cx99 Privacy Policy — How We Handle Your Personal Data
At cx99, protecting the personal data of every player in Bangladesh is a core commitment — not an afterthought. This Privacy Policy explains in plain, formal English exactly what data we collect, why we collect it, how it is stored and processed, who we share it with, and what rights you hold over your own information. We encourage all cx99 users to read this document carefully before registering an account.
Six Core Principles That Govern Your Data
The cx99 Privacy Policy is built on six foundational principles. Each one is explained in full legal detail in the sections below — these cards provide a quick summary for reference.
cx99 collects only the personal data that is strictly necessary to operate the platform, verify your identity, process payments, and comply with our legal obligations. We do not collect data speculatively or without a defined purpose.
All personal data held by cx99 is protected with 256-bit SSL encryption during transmission and stored on access-controlled servers. We conduct regular security audits and implement industry-standard safeguards against unauthorised access.
cx99 will never sell, rent, or trade your personal data to third parties for marketing or commercial purposes. Data sharing is limited strictly to operational partners who assist cx99 in delivering its services, under binding data processing agreements.
You have the right to access, correct, and request deletion of your personal data held by cx99. You may also object to certain types of processing or request that your data be restricted. All requests are handled by our support team within a reasonable timeframe.
cx99 uses cookies and similar tracking technologies solely to improve platform performance, remember your preferences, and analyse usage patterns. We do not use third-party advertising cookies. You may manage cookie preferences through your browser settings at any time.
cx99 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. When data is no longer needed, it is securely deleted or anonymised in accordance with our data retention schedule.
1 Introduction
cx99 is committed to safeguarding the privacy and personal data of every user who interacts with its platform. This Policy has been drafted in accordance with internationally recognised data protection principles, including the principles of lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality.
This Policy applies to all personal data collected by cx99 through any channel, including direct registration on the cx99 website, interactions with our 24/7 customer support team, use of the cx99 payment cashier, participation in promotional activities, and any other form of communication or interaction between you and cx99.
cx99 is the data controller in respect of the personal data it collects from users of the cx99 platform. As data controller, cx99 is responsible for determining the purposes and means of processing your personal data and for ensuring that such processing is conducted lawfully and securely.
This Policy should be read alongside the cx99 Terms & Conditions and Responsible Gaming Policy, each of which forms part of the contractual relationship between you and cx99.
2 Data We Collect
2.1 Data You Provide Directly
When you register an account, use the platform, or contact cx99 support, you may provide the following categories of personal data:
- Identity Data: Full legal name, date of birth, gender, and a copy of a government-issued photo identification document (National ID card, passport, or driving licence).
- Contact Data: Residential address (including division, district, and postal code within Bangladesh), email address, and mobile phone number.
- Financial Data: Payment method details (e.g., registered bKash or Nagad mobile number, bank account details where applicable), deposit and withdrawal history, and transaction records.
- Verification Data: Proof of address documents (utility bills, bank statements, or other official documents dated within the preceding three months) and any additional KYC documentation requested by cx99.
- Account Data: Username, encrypted password, account preferences, bonus history, wagering activity records, and self-exclusion or responsible gaming tool settings.
- Communications Data: The content of any communications you send to or receive from cx99 support, including live chat transcripts, email correspondence, and support ticket records.
2.2 Data Collected Automatically
When you access the cx99 platform, certain technical data is collected automatically through your device and browser:
- Device & Technical Data: IP address, device type, operating system version, browser type and version, screen resolution, and device language settings.
- Usage Data: Pages visited on the cx99 platform, games played, betting markets accessed, session duration, navigation paths, clickstream data, and error logs.
- Location Data: Approximate geographic location derived from your IP address, used to confirm eligibility and comply with geographic access restrictions.
- Cookie & Tracking Data: Data collected via cookies, web beacons, pixel tags, and similar technologies as described in Section 6 of this Policy.
2.3 Data Received from Third Parties
cx99 may receive limited personal data about you from trusted third-party partners in the following circumstances:
- Identity verification and KYC service providers, who confirm the authenticity of identification documents and validate your date of birth and address.
