Privacy Policy for 99ymm – How We Protect Your Data

1 Who We Are

99ymm ("we", "us", "our", "the Platform") is an internationally licensed online casino and sports betting platform operating at https://99ymm.io. We serve players in Bangladesh and provide access to casino games, live dealer games, sports betting markets, fishing games, and related promotional services. For the purposes of this Privacy Policy, 99ymm acts as the data controller in respect of the personal data of our registered users.

This Privacy Policy applies to all personal data collected and processed in connection with your use of the 99ymm website, mobile-optimised interface, and any associated communications (including email and live chat). By registering an account or using any feature of the 99ymm platform, you acknowledge that you have read and understood this Policy.

2 Information We Collect

99ymm collects personal data from you in three primary ways: information you provide directly to us, information generated automatically through your use of the platform, and information we receive from trusted third-party partners. The categories of data we collect are set out below.

2.1 Information You Provide Directly

• Registration data: Full legal name, date of birth, email address, mobile phone number, and residential address.
• Identity verification (KYC) documents: Government-issued photo ID (National ID card, passport, or driving licence), proof of address, and proof of payment method where required.
• Payment information: Mobile wallet numbers (bKash, Nagad, Rocket, Upay), bank account details, and transaction references. We do not store full card numbers or payment credential secrets — these are processed directly by our payment partners.
• Communications: The content of messages you send to our support team via live chat or email, including complaint details and account queries.
• Responsible gaming declarations: Self-exclusion requests, deposit limit settings, and cooling-off period activations.

2.2 Information Collected Automatically

• Device and technical data: IP address, browser type and version, operating system, device identifiers, screen resolution, and time zone setting.
• Usage data: Pages visited, games played, bet history, session duration, navigation paths, and feature interactions on the 99ymm platform.
• Transaction logs: A complete record of all deposits, withdrawals, bonuses, bets placed, and game round outcomes associated with your account.
• Cookie and tracking data: See Section 6 for full details on our use of cookies and similar tracking technologies.

2.3 Information from Third Parties

• Identity verification providers: Results of KYC and age verification checks conducted by our third-party verification partners.
• Payment processors: Transaction status confirmations from bKash, Nagad, Rocket, Upay, SureCash, and banking partners.
• Fraud and risk screening: Risk scores and fraud indicators supplied by third-party compliance and anti-money laundering service providers.
• Game providers: Game session data, RNG outcome logs, and disconnection records supplied by Pragmatic Play, Evolution Gaming, Spribe, and other certified providers.

3 How We Use Your Information

99ymm uses the personal data we collect for the following purposes:

• Account management: To create, maintain, and administer your 99ymm player account, including processing your registration, verifying your identity, and communicating account-related notifications.
• Service delivery: To provide access to casino games, sports betting markets, live dealer games, fishing games, and all other features of the 99ymm platform.
• Payment processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, SureCash, and supported Bangladesh banks in Bangladeshi Taka (৳).
• Legal compliance: To fulfil our obligations under applicable anti-money laundering laws, Know Your Customer requirements, responsible gaming regulations, and the terms of our international gaming licence.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, multi-accounting, money laundering, bonus abuse, and other prohibited activities described in our Terms & Conditions.
• Responsible gaming: To monitor gameplay patterns for signs of problem gambling behaviour, enforce self-exclusion and deposit limit settings, and deliver responsible gaming communications where relevant.
• Customer support: To respond to your enquiries, complaints, and account-related requests via our 24/7 live chat and email support channels.
• Platform improvement: To analyse aggregate usage patterns, identify technical issues, test new features, and improve the overall user experience on the 99ymm platform.
• Marketing: Where you have given explicit consent, to send you promotional emails, bonus offers, and seasonal promotions tailored to your preferences and activity on the platform. You may withdraw consent at any time — see Section 12.

