ao99 Privacy Policy

ao99 is Bangladesh's premier online casino and cricket betting platform. As a platform that handles financial transactions, identity documents, and account credentials on behalf of its players, ao99 regards data privacy as a core operational responsibility — not a compliance checkbox.

This Privacy Policy applies to all personal data collected by ao99 in connection with your use of the ao99 website (ao99.io), its mobile-optimised interface, and any related services. It covers data collected during account registration, identity verification, deposit and withdrawal processing, gameplay, customer support interactions, and general browsing of the platform.

This policy should be read in conjunction with the ao99 Terms & Conditions, which govern the overall relationship between ao99 and registered players. In the event of any conflict between this Privacy Policy and the Terms & Conditions on matters relating to personal data, this Privacy Policy shall take precedence.

ao99 acts as the data controller for all personal data collected through the ao99 platform. As data controller, ao99 is responsible for determining the purposes for which personal data is processed and the means by which that processing takes place.

For all data-related enquiries, rights requests, or complaints, players may contact ao99 directly using the contact details set out in Section 15 of this Privacy Policy. ao99 is committed to responding to all data-related requests in a timely and transparent manner.

ao99 collects personal data across several categories depending on your relationship with the platform. The table below provides a structured overview of the categories of data collected and the context in which each category is gathered.

ao99 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or biometric data unless specifically required for identity verification purposes and with your explicit prior consent.

ao99 collects personal data through the following primary mechanisms:

• Direct submission: Data you actively provide when registering an account, completing KYC verification, contacting support, or participating in promotions.
• Automated technical collection: Data collected automatically by our systems when you access and interact with the ao99 platform, including IP addresses, device identifiers, session data, and cookies. This data is collected regardless of whether you are a registered user or a guest visitor.
• Payment provider data: Transaction-level data received from payment processors (bKash, Nagad, Rocket, Upay, and partner banks) in connection with deposit and withdrawal processing. ao99 receives only the data necessary to reconcile transactions — full payment credentials are never transmitted to ao99's servers.
• Third-party verification services: Identity and address verification data received from KYC service providers engaged by ao99 to assist in the verification of player-submitted documents.
• Fraud prevention and analytics partners: Risk scoring, device fingerprinting, and behavioural anomaly data received from fraud prevention service providers to protect the integrity of the platform and its players.

ao99 processes personal data for the following specific purposes:

• Account creation and management: To register, authenticate, and maintain your player account on the ao99 platform.
• Identity verification (KYC): To verify that you are who you claim to be, that you meet the minimum age requirement of 21 years, and that your account is not being used fraudulently or for money laundering purposes.
• Payment processing: To process your deposit and withdrawal requests via bKash, Nagad, Rocket, Upay, and partner banking institutions, and to maintain accurate transaction records.
• Service delivery: To provide access to ao99's games, betting markets, bonuses, and promotional offers, and to personalise your platform experience where appropriate.
• Customer support: To respond to your enquiries, resolve disputes, and provide technical assistance in connection with your use of the ao99 platform.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, account misuse, multi-accounting, bonus abuse, money laundering, and other prohibited activities on the platform.
• Responsible gaming: To monitor gameplay patterns and identify potential signs of problem gambling, and to administer deposit limits, session reminders, cooling-off periods, and self-exclusion tools as requested by players.
• Legal and regulatory compliance: To comply with applicable legal obligations, respond to lawful requests from authorities, and maintain records required by applicable regulations.
• Platform improvement: To analyse usage patterns, identify technical issues, and improve the performance, stability, and feature set of the ao99 platform over time.
• Communications: To send you account-related notifications, transaction confirmations, security alerts, and — where you have opted in — promotional communications about ao99 offers and new features.

