99ar Privacy Policy —
Your Data, Your Rights
At 99ar, protecting the personal information of every Bangladeshi player on our platform is a core responsibility — not an afterthought. This Privacy Policy explains exactly what data we collect, how we use it, who we may share it with, and the rights you hold as a data subject. We encourage you to read it in full before creating your account.
Six Principles That Govern How 99ar Handles Your Data
These principles summarise our overall approach to data privacy. The full legal text follows in the sections below — please read those sections carefully as they form the binding policy.
Minimal Data Collection
99ar collects only the personal data that is strictly necessary to provide our services, verify player identity, process transactions, and comply with applicable legal and compliance obligations. We do not collect data beyond what is required for these defined purposes.
SSL Encryption on All Data
All data transmitted between your device and the 99ar platform is protected by industry-standard SSL/TLS encryption. Sensitive data stored on our servers — including payment details and identity documents — is encrypted at rest using AES-256 encryption protocols.
No Sale of Personal Data
99ar does not sell, rent, lease, or license your personal data to third-party advertisers, data brokers, marketing companies, or any other commercial entity. Your data is used exclusively for the purposes described in this Privacy Policy and for no other commercial purpose.
Defined Retention Periods
Your personal data is not kept indefinitely. 99ar retains data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Once the retention period expires, data is securely deleted or anonymised in a manner that prevents re-identification.
Your Rights Are Respected
As a 99ar player, you have the right to access, correct, and request deletion of your personal data held by us. You may also object to certain types of processing and request that we restrict how your data is used. Requests are handled within 30 days of receipt by our support team.
Marketing Opt-Out Available
If you have consented to receive promotional communications from 99ar, you may withdraw that consent at any time by contacting our support team at [email protected]. Withdrawal of marketing consent does not affect the lawfulness of any processing carried out before the withdrawal.
Please Read Carefully: This Privacy Policy forms part of the legal relationship between you and 99ar. By registering an account on the 99ar platform, you confirm that you have read, understood, and consented to the collection and processing of your personal data as described in this document. If you do not consent, you must not register an account or use the 99ar platform.
1 Who We Are
99ar operates an online cricket betting and casino platform accessible at 99ar.io (the "Platform"). References to "99ar", "we", "us", or "our" throughout this Privacy Policy refer to the operator of the 99ar platform and its authorised data processing agents.
99ar is the data controller in respect of the personal data that you provide when registering an account, completing KYC verification, making deposits or withdrawals, and interacting with the platform. As data controller, we are responsible for determining the purposes and means of processing your personal data, and for ensuring that such processing is carried out lawfully, fairly, and transparently.
Our primary point of contact for all data privacy matters is our customer support team, reachable at [email protected]. All privacy-related enquiries will be acknowledged within 48 hours (Bangladesh Standard Time, UTC+6) and handled within 30 calendar days of receipt.
2 Personal Data We Collect
99ar collects personal data across several categories, depending on how you interact with the platform. The table below sets out the categories of data we collect, typical data points within each category, and the primary purpose for which each category is collected.
| Data Category | Typical Data Points | Primary Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality, government-issued ID number | Account registration, KYC verification, age verification (21+ policy enforcement) |
| Contact Data | Mobile phone number, email address, city of residence (e.g., Dhaka, Chittagong, Sylhet) | Account communication, security alerts, customer support, optional marketing |
| Financial Data | bKash / Nagad / Rocket / Upay wallet numbers, Visa/Mastercard details (last 4 digits only), transaction history | Deposit processing, withdrawal verification, fraud prevention, AML compliance |
| Identity Documents | NID (National Identity Document) scan, passport copy, selfie with document | KYC compliance, age and identity verification |
| Technical Data | IP address, device type, operating system, browser type, session timestamps | Security monitoring, fraud detection, platform optimisation |
| Usage Data | Pages visited, games played, bet history, session duration, feature interactions | Platform improvement, responsible gaming monitoring, personalisation |
| Communications Data | Support chat transcripts, email correspondence, feedback submitted | Customer support quality, dispute resolution, training |
We do not collect special category data (such as biometric data, health data, political opinions, or religious beliefs) unless it is incidentally present in identity documents submitted for KYC purposes, in which case it is handled with additional care and used only for the purpose of verifying the authenticity of the document.
