99aa Privacy Policy – Your Data, Your Rights

Privacy at a Glance

The following highlights summarise how 99aa treats your personal data. This summary does not replace the full policy below, which you should read in full.

1. Who We Are

99aa is an online casino and sports betting platform operating at 99aa.ws. For the purposes of this Privacy Policy, 99aa is the data controller responsible for the personal information collected from users of the platform. This means we determine the purposes and means by which your personal data is processed.

If you have any questions about how 99aa processes your personal data, or if you wish to exercise any of your data rights, please contact our support team at [email protected]. We will respond to all data-related enquiries as promptly as possible and in any case within a reasonable period.

2. Information We Collect

99aa collects personal information in two ways: information that you provide directly when you register and use the platform, and information collected automatically when you access the platform. The categories of information we collect are described below.

Information You Provide Directly

When you register an account, make a deposit or withdrawal, contact support, or interact with any feature of the 99aa platform, you may provide us with the following categories of personal information:

Information Collected Automatically

When you access the 99aa platform, our servers and analytics tools automatically record certain technical information about your session. This includes:

• IP address and approximate geographic location derived from it (country and city level only — 99aa does not collect precise GPS location)
• Device type, operating system, browser type and version, and screen resolution
• Pages visited, time spent on each page, and navigation path through the platform
• Referral URL (the page from which you arrived at 99aa), session timestamps, and login history

3. How We Use Your Information

99aa uses the personal information we collect for the following specific purposes:

• Account creation and management: to create your account, verify your identity and age, and maintain your account in good standing throughout your use of the platform.
• Payment processing: to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment methods, and to maintain accurate transaction records.
• Customer support: to respond to your queries, resolve complaints, and provide technical assistance when you contact us at [email protected].
• Fraud prevention and security: to detect, investigate, and prevent fraudulent activity, money laundering, underage gambling, and other prohibited conduct on the platform.
• Platform improvement: to analyse aggregate, anonymised usage data in order to improve the platform's performance, content, and user experience.
• Marketing communications: to send you promotional offers, bonus notifications, and platform updates, where you have not opted out of receiving such communications.

99aa does not use your personal data for automated decision-making or profiling in any way that produces legal effects or significantly affects you. All significant account decisions (such as account closures or bonus forfeitures) are made by our team following a human review process.

4. Legal Basis for Processing

Where applicable data protection principles require us to identify a legal basis for processing personal data, 99aa relies on the following grounds:

• Contract performance: processing necessary to create and maintain your account, process deposits and withdrawals, and provide the core platform services you have signed up for.
• Legal obligation: processing required to comply with applicable legal and regulatory requirements, including anti-money laundering checks and age verification obligations.
• Legitimate interests: processing for fraud detection, platform security, and aggregate analytics, where our interests in operating a safe and reliable platform do not override your privacy rights.
• Consent: for marketing communications, where we will only send promotional messages if you have not indicated a preference against receiving them. You may withdraw consent at any time.

5. Sharing Your Information

99aa does not sell, rent, or trade your personal data to any third party. We share your information only in the limited circumstances described below.

Payment Processors

To process deposits and withdrawals, 99aa shares the minimum necessary financial data with your chosen payment provider (such as bKash or Nagad). These providers process your data solely to execute the transaction and are bound by their own data protection obligations. 99aa does not retain your full payment credentials; we store only a reference identifier sufficient to process future transactions with the same method.

Technology and Service Providers

99aa uses trusted third-party technology providers to operate certain parts of the platform, including game content providers (such as Pragmatic Play and Evolution Gaming), hosting and infrastructure providers, and analytics tools. These providers are granted access only to the data necessary to perform their specific function and are contractually required to keep that data confidential and to use it for no other purpose.

Legal and Regulatory Disclosure

99aa may disclose your personal data to law enforcement agencies, regulators, or other authorities where we are legally required to do so, or where disclosure is necessary to protect the safety or rights of 99aa, its users, or the public. We will only disclose the minimum information necessary to satisfy the relevant legal requirement.

6. Payment Data and Financial Privacy

99aa handles all financial transactions in Bangladeshi Taka via local payment partners including bKash, Nagad, Rocket, and Upay, as well as international card schemes including Visa and Mastercard, and bank transfers via Dutch-Bangla Bank and City Bank. All payment data transmitted through the 99aa platform is protected by SSL encryption. Card numbers, bKash PIN codes, and Nagad mPIN codes are never visible to or stored by 99aa at any point during a transaction.

Transaction records are retained by 99aa for a minimum period as required to meet financial record-keeping obligations and to resolve any subsequent disputes about the transaction. These records are accessible only by authorised 99aa staff and are not shared with third parties except as described in Section 5 of this policy.

