ph99 Privacy Policy

1. Data Controller

ph99, operating the website ph99.im, is the data controller responsible for your personal information. As the data controller, ph99 determines the purposes and means by which personal data collected from players in Bangladesh and elsewhere is processed.

ph99 takes its data protection responsibilities seriously. We apply appropriate technical and organisational measures to safeguard the personal information of all players, consistent with recognised data protection principles including purpose limitation, data minimisation, storage limitation, and integrity and confidentiality.

For any queries, concerns, or requests relating to your personal data, you may contact ph99's data support team at any time:

2. Information We Collect

ph99 collects personal data through several channels: directly from you when you register, through your use of the platform, and automatically through technical systems. The categories of personal data we collect are as follows:

2.1 Registration Data

When you create a ph99 account, we collect the following information:

• Full legal name (as it appears on your national identity card or passport)
• Date of birth (used for age verification — you must be 18 or older)
• Residential address in Bangladesh (district, division, and postal code)
• Mobile phone number registered to a Bangladesh network (Grameenphone, Robi, Banglalink, Teletalk, or Airtel Bangladesh)
• Email address
• Username and hashed password (passwords are never stored in plain text)

2.2 Identity Verification (KYC) Data

To comply with Know Your Customer (KYC) requirements and to verify player age and identity prior to processing significant withdrawals, ph99 may request:

• A copy of your Bangladesh National Identity Card (NID), passport, or birth certificate
• Proof of address (utility bill, bank statement, or government-issued document dated within 3 months)
• A selfie photograph held next to your identity document
• Proof of payment method ownership (e.g., screenshot of bKash or Nagad account showing registered name)

2.3 Financial Transaction Data

We collect records of all financial transactions processed through your ph99 account, including:

• Deposit amounts, dates, times, and payment method used (bKash, Nagad, Rocket, Upay, bank transfer, or card)
• Withdrawal requests, amounts, processing times, and destination account references
• Bonus credits applied, wagering progress, and bonus expiry events
• Currency (Bangladeshi Taka, ৳) and transaction reference numbers

2.4 Gaming Activity Data

ph99 maintains records of your activity across all platform verticals, including:

• Games played, bet sizes, session durations, win and loss amounts
• Sports bets placed, markets selected, odds accepted, and bet settlement outcomes
• Game preferences, favourite categories, and session frequency patterns
• Responsible gaming settings configured (deposit limits, session reminders, self-exclusion status)

2.5 Technical and Device Data

When you access ph99, our servers and analytics systems automatically collect:

• IP address and approximate geographic location (country and city level)
• Device type, operating system, and browser version
• Mobile network operator (where applicable)
• Pages visited, click paths, session start and end times, and error logs
• Cookie identifiers and session tokens (see Section 5 on Cookies)

Data Category	Collection Method	Required / Optional
Registration Data	Provided directly by player at sign-up	Required
KYC / Identity Documents	Provided by player upon verification request	Required (for withdrawals above threshold)
Transaction Records	Automatically generated at point of transaction	Required (inherent to account operation)
Gaming Activity	Automatically logged during gameplay	Required (inherent to account operation)
Technical & Device Data	Automatically collected via server logs and cookies	Required (platform security and fraud prevention)

3. How We Use Your Data

ph99 processes personal data only for legitimate, specified purposes. We do not sell your personal data to third parties for marketing purposes. The primary purposes for which we use your data are as follows:

3.1 Account Management and Platform Operation

Your registration and account data is used to create and maintain your ph99 account, authenticate your identity at login, process deposits and withdrawals in Bangladeshi Taka (৳), apply bonuses and promotional credits, communicate account-related notifications, and provide access to all casino and sports betting features available on the platform.

3.2 Identity Verification and Fraud Prevention

KYC data is used to verify that you are who you claim to be, that you are at least 18 years of age, and that you are the legitimate owner of the payment methods linked to your account. ph99 uses automated and manual fraud detection systems to monitor for suspicious activity, duplicate accounts, bonus abuse, and money laundering patterns. Where fraud is detected or suspected, your data may be shared with relevant authorities as described in Section 4.

3.3 Responsible Gaming Compliance

Gaming activity and transaction data is monitored to identify patterns that may indicate problem gambling behaviour. This monitoring is conducted in the interest of player welfare. Where at-risk patterns are detected, ph99 may reach out via your registered email or phone number to offer responsible gaming support resources, including deposit limit suggestions, cooling-off options, and self-exclusion guidance.

