cc99 Privacy Policy — How We Protect Your Data in Bangladesh

This Privacy Policy ("Policy") describes how cc99 ("cc99", "we", "us", "our"), operator of the online gaming platform at cc99.bar, collects, uses, stores, shares, and protects the personal information of players and visitors ("you", "your") who access or use our Service. This Policy applies to all interactions with cc99, including account registration, deposits, withdrawals, game play, customer support communications, and visits to cc99.bar.

By creating an account, accessing cc99.bar, or using any feature of our Service, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with this Policy, you must not register or continue to use cc99.

Our Privacy Commitments

1. What Personal Data We Collect

cc99 collects only the personal data necessary to provide a safe, functional, and legally compliant gaming platform. The following categories of data are collected from players registered on cc99.bar:

2. How We Collect Your Data

cc99 collects personal data through several channels depending on how you interact with our platform. Data is always collected for a specific, documented purpose:

• Directly from you during account registration, when you provide your name, mobile number, email address, and date of birth to create your cc99 account.
• During KYC verification, when you upload identity documents (National ID card, passport, or driving licence) to verify your age and identity in accordance with our compliance obligations.
• Automatically through our platform systems, which log IP addresses, device information, session data, game activity, and transaction records whenever you use cc99.bar.
• Through cookies and similar tracking technologies placed on your device when you visit cc99.bar, as described in Section 6 of this Policy.
• From our payment processing partners (bKash, Nagad, Rocket, Upay, and supported banks) who provide transaction confirmation data so that cc99 can credit deposits and process withdrawals to your account.

3. How We Use Your Personal Data

cc99 uses the personal data we collect strictly for the purposes described in this Policy. We do not use your data for undisclosed purposes. The primary uses of your personal data are as follows:

• To create and manage your cc99 account, verify your identity, and maintain account security including OTP-based authentication and session management.
• To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and supported bank transfers, and to maintain accurate financial records of all transactions on your account.
• To conduct KYC and anti-money-laundering checks in accordance with applicable compliance requirements, and to verify that all players meet the 21+ age eligibility requirement.
• To detect, investigate, and prevent prohibited conduct including fraud, bonus abuse, multi-accounting, money laundering, and use of automated betting software or bots.
• To operate our responsible gaming tools, including processing deposit limit settings, session reminder preferences, and self-exclusion requests submitted by players.
• To send you transactional communications (deposit confirmations, withdrawal status updates, security alerts, and account verification requests) and, with your consent, promotional communications about cc99 offers and new game launches.

cc99 does not use your personal data to make fully automated decisions with legal or similarly significant effects on you without human review. If we apply automated fraud detection that restricts your account, you have the right to request human review of that decision by contacting [email protected].

4. Legal Basis for Processing

cc99 processes your personal data only where we have a valid legal basis to do so. The legal bases on which we rely are:

• Contractual necessity — processing your identity data, contact data, financial transaction data, and gameplay data is necessary to perform the contract (your account agreement with cc99) under which we provide the Service to you.
• Legal obligation — processing your identity data for KYC and your financial transaction data for anti-money-laundering compliance is required by applicable law.
• Legitimate interests — processing your technical and device data and gameplay data for fraud detection, security monitoring, and platform performance improvement is necessary for cc99's legitimate business interests, provided these interests do not override your privacy rights.
• Consent — sending promotional communications (email or SMS marketing) is done only with your consent. You may withdraw consent at any time by contacting [email protected] or using the opt-out mechanism in any marketing message.

5. Sharing Your Personal Data

cc99 does not sell your personal data. We share your data only where necessary and only with the categories of recipients described below. All third parties with whom we share data are contractually required to handle it in accordance with applicable data protection standards:

• Payment processing partners — bKash, Nagad, Rocket, Upay, and supported banks receive the minimum transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and security protocols.
• Technology service providers — cc99 uses carefully selected third-party technology vendors for cloud hosting, platform infrastructure, customer support software, and fraud detection systems. These vendors process personal data only on cc99's documented instructions and are not permitted to use it for any other purpose.
• Regulatory and law enforcement authorities — cc99 may disclose personal data to competent authorities where required to do so by applicable law, court order, or regulatory direction. cc99 will notify affected players of such disclosure to the extent permitted by law.
• Business successors — in the event of a merger, acquisition, or sale of all or substantially all of cc99's business assets, your personal data may be transferred to the acquiring entity, which will be bound by this Privacy Policy.

