ag99 Privacy Policy – How We Protect Your Data

Introduction and Scope

This Privacy Policy ("Policy") describes how ag99 ("ag99", "we", "us", or "our") collects, uses, stores, discloses, and protects personal data when you access or use the ag99 platform available at ag99.io, including all games, betting markets, promotional services, and customer support channels offered through that platform.

ag99 is committed to handling your personal information with care, transparency, and respect. We recognise that you are entrusting us with sensitive data when you register an account and conduct financial transactions on our platform. This Policy explains the practical steps we take to honour that trust.

This Policy applies to all registered players, visitors to the ag99 website, and any other individuals whose personal data ag99 processes in connection with the operation of the platform. It applies regardless of the device or method used to access ag99.io, including desktop browsers, mobile browsers, and any ag99-branded mobile application.

By registering an account on ag99 or continuing to use the platform after this Policy has been published or updated, you acknowledge that you have read and understood this Policy and that you consent to the processing of your personal data as described herein.

Data Controller Information

For the purposes of this Privacy Policy, the data controller responsible for your personal data is the operator of the ag99 platform. The ag99 platform is operated to serve players primarily located in Bangladesh and directs its services toward the Bangladesh market.

As the data controller, ag99 determines the purposes for which and the manner in which your personal data is processed. Where ag99 engages third-party service providers to process data on its behalf, those providers act as data processors under instruction from ag99 and are bound by confidentiality and data protection obligations consistent with this Policy.

For all data-related inquiries, requests, or complaints, please contact ag99 directly at [email protected]. Correspondence relating specifically to personal data and privacy should reference "Privacy / Data Request" in the subject line to ensure it is directed to the appropriate team without delay.

Personal Data We Collect

ag99 collects personal data across several categories depending on how you interact with the platform. The table below summarises the categories of personal data we collect, the specific data points within each category, and the primary purpose for which each category is collected.

ag99 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic or biometric data, health data, or data concerning sexual orientation, except where strictly required by applicable law or expressly provided by you in the context of a responsible gaming self-assessment.

How We Collect Your Data

ag99 collects personal data through the following channels and mechanisms:

• Direct Registration: Information you provide when creating your ag99 account, including your name, date of birth, and mobile number.
• Account Activity: Data generated automatically as you use the platform, including bets placed, games played, deposits made, and withdrawals requested.
• Payment Processing: Transaction data received from mobile financial service providers (bKash, Nagad, Rocket, Upay) when you initiate a deposit or withdrawal. ag99 does not receive or store your mobile wallet PIN at any point.
• Customer Support Interactions: Information you provide when you contact ag99 via email or any other supported communication channel, including the content of your messages and any attachments you voluntarily submit.
• Automated Technical Collection: Device identifiers, IP addresses, browser fingerprints, and session data collected automatically when you connect to ag99.io. This data is collected via server logs and, where applicable, cookies and similar technologies (see Section 8).
• Identity Verification Processes: Documentation you provide in response to ag99's Know Your Customer (KYC) requests, including copies of national identification documents submitted for age and identity verification.
• Responsible Gaming Tools: Information you provide when activating responsible gaming features, such as deposit limit preferences, self-exclusion requests, and cooling-off period settings.

Legal Basis for Processing

ag99 processes your personal data only where a valid legal basis exists. The primary legal bases on which ag99 relies are as follows:

• Performance of a Contract: The majority of data processing by ag99 is necessary to perform the contract between ag99 and you as a registered player. This includes processing your registration, managing your account, executing deposits and withdrawals, recording your gameplay, and delivering promotional offers you have opted into.
• Legitimate Interests: ag99 processes certain data — particularly technical and device data — on the basis of its legitimate interests in maintaining platform security, detecting and preventing fraud, protecting other players, and improving the overall service. ag99 ensures that such processing does not override your fundamental rights and freedoms.
• Legal Obligation: Some processing is required to comply with applicable legal obligations, including anti-money-laundering (AML) regulations, age verification requirements, and record-keeping obligations under financial services law.
• Consent: Where ag99 relies on your consent to process your data — for example, for direct marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing that occurred before the withdrawal.

How We Use Your Personal Data

ag99 uses the personal data it collects for the following specific purposes:

