xx998 Privacy Policy — How We Handle Your Personal Data

1. Introduction and Scope of This Policy

This Privacy Policy ("Policy") describes how xx998 ("xx998", "we", "us", "our") collects, uses, stores, shares, and protects personal data relating to individuals ("you", "your") who access or use the xx998 website at https://xx998.club, create an account, make deposits, place bets, or otherwise interact with the platform and its services (collectively, the "Services").

By creating an xx998 account or using the Services, you acknowledge that you have read and understood this Policy, and that you consent to the data practices described herein. This Policy is incorporated into and forms part of the xx998 Terms and Conditions. If you have any questions about how xx998 handles your personal data, please contact us at [email protected].

2. Information We Collect

xx998 collects personal data from you in three ways: information you provide directly when registering or using the platform, information generated automatically by your use of the platform, and information received from third-party payment processors where you have authorised such transfers. The specific categories of data collected are as follows:

Information You Provide Directly

• Registration data: your full legal name, date of birth, gender, Bangladesh mobile number, and the account password you set at registration.
• Identity verification documents: a copy of your National Identity Card (NID), passport, or other government-issued identification document provided during the KYC verification process.
• Communication data: messages sent to our support team, feedback forms completed on the platform, and any other written correspondence between you and xx998.
• Responsible gaming preferences: deposit limits, session time settings, self-exclusion elections, and cooling-off periods you set in your account settings.
• Payment registration data: the mobile wallet number (bKash, Nagad, Rocket, or Upay) or bank account number you register for deposits and withdrawals.

Information Generated Automatically

• Device and connection data: your IP address, device type, operating system version, browser type and version, mobile network operator, and approximate geographic location derived from your IP address.
• Session and activity data: login timestamps, pages viewed, games played, bets placed and their outcomes, session duration, click patterns, and feature usage logs.
• Transaction data: the complete history of deposits, withdrawals, bonus credits, and bet settlements processed through your xx998 account, including timestamps, amounts in BDT, and payment reference numbers.
• Cookie and tracking data: data collected via cookies and similar tracking technologies as described in Section 11 of this Policy.

Information Received from Third Parties

• Payment confirmation data from bKash, Nagad, Rocket, Upay, Visa, and Mastercard payment networks: transaction reference numbers and confirmation codes that allow xx998 to match an incoming payment to your account.
• Identity verification data from KYC service providers: document authenticity scores and age verification outcomes where xx998 uses a third-party service to assist with identity checks.
• Fraud and AML screening data from compliance tools: risk scores and flagged indicators generated by automated anti-money-laundering and fraud detection systems that xx998 uses to comply with its AML obligations.

3. How We Use Your Information

xx998 uses the personal data it collects only for the purposes described below. We do not use your data for any purpose that is incompatible with the original collection purpose without first obtaining your consent. The specific purposes for which we use your data are:

• Account management and service delivery: creating and maintaining your xx998 account, processing deposits and withdrawals, crediting bonuses, settling bets, and providing customer support across all platform features.
• Identity and age verification: confirming that you are who you say you are and that you meet the 21+ age requirement, as required by our responsible gaming obligations.
• Fraud prevention and AML compliance: detecting and preventing fraudulent activity, money laundering, and other illegal uses of the platform, including real-time transaction monitoring and account behaviour analysis.
• Responsible gaming: monitoring account activity patterns to identify potential problem gambling behaviour, and enabling the operation of deposit limits, session controls, and self-exclusion tools.
• Platform improvement and analytics: analysing aggregate usage patterns to improve the platform's performance, interface design, game selection, and customer support quality. Such analytics are conducted at aggregate level and do not involve individual profiling for commercial purposes.
• Communications and marketing: sending you service notifications, transaction confirmations, security alerts, and — where you have opted in — promotional communications about xx998 bonuses and offers. You may opt out of marketing communications at any time via your account settings or by contacting our support team.

