xo999 Privacy Policy

This Privacy Policy ("Policy") describes how xo999 ("we", "us", "our", or "the Platform") collects, uses, stores, shares, and protects personal information about users ("you" or "your") who access or use the xo999 platform at xo999.vip and all associated services. By registering an account or using the xo999 platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal information as described herein.

This Policy applies to all visitors, registered members, and depositing players of the xo999 platform. It covers personal data collected through the website, through account registration and verification, through payment transactions, and through your general use of platform features. This Policy should be read alongside the xo999 Terms and Conditions.

Our Six Privacy Principles

Every data decision at xo999 is guided by six core privacy principles that apply to all personal data we process, regardless of how it was collected.

1. Information We Collect

xo999 collects personal information directly from you when you register or interact with the platform, automatically through your use of the site, and from trusted third parties such as payment processors and identity verification services. The categories of personal data we collect are outlined below.

We do not collect sensitive categories of personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data, unless specifically required by applicable law or regulation.

2. How We Use Your Information

xo999 uses the personal information we collect for the following purposes. All uses are proportionate to the stated purpose and limited to what is strictly necessary.

• Account creation, management, and authentication — to register your account, verify your identity, maintain your account balance, and manage your login sessions.
• Payment processing — to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard in BDT, and to maintain transaction records as required by applicable financial regulations.
• KYC and anti-money-laundering compliance — to verify your age (21+), identity, and source of funds. This is a legal requirement and cannot be opted out of.
• Platform operation and improvement — to deliver games, betting markets, promotions, and customer support, and to analyse usage patterns to improve platform performance and user experience.
• Responsible gaming monitoring — to monitor account activity for indicators of problem gambling and to enforce deposit limits, self-exclusion periods, and operator-imposed restrictions.
• Security and fraud prevention — to detect, investigate, and prevent fraudulent activity, account takeover, money laundering, collusion, and any other prohibited conduct under the xo999 Terms and Conditions.

3. Legal Basis for Processing

xo999 processes personal data on the following legal bases. We apply the most appropriate basis to each processing activity.

• Contractual necessity — processing your identity, contact, financial, and gaming data is necessary to perform the contract between you and xo999, meaning to provide you the gaming and betting services you have registered to use.
• Legal obligation — we are required by law to conduct KYC verification, retain financial transaction records, and report certain activities to relevant authorities. These obligations cannot be waived.
• Legitimate interests — we process technical and gaming activity data to detect fraud, maintain platform security, and improve our services, always balancing these interests against your privacy rights.
• Consent — where we rely on consent, for example for optional marketing communications, you may withdraw your consent at any time by contacting our support team. Withdrawal does not affect the lawfulness of prior processing.

4. Sharing Your Information

xo999 does not sell your personal data. We share personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

Payment and Identity Verification Providers

We share financial data with payment processors including bKash, Nagad, Rocket, and Upay gateway operators, and with identity verification services, strictly to the extent required to process your transactions and complete KYC verification. These providers are contractually bound to use your data only for these stated purposes.

Game Studio Providers

Live dealer and RNG game studios including Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe receive limited technical session data necessary to operate their games on the xo999 platform. They do not receive your identity documents, payment details, or contact information.

Regulatory and Law Enforcement Authorities

We may disclose personal data to regulatory bodies, law enforcement agencies, or courts where required by applicable law, regulation, legal process, or enforceable governmental request. We will notify you of such disclosures where legally permitted.

5. Cookies and Tracking Technologies

xo999 uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files placed on your device when you visit xo999.vip. We use three categories of cookies.

• Strictly necessary cookies — required for the platform to function, including session cookies that keep you logged in, security tokens that protect your account, and cookies that remember your language preferences. You cannot opt out of strictly necessary cookies.
• Performance and analytics cookies — collect aggregate, anonymised data about how users navigate the platform to help us identify slow pages, confusing navigation flows, and under-used features. No personally identifiable information is included.
• Functional cookies — remember your preferences and personalise your xo999 experience, such as your preferred game lobby layout or last-visited game category. These cookies do not track your activity on other websites.

You can manage or delete cookies through your browser settings at any time. Note that disabling certain cookies may affect platform functionality — in particular, disabling strictly necessary cookies may prevent you from logging in or using features that depend on session management.

6. Data Retention

xo999 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, subject to any longer retention period required by applicable law or regulation.

Account and identity data is retained for the duration of your account and a minimum of five years after closure, in compliance with anti-money-laundering record-keeping requirements. Financial transaction records are retained for a minimum of five years from the transaction date. Technical and gaming activity data is retained for up to two years for security and analytics purposes. Where you withdraw consent for optional data uses, we will cease that use promptly and delete the relevant data within 30 days, unless retention is required for another legal purpose.

7. Data Security

xo999 implements technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. Our security infrastructure includes SSL/TLS encryption for all data transmitted between your device and the xo999 platform, encrypted storage of sensitive data fields at rest, access controls that limit internal access to personal data on a strict need-to-know basis, and regular security assessments of our platform and third-party integrations.

In the event of a personal data breach likely to result in a risk to your rights and freedoms, xo999 will notify affected users without undue delay after becoming aware of the breach, and will take immediate steps to contain and remediate it.

8. Your Privacy Rights

As a user of the xo999 platform, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team at [email protected]. We will respond to all valid requests within 30 days of receipt.

• Right of access — you may request a copy of the personal data we hold about you, together with information about how we use it and who we share it with.
• Right to rectification — you may request correction of any inaccurate or incomplete personal data we hold. We will correct the data promptly and notify any third parties who received the inaccurate data where necessary.
• Right to erasure — you may request deletion of your personal data where it is no longer necessary for the purposes it was collected, subject to overriding legal retention obligations. Erasure of account data will require account closure.
• Right to restriction — you may request that we restrict processing of your personal data in certain circumstances, for example while you contest the accuracy of the data or object to our processing.
• Right to data portability — where processing is based on your consent or a contract with you and carried out by automated means, you may request a copy of your personal data in a structured, machine-readable format.

Some rights are subject to exceptions and may not apply in all circumstances. We cannot erase data we are legally required to retain, and we will explain any applicable exception when responding to your request.

9. Children's Privacy

The xo999 platform is strictly intended for adults aged 21 years and above. xo999 does not knowingly collect personal data from individuals under the age of 21. If we become aware that we have collected personal data from a person under 21, we will immediately close the relevant account, void any associated winnings, and delete all personal data associated with that account.

10. Changes to This Privacy Policy

xo999 reserves the right to update or amend this Privacy Policy at any time. When we make material changes, we will update the effective date at the top of this page and, where appropriate, notify registered users via the contact details we hold. We encourage you to review this Policy periodically.

Your continued use of the xo999 platform after any update to this Privacy Policy constitutes your acceptance of the revised Policy. If you do not agree to the revised terms, you should stop using the platform and may request account closure.

11. Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to report a suspected data breach or privacy concern, please contact our support team. We are available 24/7 and will respond to all privacy-related enquiries promptly.