Privacy Policy – pg99 Casino Bangladesh

01

Overview & Scope

This Policy applies to all personal data processed by pg99 in connection with the operation of the pg99 online casino and sports betting platform. It covers data collected from registered account holders, visitors who browse the platform without registering, and any individuals who contact pg99 through official communication channels such as email support.

pg99 is committed to handling all personal data responsibly, transparently, and in accordance with applicable data protection principles. This Policy is designed to give you a clear and honest account of what data pg99 holds about you, why it is held, how long it is retained, and what rights you have in relation to that data.

This Policy should be read alongside the pg99 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference and form part of your overall agreement with pg99.

02

Data We Collect

pg99 collects personal data that is necessary for the operation of the platform, the fulfilment of its legal obligations, and the provision of a personalised, secure player experience. The categories of personal data that pg99 may collect include, but are not limited to, the following:

Category	Examples	Purpose
Identity Data	Full legal name, date of birth, gender, nationality, NID / passport number	Account registration, age & identity verification (KYC)
Contact Data	Email address, mobile number, residential address (city, district)	Account communications, support, security alerts
Financial Data	bKash / Nagad / Rocket / Upay account numbers, Visa / Mastercard details (tokenised), transaction history	Deposit & withdrawal processing, fraud prevention
Technical Data	IP address, browser type & version, device identifiers, operating system, time zone (BST UTC+6)	Platform security, geo-restriction compliance, analytics
Usage Data	Pages visited, games played, betting history, session duration, login timestamps	Platform improvement, responsible gaming monitoring
Communications Data	Support ticket content, email correspondence, live chat transcripts	Dispute resolution, quality assurance, compliance records
Verification Documents	Scanned copies of NID, passport, utility bills, bank statements	KYC compliance, age verification, AML checks

pg99 does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, or biometric data. The only sensitive-adjacent data collected is date of birth, which is required solely for the mandatory age verification process.

03

How We Collect Data

pg99 collects personal data through the following channels and mechanisms:

Direct Submission: Information you provide when registering an account, completing identity verification, making a deposit or withdrawal request, contacting support, or participating in a promotion.
Automated Technologies: Technical data collected automatically when you visit the pg99 platform, including through cookies, web beacons, pixel tags, and server log files. See Section 7 (Cookies & Tracking) for full details.
Third-Party Sources: Identity verification and fraud prevention providers who confirm the authenticity of documents submitted during KYC checks. Payment processors such as bKash, Nagad, Rocket, Upay, Visa, and Mastercard who provide transaction confirmation data. Public registers and databases where permitted by applicable law.
Platform Activity: Behavioural data generated through your use of the platform, including betting patterns, game selections, stake sizes, session lengths, and responsible gaming tool activations.

pg99 will always endeavour to collect the minimum amount of personal data necessary for the specified purpose. Where data collection is optional, this will be made clear at the point of collection.

04

How We Use Your Data

pg99 uses the personal data it collects for the following purposes. Each purpose is linked to a lawful basis for processing, which is described in detail in Section 5.

Account Management: Creating and maintaining your pg99 account, processing your registration, authenticating your identity at login, and enabling account self-service functions.
Payment Processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard; verifying transaction legitimacy; and maintaining accurate financial records.
Identity & Age Verification (KYC): Confirming that all registered players are 18 years of age or older and that their identity matches the information provided during registration. This is a legal obligation that pg99 takes seriously.
Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, money laundering, multi-accounting, bonus abuse, and other prohibited conduct as defined in the Terms & Conditions.
Responsible Gaming: Monitoring player behaviour for indicators of problem gambling; administering self-exclusion requests, deposit limits, and cooling-off periods; and proactively reaching out to players who may be at risk.
Platform Improvement: Analysing usage data in aggregated, anonymised form to improve game performance, platform stability, user interface design, and the overall player experience.
Marketing Communications: Sending promotional emails about bonuses, seasonal offers (e.g., BPL, IPL, Eid promotions), and new game releases — but only where you have given explicit consent. You may withdraw this consent at any time.
Legal & Regulatory Compliance: Fulfilling pg99's obligations under applicable laws, responding to lawful requests from competent authorities, and maintaining records as required by anti-money laundering (AML) regulations.
Dispute Resolution: Investigating and resolving complaints, account disputes, and betting-related queries using communications records and account activity data.

