (KYC)	KYC documents, registration data
Processing deposits and withdrawals	Financial transaction data, KYC data
Fraud prevention and security monitoring	Technical data, transaction data, gameplay data
Responsible gaming monitoring and intervention	Gameplay data, session data, communications data
Anti-money-laundering (AML) compliance	Transaction data, KYC data, registration data
Customer support and dispute resolution	Communications data, transaction data, gameplay data
Platform analytics and service improvement	Aggregated gameplay data, technical data (anonymised where possible)
Sending transactional communications (e.g., deposit confirmations, withdrawal status updates)	Registration data, transaction data
Sending promotional communications (with consent)	Registration data, gameplay preferences

Where we process your data for promotional or marketing communications, we will only do so where you have given your explicit consent at the time of registration or subsequently through your account settings. You may withdraw this consent at any time by contacting 99db support or updating your communication preferences within your account.

3. Legal Basis for Processing

99db processes personal data on one or more of the following legal bases, depending on the purpose of the processing activity:

• Contractual necessity: Processing that is necessary to perform the contract between you and 99db — for example, verifying your identity before processing a withdrawal, or maintaining records of your betting activity for account management purposes.
• Legal obligation: Processing that is required for 99db to comply with applicable laws and regulatory obligations, including KYC requirements, anti-money-laundering obligations, and responsible gaming duties.
• Legitimate interests: Processing that is necessary for 99db's legitimate business interests, where those interests are not overridden by your privacy rights — for example, using technical data to detect and prevent fraudulent account activity, or analysing aggregated gameplay data to improve the platform.
• Consent: Processing that is based on your freely given, specific, informed, and unambiguous consent — for example, sending you promotional emails or WhatsApp messages about new games, bonuses, or seasonal offers. You may withdraw this consent at any time without affecting the lawfulness of any prior processing.

4. Data Sharing & Third Parties

99db does not sell or rent your personal data to any third party. However, in order to operate the platform and comply with our legal obligations, we share limited categories of personal data with the following categories of trusted third-party service providers:

4.1 Payment Service Providers

To process deposits and withdrawals, 99db shares necessary transaction data with payment providers including bKash, Nagad, Rocket, Upay, and partner banking institutions in Bangladesh. The data shared is limited to the minimum required to complete the transaction — typically your registered mobile number or bank account reference, the transaction amount, and a transaction reference code. These providers operate under their own privacy policies and data protection obligations.

4.2 Identity Verification Partners

99db may engage specialist third-party KYC and identity verification services to assist in processing and authenticating the identity documents you submit. These providers process your KYC data under strict contractual data processing agreements with 99db and are prohibited from using your data for any purpose other than verification.

4.3 Game Software Providers

The games available on 99db are supplied by third-party game studios and providers, which may include Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, among others. These providers may receive anonymised session data necessary to deliver and audit game outcomes. They do not receive your name, contact details, or financial data unless you are participating in a provider-hosted jackpot or tournament that requires entrant registration.

4.4 Legal and Regulatory Authorities

99db may be required by law or court order to disclose personal data to law enforcement agencies, regulatory bodies, or other governmental authorities in Bangladesh or elsewhere. We will make such disclosures only to the extent required by law and will, where permitted, notify the relevant member prior to disclosure.

4.5 Business Transfers

In the event that 99db undergoes a merger, acquisition, or sale of all or a substantial part of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify affected members in advance of any such transfer where practicable and will ensure that the acquiring entity is bound by terms no less protective than those set out in this Privacy Policy.

5. Cookies & Tracking Technologies

99db uses cookies and similar tracking technologies to provide a functional, personalised, and secure experience on the platform. A cookie is a small text file placed on your device by your browser when you visit a website. The following categories of cookies are used by 99db:

• Strictly necessary cookies: These cookies are essential for the 99db platform to function. They manage your login session, maintain your account authentication state, and enable core security features such as CSRF protection. These cookies cannot be disabled without breaking core platform functionality.
• Performance and analytics cookies: These cookies collect anonymised data about how visitors use the 99db platform — for example, which pages are visited most frequently, how long sessions last, and where users navigate after completing a deposit. This data is used solely to improve the platform experience and is not linked to individual identifiable member records.
• Functional cookies: These cookies remember your preferences — such as your preferred language setting, your last visited game category, and whether you have acknowledged site notices — to make your return visits more efficient and personalised.
• Security cookies: These cookies assist in detecting and preventing fraudulent access attempts, bot activity, and session hijacking. They work alongside our server-side security systems to protect the integrity of your account.

