au99 Privacy Policy — How We Collect, Use, and Protect Your Personal Data

au99 ("the Company", "we", "us", "our") operates the online casino and sports betting platform available at au99.io (the "Platform"). We are committed to protecting and respecting the privacy of all individuals who use our services ("Players", "you", "your").

This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it. This policy applies to all data processing activities conducted by au99 in connection with the Platform, including the website, any mobile-optimised version, customer support communications, payment processing, and identity verification.

We recognise that players based in Bangladesh entrust us with sensitive personal and financial information, and we take that responsibility extremely seriously. Our data handling practices are designed to be transparent, proportionate, and consistent with internationally recognised principles of data protection.

For the purposes of this Privacy Policy, au99 acts as the data controller in respect of all personal data collected and processed through the Platform. As data controller, au99 determines the purposes for which and the manner in which your personal data is processed.

All data protection enquiries, rights requests, and complaints should be directed to our designated Data Protection contact:

• Contact Method: Email — [email protected] (plain text — not a clickable link)
• Response Time: Within 30 calendar days of receipt of a verifiable request
• Support Language: English
• Operational Hours: 24/7, with all formal data requests acknowledged within 2 business days

If your request relates specifically to exercising a data subject right (such as access, erasure, or portability), please clearly state the nature of your request in the subject line of your email so that it can be routed to the appropriate team promptly.

au99 collects the following categories of personal data from players. We collect only what is necessary for the specific purposes described in Section 5 of this policy.

We do not intentionally collect any special category data (such as health information, racial or ethnic origin, religious beliefs, or political opinions) unless you voluntarily disclose such information in the context of a responsible gaming request or a support enquiry. In such cases, the data is used solely to provide you with appropriate support and is handled with enhanced care.

au99 collects personal data through the following channels:

• Direct interactions: When you register an account, complete identity verification, make a deposit or withdrawal, contact our support team, or update your profile settings, you provide us with personal data directly.
• Automated technologies: As you interact with the Platform, we automatically collect Technical Data and Usage Data via cookies, server logs, pixel tags, and similar tracking technologies. See Section 8 for full details on cookies.
• Payment processors: When you initiate a deposit or withdrawal, our payment partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard) share limited transaction confirmation data with us to reconcile your account balance and confirm the status of each transaction.
• Identity verification providers: We may use third-party KYC (Know Your Customer) service providers to verify the authenticity of identification documents you submit. These providers process document data on our behalf under strict data processing agreements.
• Fraud prevention services: au99 uses specialised fraud detection tools that may cross-reference data points such as your IP address, device fingerprint, and registration details against known fraud databases.

au99 uses the personal data we collect for the following specific purposes. We do not use your data in ways that are incompatible with the purpose for which it was originally collected.

• Account creation and management: To register your account, verify your identity, manage your profile, and maintain your account history on the Platform.
• Processing transactions: To process deposits and withdrawals via your chosen payment method, reconcile balances, and maintain accurate financial records for your account.
• Identity and age verification: To confirm that you meet the minimum age requirement of 21 years and to verify that the identity you have provided is accurate and consistent with our KYC requirements.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, money laundering, and other forms of financial crime or abuse of our platform.
• Responsible gaming: To monitor your gaming activity for indicators of problem gambling behaviour, apply any self-imposed limits you have set, and intervene where appropriate to promote player wellbeing.
• Customer support: To respond to your enquiries, resolve complaints, process account-related requests, and maintain records of support interactions for quality assurance purposes.
• Legal and regulatory compliance: To fulfil our obligations under applicable anti-money laundering (AML) regulations, to respond to lawful requests from law enforcement or regulatory authorities, and to defend against legal claims.
• Platform improvement: To analyse aggregated, anonymised usage data to improve the functionality, performance, and user experience of the au99 platform over time.
• Communications: To send you transactional communications (deposit confirmations, withdrawal receipts, account alerts) and, where you have opted in, promotional communications about bonuses, tournaments, and new features.

