99obd Privacy Policy

99obd operates the online betting and casino platform accessible at https://99obd.io. We are the data controller for all personal information collected from players who register, deposit, play, or otherwise interact with the 99obd platform. Throughout this Privacy Policy, "99obd", "we", "us", and "our" refer to the platform operator. "Player", "you", and "your" refer to any individual who accesses or uses the platform, whether as a registered account holder or as an anonymous visitor.

99obd is built specifically for the Bangladesh market, offering cricket betting, live casino, slots, and table games with BDT deposits and withdrawals via bKash, Nagad, Rocket, and major Bangladeshi banks. Our support team operates on Bangladesh Standard Time (BST, UTC+6) and is available 24 hours a day, 7 days a week.

99obd collects personal data across several categories. The table below summarises the types of data collected and a brief description of each category:

We do not collect special-category data (such as racial or ethnic origin, political opinions, health data, or biometric identifiers) except where age verification documents incidentally include such information — in which case that information is not processed beyond confirming identity and age.

99obd collects personal data through the following means:

• Direct submission: When you register an account, complete identity verification, make a deposit, request a withdrawal, contact support, or fill in any form on the platform, you provide data directly to us.
• Automated collection: As you browse and use the platform, our servers and analytics tools automatically record technical and behavioural data including IP address, page views, game sessions, click paths, and session timestamps.
• Cookies and similar technologies: The 99obd website uses cookies, local storage, and session storage to maintain login state, remember preferences, prevent fraud, and measure platform performance. See Section 7 for full details.
• Payment processors: When you make a deposit or withdrawal via bKash, Nagad, Rocket, or a partner bank, the relevant payment processor confirms the transaction status and associated wallet or account reference to 99obd. We do not receive full payment credentials; only the reference needed to credit or debit your 99obd balance.
• Identity verification providers: Where third-party KYC (Know Your Customer) services are used to verify government-issued ID documents, those providers share a verification result and document metadata with 99obd. Document images are processed by the KYC provider under their own privacy terms and are not stored by 99obd beyond what is legally required.
• Third-party game studios: Game providers such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi may transmit game session data to 99obd for the purposes of settling bets and maintaining accurate account records.

99obd processes your personal data for the following specific purposes:

• Account creation and management: To register your account, maintain your profile, process login requests, and manage your account settings and preferences.
• Financial transactions: To process deposits from and withdrawals to your bKash, Nagad, Rocket, or bank account; to maintain an accurate ledger of your balance; and to reconcile transaction records.
• Identity and age verification: To confirm that you are at least 21 years of age and that the identity you have registered matches the payment methods you use, in compliance with our Know Your Customer obligations.
• Fraud prevention and security: To detect and prevent account takeover, payment fraud, money laundering, duplicate accounts, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions.
• Customer support: To respond to your enquiries, resolve disputes, process complaints, and provide assistance with account or payment issues.
• Platform improvement: To analyse aggregated usage patterns, identify technical errors, improve game performance, and develop new features. Where possible, this analysis uses anonymised or aggregated data that cannot identify individual players.
• Legal and regulatory compliance: To maintain records as required by applicable law, respond to lawful information requests from authorities, and enforce our Terms & Conditions.
• Responsible gaming: To monitor gaming behaviour for indicators of potential problem gambling, enforce deposit limits and self-exclusion settings you have applied, and communicate responsible gaming resources where appropriate.
• Marketing communications: Where you have provided explicit consent, to send you promotional offers, bonus notifications, and platform updates via email or SMS. You may withdraw marketing consent at any time from your account settings.