ao99 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to perform our contractual obligations to you as a registered player, including account management, payment processing, and game access.
• Legal obligation: Processing required to comply with applicable laws and regulations, including identity verification, anti-money laundering obligations, and record-keeping requirements.
• Legitimate interests: Processing carried out in pursuit of ao99's legitimate business interests, including fraud prevention, platform security, analytics, and service improvement, provided that such interests do not override your fundamental rights and freedoms.
• Consent: Processing carried out on the basis of your freely given, specific, and informed consent, including the sending of promotional communications and the use of non-essential cookies. Where consent is the legal basis for processing, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

ao99 does not sell, rent, or trade your personal data to any third party for marketing or advertising purposes. ao99 may share your personal data with the following categories of third parties, strictly for the purposes described in this Privacy Policy:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, and other payment service providers engaged to process your deposit and withdrawal transactions.
• KYC and identity verification providers: Third-party identity verification services engaged by ao99 to assist in the review and authentication of player-submitted identity documents.
• Game content providers: Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Ezugi, Spribe, and other game studios that power the ao99 game library. These providers may receive session and wagering data necessary to deliver their game services.
• Fraud prevention and risk management services: Specialist third-party services engaged to detect and prevent fraudulent activity, including device fingerprinting and behavioural analysis providers.
• IT infrastructure providers: Cloud hosting, content delivery, and platform infrastructure providers that store and process platform data on ao99's behalf, subject to strict data processing agreements.
• Legal and regulatory authorities: Government agencies, law enforcement bodies, financial intelligence units, and courts where ao99 is required by law or valid legal process to disclose personal data.

All third parties with whom ao99 shares personal data are contractually required to handle that data in accordance with applicable data protection standards and to use it only for the specific purposes for which it was shared. ao99 does not permit its third-party service providers to use your personal data for their own independent marketing or commercial purposes.

ao99 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or for as long as is required by applicable legal, regulatory, or contractual obligations. The following general retention principles apply:

• Account and identity data: Retained for the lifetime of the player account and for a minimum of five (5) years following permanent account closure, in accordance with anti-money laundering record-keeping requirements.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of the transaction, as required for financial compliance and audit purposes.
• KYC documentation: Retained for the lifetime of the account and for a minimum of five (5) years following account closure. Where ao99 is required by law to retain KYC records for a longer period, the longer period shall apply.
• Customer support records: Retained for three (3) years from the date of the interaction, or longer where the interaction relates to an unresolved dispute or legal matter.
• Technical and usage data: Retained for up to twenty-four (24) months from the date of collection, after which it is either deleted or anonymised for analytical purposes.
• Marketing consent records: Retained for the duration of your consent and for one (1) year following withdrawal of consent, as evidence of the consent record.

Upon expiry of the applicable retention period, ao99 will securely delete or irreversibly anonymise the relevant personal data. Where full deletion is not immediately possible due to backup retention schedules, ao99 will isolate the data from active processing until it can be permanently deleted.

ao99 uses cookies and similar tracking technologies on the ao99 platform. Cookies are small text files placed on your device by your browser when you access a website. ao99 uses the following categories of cookies:

• Essential cookies: Strictly necessary for the operation of the ao99 platform, including session authentication, load balancing, and security token management. These cookies cannot be disabled without impairing your ability to use the platform.
• Functional cookies: Used to remember your preferences and settings on the ao99 platform, such as language preference and display settings. These cookies improve your experience but are not essential for basic platform operation.
• Analytics cookies: Used to collect aggregated, anonymised data about how players use the ao99 platform, including pages visited, time spent, and features accessed. This data helps ao99 identify usability issues and improve the platform. Analytics data is not used to identify individual players.
• Security cookies: Used to detect and prevent fraudulent activity, including bot detection, account takeover attempts, and unusual login behaviour.

ao99 does not use behavioural advertising cookies, third-party retargeting pixels, or social media tracking cookies. You may manage or disable non-essential cookies through your browser settings at any time. Please note that disabling essential cookies may affect your ability to log in to or use the ao99 platform.

ao99 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption: All data in transit between your device and the ao99 platform is encrypted using industry-standard SSL/TLS protocols.
• Data-at-rest encryption: Sensitive personal data stored on ao99's servers — including identity documents and financial records — is encrypted at rest using strong encryption standards.
• Access controls: Access to personal data within ao99 is restricted to authorised personnel who require access to perform their job functions. All staff with access to personal data are subject to confidentiality obligations.
• Password security: Player account passwords are stored using strong one-way cryptographic hashing functions. ao99 does not store passwords in plain text and cannot retrieve your password — only reset it upon verified request.
• Intrusion detection and monitoring: ao99's infrastructure is monitored continuously for unauthorised access attempts, anomalous behaviour, and security vulnerabilities.
• Third-party security assessments: ao99's platform and infrastructure are subject to periodic security assessments to identify and remediate potential vulnerabilities.

