Reference

Privacy Guide: How We Handle Your Account Data

We collect payment details when you deposit via bKash, Nagad or Rocket, device identifiers when you log in, and session logs when you open slots or live tables.

Payment DataSession LogsDevice AccessWithdrawal RecordsSupport Queries
Browse Lobby Read FAQ
999ox Privacy Guide: How We Handle Your Account Data
999ox What We Collect and Why

What We Collect and Why

When you create an account, we record your phone number, the device you sign in from, and your chosen payment method—bKash, Nagad or Rocket. Each time you fund your wallet or request a withdrawal, we log the transaction ID, amount and timestamp so we can verify the transfer and prevent duplicate credits. Session data includes the games you open, bet timestamps and

your IP address; we use this to detect unusual login patterns and flag account-sharing. We do not collect biometric data, browsing history outside our domain, or location coordinates beyond the IP-derived region check required for access eligibility under local law. Support chat logs are kept for ninety days to resolve disputes; after that window they are purged unless linked to an open

case. Device fingerprints—screen resolution, OS version, browser type—help us recognise your phone when you return so you skip repeated verification steps, and they let us block sessions from regions where the service is not permitted.

PROTECTION MEASURES

How We Secure Your Payment and Session Data

Encrypted Transfers

All deposits via bKash, Nagad and Rocket pass through SSL-encrypted channels so transaction IDs and PINs are not visible in transit. We do not store your mobile-wallet PIN; the payment gateway handles authentication, and we receive only a success token with the credited amount and timestamp.

Session Timeouts

If you leave the lobby idle for fifteen minutes on mobile or thirty minutes on desktop, we log you out automatically and require a fresh OTP to resume. This prevents unauthorised access if you leave your device unattended in public or at home.

Withdrawal Verification

When you request a payout, we check the withdrawal account number against the one you used for your last three deposits. Mismatches trigger a manual review where our team contacts you via SMS to confirm the new destination before releasing funds, protecting you from account takeover attempts.

Third-Party Processors

Game studios such as Pragmatic Play and Evolution host the slot and live-table sessions on their own servers. They logbet outcomes and RNG results for regulatory audit; we receive only win/loss summaries to update your balance. Their privacy policies apply to gameplay data; ours covers account and payment records.

ACCESS REQUESTS

How to Request Your Data or Delete Your Account

Export Your Records Email our support team from your registered phone number and ask for a data export. We will send a CSV file containing your deposit history, withdrawal requests, session logs and support tickets within five business days. The file covers the past twelve months; older records are archived and take longer to retrieve.
Update Payment Details Log into your account, open the wallet screen, and tap the payment-method row to switch between bKash, Nagad and Rocket or update your account number. Changes take effect immediately for new deposits; pending withdrawals continue to the original destination you specified when you requested them.
Close Your Account Request account closure through live chat or email. We verify your identity by sending an OTP to your registered phone, then lock your account within twenty-four hours. Withdrawal records and transaction logs are retained for three years to meet financial audit requirements; after that they are permanently deleted.

Privacy Glossary

What is personally identifiable information in the context of 999ox?

PII includes your phone number, device ID, payment account number for bKash, Nagad or Rocket, IP address and any name you provide during KYC verification. We use it to verify deposits, process withdrawals and prevent duplicate accounts.

What does session data include?

Session data covers login timestamps, the games you open, bet amounts, win/loss outcomes and your IP address. We keep these logs for ninety days to resolve disputes and detect unusual account activity such as logins from multiple devices.

How long do you retain transaction records?

Deposit and withdrawal records are stored for three years to comply with financial audit requirements. After that period they are permanently deleted unless linked to an ongoing legal or compliance case that requires extended retention.

What is an OTP and why do you send it?

A one-time password is a six-digit code sent to your registered phone number when you log in or request a withdrawal. It confirms that the person accessing the account controls the phone, reducing the risk of unauthorised access.

Do you share data with third parties?

We share transaction details with bKash, Nagad and Rocket to process payments, and we send bet logs to game studios like Pragmatic Play and Evolution for RNG audit. We do not sell account data to advertisers or data brokers.

Can I use a VPN while playing?

VPN use is discouraged because it masks your real IP address, which we check to confirm you are accessing from an eligible region under local law. Sessions from prohibited regions or anonymous proxies may be blocked or flagged for review.

Privacy Questions for Bangladesh Accounts

Email our support team from your registered phone and request a data export. We will send a CSV file listing your deposits, withdrawals, session logs and support tickets from the past twelve months within five business days.

Your phone number is the primary identifier for your account. We send OTP codes to it when you log in or request a withdrawal, and it is the contact point for account alerts and support replies.

Yes. Open the wallet screen, tap your payment method and enter the new account number. Future deposits will credit from the new source, but pending withdrawals continue to the original destination you specified when you created the request.

We lock your account within twenty-four hours of your closure request. Transaction logs and withdrawal records remain in archive for three years to meet audit obligations, then they are permanently deleted. Session logs are purged after ninety days.

Studios such as Pragmatic Play and Evolution receive a session token and your bet history but not your phone number or payment account. They log RNG outcomes for regulatory audit; we handle all payment and identity data separately.

Log into your account, go to notifications settings and toggle off promotional SMS or email. You will still receive transactional messages such as deposit confirmations, withdrawal alerts and OTP codes, which are required for account security.
Reference

Privacy Guide Bangladesh

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.

Related pages

InfoAbout UsInfoBPL Night MatchInfoBaccarat Golden

Related pages

999ox Bangladesh 999Ox Banking 999ox Login FAQ Baccarat JetSet