6. Cookies and Tracking Technologies

cc99.bar uses cookies and similar technologies (local storage, session storage) to keep your session active, remember your preferences, and collect technical data for security and performance purposes. The following types of cookies are in use:

• Essential cookies — required for the core operation of cc99.bar, including maintaining your login session, remembering your language preference, and securing the platform against cross-site request forgery. These cannot be disabled without breaking the Service.
• Analytics cookies — used to understand how players navigate cc99.bar, which pages receive the most visits, and where technical errors occur. Analytics data is aggregated and anonymised wherever possible and is used solely to improve platform performance.
• Security cookies — used by our fraud detection and bot-mitigation systems to distinguish genuine player sessions from automated access attempts. These cookies do not track your behaviour for marketing purposes.

You may control non-essential cookies through your browser settings. Note that disabling essential cookies will prevent cc99 from functioning correctly and may result in your session being terminated. cc99 does not use third-party advertising cookies or share cookie data with ad networks.

7. Data Security

cc99 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security measures include SSL/TLS encryption for all data in transit, encrypted storage of sensitive account data at rest, role-based access controls that restrict internal staff access to personal data on a need-to-know basis, automated monitoring for unusual account activity and potential security breaches, and regular security reviews of our platform infrastructure.

No security system is impenetrable. In the unlikely event of a data breach that poses a risk to your personal data, cc99 will notify affected players as promptly as practicable. If you believe your cc99 account has been compromised, contact [email protected] immediately. cc99 will never ask you to share your password via live chat, SMS, phone call, or email.

8. Data Retention

cc99 retains your personal data only for as long as is necessary to fulfil the purposes set out in this Privacy Policy, or for as long as required by applicable law. The following retention periods apply:

• Account and identity data — retained for the duration of your account and for a minimum of 5 years after account closure to comply with anti-money-laundering record-keeping requirements.
• Financial transaction data — retained for a minimum of 5 years from the date of each transaction in accordance with financial record-keeping obligations.
• Technical and device data — retained for up to 12 months from the date of collection for security monitoring purposes, after which it is anonymised or deleted. Anonymised aggregate analytics data may be retained indefinitely.

9. Your Data Rights

As a registered player on cc99, you have the following rights in relation to your personal data. To exercise any of these rights, contact [email protected] with the subject line "Data Rights Request". cc99 will respond within 30 days of receiving your request:

• Right of access — you have the right to request a copy of all personal data cc99 holds about you, including a description of the categories, purposes, and retention periods of that data.
• Right of rectification — you have the right to request correction of any personal data cc99 holds about you that is inaccurate or incomplete.
• Right of erasure — you have the right to request deletion of your personal data from cc99's systems, subject to our legal retention obligations. We cannot delete data we are legally required to retain, but we will delete all data that is not subject to a retention obligation.
• Right to restrict processing — you have the right to request that cc99 restricts the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to our use of it.
• Right to data portability — you have the right to receive a machine-readable copy of the personal data you provided to cc99 (account registration data and transaction history) and to transfer that data to another service provider.
• Right to withdraw consent — where cc99 processes your data on the basis of your consent (for example, for promotional communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

cc99 will not charge a fee to process a data rights request unless the request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply. If cc99 is unable to fulfil your request in full, we will explain why and advise what action is available to you.

10. Children's Privacy

cc99 is strictly an adults-only platform. Our Service is not directed at, and is not intended for use by, any person under the age of 21. We do not knowingly collect personal data from persons under 21 years of age. If cc99 discovers that it has collected personal data from a person under 21, that account will be immediately closed, all funds associated with the account will be reviewed in accordance with our Terms and Conditions, and the personal data will be deleted from our systems as promptly as practicable.

If you believe a person under 21 has registered on cc99, please notify us immediately at [email protected]. Parents and guardians who are concerned about underage gambling are encouraged to use parental control software to restrict access to gambling websites on devices used by minors.

11. Third-Party Links

cc99.bar may contain references to third-party services, including payment providers such as bKash and Nagad. These third-party services operate under their own privacy policies, which cc99 does not control and is not responsible for. We encourage you to review the privacy policy of any third-party service before providing your personal data to them. cc99 accepts no liability for the privacy practices or data security measures of third-party services.

12. Changes to This Privacy Policy

cc99 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will post a notice on cc99.bar and update the "Last updated" date at the top of this Policy. Where required by applicable law, we will notify affected players directly via their registered mobile number or email address.

Your continued use of cc99 after an updated Privacy Policy has been posted constitutes your acceptance of the revised Policy. If you do not agree with the changes, you must stop using the Service and may request account closure by contacting [email protected].

13. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how cc99 handles your personal data, please contact our support team at any time via live chat on cc99.bar or by emailing us. We aim to respond to all privacy-related enquiries within 5 business days.