au99 processes your personal data only where a valid legal basis exists. The primary legal bases we rely on are as follows:

• Contractual necessity: The majority of our data processing is necessary to fulfil our contract with you — specifically, to provide the online gambling services you have registered to use. This includes account management, transaction processing, game delivery, and customer support.
• Legal obligation: Certain processing activities are required by applicable law, including anti-money laundering (AML) obligations, identity verification (KYC) requirements, and the retention of financial records for statutory periods. We have no discretion to avoid this processing.
• Legitimate interests: We process some data on the basis of our legitimate interests, including fraud prevention, platform security, responsible gaming monitoring, and the improvement of our services. Where we rely on this basis, we conduct a balancing assessment to confirm that our interests are not overridden by your privacy rights.
• Consent: Where we rely on consent — for example, for the sending of marketing communications — we will always ask for your explicit agreement in advance. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

au99 does not sell, rent, or trade your personal data. We share personal data with third parties only in the following limited circumstances, and only to the extent necessary for the specific purpose:

• Payment service providers: bKash, Nagad, Rocket, Upay, Visa, and Mastercard receive the transactional data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are independently regulated.
• Identity verification providers: Third-party KYC providers receive copies of identity documents you submit for verification purposes. They process this data as data processors on our behalf, under contractual obligations that require them to handle the data securely and confidentially.
• Fraud detection and security services: We share limited technical and transactional data with fraud prevention tools to detect and prevent financial crime. These tools process data under strict data processing agreements.
• Game providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive your player session data (such as a pseudonymous player ID and bet history) to deliver their games and calculate results. They do not receive your name, payment details, or contact information.
• Legal and regulatory authorities: We may disclose your personal data to law enforcement agencies, regulatory bodies, courts, or other public authorities where required to do so by applicable law, court order, or in connection with the prevention or detection of crime.
• Business transfers: In the event that au99 undergoes a merger, acquisition, or sale of all or substantially all of its assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and of any change in the applicable privacy policy.

In all cases where we engage third-party processors, we require them to implement appropriate technical and organisational measures to protect your data and to process it only in accordance with our documented instructions.

au99 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain your session, and collect usage analytics. A cookie is a small text file placed on your device by a web server. Cookies cannot run programs or deliver viruses; they are unique to your browser and can be read only by the server that placed them.

The categories of cookies we use are:

• Strictly necessary cookies: These are essential for the Platform to function and cannot be disabled. They include session authentication cookies, security tokens, and load-balancing cookies. No consent is required for these cookies.
• Functional cookies: These allow the Platform to remember your preferences, such as your language settings, display preferences, and whether you have previously acknowledged certain notices.
• Analytics cookies: These help us understand how players interact with the Platform — which pages are visited most, where players drop off, and how long sessions last. This data is aggregated and anonymised. We use this information to improve the Platform's design and content.
• Security and fraud-detection cookies: These help us identify suspicious behaviour, detect bot activity, and protect player accounts from unauthorised access.

You can manage your cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. However, disabling strictly necessary cookies will impair your ability to use the Platform. For detailed instructions on managing cookies in your browser, refer to your browser's help documentation.

au99 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our retention schedules are as follows:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with you. Where anonymisation is not technically feasible, the data is destroyed in accordance with secure data disposal procedures.

au99 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security programme includes:

• 256-bit SSL/TLS encryption on all data transmissions between your device and our servers.
• Encryption at rest for all stored personal and financial data using industry-standard encryption algorithms.
• Role-based access controls that limit internal access to personal data strictly to staff members who require it to perform their job functions.
• Regular security audits and penetration testing conducted by qualified third-party security specialists.
• Two-factor authentication (2FA) available for all player accounts and mandatory for internal administrative access.
• Continuous intrusion detection monitoring on all production systems, with automated alerts for anomalous activity.
• Secure data centre infrastructure with physical access controls, redundant systems, and disaster recovery provisions.

