game99 Privacy Policy

This Privacy Policy ("Policy") describes how game99 ("the Platform", "we", "us", "our") collects, processes, stores, and shares personal information relating to players ("you", "your") who access or use the game99 website and associated mobile applications. This Policy applies to all services offered through game99, including sports betting, live cricket wagering, online casino games, and all payment processing activities.

game99 is committed to protecting the privacy and personal data of every player across Bangladesh — from Dhaka and Chittagong to Sylhet, Khulna, Rajshahi, Barisal, Rangpur, and Mymensingh. We process personal data in accordance with applicable data protection principles and maintain robust technical and organisational safeguards to keep your information secure.

If you have any questions about this Policy or how game99 handles your personal data, please contact our support team at [email protected] or via the in-app live chat, available 24 hours a day, seven days a week.

Six commitments that guide every data decision we make at game99.

game99 collects personal data through several channels: directly from you when you register an account or contact support; automatically through your use of the platform; and in some cases from third-party identity verification and payment processing partners. The categories of data we collect include the following.

• Full legal name as it appears on your government-issued identity document
• Date of birth (used to verify you are 21 years of age or older)
• Email address and mobile phone number
• Residential address, including division and district within Bangladesh
• Preferred currency (Bangladeshi Taka / BDT)
• Username and encrypted password hash

• National Identity Card (NID) number and scan or photograph
• Passport or driving licence image where NID is unavailable
• Selfie photograph submitted for liveness verification
• Proof of address documentation (utility bill, bank statement)

• bKash, Nagad, Rocket, or Upay mobile wallet account numbers associated with your profile
• Bank account details where bank transfer is selected as a payment method
• Deposit and withdrawal transaction history, including amounts in BDT and timestamps
• Betting and gaming activity records, including wager amounts, game selections, and results

• IP address and approximate geolocation derived from your network connection
• Device type, operating system version, and browser or app version
• Session timestamps, pages visited, features used, and in-app navigation patterns
• Cookie identifiers and similar tracking technologies (see Section 6 for full cookie details)

• Content of support conversations conducted via live chat, email, or Telegram
• Records of promotional communications sent to you and your interaction with them
• Any feedback, complaints, or dispute records you submit to game99

game99 processes your personal data only where we have a lawful basis for doing so. The primary purposes for which we use your data are set out below, along with the lawful basis applicable to each.

You may withdraw consent for promotional communications at any time by contacting [email protected] or updating your notification preferences inside the game99 app. Withdrawal of consent for marketing will not affect the lawfulness of processing carried out prior to that withdrawal, nor will it affect any processing carried out on a different legal basis.

game99 does not sell your personal data to any third party. We share data only in the limited circumstances described below, and always subject to appropriate safeguards.

To process deposits and withdrawals, game99 shares the minimum necessary financial data with payment processing partners including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, and Visa/Mastercard network processors. These partners receive only the transaction data required to execute a specific payment and are contractually prohibited from using it for any other purpose.

Where third-party identity verification technology is used to complete KYC checks, relevant identity document images and biometric data (such as liveness photographs) are shared with the verification provider under strict data processing agreements. Verification providers are prohibited from retaining your data beyond the period required to complete the verification.

Casino game providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may receive a pseudonymous player identifier and session data necessary to deliver the gaming experience. These providers do not receive your full name, contact details, or financial information.

game99 may disclose personal data to law enforcement agencies, regulatory authorities, or other governmental bodies where required to do so by applicable law, court order, or where we believe in good faith that disclosure is necessary to prevent fraud, money laundering, or other illegal activity.

game99 retains personal data for as long as is necessary to fulfil the purposes outlined in this Policy, or as required by applicable legal and regulatory obligations. The general retention schedules we apply are as follows.

• Active account data (profile, contact details, preferences) is retained for the lifetime of your account plus five years following account closure.
• KYC identity documents are retained for a minimum of five years following account closure to meet anti-money laundering record-keeping requirements.
• Financial transaction records are retained for a minimum of seven years from the date of the transaction.
• Betting and gaming activity records are retained for five years from the date of the activity.
• Support and communications records are retained for three years from the date of the last communication.
• Technical log and session data is retained for twelve months, after which it is anonymised or deleted.
• Marketing consent records are retained for the duration of the marketing relationship and three years following opt-out, as evidence of consent history.

Where retention is required solely to comply with a legal obligation, data is held in a restricted state accessible only to authorised personnel for compliance purposes, and not used for any other processing activity.

game99 respects your rights as a data subject. The following rights are available to all players. To exercise any of these rights, please contact [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 5 business days and provide a full response within 30 days.

• Right of Access: You may request a copy of all personal data game99 holds about you, along with information about how it is being used.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal obligations to retain certain records.
• Right to Restriction: You may request that we restrict processing of your data in certain circumstances, for example while a correction request is being assessed.
• Right to Object: You may object to processing carried out on the basis of legitimate interest, including profiling for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. This does not affect the lawfulness of processing carried out before withdrawal.
• Right to Data Portability: You may request a copy of your data in a structured, machine-readable format where processing is based on consent or contract performance.

The game99 website and mobile application use cookies and similar tracking technologies to provide a functional, personalised, and secure experience. A cookie is a small text file stored on your device by your browser or the app when you visit the platform.

• Strictly Necessary Cookies: Required for core platform functionality including maintaining your login session, remembering your language preference, and enabling secure payment flows. These cannot be disabled.
• Functional Cookies: Used to remember your personalisation choices, such as your preferred odds format or default deposit method, so you do not need to re-enter these settings on each visit.
• Analytics Cookies: Used to understand how players interact with the platform — which pages are visited most, where users drop off, and how navigation can be improved. Data is aggregated and not personally identifiable.
• Security Cookies: Used to detect and prevent fraudulent login attempts, bot activity, and other security threats. These are essential for protecting your account.

game99 implements a comprehensive set of technical and organisational measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure.

• All data in transit between your device and our servers is encrypted using TLS 1.2 or higher with forward secrecy enabled.
• Passwords are stored as salted cryptographic hashes — your plain-text password is never stored or accessible to any member of our team.
• Account access is protected by two-factor authentication (2FA), which we strongly encourage all players to enable.
• Payment transaction data is tokenised — game99 does not store raw mobile wallet account numbers in a retrievable form.
• Our systems undergo regular penetration testing by independent security professionals.
• Internal access to player data is governed by strict role-based access controls. Staff members can only access data relevant to their specific job function.
• In the event of a data security incident that is likely to result in a risk to your rights, game99 will notify affected players without undue delay and take immediate remediation steps.

game99 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, platform services, or applicable legal requirements. When a material change is made to this Policy, we will notify registered players via a prominent notice on the platform or by email to the address associated with your account, at least 14 days before the change takes effect.

The "Last Updated" date at the top of this Policy indicates when the most recent revision was made. We encourage you to review this Policy periodically. Continued use of the game99 platform following the effective date of any revised Policy constitutes your acceptance of the changes.

If you have questions about any change to this Policy, please contact our support team at [email protected] before the effective date of the change. We are happy to explain any update in plain language.