x9999 Privacy Policy — Your Data, Your Rights, Our Responsibilities

1. Who We Are

x9999 ("x9999", "we", "us", "our") operates the online betting and casino platform accessible at x9999.io and through associated applications. x9999 is an internationally licensed offshore betting platform that serves players across Bangladesh and other permitted markets.

For the purposes of this Privacy Policy, x9999 is the data controller responsible for the personal data of registered Players. Questions, requests, or complaints relating to your personal data may be directed to the x9999 Data Protection contact at [email protected], referencing "Privacy Policy" in your subject line.

This Privacy Policy applies to all personal data collected through the x9999 website at x9999.io, any x9999 mobile application, and any direct communications between you and x9999 support staff, including email and live chat. It applies to all current and former x9999 account holders as well as individuals who have initiated but not completed the account registration process.

2. Personal Data We Collect

x9999 collects only the data that is necessary and proportionate to the legitimate purposes described in this Policy. The categories of personal data we collect are set out in the table below.

x9999 does not intentionally collect any Special Categories of personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) unless you voluntarily provide such information in a support communication, in which case it will be used solely to assist with your enquiry and will not be retained beyond the resolution of that enquiry.

3. How We Collect Your Data

3.1 Data You Provide Directly

x9999 collects data that you actively provide when you register for an account, complete KYC verification, make a deposit or withdrawal, contact x9999 support, participate in promotions, or submit any form on the x9999 platform. The accuracy of this data is your responsibility under the x9999 Terms & Conditions.

3.2 Data Collected Automatically

When you visit x9999.io or use the x9999 application, our servers and analytics tools automatically record Technical Data including your IP address, device identifiers, browser configuration, and session activity. This data is collected using server logs, cookies, and similar tracking technologies as described in Section 7 of this Policy.

3.3 Data from Third Parties

x9999 may receive personal data about you from third-party sources in the following circumstances:

• Payment Providers: bKash, Nagad, Rocket, Upay, Visa, and Mastercard may share transaction confirmation data, fraud-flag alerts, and account ownership verification results with x9999 to process your deposits and withdrawals securely.
• Identity Verification Services: x9999 may use third-party KYC and identity verification providers to cross-reference the documents you submit against official databases. These providers return a verification result to x9999 and do not retain your documents on x9999's behalf.
• Fraud Prevention Agencies: x9999 may receive fraud risk signals from specialised third-party agencies that monitor patterns associated with bonus abuse, money laundering, or account takeover attempts across multiple platforms.
• Game Studios: Third-party game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may share session-level game performance data with x9999 for the purposes of settling bets, resolving disputes, and auditing game integrity.

4. How and Why We Use Your Data

x9999 uses personal data only for specific, documented purposes. The table below maps each purpose to the data categories it requires.

x9999 does not use automated decision-making processes that produce legally significant outcomes for Players without human oversight. Fraud-risk scoring is used to flag accounts for human review — it does not automatically close accounts or withhold withdrawals without manual verification by x9999's compliance team.

5. Legal Basis for Processing

x9999 processes your personal data on one or more of the following legal bases depending on the specific purpose of processing:

• Contractual Necessity: Processing your data is necessary to perform the contract between you and x9999 — that is, to operate your account, accept bets, process payments, and deliver the services you have registered to use.
• Legal Obligation: x9999 is required to process certain data to comply with applicable laws and regulations including anti-money-laundering obligations, age-verification requirements, and responses to lawful requests from competent authorities.
• Legitimate Interests: x9999 processes Technical Data and Account & Gaming Data to protect the security and integrity of the platform, prevent fraud and bonus abuse, and improve the quality of our services — provided these interests are not overridden by your rights and interests.
• Consent: Where x9999 sends you promotional emails, SMS messages, or push notifications about offers, new games, or seasonal promotions (such as Eid specials or BPL cricket season campaigns), this processing is based on your explicit consent, which you may withdraw at any time.

6. Data Sharing and Disclosure

x9999 does not sell, rent, or trade your personal data to third parties for their own independent marketing or commercial purposes. x9999 shares your data only in the circumstances described below, and only to the minimum extent necessary for each purpose.

6.1 Service Providers and Data Processors

x9999 engages carefully selected third-party service providers who process your data on x9999's behalf and under x9999's instructions. These include payment processing partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard), KYC and identity verification services, cloud infrastructure providers, fraud-detection agencies, and customer support platforms. All such providers are bound by data processing agreements that prohibit the use of your data for any purpose other than delivering the contracted service to x9999.

6.2 Game Studios

Third-party game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) receive a session token and bet/result data to operate their games within the x9999 platform. These studios do not receive your full identity data or financial data unless required for the settlement of a specific formal game dispute.

6.3 Legal and Regulatory Disclosure

x9999 may disclose your personal data to law enforcement agencies, regulatory bodies, courts, or other competent public authorities where x9999 is required to do so by applicable law, court order, or lawful authority, or where disclosure is necessary to protect the rights, property, or safety of x9999, its Players, or the public.

6.4 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of x9999's assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material changes to this Privacy Policy that result from it before the transfer takes effect.

7. Cookies and Tracking Technologies

x9999 uses cookies and similar client-side tracking technologies on the x9999.io website and application to enable core platform functionality, maintain your authenticated session, remember your preferences, and gather anonymised analytics data. The categories of cookies used by x9999 are described below.