• Account Management: Creating, maintaining, and administering your ag99 player account, including processing login authentication, managing account settings, and enabling responsible gaming tool activations.
• Payment Processing: Facilitating deposits from and withdrawals to your registered bKash, Nagad, Rocket, or Upay mobile wallet. Verifying the ownership of the payment method associated with your account to prevent fraud and third-party payment abuse.
• Identity Verification and KYC: Confirming that you meet the minimum age requirement of 21 years and verifying your identity in accordance with our obligations under applicable anti-money-laundering and fraud prevention frameworks.
• Responsible Gaming: Monitoring gameplay patterns to identify potential indicators of problem gambling, applying deposit limits and cooling-off periods you have self-selected, and proactively reaching out if our responsible gaming monitoring systems flag a concern.
• Customer Support: Reviewing and responding to support inquiries, resolving disputes, and maintaining a record of support interactions for quality and compliance purposes.
• Security and Fraud Prevention: Analysing device and behavioural data to detect unusual account activity, prevent unauthorised access, identify duplicate accounts, and protect the integrity of the platform against exploitation.
• Platform Improvement: Using aggregated, anonymised analytics data to understand how players navigate the platform, identify areas for improvement, and develop new features and products.
• Marketing Communications: Where you have consented, sending you promotional communications about ag99 bonuses, new game releases, and seasonal offers relevant to the Bangladesh market. You may withdraw this consent at any time by contacting [email protected].
• Legal Compliance: Retaining transaction and account records as required by applicable financial services, anti-money-laundering, and gaming regulations. Responding to lawful requests from competent authorities.

ag99 does not use your personal data for automated profiling that produces legal or similarly significant effects without human review. All significant decisions affecting your account — such as account suspension, bonus reclamation, or withdrawal holds — involve human assessment by ag99 staff.

Data Sharing and Third Parties

ag99 does not sell, rent, trade, or otherwise commercially disclose your personal data to third parties. Your data is shared only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.

• Payment Service Providers: Mobile financial service providers including bKash, Nagad, Rocket, and Upay receive the transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are independent data controllers in respect of the data they process within their own systems.
• Identity Verification Partners: Where ag99 uses a third-party KYC service to verify your identity or age, your identification documents are shared with that provider solely for verification purposes. Such providers are bound by contractual data protection obligations.
• Game Content Providers: Third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, and Spribe may receive anonymised session data necessary to deliver game content and resolve technical disputes. These providers do not receive your full personal profile.
• Fraud and Security Services: Specialist fraud detection and cybersecurity service providers may process limited technical data (such as IP addresses and device identifiers) to assist ag99 in protecting the platform. Such processing is conducted under strict data processing agreements.
• Legal and Regulatory Authorities: ag99 may disclose personal data to competent law enforcement or regulatory authorities where required to do so by law, court order, or in response to a legitimate legal process. ag99 will notify you of such disclosure where legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, or sale of all or a material part of ag99's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy practices applicable to your data following the transaction.

Cookies and Tracking Technologies

ag99 uses cookies and similar tracking technologies on the ag99.io website to support platform functionality, maintain session security, and gather analytics data. The following categories of cookies are in use:

• Strictly Necessary Cookies: These cookies are essential for the ag99 platform to function. They maintain your login session, remember your security preferences, and enable core platform features. These cookies cannot be disabled without impairing your ability to use ag99.io.
• Functional Cookies: These cookies remember your preferences and personalisation settings, such as language selection and responsible gaming tool configurations, so that you do not need to re-enter them on each visit.
• Analytics Cookies: ag99 uses analytics tools to collect anonymised, aggregated data about how visitors navigate and interact with ag99.io. This data helps us identify popular features, measure platform performance, and prioritise improvements. Analytics cookies do not personally identify you.
• Security Cookies: Short-lived cookies used to support authentication processes, CSRF protection, and fraud detection mechanisms. These are renewed automatically during each session.

ag99 does not use third-party advertising or retargeting cookies. You will not be tracked across other websites for the purpose of serving ag99 advertisements based on your browsing history.

You may manage or disable non-essential cookies at any time through your browser's cookie settings. Note that disabling strictly necessary cookies will prevent you from logging into your ag99 account and using key platform features. For detailed browser instructions, refer to your browser's help documentation.

Data Retention

ag99 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention principles apply:

• Active Account Data: Personal data associated with an active ag99 account is retained for the full duration of your account's active status plus a minimum post-closure period as required by applicable financial and gaming record-keeping obligations.
• Transaction Records: Financial transaction records — including deposit and withdrawal history — are retained for a minimum of five (5) years from the date of the transaction to comply with anti-money-laundering record-keeping requirements.
• Identity Verification Documents: KYC documents submitted for identity or age verification are retained for the duration of your account's active status plus a minimum period required under applicable law, after which they are securely deleted.
• Support Communications: Customer support correspondence is retained for a minimum of two (2) years from the date of last contact to support dispute resolution and service quality review.
• Closed Account Data: Upon permanent account closure, ag99 will anonymise or delete personal data that is no longer required for legal or regulatory purposes within a reasonable timeframe, subject to any outstanding legal holds.
• Marketing Data: Where you have consented to receive marketing communications, your contact details will be retained for that purpose until you withdraw consent. Withdrawal of consent results in prompt removal from active marketing lists, though anonymised record of the consent history may be retained for compliance purposes.

When personal data is no longer required and has passed its applicable retention period, ag99 deletes or irreversibly anonymises it using industry-standard secure erasure methods.

