ox99 Privacy Policy

1. Introduction

ox99 is Bangladesh's most trusted online betting and casino platform, providing sports betting, live casino, slots and other gaming products to players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi and beyond. We are committed to handling the personal data of every player and visitor with transparency, integrity and the highest standards of information security.

This Privacy Policy sets out in clear and formal terms what personal data ox99 collects, the purposes for which that data is processed, the legal bases on which processing is carried out, how data is stored and protected, how long it is retained, with whom it may be shared, and what rights individuals hold in relation to their own personal data.

This policy should be read alongside the ox99 Terms & Conditions and the ox99 Responsible Gaming policy, both of which are incorporated by reference into the overall framework of obligations governing use of the platform.

2. Data Controller

For the purposes of this Privacy Policy, ox99 acts as the data controller in respect of all personal data collected from players and visitors through the ox99 platform. As data controller, ox99 determines the purposes and means of processing personal data and is responsible for ensuring that processing is carried out in accordance with applicable data protection standards.

All enquiries, access requests, correction requests and deletion requests relating to personal data held by ox99 should be directed to the ox99 Data & Privacy team via the contact details set out in Section 12 of this policy.

3. Personal Data We Collect

ox99 collects personal data in the following categories. The specific data points collected from any individual player will depend on the nature and extent of their interaction with the platform.

ox99 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data (beyond identity document photographs required for KYC), health data or data concerning sexual orientation, except where strictly required by applicable law or regulatory obligation.

4. How We Collect Your Data

ox99 collects personal data through the following channels:

• Directly from you: When you complete the registration form, submit identity verification documents, make a deposit or withdrawal request, contact customer support, respond to a survey, or interact with any other data-input feature of the platform.
• Automatically: When you visit the ox99 website, our servers automatically collect device and session data including your IP address, browser type, operating system and pages visited. This data is collected through server logs and, where applicable, cookies and similar tracking technologies.
• From third-party payment processors: When you initiate a deposit or withdrawal via bKash, Nagad, Rocket or Upay, the relevant payment processor transmits transaction confirmation data to ox99 to allow the transaction to be recorded and reflected in your account balance.
• From identity verification providers: Where ox99 uses a third-party provider to assist with the verification of identity documents, that provider may share verification results and related data with ox99.
• From fraud prevention services: ox99 may receive data from third-party fraud detection and risk management services to assist in identifying and preventing fraudulent activity on the platform.

5. Legal Basis for Processing

ox99 processes personal data only where a valid legal basis exists for doing so. The primary legal bases on which ox99 relies are as follows:

• Contract performance: Processing that is necessary for the performance of the contract between ox99 and a registered player — including account creation, deposit processing, withdrawal processing, wager settlement and customer support — is carried out on the basis of contract performance.
• Legal obligation: Processing that is required in order for ox99 to comply with applicable legal obligations — including identity verification, transaction record-keeping, fraud prevention reporting and responses to lawful information requests from competent authorities — is carried out on the basis of legal obligation.
• Legitimate interests: Processing that is necessary for the legitimate interests of ox99 — including the detection and prevention of fraud, the improvement of platform security, the analysis of aggregate platform usage data for product development, and the enforcement of these Terms & Conditions — is carried out on the basis of legitimate interests, provided that those interests are not overridden by your rights and freedoms.
• Consent: Where ox99 seeks to process your data for a purpose that is not covered by the above bases — such as sending you promotional communications about new games or offers — we will obtain your explicit consent before doing so. You may withdraw consent at any time by contacting support.

6. How We Use Your Personal Data

ox99 uses the personal data it collects for the following specific purposes:

6.1 Account Management

To create, maintain and administer your ox99 account, including verifying your identity at registration and at withdrawal, managing your account settings, processing password reset requests, and communicating account-related service notifications to you via your registered mobile number.

6.2 Payment Processing

To process BDT deposits and withdrawals through your registered mobile wallet (bKash, Nagad, Rocket or Upay), to record all transaction activity in your account history, and to investigate and resolve any payment-related disputes or discrepancies.

6.3 Fraud Prevention and Platform Security

To detect, investigate and prevent fraudulent transactions, account takeovers, money laundering, bonus abuse, multi-accounting, match-fixing and other prohibited activities. This may involve automated analysis of transaction patterns and behavioural data, as well as manual review by ox99's risk and compliance team.

6.4 Responsible Gaming

To support the operation of ox99's responsible gaming programme, including monitoring for patterns of play that may indicate problem gambling behaviour, administering self-exclusion requests and deposit limit changes, and communicating with players regarding responsible gaming resources available through the platform.

6.5 Customer Support

To respond to your enquiries, process your support tickets, investigate complaints, and maintain records of communications for quality assurance and dispute resolution purposes.

6.6 Legal and Regulatory Compliance

To comply with applicable legal obligations, to respond to lawful requests from competent authorities, and to establish, exercise or defend legal claims arising in connection with the operation of the ox99 platform.

6.7 Platform Improvement

To analyse aggregate, anonymised usage data for the purposes of improving the ox99 platform, optimising the user experience, developing new product features, and understanding how players interact with different games and services. Individual player data used for this purpose is anonymised prior to analysis wherever possible.

