xv99 Privacy Policy

1️⃣Information We Collect

xv99 collects personal data from you directly when you interact with the platform and indirectly through automated technologies such as cookies and session logging. The categories of personal data we collect include the following.

• Identity data: full name, date of birth, nationality and a copy of a government-issued identity document (required for KYC verification before withdrawal).
• Contact data: mobile number (required for bKash / Nagad / Rocket payment linkage and for account security notifications) and, optionally, email address.
• Financial data: deposit amounts, withdrawal amounts, payment method type, transaction reference numbers and account balance history. We do not store full bKash or Nagad PIN codes. Card numbers, where used, are tokenised by the payment processor and not stored in plain text on xv99 systems.
• Usage data: pages visited, games played, bet amounts placed, session duration, device type, operating system, browser type and IP address. This data is used for platform security, fraud prevention and improving the user experience.
• Communications data: records of live chat conversations, email correspondence and any documents you submit to support. These are retained to resolve disputes and to provide continuity of support.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data unless this is explicitly required to satisfy a legal obligation (for example, for problem gambling self-exclusion support). In such cases, we will always seek your explicit consent before collecting sensitive data.

2️⃣How We Use Your Information

xv99 uses the personal data we collect solely for the purposes directly connected to operating a safe, fair and compliant online casino and sports betting service for players in Bangladesh. Specifically, your data is used for the following purposes.

• Account management: creating and maintaining your xv99 player account, verifying your identity (KYC), resetting your password and processing your login sessions securely.
• Payment processing: securely handling your deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa and Mastercard, including fraud screening on each transaction.
• Service delivery: providing you with access to casino games, sports betting markets, live dealer games, promotions and any other features of the xv99 platform.
• Customer support: responding to your queries, resolving disputes, investigating complaints and providing technical assistance through live chat and email.
• Responsible gaming compliance: monitoring account activity to identify signs of problem gambling, enforcing deposit limits and self-exclusion requests, and ensuring the 21+ age policy is upheld.
• Platform improvement: analysing aggregated and anonymised usage data to improve game selection, platform performance, navigation and overall user experience. Individually identifiable data is never used for this purpose.

3️⃣Legal Basis for Processing

xv99 processes your personal data under the following legal bases, depending on the nature of the processing activity.

• Contractual necessity: processing required to fulfil our obligations under the Player Account Agreement — including identity verification, payment processing and delivering access to the platform.
• Legal obligation: processing required to comply with applicable anti-money-laundering (AML) regulations, KYC requirements, fraud prevention obligations and responsible gaming obligations.
• Legitimate interests: processing for fraud detection, platform security monitoring and aggregated analytics, where our legitimate business interests do not override your privacy rights.
• Consent: for any processing activities that go beyond the above categories — for example, sending you promotional communications by email or SMS — we will always obtain your explicit, freely given consent before processing and you may withdraw that consent at any time.

4️⃣Sharing Your Information

xv99 does not sell, rent or trade your personal data. We share your data only in the limited circumstances described below, and only to the minimum extent necessary to fulfil the purpose for which it is shared.

• Payment service providers: bKash, Nagad, Rocket, Upay, and card processing partners receive only the transaction data strictly necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are contractually bound to protect your data.
• Game content providers: game studios such as Pragmatic Play, Evolution Gaming, Spribe and others may receive anonymised session data (e.g. game round IDs) to resolve technical disputes. They do not receive your name, contact details or financial data.
• Regulatory and law enforcement authorities: where required by applicable law or in response to a lawful court order, warrant or regulatory demand, xv99 will disclose data to the relevant authority. We will inform you of such disclosure where we are legally permitted to do so.
• Fraud prevention and security partners: anonymised risk signals (not your personal identity) may be shared with industry-standard fraud detection services to protect the platform from fraudulent accounts and payment abuse.

5️⃣Payment Data and Financial Information

When you make a deposit or withdrawal on xv99 via bKash, Nagad or Rocket, the transaction is initiated through the respective mobile financial service's secure API. xv99 records the transaction amount, the registered mobile number associated with the payment method, the transaction reference number and the timestamp. We do not record your bKash or Nagad PIN at any point in this process. For card-based payments processed via Visa or Mastercard, full card numbers are never stored on xv99 servers. Card data is handled exclusively by our PCI-DSS-compliant payment processing partner, which returns only a tokenised card reference to xv99 for the purpose of linking the transaction to your account.

All financial transaction records are retained for a minimum of five years from the date of the transaction in order to satisfy applicable anti-money-laundering record-keeping obligations. After this mandatory retention period, financial records are securely deleted. You may request a statement of your transaction history for any period within the last 12 months by contacting the xv99 support team.

