Xo99 Privacy Policy — How We Keep Your Information Safe

Xo99 (xo99.fun) is an international-standard online gaming platform serving players in Bangladesh and around the world. Our privacy policy is built in line with international data protection standards. This policy applies to you whenever you use the xo99 website, mobile app, or any of our services.

We believe transparency is the foundation of trust. That is why it is our responsibility to be clear about what we do with your data. This privacy policy may be updated at any time; the date of the latest update will be noted at the top of the page. Continued use of the platform after a new policy takes effect constitutes your acceptance of the updated terms.

• This policy applies to all xo99 services, products, and promotions.
• For third-party links, the respective party's own privacy policy applies.
• Xo99 does not process any sensitive information without the user's consent.

Xo99 only collects information that is necessary to deliver quality service and maintain platform security. We do not collect data beyond what is needed.

In addition, when you contact our support team, those conversations may be recorded for the purpose of improving service quality.

Xo99 uses your information only for the specific purposes outlined below. Each purpose has a legitimate basis, and we do not use your data beyond those limits.

• Account Management: For registration, login, password recovery, and profile updates.
• Financial Transactions: To process deposits and withdrawals successfully and to maintain transaction history.
• Service improvement: User behavior is analyzed to improve and personalize your gaming experience.
• Security Assurance: To detect fraud, multiple accounts, and unauthorized login attempts.
• Legal Compliance: To comply with regulatory requirements and implement AML (Anti-Money Laundering) policies.
• Contact: To keep you informed about promotional offers, important notices, and account updates.
• Responsible Gaming: To detect unusual gaming patterns and alert you in a timely manner.

Xo99 never sells or rents your personal information. In certain situations, limited data may be shared — always in your best interest and for your protection.

• Payment Providers: bKash, Nagad, Rocket, and other payment gateways receive the necessary information to process transactions.
• Identity Verification Providers: Limited data is shared with approved third-party verification providers for the KYC process.
• Legal Authorities: Data may be disclosed in response to a valid court order or directive from a regulatory authority.
• Security Analytics Providers: We work with specialist partners to prevent fraud and cyber attacks.
• Business Restructuring: In the event of a change in ownership of xo99, your information may be transferred to the new owner, but the terms of this policy will continue to apply.

Xo99 uses cookies and similar tracking technologies on its website. These help improve your browsing experience and ensure the platform functions properly.

• Essential Cookies: Essential for maintaining login sessions and core platform functionality. These cannot be disabled.
• Analytics Cookies: Used to understand which pages receive the most traffic and where users spend the most time.
• Functional Cookies: To remember your preferred language, theme, or game settings.
• Security Cookies: Used to prevent CSRF attacks and unauthorized sessions.

You can block or delete cookies through your browser settings, though some features may not work properly as a result.

Xo99 uses the latest technology to keep your data secure. Our security team monitors systems 24/7 and responds immediately to any threats.

• 256-bit SSL/TLS encryption: All data transmitted from your browser to our servers is encrypted.
• Two-Factor Authentication (2FA): An OTP system is in place for additional account security.
• Firewall & DDoS Protection: Advanced server-level firewall and DDoS mitigation systems.
• Regular Security Audits: Third-party experts conduct regular system penetration tests.
• Data Backup: Your information is backed up across multiple secure servers.
• Staff Training: All xo99 staff are trained in data protection policy and bound by confidentiality agreements.

Xo99 does not retain your information longer than necessary. Retention periods depend on the type of data and applicable legal requirements.

• Account Information: For the duration of account activity and up to 5 years after closure.
• Financial Transaction Records: A minimum of 5 years as required by law.
• KYC Documents: Retained after account closure in accordance with regulatory guidelines.
• Gaming History: At least 2 years for Responsible Gaming monitoring purposes.
• Support conversations: Up to 1 year after resolution of the dispute.
• Cookie Data: Depending on the cookie type — expires at end of session or up to 1 year.

Xo99 fully respects your right to data protection. To exercise any of the rights below, please reach out to our support team.