99db does not use third-party advertising cookies or allow external advertising networks to place tracking cookies on your device via our platform. You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will affect your ability to log in and use the Service normally.

6. Data Retention

99db retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Account and KYC data: Retained for the duration of your membership plus a minimum of five years following account closure, in accordance with anti-money-laundering record-keeping obligations.
• Financial transaction records: Retained for a minimum of seven years from the date of the transaction, in line with standard financial record-keeping requirements.
• Gameplay and betting logs: Retained for a minimum of three years from the date of the session, used for dispute resolution, responsible gaming review, and compliance audits.
• Customer support correspondence: Retained for three years from the date of the last interaction in a support ticket, unless the correspondence forms part of a live dispute or legal proceeding, in which case it is retained until the matter is fully resolved.
• Technical and device data (logs): Retained for 12 months on a rolling basis, after which older log data is deleted or anonymised.
• Marketing consent records: Retained until you withdraw consent or for three years from the date of last marketing interaction, whichever is earlier.

After the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be attributed to an individual. Where anonymisation is not technically feasible — for example, in encrypted backup archives — the data is deleted as soon as those archives are next refreshed.

7. Your Privacy Rights

As a data subject whose personal information is processed by 99db, you have the following rights with respect to your data. To exercise any of these rights, please contact our support team at [email protected] with your request. We will respond within 30 calendar days.

• Right of access: You have the right to request a copy of the personal data that 99db holds about you. We will provide this in a structured, commonly used, machine-readable format where technically feasible.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. For account-level information such as your name or contact details, you may also be able to update certain fields directly through your account settings.
• Right to erasure ("right to be forgotten"): You may request that 99db delete your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been processed unlawfully. Please note that this right is subject to our legal retention obligations — we cannot delete data we are required by law to retain for a specified period.
• Right to restrict processing: In certain circumstances — for example, while the accuracy of your data is being contested — you may request that 99db temporarily suspend certain processing activities relating to your personal data.
• Right to data portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a portable format and to transmit it to another data controller.
• Right to object: You have the right to object to the processing of your personal data where that processing is based on legitimate interests. You also have the right to object at any time to the processing of your personal data for direct marketing purposes.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred before withdrawal.

8. Data Security Measures

99db implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes, but is not limited to, the following measures:

• Encryption in transit: All data transmitted between your browser or device and the 99db platform is encrypted using TLS 1.2 or higher. Our SSL certificate is maintained and renewed continuously to ensure uninterrupted secure communication.
• Encryption at rest: Sensitive personal data stored in 99db's databases — including KYC documents, financial records, and authentication credentials — is encrypted using AES-256 encryption.
• Access controls: Internal access to member personal data is restricted to authorised employees and contractors who require it to perform their specific job functions. Access rights are reviewed regularly and revoked promptly when no longer required.
• Penetration testing: 99db conducts periodic security assessments and penetration tests on its platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Incident response: 99db maintains a documented data breach incident response plan. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify affected members without undue delay and take immediate steps to contain and remediate the breach.
• Staff training: All 99db personnel who handle personal data receive regular training on data protection principles, security best practices, and the requirements of this Privacy Policy.

While 99db takes every reasonable measure to protect your personal data, no internet-based platform can guarantee absolute security. You also have a responsibility to protect your account by keeping your login credentials confidential, using a strong and unique password, and logging out of your account when using a shared device. If you suspect that your account has been compromised, please contact 99db support at [email protected] immediately.

This Privacy Policy was last reviewed and updated on 1 January 2026. For any questions or concerns about how 99db handles your personal data, please contact us at [email protected].