Privacy Policy — 99kt Casino Bangladesh

1. Information We Collect

99kt collects personal data through several channels: directly from you when you register an account or contact support, automatically through your use of the platform, and from third-party payment providers as part of transaction processing. The categories of data we collect are described below.

Registration and Identity Data

When you create a 99kt player account, we collect the following information:

• Full legal name (as it appears on your government-issued identity document)
• Date of birth (for age verification — 99kt is strictly 18+ only)
• Residential address in Bangladesh
• Email address
• Mobile phone number registered in Bangladesh
• Preferred username and encrypted password

Identity Verification (KYC) Data

Before your first withdrawal is processed, we require you to complete our Know Your Customer (KYC) verification process. During this process we collect:

• A copy of your National Identity Card (NID), passport, or BRTA driving licence
• A selfie or live photo for facial verification against your identity document
• Proof of payment method ownership (for example, a screenshot of your bKash or Nagad account showing your registered name and mobile number)
• Proof of residential address where required (for example, a recent utility bill or bank statement)

Transaction and Financial Data

When you make deposits or request withdrawals, we collect transaction records including the payment method used (bKash, Nagad, Rocket, Upay, or bank transfer), transaction reference numbers, amounts, timestamps, and the mobile number or bank account number associated with each transaction. We do not store full card numbers or mobile banking PINs — payment authorisation is handled entirely by the respective payment provider.

Technical and Usage Data

When you browse and use the 99kt platform, our servers and analytics systems automatically collect certain technical information:

• IP address and approximate geographic location (city level)
• Device type, operating system, and browser version
• Pages visited, features used, session duration, and click-path data
• Game history, wager amounts, win/loss records, and session timestamps
• Referral source (how you arrived at the 99kt platform)

Communications Data

If you contact the 99kt support team via live chat, email, or any other channel, we retain a record of those communications — including the content of your messages and our responses — for quality assurance, dispute resolution, and training purposes. These records are stored securely and are accessible only to authorised support and compliance personnel.

2. How We Use Your Data

99kt processes your personal data only for legitimate, defined purposes. We do not use your data for any purpose that conflicts with the reason it was originally collected, and we do not sell your personal data to third parties for marketing or advertising purposes. The table below summarises our processing activities and the legal basis for each.

Responsible Gaming and Player Protection

99kt uses game history, deposit frequency, session duration data, and loss patterns to identify players who may be exhibiting signs of problem gambling. Where such patterns are identified, our responsible gaming team may reach out to the player with information about self-exclusion tools, deposit limits, and external support resources. This processing is carried out in the genuine interest of player welfare and is not used for any commercial purpose.

Marketing Communications

If you have opted in to receive marketing communications from 99kt, we may use your contact details and game history to send you personalised promotional offers, bonus notifications, and news about upcoming sports events such as BPL matches, T20 World Cup schedules, or seasonal promotions tied to Eid or Pohela Boishakh. You may withdraw your marketing consent at any time through your account settings or by contacting support. Withdrawal of marketing consent does not affect the legality of any processing carried out before the withdrawal.

3. Data Sharing and Disclosure

99kt does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share data only where necessary, with a defined set of trusted partners and only to the extent required for the stated purpose. The categories of third parties with whom we may share your data are set out below.

Payment Service Providers

To process deposits and withdrawals, 99kt shares necessary transaction data with our payment partners including bKash, Nagad, Rocket, Upay, and the banking partners listed in our payment policy (BRAC Bank, City Bank, Islami Bank, Sonali Bank, Dutch-Bangla Bank). The data shared is limited to what is strictly required to execute the transaction and is governed by each provider's own privacy and data security standards.

Game Technology Providers

Games on the 99kt platform are supplied by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers operate their own game servers and may receive technical session data (such as a pseudonymous session token) to authenticate your game session and record round results. These providers do not receive your full name, identity documents, or financial account details.

Identity Verification Partners

To fulfil our KYC obligations, 99kt may use third-party identity verification service providers who process the documents and facial data you submit during the KYC process. All such providers are contractually bound to process your data only for identity verification purposes and to maintain security standards equivalent to or higher than those required by 99kt.

Legal and Regulatory Disclosure

99kt may disclose personal data to law enforcement agencies, regulatory authorities, or other public bodies where required to do so by applicable law, court order, or in connection with the prevention or detection of crime including fraud and money laundering. In such cases, 99kt will disclose the minimum data required to satisfy the legal request and will notify the affected player to the extent permitted by law.

4. Cookies and Tracking Technologies

99kt uses cookies, web beacons, pixel tags, and similar tracking technologies to deliver a functional and consistent experience across your sessions on the platform. This section explains what these technologies are, which types 99kt uses, and how you can manage them.

What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember information about your visit — such as your login status, language preference, or items in a shopping basket — so you do not need to re-enter that information every time you return. Cookies cannot execute code, carry viruses, or access other files on your device.

Types of Cookies Used by 99kt

• Strictly Necessary Cookies: These are essential for the platform to function. They maintain your login session, remember your account security settings, and protect against cross-site request forgery attacks. These cookies cannot be disabled without breaking core platform functionality.
• Functional Cookies: These remember your preferences such as display settings, preferred payment method, and notification preferences, so you do not need to reconfigure them on each visit.
• Analytics Cookies: 99kt uses anonymised analytics data to understand how players navigate the platform, which games are most popular, and where technical issues arise. This data is used solely to improve the platform and is not linked to your personal identity.
• Session Cookies: These are temporary cookies that expire when you close your browser. They are used to maintain the integrity of your gaming session and ensure game round results are correctly attributed to your account.

