xl999 Privacy Policy — How We Protect Your Data
xl999 is committed to protecting the privacy of every player. This policy explains exactly what data we collect, why we collect it, and how it is kept secure.
Introduction
Who this Privacy Policy applies to and what it covers.
This Privacy Policy ("Policy") describes how xl999 ("the Platform", "we", "us", "our") collects, uses, stores, and protects personal data provided by individuals ("Player", "you", "your") who register an account and use the xl999 online gaming platform at xl999.bet. This Policy applies to all players accessing xl999 from Bangladesh, including those based in Dhaka, Chittagong, Sylhet, Rajshahi, Khulna, Barisal, Rangpur, Mymensingh, Cox's Bazar, and all other locations across the country. By registering an account and using the Platform, you acknowledge that you have read and understood this Policy and that you consent to the processing of your personal data in the manner described herein.
xl999 treats the privacy of its players seriously. We collect only the data that is necessary to deliver our services, comply with legal obligations, and maintain a safe gaming environment. We do not sell personal data to third parties for marketing purposes, and we do not share personal data beyond what is described in this Policy. This Policy was last reviewed and updated in January 2026. xl999 recommends that all players review this Policy periodically, as it may be amended from time to time to reflect changes in our practices or applicable legal requirements.
What Data We Collect
The categories of personal data xl999 collects from players during registration and ongoing use of the platform.
How We Use Your Data
The specific purposes for which xl999 processes your personal data.
xl999 processes personal data collected from players solely for the purposes listed below. We do not use personal data for purposes that are incompatible with those stated at the time of collection. The primary purposes for which xl999 processes your data are:
- To create, manage, and maintain your xl999 player account, including login authentication and account security
- To process deposits, withdrawals, and all financial transactions via bKash, Nagad, Rocket, Upay, Visa, and Mastercard
- To conduct KYC identity verification and comply with anti-money-laundering obligations
- To deliver and personalise promotional offers, bonuses, and communications relevant to your gaming activity
- To monitor gaming activity for responsible gaming purposes, including identifying patterns associated with problem gambling
- To detect, investigate, and prevent fraud, cheating, collusion, and any other activity that violates the xl999 Terms and Conditions
xl999 does not use automated decision-making processes that produce legal or similarly significant effects on players without human review. Where automated systems flag an account for review — for example, in connection with a fraud or KYC check — a member of the xl999 team will assess the matter before any consequential action is taken.
Legal Basis for Processing
The legal grounds on which xl999 relies to process your personal data.
xl999 processes personal data only where it has a legitimate legal basis for doing so. The legal bases on which xl999 relies include:
- Contractual necessity — processing required to provide the gaming service you have signed up for, including account management, deposits, withdrawals, and game play
- Legal obligation — processing required to comply with applicable legal requirements, including KYC verification, anti-money-laundering checks, and age verification
- Legitimate interests — processing carried out for fraud prevention, platform security, responsible gaming monitoring, and improving the quality of the xl999 service
- Consent — where you have given explicit consent to receive promotional communications or for the use of non-essential cookies and tracking technologies
KYC Identity Verification and Document Handling
How xl999 handles identity documents submitted by players for KYC purposes.
xl999 operates a KYC verification process that requires players to submit identity documents before their first withdrawal can be processed. Documents accepted for KYC include the Bangladesh National Identity Card (NID), passport, and driving licence. Documents submitted for KYC are processed solely for the purpose of verifying a player's age, identity, and account ownership. They are handled by trained xl999 personnel and are not shared with third parties except where required by law or by the payment processor facilitating a transaction.
KYC documents are stored securely using encrypted storage systems. Access to KYC documents within xl999 is restricted to personnel who require access for the purpose of completing the verification process or for compliance-related review. Documents are retained for the period required by applicable law and then securely deleted in accordance with xl999's data retention schedule. Players who have questions about the handling of their KYC documents may contact xl999 support.
Sharing Your Data with Third Parties
The limited circumstances under which xl999 may share player data with external parties.
xl999 does not sell, rent, or trade personal data to any third party for commercial or marketing purposes. Player data may be shared with third parties only in the following circumstances:
- Payment processors — bKash, Nagad, Rocket, Upay, Visa, and Mastercard receive the transaction data necessary to process deposits and withdrawals. These processors handle data under their own privacy and security policies
- Game providers — Pragmatic Play, Evolution Gaming, Microgaming, Spribe, and other licensed software providers may receive session data necessary to deliver their games. This data does not include payment details
- Legal and regulatory authorities — xl999 will disclose player data to law enforcement, regulatory bodies, or other governmental authorities where required to do so by applicable law or valid legal process
- Fraud prevention services — xl999 may share data with third-party fraud detection services where necessary to protect the platform and its players from fraudulent activity
All third parties with whom xl999 shares personal data are required to handle that data securely and to use it only for the specific purpose for which it was shared. xl999 does not authorise any third party to use player data for their own marketing purposes or to share it with further parties without xl999's consent.