05

Legal Basis for Processing

pg99 processes personal data only where it has a legitimate legal basis to do so. The primary legal bases relied upon are as follows:

Contractual Necessity: Processing required to perform the contract between pg99 and the player — including account creation, game access, payment processing, and customer support.
Legal Obligation: Processing required to comply with applicable laws — including age verification (KYC), anti-money laundering (AML) checks, and cooperation with law enforcement authorities.
Legitimate Interests: Processing carried out in furtherance of pg99's legitimate business interests — including fraud prevention, platform security, and analytics — provided those interests are not overridden by your data protection rights.
Consent: Processing based on your freely given, specific, informed consent — including marketing communications and the placement of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Where pg99 relies on legitimate interests as its legal basis, a balancing assessment is conducted to confirm that your privacy interests do not override those legitimate interests. You have the right to object to processing carried out on this basis.

06

Data Sharing

pg99 does not sell, rent, or trade your personal data to third parties for their own marketing purposes under any circumstances. Personal data may be shared with the following categories of third parties only where strictly necessary and subject to appropriate data protection agreements:

Payment Processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and other payment service providers involved in processing deposits and withdrawals. These providers receive only the transaction data required to complete the payment.
Identity Verification Providers: Third-party KYC and AML compliance service providers who assist in verifying the identity and age of registered players and screening for financial crime risk.
Technology & Hosting Partners: Infrastructure providers who host the pg99 platform and supporting systems. These parties act as data processors under contractual obligation and may not use your data for any purpose other than providing the agreed service.
Game Providers: Third-party game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive session tokens and anonymised identifiers to enable gameplay. These providers do not receive your full personal profile.
Regulatory Authorities & Law Enforcement: Competent authorities where disclosure is required by law, court order, or regulatory direction. pg99 will notify affected players of such disclosures where legally permitted to do so.
Professional Advisers: Legal, financial, and compliance advisers who are bound by professional confidentiality obligations.

Any third party receiving personal data from pg99 is contractually required to implement appropriate technical and organisational security measures and to process that data only for the purposes specified by pg99.

07

Cookies & Tracking

pg99 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit a website. Cookies allow pg99 to recognise your browser, remember your preferences, maintain your login session, and collect analytics data.

The following categories of cookies are used on the pg99 platform:

Strictly Necessary Cookies: Required for the platform to function correctly. These include session authentication cookies, security tokens, and load-balancing cookies. These cookies cannot be disabled without impairing platform functionality.
Functional Cookies: Used to remember your preferences such as language settings, preferred payment methods, and display options. These improve your experience but are not essential to the core service.
Analytics Cookies: Used to collect anonymised data about how players interact with the pg99 platform — including pages visited, session durations, and navigation paths. This data helps pg99 identify usability issues and improve the platform over time.
Marketing Cookies: Used only with your explicit consent to deliver relevant promotional content. If you have opted in to marketing communications, these cookies help ensure that offers shown are relevant to your interests and activity on pg99.

You may manage your cookie preferences through your browser settings. Disabling certain cookies may affect platform functionality. For strictly necessary cookies, no consent is required as they are essential to deliver the service you have requested.

08

Data Retention

pg99 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, or for as long as required by applicable law. The following general retention principles apply:

Active Accounts: Personal data associated with an active pg99 account is retained for the full duration of the account's existence, plus a minimum of five (5) years following account closure, in accordance with standard AML and financial record-keeping requirements.
KYC & Verification Documents: Identity and age verification documents are retained for a minimum of five (5) years from the date of submission, or for the full period required by applicable law, whichever is longer.
Transaction Records: Financial transaction records, including deposit and withdrawal histories, are retained for a minimum of five (5) years from the date of the transaction.
Support Communications: Customer support correspondence is retained for a minimum of two (2) years from the date of the last communication in a given ticket or thread.
Marketing Data: Data processed solely on the basis of consent for marketing purposes is deleted within ninety (90) days of consent being withdrawn.
Analytics Data: Anonymised, aggregated analytics data may be retained indefinitely as it no longer constitutes personal data.

Upon the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where deletion is not technically feasible in the short term (for example, due to backup cycles), the data is isolated from active processing until it can be permanently removed.