Data Security

ag99 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, and misuse. Our security framework includes the following key controls:

• SSL/TLS Encryption in Transit: All data transmitted between your browser or device and ag99.io is protected by SSL/TLS encryption. This ensures that your login credentials, payment details, and personal information cannot be intercepted during transmission.
• Encryption at Rest: Sensitive personal data stored in ag99's databases — including identity verification records and financial data — is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to personal data within ag99's systems is restricted on a strict need-to-know basis. Staff members are granted only the minimum level of data access required to perform their specific role. All internal access is logged and reviewed periodically.
• Password Security: Account passwords are stored using strong one-way hashing algorithms. ag99 staff cannot retrieve your password in plain text and will never ask you to share your password via any communication channel.
• Continuous Security Monitoring: ag99's security team monitors the platform continuously for signs of unauthorised access, suspicious login behaviour, and data anomalies. Automated alerting systems escalate potential security events for immediate investigation.
• Vulnerability Management: ag99 conducts regular security reviews and maintains a vulnerability management programme to identify and remediate potential security weaknesses in a timely manner.
• Incident Response: ag99 maintains a documented data breach response procedure. In the event of a confirmed personal data breach that poses a risk to your rights and freedoms, ag99 will notify affected individuals without undue delay and take all reasonable steps to contain and remediate the incident.

While ag99 applies rigorous security measures, no platform can guarantee absolute security. You play an important role in keeping your account secure by using a strong, unique password, keeping your login credentials confidential, and notifying ag99 immediately if you suspect any unauthorised activity on your account.

Your Rights and Choices

As a player whose personal data is processed by ag99, you have the following rights in respect of that data. To exercise any of these rights, contact ag99 at [email protected] with the subject line "Data Rights Request".

• Right of Access: You may request a copy of the personal data ag99 holds about you. ag99 will provide this information in a clear, accessible format within a reasonable timeframe.
• Right to Rectification: If any personal data ag99 holds about you is inaccurate or incomplete, you have the right to request that it be corrected without undue delay.
• Right to Erasure: You may request that ag99 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where the data has been unlawfully processed. This right is subject to ag99's legal retention obligations — we cannot erase data we are required by law to retain.
• Right to Restriction of Processing: You may request that ag99 restrict the processing of your personal data in certain circumstances, for example while a correction request is being verified or where you have objected to processing pending confirmation of ag99's legitimate grounds.
• Right to Object: Where ag99 processes your data on the basis of legitimate interests, you have the right to object to that processing. ag99 will review your objection and cease processing unless ag99 can demonstrate compelling legitimate grounds that override your interests.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request that ag99 provide your personal data in a structured, machine-readable format.
• Right to Withdraw Consent: Where ag99 relies on your consent as the legal basis for processing (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

ag99 will acknowledge all data rights requests promptly and will endeavour to fulfil them within thirty (30) days. Where a request is complex or where ag99 receives a high volume of requests simultaneously, we may notify you of an extended response period not exceeding an additional sixty (60) days.

Children and Minors

ag99 is strictly an adult platform. The ag99 platform is not directed at, and is not intended for use by, any individual under the age of 21 years. ag99 does not knowingly collect personal data from individuals under 21.

If ag99 discovers that personal data has been collected from an individual under the age of 21, ag99 will:

• Immediately close the account associated with that individual.
• Return all deposited funds to the payment source, subject to verification.
• Forfeit any winnings generated during the period of underage play.
• Permanently delete all personal data associated with the underage account within a reasonable timeframe, subject to any applicable legal retention obligations.

If you are a parent or guardian and believe that a minor in your care has registered an account or provided personal data to ag99 without your consent, please contact ag99 immediately at [email protected] with the subject line "Underage Account Report". ag99 will investigate and take immediate corrective action.

Changes to This Privacy Policy

ag99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, changes in applicable law, or improvements to the ag99 platform. The updated Policy will be published at ag99.io/privacy-policy and the "Last updated" date at the top of this document will be revised accordingly.

Where a change to this Policy materially affects how we collect or use your personal data, ag99 will make reasonable efforts to notify registered players of the change via the contact details associated with their account prior to the change taking effect.

Your continued use of the ag99 platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with the revised Policy, you must cease using the platform and may request closure of your account by contacting [email protected].

We encourage you to review this Privacy Policy periodically to stay informed about how ag99 is protecting your personal data. The most current version of this Policy is always accessible at ag99.io/privacy-policy.

Contact and Data Requests

For any questions, concerns, or requests relating to this Privacy Policy or the personal data ag99 holds about you, please use the following contact details:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line for Privacy Requests: "Privacy / Data Request"
• Subject Line for Underage Account Reports: "Underage Account Report"
• Subject Line for Data Rights Requests: "Data Rights Request"
• Support Availability: 24 hours a day, 7 days a week, 365 days a year
• Response Language: English

ag99 treats all privacy-related correspondence as a priority and commits to acknowledging receipt of your inquiry within two (2) business days. Full resolution of data rights requests will be provided within the timeframes set out in Section 11 of this Policy.

This Privacy Policy was last reviewed and updated on 1 January 2026. The version published at ag99.io/privacy-policy at any given time is the current operative version and supersedes all prior versions.