3 How We Collect Your Data
99ar collects personal data through the following channels and mechanisms:
3.1 Directly From You
The majority of your personal data is provided directly by you during the following interactions with the 99ar platform:
- Completing the 99ar account registration form, including providing your name, contact details, and date of birth.
- Uploading identity documents and selfie photographs during the KYC verification process.
- Submitting deposit or withdrawal requests, including providing mobile wallet numbers or card details.
- Contacting 99ar customer support via live chat, email, or any other supported channel.
- Completing surveys, feedback forms, or promotional entry forms when made available on the platform.
- Setting responsible gaming preferences, including deposit limits, self-exclusion elections, and cooling-off periods.
3.2 Automatically Through Platform Use
Certain technical and usage data is collected automatically when you access and interact with the 99ar platform. This includes data collected via cookies, web beacons, and server-side logging systems. Automatic collection occurs regardless of whether you are logged into your account, and includes the data points described in the Technical Data and Usage Data rows of the table in Section 2.
3.3 From Third Parties
In limited circumstances, 99ar may receive personal data about you from third-party sources, including:
- Identity verification service providers engaged to cross-check the documents you submit during KYC.
- Payment processors (including bKash, Nagad, Rocket, and Upay) who may provide transaction confirmation data.
- Fraud prevention and anti-money-laundering screening services that check your details against industry watchlists.
- Game providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) in respect of game session data generated on their certified platforms.
In all cases, 99ar ensures that any third party sharing personal data with us does so on a lawful basis and in accordance with applicable data protection law.
4 Legal Basis for Processing
99ar processes your personal data on one or more of the following legal bases, depending on the specific processing activity:
- Contractual Necessity: Processing that is necessary to register your account, operate the platform, execute deposits and withdrawals, and deliver the services you have contracted us to provide.
- Legal Obligation: Processing required for compliance with anti-money-laundering (AML) regulations, know-your-customer (KYC) obligations, and any other legal or regulatory requirements applicable to 99ar's jurisdiction of operation.
- Legitimate Interests: Processing necessary for the legitimate interests of 99ar, including fraud prevention, platform security, responsible gaming enforcement, and internal analytics — where those interests are not overridden by your fundamental rights and freedoms.
- Consent: Processing carried out on the basis of your freely given, specific, informed, and unambiguous consent — primarily in connection with optional marketing communications and non-essential cookie placement. You may withdraw consent at any time without affecting the lawfulness of prior processing.
5 How We Use Your Personal Data
99ar uses the personal data we collect for the following defined purposes. We will not use your personal data for any purpose that is materially different from those listed below without first informing you and, where required, obtaining your consent.
- Account Management: Creating and maintaining your 99ar player account, verifying your identity at registration and during ongoing account reviews, and providing you with access to all platform products and features.
- Transaction Processing: Facilitating deposits via bKash, Nagad, Rocket, Upay, SureCash, Visa, and Mastercard; processing withdrawal requests; and maintaining an accurate ledger of your wallet balance and transaction history.
- KYC & Compliance: Verifying your age (21+ policy), confirming your identity, screening your details against AML watchlists, and fulfilling any other regulatory compliance obligations applicable to 99ar.
- Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, unauthorised account access, multi-accounting, bonus abuse, and any other activity that violates the 99ar Terms & Conditions or applicable law.
- Customer Support: Responding to your enquiries, resolving disputes, processing account closure or self-exclusion requests, and improving the quality of our support service.
- Responsible Gaming: Monitoring your play patterns for indicators of problem gambling behaviour, enforcing deposit limits and self-exclusion elections you have set, and proactively reaching out where we identify concerning activity.
- Platform Improvement: Analysing aggregated and anonymised usage data to identify platform performance issues, improve game loading speeds, and develop new features relevant to Bangladeshi players.
- Marketing (Consent-Based Only): Sending you promotional communications about 99ar bonuses, seasonal offers (such as Pohela Boishakh or Eid promotions), and new game launches — but only where you have explicitly opted in to receive such communications.
6 Sharing Your Personal Data
99ar does not sell or rent your personal data. We share your data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:
6.1 Service Providers and Data Processors
We engage third-party service providers to assist in operating the 99ar platform. These providers act as data processors on our behalf and are contractually prohibited from using your data for any purpose other than the specific service they provide to 99ar. Categories of service providers include identity verification providers, payment processors, fraud detection services, cloud hosting providers, and customer support infrastructure providers.