While au99 takes all reasonable steps to protect your personal data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee the absolute security of data transmitted to the Platform, and any transmission is at your own risk. You play an important role in your own data security — use a strong, unique password for your au99 account and never share your login credentials with anyone.

Subject to applicable law, you have the following rights in relation to the personal data au99 holds about you. To exercise any of these rights, please contact us at [email protected] with a clear description of your request. We will respond within 30 calendar days.

• Right of access: You have the right to request a copy of the personal data we hold about you, together with information about how we use it, who we share it with, and how long we retain it. This is commonly known as a Subject Access Request (SAR).
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay.
• Right to erasure: In certain circumstances, you have the right to request the deletion of your personal data — for example, where the data is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent. This right is not absolute; it may be limited by our legal obligations (e.g., AML record-keeping requirements).
• Right to restriction of processing: You may request that we restrict the processing of your data in certain circumstances — for example, while we investigate a dispute about its accuracy.
• Right to data portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to transmit it to another data controller.
• Right to object: You have the right to object to processing based on our legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your rights.
• Right to withdraw consent: Where we process data on the basis of consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

The au99 platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or store personal data from individuals under the age of 21. Registration by minors is prohibited under our Terms & Conditions, and any account found to belong to a person under 21 will be immediately closed.

If you are a parent or guardian and believe that your child has registered an account with au99 or provided us with personal data without your consent, please contact us immediately at [email protected]. We will investigate and, if confirmed, delete all associated personal data and close the account without delay.

au99 uses a combination of age declaration at registration, identity verification, and responsible gaming monitoring to enforce our minimum age policy. We take underage gambling prevention extremely seriously and invest in technical and procedural measures to uphold this commitment.

The au99 Platform may contain references to third-party services, including the payment platforms bKash, Nagad, Rocket, and Upay, and the game studios whose titles are available on our platform. Where you follow a link to any third-party website or service, please note that those sites have their own privacy policies and terms of use, for which au99 accepts no responsibility or liability.

We strongly encourage you to review the privacy policy of any third-party service before submitting personal data to them. The inclusion of a link to or reference to a third-party service on the au99 Platform does not constitute an endorsement of that service's privacy practices.

This Privacy Policy governs only the data processing activities of au99 in connection with the Platform. It does not extend to data processed independently by any third-party service provider, payment processor, game studio, or any other external party.

au99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory guidance, or the structure of our business. The date at the top of this policy indicates when it was last revised.

Where a proposed change is material — meaning it significantly affects how we collect, use, or share your personal data — we will notify you in advance via email (to the address registered on your account) and/or via a prominent notice on the Platform, giving you a reasonable period to review the changes before they take effect.

For minor or non-material changes (such as corrections to wording, formatting updates, or the addition of clarifying examples), we may update the policy without advance notice, though the revised effective date will always be displayed at the top of this page.

Your continued use of the Platform after any revised Privacy Policy has taken effect constitutes your acceptance of the updated terms. If you do not agree with any changes, you should stop using the Platform and contact us to close your account.

If you have any questions, concerns, or complaints about this Privacy Policy or about how au99 handles your personal data, please do not hesitate to get in touch. We are committed to resolving all privacy-related enquiries promptly and transparently.

• Email: [email protected] (plain text — not a clickable link)
• Response time: Acknowledgement within 2 business days; full response within 30 calendar days
• Support hours: 24/7 live chat available on the Platform; email responses during Bangladesh Standard Time (BST, UTC+6) business hours
• Languages supported: English

If you are not satisfied with our response to a privacy complaint, you may have the right to escalate your complaint to a relevant supervisory or regulatory authority in your jurisdiction. We will always cooperate fully with any such authority in the resolution of complaints.

We value every player's trust and are dedicated to upholding the highest standards of data protection in all of our operations. Thank you for taking the time to read this Privacy Policy in full.