Your privacy matters to us. This Privacy Policy explains exactly what personal data x999 collects, how it is used, who it may be shared with, and how you can exercise your rights as a data subject.
Notice: This Privacy Policy forms part of the x999 Terms & Conditions. By creating an account or using any service on the x999 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not consent, please do not register an account or use the x999 platform.
x999 ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of every individual who accesses or uses the x999 online gambling and sports betting platform at x999.today. This Privacy Policy describes our practices with respect to the collection, use, storage, disclosure, and protection of personal information relating to our registered Players and website visitors ("you", "your", "the User").
We recognise that trust is the foundation of any lasting relationship between a player and a gaming platform. That is why x999 does not treat privacy compliance as a tick-box exercise. We have designed our data practices to be proportionate, transparent, and genuinely in the interests of our Players — particularly those within Bangladesh who may use mobile financial services such as bKash, Nagad, or Rocket to fund their accounts.
This policy applies to all data processing activities carried out by x999, including those related to account registration, deposit and withdrawal transactions, sports betting, casino gaming, customer support interactions, and marketing communications. It applies regardless of the device or method you use to access the x999 platform.
Summary: x999 collects only the personal data necessary to operate the platform safely and legally. We do not sell your data. We do not share it with advertisers. We retain it only for as long as required by our operational and legal obligations.
For the purposes of applicable data protection law, x999 acts as the data controller in respect of all personal data collected from Players and visitors to x999.today. As data controller, x999 determines the purposes for which, and the means by which, your personal data is processed.
x999 operates as an offshore online gambling platform. Our data processing infrastructure includes servers and service providers located in multiple jurisdictions. Where personal data is transferred outside Bangladesh, x 999 takes appropriate safeguards to ensure your data remains protected to the same standard described in this Privacy Policy. See Section 10 for further details on international data transfers.
If you have any questions about how x999 processes your personal data, or wish to exercise any of your data subject rights, please contact us using the details provided in Section 15 of this Privacy Policy.
x999 collects the following categories of personal data from Players and website visitors. We collect only what is necessary for the purposes described in Section 5 of this Privacy Policy.
| Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, national ID number, passport number | Registration; KYC verification |
| Contact Data | Mobile number, email address, residential address (city, district, division) | Registration; account updates |
| Financial Data | bKash / Nagad / Rocket account numbers, bank account details, transaction amounts, deposit and withdrawal history | Deposit and withdrawal processing |
| Technical Data | IP address, device type, operating system, browser type, session tokens, login timestamps | Automatically on each visit |
| Usage Data | Pages visited, game titles played, bets placed, bet amounts, session duration, click patterns | Automatically during platform use |
| Communications Data | Content of support chat messages, email correspondence, complaint records | When you contact x999 support |
| Responsible Gaming Data | Deposit limit settings, self-exclusion requests, cooling-off periods, session alert configurations | When you use responsible gaming tools |
| Marketing Preferences | Opt-in or opt-out status for promotional communications, preferred contact channel | At registration or via account settings |
Special Category Data: x999 does not intentionally collect sensitive special-category personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data. Where health-related information is voluntarily disclosed to our support team in the context of a responsible gaming request, it will be treated with the highest degree of confidentiality and used only for the purpose for which it was disclosed.
x999 collects personal data through the following channels and mechanisms:
x999 processes personal data for the following specific purposes. For each purpose, we identify the legal basis on which that processing rests.
| Purpose | Data Categories Used | Legal Basis |
|---|---|---|
| Account registration and management | Identity, Contact | Contract performance |
| Age and identity verification (KYC) | Identity, Contact | Legal obligation; Contract performance |
| Processing deposits and withdrawals | Financial, Identity | Contract performance |
| Fraud prevention and anti-money-laundering | Identity, Financial, Technical, Usage | Legal obligation; Legitimate interests |
| Responsible gaming monitoring | Usage, Responsible Gaming | Legal obligation; Legitimate interests |
| Platform operation and security | Technical, Usage | Legitimate interests |
| Customer support and complaint handling | Identity, Contact, Communications | Contract performance; Legal obligation |
| Promotional communications | Contact, Marketing Preferences | Consent |
| Analytics and platform improvement | Technical, Usage | Legitimate interests |
Legitimate Interests: Where x999 relies on legitimate interests as a legal basis, we have conducted a balancing test to confirm that our interests do not override your rights and freedoms. You have the right to object to processing based on legitimate interests — see Section 11 for how to exercise this right.
x999 does not sell, rent, or trade your personal data to third parties for commercial purposes. We share personal data only where strictly necessary and only with the categories of recipient described below:
All third parties with whom x999 shares personal data are required to handle that data in a manner consistent with this Privacy Policy and applicable data protection standards. x999 does not permit third-party recipients to use your personal data for their own independent marketing or commercial purposes.
x999 uses cookies and similar tracking technologies to operate the platform, enhance your experience, and gather analytics data that helps us improve our services. The following categories of cookies are used on x999.today:
You may manage your cookie preferences through your browser settings. Disabling functional or analytics cookies will not prevent you from using the x999 platform, but may affect certain non-essential features. Disabling strictly necessary cookies may prevent the platform from functioning correctly.
Third-Party Cookies: Game content providers integrated into the x999 platform may set their own first-party cookies within the game frame to support game functionality and fairness auditing. x999 does not control the cookie practices of third-party game providers. Please refer to the relevant provider's privacy documentation for further information.
x999 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to applicable legal, regulatory, and operational retention obligations. The following general retention periods apply:
At the end of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of your identity.
x999 implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
Your Responsibility: While x999 employs robust security measures, the security of your account also depends on you. You are responsible for maintaining the confidentiality of your login credentials and for notifying x999 support immediately if you suspect unauthorised access to your account. x999 will never ask you for your password via email, chat, or telephone.