While ao99 takes all reasonable and practicable steps to protect your personal data, no data transmission over the internet or data storage system is guaranteed to be 100% secure. If you have reason to believe that your account has been compromised, please contact the ao99 support team immediately at [email protected].

As a registered player on ao99, you hold the following rights in relation to your personal data. ao99 is committed to facilitating the exercise of these rights promptly and without undue burden:

• Right of access: You have the right to request a copy of the personal data that ao99 holds about you, together with information about how that data is processed. ao99 will provide this information within a reasonable timeframe upon receipt of a verified written request.
• Right to rectification: You have the right to request that ao99 corrects any inaccurate or incomplete personal data held about you. Minor corrections (such as updates to contact information) may be made directly through your account dashboard.
• Right to erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where the data has been processed unlawfully. ao99 will assess all erasure requests and respond within a reasonable timeframe. Note that ao99 may be required to retain certain data for legal compliance purposes notwithstanding a valid erasure request.
• Right to restriction of processing: You have the right to request that ao99 restricts the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where you have objected to processing pending ao99's determination of that objection.
• Right to data portability: Where ao99 processes your data on the basis of your consent or in performance of a contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to the processing of your personal data where that processing is carried out on the basis of ao99's legitimate interests. ao99 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where ao99 processes your data on the basis of your consent (including for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Data Rights Request". ao99 may request additional verification of your identity before processing the request to ensure that personal data is not disclosed to an unauthorised party.

The ao99 platform is strictly restricted to adults aged 21 years and above. ao99 does not knowingly collect, process, or retain personal data from any person under the age of 21. If ao99 becomes aware that personal data has been collected from a minor, that data will be deleted immediately and the associated account will be permanently closed.

If you are a parent or guardian and believe that your child has accessed the ao99 platform or submitted personal data to ao99, please contact [email protected] immediately with the subject line "Underage Account Report". ao99 takes the protection of minors with absolute seriousness and will act swiftly upon receipt of any such report.

ao99 strongly encourages the use of parental control software to prevent minors from accessing online gambling platforms. A list of reputable parental control resources is available on the ao99 Responsible Gaming page.

ao99 operates as an international online gaming platform. In the course of providing its services, personal data collected from Bangladesh-based players may be transferred to and processed in jurisdictions outside of Bangladesh, including by third-party service providers located in other countries.

Where personal data is transferred internationally, ao99 takes appropriate steps to ensure that the transfer is conducted in a manner that maintains an adequate level of data protection. These steps may include the use of standard contractual clauses, binding corporate rules, or transfers to jurisdictions that provide an adequate level of data protection as determined by applicable standards.

By registering an account on ao99, you acknowledge and consent to the transfer of your personal data to jurisdictions outside of Bangladesh where necessary for ao99 to deliver its services. ao99 will always ensure that any such transfers are carried out in a manner consistent with this Privacy Policy and applicable data protection requirements.

ao99 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data practices, the services we offer, or applicable legal requirements. The effective date at the top of this document will be updated whenever a material change is made.

Where a change to this Privacy Policy materially affects the rights of registered players or the way in which their data is processed, ao99 will endeavour to provide advance notice of the change via email notification or a prominent notice on the platform. For minor or administrative changes, the updated policy will simply be published at ao99.io/privacy-policy.

Your continued use of the ao99 platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any change to this Privacy Policy, you should cease using the platform and may request account closure by contacting [email protected].

For any questions, concerns, or formal requests relating to this Privacy Policy or to the processing of your personal data by ao99, please contact the ao99 data team using the following details:

• Email (plain text — not a clickable link): [email protected]
• Subject line for data rights requests: "Data Rights Request"
• Subject line for underage access reports: "Underage Account Report"
• Subject line for data breach reports: "Data Security Concern"
• Support Hours: 24 hours a day, 7 days a week
• Operating Time Zone: Bangladesh Standard Time (BST, UTC+6)
• Support Language: English

ao99 aims to acknowledge all privacy-related requests within 48 hours and to provide a full response within a reasonable timeframe. For complex data access or erasure requests, ao99 may require up to 30 days to provide a complete response, and will notify you of the expected timeframe upon receipt of your request.

If you are not satisfied with ao99's handling of your privacy request or complaint, you have the right to escalate the matter to an independent dispute resolution body or relevant supervisory authority. ao99 will cooperate fully with any such process.