9a99 Privacy Policy — Your Data, Your Rights
At 9a99, the privacy and security of every player's personal information is treated as a core responsibility — not an afterthought. This Privacy Policy explains exactly what data we collect, why we collect it, how we use it, and what rights you hold as a 9a99 player based in Bangladesh.
How 9a99 Approaches Your Privacy
These six principles guide every decision 9a99 makes about the collection, storage, and use of personal data. They summarise the full policy — please read all sections below for the complete legal text.
Purpose-Limited Collection
9a99 collects only the personal data that is strictly necessary to deliver our services, process payments, verify identity, and comply with legal obligations. We do not collect data speculatively or for undefined future use cases.
Secure Storage & Transmission
All personal data stored by 9a99 is protected using AES-256 encryption at rest and 256-bit SSL/TLS encryption in transit. Our infrastructure is monitored around the clock and undergoes regular independent security assessments.
No Sale of Personal Data
9a99 does not sell, rent, or trade your personal data to third parties for marketing or commercial purposes. Data sharing with service providers is strictly limited to what is required to deliver the platform's services to you.
Transparency & Clarity
We explain in plain English exactly what data we collect and why. There are no hidden data practices at 9a99. This Privacy Policy is written to be understood by real people, not just lawyers, while still meeting formal legal standards.
Player Rights & Control
You have meaningful rights over your personal data held by 9a99, including the right to access, correct, restrict, and in certain circumstances request erasure of your data. These rights are described in full in Section 9 of this policy.
Defined Retention Periods
9a99 does not hold your personal data indefinitely. We maintain clearly defined retention schedules for each data category and securely delete or anonymise data once its retention period has expired and no legal obligation requires further storage.
This Privacy Policy ("Policy") describes how 9a99 ("we", "us", "our") collects, uses, stores, and protects the personal data of players and visitors ("you", "your") who access the 9a99 platform at https://9a99.io. By registering an account or using the platform, you acknowledge that you have read and understood this Policy. This Policy forms part of 9a99's Terms & Conditions.
1 Introduction
1.1 9a99 is an online sports betting and casino platform serving players in Bangladesh. In providing our services — including cricket betting, live casino games, slot games, and payment processing — we necessarily collect and process certain categories of personal data.
1.2 We are committed to handling all personal data responsibly, transparently, and securely. This Policy explains in plain English every aspect of our data practices so that you can make informed decisions about your use of the 9a99 platform.
1.3 This Policy applies to all personal data collected through the 9a99 website, mobile-optimised browser interface, any associated mobile applications, and all communications between 9a99 and its players (including email, live chat, and support ticket systems).
1.4 If you have any questions about this Policy or about how 9a99 handles your personal data, please contact our support team via the live chat function on the platform. Contact details are also provided in Section 13 of this Policy.
2 Data We Collect
2.1 9a99 collects personal data across several categories depending on the nature of your interaction with the platform. The table below summarises the key data categories and the specific data types within each category:
| Data Category | Specific Data Types | Mandatory? |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government-issued ID number | Yes — required for account verification |
| Contact Data | Email address, mobile phone number, city/district of residence (e.g., Dhaka, Chittagong, Sylhet) | Yes — required for account creation |
| Financial Data | bKash/Nagad/Rocket mobile wallet numbers, bank account details (if applicable), transaction history, deposit and withdrawal amounts in BDT | Yes — required for payment processing |
| Verification Documents | Scanned or photographed copies of national ID (NID), passport, or driving licence; proof of payment method ownership | Required when verification is triggered |
| Technical Data | IP address, device type, operating system, browser type and version, screen resolution, time zone setting | Collected automatically |
| Usage Data | Pages visited, games played, bets placed, session duration, click-path data, feature interactions | Collected automatically |
| Communications Data | Records of live chat conversations, support ticket content, email correspondence with 9a99 | Collected when you contact us |
| Marketing Preferences | Opt-in/opt-out status for promotional communications, preferred contact channel, bonus claim history | Optional |
2.2 We do not collect or process special categories of sensitive personal data (such as data revealing racial or ethnic origin, political opinions, religious beliefs, genetic data, biometric data for identification purposes, health data, or data concerning sexual orientation) unless legally required and with your explicit consent.