4. Legal Basis for Processing

xx998 processes personal data only where it has a valid legal basis for doing so. The legal bases on which xx998 relies for its processing activities are:

• Contractual necessity: processing that is necessary to perform the contract between you and xx998 — specifically, to provide you with a working account, process deposits, settle bets, and process withdrawals. Without this processing, xx998 cannot deliver the Services to you.
• Legal obligation: processing that is required for xx998 to comply with applicable laws and regulations, including anti-money-laundering (AML) obligations, age verification requirements, and fraud reporting obligations.
• Legitimate interests: processing for purposes that are necessary for the operation of a safe and reliable real-money platform, including fraud detection, account security, responsible gaming monitoring, and platform quality improvement — where these interests are not overridden by your privacy rights.
• Consent: processing for optional purposes — such as sending marketing and promotional communications — where you have given explicit consent. You may withdraw consent for optional processing at any time without affecting processing that relies on a different legal basis.

5. Sharing Your Information

xx998 does not sell your personal data. We do not share your personal data with advertisers, data brokers, or any third party for that party's own marketing purposes. We share personal data only in the following circumstances, and only to the extent necessary for the specific purpose:

• Payment processors: we share the minimum data required to process deposit and withdrawal transactions with the payment processors you select — bKash, Nagad, Rocket, Upay, Visa, and Mastercard. This typically includes your registered wallet number or payment reference and the transaction amount in BDT.
• Identity and KYC service providers: we share identity documents with contracted KYC verification providers where third-party assistance is used for document authentication. These providers are contractually bound to use your data only for the verification purpose and not to retain it beyond the required verification period.
• Regulatory and law enforcement authorities: we will disclose personal data to competent authorities where we are legally required to do so — for example, in response to a court order, a regulatory investigation, or a mandatory AML suspicious activity report. We will only disclose the minimum data legally required and will notify you of such disclosures unless we are legally prohibited from doing so.
• Game content providers: we share anonymised, non-personally-identifiable session tokens with licensed game providers (Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, Microgaming) to authenticate game sessions. These providers do not receive your name, mobile number, or financial data.

xx998 does not transfer your personal data outside of the service providers described above. We do not share data with social media platforms, advertising networks, or data analytics companies for profiling or targeting purposes.

6. Payment Data and Financial Information

xx998 does not store full payment card numbers, CVV codes, or full mobile banking PINs on its own servers. Card payment data is processed by PCI-DSS compliant payment gateways. For mobile wallet transactions via bKash, Nagad, Rocket, and Upay, xx998 stores only the registered wallet number and transaction reference numbers necessary to match payments to your account and to process withdrawals to the correct destination.

Your complete financial transaction history — including deposit amounts, withdrawal amounts, bet stakes, and bet outcomes — is stored on xx998's secured servers and forms part of your account record. This financial history is retained for the minimum period required by applicable AML and financial record-keeping obligations, as described in Section 9 of this Policy.

7. Data Retention

xx998 retains your personal data for as long as your account remains active and for as long as is necessary to fulfil the purposes described in this Policy. The following specific retention periods apply: account registration data and identity documents are retained for the duration of your account plus a minimum of five years after account closure, in accordance with standard AML and financial record-keeping obligations applicable to real-money platforms. Transaction records are retained for a minimum of five years from the date of each transaction. Communication records (support correspondence) are retained for two years from the date of the last communication.

When the applicable retention period for a category of data expires, xx998 will securely delete or irreversibly anonymise that data. If you request deletion of your account and personal data before the end of the applicable retention period, xx998 will delete all data that it is not legally required to retain and will anonymise remaining data to the extent possible, so that it can no longer be associated with you as an identifiable individual.

