eg99 Privacy Policy

eg99 is an online betting and casino platform operating at eg99.io, offering sports betting (including cricket, football, kabaddi, and other sports popular in Bangladesh), live casino games, slots, poker, crash games, and related gaming services to eligible adult players.

For the purposes of this Privacy Policy, " eg99", "we", "us", and "our" refer to the eg99 platform and its operating entity. "You" and "your" refer to any individual who visits, registers on, or otherwise interacts with eg99.io.

If you have any questions about who controls your personal data or how to exercise your rights, please contact us at the details provided in Section 15 of this policy.

We collect various categories of personal data depending on how you interact with eg99. The table below summarises the primary categories of data we collect and examples of the specific data points within each category.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or biometric data for the purpose of uniquely identifying a natural person — except where national ID photographs are submitted as part of mandatory identity verification (KYC), in which case that data is used solely for verification purposes and is not processed for any other purpose.

eg99 collects personal data through the following means:

• Direct interactions: Data you provide when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, respond to a survey, or opt in to marketing communications.
• Automated technologies: When you access eg99.io, we automatically collect technical and usage data via cookies, web beacons, server logs, and similar tracking technologies. This happens regardless of whether you are logged in to an account.
• Payment providers: When you make a deposit or request a withdrawal via bKash, Nagad, Rocket, Upay, SureCash, Visa, or Mastercard, the relevant payment provider transmits transaction confirmation data to eg99 to credit or debit your wallet.
• Identity verification partners: We may use third-party KYC verification services to validate the authenticity of identity documents submitted during account registration or withdrawal processing. These partners transmit verification outcomes and risk scores to eg99.
• Game software providers: Our third-party game providers (such as Pragmatic Play, Evolution Gaming, and Spribe) transmit game session data — including round IDs, stakes, and outcomes — to eg99 in real time for settlement and record-keeping purposes.
• Fraud and security systems: Our automated fraud detection and anti-money laundering (AML) systems generate risk assessments based on your account behaviour, transaction patterns, and device fingerprint data.

eg99 uses the personal data we collect for the following purposes:

• Account management: To create, maintain, and administer your eg99 account, including processing your registration, verifying your eligibility, and managing your account settings.
• Identity verification (KYC): To verify your identity and age (21+) in compliance with our platform policies and to prevent underage gambling and fraud.
• Payment processing: To process deposits and withdrawals via your chosen local payment method (bKash, Nagad, Rocket, etc.) and to maintain accurate financial records of all transactions.
• Game and betting services: To provide, operate, and settle sports bets, casino games, poker sessions, crash games, and all other gaming products available on eg99.
• Bonus and promotions: To assess your eligibility for bonuses and promotional offers, apply qualifying credits to your account, and track wagering requirements.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, bonus abuse, money laundering, account takeovers, and other prohibited activities on the platform.
• AML compliance: To monitor transactions for suspicious activity in accordance with applicable anti-money laundering obligations.
• Responsible gaming: To monitor gameplay patterns for indicators of problem gambling, to apply deposit limits or cooling-off periods where requested, and to process self-exclusion requests promptly.
• Customer support: To respond to your enquiries, resolve complaints, and maintain records of all support interactions for quality assurance purposes.
• Platform improvement: To analyse usage data, identify technical issues, test new features, and improve the overall experience of eg99 for players across Bangladesh.
• Marketing (where opted in): To send you promotional emails or SMS messages about new games, bonuses, seasonal promotions (such as BPL or Eid offers), and platform updates — but only where you have given explicit consent to receive such communications.
• Legal and regulatory compliance: To retain records as required by applicable law and to respond to valid requests from regulatory or law enforcement authorities.

We do not use your personal data for automated decision-making that produces significant legal or similarly significant effects on you, except where you have been flagged by our fraud detection or AML systems — in which case, human review is conducted before any account action is taken.

eg99 processes your personal data on one or more of the following legal bases, depending on the specific purpose of processing:

• Contractual necessity: Processing that is necessary to perform our contract with you — specifically, to provide you with the betting and gaming services you have registered for, process your financial transactions, and manage your account.
• Legal obligation: Processing that is required to comply with applicable legal or regulatory obligations, including KYC identity verification, AML transaction monitoring, and record-keeping requirements.
• Legitimate interests: Processing that is necessary for eg99's legitimate business interests, including fraud prevention, platform security, improving our services, and ensuring the integrity of our games — provided that these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing that you have explicitly agreed to, specifically the sending of direct marketing communications via email or SMS. You may withdraw your consent to marketing at any time by contacting [email protected] or using the unsubscribe option in any marketing message.

