xx399 Privacy Policy — How We Handle Your Personal Data

When you create an xx399 account, we collect your full legal name, date of birth, phone number, email address, and residential address. This data is required to verify your identity (KYC), process payments, comply with anti-money laundering obligations, and operate your account. You may also be asked to provide a copy of a government-issued identity document such as a National Identity Card (NID) or passport as part of the KYC verification process.

We record all financial transactions made through your xx399 account, including deposit amounts, withdrawal requests, payment methods used (bKash, Nagad, Rocket, Upay, bank transfer), transaction timestamps, and transaction reference numbers. This data is retained as required by applicable financial regulations and our internal AML policies. We do not store full mobile wallet PINs or bank account passwords — payment authentication is handled directly by your chosen payment provider.

When you access xx399, our servers automatically record certain technical information including your IP address, device type, operating system, browser type and version, referring URL, pages visited within the platform, session duration, and clickstream data. This information is used to maintain platform security, diagnose technical problems, improve the user experience, and detect fraudulent activity. We may also use session tokens to maintain your login state between page loads.

We use your registration data to create and manage your xx399 account, process deposits and withdrawals, verify your identity in accordance with our KYC requirements, settle bets and game outcomes, and communicate with you about your account. This processing is necessary for the performance of our contract with you — without it, we cannot provide the xx399 service.

We use technical and account data to detect and prevent fraud, money laundering, multi-accounting, bonus abuse, and other prohibited conduct. This includes automated monitoring of transaction patterns, login activity, and betting behaviour. Where suspicious activity is detected, we may temporarily restrict account access pending investigation. We are legally obliged to report certain suspicious activities to relevant authorities.

We use anonymised and aggregated usage data to analyse how players interact with the platform, identify features that are underperforming, and inform decisions about new game additions, payment method integrations, and user interface improvements. This analysis does not identify you personally — it is performed on aggregated data sets that do not link back to individual accounts.

xx399 uses your account activity data to monitor for patterns that may indicate problem gambling behaviour, such as significantly increased deposit frequency, lengthening session times, or repeated attempts to circumvent self-imposed limits. Where such patterns are detected, xx399 may proactively contact you to offer responsible gaming resources or intervene in accordance with our responsible gaming policy.

Processing of registration data, transaction data, and KYC verification data is necessary for the performance of our contract with you (the Terms & Conditions you accepted when registering). Without this processing, we are unable to provide account services, process payments, or settle bets.

Certain processing activities — including AML transaction monitoring, KYC identity verification, and the retention of financial records — are required by applicable law. xx399 is legally obliged to perform these activities regardless of individual consent. Refusal to provide the data necessary for KYC or AML compliance will result in xx399 being unable to open or maintain your account.

To process deposits and withdrawals, xx399 transmits necessary transaction data to your chosen payment provider (bKash, Nagad, Rocket, Upay, or your bank). This data is limited to what is required to complete the transaction — typically a transaction amount, account reference, and confirmation identifier. Your payment provider's own privacy policy governs how they handle this data.

xx399 uses third-party game providers (including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe) to deliver game content. These providers may receive anonymised session identifiers or game-round data necessary to deliver the game experience and settle game outcomes. Game providers do not receive your full name, contact details, or payment data.

xx399 may disclose personal data to law enforcement agencies, regulatory bodies, or other authorities where required by applicable law, pursuant to a valid court order, or where disclosure is necessary to prevent or detect criminal activity, including fraud or money laundering. In such cases, xx399 will disclose only the minimum data necessary to comply with the legal requirement.

Essential cookies are required for the platform to function correctly. They maintain your login session, store your language preference, and preserve your game state between page loads. Essential cookies cannot be disabled without significantly impairing your ability to use the platform. They do not collect data for marketing or tracking purposes.

We use anonymised analytics cookies to understand how players navigate the platform — which pages are visited most often, where players drop off during the deposit flow, and which game categories generate the most engagement. This data is aggregated and cannot be used to identify you personally. You may opt out of analytics cookies by adjusting your browser settings; doing so will not affect your ability to use the platform.

You have the right to request a copy of the personal data xx399 holds about you. Upon a valid request, we will provide a summary of your personal data in a structured, readable format within five business days. This right is subject to verification of your identity before the data is released.

If you believe that any personal data xx399 holds about you is inaccurate or incomplete, you have the right to request that we correct it. You may also update certain account details (such as your contact phone number or email address) directly within your account settings, subject to re-verification.

You may request that xx399 delete your personal data and close your account. We will action this request promptly, subject to our obligation to retain certain data for a minimum period under applicable financial and regulatory law. Data that must be retained by law will be held securely and used only for compliance purposes until the applicable retention period expires.

Where xx399 processes your personal data on the basis of legitimate interests (for example, fraud monitoring or platform analytics), you have the right to object to that processing. We will review your objection and cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests, or where the processing is necessary for the establishment, exercise, or defence of legal claims.