6️⃣Cookies and Tracking Technologies

xv99 uses cookies and similar technologies to operate the platform, maintain your session and analyse usage patterns. We use three categories of cookies only.

• Essential cookies: required for the platform to function correctly — including session management, login state, and security tokens. These cannot be disabled without breaking core functionality.
• Analytical cookies: used to understand how players navigate the platform so that we can improve the layout, game discovery experience and performance. Data collected via analytical cookies is aggregated and anonymised before analysis.
• Preference cookies: used to remember your in-platform settings such as language preference. These are set only if you interact with a preference control.

xv99 does not use advertising cookies, retargeting cookies or third-party tracking pixels. You may manage or delete cookies through your browser settings at any time. Disabling essential cookies will prevent the platform from functioning correctly.

7️⃣Data Retention

xv99 retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply: active account data is retained for the lifetime of your account plus a minimum of five years following account closure to satisfy legal and regulatory record-keeping requirements; KYC identity documents are retained for five years from the date of verification; financial transaction records are retained for five years from the date of the transaction; customer support communications are retained for two years from the date of the last interaction.

When the applicable retention period expires, personal data is securely deleted or irreversibly anonymised so that it can no longer be linked to an individual. If you request erasure of your data before the end of the applicable retention period and we are not legally required to retain it, we will action your deletion request within 30 days and confirm completion in writing.

8️⃣Your Rights Over Your Personal Data

As a player on xv99, you have the following rights with respect to the personal data we hold about you. To exercise any of these rights, contact our support team via live chat or at [email protected]. We will respond to all verifiable requests within 30 days.

• Right of access: you may request a full copy of the personal data xv99 holds about you, including the categories of data held, the purposes for which it is processed, and any third parties with whom it has been shared.
• Right of rectification: if any personal data xv99 holds about you is inaccurate or incomplete, you may request that it be corrected. We will action rectification requests within 14 days.
• Right of erasure: you may request that xv99 deletes all personal data it holds about you. This right is subject to our legal data retention obligations — for example, we cannot delete transaction records that we are legally required to retain for five years.
• Right to restrict processing: you may request that xv99 restricts the processing of your personal data in certain circumstances — for example, while the accuracy of data you have disputed is being verified.
• Right to withdraw consent: where processing is based on your consent (for example, promotional communications), you may withdraw that consent at any time by contacting support. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

xv99 will never charge a fee for handling a data rights request. We may ask you to verify your identity before processing a request to ensure that we are disclosing data only to the account holder. If we are unable to fulfil a request — for example, because a legal retention obligation applies — we will explain the reason in writing.

9️⃣Data Security

xv99 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration or disclosure. These measures include industry-standard SSL/TLS encryption for all data in transit between your device and xv99 servers; encryption at rest for sensitive stored data including KYC documents and financial records; access controls that limit internal access to personal data on a strict need-to-know basis; automated monitoring systems that detect and alert on suspicious login activity and unusual transaction patterns; regular security assessments of platform infrastructure and third-party integrations.

Despite these measures, no internet-based service can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, xv99 will notify affected players without undue delay and will take all reasonable steps to contain and remediate the breach. You can help protect your account by using a strong, unique password and by notifying support immediately if you suspect any unauthorised access.

🔞Children and Minors

xv99 is strictly an adults-only platform. Access to the xv99 platform is prohibited for any person under the age of 21. We do not knowingly collect personal data from anyone under the age of 21. Age verification is a mandatory step in the account registration and withdrawal process. If xv99 discovers that personal data has been collected from a person under the age of 21, that data will be deleted immediately, the account will be closed and any associated funds will be handled in accordance with our Terms & Conditions.

🔗Third-Party Links

The xv99 platform does not contain links to external third-party websites. All navigation on xv99 remains within our own platform. In the event that any third-party content or link appears on the platform in future, please be aware that xv99 has no control over the privacy practices of third-party sites and this Privacy Policy does not apply to those external sites. You should review the privacy policy of any third-party site before submitting personal data to it.

🔄Changes to This Privacy Policy

xv99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform features. When we make changes, we will update the effective date at the top of this page. Where changes are material — meaning they substantially affect how we use your personal data — we will notify registered players by posting a prominent notice on the platform or by sending a notification to your registered contact details.

Your continued use of xv99 after a revised Privacy Policy has been published constitutes your acceptance of the updated terms. If you do not agree with any change to this Policy, you should stop using the platform and contact us to close your account and arrange for your data to be handled in accordance with your rights as set out in Section 8 above.

📬Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how xv99 handles your personal data, please contact our support team. We aim to respond to all privacy-related enquiries within 5 business days. Our support team is available 24/7 via live chat on the xv99 platform.

Email: [email protected]