99ok Privacy Policy — How We Collect, Use & Protect Your Data

1 Introduction

Welcome to the 99ok Privacy Policy ("Policy"). 99ok ("we", "us", "our") operates the online sports betting and casino platform accessible at 99ok.ws. We are committed to protecting the privacy and personal data of every player who registers and uses the 99ok platform.

This Policy describes the types of personal information we collect from users ("you", "your", "the Player") of the 99ok platform, the purposes for which that information is collected, the circumstances in which it may be shared with third parties, and the rights you hold over your own data. It applies to all personal data collected through the 99ok website, mobile web application, customer support channels, and any other interaction you have with 99ok as a service.

By registering an account on 99ok and using our services, you acknowledge that you have read and understood this Privacy Policy and that you consent to the data practices it describes. If you do not agree with any part of this Policy, you should not use the 99ok platform. This Policy is to be read alongside, and forms part of, our Terms & Conditions.

2 Data We Collect

99ok collects personal data that is necessary for the provision of its services, compliance with legal obligations, fraud prevention, and the improvement of the user experience. The categories of personal data we collect are set out below.

2.1 Registration Data

When you create a 99ok account, we collect:

• Your legal full name (as it appears on your Bangladesh National Identity Card)
• Your date of birth
• Your registered mobile phone number (used as your primary login identifier)
• Your email address
• Your preferred payment method(s)
• Your account password (stored as a one-way cryptographic hash — we never store plaintext passwords)

2.2 Identity Verification (KYC) Data

To comply with our anti-money-laundering (AML) obligations and to verify that all players meet the minimum age requirement of 21 years, we collect:

• A photograph or scan of your Bangladesh National Identity Card (NID), front and back
• A live selfie photograph taken while holding your NID
• Proof of ownership of the payment method(s) linked to your account (e.g., a screenshot of your bKash or Nagad account showing your registered name and mobile number)
• In some cases, a recent utility bill or bank statement confirming your residential address in Bangladesh

2.3 Transaction Data

Every deposit, withdrawal, bonus redemption, bet placement, and casino game transaction on your 99ok account is recorded. Transaction records include the amount (in BDT, ৳), the payment method used, the timestamp (Bangladesh Standard Time, UTC+6), and the transaction reference number. This data is retained for fraud prevention, dispute resolution, and regulatory compliance purposes.

2.4 Technical & Device Data

When you access the 99ok platform, our servers automatically record certain technical information, including:

• Your IP address and approximate geographic location derived from it
• Browser type and version
• Operating system and device type
• Screen resolution and language settings
• Referring URL (the page you visited immediately before arriving at 99ok.ws)
• Pages visited on the 99ok platform, time spent on each page, and navigation path
• Session start and end times

2.5 Communications Data

If you contact our support team via live chat, email, or any other channel, we retain a record of those communications, including the content of the messages exchanged, the date and time, and the resolution outcome. This data is used to improve our support quality and to maintain an accurate record of any complaints or disputes.

2.6 Responsible Gaming Data

If you use any of the 99ok responsible gaming tools — including deposit limits, session time limits, cooling-off periods, or self-exclusion — we record the type of restriction applied, the date it was set, and the player's self-reported reason (where provided). This data is treated with the highest level of sensitivity and is not used for marketing purposes under any circumstances.

3 How We Collect Your Data

99ok collects personal data through the following channels:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, place a bet, contact support, or respond to a survey
• Automatically — through cookies, server logs, and similar tracking technologies when you browse the 99ok platform (see Section 7 for full cookie details)
• From payment processors — bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partner banks transmit transaction confirmation data to 99ok to verify successful payments
• From identity verification partners — where we use a third-party KYC service to validate your NID document, that provider transmits a verification result to 99ok
• From game providers — casino game providers such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi may share session data (game played, duration, outcome) with 99ok for account management and dispute resolution purposes

4 How We Use Your Data

99ok uses the personal data it collects for the following purposes:

99ok does not sell your personal data to third parties for their own marketing purposes. We do not use your personal data to build profiles for sale to data brokers or advertising networks.

5 Legal Basis for Processing

99ok processes your personal data on the following legal bases:

• Contract performance: Processing is necessary to create and manage your account, facilitate transactions, and deliver the services you have registered to use.
• Legal obligation: Processing is required to comply with anti-money-laundering (AML) requirements, age verification rules, and other applicable legal duties.
• Legitimate interest: Processing is necessary for fraud detection, platform security, abuse prevention, and aggregate analytics — activities that benefit both 99ok and its players without overriding your privacy rights.
• Consent: Where we send you personalised promotional communications or use optional tracking cookies, we rely on your freely given, specific, and informed consent. You may withdraw consent at any time by contacting support or adjusting your account notification preferences.

