cx99 Privacy Policy

01 Information We Collect

cx99 collects personal data that is necessary to provide you with a safe, fair, and fully functional online gaming experience. We collect information in three primary ways: directly from you when you register or use the platform, automatically as you interact with our services, and occasionally from trusted third parties for identity verification and fraud prevention purposes.

1.1 Information You Provide Directly

When you create a cx99 account or interact with our platform, you may provide the following categories of personal data:

1.2 Information Collected Automatically

When you access cx99, our systems automatically collect certain technical and behavioural data to ensure the security and performance of the platform:

• Device & Technical Data: IP address, browser type and version, operating system, device identifiers, screen resolution, and time zone settings.
• Usage Data: Pages visited, games played, session duration, betting history, bet amounts, and game outcomes.
• Log Data: Access logs, error logs, and security event logs maintained for fraud detection and platform integrity.
• Cookie Data: Session tokens and anonymous analytics identifiers. See Section 5 for full cookie details.

1.3 Information from Third Parties

cx99 may receive limited personal data from trusted third-party sources in specific circumstances:

• Identity Verification Providers: Third-party KYC services may confirm identity document authenticity and cross-reference national identity databases to prevent fraud.
• Payment Processors: bKash, Nagad, Rocket, Upay, and partner banks may share transaction confirmation data to reconcile your deposit and withdrawal records.
• Fraud Prevention Services: Risk-scoring providers may supply device fingerprint or behavioural risk signals to support cx99's anti-fraud controls.

02 How We Use Your Personal Data

cx99 uses the personal data we collect for clearly defined purposes. We do not process your data in ways that are incompatible with the reason it was originally collected. The primary purposes for which cx99 processes personal data are set out below.

2.1 Account Management & Platform Operation

We use your registration and identity data to create and manage your cx99 account, authenticate your logins, process deposits and withdrawals, maintain your gaming history and account balance, and provide you with access to all platform features including slots, live casino games, cricket betting, and basketball markets.

2.2 Identity Verification & Age Compliance

cx99 is strictly an 18+ platform. We process identity and date-of-birth data to verify that all registered players meet the minimum age requirement before they are permitted to deposit or play. Age and identity verification is a legal and operational obligation — accounts cannot be fully activated without it.

2.3 Payment Processing

Financial data including your bKash, Nagad, Rocket, Upay, or bank account details are processed solely for the purpose of executing the deposit and withdrawal transactions you initiate. cx99 does not store full card numbers. Payment data is handled in accordance with applicable payment security standards.

2.4 Security, Fraud Prevention & AML Compliance

cx99 monitors account activity, transaction patterns, and login behaviour to detect and prevent fraud, money laundering, and account takeover attempts. Where suspicious activity is identified, cx99 may freeze the relevant account pending investigation and, where legally required, report the matter to the appropriate authorities. This processing is carried out in the legitimate interests of cx99 and its player community.

2.5 Customer Support

When you contact cx99 support via live chat or email, the content of your communication — including your account details and the nature of your query — is processed to resolve your issue, maintain a support history, and improve the quality of our service.

2.6 Responsible Gaming

cx99 processes gameplay data, deposit frequency, session duration, and account activity patterns to monitor for signs of problem gambling behaviour. Where such indicators are detected, cx99 may proactively reach out with responsible gaming information or apply platform-level protections. This processing is carried out in the vital interests of player welfare.

2.7 Platform Improvement & Analytics

Aggregated, anonymised usage data is analysed to understand how players navigate cx99, which games are most popular, and where technical improvements are needed. This analytics processing does not involve identifying individual players by name and is carried out in cx99's legitimate interests to maintain and improve the platform.

2.8 Marketing Communications

With your explicit consent at the time of registration (or subsequently via your account communication preferences), cx99 may send you promotional emails or in-app notifications about new games, seasonal bonuses (including BPL season, Eid, and Pohela Boishakh promotions), and platform updates. You may withdraw this consent and unsubscribe from marketing communications at any time via your account settings or by contacting [email protected].