4 Legal Basis for Processing

99ymm processes personal data on the following legal grounds, depending on the specific purpose:

• Contract performance: Processing your registration data, managing your account, and facilitating deposits, withdrawals, and game play is necessary to perform the contract between you and 99ymm as set out in our Terms & Conditions.
• Legal obligation: KYC verification, AML screening, age verification, and responsible gaming monitoring are required by the terms of our international gaming licence and applicable anti-money laundering frameworks.
• Legitimate interests: Fraud detection, platform security, abuse prevention, and aggregate analytics are processed on the basis of our legitimate business interests, which do not override your fundamental rights and freedoms.
• Consent: Marketing communications (promotional emails, bonus alerts) are sent only where you have provided explicit, informed consent at registration or subsequently through account settings. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

5 Sharing Your Information

99ymm does not sell personal data to third parties. We share personal data only in the circumstances described below, and only to the extent necessary for the stated purpose:

5.1 Service Providers and Data Processors

We share personal data with trusted third-party companies who process data on our behalf and under our instruction, including: KYC and identity verification providers; payment processors (bKash, Nagad, Rocket, Upay, SureCash, and banking partners); game software providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi and others); cloud hosting and infrastructure providers; customer support platform providers; and fraud detection and anti-money laundering screening services. All processors are bound by contractual obligations to process data only as instructed by 99ymm and to maintain appropriate security standards.

5.2 Legal and Regulatory Disclosure

We may disclose personal data to law enforcement agencies, regulatory authorities, or courts where we are required to do so by applicable law, court order, or as part of cooperation with legitimate investigations into financial crime, fraud, or other criminal activity. 99ymm will only disclose the minimum data necessary to fulfil such legal obligations.

5.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of 99ymm's business assets, personal data held by 99ymm may be transferred to the acquiring entity as part of that transaction. In such circumstances, we will ensure that any transfer is subject to appropriate privacy protections and that affected players are notified in advance where required.

6 Cookies & Tracking Technologies

99ymm uses cookies and similar tracking technologies on the platform to deliver a functional, secure, and personalised experience. The following types of cookies are used:

You may manage your cookie preferences through your browser settings. Disabling essential cookies will prevent you from logging in or using core platform features. 99ymm does not use third-party advertising or retargeting cookies. Analytics data collected through cookies is aggregated and cannot be used to identify you individually.

7 Data Retention

99ymm retains personal data for the periods set out below, after which data is securely deleted or irreversibly anonymised:

• Active account data: Retained for the full duration of your account's active status plus a minimum of 5 years following account closure, in accordance with our international licensing obligations and standard anti-money laundering record-keeping requirements.
• KYC and identity verification documents: Retained for a minimum of 5 years from the date of account closure or the date of the last transaction, whichever is later.
• Financial transaction records: Retained for a minimum of 5 years from the transaction date, in line with standard financial record-keeping requirements.
• Customer support communications: Retained for 3 years from the date of the final communication in a support thread, or longer where the communication relates to a formal complaint or dispute.
• Marketing consent records: Retained for the duration of your consent plus 3 years to demonstrate compliance in the event of a regulatory enquiry.
• Technical and usage logs: Retained for up to 24 months from collection, after which they are anonymised and aggregated for analytical purposes.

8 International Data Transfers

As an internationally operated platform, 99ymm may transfer personal data to servers and processors located outside Bangladesh. This may include transfers to our cloud infrastructure providers, game software vendors, and KYC verification partners operating in various jurisdictions.

Where personal data is transferred internationally, 99ymm ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections described in this Policy. Such safeguards may include standard contractual clauses, data processing agreements incorporating privacy obligations, or transfers to jurisdictions that maintain adequate data protection standards.

By using the 99ymm platform, you acknowledge that your personal data may be processed outside Bangladesh as described in this section. If you have concerns about specific international transfers, please contact our support team for further information.

9 Your Rights

As a player on the 99ymm platform, you hold the following rights in relation to your personal data. To exercise any of these rights, contact our support team via live chat or at the email address shown at the end of this Policy:

• Right of access: You may request a copy of the personal data 99ymm holds about you, along with information about how it is processed. We will respond within 30 days of a valid request.
• Right to rectification: You may request correction of any personal data that is inaccurate or incomplete. For data that you can update directly in your account settings (such as contact preferences), you may do so without contacting us.
• Right to erasure: In certain circumstances, you may request deletion of your personal data. This right is subject to limitations where retention is required by law or for the establishment, exercise, or defence of legal claims.
• Right to restrict processing: You may request that we limit how we process your data in certain circumstances, for example while a dispute about accuracy is resolved.
• Right to data portability: Where processing is based on consent or contract and is carried out by automated means, you may request that your data be provided to you in a structured, machine-readable format.
• Right to object: You may object to processing carried out on the basis of legitimate interests. We will assess your objection and cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw consent at any time through your account settings or by contacting our support team. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

10 Children & Minors

The 99ymm platform is strictly for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If we discover or have reason to believe that a registered account belongs to a person under 21, we will immediately suspend that account, void any transactions associated with it, and securely delete the personal data of the underage individual in accordance with applicable data protection standards.