• Strictly Necessary Cookies: Required for the x9999 platform to function. These include session authentication cookies, CSRF-protection tokens, and load-balancing cookies. These cookies cannot be disabled without preventing you from using the platform.
• Functional Cookies: Store your preferences such as language settings, odds format, and responsible gaming tool configurations so that these do not need to be re-entered on each visit.
• Analytics Cookies: Collect aggregated, anonymised data about how Players navigate and interact with the x9999 platform. This data is used by x9999 internally to identify usability issues and improve the platform experience.
• Security Cookies: Used by x9999's fraud-detection systems to identify unusual access patterns, flag suspicious login attempts, and support the detection of automated bot activity.

x9999 does not use third-party advertising cookies or permit advertising networks to set cookies on x9999.io for the purpose of tracking your browsing behaviour across external websites. You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in or placing bets.

8. Data Retention

x9999 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to the retention periods described below.

At the end of the applicable retention period, x9999 will securely delete or anonymise your personal data so that it can no longer be associated with you. Where data is anonymised rather than deleted, the resulting aggregate data may be retained indefinitely for statistical analysis.

9. Data Security

x9999 implements a layered security architecture to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. The security measures employed by x9999 include, but are not limited to, the following:

• TLS 1.3 Encryption in Transit: All data transmitted between your device and x9999 servers is encrypted using Transport Layer Security (TLS) 1.3. The x9999.io domain enforces HTTPS and implements HTTP Strict Transport Security (HSTS) to prevent downgrade attacks.
• Encryption at Rest: Sensitive data fields — including identity document copies, financial account references, and password hashes — are encrypted at rest using industry-standard AES-256 encryption within x9999's database infrastructure.
• Access Controls: Access to Player personal data within x9999's internal systems is restricted to authorised personnel only, on a strict need-to-know basis. All internal data access is logged and audited.
• OTP Two-Factor Authentication: x9999 provides OTP-based two-factor authentication for all Player accounts. x9999 strongly recommends that all Players enable this feature from their account security settings.
• Fraud Monitoring: x9999's automated security systems continuously monitor login patterns, transaction behaviour, and session data for indicators of account compromise, bonus abuse, or money-laundering activity.
• Penetration Testing: x9999 engages independent third-party security specialists to conduct periodic penetration testing of the platform infrastructure to identify and remediate vulnerabilities before they can be exploited.

No digital platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, x9999 will notify affected Players without undue delay and will take all appropriate steps to contain and remediate the breach in accordance with applicable data protection obligations.

10. Your Data Protection Rights

x9999 respects and upholds the following data protection rights for all Players. To exercise any of these rights, contact x9999 at [email protected] with the subject line "Data Rights Request" and your registered account email address. x9999 will respond within 30 calendar days.

• Right of Access: You have the right to request a copy of all personal data x9999 holds about you, together with information about the purposes for which it is processed and the categories of third parties to whom it has been disclosed.
• Right to Rectification: You have the right to request that x9999 correct any personal data that is inaccurate or incomplete. Certain data fields (such as your registered name and date of birth) may require supporting documentation before a correction can be made.
• Right to Erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to x9999's legal retention obligations — for example, transaction records required for anti-money-laundering compliance cannot be deleted on request.
• Right to Restriction: You have the right to request that x9999 restrict the processing of your personal data in certain circumstances, such as while a dispute about the accuracy of your data is being resolved.
• Right to Data Portability: Where processing is based on your consent or a contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to request that it be transmitted to another data controller where technically feasible.
• Right to Object: You have the right to object to x9999's processing of your data based on legitimate interests, including profiling. You also have the right to object to the use of your data for direct marketing purposes at any time by unsubscribing from x9999 communications or contacting [email protected].
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

11. Children's Privacy and the 21+ Rule

x9999 is strictly an adults-only platform. Account registration and all x9999 services are available exclusively to individuals who are 21 years of age or older. x9999 does not knowingly collect personal data from any individual under the age of 21.

As part of the registration process and KYC verification, x9999 requires all Players to confirm their age and to submit government-issued photo identification that verifies they are at least 21 years old. Any account found to have been registered by a person under 21 will be immediately and permanently closed, all balances will be returned to the payment source used for deposit, and all winnings generated from that account will be forfeited.

If you believe that a person under the age of 21 has registered an account with x9999 or has accessed the platform using your credentials, please contact x9999 immediately at [email protected]. x9999 will investigate and take appropriate action without delay.

12. International Data Transfers

x9999 operates as an internationally licensed offshore betting platform. Your personal data may be stored and processed in data centres located outside Bangladesh. Where your data is transferred to countries that do not have data protection laws equivalent to those in your home jurisdiction, x9999 ensures that appropriate safeguards are in place to protect your data, including contractual data protection clauses with all data processors that impose obligations equivalent to those described in this Policy.

Third-party game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi operate server infrastructure in multiple international jurisdictions. Session-level data passed to these studios during gameplay is subject to the respective studio's own data protection practices, which are governed by the data processing agreements in place between x9999 and each studio.

13. Updates to This Privacy Policy

x9999 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, platform features, or third-party service providers. When material changes are made, x9999 will notify active Players by posting a prominent notice on the x9999 platform and updating the "Last Updated" date at the top of this document. For significant changes affecting your rights, x9999 will also send a notification to your registered email address.

Your continued use of the x9999 platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the updated Policy. If you disagree with any changes to this Policy, you should cease using the platform and contact [email protected] to request account closure and data deletion in accordance with the retention periods described in Section 8.

14. Contact and Complaints

For any questions, concerns, or formal requests relating to this Privacy Policy or x9999's handling of your personal data, please contact the x9999 Data Protection team using the details below. x9999 is committed to resolving all privacy-related enquiries promptly and transparently.

If you are not satisfied with x9999's response to your privacy complaint, you have the right to escalate the matter to the relevant data protection authority or regulatory body in your jurisdiction. x9999 will cooperate fully with any such authority in the investigation of a complaint.