Privacy Policy — How cx999 Collects, Uses, and Protects Your Personal Data

1 Information We Collect

cx999 collects personal information from players in Bangladesh in order to operate a secure, compliant, and enjoyable gaming platform. We collect only the information that is necessary for the purposes described in this Privacy Policy. The categories of personal data we collect are described below.

1.1 Registration and Account Data

When you create a cx999 account, we collect the following information:

• Full legal name (as it appears on your National Identity Card or passport);
• Email address;
• Bangladesh mobile phone number;
• Date of birth (to verify that you are 18 years of age or older);
• Preferred username and encrypted password;
• Country of residence (Bangladesh);
• Preferred language and currency (English / BDT).

1.2 Identity Verification (KYC) Data

Before cx999 processes any withdrawal from your account, we are required to verify your identity. As part of our Know Your Customer (KYC) process, we may collect:

• A copy of your Bangladesh National Identity Card (NID) — front and back;
• A copy of your passport (if used as an alternative identification document);
• A recent utility bill, bank statement, or other proof of address dated within the last three months;
• Selfie photographs or liveness check images for biometric identity confirmation;
• Source of funds documentation for large transactions (above ৳50,000).

KYC documents are stored securely and are processed only by authorised cx999 compliance personnel. They are not used for any purpose other than identity verification and anti-money laundering screening.

1.3 Financial Transaction Data

cx999 records the details of all financial transactions carried out on your account, including:

• Deposit amounts, timestamps, and originating payment method (bKash, Nagad, Rocket, Upay, bank transfer, card);
• Withdrawal amounts, timestamps, and destination payment method;
• Bonus credits and wagering activity linked to promotional offers;
• Transaction reference numbers generated by the payment gateway.

cx999 does not store full card numbers (PAN) or complete mobile wallet PINs on its own servers. All payment processing is conducted via PCI-DSS compliant payment gateway partners.

1.4 Gaming Activity Data

We record your gaming activity on cx999 in order to provide a personalised experience, investigate disputes, and comply with responsible gaming obligations. This includes:

• Games played, bet amounts, and game outcomes;
• Cricket betting history including markets, odds, and settlement results;
• Session duration, login times, and logout times (Bangladesh Standard Time, UTC+6);
• Bonus wagering progress and promotional participation history.

1.5 Technical and Device Data

When you access cx999 via a web browser or mobile device, we automatically collect certain technical data, including:

• IP address and approximate geographic location (city-level, derived from IP);
• Device type, operating system, and browser version;
• Referring URL (the webpage from which you arrived at cx999);
• Pages visited on cx999, click paths, and session duration;
• Error logs and crash reports (to support technical troubleshooting).

1.6 Communications Data

If you contact cx999's customer support team via email, live chat, or any other channel, we retain a record of that communication — including the content of messages — for quality assurance, dispute resolution, and staff training purposes. Support communications are retained for a minimum of two years.

2 How We Use Your Data

cx999 processes personal data only where there is a clear and lawful basis for doing so. The purposes for which we use your data are set out below, alongside the legal basis that applies to each processing activity.

2.1 Service Delivery

The primary reason cx999 processes your personal data is to provide you with the gaming and betting services you have registered for. This includes creating and managing your account, processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other Bangladesh payment methods, delivering game content, settling bets, and communicating important account information to you. This processing is necessary for the performance of your contract with cx999.

2.2 Identity Verification and Legal Compliance

cx999 is required to verify the identity of all players before processing withdrawals, in order to comply with responsible gaming standards and anti-money laundering obligations. KYC processing is carried out on the basis of legal obligation. cx999 may also be required to disclose certain player data to regulatory or law enforcement authorities in response to a lawful request. Such disclosures are made only where cx999 is legally required to comply.

2.3 Fraud Prevention and Platform Security

cx999 uses technical and account data to detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, and other conduct that violates our Terms & Conditions or applicable law. This processing is carried out in cx999's legitimate interest in maintaining the integrity of the platform and protecting all players from harm.

2.4 Responsible Gaming Monitoring

cx999 analyses gaming activity data to identify patterns that may indicate problem gambling behaviour — such as increasing bet sizes, extended uninterrupted sessions, or unusual loss chasing patterns. Where such patterns are detected, cx999 may proactively reach out to the player with responsible gaming information or apply account-level limits. This processing is in both cx999's legitimate interest and the player's vital interest in personal wellbeing.

2.5 Customer Support

When you contact cx999 support, we use your account data and communication records to resolve your query efficiently. Support interactions may be reviewed by cx999 quality assurance staff to improve service standards. This processing is necessary for the performance of your contract and cx999's legitimate interest in service improvement.

2.6 Marketing Communications (Opt-In Only)

If you have explicitly opted in to receive marketing communications during registration or via your account settings, cx999 may send you promotional emails or SMS messages about new games, sports betting offers, BPL cricket promotions, seasonal offers (such as Eid or Pohela Boishakh specials), and other cx999 news. This processing is based on your consent and you may withdraw that consent at any time by updating your account preferences or by contacting support at support@cx999.bet. cx999 does not sell or rent your contact details to any third party for their own marketing purposes.