7. Sharing Your Personal Data

ox99 does not sell, rent or trade player personal data to third-party marketing organisations or data brokers under any circumstances. ox99 shares personal data only in the following limited circumstances:

• Payment processors: Transaction data is shared with bKash, Nagad, Rocket and Upay to the extent necessary to process deposits and withdrawals on your behalf. Each payment processor operates under its own privacy policy and handles data in accordance with its applicable terms.
• Identity verification providers: Where required for KYC compliance, ox99 may share identity document data with third-party verification service providers. These providers are contractually obligated to process the data solely for verification purposes and to maintain appropriate security standards.
• Game suppliers: ox99 integrates games provided by third-party suppliers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe and Ezugi. Minimal session data may be shared with these suppliers to facilitate game delivery and to support dispute resolution in connection with specific game outcomes.
• Fraud prevention services: ox99 may share relevant data with third-party fraud detection and risk management service providers to identify and prevent fraudulent activity.
• Legal authorities: ox99 will disclose personal data to competent legal or regulatory authorities where required to do so by law, court order or other legally binding obligation, or where ox99 reasonably believes disclosure is necessary to prevent imminent harm or illegal activity.
• Business transfers: In the event of a merger, acquisition, restructuring or sale of all or part of the ox99 business, player data may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and of any resulting changes to this Privacy Policy.

8. Cookies and Tracking Technologies

ox99 uses cookies and similar tracking technologies to support the operation of the platform, to maintain your logged-in session, to remember your preferences, and to collect aggregate usage statistics that help us understand how players interact with the website.

8.1 Types of Cookies Used

• Strictly necessary cookies: Required for the platform to function. These include session cookies that maintain your login state and security cookies that protect against cross-site request forgery. These cookies cannot be disabled without impairing platform functionality.
• Functional cookies: Used to remember your preferences, such as your preferred language setting and responsible gaming configuration. These cookies improve your experience but are not strictly required for the platform to operate.
• Analytics cookies: Used to collect aggregate, anonymised data about how visitors use the ox99 website, including which pages are most visited, how long sessions last and which features are most used. This data is used solely for the purposes of platform improvement and is not used to identify individual users.

8.2 Managing Cookies

Most modern web browsers allow you to control cookies through your browser settings. You may choose to block or delete cookies at any time; however, blocking strictly necessary cookies will prevent you from logging into your ox99 account and using real-money platform features. Blocking functional or analytics cookies will not affect your ability to use the platform but may result in a less personalised experience.

9. Data Retention

ox99 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable legal or regulatory obligations. The following general retention periods apply:

• Account data: Retained for the full duration of your account and for a period of five years following account closure, to support the resolution of any post-closure disputes and to meet record-keeping obligations.
• Transaction records: Retained for a minimum of five years from the date of the transaction, in compliance with applicable financial record-keeping requirements.
• Identity verification documents: Retained for the duration of your account and for a minimum of five years following account closure.
• Betting and gaming history: Retained for the duration of your account and for a period of two years following account closure, after which it is anonymised or deleted.
• Customer support communications: Retained for a period of three years from the date of the most recent communication in a given support thread.
• Device and technical data: Retained for a period of twelve months from collection, after which aggregate data may be retained in anonymised form for analytical purposes.

When personal data is no longer required for any purpose and no legal obligation requires its continued retention, ox99 will securely delete or irreversibly anonymise the data.

10. Data Security

ox99 employs a range of technical and organisational security measures to protect the personal data it holds against unauthorised access, accidental loss, destruction or disclosure. These measures include:

• SSL/TLS encryption: All data transmitted between your device and the ox99 platform is encrypted in transit using SSL/TLS technology. You can verify the security of your connection by checking for the padlock icon in your browser's address bar when accessing https://ox99.io.
• Encryption at rest: Sensitive stored data, including identity verification documents and financial records, is encrypted at rest using industry-standard encryption algorithms.
• Access controls: Access to player data within ox99's internal systems is restricted to authorised personnel whose roles require access for specific operational purposes. Access is governed by role-based permissions and is logged and audited.
• Secure infrastructure: The ox99 platform is hosted on secure infrastructure with regular security patching, vulnerability assessments and penetration testing conducted by qualified security professionals.
• Incident response: ox99 maintains an internal data breach response procedure. In the event of a data breach that poses a risk to player rights and interests, ox99 will notify affected players promptly and will take all appropriate remedial action.

11. Your Data Rights

As a data subject, you hold the following rights in relation to the personal data ox99 holds about you. To exercise any of these rights, please contact the ox99 support team as described in Section 12.

ox99 will respond to all valid data rights requests within a reasonable period. In some cases, ox99 may need to verify your identity before processing a request. Where a request is refused, ox99 will provide a written explanation of the reasons for the refusal.

12. Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or to the personal data ox99 holds about you, please contact the ox99 Data & Privacy team using the details below. All privacy-related communications are handled in English.

Please note that the email address above is displayed as plain text and is not a clickable link. Type it directly into your email client to contact us. ox99 will never ask you to send passwords or full payment credentials via email.

13. Updates to This Privacy Policy

ox99 reserves the right to update, amend or replace this Privacy Policy at any time. Changes may be necessary to reflect updates to the platform, changes in applicable law, new data processing activities, or feedback received from players and regulators. The effective date displayed at the top of this page will be updated each time a new version is published.

Where a change is material — for example, where ox99 introduces a new category of data processing or a new category of third-party data sharing that was not previously covered — ox99 will make reasonable efforts to notify registered players of the change in advance. For non-material changes, the updated policy will be published at https://ox99.io/privacy-policy without separate notification.

Your continued use of the ox99 platform following the publication of any update to this Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the updated policy, you should close your account and cease using the platform. To close your account, contact the ox99 support team.