3.4 Customer Support

When you contact ph99's support team at [email protected], the content of your communications — including your name, account details, and the nature of your query — is recorded and retained for the purpose of resolving your issue, quality assurance, and training purposes.

3.5 Marketing Communications

With your consent at the time of registration (or subsequently via account preferences), ph99 may use your email address and mobile number to send you promotional communications including bonus offers, seasonal promotions (BPL cricket season specials, Eid offers, Pohela Boishakh promotions), new game announcements, and platform updates. You may opt out of marketing communications at any time by updating your account notification preferences or by contacting [email protected].

3.6 Legal and Regulatory Obligations

ph99 is required by applicable law and platform policy to retain certain records — including transaction histories and KYC documents — for specified minimum periods. Your data will be processed to the extent necessary to meet these obligations, including responding to lawful requests from law enforcement or regulatory authorities.

4. Data Sharing & Disclosure

ph99 does not sell, rent, or trade your personal data with third parties for commercial gain. Your data may be shared only in the following strictly controlled circumstances:

4.1 Payment Service Providers

To process deposits and withdrawals, ph99 shares the minimum necessary transaction data with payment providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. These providers process your financial data solely to facilitate the transaction and are contractually bound to protect your data and use it for no other purpose.

4.2 Game Studio Providers

Games on ph99 are supplied by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. To deliver gameplay and ensure accurate bet settlement, ph99 shares a session token and anonymised player identifier with the relevant game studio. No personally identifiable information (name, NID, address, or financial account details) is passed to game studios.

4.3 Identity Verification Partners

ph99 may engage specialist third-party identity verification services to assist with KYC processing. These partners receive KYC documents and biometric verification data solely for the purpose of identity confirmation and are bound by strict data processing agreements prohibiting any secondary use of the data.

4.4 Legal Authorities

ph99 will disclose personal data to law enforcement agencies, courts, or regulatory bodies where required to do so by a lawful order, subpoena, or legal obligation. ph99 will, where legally permissible, attempt to notify the affected player of such a disclosure request before complying.

4.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or a portion of ph99's business assets, player personal data held by ph99 may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer via the registered email address on their account prior to the transfer taking effect, and the acquiring entity will be bound to honour this Privacy Policy or provide notice of material changes.

5. Cookies & Tracking

ph99 uses cookies and similar tracking technologies to ensure the platform functions correctly, to maintain your login session, to remember your preferences, and to analyse how players interact with the site. The following categories of cookies are used:

5.1 Strictly Necessary Cookies

These cookies are essential for the ph99 platform to operate. They include session cookies that keep you logged in during your visit, security tokens that protect against cross-site request forgery, and load-balancing cookies that ensure your requests are routed to the correct server. Strictly necessary cookies cannot be disabled without breaking core platform functionality.

5.2 Functional Cookies

Functional cookies allow ph99 to remember your preferences between sessions — including your preferred language setting (English), previously visited game categories, and responsible gaming notification preferences. These cookies improve your experience but are not strictly required for basic platform operation.

5.3 Analytics Cookies

ph99 uses anonymised analytics data to understand how players navigate the platform, which game categories are most popular, and where technical issues are occurring. This data is aggregated and does not identify individual players. Analytics data is used solely to improve platform quality and player experience.

5.4 Fraud Prevention Cookies

Certain cookies and device fingerprinting techniques are used by ph99's fraud prevention systems to detect suspicious activity, identify unauthorised account access, and flag potential duplicate account creation. These are operational security measures and cannot be opted out of while using the platform.

5.5 Managing Cookies

You can control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that blocking certain cookies may impair your ability to use some features of the ph99 platform, including maintaining your logged-in session. For detailed instructions on managing cookies in your specific browser, consult your browser's help documentation.

6. Data Retention

ph99 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or to meet applicable legal and operational obligations. The following retention periods apply:

Data Type	Retention Period	Reason
Account registration data	Duration of account + 5 years after closure	Legal obligation, dispute resolution
KYC identity documents	5 years from date of verification	Anti-money-laundering compliance
Financial transaction records	7 years from transaction date	Financial record-keeping requirements
Gaming activity logs	3 years from last account activity	Responsible gaming monitoring, dispute resolution
Customer support communications	3 years from date of communication	Quality assurance, dispute reference
Marketing consent records	Until consent is withdrawn + 1 year	Proof of consent basis
Technical / server logs	90 days from generation	Security monitoring, fraud detection

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be associated with any individual player. Anonymised, aggregated data (e.g., platform-wide game popularity statistics) may be retained indefinitely as it carries no personal privacy risk.

