Your Privacy Matters at xk999
This Privacy Policy explains how xk999 collects, processes, stores, and safeguards your personal information when you use our online betting and casino platform. We are committed to maintaining the trust of every player across Bangladesh through transparent data practices, robust security measures, and full respect for your privacy rights.
How xk999 Protects Your Data
These six principles summarise our core approach to data privacy. They do not replace the full policy — all players should read the complete document below for a thorough understanding of how their data is handled.
End-to-End Encryption
All data transmitted between your device and the xk999 platform is protected by 256-bit SSL/TLS encryption. Whether you are logging into your account, making a bKash deposit, or updating your profile, your data travels securely at every step.
Minimal Data Collection
xk999 only collects the personal data that is strictly necessary for operating your account, processing payments, and meeting our legal obligations. We do not collect data speculatively or for purposes unrelated to your use of the platform.
No Third-Party Data Sales
xk999 does not sell, rent, or trade your personal information to third parties for their own marketing purposes. Your data stays with xk999 and its trusted operational partners who are contractually bound to use it only on our behalf.
Full Transparency
This Privacy Policy clearly sets out every category of data we collect, why we collect it, how long we retain it, and with whom it may be shared. There are no hidden data practices at xk999. What you read here is the complete picture.
Your Rights, Your Control
Every registered xk999 player has the right to access, correct, or request deletion of their personal data. You may also withdraw consent for marketing communications at any time. We explain each of your rights in full in Section 9 of this policy.
Regulatory Compliance
xk999 applies data handling practices consistent with internationally recognised privacy standards, including principles of purpose limitation, data minimisation, storage limitation, and integrity. Our AML and KYC obligations are fulfilled within a privacy-respecting framework.
Please Read Carefully: This Privacy Policy forms part of xk999's Terms & Conditions and constitutes a binding document governing the processing of your personal data. By registering an account or continuing to use the xk999 platform at xk999.io, you acknowledge that you have read and understood this policy.
1. Overview
xk999 is an online betting and casino platform operated for players based in Bangladesh, accessible at xk999.io. This Privacy Policy explains how xk999 ("we", "us", "our", "the Company") collects, uses, discloses, stores, and protects the personal information of our registered players and website visitors ("you", "your", "the Player").
We understand that privacy is important to our players. In Bangladesh, millions of people conduct sensitive financial transactions via mobile wallets such as bKash, Nagad, Rocket, and Upay every day. When you choose to use those same payment methods on xk999, you are extending a significant level of trust to our platform. We take that trust seriously and have built our data practices accordingly.
This policy covers all personal data processed in connection with your use of the xk999 platform, including account registration, deposits and withdrawals, sports betting (including cricket, football, and kabaddi), casino and slot gaming, and any communications you have with the xk999 support team.
Effective Date: This Privacy Policy was last reviewed and updated on 1 January 2026. xk999 reserves the right to update this policy periodically. Material changes will be communicated to registered players via the platform or by email.
2. Data We Collect
xk999 collects personal data through several channels: directly from you when you register or interact with the platform, automatically through your use of the website, and from third-party payment and identity verification providers. The categories of personal data we collect are set out in the table below.
| Category | Examples | Collection Method |
|---|---|---|
| Identity Data | Full name, date of birth, national ID number, photograph | Registration form, KYC verification |
| Contact Data | Email address, mobile phone number, city of residence (e.g., Dhaka, Chittagong, Sylhet) | Registration form, account settings |
| Financial Data | bKash/Nagad/Rocket/Upay account number, Visa/Mastercard last four digits, transaction history, deposit/withdrawal amounts in BDT | Payment processing, transaction records |
| Account Data | Username, encrypted password, account balance, bonus history, betting records, game activity | Platform activity |
| Technical Data | IP address, browser type, device type, operating system, session duration, pages visited | Automatic collection via server logs and cookies |
| Communications Data | Support chat transcripts, email correspondence with [email protected], responsible gaming requests | Direct communication with xk999 support |
| Preference Data | Game preferences, favourite sports (e.g., cricket, BPL, T20), marketing opt-in status, language preference | Account settings, platform behaviour |
xk999 does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, health data (except where voluntarily disclosed in the context of a responsible gaming request), or biometric data.
