99tk Privacy Policy – How We Protect Your Personal Data

01 Who We Are

99tk is an online casino and sports betting platform operated under the brand name "99tk" and accessible at 99tk.io. The platform is designed to serve the Bangladesh market and offers a wide range of casino games, live dealer tables, slot titles from globally recognised providers including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi, as well as sports betting markets covering cricket, football, kabaddi, and other sports popular with Bangladeshi audiences.

For the purposes of this Privacy Policy, 99tk acts as the data controller in respect of all personal data collected from users of the 99tk platform. As data controller, we determine the purposes for which your personal data is processed and the means by which that processing takes place.

02 Personal Data We Collect

99tk collects personal data across several categories, depending on how you interact with our platform. The table below provides a comprehensive overview of the data categories we process, along with examples of the specific data points within each category.

2.1 Special Category Data

99tk does not intentionally collect special category personal data (such as health information, religious beliefs, or political opinions) from its users. However, if you voluntarily disclose such information in the context of a responsible gaming request or a support interaction — for example, if you mention a health condition as context for a self-exclusion request — we will handle that information with the highest level of care and sensitivity, using it solely for the purpose for which it was shared.

03 How We Collect Your Data

99tk collects personal data through the following channels and mechanisms:

3.1 Information You Provide Directly

The majority of the personal data we hold about you is data that you provide to us directly through your interactions with the 99tk platform. This includes the information you submit during account registration, the documents you upload during KYC verification, the payment details you provide when making deposits or requesting withdrawals, and any information you share when you contact our customer support team.

3.2 Data Collected Automatically

When you access and use the 99tk platform, our systems automatically collect certain technical and usage data. This includes your IP address, the type of device and browser you are using, your operating system version, the pages and features you access, the duration of your sessions, and any errors encountered during your visit. This data is collected using standard server logging technology and, where applicable, cookies and similar tracking technologies (see Section 7 for full details).

3.3 Data from Payment Processors

When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, or a bank transfer, our payment processing partners may share transactional confirmation data with us, including transaction reference numbers and the mobile wallet or bank account number used for the transaction. This data is used solely to reconcile payments and maintain accurate account records.

3.4 Data from Identity Verification Services

Where 99tk uses third-party identity verification services to assist with our KYC obligations, those services may return data to us regarding the outcome of a verification check. The underlying identity documents are submitted by you directly and are not shared with the verification service beyond the information necessary to complete the check.

04 Why We Use Your Personal Data

99tk processes your personal data for the following defined purposes. We do not process your data for any purpose other than those listed below without first obtaining your explicit consent or as required by applicable law.

• Account Creation and Management: To create and maintain your 99tk account, authenticate your identity at login, and provide you with access to the full range of platform features.
• Age and Identity Verification: To verify that you meet the 21+ minimum age requirement and to confirm your identity as part of our KYC process, in compliance with our anti-money-laundering obligations.
• Payment Processing: To process your deposits and withdrawals securely via your chosen payment method (bKash, Nagad, Rocket, Upay, bank transfer, Visa, or Mastercard), and to maintain accurate financial records of all transactions denominated in Bangladeshi Taka (BDT).
• Platform Operation and Improvement: To operate, maintain, test, and improve the 99tk platform, its games, and its features, including diagnosing technical issues and analysing aggregate usage patterns.
• Customer Support: To respond to your enquiries, resolve complaints, and provide assistance with your account, deposits, withdrawals, and game-related questions.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, account sharing, the use of automated software, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible Gaming: To administer and enforce responsible gaming tools you have activated, including deposit limits, cooling-off periods, session time reminders, and self-exclusion requests.
• Legal and Regulatory Compliance: To comply with applicable legal obligations, including those relating to anti-money-laundering, record-keeping, and responding to lawful requests from regulatory or law-enforcement authorities.
• Personalised Experience: To personalise your experience on the 99tk platform by surfacing game recommendations, relevant promotions, and content that reflects your stated preferences and historical activity — subject to your consent where required.
• Marketing Communications: To send you promotional emails, bonus notifications, and platform updates where you have opted in to receive such communications. You may opt out at any time by contacting [email protected].