6 Data Sharing & Disclosure

99ok does not share your personal data with any third party except in the following limited circumstances:

6.1 Service Providers

We engage carefully selected third-party service providers who process data on our behalf under strict contractual data processing agreements. These include payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank), KYC verification partners, cloud hosting providers, and game technology providers. Each provider is contractually required to process your data only for the specific purpose for which it was shared, to apply appropriate security measures, and not to disclose it to any further party.

6.2 Legal and Regulatory Disclosure

99ok will disclose personal data to law enforcement authorities, regulatory bodies, or courts where required to do so by applicable law, court order, or binding regulatory direction. In such cases, 99ok will disclose only the minimum data necessary to fulfil the legal obligation. Where lawfully permitted, 99ok will notify the affected player of any such disclosure request.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or a substantial portion of 99ok's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified via your registered email address and via an in-platform notification before your data is transferred to a new controller, and you will be given the opportunity to request deletion of your account prior to the transfer taking effect.

6.4 Aggregate and Anonymised Data

99ok may share aggregated, anonymised, or de-identified statistical data with industry partners, analytics providers, or for publication in reports. Such data cannot be used to identify any individual player and is therefore not considered personal data for the purposes of this Policy.

7 Cookies & Tracking Technologies

99ok uses cookies and similar technologies (such as local storage and session tokens) to operate the platform, remember your preferences, detect fraud, and understand how players interact with the site. The categories of cookies we use are as follows:

7.1 Strictly Necessary Cookies

These cookies are essential for the platform to function. They include session authentication tokens that keep you logged in during your visit, security tokens that protect against cross-site request forgery (CSRF), and load-balancing cookies that route your requests to the correct server. These cookies cannot be disabled while you are using the 99ok platform, as doing so would prevent core functionality from working.

7.2 Functional Cookies

Functional cookies remember your preferences — such as your preferred deposit method, game lobby sorting order, and notification settings — so that you do not have to reconfigure them on every visit. These cookies are set by 99ok and are not shared with third parties.

7.3 Analytics Cookies

With your consent, 99ok uses analytics cookies to understand aggregate patterns of platform usage, such as which pages are most visited, where players encounter navigation difficulties, and how long sessions typically last. The data collected is aggregated and anonymised before analysis. You may opt out of analytics cookies at any time by updating your cookie preferences in the account settings panel.

7.4 Cookie Retention Periods

Session cookies are deleted automatically when you close your browser. Persistent functional cookies are retained for a maximum of 12 months. Analytics cookies, where consented to, are retained for a maximum of 24 months before automatic expiry.

8 Data Retention

99ok retains your personal data for as long as your account is active and for a defined period after account closure, as outlined below:

• Active account data (registration details, transaction history, game history): retained for the lifetime of the account plus a minimum of 5 years after account closure, in line with standard financial record-keeping requirements.
• KYC documents (NID scans, selfies, payment proof): retained for a minimum of 5 years after the KYC check was completed or after account closure, whichever is later.
• Support communications: retained for 3 years from the date of the final message in the conversation thread.
• Technical / server log data: retained for 12 months and then automatically deleted or anonymised.
• Responsible gaming records: retained indefinitely to support any future self-exclusion re-enrolment request and to protect vulnerable players.
• Marketing consent records: retained for the duration of the consent plus 3 years after withdrawal of consent, to demonstrate compliance.

At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Backup copies are purged within 90 days of the scheduled deletion date.

9 Data Security

99ok implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security controls include:

• SSL/TLS encryption: All data transmitted between your device and the 99ok platform is encrypted using TLS 1.2 or higher. Our SSL certificate is renewed regularly and can be verified by inspecting the padlock icon in your browser address bar.
• Password hashing: Account passwords are stored exclusively as one-way bcrypt hashes with a unique per-account salt. Even in the unlikely event of a database breach, plaintext passwords cannot be recovered from these hashes.
• Access controls: Access to personal data within 99ok's internal systems is restricted to authorised personnel on a strict need-to-know basis. All internal access is logged and subject to periodic audit.
• Two-factor authentication (2FA): Players are encouraged to enable 2FA on their accounts. Support staff use mandatory 2FA for all system access.
• Penetration testing: 99ok conducts periodic security assessments to identify and remediate vulnerabilities before they can be exploited.
• Incident response: In the event of a data breach that poses a risk to your rights, 99ok will notify affected players via their registered email address within 72 hours of becoming aware of the breach, and will take all reasonable steps to contain and remediate the incident.

