99exch Privacy Policy
Your privacy matters to us. This policy explains exactly what personal data 99exch collects, why we collect it, how we use it, and the rights you hold over your information as a registered player on our platform.
This Privacy Policy ("Policy") describes how 99exch ("the Platform", "we", "us", "our") collects, stores, uses, and protects the personal information of individuals who register for and use the services available at https://99exch.im ("the Site"). This Policy applies to all players, visitors, and registered account holders regardless of the device or location from which they access the Platform.
By creating an account with 99exch, you acknowledge that you have read and understood this Policy and that you consent to the collection and use of your personal data as described herein. This Policy forms part of the overall agreement between you and 99exch, alongside the Terms and Conditions and Responsible Gaming guidelines. If you do not agree with any aspect of this Policy, you should not create an account or use the Platform.
We treat your data with the same level of care that we apply to the security of your account and funds. This Policy is written in plain English so that every player — whether in Dhaka, Chittagong, Sylhet, or Rangpur — can understand exactly how their information is handled.
These cards summarise our most important privacy commitments. The full legal detail follows in the clauses below.
We Collect Only What We Need
99exch collects only the personal data that is strictly necessary to operate your account, process your transactions, verify your identity, and comply with applicable anti-fraud measures. We do not collect data speculatively or for purposes beyond what is disclosed in this Policy.
SSL Encryption on Every Page
Every page on the 99exch Platform is served over HTTPS with full SSL/TLS encryption. Data transmitted between your device and our servers — including login credentials, payment details, and personal information — is encrypted in transit so it cannot be intercepted by third parties.
No Sale of Personal Data
99exch does not sell, rent, or trade your personal information to any third party for marketing, advertising, or commercial purposes. Where data is shared with third parties — for example payment processors like bKash and Nagad — it is shared only to the extent necessary to complete the specific transaction or service.
Transparency About Data Use
Every category of data we collect is matched to a specific, disclosed purpose in this Policy. We do not repurpose your data for undisclosed uses. If the purpose for which we need to process your data changes materially, we will notify you and, where required, seek fresh consent before proceeding.
Your Rights Over Your Data
Registered players may request a copy of the personal data 99exch holds about them, request corrections to inaccurate data, or request deletion of their account and associated data, subject to legal retention requirements. Requests can be submitted by contacting our support team at [email protected].
Data Retention and Deletion
99exch retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. When an account is closed and the mandatory retention period has elapsed, personal data is securely deleted or anonymised so it can no longer be attributed to an individual.
The following table summarises the categories of personal data that 99exch may collect from you, together with the context in which each category is gathered.
We do not knowingly collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, biometric data (beyond what is necessary for identity verification), or health data, unless you voluntarily provide such information in the context of a responsible gaming self-assessment.
99exch processes your personal data only where we have a lawful basis for doing so. The primary purposes for which your data is used are set out below.
1. Account Creation and Administration
Your identity and contact data are used to create and maintain your player account, authenticate your logins, manage your account settings, and communicate essential account-related information such as password reset confirmations, deposit confirmations, and withdrawal notifications.
2. Identity Verification and Age Confirmation
As a platform restricted to players aged 21 and above, 99exch is required to verify the age and identity of all registered players. Your identity documents are processed for this purpose and may be reviewed by authorised personnel. Documents submitted for verification are stored securely and are not shared beyond what is necessary for compliance purposes.
3. Processing Deposits and Withdrawals
Your financial data is shared with payment processors — including bKash, Nagad, Rocket, and partner banks — solely to the extent necessary to execute the specific transaction you have requested. We do not store full mobile banking PIN codes or bank account passwords. All financial data in transit is encrypted via SSL.
4. Fraud Prevention and Security
Technical data, transaction data, and usage data are analysed to detect and prevent fraudulent activity, bonus abuse, money laundering, multiple-account registrations, and other conduct that violates our Terms and Conditions. This processing is in the legitimate interests of 99exch and all honest players who use the Platform.
5. Customer Support
Communications data — including support tickets and email exchanges — is retained so that our support team can provide consistent, informed assistance. Records of previous support interactions help us resolve recurring issues more efficiently and maintain quality standards.
6. Responsible Gaming Monitoring
Transaction and usage data are analysed to identify patterns that may indicate problematic gambling behaviour. Where such patterns are detected, 99exch may proactively contact the player with information about responsible gaming tools, including deposit limits and self-exclusion options. This processing is carried out in the player's best interests and in accordance with our responsible gaming obligations.
7. Platform Improvement and Analytics
Anonymised and aggregated usage data is used to understand how players interact with the Platform, identify technical issues, improve navigation and game discovery, and optimise page performance. This analytics processing does not identify individual players and uses aggregated statistical data only.