2.7 Platform Analytics and Improvement

cx999 uses aggregated and anonymised analytics data to understand how players use the platform, which games are most popular, where users encounter technical difficulties, and how the overall product can be improved. This analytics processing does not identify individual players and is carried out on the basis of cx999's legitimate interest in platform development.

3 Data Sharing & Third Parties

cx999 does not sell, rent, or trade your personal data to any third party for commercial gain. However, in order to operate the platform effectively, cx999 shares certain personal data with a limited number of trusted third-party service providers and partners. All third parties who process data on cx999's behalf are contractually bound to handle it securely and only for the purposes specified by cx999.

3.1 Payment Processing Partners

To process your deposits and withdrawals, cx999 shares necessary transaction data with our payment gateway partners who handle bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard transactions. These partners receive only the minimum data required to complete the transaction and are subject to their own data protection and PCI-DSS compliance requirements. cx999 does not store full payment credentials on its own infrastructure.

3.2 Game and Technology Providers

cx999's gaming library is powered by third-party certified game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others. These providers may receive technical session data (such as session tokens and game round identifiers) in order to deliver and validate game content. They do not receive your full personal profile. All game providers used by cx999 are independently certified and operate under strict data handling standards.

3.3 Identity Verification Service Providers

cx999 uses a third-party KYC verification service to assist in the validation of identity documents submitted by players. This provider receives copies of submitted identity documents and processes them in a secure, audited environment solely for the purpose of verification. KYC providers are subject to strict data processing agreements with cx999.

3.4 Analytics and Security Providers

cx999 uses third-party analytics tools and fraud detection systems to monitor platform performance and security. These tools may process anonymised or pseudonymised technical data such as IP addresses, session durations, and click patterns. No personally identifiable account information is shared with analytics providers beyond what is necessary for security threat detection.

3.5 Legal and Regulatory Disclosures

cx999 may disclose personal data to law enforcement agencies, regulatory bodies, or other government authorities where required to do so by a lawful order, court order, or applicable legal obligation. cx999 will comply with all legally valid requests for data disclosure and will notify the affected player of such a disclosure where it is legally permitted to do so.

4 Cookies & Tracking Technologies

cx999 uses cookies and similar tracking technologies on its website. A cookie is a small text file placed on your device by a website you visit. Cookies help cx999 remember your preferences, keep you logged in securely, and understand how players interact with the platform.

4.1 Types of Cookies Used by cx999

4.2 Third-Party Cookies

Some third-party services integrated into cx999 — such as game studio iframes and payment gateway widgets — may set their own cookies on your device. These cookies are governed by the respective third party's own cookie and privacy policies. cx999 does not control third-party cookies set by game providers or payment processors and recommends reviewing their policies if you have concerns.

4.3 Managing Your Cookie Preferences

You can manage and delete cookies at any time through your web browser's settings. Most modern browsers allow you to block all third-party cookies, delete existing cookies, or receive alerts when a new cookie is set. Please note that disabling strictly necessary or fraud prevention cookies may prevent you from logging in to your cx999 account or may impair the functionality of certain games. Disabling functional or analytics cookies will not prevent you from using the platform but may result in a less personalised experience.

4.4 Local Storage and Session Storage

In addition to cookies, cx999 may use browser local storage and session storage to save temporary data such as your active game session state, unsaved form data, and UI preferences. This data is stored on your device only and is not transmitted to cx999's servers independently of your normal session traffic.

5 Data Security Measures

cx999 takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, loss, destruction, or disclosure. While no online platform can guarantee absolute security, cx999's security programme is designed to meet industry best practices for online gaming platforms serving the Bangladesh market.

5.1 Technical Security Controls

• 256-bit SSL/TLS encryption on all pages and data transmissions between your device and cx999's servers;
• Encrypted password storage using industry-standard hashing algorithms — cx999 staff cannot view your plaintext password;
• Two-factor authentication (2FA) via SMS OTP to your registered Bangladesh mobile number, available on all accounts;
• Firewall and intrusion detection systems monitoring cx999's server infrastructure around the clock;
• Automated fraud detection systems that flag unusual login locations, rapid account activity changes, and suspicious transaction patterns;
• Regular security audits and penetration testing of the cx999 platform by independent security specialists.

5.2 Organisational Security Controls

• Access to player personal data is restricted on a strict need-to-know basis — only staff whose role requires access to specific data categories may view that data;
• All cx999 staff with access to personal data are bound by confidentiality obligations and receive regular data protection training;
• All third-party data processors are subject to binding data processing agreements that impose security requirements equivalent to cx999's own standards;
• cx999 maintains an incident response plan for data security events, including notification procedures in the event of a data breach that affects player personal data.