8. Your Rights Over Your Personal Data

You have the following rights over your personal data held by xx998. To exercise any of these rights, please contact our support team at [email protected] with a written request describing the right you wish to exercise and your account details for identification purposes. xx998 will respond to all valid requests within a reasonable timeframe:

• Right of access: you may request a copy of the personal data xx998 holds about you, together with information about how it is used and with whom it is shared.
• Right to rectification: if any personal data xx998 holds about you is inaccurate or incomplete, you may request that it be corrected or completed. You may also update many fields directly in your account settings.
• Right to erasure: you may request that xx998 delete your personal data. This right is subject to legal retention obligations — xx998 is required to retain certain financial and identity records for a minimum period under AML rules and cannot delete these records early, but will delete all other data and anonymise retained records to the extent possible.
• Right to restrict processing: in certain circumstances you may request that xx998 restrict the processing of your data to storage only, pending resolution of a dispute about its accuracy or the lawfulness of its processing.
• Right to withdraw consent: where xx998 is processing your data on the basis of your consent (for example, for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

xx998 will not charge a fee for handling data rights requests submitted in good faith. If a request is manifestly unfounded or excessive, xx998 reserves the right to either charge a reasonable administrative fee or decline to act on the request, in which case xx998 will explain its reasons in writing.

9. Cookies and Tracking Technologies

xx998 uses cookies and similar browser-based technologies to make the platform function correctly, to maintain your logged-in session, and to understand how players navigate and use the platform. The cookies used by xx998 fall into three categories:

• Strictly necessary cookies: these are essential for the platform to function. They manage your login session, maintain your account authentication state, remember your language preference, and enable secure financial transactions. You cannot opt out of strictly necessary cookies without losing the ability to use the platform.
• Analytics cookies: these help xx998 understand aggregate usage patterns — which pages are visited most, how long players spend on different sections, and where platform navigation could be improved. Analytics data is processed at aggregate level and is not used to build individual marketing profiles.
• Preference cookies: these remember your platform settings between sessions — for example, your preferred language, your responsible gaming display preferences, and any display customisations you have saved. Preference cookies are functional and do not track you for advertising purposes.

You can manage cookie preferences through your browser settings at any time. Disabling analytics and preference cookies will not affect the core functionality of your xx998 account. Please note that disabling strictly necessary cookies will prevent you from logging in and using the platform, as these cookies are essential to the operation of the session management and security systems that protect your account.

10. Data Security

xx998 implements technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include SSL/TLS encryption for all data in transit between your device and the xx998 servers; encryption of sensitive data at rest; strict access controls that limit which xx998 staff members can access personal data, based on the principle of least privilege; regular security reviews of platform infrastructure; and an incident response process for addressing security breaches promptly.

While xx998 takes all reasonable steps to protect your personal data, no internet-based platform can guarantee absolute security against all possible threats. You also have a responsibility to protect your own account by keeping your login credentials confidential, using a strong and unique password, and reporting any suspected unauthorised access to your account to our support team immediately.

11. Children's Privacy and the 21+ Rule

The xx998 platform is strictly for adults aged 21 and above. xx998 does not knowingly collect personal data from any person under the age of 21. Registration requires confirmation that you are 21 or older, and xx998 conducts age verification checks as part of the KYC process. If xx998 discovers that personal data has been collected from a person under the age of 21, xx998 will immediately close that account, void any bets placed, return any deposited funds to their source where technically possible, and delete all personal data associated with the underage account. If you believe that a person under 21 has created an account on the xx998 platform, please contact our support team at [email protected] immediately.

12. Changes to This Privacy Policy

xx998 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, changes in applicable law, or changes to the Services. When we make material changes, we will update the "Last Updated" date at the top of this document. Where the changes are significant, we will also notify registered users via the Platform or by direct communication to the contact details on their account. Your continued use of the platform after a revised Policy is published constitutes your acceptance of the updated terms. We recommend reviewing this Policy periodically to stay informed of how xx998 handles your personal data.

13. Contact Us About Your Privacy

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or wish to raise a concern about how xx998 handles your personal data, please contact our support team. You can reach us at [email protected] — please include your registered mobile number and a brief description of your query so we can respond promptly. All privacy-related requests are handled by our compliance team and will receive a written response. Support is available 24 hours a day, 7 days a week, including Bangladesh public holidays.