xx998 Privacy Policy

1 Information We Collect

xx998 collects personal data from you through a variety of channels during your registration, account management, and use of our services. The categories of data we collect are described below.

1.1 Registration Data

When you create an xx998 account, we collect the following information:

• Full legal name as it appears on your official identity document
• Date of birth (to verify that you are 18 years of age or older)
• Residential address in Bangladesh (city, district, postal code)
• Email address and mobile phone number
• Username and encrypted password

1.2 Identity Verification Data

In order to comply with Know Your Customer (KYC) obligations and age verification requirements, xx998 may request copies of:

• National Identity Card (NID)
• Valid passport or birth certificate
• Proof of residential address (utility bill, bank statement dated within 90 days)
• Proof of payment method ownership (screenshot of bKash, Nagad, or Rocket account registered in your name)

1.3 Financial Transaction Data

When you deposit or withdraw funds, xx998 records the transaction amount in BDT (৳), the payment method used (e.g., bKash, Nagad, Rocket, Upay, bank transfer), the transaction date and time in Bangladesh Standard Time (BST, UTC+6), and the transaction reference number provided by the payment provider. xx998 does not store full card numbers or mobile banking PINs — payment credentials are handled directly by the relevant payment service provider.

1.4 Gameplay and Betting Data

xx998 maintains a full record of your betting and gaming activity on the platform. This includes bet amounts, game selections, odds accepted, outcomes, session durations, and account balance history. This data is used to settle bets accurately, calculate bonuses, detect irregularities, and fulfil responsible gaming obligations.

1.5 Technical and Device Data

When you access xx998, our servers automatically collect certain technical information, including your IP address, browser type and version, operating system, device type (mobile or desktop), referring URL, pages visited within xx998, and session timestamps. This data is used for security monitoring, fraud prevention, and platform performance analysis.

1.6 Communications Data

If you contact xx998 support by email or live chat, we retain a record of the correspondence, including your name, contact details, and the full content of the communication. This allows us to track resolution of your enquiry and maintain a consistent service history.

2 How We Use Your Data

xx998 uses the personal data we collect for specific, clearly defined purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which xx998 processes your personal data are as follows:

2.1 Marketing Communications

With your explicit consent at registration, xx998 may send you promotional communications about bonuses, new game releases, cricket betting markets, and seasonal offers relevant to Bangladesh (for example, Eid promotions, BPL season specials, or T20 World Cup offers). You may withdraw this consent and opt out of marketing communications at any time by updating your account notification preferences or by contacting support at [email protected]. Withdrawal of marketing consent does not affect the lawfulness of processing that occurred before withdrawal.

2.2 Automated Decision-Making

xx998 uses automated systems to detect potentially fraudulent transactions, suspicious betting patterns, and bonus abuse. Where automated processing produces a decision that significantly affects your account (for example, a temporary account freeze pending investigation), you have the right to request that a human member of xx998 staff reviews that decision. To exercise this right, contact support at [email protected].

3 Legal Basis for Processing

xx998 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing that is required to perform the contract between you and xx998 — for example, processing your deposit, settling your bets, and maintaining your account balance. Without this processing, xx998 cannot provide you with its services.
• Legal obligation: Processing that xx998 is required to carry out in order to comply with applicable legal requirements, including anti-money-laundering obligations, age verification requirements, and record-keeping obligations.
• Legitimate interests: Processing carried out for xx998's legitimate business interests, including fraud prevention, platform security monitoring, responsible gaming compliance, and improving the quality of our services — provided these interests are not overridden by your own rights and interests.
• Consent: Processing based on your freely given, specific, and informed consent — primarily in the context of marketing communications. You may withdraw consent at any time without detriment to your account.

Where xx998 relies on legitimate interests as the legal basis for processing, we have carried out a balancing assessment and are satisfied that our legitimate interests do not override your fundamental privacy rights. You may request further information about any such assessment by contacting support.

4 Data Sharing & Disclosure

xx998 does not sell, rent, or otherwise trade your personal data. We share personal data with third parties only in the specific circumstances described below, and only to the minimum extent necessary for the stated purpose.

4.1 Payment Service Providers

To process your deposits and withdrawals, xx998 shares the necessary transaction data with the relevant payment service provider — for example, bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, or Sonali Bank. Each of these providers operates under its own privacy policy and data protection obligations. xx998 shares only the data strictly required to execute the transaction.

4.2 Game Providers

xx998 uses third-party game software from providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. To deliver these games within the xx998 platform, a unique anonymous session token is passed to the game provider. No name, email address, or financial information is shared with game providers.

4.3 Identity Verification Partners

xx998 may engage a third-party identity verification service to assist with KYC checks. Any data shared with such a provider is subject to a data processing agreement that restricts the provider to processing your data solely for the purpose of verification on xx998's behalf.

4.4 Legal and Regulatory Disclosure

xx998 may disclose your personal data to competent authorities, law enforcement agencies, or courts if required to do so by applicable law, court order, or regulatory directive. xx998 will, where legally permitted, notify you of any such disclosure request before complying.

