a99 Privacy Policy — How We Handle Your Personal Data

1 Introduction

a99 takes the privacy of its players seriously. This Privacy Policy describes how a99 collects, stores, uses, and protects the personal data of everyone who uses the a99 platform — whether you are a registered player, a visitor browsing the a99 website, or someone who has downloaded the a99 app without yet creating an account.

When we say "a99", "we", "us", or "our" in this policy, we are referring to the operator of the a99 platform at a99.pro. When we say "you" or "your", we mean any individual whose personal data a99 processes in connection with the use of the a99 platform.

This Privacy Policy should be read alongside the a99 Terms and Conditions. Together, these two documents form the complete agreement between you and a99 regarding your use of the platform and the handling of your personal information.

2 Data We Collect

a99 collects personal data in two ways: data you provide directly when using the platform, and data that is collected automatically as you interact with a99. Here is a breakdown of both categories.

Data you provide to a99:

• Full legal name and date of birth provided during a99 account registration.
• Contact information including your mobile number and email address.
• Payment information including your bKash or Nagad account number used for deposits and withdrawals at a99.
• Identity verification documents such as a national ID or passport, if requested by a99 for account verification purposes.
• Communications you send to a99 support, including chat transcripts and email correspondence.

Data collected automatically when you use a99:

• Device information including device type, operating system, and browser version.
• IP address and approximate geographic location at the time of login.
• Session data including login times, pages visited on a99, and time spent on each page.
• Game activity data including bets placed, games played, and outcomes at a99.
• Cookie and tracking data as described in Section 6 of this policy.

3 How We Use Your Data

a99 uses the personal data it collects for specific, legitimate purposes. We do not use your data in ways that are incompatible with the purposes described below. Here is how a99 uses your information:

• Account management: a99 uses your identity and contact data to create and maintain your player account, verify your identity, and communicate with you about your account.
• Payment processing: a99 uses your financial data to process deposits and withdrawals via bKash and Nagad, and to maintain accurate transaction records.
• Platform security: a99 uses technical and usage data to detect and prevent fraud, unauthorised account access, and other security threats to the a99 platform.
• Regulatory compliance: a99 uses identity and financial data to comply with anti-money laundering (AML) obligations and to respond to lawful requests from regulatory or law enforcement authorities.
• Responsible gaming: a99 uses game activity data to monitor for signs of problem gambling and to apply responsible gaming tools where appropriate.
• Platform improvement: a99 uses aggregated, anonymised usage data to understand how players interact with the platform and to improve the a99 experience over time.
• Marketing communications: With your consent, a99 may use your contact data to send you information about promotions, new games, and platform updates. You can opt out at any time.

4 Legal Basis for Processing

a99 processes your personal data on one or more of the following legal bases, depending on the specific purpose of the processing:

• Contract performance: Processing your data is necessary to provide you with the a99 service you have signed up for, including account management and payment processing.
• Legal obligation: a99 is required by law to collect and retain certain data, including identity verification records and financial transaction logs, for AML compliance purposes.
• Legitimate interests: a99 processes certain data — such as technical and usage data — on the basis of its legitimate interest in operating a secure, functional, and fraud-free platform.
• Consent: Where a99 processes your data for marketing purposes, it does so on the basis of your explicit consent, which you can withdraw at any time.

5 Data Sharing

a99 does not sell your personal data. a99 shares your data only in the following limited circumstances:

• Payment processors: a99 shares the minimum necessary financial data with bKash and Nagad to process your deposits and withdrawals. These providers are bound by their own privacy policies and data protection obligations.
• Game providers: Some games on the a99 platform are provided by third-party game studios. These providers may receive anonymised session data to support game functionality and fairness auditing. They do not receive your identity or contact data.
• Legal and regulatory authorities: a99 may disclose your personal data to law enforcement, regulatory bodies, or courts where required to do so by applicable law or in response to a valid legal order.
• Business transfers: In the event that a99's business is acquired or merged with another entity, your personal data may be transferred as part of that transaction. You will be notified in advance if this occurs.

6 Cookies and Tracking

a99 uses cookies and similar tracking technologies to operate the platform, remember your preferences, and understand how players use the a99 website and app. Here is what you need to know about how a99 uses cookies:

• Essential cookies: These are required for the a99 platform to function. They keep you logged in, maintain your session, and enable core features. You cannot opt out of essential cookies without stopping use of a99.
• Functional cookies: These remember your preferences on a99, such as your preferred language or display settings, so you do not have to set them every time you visit.
• Analytics cookies: a99 uses anonymised analytics data to understand which parts of the platform are most used and where improvements can be made. This data does not identify you personally.
• Security cookies: a99 uses cookies to detect suspicious login activity and protect your account from unauthorised access.

You can manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the a99 platform.

7 Data Retention

a99 retains your personal data for as long as your account is active and for a period after account closure as required by law or legitimate business need. Specifically:

• Account and identity data is retained for a minimum of five years after account closure to comply with AML and financial record-keeping obligations.
• Transaction records are retained for a minimum of five years from the date of each transaction.
• Support communications are retained for two years from the date of the last interaction.
• Marketing consent records are retained for as long as you remain opted in, plus one year after opt-out to demonstrate compliance.
• Anonymised analytics data may be retained indefinitely as it cannot be used to identify any individual.

When the applicable retention period expires, a99 will securely delete or anonymise your personal data so that it can no longer be associated with you.

8 Data Security

a99 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:

• End-to-end encryption for all data transmitted between your device and the a99 platform.
• Encryption at rest for all personal data stored on a99's servers.
• Access controls that restrict which a99 staff members can access personal data, based on their role and the minimum necessary access principle.
• Regular security audits and penetration testing of the a99 platform infrastructure.
• Two-factor authentication options for a99 player accounts to prevent unauthorised login.
• Automated monitoring systems that detect and alert a99's security team to unusual account activity in real time.

Despite these measures, no online platform can guarantee absolute security. If a99 becomes aware of a data breach that is likely to affect your rights or freedoms, a99 will notify you promptly and take immediate steps to contain the breach.

9 Your Rights

As an a99 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact a99 support with your request. a99 will respond within 30 days.

10 Children's Privacy

The a99 platform is strictly for adults aged 18 and over. a99 does not knowingly collect personal data from anyone under the age of 18. If a99 discovers that a player account belongs to a person under 18, the account will be closed immediately, all data will be deleted, and any deposited funds will be returned to the original payment source.

If you are a parent or guardian and believe that a minor has registered at a99, please contact a99 support immediately at [email protected]. a99 will investigate and act promptly.

11 Changes to This Policy

a99 may update this Privacy Policy from time to time to reflect changes in the platform, applicable law, or industry best practices. When material changes are made, a99 will notify registered players via email or an in-platform notification at least 7 days before the changes take effect.

The "Last Updated" date at the top of this page will always reflect when the most recent revision was made. a99 recommends that you review this Privacy Policy periodically to stay informed about how your data is being handled.

12 Contact Us

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or have a concern about how a99 has handled your personal information, please get in touch with the a99 privacy team.

• Email: [email protected]
• Live Chat: Available within your a99 account after login, 24 hours a day.
• Response time: a99 aims to respond to all privacy-related queries within 2 business days and to complete data subject requests within 30 days.

For concerns that cannot be resolved directly with a99, you may escalate the matter to the relevant data protection authority in your jurisdiction.