99bk Privacy Policy

99bk collects personal data from you directly when you register an account, make a deposit, place a wager, contact support, or interact with the platform in any way. We also collect certain data automatically through your use of the website and mobile interface. The categories of data we collect are described in the table below.

We do not intentionally collect data from individuals under the age of 18. If we become aware that we have inadvertently collected personal data from a minor, we will delete that data immediately and close the associated account without further notice. 18+

Data You Provide Voluntarily

In addition to the mandatory data required to open and maintain an account, you may voluntarily provide additional information — for example, your city of residence in Bangladesh (Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar), your preferred language settings, or your response to optional surveys. This data is stored alongside your account profile and is used solely to personalise your experience.

Data From Third-Party Payment Providers

When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank, or City Bank, those providers may share limited transaction confirmation data with us — including a tokenised reference, the transaction amount in BDT, and a status indicator (success/failure). We do not receive your full PIN, full card number, or mobile banking password from any payment provider. Each provider operates under its own privacy policy, which we encourage you to review.

99bk does not sell your personal data to any third party. We share your data only in the limited circumstances described below, and only to the minimum extent necessary to fulfil each stated purpose.

Game Technology Providers

To deliver our casino and sports betting products, 99bk works with licensed game studios and technology providers including Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, Spribe, and Hacksaw Gaming. These providers may receive limited session data (such as a pseudonymous player ID and stake amounts) to operate their game software. They do not receive your full name, NID, or financial account details. All third-party providers are bound by data processing agreements that restrict their use of your data to the provision of services to 99bk only.

Payment Processing Partners

To process deposits and withdrawals, 99bk shares necessary transaction data with bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank, and City Bank. Data shared is limited to what is required to initiate, verify, and complete the financial transaction. Each payment partner operates under its own privacy and data security framework, and 99bk is not responsible for how those partners handle data once a transaction is completed on their own infrastructure.

Identity Verification Services

Where 99bk uses a third-party Know Your Customer (KYC) service provider to assist with identity document verification, your submitted identity documents and photograph may be processed by that provider on 99bk's behalf. Such providers act as data processors under a formal data processing agreement and are prohibited from using your data for any purpose other than the verification task.

Legal & Regulatory Disclosure

99bk may disclose your personal data to law enforcement agencies, regulatory bodies, courts, or other government authorities if required to do so by applicable law, court order, or regulatory directive. 99bk will notify you of any such disclosure unless prohibited from doing so by law. Where AML obligations require us to file a suspicious activity report, we are legally prohibited from informing you that such a report has been made.

Corporate Transactions

In the event that 99bk undergoes a business merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified in advance of any such transfer and the acquiring entity will be required to honour this Privacy Policy or provide you with a materially equivalent level of protection.

99bk takes the security of your personal data seriously. We maintain a comprehensive set of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, alteration, or disclosure. These measures include but are not limited to:

• Transport Encryption: All data in transit between your device and 99bk's servers is encrypted using TLS 1.2 or higher (256-bit SSL). Our domain enforces HTTPS at all times and uses HTTP Strict Transport Security (HSTS) headers to prevent downgrade attacks.
• Data at Rest Encryption: Personal data stored in 99bk's databases is encrypted at rest using AES-256. Database backups are also encrypted and stored in geographically separate, access-controlled environments.
• Password Security: Account passwords are hashed using bcrypt with a per-user salt before storage. 99bk never stores passwords in plain text or reversibly encrypted form. Our staff cannot retrieve your password — only a reset is possible.
• Two-Factor Authentication: SMS OTP verification is triggered on login from an unrecognised device or IP address. We strongly recommend players use a SIM card registered in their own name to ensure OTP security.
• Access Controls: Access to personal data within 99bk's internal systems is restricted to staff who require it for their specific role. All internal access is logged and subject to regular review. Staff with data access are trained in data protection practices and bound by confidentiality obligations.
• Penetration Testing & Vulnerability Management: 99bk conducts regular security assessments of its platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the event of a confirmed personal data breach that poses a material risk to affected individuals, 99bk will notify affected users via their registered email address within a reasonable timeframe and will take immediate steps to contain and remediate the breach.

Data Storage Location

99bk stores player data on secure servers. While specific server locations are not disclosed for security reasons, all data processing and storage arrangements comply with applicable data protection standards. Where data is processed by third-party service providers located in other jurisdictions, appropriate contractual safeguards — such as data processing agreements with equivalent security requirements — are in place to ensure your data remains protected regardless of where it is physically processed.

99bk retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The retention periods below represent our standard policy. Individual retention periods may be extended where required by ongoing legal proceedings, regulatory investigations, or unresolved disputes.

Once a retention period has expired and there is no longer a legal or legitimate basis for continued storage, 99bk will securely delete or anonymise the relevant personal data. Anonymised data — from which no individual can be identified — may be retained indefinitely for aggregate statistical analysis and platform improvement purposes.

If you close your account voluntarily, you will receive a confirmation email. Your data will be retained for the applicable periods above before being scheduled for deletion. You may request confirmation of deletion by emailing [email protected] after the applicable retention period has passed.