Voluntary Disclosure: If you contact our support team regarding a responsible gaming concern — for example, requesting self-exclusion due to a gambling-related health issue — any health-related information you share will be treated as highly sensitive, used solely to action your request, and will not be processed for any other purpose.
3. How We Use Your Data
xk999 uses the personal data we collect for the following specific purposes. We do not use your data for any purpose that is incompatible with those listed below without first seeking your consent.
- Account Registration and Management: To create and maintain your xk999 account, verify your identity, authenticate your logins, and manage account settings and preferences.
- Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, to reconcile transaction records, and to verify that payment methods belong to the account holder.
- Platform Operation: To deliver sports betting markets (including cricket BPL, IPL, T20 World Cup, and football), live casino, slot games, and all other gaming products available on xk999.
- Customer Support: To respond to support requests submitted to [email protected], resolve disputes, and handle complaints in a timely and effective manner.
- Legal and Regulatory Compliance: To comply with anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, responsible gaming regulations, and any other applicable legal obligations.
- Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, unauthorised account access, bonus abuse, match-fixing, and other forms of prohibited conduct as defined in the xk999 Terms & Conditions.
- Responsible Gaming: To monitor betting patterns that may indicate problem gambling behaviour, to enforce self-exclusion and deposit limits requested by players, and to deliver responsible gaming notifications where appropriate.
- Marketing Communications: To send promotional offers, bonus announcements, and seasonal promotions (such as Eid specials, Pohela Boishakh offers, BPL promotions) to players who have opted in to marketing communications. You may opt out at any time.
- Platform Improvement: To analyse aggregated, anonymised usage data for the purpose of improving the platform's features, performance, and user experience.
4. Legal Basis for Processing
xk999 processes your personal data on one or more of the following legal bases, depending on the specific processing activity involved:
- Contractual Necessity: Processing that is necessary to fulfil our contractual obligations to you as a registered xk999 player — including account creation, payment processing, game delivery, and support. Without this processing, we cannot provide the xk999 service.
- Legal Obligation: Processing that is required in order for xk999 to comply with applicable legal and regulatory requirements, including AML obligations, KYC identity verification, and responsible gaming rules.
- Legitimate Interests: Processing that is necessary for xk999's legitimate business interests, provided that those interests are not overridden by your rights and freedoms. This includes fraud detection, security monitoring, platform analytics, and responsible gaming monitoring.
- Consent: Processing that is based on your freely given, specific, and informed consent. This applies primarily to marketing communications. Where consent is the basis for processing, you have the right to withdraw it at any time by contacting [email protected] or updating your account preferences.
Withdrawing Consent: Withdrawing consent for marketing communications will not affect the lawfulness of any processing carried out before the withdrawal, nor will it affect processing carried out on other legal bases (such as contractual necessity or legal obligation).
5. Data Sharing
xk999 does not sell your personal data to third parties. We may share your personal data with the following categories of recipients only where necessary and under appropriate data protection safeguards:
- Payment Processors: Mobile wallet operators (bKash, Nagad, Rocket, Upay) and card networks (Visa, Mastercard) receive the transaction data necessary to process your deposits and withdrawals. These providers are independent data controllers subject to their own privacy policies.
- Identity Verification Providers: Third-party KYC service providers who assist xk999 in verifying the identity, age, and payment method ownership of registered players. These providers process your identity data strictly on our behalf and are contractually prohibited from using it for their own purposes.
- Game Content Providers: Providers such as Pragmatic Play, Evolution Gaming, Ezugi, Microgaming, NetEnt, and Spribe may receive anonymised session data necessary to deliver their game content. They do not receive your full identity or financial data.
- Legal and Regulatory Authorities: Where required by law, xk999 may disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory bodies. Such disclosures are made only to the extent required by a valid legal obligation.
- Professional Advisers: Lawyers, auditors, and compliance consultants who are bound by professional confidentiality obligations and who assist xk999 in meeting its legal, regulatory, and operational obligations.
- Business Successors: In the event of a merger, acquisition, or sale of all or part of xk999's business, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections. You will be notified of any such transfer.