05 Legal Bases for Processing

Every instance of personal data processing carried out by 99tk rests on one of the following legal bases:

• Contractual Necessity: Processing that is necessary to perform the contract between you and 99tk — specifically, to operate your account, process your payments, and deliver the gaming services you have requested. Without this processing, we cannot provide you with the 99tk service.
• Legal Obligation: Processing that is required for 99tk to comply with its legal and regulatory obligations, including age verification, identity verification, anti-money-laundering screening, and record-keeping requirements.
• Legitimate Interests: Processing carried out on the basis of 99tk's legitimate business interests, including fraud detection and prevention, platform security, abuse monitoring, and improving the quality of our services — provided those interests are not overridden by your rights and interests.
• Consent: Processing for which you have provided your explicit, freely given, and informed consent — in particular, the use of non-essential cookies and the sending of marketing communications. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

06 Sharing Your Personal Data

99tk does not sell, rent, or trade your personal data. We share your data only in the limited circumstances described below, and only to the extent necessary for each purpose.

6.1 Service Providers and Data Processors

We engage carefully selected third-party service providers to help us operate the 99tk platform. These providers process personal data on our behalf and under our documented instructions. They are not permitted to use your data for their own purposes. Our service provider categories include:

• Payment Processors: bKash, Nagad, Rocket, Upay, and bank payment gateway operators — to process your deposits and withdrawals.
• Identity Verification Providers: Third-party KYC services used to verify identity documents during the account verification process.
• Cloud and Infrastructure Providers: Secure cloud hosting and data storage providers that hold 99tk's server infrastructure under strict data protection agreements.
• Customer Support Technology: Live chat and ticketing platform providers that facilitate our 24/7 customer support function.
• Analytics Providers: Aggregated, anonymised platform analytics services used to understand how users interact with the 99tk platform at a statistical level.
• Game Content Providers: Game studios such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi may receive minimal technical session data necessary to deliver their game content within the 99tk platform.

6.2 Legal and Regulatory Disclosures

99tk may disclose your personal data to law enforcement agencies, regulatory bodies, or other authorised authorities where we are required to do so by applicable law, court order, or other lawful process. We will notify you of any such disclosure request unless we are legally prohibited from doing so.

6.3 Business Transfers

In the event that 99tk undergoes a business restructuring, merger, acquisition, or sale of assets, your personal data may be transferred as part of that transaction. You will be notified in advance of any such transfer, and the receiving entity will be required to honour the terms of this Privacy Policy in respect of your data.

07 Cookies and Tracking Technologies

99tk uses cookies and similar tracking technologies on its platform. A cookie is a small text file stored on your device by your browser when you visit a website. Cookies allow us to recognise your device on return visits, remember your preferences, maintain your login session, and analyse how our platform is used.

7.1 Types of Cookies We Use

• Strictly Necessary Cookies: These cookies are essential for the 99tk platform to function correctly. They enable core functionality such as session management, login authentication, and security features. These cookies cannot be disabled without significantly impairing your ability to use the platform.
• Functional Cookies: These cookies remember your preferences — such as your language settings, display preferences, and whether you have previously acknowledged platform notices — to provide you with a more personalised experience.
• Performance and Analytics Cookies: These cookies collect aggregated, anonymised data about how visitors use the 99tk platform, including which pages are visited most frequently, how long users spend on each section, and where users encounter errors. This data helps us continuously improve the platform.
• Responsible Gaming Cookies: A specialised category of functional cookie used to enforce responsible gaming settings you have activated on your account, including session time reminders and deposit limit enforcement at the browser level.

7.2 Managing Cookies

You can control and manage cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies at any time. Please be aware that disabling strictly necessary cookies will affect the functionality of the 99tk platform and may prevent you from logging in or using certain features. Instructions for managing cookies in popular browsers are available through each browser's help documentation.

08 Data Retention

99tk retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal obligations. The following retention periods apply to each category of data we process:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with industry-standard data destruction protocols. Anonymised data — which cannot be linked back to any individual — may be retained indefinitely for statistical and analytical purposes.

09 Security Measures

99tk takes the security of your personal data seriously and has implemented a comprehensive set of technical and organisational security measures to protect against unauthorised access, disclosure, alteration, or destruction of your data.