3 How We Collect Your Data
3.1 9a99 collects personal data through the following channels and mechanisms:
- Direct provision by you: Data you actively submit when registering an account, completing identity verification, making a deposit or withdrawal, contacting support, or responding to a survey or promotion.
- Automated technical collection: Data collected automatically when you access the platform, including IP address, device identifiers, browser characteristics, and behavioural interaction data, collected via server logs, cookies, and similar tracking technologies (see Section 7).
- Payment processors: Transaction confirmation data and payment status updates received from bKash, Nagad, Rocket, Upay, and any bank transfer services integrated into the 9a99 platform.
- Identity verification services: Data returned by third-party Know Your Customer (KYC) and identity verification providers when we use their services to validate the identity documents you submit.
- Fraud prevention and security providers: Risk signals, device fingerprint data, and behavioural analytics received from fraud detection technology partners.
- Publicly available sources: In limited circumstances, we may cross-reference publicly available information (such as public sanctions lists or politically exposed persons databases) as part of our anti-money laundering obligations.
3.2 You are under no statutory obligation to provide your personal data to 9a99. However, failure to provide data that is marked as mandatory (see Section 2) will prevent you from registering an account, completing verification, or using specific platform features that require that data.
4 Legal Basis for Processing
4.1 9a99 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:
- Contractual necessity: Processing that is required to perform the contract between you and 9a99 — i.e., to provide the betting and casino services you have registered to use. This covers account creation, payment processing, game delivery, and customer support.
- Legal obligation: Processing that is required to comply with applicable legal requirements, including anti-money laundering (AML) obligations, age verification requirements, record-keeping obligations, and responses to lawful requests from competent authorities.
- Legitimate interests: Processing undertaken in pursuit of 9a99's legitimate business interests, provided that such interests are not overridden by your data protection rights. Legitimate interests include fraud prevention, platform security, responsible gaming enforcement, and product analytics for service improvement.
- Consent: Where you have given your explicit, freely given, informed, and specific consent to a particular processing activity — principally the sending of marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
4.2 If you wish to understand the specific legal basis that applies to any particular processing activity, please contact the 9a99 support team via live chat.
5 How We Use Your Data
5.1 9a99 uses the personal data we collect for the following specific purposes:
- Account management: Creating and maintaining your 9a99 player account, authenticating your identity at login, and managing account settings and preferences.
- Service delivery: Providing access to sports betting markets (including cricket BPL, IPL, T20 World Cup, and international fixtures), live casino tables, slot games, crash games, and all other features of the 9a99 platform.
- Payment processing: Processing deposits and withdrawal requests in BDT via bKash, Nagad, Rocket, Upay, and supported bank transfer options. Verifying that payment methods are registered in your name.
- Identity and age verification: Confirming that you are at least 21 years of age and that the identity information you have provided is accurate, as required by our eligibility requirements and responsible gaming obligations.
- Fraud prevention and security: Detecting and preventing fraudulent activity, multi-accounting, bonus abuse, money laundering, and other Prohibited Conduct as defined in our Terms & Conditions.
- Responsible gaming: Monitoring betting and gaming activity to identify patterns that may indicate problem gambling, enforcing player-set deposit limits and self-exclusion requests, and proactively reaching out to players who may need support.
- Customer support: Responding to your enquiries, resolving disputes, and maintaining records of support interactions for quality assurance purposes.
- Legal compliance: Meeting our obligations under applicable anti-money laundering, counter-terrorism financing, and data protection laws, including maintaining required records and responding to lawful authority requests.
- Platform improvement: Analysing aggregated and anonymised usage data to understand how players interact with the platform, identify areas for improvement, and develop new features and game offerings.
- Marketing communications (consent-based): Sending promotional emails, SMS messages, or platform notifications about bonuses, new games, seasonal promotions (such as Eid or Pohela Boishakh offers), and tournaments — only where you have opted in to receive such communications.
5.2 9a99 does not use automated decision-making that produces legal or similarly significant effects on players, except where required for fraud prevention or AML screening, in which case you have the right to request human review of any automated decision that adversely affects you.
6 Data Sharing & Third Parties
6.1 9a99 does not sell, rent, or trade your personal data to any third party for their own commercial or marketing purposes under any circumstances.
6.2 We share personal data with third parties only in the following limited and controlled circumstances:
- Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and other payment processors integrated into the platform receive the minimum data necessary to process your transactions (e.g., wallet number, transaction amount).