- Payment processing partners (including bKash, Nagad, Rocket, Upay, and banking partners) who confirm transaction status, payment method ownership, and account validity.
- Fraud detection and anti-money-laundering ("AML") compliance services, who may flag accounts or transactions associated with known fraudulent activity.
2.4 Data Categories Summary
| Category | Examples | Source |
|---|---|---|
| Identity | Name, DOB, NID, passport | You / KYC partner |
| Contact | Email, phone, address | You |
| Financial | bKash number, bank account, transaction records | You / Payment partner |
| Technical | IP address, device type, browser | Automatically collected |
| Usage | Games played, session duration, bets placed | Automatically collected |
| Communications | Support chat transcripts, emails | You |
3 How We Use Your Data
cx99 uses the personal data it collects for the following purposes:
- Account Registration and Management: To create and administer your cx99 account, verify your identity, enforce our one-account-per-person policy, and maintain accurate account records.
- Service Delivery: To provide access to cx99's games, sportsbook, payment cashier, and all associated platform features, and to process your deposits and withdrawals via your chosen payment method.
- Identity Verification and KYC Compliance: To verify your age (21+ requirement), identity, and residential address in compliance with our know-your-customer obligations, and to prevent underage gambling.
- Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeovers, bonus abuse, and other prohibited conduct as defined in the cx99 Terms & Conditions.
- Responsible Gaming: To monitor account activity for signs of problem gambling, enforce responsible gaming tools (deposit limits, cooling-off periods, self-exclusion), and reach out to players whose patterns may indicate a gambling-related concern.
- Customer Support: To respond to your enquiries, complaints, and support requests, and to maintain records of communications for quality assurance and dispute resolution purposes.
- Marketing and Promotions: To inform you of cx99 bonuses, promotions, and platform updates via email or in-platform notifications, where you have consented to receive such communications. You may opt out of marketing communications at any time by contacting [email protected].
- Platform Improvement: To analyse usage data and technical logs in order to improve platform performance, fix bugs, optimise the user interface, and develop new features.
- Legal Compliance: To comply with applicable legal obligations, including responding to lawful requests from regulatory or law enforcement authorities.
4 Legal Basis for Processing
cx99 processes personal data on the following legal bases, depending on the nature and purpose of the processing activity:
- Contractual Necessity: Processing that is necessary to perform the contract between you and cx99 — including account registration, payment processing, game access, and customer support — is conducted on the basis of contractual necessity.
- Legal Obligation: Processing required to comply with applicable law — including KYC/AML verification, age verification, fraud reporting, and responding to lawful regulatory or law enforcement requests — is conducted on the basis of legal obligation.
- Legitimate Interests: Processing conducted for purposes such as fraud prevention, platform security, abuse detection, responsible gaming monitoring, and internal analytics is conducted on the basis of cx99's legitimate interests, provided that such interests are not overridden by your fundamental rights and freedoms.
- Consent: Processing for optional purposes — including direct marketing communications — is conducted on the basis of your explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.
5 Data Sharing and Disclosure
5.1 Third-Party Service Providers
cx99 shares personal data with carefully selected third-party service providers who assist in the operation of the platform. All such providers are bound by written data processing agreements that prohibit them from using your data for any purpose other than the specific service they provide to cx99. These providers include:
- Payment processing partners: bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and BRAC Bank, for the purpose of processing deposits and withdrawals.
- Identity verification and KYC service providers, for the purpose of verifying your identity and age.
- Fraud detection and AML compliance service providers.
- Cloud hosting and infrastructure providers who store platform data on cx99's behalf.
- Customer support platform providers who facilitate our live chat and email support services.
- Analytics service providers who process aggregated, anonymised usage data to assist cx99 in improving platform performance.
5.2 Legal and Regulatory Disclosure
cx99 may disclose personal data to government bodies, regulatory authorities, or law enforcement agencies where required to do so by applicable law, court order, or lawful governmental request. In such circumstances, cx99 will disclose only the minimum data necessary to satisfy the legal requirement and will notify the affected user where it is lawful and practicable to do so.