As an offshore gambling platform, x999 operates infrastructure and engages service providers across multiple jurisdictions. Personal data collected from Players in Bangladesh may therefore be transferred to, stored in, and processed in countries outside Bangladesh. These countries may have data protection laws that differ from those in force in Bangladesh.
Where personal data is transferred internationally, x999 takes appropriate safeguards to ensure that your data continues to be protected to the standard described in this Privacy Policy. These safeguards include:
By using the x999 platform, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Bangladesh as described in this section, subject always to the protections described in this Privacy Policy.
Subject to applicable data protection law, you have the following rights in relation to your personal data held by x999:
To exercise any of the above rights, please contact x999 support using the contact details in Section 15. x999 may need to verify your identity before processing a data subject rights request. x999 will not charge a fee for responding to a valid rights request unless the request is manifestly unfounded or excessive.
The x999 platform is strictly for adults aged 18 and above. x999 does not knowingly collect personal data from any person under the age of 18. If x999 discovers that personal data has been collected from a minor, that data will be immediately deleted, the associated account will be closed, any deposits will be returned to the originating payment method, and any winnings will be forfeited.
x999 employs electronic age verification checks during registration as a first line of defence against underage access. Where automated checks are inconclusive, x999 will suspend the account and request documentary proof of age before permitting any further use of the platform.
Parental Notice: If you believe that your child has registered an account on x999 or has otherwise provided personal data to x999, please contact our support team immediately using the contact details in Section 15. x999 will investigate and take appropriate action as a matter of priority. 18+
The x999 platform integrates content and services from third-party providers, including game studios, live dealer studios, and payment gateways. These integrations are necessary to deliver the full range of features available on x999. While x999 carefully selects its third-party partners, x999 does not control and is not responsible for the privacy practices of third-party providers operating within their own platforms or environments.
Where a third-party provider's service operates within an embedded frame or widget on x999.today — such as a live casino game studio stream — that provider may independently collect certain technical data such as your IP address and device information for game delivery and fairness auditing purposes. x999 recommends reviewing the privacy policies of game content providers whose titles you play regularly, including:
x999 does not embed social media plugins or advertising network trackers on x999.today. No third-party advertising network has access to your personal data or behavioural data collected on x999.
x999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or changes in the services we offer. The effective date at the top of this document will be updated whenever a revision is made.
Where an amendment is material — for example, where we introduce a new category of data processing or a new category of third-party recipient — x999 will provide registered Players with advance notice via the mobile number or email address held on their account, where technically feasible. Minor corrections and clarifications may be made without prior notice.
Your continued use of the x999 platform after the effective date of a revised Privacy Policy constitutes your acknowledgement and acceptance of the revised terms. If you do not agree with any change to this Privacy Policy, you should cease using the platform and may request account closure in accordance with the x999 Terms & Conditions.
If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or wish to raise a complaint about how x999 has handled your personal data, please contact our support team through the following channels:
x999 will acknowledge all privacy-related enquiries within 24 hours and will provide a substantive response within 10 business days. Where a complaint requires further investigation, x999 will keep you informed of progress at reasonable intervals.
If you are not satisfied with x999's response to a privacy complaint, you may have the right to escalate the matter to the relevant data protection supervisory authority in your jurisdiction. x999 encourages Players to contact us directly in the first instance so that we have the opportunity to resolve concerns promptly and fairly.
Last Updated: 1 January 2026. This version of the x999 Privacy Policy supersedes all previously published versions. Players who registered prior to this date are subject to these updated terms as of the effective date.
Privacy is not a feature — it is a fundamental principle of how x999 operates. Here is a summary of the protections in place for every Player on the platform.
Every data transmission between your device and x999.today is protected by 256-bit TLS/SSL encryption. Whether you are checking your balance, placing a cricket bet, or processing a bKash withdrawal, your data travels through an encrypted channel that prevents interception by third parties.
x999 has a strict policy against selling, renting, or trading Player personal data to advertisers, data brokers, or any commercial third party. Your mobile number, bKash account reference, and betting history are used solely to operate and improve the x999 platform — never monetised independently.
x999 offers SMS OTP two-factor authentication for all Player accounts. When enabled, a one-time passcode is sent to your registered mobile number each time you log in. This means that even if your password is compromised, your account remains protected without the OTP delivered to your registered device.
x999 collects only the personal data that is genuinely necessary to provide the services you have requested, to verify your identity, and to comply with our legal obligations. We do not collect data speculatively. Where data can be anonymised or aggregated for analytical purposes, we prefer that approach over retaining individually identifiable records.
x999 acknowledges and respects your data subject rights, including the right to access, correct, delete, and port your personal data. Rights requests are acknowledged within 24 hours and resolved within 30 days. x999 will never charge a fee for a valid data rights request, and will never retaliate against a Player for exercising their privacy rights.
x999 does not keep your personal data indefinitely. Every category of data is subject to a defined retention period aligned to its purpose and our legal obligations. When data is no longer needed, it is securely deleted or irreversibly anonymised. Players who close their accounts can expect their operational data to be purged on the schedule described in this Privacy Policy.
Your data is protected. Your identity is secure. Now explore everything the x999 platform has to offer — from live cricket betting to a full live casino, all payable in BDT via bKash and Nagad.
18+ For adults aged 18 and above only. Please gamble responsibly.