5.3 Your Role in Account Security

cx999's security measures are most effective when combined with good security hygiene on your part. You are responsible for keeping your account credentials confidential. cx999 recommends using a unique, strong password for your cx999 account that is not shared with any other online service, enabling SMS two-factor authentication, and logging out of your account after each session — particularly when using a shared or public device. If you suspect that your account has been accessed without your authorisation, contact cx999 support immediately at support@cx999.bet.

6 Data Retention Policy

cx999 retains personal data only for as long as is necessary for the purposes for which it was collected, or for as long as is required by applicable legal and regulatory obligations. The following retention schedule summarises the standard periods applied by cx999.

At the end of the applicable retention period, cx999 will securely delete or anonymise your personal data so that it can no longer be linked to you as an individual. Anonymised aggregated data (with no ability to re-identify individuals) may be retained indefinitely for statistical and analytical purposes.

Where you request deletion of your data (see Section 7 below), cx999 will action the request within the required timeframe, subject to any overriding legal obligation to retain certain categories of data for longer periods.

7 Your Privacy Rights

As a cx999 player, you have meaningful rights over your personal data. cx999 is committed to honouring these rights promptly and transparently. The following rights are available to you in relation to the personal data cx999 holds about you.

7.1 Right of Access

You have the right to request a copy of the personal data cx999 holds about you. This is sometimes called a Subject Access Request (SAR). cx999 will respond to a valid SAR within 30 days of receipt, providing a summary of the data held across all categories described in Section 1. To submit a SAR, email support@cx999.bet with the subject line "Data Access Request" from your registered email address.

7.2 Right to Rectification

If any personal data cx999 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For most account data (email address, phone number, preferred name), you can update this directly via your account settings. For KYC-related data corrections, please contact support@cx999.bet and provide the updated documentation.

7.3 Right to Erasure

You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose it was collected, or where you withdraw your consent and there is no other lawful basis for processing. Please note that cx999 may be required to retain certain categories of data (such as financial transaction records and KYC documents) for defined minimum periods under legal and regulatory obligations, even following an erasure request. cx999 will inform you of any such restrictions when responding to your request.

7.4 Right to Restrict Processing

You may request that cx999 restricts the processing of your personal data in certain situations — for example, while the accuracy of data you have disputed is being verified. During a restriction period, cx999 will continue to store the data but will not actively process it beyond what is necessary for storage purposes and to record the restriction.

7.5 Right to Object

Where cx999 processes your personal data on the basis of its legitimate interests (for example, for fraud prevention analytics or platform improvement), you have the right to object to that processing. cx999 will review your objection and cease the processing in question unless cx999 can demonstrate compelling legitimate grounds that override your interests or the processing is necessary for the establishment, exercise, or defence of legal claims.

7.6 Right to Withdraw Marketing Consent

Where cx999 processes your personal data for direct marketing purposes based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal. To opt out of marketing communications, update your account notification settings or contact support@cx999.bet with the subject line "Unsubscribe from Marketing". cx999 will process opt-out requests within five business days.

7.7 How to Exercise Your Rights

To exercise any of the rights described in this section, please contact cx999 in writing at support@cx999.bet. To protect your privacy, cx999 will verify your identity before actioning any data rights request. We aim to respond to all data rights requests within 30 days. Where a request is complex or we have received a high volume of requests, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

8 Contact & Policy Updates

8.1 Contacting cx999 About Privacy

If you have any questions, concerns, or complaints about this Privacy Policy or about the way cx999 handles your personal data, please contact our support team in writing:

• Email: support@cx999.bet (please use the subject line "Privacy Enquiry" for fastest routing)
• Response time: cx999 aims to acknowledge all privacy enquiries within two business days and to provide a substantive response within 14 business days (Bangladesh Standard Time, UTC+6)

cx999 takes all privacy enquiries seriously. If you are not satisfied with cx999's response to a privacy complaint, you may seek further recourse through applicable legal channels in your jurisdiction.

8.2 Updates to This Privacy Policy

cx999 may update this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable law, or improvements to the platform. The current version of this Privacy Policy is always available at cx999.bet/privacy-policy. Material changes — meaning changes that significantly affect your rights or the way we process your personal data — will be communicated to registered players via the email address on file at least 14 days before the change takes effect. For non-material changes (such as minor wording clarifications), the updated policy will be published without prior individual notice.

The effective date and last-updated date shown at the top of this Privacy Policy reflect when the current version came into force. By continuing to use cx999 after the effective date of any update, you acknowledge the updated Privacy Policy. If you do not agree with the updated version, you should close your account in accordance with the Terms & Conditions before the effective date of the change.

8.3 Children and Minors

cx999 is strictly a platform for adults aged 18 and above. cx999 does not knowingly collect personal data from anyone under the age of 18. If cx999 becomes aware that personal data has been collected from a minor, that account will be immediately closed, all associated data will be deleted, and any deposits will be returned to the originating payment method. If you believe that a minor has registered an account on cx999, please notify us immediately at support@cx999.bet.