All third parties who receive personal data from xk999 are required to implement appropriate technical and organisational security measures and to process your data only for the purposes described above.
6. Data Retention
xk999 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account and Identity Data | Duration of account plus 5 years after closure | AML obligations, KYC record-keeping, dispute resolution |
| Financial Transaction Data | 7 years from the date of each transaction | Financial record-keeping and AML compliance |
| Betting and Gaming Records | 5 years from the date of each wager | Dispute resolution, responsible gaming monitoring |
| Support Communications | 3 years from the date of the last communication | Complaint handling, quality assurance |
| Technical / Log Data | 12 months | Security monitoring, fraud detection |
| Marketing Preferences | Until consent is withdrawn, then promptly deleted | Marketing consent management |
| Self-Exclusion Records | Indefinitely (or as long as required by responsible gaming obligations) | Preventing re-registration during exclusion period |
Where personal data is no longer required, xk999 will securely delete or anonymise it in a manner that prevents reconstruction. Anonymised data (from which you cannot be identified) may be retained indefinitely for analytical and statistical purposes.
7. Data Security
xk999 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security framework includes:
- 256-bit SSL/TLS Encryption: All data in transit between your device and the xk999 platform is protected by industry-standard TLS encryption. This applies to account logins, payment processing, and all API communications.
- Encrypted Data Storage: Sensitive personal data — including passwords (which are hashed and salted, never stored in plain text), payment account references, and identity documents — is encrypted at rest using strong encryption standards.
- Access Controls: Access to personal data within xk999's systems is restricted on a strict need-to-know basis. Staff members are granted only the minimum level of access necessary to perform their role, and all access is logged and subject to audit.
- Regular Security Testing: xk999 conducts regular security assessments, including vulnerability scanning and penetration testing, to identify and remediate potential weaknesses in the platform's security posture.
- Incident Response: xk999 maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights and freedoms, xk999 will notify affected players promptly and take all reasonable steps to contain and remediate the breach.
- Staff Training: All xk999 staff who handle personal data receive regular training on data protection obligations, security best practices, and the procedures for reporting and escalating potential data incidents.
Your Role in Security: While xk999 takes all reasonable technical steps to protect your account, you also play an important role. Use a strong, unique password for your xk999 account, do not share your login credentials with anyone, and contact [email protected] immediately if you suspect unauthorised activity on your account.
8. Cookies & Tracking Technologies
xk999 uses cookies and similar tracking technologies on the xk999.io platform. Cookies are small text files stored on your device that help us provide a better and more personalised experience. The types of cookies we use are described below:
- Strictly Necessary Cookies: These cookies are essential for the platform to function. They enable core features such as maintaining your login session, securing your account, and processing transactions. These cookies cannot be disabled without significantly impairing your ability to use xk999.
- Functional Cookies: These cookies remember your preferences — such as your preferred language, notification settings, and game history — to provide a more personalised experience on return visits to xk999.
- Analytical Cookies: These cookies collect anonymised information about how visitors use the xk999 platform, such as which pages are visited most frequently and how long sessions last. This data is used to improve the platform. We use aggregated analytics only — individual user behaviour is not shared externally.
- Security Cookies: These cookies assist in fraud detection, session integrity verification, and identifying suspicious behaviour patterns on the platform.
You can control cookie settings through your browser's preferences. However, disabling strictly necessary cookies will prevent you from accessing certain areas of the xk999 platform, including your account and the betting/gaming sections. xk999 does not use third-party advertising cookies or tracking pixels for targeted advertising purposes.
9. Your Privacy Rights
As a registered xk999 player, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact us at [email protected]. xk999 aims to respond to all data rights requests within 30 calendar days of receipt.
Right of Access
Request a copy of all personal data xk999 holds about you, including a description of how it is used and with whom it is shared.
Right to Rectification
Request correction of any inaccurate or incomplete personal data held in your xk999 account without undue delay.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purposes it was collected, subject to legal retention obligations.
Right to Restrict Processing
Request that xk999 restrict the processing of your data while a dispute about its accuracy or the lawfulness of processing is resolved.