09

Data Security

pg99 employs a comprehensive set of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Key security measures include:

256-bit SSL/TLS encryption for all data transmitted between your device and the pg99 platform.
Encryption of sensitive data at rest, including payment details and verification documents stored on pg99 servers.
Role-based access controls ensuring that personal data is accessible only to authorised pg99 staff with a verified operational need.
Regular independent security audits and penetration testing of the pg99 platform infrastructure.
Multi-factor authentication (MFA) options for player accounts to prevent unauthorised login.
Continuous monitoring of platform activity for anomalous behaviour indicative of a security breach or data compromise.
Documented incident response procedures to ensure that any confirmed data breach is assessed, contained, and reported to affected parties promptly.

While pg99 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying pg99 immediately if you suspect any unauthorised use of your account.

10

Your Rights

Subject to applicable law, you have the following rights in relation to the personal data that pg99 holds about you. To exercise any of these rights, please contact pg99 at [email protected] with the subject line "Data Rights Request". pg99 will respond to all valid requests within thirty (30) days.

Right of Access

Request a copy of the personal data pg99 holds about you and information about how it is used.

Right to Rectification

Request correction of inaccurate or incomplete personal data in your account record.

Right to Erasure

Request deletion of your personal data where it is no longer necessary for the original purpose, subject to legal retention obligations.

Right to Restriction

Request that pg99 restricts the processing of your data while a dispute or accuracy challenge is being resolved.

Right to Portability

Request a machine-readable copy of your personal data to transfer to another service provider where technically feasible.

Right to Object

Object to processing based on legitimate interests or for direct marketing purposes. pg99 will cease that processing unless a compelling overriding justification exists.

Withdraw Consent

Withdraw consent for any processing based on consent (e.g., marketing emails) at any time without affecting prior lawful processing.

Lodge a Complaint

Lodge a complaint with pg99 or with a competent data protection authority if you believe your data rights have been violated.

pg99 will not charge a fee for handling data rights requests unless the request is manifestly unfounded, excessive, or repetitive, in which case a reasonable administrative fee may be applied. pg99 may request proof of identity before processing any data rights request to prevent unauthorised disclosure.

11

Children's Privacy

pg99 does not knowingly collect personal data from individuals under the age of 18. The platform is intended exclusively for adults aged 18 and over. Age verification procedures are applied during the registration process and may be repeated at any time if pg99 has reason to believe that an account holder may be under the minimum age.

If pg99 becomes aware that personal data has been collected from an individual under the age of 18 without verifiable parental or guardian consent, that data will be immediately deleted and the associated account will be permanently closed. If you are a parent or guardian and believe that your child has registered on pg99, please contact us immediately at [email protected] so that appropriate action can be taken without delay.

Any adult who knowingly facilitates the registration of a minor on pg99 is in breach of these Terms and may be subject to legal action.

12

Third-Party Links

The pg99 platform may, from time to time, contain references to third-party game providers, payment services, or informational resources. Where such references include links, please be aware that clicking on a third-party link will direct you away from the pg99 platform. pg99 has no control over the content, privacy practices, or data handling policies of third-party websites and accepts no responsibility for them.

pg99 strongly encourages you to review the privacy policy of any third-party website you visit. The existence of a link from pg99 to a third-party site does not constitute an endorsement of that site or its privacy practices by pg99.

13

Policy Updates

pg99 reserves the right to update or revise this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, platform functionality, or internal data handling practices. When material changes are made, the "Last Updated" date at the top of this page will be revised accordingly.

Where changes materially affect your rights or the manner in which your personal data is processed, pg99 will provide advance notice via the email address registered to your account. Your continued use of the pg99 platform following the publication of an updated Policy constitutes acceptance of the revised terms. If you do not accept the updated Policy, you must cease using the platform and close your account by contacting [email protected].

14

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the manner in which pg99 processes your personal data, please contact the pg99 Data Support team using the details below. All enquiries are handled with strict confidentiality.

Contact email: [email protected]

Please include "Privacy Policy Enquiry" or "Data Rights Request" in the subject line of your email to ensure your message is directed to the appropriate team. pg99 aims to acknowledge all privacy-related enquiries within two (2) business days and to provide a substantive response within thirty (30) calendar days of receipt.

For self-exclusion requests, account closures, or responsible gaming support, email [email protected] with the subject line "Responsible Gaming Request". These requests are treated as high priority and processed as a matter of urgency.

pg99 Privacy Policy