agt99 Privacy Policy

1 Who We Are

1.1  agt99 is an online gaming and sports betting platform operating at agt99.io, providing cricket betting, casino games, live dealer titles, and related entertainment services primarily to players based in Bangladesh.

1.2  For the purposes of this Privacy Policy, agt99 acts as the data controller in respect of the personal information collected from players and website visitors. As data controller, agt99 determines the purposes and means by which your personal data is processed.

1.3  Any questions, requests, or complaints regarding this Privacy Policy or agt99's data processing activities should be directed to our support team at [email protected]. Contact details are provided in full in Section 14.

2 Data We Collect

2.1  agt99 collects personal data about you in the following categories depending on how you interact with the platform:

2.1 Identity & Registration Data

When you register an agt99 account, we collect your full legal name, date of birth, gender, username, and a hashed version of your chosen password. We do not store passwords in plain text.

2.2 Contact Data

We collect your mobile phone number and email address at registration. These are used for account communications, OTP verification, transaction alerts, and customer support correspondence.

2.3 Identity Verification (KYC) Data

To comply with our Know Your Customer obligations and to confirm that players meet the 21+ age requirement, we may request copies of government-issued photo identification (such as a National ID card or passport) and proof of address documentation. This data is processed solely for verification purposes.

2.4 Financial Data

We record deposit and withdrawal transaction histories, payment method types used (e.g., bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank), transaction amounts in BDT, and transaction timestamps. We do not store full mobile banking PINs or full bank account numbers beyond what is required for transaction processing.

2.5 Gaming & Betting Activity Data

We collect records of your game sessions, wagers placed, games played, betting markets accessed, stakes, outcomes, and account balance history. This data is used for account management, dispute resolution, responsible gaming monitoring, and fraud prevention.

2.6 Technical & Device Data

When you access the platform, we automatically collect your IP address, device type, operating system, browser type and version, screen resolution, session duration, pages visited, and referring URLs. This data helps us optimise platform performance and detect suspicious activity.

2.7 Communications Data

If you contact our customer support team via live chat, email, or any other channel, we retain records of those communications for quality assurance, dispute resolution, and staff training purposes.

3 How We Use Your Data

3.1  agt99 uses the personal data described in Section 2 for the following specific purposes:

• Account creation and management: to register your account, authenticate your identity at login, and maintain your player profile;
• Service delivery: to provide access to games, betting markets, promotions, and customer support;
• Payment processing: to process deposits and withdrawals via your chosen payment method and to maintain accurate financial records;
• Identity verification: to confirm that you meet the minimum age requirement of 21 years and to comply with KYC obligations;
• Fraud prevention and security: to detect, investigate, and prevent fraudulent transactions, account takeover attempts, collusion, and other prohibited conduct;
• Responsible gaming: to monitor gaming behaviour for signs of problem gambling, to apply player-requested limits, and to enforce self-exclusion where applicable;
• Legal compliance: to fulfil our obligations under applicable law, including record-keeping and responding to lawful requests from authorities;
• Platform improvement: to analyse usage patterns and technical performance data in order to enhance the player experience;
• Direct communications: to send you transaction notifications, security alerts, and — where you have opted in — promotional offers relevant to your gaming interests.

3.2  agt99 does not use automated decision-making processes, including profiling, that produce legal or similarly significant effects on you without human review. Where automated tools are used for fraud screening or responsible gaming monitoring, a member of our team reviews flagged cases before any account action is taken.

4 Legal Basis for Processing

4.1  agt99 relies on the following legal bases when processing your personal data:

Processing Purpose	Legal Basis
Account registration and service delivery	Performance of a contract
Payment processing and transaction records	Performance of a contract
KYC identity and age verification	Legal obligation
Fraud prevention and security monitoring	Legitimate interests
Responsible gaming monitoring	Legitimate interests / legal obligation
Promotional communications (opt-in)	Consent
Platform analytics and improvement	Legitimate interests
Legal record-keeping and compliance	Legal obligation

4.2  Where agt99 relies on consent as the legal basis for processing — for example, for sending promotional emails or SMS — you may withdraw that consent at any time by contacting our support team or adjusting your account communication preferences. Withdrawal of consent will not affect the lawfulness of any processing carried out prior to withdrawal.

5 Sharing Your Data

5.1  agt99 does not sell, rent, or trade your personal data to third parties. We may share your personal data only in the following limited and controlled circumstances:

5.1 Payment Service Providers

To process your deposits and withdrawals, we share necessary transaction data with payment processors including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank. These providers receive only the data required to complete the specific transaction and are contractually required to protect your information.

5.2 Game Content Providers

Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a session token and anonymised player identifier to deliver their game content within the agt99 platform. These providers do not receive your full name, contact details, or financial data.

5.3 Fraud Prevention and Security Services

We work with third-party fraud detection and cybersecurity providers who may process technical data (such as IP addresses and device fingerprints) to identify and prevent fraudulent activity. These providers act as data processors on our behalf under strict confidentiality agreements.

5.4 Legal and Regulatory Disclosure

agt99 may disclose personal data to competent authorities, law enforcement agencies, or regulatory bodies where required to do so by applicable law, court order, or in connection with the investigation of criminal activity. We will, where lawfully permitted, notify you of any such disclosure.

5.5 Business Transfers

In the event of a merger, acquisition, or sale of all or part of agt99's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified in advance of any such transfer and of any changes to this Privacy Policy that may result.

6 Payment Data

6.1  agt99 takes particular care with financial data. All payment transactions on the platform are processed through encrypted channels. We record transaction metadata (amount, date, payment method type, transaction reference) but we do not store full mobile banking credentials, card numbers, or bank account PINs on our servers.

