xd99 Privacy Policy — Your Data, Your Rights

This Privacy Policy ("Policy") describes how xd99 ("we", "us", "our") collects, uses, stores, and protects personal information provided by users ("you", "Player") of the xd99 platform at xd99.bio. By registering an account or using any part of the xd99 service, you acknowledge that you have read this Policy and consent to the practices described herein.

We may update this Policy from time to time to reflect changes in our practices or applicable regulations. When material changes occur, we will post the updated Policy on this page with a revised effective date. Your continued use of xd99 after any such update constitutes your acceptance of the revised Policy. If you disagree with any part of this Policy, please discontinue use of the platform and contact support to close your account.

Our Privacy Commitments at a Glance

1. Information We Collect

xd99 collects two categories of information: information you provide directly when using the platform, and information collected automatically as you interact with our services.

Information You Provide Directly

• Registration data: your mobile phone number, chosen username, and date of birth (used to verify the 21+ age requirement)
• Identity verification documents (KYC): government-issued photo ID and proof of payment method ownership, requested when required by our verification process
• Payment information: mobile wallet identifiers (e.g. bKash or Nagad account numbers) and card details sufficient to process transactions — full card numbers are never stored on xd99 servers
• Communications: messages you send to xd99 support, feedback forms, or any other written correspondence with our team

Information Collected Automatically

• Device and browser data: IP address, device type, operating system, browser type and version, and screen resolution — used to optimise the xd99 interface for your device
• Usage data: pages visited, games played, bets placed, session duration, and navigation patterns — used to improve the platform and personalise your experience
• Cookie data: session tokens and preference cookies — see the Cookies section below for full details

2. How We Use Your Information

xd99 uses your personal information only for legitimate operational purposes directly related to providing the platform and ensuring a safe, fair gaming environment. The specific purposes are:

• Account creation, verification, and management — registering your xd99 account, verifying your age and identity, and maintaining your account in good standing
• Transaction processing — handling deposits via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and processing withdrawal requests to your registered payment method
• Platform personalisation — remembering your game preferences, language settings, and display options so each login picks up where you left off
• Fraud prevention and security — detecting and preventing fraudulent activity, money laundering, chargebacks, and account takeover attempts
• Responsible gaming compliance — monitoring play patterns to identify potential signs of problem gambling and providing access to self-exclusion and limit tools
• Customer support — responding to your enquiries, resolving disputes, and processing requests related to your account or transactions

3. Sharing Your Information

xd99 does not sell, rent, or trade your personal data. We share information only in the following limited and specific circumstances:

• Payment processors: we share the minimum necessary payment data with licensed payment service providers (including bKash, Nagad, Rocket, Upay, and card networks) solely to process your transactions. These providers are contractually bound to use the data only for that purpose.
• Game content providers: game studios such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi receive only the session token and stake data required to operate their games on the xd99 platform. They do not receive your personal registration details.
• Legal and regulatory obligations: we may disclose your information to law enforcement agencies, regulatory bodies, or courts when required by applicable law, a valid legal order, or when necessary to prevent fraud or protect the rights of xd99 or other players.
• Business transfers: in the event of a merger, acquisition, or sale of all or part of xd99's business, your data may be transferred to the successor entity. You will be notified in advance of any such transfer and will retain the right to request deletion of your data.

Under no circumstances does xd99 share your personal data with advertisers, data brokers, or any third party for commercial marketing purposes.

4. Payment Data and Financial Security

xd99 takes the security of financial data very seriously. When you make a deposit or request a withdrawal — whether via bKash, Nagad, Rocket, Upay, Visa, or Mastercard — the transaction is handled through encrypted channels and the raw financial credentials (such as full card numbers or mobile banking PINs) are never transmitted to or stored on xd99 servers. Payment processing is handled by licensed payment gateways that comply with relevant financial security standards.

Transaction records (amounts, dates, and payment method identifiers) are retained for accounting, fraud prevention, and regulatory purposes. These records are stored in encrypted databases accessible only to authorised xd99 personnel on a need-to-know basis.

5. Cookies and Tracking Technologies

xd99 uses cookies and similar local storage technologies to ensure the platform functions correctly, remember your preferences, and help us understand how players use the site. We use three categories of cookies:

• Essential cookies: required for the platform to function — these enable you to log in, maintain your session, and use the cashier. Disabling essential cookies will prevent xd99 from working correctly.
• Preference cookies: store your language selection, game view settings, and other display preferences so your experience is consistent across sessions
• Analytics cookies: collect anonymised, aggregated usage data (pages visited, features used, error rates) to help us identify issues and improve the platform — no personally identifiable information is included in analytics data

You can manage or clear cookies through your mobile browser settings. Note that clearing essential cookies will log you out of your xd99 account and may affect platform functionality until a new session is established.

6. Data Retention

xd99 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including legal, accounting, and regulatory obligations. The key retention periods are: account data is kept for the duration of your active account plus five years following closure; transaction records are retained for seven years from the date of each transaction; KYC documents are retained for five years from the date of verification or account closure, whichever is later; support correspondence is retained for three years from the date of resolution.

When your data is no longer required, it is securely deleted or anonymised in accordance with our internal data destruction procedures. You may request early deletion of non-essential data by contacting support — see your rights in section 7 below.

7. Your Rights Over Your Personal Data

As a user of xd99, you have the following rights with respect to the personal data we hold about you. To exercise any of these rights, contact us at [email protected] from the email address or mobile number associated with your account:

• Right of access: you may request a copy of the personal data xd99 holds about you, including account details, transaction history, and KYC records
• Right of rectification: if any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected
• Right of erasure: you may request deletion of personal data that is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations
• Right to withdraw consent: where we process your data based on consent (such as marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing

xd99 will respond to all data rights requests within 30 days of receipt. In cases where a request is particularly complex or we have received a high volume of requests, we may extend this period by a further 30 days and will notify you accordingly.

8. Security Measures

xd99 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include SSL/TLS encryption on all data in transit, encrypted storage for sensitive account data, access controls limiting data access to authorised personnel on a strict need-to-know basis, regular security reviews of platform infrastructure, and monitoring for unusual account activity patterns.

While we take all reasonable steps to protect your data, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, xd99 will notify affected players without undue delay and will take all necessary steps to contain and remediate the breach.

9. Changes to This Privacy Policy

xd99 may update this Privacy Policy from time to time. When material changes are made, we will post the revised Policy on this page with an updated effective date and, where appropriate, notify registered players directly. Your continued use of the xd99 platform after any changes constitutes your acceptance of the updated Policy. We encourage you to review this page periodically to stay informed about how xd99 protects your data.

10. Contact xd99 About Privacy

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to report a privacy concern, please contact the xd99 support team. We aim to respond to all privacy-related enquiries within 30 days. Our team is available 24/7 and serves players across Bangladesh — from Dhaka and Chittagong to Sylhet, Khulna, Rajshahi, Rangpur, Mymensingh, and Barisal.

Privacy contact email: [email protected]