xc999 Privacy Policy

xc999 collects personal data through several channels: directly from you during registration and account use, automatically through your interaction with the platform, and — in limited circumstances — from third-party identity verification and payment processing partners. The categories of data we collect are described below.

Registration and Identity Data

When you create an xc999 account, we collect the information you provide during the registration process. This includes:

• Your full legal name as it appears on your government-issued identity document.
• Your date of birth, used to confirm that you meet the 18+ age requirement for xc999 services.
• Your mobile phone number, used for account access, transaction notifications, and support communications.
• Your preferred mobile financial service account details (bKash, Nagad, Rocket, or Upay wallet number), used exclusively for processing deposits and withdrawals.
• A secure password of your creation, stored only as a hashed and salted value — never in plain text.

If age or identity verification is requested as part of xc999's KYC (Know Your Customer) process, you may also be asked to submit a copy of your National Identity Card (NID), passport, or another form of government-issued identification. These documents are handled with heightened security protocols and retained only for as long as required by our compliance obligations.

Transaction and Financial Data

For every deposit and withdrawal processed through xc999, we maintain a transaction record that includes:

• The transaction amount in Bangladeshi Taka (৳).
• The date, time (in BST, UTC+6), and status of each transaction.
• The masked mobile wallet identifier (e.g., the last four digits of your bKash number) associated with the transaction.
• Transaction reference numbers provided by the payment gateway.

Full wallet account numbers and PIN codes are never stored by xc999. Payment authorisation is handled exclusively through each wallet provider's secure API.

Gameplay and Betting Data

xc999 records all wagering activity associated with your account, including bet amounts, game titles played, sports events wagered on, outcomes, and timestamps. This data is used to calculate balances accurately, resolve disputes, detect fraud, and comply with audit requirements. It also enables xc999 to monitor gameplay patterns for responsible gaming purposes.

Technical and Device Data

When you access xc999 through a browser or mobile device, our servers automatically log certain technical information. This includes your IP address, device type, operating system version, browser type and version, session duration, and the pages or game titles you interact with. This data is used for platform security, fraud detection, and performance optimisation — it is not used to build individual advertising profiles.

Communications Data

If you contact xc999 support via live chat, or communicate with us through any other supported channel, the content and metadata of those communications are retained. This is necessary to resolve your enquiry accurately, maintain service quality, and provide an audit trail in the event of a formal complaint or dispute.

xc999 processes your personal data only for lawful, specified, and transparent purposes. We do not use your data for any purpose that has not been described in this Privacy Policy. The primary purposes for which xc999 uses personal data are set out below.

xc999 will only send promotional or marketing communications to players who have explicitly opted in to receive them. You may withdraw your consent to marketing communications at any time by contacting xc999 support via live chat.

xc999 does not sell, rent, or trade your personal data to any third party. Personal data is shared with external parties only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.

Payment Processing Partners

To process deposits and withdrawals, xc999 shares the minimum necessary transaction data with the relevant mobile financial service provider — bKash, Nagad, Rocket, or Upay — or with international card networks where Visa or Mastercard payments are used. These providers act as independent data controllers for the portions of the transaction they process and are governed by their own privacy policies.

Identity Verification Providers

Where enhanced KYC checks are required, xc999 may use a third-party identity verification service to validate the authenticity of documents submitted by players. These providers process identity documents solely for verification purposes and are contractually prohibited from retaining or using that data for any other purpose.

Game Software Providers

xc999's casino and sports betting products are powered by third-party game studios and platform providers, including Pragmatic Play, Evolution Gaming, Spribe, and others. These providers may receive anonymised session and gameplay data necessary to deliver the game experience and calculate results. They do not receive your name, phone number, or financial details.

Legal and Regulatory Disclosure

xc999 may be required to disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory bodies where we receive a lawful request, court order, or are under a legal obligation to do so. xc999 will notify affected players of such disclosures where legally permitted.

Business Transfers

In the event of a merger, acquisition, or sale of all or part of xc999's business assets, personal data held by xc999 may be transferred to the acquiring entity as part of that transaction. Affected players will be notified prior to any transfer of their personal data and will be informed of any material changes to the applicable privacy policy.

xc999 uses cookies and similar tracking technologies to ensure the platform functions correctly and to improve your experience as a user. This section explains what cookies are, which types xc999 uses, and how you can manage your cookie preferences.

What Are Cookies?

Cookies are small text files that are stored on your device when you visit a website. They allow the website to recognise your device on subsequent visits, remember your preferences, and maintain session state across pages. Cookies do not contain executable code and cannot directly access other files on your device.

Types of Cookies Used by xc999

• Strictly necessary cookies: These cookies are essential for the xc999 platform to function. They maintain your login session, preserve your account settings between pages, and ensure that transactions are processed correctly. These cookies cannot be disabled without preventing the platform from working as intended.
• Performance and analytics cookies: xc999 uses anonymised analytics data to understand how players interact with the platform — such as which game categories are most visited, where users navigate after the homepage, and how long sessions typically last. This data is aggregated and does not identify individual users.
• Functional cookies: These cookies remember your preferences — such as your preferred language setting or the last game category you browsed — so that xc999 can provide a more personalised experience on your next visit.
• Security cookies: xc999 uses session-integrity and anti-fraud cookies to detect and prevent suspicious activity, including bot traffic, credential-stuffing attempts, and duplicate session detection. These cookies are a critical component of xc999's platform security infrastructure.