03 Legal Basis for Processing

For each category of personal data cx99 processes, we rely on one or more of the following legal bases. This section provides transparency about why cx99 is entitled to process your data for each stated purpose.

Where cx99 relies on legitimate interests as the legal basis for processing, we have assessed that our interests do not override your fundamental privacy rights, taking into account the limited sensitivity of the data involved and the reasonable expectations of players using an online gaming platform.

04 Data Sharing & Third Parties

cx99 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share personal data only in the limited circumstances described below, and only with partners who are contractually obligated to protect it.

4.1 Service Providers & Data Processors

cx99 works with a small number of carefully selected third-party service providers who process personal data on our behalf and under our instructions. These include:

• Payment Processors: bKash, Nagad, Rocket, Upay, and partner banks process the financial data needed to execute your transactions. Each provider operates under their own regulatory obligations and data protection policies.
• Identity Verification Services: Third-party KYC providers receive scans of identity documents to confirm authenticity and cross-reference identity records. These providers are bound by strict data processing agreements.
• Game Content Providers: Game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive session identifiers and bet data necessary to deliver and settle game rounds. These providers do not receive your identity or financial data.
• Cloud & Infrastructure Providers: cx99's platform is hosted on secure cloud infrastructure. The hosting provider processes server log data but has no access to cx99 player account details or financial records.
• Analytics Providers: Anonymised, aggregated usage data may be processed by analytics tools. No personally identifiable information is shared with analytics providers.

4.2 Legal Disclosure

cx99 may disclose your personal data to law enforcement agencies, regulatory bodies, or other governmental authorities where required to do so by applicable law, court order, or where cx99 has a good-faith belief that disclosure is necessary to prevent fraud, protect player safety, or protect the legal rights of cx99.

4.3 Business Transfers

In the event that cx99 undergoes a merger, acquisition, or sale of all or part of its business assets, player personal data may be transferred as part of that transaction. In such circumstances, cx99 will notify affected players prior to their data being subject to a different privacy policy.

4.4 What We Never Do

• We never sell your personal data to advertisers or data brokers.
• We never share your data with other gambling platforms or competitors.
• We never share your financial data with game studios.
• We never provide your contact details to third parties for their own marketing use.

05 Cookies & Tracking Technologies

cx99 uses cookies and similar technologies to keep the platform functional, secure, and performant. This section explains what cookies we use, why we use them, and how you can control them.

5.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember information about your visit — such as your login session or language preferences — so you do not have to re-enter it on each page. Cookies cannot run programs, carry viruses, or access files on your device.

5.2 Cookies cx99 Uses

5.3 What cx99 Does Not Use

• cx99 does not use third-party advertising cookies or retargeting pixels.
• cx99 does not use cross-site tracking technologies that follow you to other websites.
• cx99 does not embed third-party social media tracking scripts on any page.

5.4 Managing Cookies

You can control and delete cookies through your browser settings at any time. Instructions for the most common browsers are available at the browser manufacturer's support pages. Please note that disabling essential session cookies will prevent you from logging in to your cx99 account, as these are technically necessary for the platform to function.

06 Data Security & Retention

6.1 Security Measures

cx99 implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Key measures include:

• 256-bit SSL/TLS Encryption: All data in transit between your device and cx99 servers is encrypted using industry-standard TLS 1.2 or higher.
• Encryption at Rest: Sensitive data fields including identity documents and financial data are encrypted at rest within cx99's database infrastructure.
• Access Controls: Access to personal data is restricted to cx99 staff who require it to perform their job functions, governed by role-based access control and multi-factor authentication.
• Security Monitoring: cx99 operates continuous monitoring of platform infrastructure for intrusion attempts, anomalous access patterns, and data exfiltration indicators.
• Penetration Testing: cx99's systems are subject to periodic security assessments by qualified third-party security professionals.

