xo99 Privacy Policy — Your Data, Your Rights

Introduction

xo99 ("the Platform", "we", "us", "our") operates xo99.vu, an online gaming platform serving players in Bangladesh. We recognise that the personal data you share with us when you register an account, make a deposit, or use our services is important and deserves careful, responsible handling. This Privacy Policy sets out in plain, readable language exactly what data we collect, why we collect it, how we use and store it, who we may share it with, and what rights you have in relation to that data.

This policy applies to all users of the xo99 platform, including visitors who have not yet registered an account, registered players, and former account holders whose accounts have been closed. By using xo99.vu in any capacity, you confirm that you have read and understood this Privacy Policy. If you have questions or concerns about how your data is handled, contact us at [email protected] at any time.

1. What Data We Collect

xo99 collects only the data that is necessary to operate a safe, fair, and legally compliant gaming platform. The categories of personal data we may collect and process are set out below.

2. How We Use Your Data

xo99 uses the personal data it collects for the following specific purposes. We do not use your data for any purpose that is incompatible with those listed here without first obtaining your explicit consent.

• Account creation and management: To register your xo99 account, verify your identity through KYC, and maintain your account profile and preferences throughout the lifetime of your account.
• Payment processing: To process deposits and withdrawals via bKash, Nagad, Rocket, and Upay, to detect and prevent fraudulent transactions, and to maintain accurate transaction records for your account.
• Service delivery and platform operation: To make games, betting markets, promotions, and support services available to you, and to ensure the platform functions correctly on your device.
• Responsible gaming: To monitor gaming activity for signs of problem gambling, to enforce responsible gaming tools including deposit limits and self-exclusion, and to action any responsible gaming requests submitted by you or on your behalf.
• Legal compliance and fraud prevention: To fulfil our obligations under applicable anti-money laundering rules, to verify player ages and identities, and to detect, investigate, and report suspected fraudulent or criminal activity.
• Customer support: To respond to your support queries, complaints, and account-related requests, and to maintain records of those communications for quality assurance and dispute resolution purposes.

xo99 does not use your personal data for targeted advertising to third-party platforms, does not sell your data to data brokers, and does not use your gaming activity data to build profiles for sale to external parties.

3. Legal Basis for Processing

xo99 processes your personal data on one or more of the following legal bases, depending on the specific category of data and the purpose for which it is being processed.

4. How We Share Your Data

xo99 does not sell, rent, or trade your personal data to third parties. We share your data only in the specific circumstances described below, and only to the extent necessary for the stated purpose.

• Payment service providers: We share the minimum necessary financial data with bKash, Nagad, Rocket, and Upay to process your deposits and withdrawals. These providers act as data processors under our instruction and are prohibited from using your payment data for any other purpose.
• Game content providers: Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive session data and game-play data as required to deliver game content and verify RNG outcomes. These providers do not receive your identity or financial data.
• Fraud and security service providers: We may share data with third-party fraud detection and security monitoring services that assist us in identifying suspicious activity, verifying identities, and protecting the platform from abuse. These providers operate under strict data processing agreements.
• Legal and regulatory authorities: We may disclose your personal data to law enforcement agencies, regulators, or courts where we are required to do so by applicable law, a court order, or a legitimate regulatory request. We will notify you of any such disclosure unless we are legally prohibited from doing so.

All third parties with whom xo99 shares personal data are required to handle that data securely, use it only for the specified purpose, and comply with all applicable data protection obligations. xo99 does not transfer personal data to countries or organisations that do not provide an adequate level of data protection.

5. Payment Data and Mobile Wallets

xo99 supports deposits and withdrawals exclusively through Bangladeshi mobile wallet services — bKash, Nagad, Rocket, and Upay. When you initiate a deposit or withdrawal, xo99 receives confirmation of the transaction from your mobile wallet provider along with the amount, timestamp, and wallet number. xo99 does not store your mobile wallet PIN or password at any point — those credentials remain entirely with your wallet provider and are never transmitted to xo99's systems.

Your mobile wallet number is stored as part of your xo99 account record for the purpose of verifying payment method ownership and ensuring that withdrawals are returned to the correct payment instrument. This data is treated with the same level of security as all other financial data and is not accessible to any third party other than the payment service providers listed above.

6. Data Retention

xo99 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, or for as long as required by applicable law. In practice this means: account data and identity verification records are retained for the duration of your account and for a minimum of five years after account closure; financial transaction records are retained for a minimum of seven years from the date of each transaction; gaming activity logs are retained for a minimum of three years; customer support correspondence is retained for a minimum of two years from the date of the last communication.

When data is no longer required and no legal retention obligation applies, xo99 deletes or anonymises it in a secure manner. If you request account closure, xo99 will begin the data deletion process for non-legally-required data within 30 days of receiving your verified closure request.

7. Data Security

xo99 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include SSL/TLS encryption for all data transmitted between your device and xo99.vu, encrypted storage of sensitive personal and financial data at rest, access controls that restrict data access to authorised personnel only, regular security audits and penetration testing of platform systems, and two-factor authentication options for account access.

While xo99 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, xo99 will notify you and any relevant regulatory authorities without undue delay in accordance with applicable law.

8. Cookies and Tracking Technologies

xo99.vu uses cookies and similar tracking technologies to operate the platform correctly and to improve your experience. Cookies are small text files stored on your device when you visit a website. The types of cookies used on xo99.vu are as follows:

• Essential cookies: Required for the platform to function. These include session authentication cookies that keep you logged into your account, CSRF protection cookies, and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
• Preference cookies: Store your platform preferences such as language settings and display options. These help xo99 remember your choices so you do not have to re-enter them each time you visit.
• Analytics cookies: Help us understand how players use the platform so we can improve performance and user experience. Analytics data is aggregated and does not identify individual users.

You can control cookies through your browser settings. Disabling essential cookies will impair your ability to use the platform. Disabling preference or analytics cookies will not prevent you from accessing core platform features. xo99 does not use cookies to serve third-party advertising.

9. Your Rights Over Your Data

As a registered xo99 player, you hold the following rights in relation to the personal data we hold about you. To exercise any of these rights, contact [email protected] with your full name, registered mobile number, and a description of your request. xo99 will respond within 30 days.

10. Children's Privacy

xo99 is strictly an adults-only platform. Persons under the age of 21 are not permitted to register, access, or use any feature of xo99.vu. xo99 does not knowingly collect personal data from anyone under the age of 21. If xo99 becomes aware that it has collected data from a person under 21, that data will be immediately deleted and the associated account permanently closed. If you believe a person under 21 has registered on xo99, please contact [email protected] immediately.

11. Changes to This Privacy Policy

xo99 may update this Privacy Policy from time to time to reflect changes in our data handling practices, legal obligations, or platform features. When we make a material change to this policy, we will update the effective date at the top of this page and, where appropriate, notify registered account holders by email or in-platform notification.

Your continued use of xo99.vu after any update to this Privacy Policy constitutes your acceptance of the updated policy. We recommend bookmarking this page and reviewing it periodically to stay informed of how your data is being handled.

12. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to xo99's handling of your personal data, please contact our support team. We take all privacy-related queries seriously and commit to responding within 30 days.

Email: [email protected] (plain text only — not a clickable link). Our support team is available 24 hours a day, 7 days a week. Response time for privacy-related requests: within 30 days of receiving a verified request.