x99 Privacy Policy

x99 collects personal data through several channels: directly from you when you register, deposit, or contact support; automatically through your use of the x99.cam platform; and occasionally from third-party verification partners as part of our KYC and fraud-prevention processes. Below is a detailed account of each category of data we collect.

1.1 Registration & Account Information

When you create an x99 account, we collect the following information: your full legal name as it appears on your government-issued identity document; your date of birth (to verify that you meet the 18+ minimum age requirement); your email address (used for account communications and password resets); your mobile phone number (used for two-factor authentication and account notifications); and your residential address, including city (Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or other Bangladesh locations) and postal code.

1.2 Identity Verification (KYC) Documents

To comply with our anti-money laundering (AML) obligations and age verification requirements, x99 may request copies of the following documents: Bangladesh National Identity Card (NID); valid passport; driver's licence; recent utility bill or bank statement as proof of address; and screenshots or confirmation of bKash, Nagad, or Rocket account registration in your name. These documents are treated as highly sensitive and are subject to the strictest access controls within our systems.

1.3 Financial & Transaction Data

Every deposit and withdrawal transaction on the x99 platform is logged with the following data points: transaction date and time (recorded in Bangladesh Standard Time, UTC+6); transaction amount in BDT; payment method used (bKash, Nagad, Rocket, Upay, bank transfer, Visa, Mastercard); a reference identifier for the transaction; and the account balance before and after the transaction. We do not store full card numbers or full mobile banking PINs — only masked identifiers and last-four digits where applicable.

1.4 Device & Technical Data

When you access x99.cam, our servers automatically record technical information including your IP address; device type (mobile, tablet, desktop); operating system and version; browser type and version; referring URL (the page you visited before arriving at x99.cam); pages viewed and time spent on each page; and error logs generated during your session. This data is collected for security monitoring, fraud detection, and platform performance optimisation purposes.

1.5 Communications Data

If you contact x99 customer support via live chat, email to [email protected], or any other support channel, we retain a record of your communication and our response. This includes the content of your messages, the date and time of the communication, and the resolution outcome. Support records are retained for a period of three years from the date of the most recent interaction.

x99 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. We share personal data only in the limited circumstances described below, and only to the minimum extent necessary for the specified purpose.

Payment Processing Partners

To process your deposits and withdrawals, x99 shares necessary transaction data with payment service providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, and international card networks Visa and Mastercard. The data shared is limited to what is strictly required to complete the transaction — typically your account reference, transaction amount, and the payment identifier you have provided. These partners operate under their own privacy policies and are independently responsible for their data handling practices.

Game Software Providers

x99 hosts games provided by third-party software studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, among others. When you play a game provided by one of these studios, limited technical data (such as a pseudonymous player session identifier, game result data, and bet amounts) is transmitted to the game provider's servers to facilitate real-time game delivery. Personal identification data (your name, address, or payment details) is not shared with game providers.

Identity Verification Services

x99 may use third-party identity verification and KYC service providers to assist in verifying the authenticity of identity documents submitted by players. These providers process your document images and biometric data (where applicable) solely for verification purposes and are contractually prohibited from using your data for any other purpose.

Legal and Regulatory Disclosure

x99 may disclose personal data to law enforcement agencies, financial intelligence units, regulatory bodies, or courts of competent jurisdiction where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of x99, its players, or the public. x99 will, where legally permissible, notify affected players of such disclosures.

Business Transfers

In the event that x99 undergoes a merger, acquisition, restructuring, or sale of all or part of its assets, player data may be transferred to the acquiring entity as part of that transaction. In such circumstances, x99 will notify affected players via the email address on file and ensure that appropriate data protection obligations are imposed on the acquiring entity prior to transfer.

x99 takes the security of your personal data seriously and employs a range of technical and organisational measures to protect it against unauthorised access, loss, destruction, or alteration. No system can guarantee absolute security, but x99 maintains industry-standard protections appropriate to the nature of the data we hold.

Technical Security Measures

• 256-bit SSL/TLS encryption: All data transmitted between your device and x99.cam is encrypted using 256-bit SSL/TLS protocols. Look for the padlock icon in your browser's address bar when visiting x99.cam.
• Data encryption at rest: Sensitive personal data stored on x99 servers — including KYC documents and financial transaction records — is encrypted at rest using AES-256 encryption. Plain-text storage of financial data is strictly prohibited in our systems.
• Access controls: Access to personal data within x99's systems is restricted on a strict need-to-know basis. Staff members are granted access only to the data categories required for their specific role. All access is logged and audited.
• Two-factor authentication (2FA): x99 supports 2FA for player accounts, adding an additional layer of security beyond username and password. Players are strongly encouraged to enable 2FA.
• Penetration testing: x99's platform undergoes regular independent security assessments to identify and remediate potential vulnerabilities before they can be exploited.

Data Retention Periods

x99 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable legal obligations. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual player. Anonymised, aggregated data (from which no individual can be identified) may be retained indefinitely for statistical and research purposes.

The x99 platform integrates with third-party services to deliver its full range of features. While x99 carefully vets its service partners and ensures appropriate data protection agreements are in place, players should be aware that third-party services operate under their own privacy policies. x99 is not responsible for the privacy practices of third-party providers once data leaves x99's own systems.

Game Providers

Games on x99 are supplied by studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you launch a game, a connection is established directly between your device and the game provider's servers. The game provider receives a pseudonymous session token and game interaction data. x99 does not transmit your full name, address, or payment details to game providers.

Payment Service Providers

bKash, Nagad, Rocket, Upay, and the banking partners listed in our payment methods section each operate as independent data controllers for the transaction data that passes through their systems. Their data handling practices are governed by their own terms of service and privacy policies. x99 recommends reviewing the privacy policy of your chosen payment provider to understand how they handle transaction data.

Analytics Services

x99 uses internal analytics tools to monitor platform performance. Where third-party analytics tools are used, they are configured to anonymise IP addresses and avoid collecting personally identifiable information. Analytics data is used solely for the purpose of improving the x99 platform and is never used to build individual player profiles for advertising purposes.

Links to External Sites

x99.cam does not contain links to external websites for commercial purposes. Any reference to third-party service providers (payment partners, game studios) within this Privacy Policy or elsewhere on the x99 platform is for informational purposes only. x99 is not responsible for the content or privacy practices of any external website.