- Identity verification providers: Third-party KYC service providers receive copies of your identity documents and personal details for the purpose of verifying your identity and age. These providers are contractually bound to use the data solely for that purpose.
- Fraud and security technology providers: Our fraud detection partners receive technical and behavioural data (such as IP address and device fingerprint) to support real-time risk assessment. No financial or identity data is shared for this purpose beyond what is technically necessary.
- Game and platform technology providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a player session token and limited account reference data to enable game delivery. They do not receive your full identity or financial data.
- Legal and regulatory authorities: We may disclose personal data to competent courts, law enforcement agencies, financial intelligence units, or regulatory bodies where we are legally required or permitted to do so — for example, in response to a valid court order, AML report obligation, or regulatory enquiry.
- Professional advisors: Our legal, audit, and compliance advisors may have access to personal data on a strictly confidential, need-to-know basis when providing professional services to 9a99.
6.3 All third-party data processors engaged by 9a99 are subject to written data processing agreements that require them to maintain appropriate security measures, process data only as instructed by 9a99, and not retain data beyond the period necessary to perform their services.
6.4 If 9a99's business is acquired by or merged with another entity, personal data held by 9a99 may be transferred to the acquiring entity as part of that transaction. In such an event, 9a99 will take reasonable steps to ensure that the acquiring entity honours the terms of this Privacy Policy with respect to existing players' data.
7 Cookies & Tracking Technologies
7.1 The 9a99 platform uses cookies and similar tracking technologies (such as web beacons and local storage objects) to support platform functionality, analyse usage patterns, and — where you have consented — deliver personalised content and promotional information.
7.2 The following categories of cookies are used on the 9a99 platform:
- Strictly necessary cookies: These cookies are essential for the platform to function correctly. They enable core features such as secure login session management, bet slip functionality, and payment flow continuity. These cookies cannot be disabled without impairing platform functionality and do not require your consent.
- Performance and analytics cookies: These cookies collect anonymised data about how visitors use the platform — such as which pages are most visited, session duration, and error reports — to help 9a99 improve the platform experience. These cookies require your consent.
- Functionality cookies: These cookies remember your preferences (such as language settings and display preferences) to provide a personalised experience across sessions. These cookies require your consent.
- Marketing and targeting cookies (consent-required): These cookies track your activity on the 9a99 platform for the purpose of delivering relevant promotional content. They are only set if you have explicitly consented to marketing communications from 9a99.
7.3 You may manage your cookie preferences at any time through your browser settings. Most browsers allow you to refuse all cookies, accept all cookies, or selectively accept specific categories of cookies. Please note that disabling strictly necessary cookies will impair your ability to use the 9a99 platform.
7.4 Session data collected via cookies is retained only for the duration of your active browser session unless the cookie is a persistent cookie, in which case the retention period is as described in Section 8.
8 Data Retention
8.1 9a99 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal obligations. The following retention schedule applies as a general guide:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | AML and legal compliance |
| Identity verification documents | Duration of account + 5 years post-closure | Legal obligation (AML regulations) |
| Financial transaction records | Duration of account + 7 years post-closure | Financial record-keeping obligations |
| Betting and gaming history | Duration of account + 3 years post-closure | Dispute resolution and responsible gaming |
| Customer support communications | 3 years from date of interaction | Legitimate interest (quality assurance) |
| Technical and usage logs | 13 months from collection | Fraud detection and security |
| Marketing preferences and opt-in records | Duration of consent + 2 years | Evidence of consent compliance |
| Analytics cookies | Up to 13 months | Platform improvement |
8.2 When a retention period expires and no overriding legal obligation requires continued storage, 9a99 will either securely delete the data or anonymise it so that it can no longer be attributed to any identifiable individual. Anonymised data may be retained indefinitely for statistical and analytical purposes.
8.3 In the event that personal data is subject to an ongoing legal dispute, regulatory investigation, or fraud inquiry, 9a99 may extend the applicable retention period until the matter is fully resolved, after which standard deletion procedures will apply.
9 Your Rights
9.1 As a player whose personal data is processed by 9a99, you hold the following rights with respect to that data. These rights may be subject to certain limitations where legal obligations or legitimate security interests require data to be retained:
9.2 To exercise any of the above rights, please submit a request via the live chat support function on the 9a99 platform. You may also submit requests by email to the address listed in Section 13. 9a99 will respond to all valid data rights requests within 30 calendar days of receipt.
