xxx999 Privacy Policy
This policy explains what personal information xxx999 collects from Bangladesh players, why we collect it, how long we keep it, and what rights you have over your own data. Reading it once is worth your time.
Last updated: November 2026
Who Runs This Platform
xxx999 is an online gaming platform serving players in Bangladesh. When this policy says "xxx999", "we", or "our", it refers to the company that operates xxx999.mobi. We act as the data controller for all personal information you provide when you register, deposit, play, or contact support.
If you have any questions about how your data is handled, the fastest route is through our 24/7 live chat available inside your account dashboard.
Data We Gather
xxx999 collects only the information needed to run your account safely and comply with responsible-gaming obligations. Here is a plain-language breakdown:
| Category | Examples | When Collected |
|---|---|---|
| Identity | Full name, date of birth, NID / Passport / Driving Licence number | Registration & KYC verification |
| Contact | Mobile phone number, email address | Registration |
| Financial | bKash / Nagad / Rocket / Upay account numbers, transaction history, deposit & withdrawal amounts | Every transaction |
| Device & Technical | IP address, device type, browser, OS version, session timestamps | Every login & page visit |
| Gaming Activity | Games played, bets placed, win/loss history, session duration | During gameplay |
| Communications | Live chat transcripts, support ticket content | When you contact support |
We do not collect sensitive personal data such as religion, ethnicity, or health information. We also do not buy data lists from third-party marketing companies.
Why We Use Your Data
Every piece of data xxx999 holds serves a specific, documented purpose. We do not use your information for anything that isn't listed here:
- Running your account — processing deposits via bKash or Nagad, paying withdrawals, and keeping your balance correct.
- Identity and age verification — confirming you are at least 18 years old before your first withdrawal, as required by our KYC process.
- Fraud prevention and security — detecting unusual login locations, duplicate accounts, and irregular transaction patterns.
- Responsible gaming — monitoring for signs of problem gambling and applying self-exclusion requests you make.
- Customer support — allowing our 24/7 live chat agents to see your account history so they can help you quickly.
- Service improvement — understanding which games players enjoy so we can improve the lobby and add relevant titles.
- Legal compliance — retaining records as required by financial regulations.
Legal Grounds for Processing
xxx999 processes your personal data under three legal bases, depending on the activity:
- Contract performance — processing payments, maintaining your account, and paying winnings are necessary steps to fulfil the service you signed up for.
- Legal obligation — KYC document checks, anti-money-laundering record-keeping, and age verification are legally required activities.
- Legitimate interest — fraud detection, security monitoring, and service improvement are conducted under our legitimate interest in operating a safe platform, balanced against your privacy rights.
We do not rely on your consent as the legal basis for routine processing. Where consent is relevant (for example, optional marketing messages), you can withdraw it at any time by contacting live chat.
Sharing with Third Parties
xxx999 does not sell your personal data. We share it only where necessary, and only with the following categories of recipient:
- Payment processors — bKash, Nagad, Rocket, and Upay receive transaction data strictly to execute your deposit or withdrawal. They operate under their own privacy frameworks.
- Game providers — PG Soft, Pragmatic Play, Ezugi, CQ9, Sexy Gaming, FA Chai, and Playtech receive a pseudonymous player ID to run the games. They do not receive your name or mobile number.
- Identity verification services — our KYC partner receives your submitted document images to confirm authenticity. Documents are not stored by us beyond the legally required period.
- Fraud and security tools — device fingerprinting and IP-analysis services receive technical session data to flag suspicious activity.
- Legal authorities — if we are required by law or court order to disclose data, we will do so. We will notify you unless prohibited from doing so.
All third-party partners are contractually required to handle your data only for the stated purpose and to maintain appropriate security standards.