5.3 Business Transfers
In the event that cx99 undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, personal data held by cx99 may be transferred to the acquiring entity as part of that transaction. In such circumstances, cx99 will take reasonable steps to ensure that your personal data continues to be processed in accordance with this Privacy Policy and that the acquiring entity is bound by equivalent data protection obligations.
5.4 No Sale of Personal Data
cx99 does not and will not sell, rent, lease, or otherwise commercially transfer your personal data to any third party for that party's own marketing, advertising, or commercial purposes. This is an absolute commitment and is not subject to exception.
6 Cookies and Tracking Technologies
6.1 What Are Cookies?
Cookies are small text files that are placed on your device by a website when you visit it. They are widely used to make websites function correctly, to improve efficiency, and to provide information to the operators of the site. cx99 uses cookies and similar technologies (including web beacons and local storage objects) on its platform.
6.2 Types of Cookies Used by cx99
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Enable core platform functionality (login sessions, game loading, cashier access) | Session |
| Functional | Remember your preferences (language, currency display, game lobby filters) | Up to 12 months |
| Performance / Analytics | Collect anonymised data on page visits and platform usage to improve cx99's services | Up to 24 months |
| Security | Detect and prevent fraudulent activity, bot traffic, and account takeover attempts | Session / Up to 30 days |
6.3 Managing Cookies
You may manage or disable cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will impair the functionality of the cx99 platform and may prevent you from accessing certain features, including your account and the payment cashier. Instructions for managing cookies are available in the help documentation of your browser.
cx99 does not use third-party advertising or retargeting cookies. No cx99 cookie data is shared with advertising networks or used to serve targeted advertisements on third-party websites.
7 Data Retention
cx99 retains personal data only for as long as is necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable law. The following retention periods apply as a general guide:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years after closure | Legal and contractual obligations |
| Financial & Transaction Data | 7 years from date of transaction | AML compliance and financial record-keeping |
| KYC Documents | Duration of account + 5 years after closure | Regulatory compliance |
| Support Communications | 3 years from date of communication | Dispute resolution and quality assurance |
| Marketing Consent Records | Until consent is withdrawn + 3 years | Proof of consent and compliance |
| Technical / Usage Logs | Up to 24 months | Platform security and performance analysis |
| Cookie Data | As stated per cookie type in Section 6 | Platform functionality and analytics |
Upon expiry of the applicable retention period, cx99 will securely delete or permanently anonymise the relevant personal data. Where data is anonymised, it may be retained indefinitely for statistical and analytical purposes, as it will no longer be capable of identifying any individual.
8 Data Security
cx99 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:
- 256-bit SSL/TLS Encryption: All data transmitted between your device and the cx99 platform is encrypted using industry-standard 256-bit SSL/TLS protocols. This applies to all platform interactions, including account login, game sessions, and payment transactions.
- Access Controls: Access to personal data held by cx99 is strictly limited to authorised personnel on a need-to-know basis. All cx99 staff with access to personal data are required to complete data protection training and are bound by confidentiality obligations.
- Two-Factor Authentication (2FA): cx99 strongly recommends that all players enable 2FA on their accounts. cx99 itself uses multi-factor authentication for all internal systems that process or store personal data.
- Regular Security Audits: cx99 conducts regular penetration testing, vulnerability assessments, and security audits of its platform infrastructure to identify and remediate potential security weaknesses.
- Incident Response: cx99 maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights and freedoms, cx99 will notify affected users without undue delay and will take immediate remedial action.
- Data Minimisation in Storage: cx99 does not store full payment card numbers or full mobile banking credentials. Financial transaction processing is handled by PCI-DSS compliant third-party payment partners.
While cx99 takes all reasonable steps to protect your personal data, no internet transmission or electronic storage system is completely secure. You are responsible for maintaining the security of your own account credentials and for notifying cx99 immediately if you suspect any unauthorised access to your account.