Where processing is based on legitimate interests, you have the right to object to that processing. See Section 10 for details of your rights and how to exercise them.

eg99 does not sell your personal data to third parties. We share your data only in the following limited circumstances and with the following categories of recipients:

• Payment providers: bKash, Nagad, Rocket, Upay, SureCash, Visa, and Mastercard receive the minimum data necessary to process your deposit or withdrawal transaction.
• KYC and identity verification services: Third-party providers engaged to verify the authenticity of identity documents and assess age eligibility receive copies of your submitted KYC documents and return verification outcomes to eg99.
• Game software providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, PG Soft, Play'n GO, Ezugi, and Spribe receive your player session data for the purpose of game delivery and real-time settlement. These providers operate under data processing agreements with eg99.
• Fraud and AML monitoring services: Specialist third-party platforms that assist eg99 in detecting suspicious transactions, identifying multi-accounting, and flagging AML risks may process transaction and device data on our behalf.
• IT and hosting providers: Our cloud infrastructure and hosting providers store platform data on servers under appropriate data security controls.
• Legal and regulatory authorities: We may disclose your data to law enforcement agencies, regulatory bodies, or courts where we are legally required to do so, or where disclosure is necessary to protect the safety of users or the integrity of the platform.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of eg99's business, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections being maintained.

All third parties with whom eg99 shares personal data are contractually required to handle that data securely, use it only for the specific purpose for which it was shared, and not to disclose it to further parties without authorisation.

eg99 uses cookies and similar tracking technologies on eg99.io to provide core platform functionality, analyse site usage, and — where you have consented — to deliver relevant promotional content. The following categories of cookies are used:

• Strictly necessary cookies: These cookies are essential for the platform to function. They include session cookies that keep you logged in while you navigate between pages, security tokens that prevent cross-site request forgery, and load-balancing cookies. These cookies cannot be disabled without breaking core platform functionality.
• Functional cookies: These cookies remember your preferences, such as your preferred language, display settings, and recently played games, so you do not need to reconfigure them each time you visit.
• Analytics cookies: We use anonymised analytics tools to understand how players interact with eg99.io — including which pages are visited most frequently, where users navigate from, and how long sessions last. This data helps us identify areas for improvement. Analytics data is aggregated and does not identify you personally.
• Marketing and targeting cookies: Where you have provided consent, these cookies allow us to show you relevant promotional content based on your platform activity and to measure the effectiveness of our campaigns. You may withdraw consent to marketing cookies at any time.

You can manage your cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies, although doing so may impair your experience on eg99.io, particularly for strictly necessary cookies. Detailed instructions for managing cookies are available in the help section of your browser.

We do not use cookies to collect your payment card details, passwords, or any other sensitive financial data — these are handled exclusively via secure, encrypted channels.

eg99 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account data and KYC documents: Retained for a minimum of five (5) years following the closure or permanent suspension of your account. This retention period reflects standard record-keeping requirements for AML compliance.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Gameplay and betting logs: Retained for a minimum of two (2) years from the date of each game session or bet, and up to five (5) years where records are relevant to an ongoing dispute, investigation, or legal proceeding.
• Support communications: Retained for three (3) years from the date of the most recent interaction on a given support ticket or email thread.
• Marketing consent records: Retained for the duration of your account plus two (2) years following account closure, to demonstrate compliance with consent requirements.
• Technical and usage data (anonymised): Anonymised analytics data may be retained indefinitely for statistical and platform improvement purposes, as it no longer constitutes personal data once anonymised.

Where your account is closed following a self-exclusion request, we retain a record of your self-exclusion status to prevent inadvertent re-registration during the exclusion period. This record is used solely for the purpose of enforcing the exclusion and is not used for any other processing purpose.

At the end of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data disposal procedures.

eg99 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption: All data transmitted between your browser or device and eg99.io is encrypted using industry-standard SSL/TLS encryption, preventing interception of data in transit.
• Encrypted storage: Sensitive data fields — including passwords (stored as hashed values), national ID numbers, and payment account references — are stored in encrypted form in our databases.
• Access controls: Access to systems containing personal data is restricted to authorised eg99 personnel and authorised third-party processors only. Access rights are granted on a least-privilege basis and are reviewed regularly.
• Intrusion detection: We operate automated systems that monitor our infrastructure for signs of unauthorised access, unusual traffic patterns, and potential security breaches.
• Secure development practices: Our development team follows security best practices including input validation, parameterised database queries, and regular security patching of platform software and dependencies.
• Third-party security assessments: We periodically engage independent parties to assess the security posture of our platform, including penetration testing of critical systems.

While we take all reasonable steps to protect your data, no online platform can guarantee absolute security. In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected users in a timely manner and take all necessary remedial action.

You are responsible for maintaining the security of your own account credentials. eg99 strongly recommends using a strong, unique password for your eg99 account and not sharing your login details with any third party. If you suspect your account has been compromised, contact support immediately at [email protected].

As a registered user of eg99, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request" and a description of the right you wish to exercise.