Cookies and Tracking Technologies
How xl999 uses cookies and similar technologies when you access the platform.
xl999 uses cookies and similar tracking technologies to operate the platform and improve your experience. Cookies are small text files stored on your device when you access xl999.bet. The types of cookies xl999 uses are:
- Essential cookies — required for the platform to function, including session management, login authentication, and security tokens. These cannot be disabled without breaking the service
- Functional cookies — used to remember your preferences such as language settings and display options, improving your experience on return visits
- Analytics cookies — used to collect aggregated, anonymised data about how players use the platform, helping xl999 identify areas for improvement
You can manage cookie preferences through your device's browser settings. Disabling essential cookies will affect the functionality of the xl999 platform and may prevent you from accessing certain features. xl999 does not use cookies to track your browsing activity on other websites or to build advertising profiles.
Data Retention
How long xl999 keeps your personal data and what happens to it when it is no longer needed.
xl999 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, or for as long as required by applicable legal obligations, whichever is longer. For active player accounts, personal data is retained for the duration of the account's activity plus a minimum period following account closure, consistent with anti-money-laundering record-keeping requirements. The specific retention periods that apply to each category of data are as follows: identity and KYC documents are retained for a minimum of five years from the date of the player's last transaction; transaction records are retained for a minimum of five years; session and gaming activity data is retained for a minimum of two years; marketing consent records are retained for as long as the consent remains valid plus one year following its withdrawal.
When personal data is no longer required to be retained, xl999 will securely delete or anonymise it in a manner that ensures it cannot be recovered or reconstructed. Players who close their xl999 account may submit a data deletion request to xl999 support. xl999 will process all valid deletion requests within thirty calendar days, subject to any overriding retention obligations imposed by law.
Data Security
The technical and organisational measures xl999 uses to protect your personal data.
xl999 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, loss, destruction, or disclosure. These measures include SSL (Secure Sockets Layer) encryption for all data transmitted between your device and xl999.bet; encrypted storage for sensitive account data and KYC documents; access controls limiting data access to authorised personnel with a legitimate need; regular internal reviews of data handling procedures; and monitoring systems to detect and respond to potential security incidents. Despite these measures, no online platform can guarantee absolute security. xl999 maintains an incident response process so that in the event of a data breach that is likely to result in a risk to players, affected individuals will be notified promptly.
Your Privacy Rights
The rights you have over your personal data held by xl999 and how to exercise them.
Right of Access
You have the right to request a copy of the personal data xl999 holds about you. Requests will be fulfilled within thirty calendar days of receipt, subject to identity verification.
Right to Rectification
If any personal data xl999 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Contact xl999 support with details of the correction required.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to xl999's legal retention obligations. Requests are assessed on a case-by-case basis.
Right to Object
You have the right to object to xl999 processing your personal data for direct marketing purposes at any time. You may also object to processing carried out on the basis of legitimate interests where you have grounds relating to your particular situation.
Children's Privacy — 21+ Platform
xl999's age restriction policy and how the platform protects underage individuals.
xl999 is strictly a 21+ platform. The Platform is not intended for, and does not knowingly collect personal data from, individuals under the age of 21. xl999 performs age verification as part of the KYC process and will immediately close any account found to belong to a person under 21 years of age. If you are a parent or guardian and you believe that a minor in your care has accessed xl999 or provided personal data to the Platform, please contact xl999 support immediately so that appropriate action can be taken, including account closure and deletion of any data the minor may have submitted. xl999 takes the protection of underage individuals seriously and cooperates fully with any investigation relating to underage access.
Changes to This Privacy Policy
How xl999 will notify you when this Policy is updated.
xl999 reserves the right to update this Privacy Policy at any time to reflect changes in our data handling practices, changes in applicable law, or the introduction of new platform features that affect the collection or use of personal data. When material changes are made to this Policy, xl999 will notify registered players via their account inbox or registered Bangladesh mobile number, and will update the "Last updated" date shown at the top of this page. Your continued use of the xl999 platform following notification of a change to this Policy constitutes your acceptance of the updated Policy. If you do not accept the updated Policy, you may close your account by contacting xl999 support. xl999 encourages all players to review this page periodically to stay informed of how their data is being protected.
Contact Us About This Policy
How to reach xl999 if you have questions or concerns about how your data is handled.
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have concerns about how xl999 is handling your personal data, please contact the xl999 support team. The support team can be reached via the contact email displayed in the footer of this page. xl999 is committed to responding to all privacy-related queries within five business days of receipt. For requests relating to data access, rectification, or erasure, please include your registered account username and a clear description of your request so that the support team can process it efficiently.
xl999 takes privacy complaints seriously. If you submit a complaint to xl999 support and are not satisfied with the response you receive, you retain any rights available to you under applicable consumer protection frameworks. xl999 is based in Bangladesh's online gaming market and serves players across the country including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, and Mymensingh. All privacy-related communications are handled in English and are treated as confidential.
Your Data Is Safe — Start Playing at xl999
xl999 protects your privacy so you can focus on what matters — great cricket betting, live casino, and slots. 21+ only. Play responsibly.