7. Cookies and Tracking Technologies

99aa uses cookies and similar tracking technologies to operate the platform, remember your session, and understand how users navigate the site. A cookie is a small text file placed on your device by a website you visit. Cookies do not contain executable code and cannot access other files on your device.

Types of Cookies We Use

99aa uses three categories of cookies on the platform:

• Essential cookies: required for the platform to function. These include session cookies that keep you logged in during your visit, security cookies that help prevent cross-site request forgery, and cookies that remember your language preference. Essential cookies cannot be disabled without breaking core platform functionality.
• Analytics cookies: used to collect anonymised data about how visitors use the platform, such as which pages are most visited and how long users spend on each section. This data is aggregated and cannot be used to identify you individually.
• Preference cookies: used to remember choices you make on the platform, such as your selected language version. These improve your experience by making the platform behave according to your preferences on return visits.

You may disable non-essential cookies by adjusting your browser settings. Please note that disabling analytics or preference cookies will not prevent you from using the platform but may affect certain aspects of your experience. Disabling essential cookies will prevent the platform from functioning correctly.

8. Data Security

99aa takes the security of your personal data seriously and implements appropriate technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction. These measures include SSL encryption across all platform pages and transactions, restricted access controls so that personal data is accessible only to authorised staff who need it to perform their duties, regular security reviews of our systems and infrastructure, and secure storage of all account credentials using industry-standard hashing techniques.

While 99aa applies all reasonable security precautions, no internet-based platform can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, 99aa will notify affected users as promptly as possible and take immediate remedial action. You can help protect your account by using a strong, unique password and by contacting us immediately if you suspect unauthorised access.

9. Data Retention

99aa retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal obligations. The following general retention periods apply: account data and transaction records are retained for the duration of your account and for a minimum period after account closure to meet financial record-keeping and dispute resolution obligations; support correspondence is retained for a period sufficient to resolve the relevant issue and for a reasonable period thereafter; anonymised analytics data has no set retention limit as it cannot be linked to any individual.

When personal data is no longer required, 99aa deletes or anonymises it in a secure manner. If you close your account, we will retain only the minimum data required to comply with legal obligations and to defend against any claims that may arise in connection with your use of the platform.

10. Your Rights Regarding Your Personal Data

You have the following rights in relation to the personal data that 99aa holds about you. To exercise any of these rights, please contact us at [email protected] with a clear description of your request. We will respond within a reasonable period and will not charge a fee for handling a rights request in ordinary circumstances.

• Right of access: you may request a copy of all personal data that 99aa holds about you, along with information about how it is being used and with whom it has been shared.
• Right to rectification: if any personal data we hold about you is inaccurate or incomplete, you may ask us to correct or update it.
• Right to erasure: you may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to any legal retention obligations that prevent immediate deletion.
• Right to restriction: you may ask us to pause the processing of your personal data in certain circumstances, for example where you contest its accuracy or where you have objected to processing based on legitimate interests.
• Right to data portability: you may request that we provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
• Right to object: you may object to processing based on legitimate interests or for direct marketing purposes. Where you object to direct marketing, we will stop processing your data for that purpose immediately.

To exercise any of these rights, write to us at [email protected] clearly stating your name, your registered mobile number, and the specific right you wish to exercise. We may need to verify your identity before processing your request to protect against unauthorised access to your data.

11. Marketing Communications

From time to time, 99aa may send you promotional messages about bonus offers, new games, seasonal promotions tied to events such as Eid, Pohela Boishakh, the BPL, and IPL cricket seasons, and other platform updates. These communications may be sent via SMS to your registered Bangladeshi mobile number. We will only send marketing communications where you have not previously opted out of receiving them.

You may opt out of marketing communications at any time by contacting us at [email protected] and requesting removal from our marketing list. Opting out of marketing does not affect transactional communications such as deposit confirmations, withdrawal notifications, or important account security alerts, which we will continue to send as they are necessary for the provision of the service.

12. Minors and Age Restrictions

99aa is strictly for users aged 21 and above. We do not knowingly collect personal data from anyone under the age of 21. If we become aware that personal data has been submitted by a person under 21 years of age, we will delete that data and close the associated account without delay. If you believe that a minor has registered on 99aa, please notify us immediately at [email protected].

13. Changes to This Privacy Policy

99aa reserves the right to update or amend this Privacy Policy at any time. When we make a material change to this policy, we will update the "Last updated" date at the top of this page and, where appropriate, notify active users via the platform or by SMS. Your continued use of 99aa following the publication of any revised Privacy Policy constitutes your acceptance of the updated terms. The current version of this policy is always available at 99aa.ws/privacy-policy.

14. Contact and Data Enquiries

For all privacy-related questions, data rights requests, or concerns about how 99aa handles your personal information, please contact our support team at [email protected]. We aim to acknowledge all privacy enquiries within 2 business days and to resolve them fully within a reasonable period.