6.2 Game Providers
Game studios whose products are available on 99ar — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — may receive limited session-level data (such as a pseudonymised player identifier and bet value) necessary to operate their certified game engines and generate auditable game logs. These providers do not receive your full personal profile.
6.3 Payment Partners
When you initiate a deposit or withdrawal, the relevant payment partner (bKash, Nagad, Rocket, Upay, SureCash, Visa, or Mastercard) will receive the transaction data necessary to execute the payment. Each payment partner operates under its own privacy policy and data protection standards. 99ar is not responsible for the data practices of payment partners in respect of data processed under their own systems.
6.4 Legal and Regulatory Disclosure
99ar may disclose your personal data to law enforcement agencies, regulatory authorities, or courts of competent jurisdiction where we are legally required to do so, or where such disclosure is necessary to protect the rights, property, or safety of 99ar, its players, or the public.
6.5 Business Transfers
In the event of a merger, acquisition, restructuring, or sale of all or part of 99ar's business assets, your personal data may be transferred as part of that transaction. We will notify you of any such transfer and of any material changes to data processing that result from it, prior to the transfer taking effect where reasonably practicable.
No Data Sales — Ever: 99ar has never sold, and will never sell, your personal data to advertisers, data brokers, or any other commercial third party. This commitment is absolute and does not vary based on account status, jurisdiction, or any other factor.
7 Cookies & Tracking Technologies
99ar uses cookies and similar tracking technologies (including web beacons and local storage) to operate the platform, improve user experience, and — where you have consented — to deliver relevant promotional content. The following categories of cookies are used on 99ar.io:
- Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. They cannot be disabled without breaking core platform functionality, and no consent is required for their placement.
- Functional Cookies: Enable enhanced functionality such as remembering your preferred language settings, storing your responsible gaming preferences, and maintaining your session state between pages.
- Analytics Cookies: Allow 99ar to understand how players navigate the platform, which pages are most visited, and where technical errors occur. Analytics data is aggregated and anonymised before analysis. Placement requires your consent.
- Marketing Cookies: Used to deliver promotional content relevant to your demonstrated interests on the 99ar platform. These are placed only with your explicit prior consent, and you may withdraw that consent at any time.
You may manage your cookie preferences at any time by contacting 99ar support at [email protected]. Please note that disabling non-essential cookies may affect the quality of your experience on certain parts of the platform.
8 Data Retention
99ar retains your personal data for no longer than is necessary for the purposes for which it was collected, or as required by applicable law and regulation. The following retention principles apply:
- Active Account Data: While your account remains active, we retain all data categories described in Section 2 for the purposes of delivering platform services, maintaining accurate financial records, and ensuring compliance with applicable obligations.
- Closed Account Data: Following account closure (whether initiated by you or by 99ar), we retain identity data, KYC documents, and financial transaction records for a minimum period required by our compliance obligations. This period is typically five years from the date of account closure, to meet AML and financial record-keeping requirements.
- Marketing Data: Where you have consented to marketing communications, we retain your contact details for marketing purposes until you withdraw consent or until two years have elapsed since your last interaction with a 99ar marketing communication, whichever is earlier.
- Technical Logs: Server access logs and security event logs are retained for a rolling period of 12 months, after which they are automatically purged.
- Support Communications: Customer support transcripts and email correspondence are retained for three years from the date of the last message in the relevant conversation thread, to support dispute resolution.
At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where anonymisation is applied, the resulting data no longer constitutes personal data and may be retained and used indefinitely for statistical analysis purposes.
9 Data Security
99ar applies a layered security architecture to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Our technical and organisational security measures include, but are not limited to:
- SSL/TLS encryption for all data transmitted between your device and the 99ar platform.
- AES-256 encryption for sensitive personal data and financial information stored on 99ar servers.
- Two-factor authentication (2FA) options for player accounts, providing an additional layer of protection beyond username and password.
- Regular penetration testing and vulnerability scanning carried out by independent security specialists.
- Role-based access controls ensuring that 99ar staff can only access personal data to the extent required for their specific job function.
- Strict vetting of third-party service providers who process personal data on our behalf, including contractual data processing agreements that impose security obligations equivalent to our own.
- Internal incident response procedures enabling rapid detection, containment, and notification in the event of a data security incident.
Notwithstanding these measures, no digital platform can guarantee absolute security against all possible threats. In the unlikely event of a data breach that poses a material risk to your rights and freedoms, 99ar will notify affected players promptly via the contact details held on their account and will take all reasonable steps to mitigate the impact of the breach.