Right to Data Portability
Request a copy of your personal data in a structured, commonly used, machine-readable format, where processing is based on consent or contract.
Right to Object
Object to processing of your personal data where xk999 relies on legitimate interests as the legal basis, including objecting to direct marketing.
Right to Withdraw Consent
Withdraw consent for marketing communications at any time without affecting the lawfulness of prior processing based on consent.
Right to Complain
Lodge a complaint with the relevant supervisory authority if you believe xk999 has not handled your personal data in accordance with applicable law.
xk999 will not charge a fee for handling data rights requests submitted in good faith. However, where requests are manifestly unfounded or excessive, xk999 reserves the right to charge a reasonable administrative fee or decline to action the request, with written reasons provided.
10. Minors & Age Restriction
The xk999 platform is strictly for adults aged 21 and above. xk999 does not knowingly collect, store, or process the personal data of individuals under the age of 21. Age verification is conducted during the registration process and at the point of any withdrawal request.
If xk999 becomes aware that personal data belonging to a person under 21 years of age has been collected — whether through an attempted registration, a failed age verification, or a report from a third party — the associated account and all related data will be immediately suspended and reviewed. Any deposits made by an underage player will be managed in accordance with applicable legal requirements.
If you are a parent or guardian and believe that a minor under your care has accessed or attempted to access the xk999 platform, please contact us immediately at [email protected]. xk999 will take prompt action to investigate and, where appropriate, delete the relevant data and close the associated account.
21+ Strictly Enforced: xk999 applies a mandatory minimum age of 21 years. This exceeds the standard 18+ threshold and reflects our commitment to robust player protection across Bangladesh. We support parental control tools and recommend that adults use device-level controls to restrict access to gambling websites by minors.
11. International Data Transfers
The xk999 platform primarily serves players based in Bangladesh, and our data processing activities are designed to reflect this. However, some of xk999's operational partners — including certain game content providers such as Pragmatic Play, Evolution Gaming, and other third-party studios — may process data on servers located outside Bangladesh.
Where personal data is transferred internationally, xk999 takes all reasonable steps to ensure that equivalent levels of data protection apply. This may include contractual clauses that bind the recipient to data protection standards equivalent to those applied by xk999, or verification that the recipient operates in a jurisdiction recognised as providing adequate data protection.
xk999 does not transfer your financial data (bKash, Nagad, Rocket, Upay, or card details) outside Bangladesh for purposes unrelated to the processing of your transactions. Payment data is shared only with the payment providers necessary to complete the relevant transaction.
12. Changes to This Privacy Policy
xk999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. The revised policy will be published at xk999.io/privacy-policy with an updated effective date.
Where changes are material — meaning they significantly affect how your personal data is collected, used, or shared — xk999 will take reasonable steps to notify you in advance. This may include a notice displayed prominently on the xk999 platform, a notification in your account dashboard, or an email sent to the address registered on your account.
Your continued use of the xk999 platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of the revised terms. If you do not agree with any changes, you should cease using the xk999 platform and contact [email protected] to request account closure.
Stay Informed: We recommend reviewing this Privacy Policy periodically, particularly before making deposits or updating your account information. The effective date at the top of this page and in the hero section above will always reflect the most recent revision.
13. Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the way xk999 processes your personal data, please contact our support team using the details below. We are committed to responding to all privacy-related enquiries promptly and thoroughly.
- Email: [email protected] (plain text — not a clickable link)
- Support Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (UTC+6)
- Response Time: xk999 aims to acknowledge all privacy enquiries within 2 business days and to provide a substantive response within 30 calendar days
- Subject Line: For data rights requests, please use the subject line "Privacy Rights Request — [Your Username]" to help us route your query to the correct team
All privacy-related correspondence should be directed to the email address above. xk999 does not accept privacy rights requests submitted via social media channels or third-party messaging applications. Requests submitted by email to [email protected] are the only formally recognised channel for exercising your data rights with xk999.
Ready to Play Responsibly at xk999?
Now that you understand how xk999 handles your data, explore our full range of cricket betting, slots, and live casino games — all delivered on a secure, encrypted platform built for Bangladesh players.