Y99 Privacy Policy —
Your Data, Our Responsibility

1What Data We Collect

When you register and use our services on y99, we collect the following information. Each piece of data is collected for a specific reason and used solely to improve our services.

• Full name, date of birth, and national ID number (for KYC verification)
• Email address and mobile number (for communication and security purposes)
• Banking & payment information (for transaction processing)
• Device information and IP address (for security verification purposes)
• Browsing and gaming activity logs (for service improvement)
• Cookie and session data (to improve the user experience)

2Purpose of Data Use

Collected data is used for the purposes listed below. y99 never sells your information to third parties for commercial purposes.

3Data Sharing & Third Parties

Y99 strictly controls who your data is shared with and under what circumstances. The specific situations are outlined below.

• Payment Provider: Payment gateways such as bKash, Nagad, and Rocket are used solely to process transactions.
• Legal Authorities: Upon a valid court order or request from a regulatory authority.
• Licensing Authority: Data required by regulatory authorities to maintain licensing.
• Fraud Prevention: With relevant authorities in connection with investigations into money laundering or fraud.

4Cookie Policy

Y99 uses cookies on its website and app to enhance the user experience. Cookies are small text files stored on your device.

• Essential Cookies: For login sessions and security — these cannot be disabled.
• Functional Cookies: To remember language and preferences — optional.
• Analytics Cookies: For reviewing site usage — can be disabled in browser settings.

5Your Data Rights

Under y99's privacy policy, every user holds the following rights. Contact our support team to exercise any of these rights.

• The right to view your stored data and receive a copy of it.
• The right to request correction of inaccurate or outdated information.
• The right to request deletion of your data under certain circumstances.
• The right to opt out of marketing communications.
• The right to object to the processing of your data.
• The right to request deletion of your data after closing your account.

6Security Measures

Y99 employs both technical and organizational security measures to protect your privacy.

• 256-bit TLS/SSL encryption — applied to all data transfers.
• Two-factor authentication (2FA) — applied at account login.
• Regular security audits and penetration testing.
• Restricted data access — limited to authorized personnel only.
• Automated system for detecting suspicious activity.
• Users are notified within 72 hours in the event of a security breach.

7Data Retention & Deletion

Y99 does not retain your data longer than necessary to provide its services. Certain information may be kept for a defined period to meet legal obligations.

• Active account data — retained until the account is closed.
• Financial transaction records — retained for up to 5 years in accordance with legal requirements.
• Support conversations — for up to 2 years.
• Log files — automatically deleted after 90 days.

8Policy Changes & Contact

Y99 may update this privacy policy at any time. Users will be notified by email in advance of any significant changes.

• The date of any changes will always be displayed at the top of the page.
• If you do not agree to the updated policy, you may request to close your account.
• For any privacy-related questions, please contact our support team.