6.2  As stated in our Terms & Conditions, all payment methods used on agt99 must be registered in your own name. This requirement is integral to our anti-money-laundering obligations and helps protect your account from unauthorised financial activity.

6.3  Where we are required to conduct source-of-funds checks on accounts showing unusual financial activity, this process is conducted by trained members of our compliance team and is subject to strict confidentiality protocols.

7 Cookies & Tracking Technologies

7.1  agt99 uses cookies and similar tracking technologies to operate and improve the platform. The types of cookies we use are as follows:

• Strictly Necessary Cookies: required for the platform to function, including session management, login authentication, and security features. These cannot be disabled without impairing core platform functionality.
• Performance Cookies: used to collect anonymised analytics data about how players navigate the platform, which pages are visited most frequently, and where errors occur. This data helps us improve platform performance.
• Functional Cookies: used to remember your preferences such as language settings, game lobby view, and notification preferences.
• Targeting / Preference Cookies: used, where you have provided consent, to deliver promotional content relevant to your gaming interests within the platform.

7.2  You may manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect your ability to use some features of the agt99 platform. agt99 does not use third-party advertising cookies or share cookie data with advertising networks.

8 Data Retention

8.1  agt99 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active account data: retained for the full duration of your account's active status plus five (5) years following account closure, to satisfy legal record-keeping obligations;
• KYC and identity verification documents: retained for five (5) years from the date of verification or from account closure, whichever is later;
• Financial transaction records: retained for seven (7) years to comply with financial reporting and anti-money-laundering obligations;
• Customer support communications: retained for two (2) years from the date of the interaction;
• Technical and device data (logs): retained for up to twelve (12) months, after which they are automatically deleted or anonymised;
• Marketing preference data: retained until you withdraw consent or close your account.

8.2  When a retention period expires, agt99 will securely delete or irreversibly anonymise the relevant data so that it can no longer be associated with you as an individual.

9 Your Rights

9.1  As a player whose personal data is processed by agt99, you hold the following rights with respect to your information:

• Right of Access: you may request a copy of the personal data agt99 holds about you and information about how it is processed;
• Right to Rectification: you may request that inaccurate or incomplete personal data be corrected promptly;
• Right to Erasure: in certain circumstances, you may request that agt99 delete your personal data — for example, where the data is no longer necessary for the purpose it was collected, subject to any overriding legal retention obligations;
• Right to Restriction: you may request that agt99 restrict its processing of your personal data in certain circumstances, such as while a dispute about accuracy is being resolved;
• Right to Data Portability: where processing is based on consent or contract and carried out by automated means, you may request a structured, machine-readable copy of the personal data you have provided to agt99;
• Right to Object: you may object to processing based on legitimate interests, including for direct marketing purposes. Where you object to direct marketing, we will cease that processing immediately;
• Right to Withdraw Consent: where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

9.2  To exercise any of the rights listed above, please contact the agt99 support team at [email protected], providing your registered username and a clear description of your request. We will respond within thirty (30) days and will not charge a fee for reasonable requests.

9.3  agt99 may need to verify your identity before processing a data rights request to ensure that we do not disclose or delete data at the request of an unauthorised party. We will request the minimum information necessary for this verification.

10 Data Security

10.1  agt99 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers;
• Encryption of sensitive data fields at rest within our database infrastructure;
• Two-factor authentication (OTP) for account login and transaction confirmation;
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis;
• Regular security audits, penetration testing, and vulnerability assessments conducted by independent specialists;
• Automated intrusion detection and anomaly monitoring across our platform infrastructure;
• Staff training on data protection obligations and secure data handling practices.

10.2  In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, agt99 will notify affected players without undue delay and will take all reasonable steps to contain the breach and mitigate its impact.

11 Children & Minors

11.1  The agt99 platform is strictly restricted to individuals aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from an individual who does not meet the minimum age requirement, we will immediately suspend the associated account and securely delete the data in question.

11.2  If you are a parent or guardian and believe that a minor has registered on or used the agt99 platform, please contact our support team at [email protected] immediately so that we can take appropriate action.

12 International Data Transfers

12.1  agt99 primarily processes player data on servers located in secure data centres. In certain circumstances — for example, where game content providers or fraud prevention services operate infrastructure in other countries — your data may be transferred to and processed in jurisdictions outside Bangladesh.

12.2  Where such transfers occur, agt99 ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to that described in this Privacy Policy. This includes contractual data processing agreements with all third-party recipients of your personal data.

12.3  By using the agt99 platform, you acknowledge that your data may be processed in jurisdictions other than Bangladesh as described above. If you have questions about specific data transfer arrangements, please contact our support team.

13 Policy Updates

13.1  agt99 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or platform functionality. The most current version of this policy will always be accessible at agt99.io/privacy-policy, with the effective date clearly displayed at the top of the document.

13.2  Where changes are material — meaning they significantly affect your rights or the way we use your data — agt99 will provide advance notice to registered players via email or in-platform notification at least fourteen (14) days before the revised policy takes effect. Your continued use of the platform after the effective date of any revision constitutes acceptance of the updated policy.

14 Contact & Complaints

14.1  If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how agt99 has handled your personal data, please contact our support team using the details below. Please note that email addresses are displayed as plain text and are not clickable links.

14.2  Support email: [email protected]

14.3  Our support team is available 24 hours a day, 7 days a week. For data-related requests, please include your registered username and a clear description of your query in your message to help us respond as promptly as possible. We aim to acknowledge all data rights requests within five (5) business days and to provide a full response within thirty (30) calendar days.

14.4  If you are not satisfied with agt99's response to a privacy concern, you have the right to escalate the matter. agt99 is committed to resolving all legitimate privacy complaints fairly and in good faith.