6.2 Data Breach Response

In the event of a confirmed personal data breach that poses a risk to the rights and freedoms of affected players, cx99 will notify affected individuals promptly with details of the nature of the breach, the data involved, and the steps being taken to address it. cx99 maintains an internal incident response plan for this purpose.

6.3 Data Retention Periods

cx99 retains personal data only for as long as necessary for the purpose for which it was collected, or as required by applicable law. The following indicative retention periods apply:

On expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to any individual player. Account data for closed accounts is anonymised within 90 days where no legal retention obligation applies.

07 Your Privacy Rights

As a cx99 player, you have meaningful rights over your personal data. cx99 is committed to honouring these rights promptly and without unnecessary barriers. The following rights are available to you:

7.1 Right of Access

You have the right to request a copy of all personal data cx99 holds about you. This is commonly known as a Subject Access Request (SAR). cx99 will provide a structured summary of your data within 30 days of a verified request, free of charge for reasonable requests.

7.2 Right to Rectification

If any personal data cx99 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (such as updating a mobile number) can be made directly through your account dashboard. For corrections to identity data, verification documentation may be required.

7.3 Right to Erasure

You may request that cx99 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where processing has been unlawful. cx99 will assess each erasure request individually. Where legal retention obligations prevent full deletion, cx99 will inform you of the specific data that cannot be deleted and the reason why.

7.4 Right to Restriction

You have the right to request that cx99 restrict processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or where you have objected to processing based on legitimate interests and cx99 is assessing the objection.

7.5 Right to Data Portability

Where processing is based on your consent or on performance of a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format (such as CSV or JSON) for the purpose of transferring it to another service provider.

7.6 Right to Object

You have the right to object to cx99 processing your personal data where that processing is based on legitimate interests, including profiling for responsible gaming monitoring. cx99 will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests. You have an unconditional right to object to processing for direct marketing purposes at any time.

7.7 Right to Withdraw Consent

Where cx99 processes your personal data based on your consent (for example, for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal. To withdraw marketing consent, update your preferences in your account dashboard or contact [email protected].

7.8 How to Exercise Your Rights

To exercise any of the rights described above, contact the cx99 support team by emailing [email protected] with the subject line "Privacy Rights Request". Please include your registered account email address and a brief description of the right you wish to exercise. cx99 will acknowledge your request within 5 business days and aim to fulfil it within 30 calendar days. For complex or multiple requests, this period may be extended by a further 30 days, in which case cx99 will notify you of the extension and the reason.

08 Contact Us & Data Protection

8.1 Data Controller

cx99 is the data controller responsible for personal data collected through the cx99.club platform. As data controller, cx99 determines the purposes and means of processing your personal data in accordance with this Privacy Policy.

8.2 Contact Information

For all privacy-related queries, data rights requests, or concerns about how cx99 handles your personal data, please contact us using the following details:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line for Data Requests: "Privacy Rights Request"
• Subject Line for Complaints: "Privacy Complaint"
• Live Chat: Available 24/7 from within your cx99 account dashboard
• Response Time: Acknowledgement within 5 business days; full response within 30 calendar days
• Support Hours: Around the clock, Bangladesh Standard Time (BST, UTC+6)

8.3 Updates to This Privacy Policy

cx99 reviews this Privacy Policy periodically and may update it to reflect changes in our data practices, platform features, or applicable legal requirements. The effective date at the top of this document indicates when the most recent revision was made. For material changes that affect how your data is processed, cx99 will notify registered players via account notification or email prior to the change taking effect. Your continued use of the cx99 platform following any update constitutes acceptance of the revised Privacy Policy.

8.4 Children's Privacy

cx99 is strictly an 18+ platform. We do not knowingly collect personal data from individuals under the age of 18. If cx99 becomes aware that personal data has been collected from an individual under 18, that data will be deleted immediately and the associated account closed. Parents or guardians who believe their child has registered on cx99 should contact us immediately at [email protected].