9 Your Data Protection Rights
Subject to applicable law and certain exceptions, you have the following rights in respect of the personal data that cx99 holds about you:
- Right of Access: You have the right to request a copy of the personal data that cx99 holds about you, together with information about how that data is being used and on what legal basis.
- Right to Rectification: You have the right to request that cx99 correct any inaccurate or incomplete personal data held about you. You may update certain account details directly through the cx99 account settings portal.
- Right to Erasure ("Right to be Forgotten"): You have the right to request that cx99 delete the personal data it holds about you in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent and there is no other legal basis for processing. This right is subject to cx99's legal obligations to retain certain data (see Section 7).
- Right to Restriction of Processing: You have the right to request that cx99 restrict the processing of your personal data in certain circumstances, such as while cx99 investigates a complaint about the accuracy of that data.
- Right to Data Portability: Where cx99 processes your personal data on the basis of your consent or contractual necessity, and where the processing is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
- Right to Object: You have the right to object to the processing of your personal data where cx99 relies on legitimate interests as the legal basis for that processing. cx99 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
- Right to Withdraw Consent: Where cx99 processes your personal data on the basis of your consent (e.g., for direct marketing), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place before the withdrawal.
To exercise any of the rights described above, please contact cx99's support team by email at [email protected] (plain text — not a clickable link). cx99 will respond to all valid requests within a reasonable timeframe and will not charge a fee for handling standard data subject requests. cx99 may, however, request proof of identity before processing a request in order to ensure that personal data is not disclosed to an unauthorised third party.
10 Children's Privacy
The cx99 platform is strictly for adults aged 21 years and above. cx99 does not knowingly collect, process, or store personal data relating to individuals under the age of 21. If cx99 becomes aware that personal data has been collected from a person under 21, it will take immediate steps to delete that data and close the associated account.
If you are a parent or guardian and believe that a minor has registered an account on cx99 or has provided personal data to cx99 without your knowledge or consent, please contact us immediately at [email protected] (plain text — not a clickable link). cx99 will investigate the matter promptly and take appropriate action.
11 International Data Transfers
cx99 is operated primarily for the Bangladesh market. In certain circumstances, personal data may be processed by cx99's third-party service providers on servers located outside Bangladesh. Where such transfers occur, cx99 takes appropriate steps to ensure that your personal data remains protected to a standard equivalent to that described in this Privacy Policy.
These steps may include entering into standard contractual clauses with the relevant third-party processor, requiring the processor to maintain equivalent technical and organisational security measures, and conducting due diligence on the data protection practices of all international service providers before engaging their services.
cx99 does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without implementing appropriate safeguards as described above.
12 Third-Party Links
The cx99 platform does not contain links to third-party external websites. In the event that any third-party content, tools, or integrations are made available via the cx99 platform in future, this Policy will be updated accordingly. cx99 is not responsible for the privacy practices of any third party and encourages users to review the privacy policies of any external service they use independently of the cx99 platform.
13 Changes to This Privacy Policy
cx99 reserves the right to update, amend, or replace this Privacy Policy at any time. When material changes are made, cx99 will take reasonable steps to notify registered users by email or by displaying a prominent notice within the platform. The date of the most recent revision will always be displayed at the top of the Privacy Policy page.
Your continued use of the cx99 platform after any revised Policy takes effect constitutes your acceptance of the updated Policy. If you do not agree to the revised Privacy Policy, you must immediately cease using the cx99 platform. You may request closure of your account by contacting our support team at [email protected] (plain text — not a clickable link).
We recommend that you review this Privacy Policy periodically to stay informed of how cx99 handles your personal data and of any changes that may affect your rights.
14 Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data by cx99, please contact our support team using the details below:
- Email: [email protected] (plain text — not a clickable link)
- Support Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)
- Response Time: cx99 aims to respond to all privacy-related enquiries within 5 business days
When contacting cx99 regarding a data subject request, please include your registered account username and the email address associated with your cx99 account so that we may verify your identity and process your request without undue delay.
Ready to Experience cx99?
Now that you know how cx99 protects your data, explore everything the platform has to offer — from live cricket betting and classic slots to card games and live casino tables.