For each processing activity described in Section 4, 99obd relies on one or more of the following legal bases:

• Contract performance: Processing necessary to fulfil our obligations under the account agreement with you — including operating your account, processing bets, and managing payments.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering rules, age verification requirements, and responses to lawful government or law enforcement requests.
• Legitimate interests: Processing conducted for the legitimate interests of 99obd and its players where those interests are not overridden by your rights — including fraud detection, platform security, abuse prevention, and analytics for service improvement.
• Consent: Processing carried out only where you have given a clear, freely given, specific, and informed consent — principally for marketing communications and for optional personalisation features. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

99obd does not sell your personal data to any third party under any circumstances. We share data only in the limited situations described below, and only to the minimum extent necessary:

• Payment processors: bKash, Nagad, Rocket, Upay, and partner banks receive the transaction data necessary to execute your deposit or withdrawal. Each payment processor operates under its own privacy policy and is independently responsible for data it holds.
• KYC and identity verification providers: Third-party KYC services receive your identity documents solely to verify your name, age, and document authenticity. These providers are contractually bound to process data only for that purpose.
• Game content providers: Licensed game studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) receive your player identifier and session data necessary to operate their games within the 99obd environment. They do not receive your full identity or financial data.
• IT and infrastructure providers: Cloud hosting, CDN, and security service providers who process data on our behalf under strict data processing agreements that prohibit them from using your data for their own purposes.
• Legal and regulatory authorities: We may disclose personal data to law enforcement agencies, regulatory bodies, or courts when required to do so by law, or when we have a good-faith belief that disclosure is necessary to prevent fraud, protect the rights of 99obd or its players, or respond to a lawful legal process.
• Business transfers: In the event that 99obd undergoes a merger, acquisition, or sale of all or part of its assets, player data may be transferred to the acquiring entity. We will notify affected players in advance and the receiving entity will be bound by obligations no less protective than those in this Privacy Policy.

All third-party processors engaged by 99obd are required to implement appropriate technical and organisational security measures and are contractually prohibited from using player data for purposes beyond those specified in their service agreement with 99obd.

The 99obd platform uses cookies and similar client-side storage technologies to deliver a functional, secure, and personalised experience. The following cookie categories are in use:

• Strictly necessary cookies: Required for the platform to function. These include session tokens that maintain your logged-in state, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Remember your preferences such as language selection, preferred game lobby view, and notification settings. Disabling these may reduce platform convenience but will not prevent access.
• Analytics cookies: Used to measure how players navigate the platform — which pages are visited most, how long sessions last, and where technical errors occur. Analytics data is aggregated and does not identify individual players by name. 99obd uses this data solely to improve the platform.
• Security and fraud-detection cookies: Help identify suspicious login patterns, unusual device changes, and potential account takeover attempts. These are active at all times for the protection of your account.

99obd does not use third-party advertising networks or behavioural tracking cookies that follow you across other websites. No cross-site tracking data is collected or shared with advertising platforms.

99obd retains personal data for the periods set out below. Once the applicable retention period expires, data is securely deleted or irreversibly anonymised:

Where data must be retained for legal reasons beyond the standard retention period — for example, in connection with an ongoing investigation, litigation, or regulatory enquiry — data will be held until the relevant matter is resolved and then deleted within 30 days of resolution.

99obd implements a layered security architecture to protect player data from unauthorised access, disclosure, alteration, or destruction. Key technical and organisational measures in place include:

• Transport encryption: All data transmitted between your browser or device and the 99obd platform is encrypted using TLS 1.2 or higher. The platform enforces HTTPS across all pages and all API endpoints.
• At-rest encryption: Player databases and file stores are encrypted at rest using AES-256 or equivalent industry-standard encryption.
• Password security: Passwords are never stored in plain text. They are processed through an adaptive, salted hashing algorithm (bcrypt or equivalent), making them computationally infeasible to reverse even in the event of a database compromise.
• Access controls: Internal access to player data is restricted on a strict need-to-know basis. Staff with access to personal data undergo mandatory security awareness training. Administrative access requires multi-factor authentication.
• Intrusion detection: Automated systems monitor the platform continuously for unusual access patterns, injection attempts, and other indicators of compromise. Security incidents trigger an immediate response protocol.
• Regular security reviews: 99obd conducts periodic security assessments of its infrastructure, code, and third-party integrations to identify and remediate vulnerabilities proactively.