Parents and guardians who believe their child may have accessed the 99ymm platform or provided personal data to us are encouraged to contact our support team immediately. We will investigate all such reports promptly and take the appropriate remedial action without delay.

11 Security Measures

99ymm implements a layered, defence-in-depth approach to data security. The technical and organisational measures we have in place include:

• TLS/SSL encryption: All data exchanged between your browser or device and the 99ymm platform is encrypted in transit using current TLS standards.
• Password hashing: Account passwords are stored as salted cryptographic hashes. 99ymm staff cannot view your password in plain text. If you forget your password, it must be reset rather than retrieved.
• Two-factor authentication: Players are encouraged to enable two-factor authentication (2FA) on their accounts for an additional layer of login security.
• Access controls: Internal access to personal data is restricted on a strictly need-to-know basis. Staff members are trained in data protection obligations and are subject to confidentiality agreements.
• Regular security audits: Our platform infrastructure undergoes periodic independent security assessments to identify and remediate vulnerabilities.
• Fraud detection systems: Automated monitoring systems analyse transaction and behavioural data in real time to identify and flag anomalous activity for human review.

While 99ymm takes all reasonable steps to protect your personal data, no security system is completely impenetrable. In the event of a data security incident that poses a risk to your personal data, we will notify affected players and relevant authorities in accordance with our legal obligations and within the timeframes required.

12 Marketing Communications

99ymm may send you promotional communications — including bonus offers, reload promotions, free bet alerts, and seasonal campaigns tied to events such as the BPL, IPL, T20 World Cup, Eid, and Pohela Boishakh — where you have provided your explicit consent to receive such communications at the point of registration or subsequently through your account settings.

You may withdraw your marketing consent at any time using any of the following methods:

• Clicking the "unsubscribe" link included in every marketing email we send.
• Updating your communication preferences in your 99ymm account settings panel.
• Contacting our 24/7 support team via live chat and requesting removal from all marketing lists.

Withdrawal of marketing consent will take effect within 5 business days. Please note that even after withdrawing marketing consent, you will continue to receive transactional communications related to your account (such as deposit confirmations, withdrawal notifications, and security alerts) as these are necessary for the operation of your account and are not marketing communications.

13 Third-Party Links

The 99ymm platform may contain references to game providers, payment partners, or other services whose names appear in the context of explaining our services. This Privacy Policy applies solely to the 99ymm platform. 99ymm does not operate or control any third-party websites or services, and we are not responsible for the privacy practices of third parties.

If you interact directly with a third-party service in connection with your use of the 99ymm platform — for example, using your bKash or Nagad mobile wallet app to complete a deposit — the handling of your data by that third party is governed by their own privacy policy. We encourage you to review the privacy policies of any third-party services you use.

14 Changes to This Policy

99ymm reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. Where changes are material — meaning they significantly affect the way we collect, use, or share your personal data — we will notify registered players by email or by a prominent platform notification at least 14 days before the revised Policy takes effect.

Minor updates that clarify existing practices without altering the substance of our commitments to you may take effect immediately without prior notice. The "Last Updated" date at the top of this Policy will always reflect the date of the most recent revision. We encourage you to review this Policy periodically to stay informed about how 99ymm protects your data.

Continued use of the 99ymm platform after the effective date of a revised Privacy Policy constitutes your acknowledgement of the updated Policy. If you do not agree with changes to this Policy, you must cease using the platform and request account closure before the effective date of the change.

15 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or would like to raise a concern about how 99ymm handles your personal data, please contact our support team. Our 24/7 English-language support is available via live chat on the platform. You may also reach us by email — the address is displayed as plain text below and is not a clickable link:

We will make every effort to resolve privacy concerns informally and promptly. If you are not satisfied with our response after raising a concern directly with us, you may have the right to lodge a complaint with the data protection authority or regulatory body applicable under your local laws. 99ymm cooperates fully with legitimate regulatory enquiries relating to data protection compliance.