9.3 9a99 will not charge a fee for processing data rights requests unless a request is manifestly unfounded, excessive, or repetitive, in which case a reasonable administrative fee may be applied or the request may be refused. In either case, 9a99 will explain the basis for that decision.
9.4 For requests to withdraw consent to marketing communications specifically, you may opt out at any time by using the unsubscribe mechanism in any marketing email, by adjusting your notification settings in your 9a99 account, or by contacting support directly.
10 Security Measures
9a99 is a safe and reliable platform — all data transmissions between your device and the 9a99 platform are protected by 256-bit SSL/TLS encryption, the same standard used by major international banks.
10.1 9a99 maintains a comprehensive information security programme that includes the following technical and organisational measures:
- 256-bit SSL/TLS encryption for all data in transit between player devices and 9a99 servers;
- AES-256 encryption for sensitive personal data and financial data stored in 9a99's databases;
- Multi-factor authentication options for player account access;
- Role-based access controls limiting 9a99 staff access to personal data on a strict need-to-know basis;
- Regular automated and manual vulnerability scanning of the 9a99 platform and supporting infrastructure;
- Continuous 24/7 monitoring of platform infrastructure for anomalous activity, intrusion attempts, and data breach indicators;
- Formal incident response procedures covering detection, containment, investigation, notification, and post-incident review;
- Employee data protection training and confidentiality obligations for all staff with access to personal data.
10.2 In the event of a personal data breach that is likely to result in risk to your rights and interests, 9a99 will notify affected players without undue delay and will take all reasonable steps to contain and remediate the breach. Where legally required, relevant authorities will also be notified.
10.3 While 9a99 implements robust security measures, no system of electronic data storage or transmission can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials and should notify 9a99 immediately if you suspect that your account has been compromised.
11 Minors & Age Policy
21+ Only: The 9a99 platform is strictly for individuals aged 21 years or older. We do not knowingly collect, process, or retain personal data from anyone under the age of 21.
11.1 9a99 applies mandatory age verification checks as part of the account registration and KYC process. Where age cannot be verified or where there is reasonable suspicion that a player is under 21 years of age, the account will be suspended immediately pending satisfactory verification.
11.2 If 9a99 becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. Any deposits made by an underage player will be handled in accordance with our Terms & Conditions.
11.3 If you are a parent or guardian and believe that your child has registered an account on 9a99, please contact us immediately via live chat support so that we can investigate and take appropriate action.
12 Changes to This Policy
12.1 9a99 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform services. The most current version of this Policy will always be available on this page, and the "Last Updated" date at the top of this Policy will be revised to reflect the date of the most recent changes.
12.2 Where a change to this Policy is material — meaning it significantly affects how we collect, use, or share your personal data — 9a99 will take reasonable steps to notify you of the change before it takes effect, such as by displaying a notice on the platform or sending a notification to your registered email address.
12.3 Your continued use of the 9a99 platform following the publication of any revised Privacy Policy constitutes your acknowledgement of the updated Policy. If you do not agree with any changes, you should cease using the platform and may request account closure by contacting support.
13 Contact & Complaints
13.1 If you have any questions, concerns, or requests relating to this Privacy Policy or to how 9a99 handles your personal data, please contact us using the following methods:
- Live Chat: Available 24/7 directly on the 9a99 platform — the fastest way to reach the support team for privacy-related enquiries.
- Email: [email protected] (plain text — not a clickable link). Email responses are typically provided within 2 business days (Bangladesh Standard Time, UTC+6).
13.2 If you are not satisfied with 9a99's response to a privacy-related complaint or data rights request, you have the right to escalate your concern to the relevant data protection authority in your jurisdiction. 9a99 will cooperate fully with any such authority in the resolution of complaints.
13.3 9a99 takes all privacy complaints seriously and will investigate every concern raised in good faith. We are committed to resolving disputes fairly and transparently, and we will keep you informed of the progress of any investigation into your complaint.
Explore 9a99 — Bangladesh's Trusted Betting Platform
Now that you understand how 9a99 protects your personal data, explore everything the platform has to offer — from live cricket betting to premium casino games and the latest slot titles.