While 99obd maintains robust security practices, no system connected to the internet can guarantee absolute security. Players are encouraged to use a strong, unique password for their 99obd account and to contact support immediately if they notice any suspicious activity on their account.

As a player on the 99obd platform, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team at [email protected] with the subject line "Data Rights Request":

• Right of access: You may request a copy of the personal data 99obd holds about you. We will provide this in a structured, commonly used format within 30 days of receiving a verified request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You can update basic profile information directly in your account settings; for identity document corrections, please contact support.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data. This right is subject to legal retention obligations — for example, financial transaction records must be retained for 7 years. Where deletion is not possible, we will explain why and confirm what data has been anonymised instead.
• Right to restriction: You may ask 99obd to restrict the processing of your data — for example, while a dispute is being resolved or an inaccuracy is being corrected. Restricted data will not be processed beyond storage until the restriction is lifted.
• Right to data portability: You may request your personal data in a machine-readable format (such as JSON or CSV) so that it can be transferred to another service provider. This right applies to data you provided directly and that is processed on the basis of consent or contract.
• Right to object: You may object to processing of your data based on legitimate interests, and to all processing for direct marketing purposes. Where you object to direct marketing, processing for that purpose will cease immediately upon receipt of your objection.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

The 99obd platform is strictly for adults aged 21 and above. 21+ We do not knowingly collect personal data from any person under the age of 21. Age verification is a mandatory step in the account lifecycle, and accounts where the registered player is found to be under 21 will be immediately suspended and closed.

If you believe that a minor has registered on the 99obd platform using false age information, please contact our support team immediately at [email protected]. We will investigate and, where confirmed, close the account, void any balance generated, and delete the minor's personal data to the extent permitted by law.

Parents and guardians are encouraged to use parental control software to prevent minors from accessing online gambling platforms. Third-party tools such as GamBlock and Betfilter are available independently of 99obd for this purpose.

The 99obd platform may contain references to third-party game providers, payment processors, and service partners. Where the platform links to or integrates with third-party services, those services operate under their own privacy policies. 99obd is not responsible for the privacy practices of any third party, and this Privacy Policy does not cover data collected by third parties through their own interfaces.

Players are encouraged to review the privacy policies of any third-party service they interact with — particularly payment wallet providers such as bKash, Nagad, and Rocket — as those policies govern how those providers handle the data associated with your wallet account.

99obd reviews and updates this Privacy Policy periodically to reflect changes in our data practices, platform features, or applicable legal requirements. When we make a material change — one that meaningfully affects how we collect, use, or share your personal data — we will provide notice via a prominent banner on the platform and, where we hold a current email address, by email to your registered address.

Minor changes such as clarifications, reformatting, or corrections to typographical errors will be made without advance notice. The "Last Updated" date at the top of this page will always reflect when the most recent version was published. We recommend reviewing this page periodically to stay informed about how 99obd protects your data.

Continued use of the 99o bd platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the revised terms. If you do not agree with a material change, you should close your account and cease using the platform before the change takes effect.

For any questions, concerns, or formal requests relating to this Privacy Policy or your personal data, please contact the 99obd data team using the details below. All communications must be in English and should clearly identify your registered account username or email address so we can verify your identity before processing your request.

If you are dissatisfied with our response to a data request or believe that 99obd has not handled your personal data in accordance with this Privacy Policy, you have the right to escalate the matter through our formal complaints process. Submit a written complaint to [email protected] with the subject line "Formal Data Complaint". We will acknowledge your complaint within 24 hours and provide a substantive resolution within 5 business days.

For responsible gaming concerns, self-exclusion requests, or crisis support, please visit our Responsible Gaming page where you will find a full list of self-management tools and third-party support organisations available to players in Bangladesh.