4.5 Business Transfers

In the event that xx998 undergoes a merger, acquisition, or sale of all or substantially all of its assets, your personal data may be transferred to the successor entity as part of that transaction. You will be notified by email prior to any such transfer, and this Privacy Policy will continue to govern your data until a new policy is communicated to you.

5 Cookies & Tracking Technologies

xx998 uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your login session, and analyse aggregate usage patterns. The following categories of cookies are used on the xx998 platform:

5.1 Strictly Necessary Cookies

These cookies are essential for the xx998 website to function. They enable core features such as session authentication, security token management, and load balancing. The platform cannot function correctly without these cookies, and they cannot be disabled. No personal data collected by strictly necessary cookies is used for marketing purposes.

5.2 Functional Cookies

Functional cookies allow xx998 to remember choices you have made — for example, your preferred language, your most recently used payment method, and your display preferences. These cookies enhance your experience but are not required for core functionality. You may disable functional cookies via your browser settings, though doing so may affect certain platform features.

5.3 Analytics Cookies

xx998 uses aggregated, anonymised analytics data to understand how players navigate the platform, which features are most used, and where technical issues occur. Analytics data does not identify individual players and is used solely to improve platform performance and user experience. xx998 does not use third-party advertising networks or cross-site tracking technologies.

5.4 Managing Cookies

You can control cookie settings through your web browser. Most modern browsers allow you to block, delete, or receive alerts about cookies. Please note that blocking all cookies may prevent certain parts of the xx998 platform from functioning correctly. For guidance on managing cookies in your specific browser, refer to your browser's help documentation.

6 Data Retention

xx998 retains personal data only for as long as it is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active account data: Retained for the full duration of your account relationship with xx998, plus a minimum period of 5 years following account closure to meet anti-money-laundering record-keeping obligations.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction, in accordance with financial record-keeping requirements.
• KYC and identity verification documents: Retained for a minimum of 5 years following account closure or the last transaction, whichever is later.
• Customer support communications: Retained for 3 years from the date of the last communication in a given support thread, unless the subject matter relates to an ongoing dispute or legal matter.
• Marketing consent records: Retained until consent is withdrawn plus 1 year, to demonstrate the lawfulness of any marketing communications sent during the consent period.
• Technical and device logs: Retained for 12 months from the date of collection, after which they are automatically deleted unless required for an ongoing security investigation.

Where xx998 is required by law to retain data for longer than the periods stated above, the longer statutory retention period will apply. Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with xx998's internal data disposal procedures.

7 Your Privacy Rights

As a data subject, you hold a number of rights in relation to the personal data that xx998 holds about you. xx998 is committed to honouring these rights within the timeframes described below. To exercise any of the following rights, please contact our support team at [email protected] with the subject line "Privacy Rights Request".

• Right of Access: You may request a copy of all personal data that xx998 holds about you. We will provide this within 30 days of receiving your verified request.
• Right to Rectification: If any data we hold is inaccurate or incomplete, you may request that we correct or complete it. We will action verified correction requests within 14 days.
• Right to Erasure ("Right to be Forgotten"): Subject to overriding legal retention obligations, you may request deletion of your personal data. We will respond to erasure requests within 30 days, confirming either the deletion or the legal basis on which we are required to retain the data.
• Right to Restrict Processing: You may request that xx998 restrict the processing of your data in certain circumstances — for example, while the accuracy of data is being contested or while an objection to processing is being assessed.
• Right to Data Portability: Where processing is based on your consent or a contractual necessity, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on xx998's legitimate interests at any time. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

xx998 will respond to all privacy rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reason for it within the initial 30-day window.

8 Data Security Measures

xx998 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Our primary security controls include the following:

• SSL/TLS encryption for all data transmitted between your device and xx998 servers.
• Encryption at rest for stored personal data, identity documents, and financial records.
• Password hashing using industry-standard one-way hashing algorithms — xx998 never stores your password in plain text.
• Role-based access controls ensuring that internal staff can only access the personal data categories required for their specific job function.
• Continuous security monitoring for unusual login patterns, suspicious transactions, and potential data breach indicators.
• Regular security assessments and penetration testing of the xx998 platform infrastructure.
• Staff training on data protection obligations and secure data handling procedures.

Despite these measures, no online platform can guarantee absolute security. In the unlikely event of a data breach that poses a risk to your rights and freedoms, xx998 will notify affected players without undue delay and will take all reasonable steps to mitigate the impact of the breach.

8.1 Your Responsibility

You are responsible for maintaining the confidentiality of your xx998 account credentials. xx998 will never ask you to disclose your password by email, telephone, or live chat. If you believe your account credentials have been compromised, please change your password immediately and contact our support team at [email protected].

8.2 Policy Updates

xx998 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or regulatory requirements. When material changes are made, we will post a prominent notice on the xx998 platform and update the effective date at the top of this document. We encourage you to review this policy periodically. Your continued use of the xx998 platform following notification of any change constitutes your acceptance of the updated policy.

8.3 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which xx998 handles your personal data, please contact our Data Protection team at [email protected]. We are committed to resolving all privacy-related enquiries promptly and transparently. If you are not satisfied with our response, you retain the right to escalate your complaint to the relevant data protection authority in your jurisdiction.