• Right of access: You have the right to request a copy of the personal data eg99 holds about you, along with information about how it is being used and with whom it has been shared.
• Right to rectification: You have the right to request that we correct any inaccurate or incomplete personal data held about you. For minor corrections (such as updating your mobile number), you may be able to do this directly via your account dashboard.
• Right to erasure ("right to be forgotten"): You have the right to request deletion of your personal data in certain circumstances, including where the data is no longer necessary for the purpose it was collected. Note that this right is subject to our legal retention obligations — we may be required to retain certain records even following an erasure request.
• Right to restriction of processing: You have the right to request that we restrict the processing of your data in certain circumstances, such as where you contest the accuracy of the data or object to processing based on legitimate interests.
• Right to data portability: You have the right to receive a copy of personal data you have provided to eg99 in a structured, commonly used, machine-readable format, and to transmit that data to another service provider where technically feasible.
• Right to object: You have the right to object to processing of your personal data where that processing is based on legitimate interests. You also have an unconditional right to object to direct marketing processing, which will be actioned immediately upon receipt of your request.
• Right to withdraw consent: Where processing is based on your consent (principally, direct marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

eg99 will respond to all data rights requests within thirty (30) calendar days of receipt. Where a request is complex or we receive a high volume of requests, we may extend this period by a further sixty (60) days, in which case we will notify you of the extension and the reasons for it.

We will not charge a fee for processing a data rights request unless the request is manifestly unfounded or excessive, in which case we may charge a reasonable administrative fee or decline to act on the request.

eg99 is strictly an adult-only platform. Access to and use of eg99 is prohibited for any person under the age of 21. We do not knowingly collect personal data from individuals under the age of 21.

Age verification is performed as part of the account registration process and is reinforced at the point of any withdrawal request through our KYC procedures. If eg99 becomes aware or has reasonable grounds to suspect that personal data has been collected from a person under 21 years of age, we will immediately suspend the associated account, void any activity on that account, and securely delete the data associated with the underage individual as soon as practicable.

If you are a parent or guardian and believe that your child may have registered an account on eg99, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

eg99.io may display references to third-party game providers, payment processors, and other services. Where any such third-party service has its own website or privacy policy, your interactions with that third-party service are governed by that party's own terms and privacy practices, not this Privacy Policy.

eg99 is not responsible for the privacy practices or content of any third-party websites or services. We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of eg99.

In particular, the privacy policies of payment providers such as bKash, Nagad, and Rocket govern how those providers process your payment data on their own platforms. eg99 only receives transaction confirmation data from these providers and does not have access to your full payment account credentials.

eg99 may send you promotional communications about new games, bonuses, seasonal offers (for example, BPL season promotions, Eid bonus campaigns, Pohela Boishakh special offers, and T20 World Cup betting promotions), and platform news via email or SMS. We will only send you marketing communications where you have explicitly opted in to receive them during registration or via your account settings.

You may opt out of marketing communications at any time by:

• Clicking the "Unsubscribe" link at the bottom of any promotional email from eg99.
• Replying "STOP" to any promotional SMS message from eg99.
• Updating your communication preferences in your eg99 account settings dashboard.
• Contacting our support team at [email protected] with the subject line "Unsubscribe from Marketing".

Opting out of marketing communications will not affect your receipt of transactional or service communications — for example, deposit and withdrawal confirmations, KYC verification notifications, responsible gaming alerts, and account security notifications. These service communications are sent as part of the core platform service and cannot be opted out of while your account is active.

eg99 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer. The date of the most recent revision is displayed at the top of this document.

Where changes to this Privacy Policy are material — meaning they significantly alter how we collect, use, or share your personal data — we will notify registered players via email or a prominent notice on the eg99 platform at least fourteen (14) days before the updated policy takes effect. Minor or administrative amendments (such as updates to contact details or clarifications of existing practices) may be made without advance notice.

Your continued use of eg99 following the publication of an updated Privacy Policy constitutes your acknowledgment of the updated terms. If you do not agree with any changes to this policy, you should cease using the platform and close your account by contacting [email protected].

We recommend bookmarking this page and reviewing it periodically — particularly before making significant deposits or engaging with new platform features — to stay informed of how eg99 handles your data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way eg99 handles your personal data, please contact our support team. All privacy-related enquiries are handled with care and treated as a priority.

Email: [email protected]
(Plain text — not a clickable link. Copy and paste into your email client.)

For formal data rights requests (access, erasure, portability, objection, etc.), please include the subject line "Data Rights Request" in your email, along with your account username, a description of the right you wish to exercise, and any relevant supporting information. We will acknowledge your request within five (5) business days (Bangladesh Standard Time, UTC+6).

For urgent security concerns — such as suspected unauthorised access to your account or a potential data breach — please mark your email with the subject line "URGENT: Security" and our team will prioritise your case for immediate review.