Managing Cookies

You can control cookie settings through your browser preferences. Most modern browsers allow you to view, block, or delete cookies on a per-site basis. Please note that disabling strictly necessary cookies will impair or prevent your ability to use the xc999 platform. Disabling functional or analytics cookies will not prevent you from using xc999, but may reduce the quality of your experience.

xc999 does not use third-party advertising cookies or behavioural tracking cookies designed to serve targeted advertisements across other websites. Your browsing activity on xc999 is not shared with advertising networks.

xc999 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, audit, or compliance obligations. The general retention periods applied by xc999 are outlined below.

At the end of the applicable retention period, xc999 will securely delete or anonymise the relevant personal data so that it can no longer be associated with an identifiable individual. If you have requested account closure and all applicable retention periods have elapsed, xc999 will confirm the deletion of your data upon request.

xc999 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security framework includes the following controls.

• Encryption in transit: All data exchanged between your device and xc999 is encrypted using TLS 1.2 or higher. Connections over unencrypted HTTP are automatically redirected to HTTPS.
• Encryption at rest: Sensitive data fields — including identity document copies, hashed passwords, and financial records — are stored using AES-256 encryption on xc999's server infrastructure.
• Access controls: Access to personal data within xc999's internal systems is restricted on a strict need-to-know basis. Staff members are granted only the minimum data access required to perform their specific roles. All internal access is logged and audited.
• Password security: Player passwords are never stored in plain text. xc999 uses industry-standard cryptographic hashing with salting to ensure that even in the unlikely event of a data breach, passwords cannot be reconstructed from stored values.
• Fraud detection systems: xc999 operates continuous automated monitoring for anomalous account behaviour, including unusual login patterns, atypical transaction volumes, and signs of account takeover attempts. Suspicious activity triggers automated protective responses and human review.
• Incident response: In the event of a confirmed data security incident affecting personal data, xc999 will take immediate containment action, assess the scope and impact of the incident, and notify affected players and relevant authorities as required and as promptly as circumstances allow.

While xc999 takes every reasonable precaution to protect your data, no online platform can guarantee absolute security against all possible threats. Players are strongly encouraged to use strong, unique passwords for their xc999 accounts and to avoid accessing the platform over unsecured public Wi-Fi networks.

As a user of the xc999 platform, you hold a number of rights in relation to the personal data we process about you. xc999 is committed to honouring these rights promptly and transparently. Your rights are summarised below.

• Right of access: You may request a copy of all personal data that xc999 holds about you. xc999 will provide this in a structured, commonly used format within 30 days of receiving your verified request.
• Right to rectification: If any personal data xc999 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic account details directly from your xc999 account dashboard; for corrections to identity or verification records, please contact support.
• Right to erasure: Subject to applicable legal retention obligations, you may request that xc999 delete your personal data. xc999 will explain clearly if any data must be retained and for how long, before proceeding with any deletion that is permissible.
• Right to restriction of processing: In certain circumstances — for example, while a data accuracy dispute is being investigated — you may request that xc999 restrict its processing of your personal data to storage only, pending resolution.
• Right to data portability: Where xc999 processes your data on the basis of consent or contract performance, and where that processing is carried out by automated means, you may request a machine-readable export of your personal data for transfer to another service provider.
• Right to withdraw consent: Where xc999 processes your data on the basis of your consent — for example, for marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. To withdraw consent, contact xc999 support via live chat.
• Right to object: You may object to xc999 processing your personal data where that processing is based on legitimate interest, including profiling for responsible gaming monitoring purposes. xc999 will consider your objection carefully and will cease the relevant processing unless there are compelling legitimate grounds that override your interests.

To exercise any of the above rights, please contact the xc999 support team via the live chat feature available in your account dashboard. xc999 will verify your identity before actioning any data rights request, to ensure that personal data is not disclosed or altered as a result of a fraudulent or mistaken request. All verified requests will be responded to within 30 days.

xc999 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, new regulatory requirements, or improvements to our platform. When material changes are made, xc999 will notify registered players via their account notification feed or, where appropriate, via direct communication to their registered contact details.

The effective date at the top of this Privacy Policy will always reflect when the current version came into force. Players are encouraged to review this page periodically. Continued use of xc999 following the publication of an updated Privacy Policy constitutes acceptance of the revised terms.

Contact for Privacy Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way xc999 handles your personal data, please contact the xc999 support team. The preferred contact channel is the live chat feature available directly from your xc999 account dashboard, which operates 24 hours a day, seven days a week.

For written enquiries, you may also reach xc999 by email. The xc999 support email address is displayed as plain text below — please note it is not a clickable link:

[email protected]

All times referenced in xc999 communications are Bangladesh Standard Time (BST, UTC+6). xc999 aims to respond to all privacy-related enquiries within five working days of receipt.