8. Legal and Regulatory Compliance
In certain circumstances, 99exch may be required to disclose personal data to law enforcement agencies, regulatory bodies, or other authorised organisations in response to a valid legal request. Such disclosures are made only to the minimum extent required by law, and we will notify you of any such requirement where we are legally permitted to do so.
99exch does not sell personal data. We share personal data with third parties only in the following limited circumstances:
Payment Service Providers
To process deposits and withdrawals, we share the minimum necessary financial data with your chosen payment provider — bKash, Nagad, Rocket, or a supported bank. These providers operate under their own privacy policies and are bound by their own data protection obligations. 99exch does not control how payment providers process data once it is transmitted to them for the purpose of completing a transaction.
Identity Verification Services
To fulfil our age-verification obligations, we may use a third-party identity verification service to cross-check the documents you submit during registration. These services process your identity data solely for verification purposes and are contractually bound to handle your data securely and not to repurpose it.
Technology and Infrastructure Partners
Our Platform is hosted on secure cloud infrastructure provided by reputable third-party hosting companies. These partners have access to server-level data only in their capacity as data processors and are contractually prohibited from accessing, using, or disclosing player data for any purpose other than providing the hosting service to 99exch.
Legal and Regulatory Authorities
Where required by a valid court order, statutory obligation, or request from a lawfully authorised authority, 99exch may disclose personal data to the relevant body. We will comply with such requests to the minimum extent necessary and will seek legal advice before making any disclosure where the lawfulness of the request is unclear.
99exch retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any applicable legal retention requirements. The following general retention periods apply:
Active Account Data
Identity, contact, financial, and transaction data is retained for the duration of your active account plus a minimum of five years following account closure. This retention period reflects our obligations to maintain records for anti-fraud and financial compliance purposes.
Communications and Support Records
Support ticket records and email correspondence are retained for a minimum of three years from the date of the last interaction in each support thread. This allows us to provide consistent service and refer back to previous interactions if a dispute arises.
Technical and Usage Data
Log files, IP addresses, and session data are retained for a maximum of 12 months from the date of collection, after which they are deleted or anonymised. Aggregated, non-identifiable analytics data may be retained indefinitely for statistical purposes.
Closed and Self-Excluded Accounts
Where a player requests account closure or self-exclusion, their personal data is retained for the legally required period following closure, after which it is securely deleted or anonymised. During the retention period, the data is stored in a restricted-access archive and is not used for any active processing purpose.
As a registered player on the 99exch Platform, you hold the following rights in relation to your personal data. To exercise any of these rights, contact our support team at [email protected] with your account username and a description of your request.
Right of Access
You may request a copy of all personal data that 99exch holds about you. We will respond to verified access requests within 30 calendar days. In cases of complex or high-volume requests, this period may be extended by a further 30 days with prior notification.
Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected. You may also update certain information — such as your email address or phone number — directly through your account settings panel.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent on which the processing was based. This right is subject to legal retention requirements; certain data must be retained for a defined period even after account closure.
Right to Restriction of Processing
In certain circumstances — for example where you contest the accuracy of data we hold — you may request that we restrict further processing of your data while the matter is under review.
Right to Object
You may object to the processing of your personal data where we rely on legitimate interests as the lawful basis for processing. We will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
99exch employs a layered security architecture to protect your personal and financial data. Our security measures include, but are not limited to:
Encryption in Transit and at Rest
All data transmitted between your device and our servers is encrypted using industry-standard TLS (Transport Layer Security) protocols. Sensitive data stored on our servers — including identity documents and financial records — is encrypted at rest using AES-256 encryption.
Access Controls
Access to personal data within 99exch is restricted on a strict need-to-know basis. Only authorised personnel whose roles require access to specific data categories are permitted to view or process that data. All internal access is logged and subject to regular review.
Account Authentication
Player accounts are protected by password authentication. We strongly recommend that all players use a strong, unique password for their 99exch account and avoid reusing passwords from other services. If you suspect that your account has been accessed without your authorisation, contact support immediately.
Incident Response
In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, 99exch will take immediate steps to contain the breach, assess its scope, and notify affected players without undue delay. Notifications will be sent to the email address registered on the affected account.
99exch reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. When material changes are made, we will notify registered players by email and display a prominent notice on the Platform for a minimum of 14 days following the update.
The date of the most recent update is displayed at the top of this page. Continued use of the Platform after the effective date of a revised Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you should close your account before the effective date of the change.
With a clear understanding of how 99exch handles your personal data, you can focus on what matters — great cricket betting, exciting slots, and a world-class live casino experience, all available in a secure English-language environment built for players across Bangladesh.
Log In to 99exch Explore 99exch Casino Responsible Gaming Terms & Conditions