Your Role in Account Security: The security measures described above are most effective when players also take responsibility for their own account credentials. Never share your 99ar password with anyone, do not use the same password across multiple websites, and enable two-factor authentication if available. If you suspect your credentials have been compromised, contact 99ar support immediately.
10 Your Data Rights
As a player on the 99ar platform, you hold the following rights in relation to the personal data we hold about you. To exercise any of these rights, contact our support team at [email protected] with your registered account details and a description of the right you wish to exercise. We will acknowledge your request within 48 hours and respond in full within 30 calendar days.
- Right of Access: You have the right to request a copy of the personal data 99ar holds about you, along with information about how it is processed, the purposes for which it is used, and the categories of third parties with whom it has been shared.
- Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal data held in your account profile. For certain data fields (such as your name or date of birth), correction may require submission of supporting documentary evidence.
- Right to Erasure: You have the right to request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent and no other legal basis exists, or where the data has been processed unlawfully. This right is subject to overriding legal obligations, including AML retention requirements.
- Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have disputed is being verified.
- Right to Object: You have the right to object to the processing of your personal data where that processing is based on legitimate interests. You also have an absolute right to object to the processing of your data for direct marketing purposes, with immediate effect.
- Right to Data Portability: Where processing is carried out by automated means on the basis of your consent or contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to have that data transmitted directly to another data controller where technically feasible.
- Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
Please note that some of these rights are not absolute and may be limited by competing legal obligations or the rights of third parties. Where we are unable to fulfil a request in full, we will explain the reason in our response.
11 Children & Minors
The 99ar platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, store, or process personal data belonging to any individual under the age of 21. Our registration process includes an age declaration requirement, and our KYC verification procedure is designed to identify and reject applications from individuals who cannot demonstrate that they meet the minimum age requirement.
If 99ar becomes aware that personal data has been collected from a person under the age of 21, we will immediately suspend the relevant account, delete the associated personal data (subject to any overriding legal retention obligations), and return any real money deposits to the original payment method used.
If you are a parent or guardian and believe that your child has registered an account on the 99ar platform, please contact us immediately at [email protected] with details of the account. We will investigate and act promptly.
Strict 21+ Age Policy: 99ar enforces a zero-tolerance policy on underage gambling. Age verification is conducted at registration and may be repeated at any point during the account lifecycle. Accounts suspected of being held by a person under 21 will be immediately suspended pending investigation.
12 Third-Party Links
The 99ar platform may contain references or links to third-party websites, game provider portals, or payment service landing pages. This Privacy Policy applies solely to personal data collected and processed by 99ar in connection with the 99ar platform at 99ar.io. It does not extend to any third-party website or service, regardless of how you reached that third-party destination.
99ar is not responsible for the privacy practices, data collection methods, security standards, or content of any third-party website or service. We strongly recommend that you read the privacy policy of any third-party service you access in connection with your use of the 99ar platform, including the privacy policies of payment partners such as bKash, Nagad, and Rocket.
13 Changes to This Privacy Policy
99ar reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform operations. When material changes are made — meaning changes that significantly affect how your personal data is processed or the rights available to you — we will notify you via the contact details held on your account at least 14 days before the updated policy takes effect.
Non-material changes (including corrections of typographical errors, clarifications that do not alter the substantive meaning of any provision, or updates required to reflect minor operational changes) may be published without individual prior notification. The current version of this Privacy Policy will always be accessible at 99ar.io/privacy-policy, along with its effective date. Continued use of the 99ar platform following the publication of any updated Privacy Policy constitutes acceptance of the revised terms.
We encourage you to review this Privacy Policy periodically to stay informed about how 99ar protects your personal data. The effective date displayed at the top of this document indicates when the current version was last reviewed and approved.
14 Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or to the way 99ar processes your personal data, please contact our support team using the details below. All privacy-related correspondence will be handled with strict confidentiality.
When contacting us regarding a data rights request, please include your registered username or email address, a description of the right you wish to exercise or the concern you wish to raise, and — if you are requesting access to or deletion of data — a copy of a government-issued identity document to confirm your identity. This is necessary to ensure we do not act on requests from unauthorised parties.
Ready to Play on Bangladesh's Trusted Platform?
Now that you know how 99ar protects your data, explore our full range of cricket betting markets, premium slots, and live casino tables — all available with instant bKash and Nagad deposits.