Xo99 Privacy Policy

1 What information we collect

We collect various types of information when you create an account and use our services on xo99. The purpose of this data collection is to provide you with a secure, reliable, and personalized experience. We only collect information that is genuinely necessary to operate our services.

Xo99 never collects unnecessary data and will not use any sensitive information without your consent. A detailed list is provided below:

2 How Your Information Is Used

Xo99 uses your information only for legitimate and transparent purposes. None of the data you provide is used for any unauthorized activity. The specific reason for each use of your data is outlined below.

• Account management: Confirming registration, verifying logins, and maintaining account security.
• Transaction Processing: Managing all financial transactions related to deposits, withdrawals, and bonuses.
• Customer Support: Providing fast and accurate resolution of your queries and complaints.
• Security & Fraud Prevention: Detecting suspicious activity and keeping the platform secure.
• Compliance with legal obligations: Complying with regulatory guidelines and AML policies.
• Personalized Experience: Delivering game recommendations and promotional offers tailored to your preferences.
• Responsible Gaming: Monitoring gaming behavior to offer assistance where needed.

3 Where Your Information Is Stored

Xo99 stores your information on secure, encrypted servers. Our server infrastructure operates in accordance with international data protection standards. Server access is strictly controlled, and only authorized personnel can view the data they need.

Payment information is not stored on xo99's own servers — payment gateways such as Mobile Banking, Nagad, and Rocket handle this data directly. This ensures your payment details remain fully secure.

• Data stored on servers is protected with AES-256 encryption.
• Regular security audits and vulnerability assessments are conducted.
• Server access is secured with multi-factor authentication.
• Data backups are performed regularly and are also encrypted.

4 Sharing Information with Third Parties

Xo99 never sells your personal information to third parties. However, limited data may be shared with select partners as necessary to operate our services. The scope and purpose of any such sharing is clearly defined in each case.

• Payment Providers: Sharing necessary information with Mobile Banking, Nagad, and Rocket to process deposits and withdrawals.
• Game providers: Game providers can only view game-related transaction data, not personal details.
• Legal authorities: Relevant information is disclosed when required by legal obligations or court order.
• Security Services: Sharing security-related data with specialist firms for fraud detection and cybersecurity purposes.

5 Cookie policy

Xo99 uses cookies and similar tracking technologies on its website and app. Cookies are small text files stored on your device that help improve your browsing experience.

Cookies can be managed or disabled through your browser settings. However, disabling certain essential cookies may affect the functionality of some xo99 services.

6 Your rights

Xo99 respects your right to data privacy. Your key rights are described below. To exercise any of these rights, please contact xo99 support.

7 Minor Protection

Xo99 strictly prohibits the use of its platform by anyone under the age of 18. We do not knowingly collect personal information from minors. If we are notified that a minor has registered on xo99, that account will be closed immediately and all associated data will be deleted.

8 Security Measures

Xo99 uses multiple layers of security to protect your data. Our security team monitors the platform around the clock and responds immediately to any suspicious activity.

• TLS/SSL encryption: All data transfers are encrypted using the latest TLS 1.3 protocol.
• Two-Factor Authentication (2FA): Enable OTP verification for an added layer of security at login.
• Firewall Protection: An advanced web application firewall protects against all types of cyber attacks.
• Suspicious Login Alerts: You are notified immediately whenever a login is detected from a new device or unfamiliar location.
• Regular Security Testing: Regular penetration testing is carried out by third-party security experts.
• Data Breach Response Plan: In the event of an incident, affected users will be notified within 72 hours.

9 Data Retention Period

Xo99 does not retain your data longer than necessary. How long data is kept depends on its type and applicable legal requirements. Even after account closure, certain information may be retained for a specified period in accordance with regulatory obligations.

Once the retention period expires, your data is securely and permanently deleted or irreversibly anonymized.

10 Contact us

If you have any questions about the Privacy Policy or wish to exercise your rights, please contact the xo99 support team. We aim to respond to all requests within 30 days.

• Email: [email protected] (for general inquiries and requests)
• Our support team is available online 24 hours a day, 7 days a week.
• Reach us in Bangla — our support team is fully capable of responding in Bangla.
• Requests to delete or port your data may require identity verification.