10 Your Rights

As a player on the 99ok platform, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact our support team with your registered mobile number and a description of your request.

• Right of access: You may request a copy of the personal data 99ok holds about you. We will provide this in a structured, commonly used format within 30 days of receiving a valid request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. We will action verified correction requests within 14 days.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data. This right applies where the data is no longer needed for the purpose it was collected, where you have withdrawn consent, or where the processing has no lawful basis. Note that this right is subject to our legal retention obligations — we may be required to retain certain data (e.g., AML records) even after an erasure request.
• Right to restriction: You may request that we restrict the processing of your data in certain circumstances, for example while a dispute about its accuracy is being resolved.
• Right to data portability: Where processing is based on consent or contract performance and is carried out by automated means, you may request that we transfer your data to you or to another controller in a machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications, optional analytics cookies), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
• Right to object: You may object to processing carried out on the basis of legitimate interests. We will review the objection and cease processing unless we can demonstrate compelling legitimate grounds that override your interests.

99ok will respond to all valid data rights requests within 30 calendar days. In complex cases, this period may be extended by a further 60 days, in which case you will be notified of the extension and the reason for it.

11 Children & Minors

99ok services are strictly intended for adults aged 21 years and above. 21+ Only

We do not knowingly collect personal data from any person under the age of 21. If we become aware that an account has been registered by or on behalf of a person under 21, we will immediately suspend that account, void all associated balances and winnings, delete the personal data collected, and if applicable, report the matter to relevant safeguarding authorities.

If you are a parent or guardian and believe that a minor in your care has registered an account on 99ok, please contact our support team immediately at [email protected] (plain text — not clickable). We will prioritise the resolution of such reports and act within 24 hours of receiving them.

12 Third-Party Services

The 99ok platform integrates with third-party game providers, payment processors, and technology partners to deliver its services. When you interact with a game provided by Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, or Ezugi, your game session data is processed by that provider's systems in addition to 99ok's own systems. Similarly, when you make a payment via bKash, Nagad, Rocket, or Upay, your transaction data is processed by that payment provider's infrastructure.

Each of these third-party providers operates under its own privacy policy and data processing terms. 99ok is not responsible for the data practices of third-party providers beyond the contractual obligations we impose on them as data processors. We encourage you to review the privacy policies of any third-party service with which you interact through the 99ok platform.

The 99ok platform does not embed third-party advertising networks, social media tracking pixels, or external analytics services that would result in your personal data being shared with unaffiliated commercial entities without your knowledge or consent.

13 International Data Transfers

As an online platform serving Bangladeshi players, 99ok's primary data processing infrastructure is designed to keep personal data within secure hosting environments. However, certain service providers — including game technology companies and cloud infrastructure providers — may process data on servers located outside Bangladesh.

Where personal data is transferred internationally, 99ok ensures that appropriate safeguards are in place, including contractual data processing agreements that require the receiving party to maintain data protection standards equivalent to those described in this Policy. 99ok does not transfer your personal data to jurisdictions that do not provide an adequate level of data protection without implementing such contractual safeguards.

14 Policy Updates

99ok reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made to this Policy, we will:

• Publish the updated Policy at 99ok.ws/privacy-policy with a revised "Last Updated" date at the top of the document
• Where practicable, notify registered players via their registered email address or via an in-platform notification at next login
• For significant changes that affect the legal basis on which we process your data or that introduce new categories of data collection, we will seek fresh consent where consent is the applicable legal basis

Your continued use of the 99ok platform after a Policy update constitutes your acceptance of the revised terms. If you do not accept the revised Policy, you should cease using the platform and contact support to request account closure.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data 99ok holds about you, please contact the 99ok Data Protection team using the following details:

• Email (plain text): [email protected]
• Subject line: Please use "Privacy Request — [Your Registered Mobile Number]" to ensure your message is routed to the correct team
• Live Chat: Available 24 hours a day, 7 days a week via the chat icon on the 99ok platform
• Response Time: Privacy-related enquiries are acknowledged within 4 business hours and substantively responded to within 30 calendar days (Bangladesh Standard Time, UTC+6)