Xx 999 Privacy Policy — Your Data, Our Responsibility
Xx 999 places the highest priority on protecting the personal information of players in Bangladesh. This policy outlines what data we collect, why we collect it, and how we keep it secure. Please read this Privacy Policy carefully before using the platform.
Last Updated: January 2026
Information We Collect
Xx 999 only collects information that is strictly necessary to operate the service. No unnecessary personal data is gathered.
Account Information
During registration, we collect your name, date of birth, mobile number, and email address. National ID or passport details may be required for identity verification. This information is essential to securing your financial transactions.
Device & Browser Information
Your device type, operating system, browser version, and IP address are recorded automatically. This information is used to monitor platform security and resolve technical issues. It also helps optimize the experience for mobile users.
Payment & BDT Information
Partial bKash, Nagad, or bank account details are collected for deposits and withdrawals in Bangladeshi Taka (৳). Full payment card numbers and PINs are never stored on xx 999 servers. All financial data is transmitted through encrypted channels.
Usage Data
Behavioral data is collected, including which games you played, how long your sessions lasted, and which pages you visited. This information is used to improve your experience and show you relevant offers. All such data is analyzed on an anonymized basis.
How We Use Your Information
Collected data is used only for specific, legitimate purposes
Account Management
Your information is used to create, verify, and secure your account. Login security and identity verification processes rely on this data. It is also used to send account-related updates and security notifications.
Financial Transaction Processing
Payment information is used to process BDT deposits and withdrawals securely. Maintaining financial records is mandatory to comply with anti-money laundering regulations. This data also helps detect suspicious transactions and prevent fraud.
Personalized Experience
Relevant promotions and offers are shown based on your gaming preferences and history. Your contact information may be used to notify you of special offers during Bangladesh's cricket season or local events. You can opt out of marketing communications at any time.
Security & Fraud Prevention
Device and login data is analyzed to detect unusual activity. This information is essential for protecting against multiple accounts and bot usage. It also enables us to respond quickly in the event of a security breach.
Service Improvement & Analytics
User behavior data is analyzed to improve platform performance and usability. It helps guide decisions around adding new games or updating payment methods. This data is also used to optimize the experience for mobile users in Bangladesh.
Legal & Regulatory Compliance
Certain data must be retained to comply with applicable laws and regulatory requirements in Bangladesh. Age and identity verification records are maintained to support responsible gaming. Relevant information may also be provided to assist with investigations or legal proceedings.
Data Retention & Security Measures
Xx 999 uses industry-standard security technology to protect your data
Data Retention Policy
Your personal information is stored on secure servers and protected from unauthorized access. All data is retained for as long as your account remains active and may be kept for a defined period after account closure due to legal requirements. Financial transaction records are retained for a minimum of five years in accordance with Bangladesh's financial regulations. Data that is no longer needed is securely deleted after the applicable retention period.
- Data transmission secured with SSL/TLS encryption
- Data stored with AES-256 encryption
- Regular security audits and testing
- Two-factor authentication (2FA) available
Response to Security Breaches
In the event of a data breach, xx 999 will promptly notify affected users. We will communicate transparently about the nature of the incident, its potential impact, and the steps being taken to address it. Our security team monitors systems around the clock, and any suspicious activity triggers an immediate response. Relevant authorities will be informed where required. Users are advised to use strong passwords and enable 2FA to keep their accounts secure.
- Notification within 72 hours of a detected breach
- Compromised Accounts Locked Immediately
- Conduct Independent Security Audits
Sharing Information with Third Parties
Xx 999 never sells your personal data or shares it with advertisers. However, limited data may be shared with trusted third parties to deliver specific services — including payment processors, identity verification providers, and technology service providers. All such third parties operate under strict confidentiality agreements and may only use your data for the specific purpose it was shared.
For legal obligations, information may be disclosed at the direction of a court or regulatory authority. Limited information may be shared with relevant organizations to support responsible gaming. Any third-party data sharing will be clearly stated in this policy.
When Information May Be Shared
-
Payment Processing
For bKash, Nagad, or bank transfers, the relevant payment gateway receives only the data necessary to complete the transaction.
-
Identity Verification
As part of the KYC process, identity document information may be shared with licensed verification agencies.
-
Legal Obligations
Information is disclosed as required to comply with legal orders from Bangladeshi courts or regulatory authorities.
-
Responsible Gaming
Limited information may be shared with organizations that provide support for problem gambling where necessary. To learn more, see our Responsible Gaming Page.
Your Rights & Controls
As an xx 999 user, you have clear rights over your own data
Right to Access Data
You can ask xx 999 at any time what information we hold about you. A data report can be requested through your account settings or via the support team. We are committed to responding to your request within 30 business days.
Right to Correct Your Information
If any stored information about you is incorrect or incomplete, you can request a correction. You can update your name, address, or contact details directly from your account profile. For changes to identity-related information, please contact the support team.
Right to Erasure
Upon an account closure request, all personal data beyond what is legally required will be deleted. Financial and transaction records must be retained for a specified period in accordance with regulatory requirements. Deletion requests may take up to 30 business days to process.
Opt Out of Marketing Communications
You can opt out of promotional emails and SMS from xx 999 at any time — either through the Notifications section in your account settings or via the unsubscribe link at the bottom of any email. Please note that essential account and security notifications will continue to be sent as they are part of our service. Changes to your preferences will take effect within 7 business days.
Policy Changes & Updates
Xx 999 reserves the right to update this Privacy Policy as needed. Users will be notified of significant changes via their registered email or SMS. Continued use of the platform after any changes takes effect will be considered acceptance of the revised policy. Previous versions of the policy are available upon request. The date of the most recent update will always be displayed at the top of the policy.
Need help with data protection?
The xx 999 support team is always available for any questions, requests, or complaints regarding your personal information. Contact our Data Protection Officer — we typically respond within two business days. Email us at: support@xx999-bangla.com