9.1 Technical Safeguards

• 256-bit SSL/TLS Encryption: All data in transit between your device and 99tk's servers is encrypted using industry-standard TLS protocols.
• Encrypted Data Storage: Sensitive data fields — including financial account numbers and identity document data — are encrypted at rest using AES-256 encryption.
• Firewalls and Intrusion Detection: 99tk's infrastructure is protected by enterprise-grade firewalls and automated intrusion detection systems that monitor for anomalous access patterns 24 hours a day.
• Access Controls: Access to personal data within 99tk's systems is restricted on a strict need-to-know basis. All staff with data access rights are subject to background screening and ongoing training on data protection practices.
• Two-Factor Authentication: 99tk supports two-factor authentication for player accounts as an additional layer of protection against unauthorised login.
• Regular Security Audits: 99tk's platform and data infrastructure undergo regular independent security audits and penetration testing to identify and remediate vulnerabilities.

9.2 Your Responsibilities

While 99tk takes every reasonable measure to protect your data, you also play an important role in keeping your account secure. You should use a strong, unique password for your 99tk account, never share your login credentials with any other person, and notify us immediately at [email protected] if you suspect unauthorised access to your account. 99tk will never contact you by phone, email, or any other channel to ask for your password.

10 Your Data Rights

As a 99tk user, you hold the following rights in respect of your personal data. 99tk is committed to facilitating the exercise of these rights promptly and without unnecessary barriers.

To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request" and a description of the right you wish to exercise. We will acknowledge your request within 48 hours and provide a substantive response within five working days. In some cases, where requests are complex or numerous, we may extend this period by up to a further ten working days, in which case we will notify you of the extension and the reason for it.

Please note that certain rights are subject to legal and regulatory limitations. For example, we cannot erase transaction records that we are required to retain under anti-money-laundering regulations, and we cannot restrict processing that is necessary to prevent fraud or protect the security of the platform.

11 Children's Privacy

The 99tk platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Our registration process requires users to confirm their date of birth, and all accounts are subject to age verification as part of our KYC process.

If 99tk becomes aware that personal data has been collected from a person under the age of 21 without appropriate parental or guardian consent, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and you believe your child has registered an account with 99tk, please contact us immediately at [email protected].

12 Third-Party Links

The 99tk platform may occasionally reference or display content connected to third-party services, such as game studios (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, Ezugi) or payment partners (bKash, Nagad, Rocket, Upay). These third parties operate their own platforms and privacy policies entirely independently of 99tk.

99tk is not responsible for the privacy practices of any third-party service. We strongly encourage you to review the privacy policy of any third-party service you interact with in connection with your use of the 99tk platform. The inclusion of a reference to a third-party service on the 99tk platform does not constitute an endorsement of that party's privacy practices.

13 Changes to This Privacy Policy

99tk reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, the services we offer, or applicable legal requirements. When we make material changes to this Policy, we will take the following steps to ensure you are informed:

• We will update the "Effective Date" and "Last Updated" date displayed at the top of this page and in the hero section above.
• We will send a notification email to the registered email address on your 99tk account at least seven calendar days before the updated Policy takes effect.
• For significant changes that materially affect how we use your data or your rights, we may display an in-platform notice upon your next login, requiring you to acknowledge the updated Policy before continuing to use the platform.

Your continued use of the 99tk platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of, and agreement to, the revised terms. If you do not agree with the changes, you have the right to close your account and request deletion of your data prior to the new Policy taking effect by contacting our support team.

We recommend bookmarking this page and reviewing it periodically so you remain informed of how 99tk handles your personal data. Minor changes — such as corrections to typographical errors or clarifications that do not alter the substance of the Policy — may be made without prior notice, though the "Last Updated" date will always be revised accordingly.

14 Contact and Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which 99tk handles your personal data, please contact our Data Protection team using the details below. We are committed to addressing all privacy-related correspondence fairly, thoroughly, and within the timeframes set out in this Policy.

14.1 Complaints Process

If you are not satisfied with 99tk's response to your privacy concern or data rights request, you have the right to escalate your complaint by following these steps:

1. Initial Contact: Submit your concern in writing to [email protected] with full details of your complaint and the outcome you are seeking. Our team will investigate and respond within five working days.
2. Escalation Review: If you remain dissatisfied after our initial response, request an escalation review by replying to our response and including the words "Escalation Request" in the subject line. A senior member of our team will review your complaint and provide a final written response within ten working days.
3. Independent Review: If you remain dissatisfied after exhausting 99tk's internal complaints process, you retain the right to seek independent redress through the appropriate consumer protection or data protection authority in your jurisdiction.

99tk takes all privacy complaints seriously. We maintain a formal complaints log and use the insights derived from complaints to continuously improve our data protection practices and the clarity of this Privacy Policy.