Cookies & Tracking
xxx999.mobi uses cookies and similar technologies to keep you logged in, remember your language preference, and understand how players use the site. Here is what we place:
| Type | Purpose | Duration |
|---|---|---|
| Essential | Session authentication, CSRF protection, login state | Session / 30 days |
| Functional | Device type preference, last-visited game category | 90 days |
| Analytics | Page views, navigation paths, error logging (anonymised) | 13 months |
| Security | Bot detection, brute-force login prevention | Session |
You can clear cookies through your mobile browser settings at any time. Clearing essential cookies will log you out of your xxx999 account. We do not use third-party advertising cookies or sell browsing data to ad networks.
How Long We Keep Data
We hold your personal data only as long as it serves a lawful purpose. The table below shows our standard retention periods:
| Data Type | Retention Period | Reason |
|---|---|---|
| Account & identity records | 5 years after account closure | Financial compliance obligations |
| Transaction history | 5 years from each transaction | Anti-money-laundering requirements |
| KYC documents | 5 years after verification | Regulatory record-keeping |
| Live chat transcripts | 2 years | Dispute resolution |
| Device & session logs | 12 months | Security investigation |
Once a retention period expires, data is deleted or irreversibly anonymised. We do not keep data "just in case" beyond these windows.
Your Rights as a Player
Bangladesh players who hold an xxx999 account have the following rights over their personal data. You can exercise any of them by contacting our 24/7 live chat:
- Access — ask for a copy of the personal data we hold about you.
- Correction — ask us to fix inaccurate or incomplete information (for example, a phone number change).
- Erasure — request deletion of your data where there is no ongoing legal obligation to keep it.
- Restriction — ask us to pause processing while a dispute is being resolved.
- Portability — receive your account data in a machine-readable format so you can transfer it elsewhere.
- Objection — object to processing based on our legitimate interest (for example, analytics).
- Withdraw consent — opt out of optional marketing messages at any time, with immediate effect.
Response time: We will acknowledge your request within 48 hours and aim to complete it within 30 days. Complex requests (such as full data exports) may take up to 60 days. We will keep you updated.
Keeping Your Data Secure
xxx999 applies layered technical and operational controls to protect your information:
- Encryption in transit — all connections between your device and xxx999.mobi use TLS 1.2 or higher. The padlock in your browser confirms this is active.
- Encryption at rest — financial records and identity documents are stored with AES-256 encryption on our database servers.
- Access controls — only staff with a documented business need can view your personal data, and all access is logged.
- Two-factor authentication — available for your account to prevent unauthorised logins, even if someone has your password.
- Regular audits — our security team runs periodic vulnerability assessments and penetration tests on the platform.
No system is entirely risk-free. If you notice anything unusual on your xxx999 account — unexpected logins, changed contact details — report it immediately via live chat so we can lock the account and investigate.
Players Under 18
xxx999 is strictly for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has created an account using false information, please contact our live chat immediately. We will close the account, void any transactions, and delete the associated data without delay.
Age is verified during the KYC process before the first withdrawal is released. Players who cannot provide a valid National ID Card, Passport, or Driving Licence showing they are 18 or older will not be able to withdraw funds.
When This Policy Changes
We review this privacy policy periodically and update it when our practices change or regulations require it. When we make a material change — one that meaningfully affects your rights or how we use your data — we will notify active players via a message in the account dashboard at least 14 days before the change takes effect.
Minor updates (fixing typos, clarifying wording without changing substance) take effect immediately on publication. The "last updated" date at the top of this page always reflects the most recent revision. Continuing to use xxx999 after a notified change indicates acceptance of the updated terms.
Get in Touch
If you have a question about this privacy policy, want to exercise a data right, or need to report a concern, the fastest option is our 24/7 live chat available inside your xxx999 account. You can also raise a concern through the support ticket system in your account settings.
We do not publish an email address for data requests because our live chat agents have direct system access and can resolve most requests in a single conversation. For formal written requests, use the in-account support ticket feature and mark the subject as "Data Privacy Request".
18+ · Play Responsibly. If gaming is causing you concern, visit our Responsible Gaming page for self-exclusion tools and support resources.