7. Data Security

ph99 implements a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Key security measures in place include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the ph99 platform is encrypted using industry-standard SSL/TLS protocols. The padlock icon in your browser confirms that your connection is secure.
• Password Hashing: Passwords are never stored in plain text. ph99 uses strong one-way cryptographic hashing algorithms so that even if our database were ever compromised, your password could not be recovered.
• Access Controls: Access to personal data within ph99's internal systems is strictly limited to authorised personnel who require it to perform their job functions. Access is logged and audited regularly.
• Two-Factor Authentication (2FA): ph99 offers optional two-factor authentication for player accounts, adding an additional layer of protection beyond your password.
• Intrusion Detection Systems: ph99 operates continuous monitoring systems that detect and respond to unusual access patterns, potential data breaches, and network intrusion attempts in real time.
• Third-Party Security Audits: ph99 engages independent security professionals to conduct periodic penetration testing and vulnerability assessments of the platform's infrastructure.

Despite these measures, no online platform can guarantee absolute security. In the unlikely event of a data breach that affects your personal data, ph99 will notify you via your registered email address as promptly as practicable, with details of the nature of the breach, the data affected, and the steps being taken to address it.

8. Your Privacy Rights

As a player on the ph99 platform, you hold the following rights with respect to your personal data. To exercise any of these rights, submit a request to [email protected] from your registered email address. ph99 will respond to all verified data rights requests within a reasonable period.

8.1 Right of Access

You have the right to request a copy of the personal data ph99 holds about you. ph99 will provide this information in a clear, structured format. This includes your registration data, KYC records held on file, transaction history, and a summary of gaming activity logs within the applicable retention period.

8.2 Right to Rectification

If any personal data ph99 holds about you is inaccurate or incomplete, you have the right to request correction. You may update most registration details directly within your account settings. For changes to core identity information (legal name, date of birth), supporting documentation will be required.

8.3 Right to Erasure

You may request that ph99 delete your personal data. ph99 will honour erasure requests to the extent permitted by law. Please note that certain data categories — particularly financial transaction records and KYC documents — must be retained for legally mandated periods (see Section 6) and cannot be erased on request during those retention periods.

8.4 Right to Restriction of Processing

You may request that ph99 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified, or where you have objected to processing pending a determination of ph99's legitimate grounds.

8.5 Right to Data Portability

Where ph99 processes your personal data on the basis of your consent or for the performance of your account contract, and where processing is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON), and to request that this data be transmitted directly to another controller where technically feasible.

8.6 Right to Withdraw Consent

Where ph99 processes your personal data on the basis of your consent — most commonly for marketing communications — you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal. To withdraw marketing consent, update your notification preferences in account settings or contact [email protected].

9. Third-Party Services

The ph99 platform integrates with a number of third-party services to deliver its full range of features. Each third-party provider operates under its own privacy policy and data processing terms. ph99 is not responsible for the privacy practices of third-party services, but selects partners carefully and requires all third-party processors to maintain data protection standards consistent with this Privacy Policy.

Key third-party integrations on the ph99 platform include:

• Game Studios: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi — session data and anonymised game logs are shared as described in Section 4.2.
• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, Mastercard — transaction data is shared as described in Section 4.1.
• Identity Verification Services: KYC document verification partners — identity documents are shared as described in Section 4.3.
• Analytics Providers: ph99 uses privacy-respecting analytics tools that process only anonymised, aggregated usage data with no individual player identification.

ph99 does not embed social media tracking pixels, advertising retargeting tags, or any third-party commercial tracking technology that would allow external parties to identify ph99 players or build advertising profiles based on their visit to ph99.im.

10. Policy Updates

ph99 reserves the right to update or modify this Privacy Policy at any time to reflect changes in platform practices, applicable law, or technology. All changes will be published on this page at ph99.im/privacy-policy with a revised "Last Updated" date at the top of the document.

Where changes to this Privacy Policy are material — meaning they significantly affect how we collect, use, or share your personal data — ph99 will provide advance notice to registered players via email to their registered address, or via an in-platform notification displayed upon next login. We recommend reviewing this page periodically to stay informed of the current version.

Your continued use of the ph99 platform after any update to this Privacy Policy constitutes your acceptance of the revised Policy. If you object to any change, you may exercise your right to account closure and data erasure (subject to legal retention obligations) by contacting [email protected].