Managing Your Cookie Preferences

You can control and manage cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies. Please note that blocking strictly necessary cookies will prevent you from logging into your 99kt account and using the platform. Instructions for managing cookies are available in the help documentation of your specific browser (Chrome, Firefox, Safari, Edge, Samsung Internet, or Opera).

5. Data Retention and Storage

99kt retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal obligations. The retention periods applicable to each category of data are summarised below.

Data Storage Location

All personal data collected by 99kt is stored on secure servers. We apply technical and organisational measures to protect stored data from unauthorised access, accidental loss, destruction, or disclosure. Access to stored personal data is restricted to authorised personnel on a strict need-to-know basis, and all access events are logged and reviewed periodically.

Data Deletion

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual. Where data is anonymised rather than deleted, the resulting anonymous data may be retained indefinitely for aggregate statistical analysis. Anonymised data cannot be used to re-identify you.

6. Your Privacy Rights

As a data subject whose personal data is processed by 99kt, you hold a defined set of rights over that data. 99kt is committed to facilitating the exercise of these rights promptly and without unnecessary friction. To submit a privacy rights request, contact our support team via live chat and specify which right you wish to exercise.

Right of Access

You have the right to request a copy of the personal data that 99kt holds about you. Upon receipt of a verified access request, 99kt will provide a structured summary of your data within 30 calendar days. For complex or voluminous requests, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

Right to Rectification

If any personal data that 99kt holds about you is inaccurate or incomplete, you have the right to request that we correct or complete it. Minor corrections — such as updating your contact email or phone number — can be made directly in your account settings. Corrections to identity data (name, date of birth) require re-submission of identity documents for verification.

Right to Erasure

You may request deletion of your personal data where the data is no longer necessary for the purpose for which it was collected, where you have withdrawn consent and no other legal basis applies, or where the data has been processed unlawfully. Please note that 99kt is required by AML regulations to retain certain categories of data (account registration data, KYC documents, and transaction records) for a minimum of five years regardless of account closure or erasure requests. Erasure of these categories is not legally possible during the mandatory retention period.

Right to Restrict Processing

You have the right to request that 99kt restricts the processing of your personal data in certain circumstances — for example, while an inaccuracy is being investigated, or where you have objected to processing based on legitimate interest and a determination is pending.

Right to Object to Marketing

You have an absolute right to object to the use of your personal data for direct marketing purposes at any time. Upon receipt of a valid marketing objection, 99kt will cease all marketing communications to your contact details within five business days. This right can also be exercised directly from within your account's communication preferences settings.

7. Data Security Measures

99kt employs a layered security architecture to protect personal data against unauthorised access, loss, theft, and misuse. Our security programme is reviewed and updated on an ongoing basis to reflect evolving threats and industry best practices.

Technical Safeguards

• 256-bit SSL/TLS Encryption: All data in transit between your device and 99kt's servers is encrypted using 256-bit SSL/TLS. The padlock icon in your browser's address bar confirms that your connection is secure.
• Encrypted Data Storage: Sensitive data fields — including identity document images, payment account identifiers, and KYC facial data — are encrypted at rest using industry-standard AES-256 encryption.
• Access Controls: Access to systems containing personal data is restricted to authorised personnel and is protected by multi-factor authentication. All access events are logged and subject to periodic audit review.
• Penetration Testing: 99kt commissions periodic independent penetration testing of its platform infrastructure to identify and remediate security vulnerabilities before they can be exploited.
• Firewall and Intrusion Detection: Our server infrastructure is protected by enterprise-grade firewall rules and intrusion detection systems that monitor for anomalous access patterns in real time.

Organisational Safeguards

• All 99kt personnel who handle personal data undergo privacy and data security training as part of their onboarding and on an annual refresher basis.
• Data access is granted on a strict least-privilege basis — personnel can only access the categories of data necessary for their specific role.
• Third-party service providers with access to personal data are required to sign data processing agreements confirming their compliance with equivalent security standards.

What to Do if You Suspect a Security Incident

If you believe that your 99kt account has been compromised, or if you notice any suspicious activity in your account — including unexpected logins, balance changes, or unauthorised withdrawal requests — you should contact the 99kt support team immediately via live chat. Change your password and disable your account session from the security settings page while the matter is investigated. 99kt's security team will respond to urgent account compromise reports within two hours during normal operating periods.

8. Updates to This Policy

99kt reserves the right to update, amend, or replace this Privacy Policy at any time in response to changes in applicable law, our business operations, or the data processing technologies we use. When material changes are made to this policy, we will notify registered players by email to their registered address and by displaying a prominent notice on the 99kt platform for a period of at least 14 days following publication.

The effective date displayed at the top of this page indicates when the current version of the Privacy Policy came into force. We encourage all players to review this policy periodically. Your continued use of the 99kt platform after the effective date of any revised policy constitutes your acknowledgement of the changes.

For any questions, concerns, or requests relating to this Privacy Policy or to 99kt's data processing practices, please contact our support team via live chat available 24 hours a day, 7 days a week. We are committed to addressing all privacy-related enquiries fairly, transparently, and within the timeframes set out in this document.