ng99 Privacy Policy — How We Collect, Use, and Protect Your Personal Data

This Privacy Policy ("Policy") describes how ng99 ("the Platform", "we", "us", "our") collects, processes, stores, and protects the personal data of individuals ("you", "the Player", "the User") who access or use the ng99 platform at https://ng99.io and any associated services, applications, or communications operated under the ng99 brand.

ng99 is committed to handling personal data with care, transparency, and respect. We recognise that our players in Bangladesh trust us with sensitive personal and financial information, and we take that responsibility seriously. This Policy is designed to give you a clear and complete picture of our data practices so that you can make informed decisions about using the platform.

This Policy should be read alongside the ng99 Terms & Conditions and the Responsible Gaming policy, both of which are incorporated by reference. By using ng99, you agree to the data practices described herein.

This Policy applies to all personal data collected in connection with the ng99 platform, regardless of the device or method used to access it — including desktop browsers, mobile browsers, and any native applications distributed by ng99.

ng99 collects personal data in several categories, depending on the nature of your interaction with the platform. The table below summarises the main data categories and typical examples within each:

ng99 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or biometric data, unless specifically required to comply with applicable law or to verify identity in exceptional circumstances.

ng99 collects personal data through the following primary channels:

• Direct interactions: When you register an account, complete your profile, make a deposit or withdrawal, place a bet, play a casino game, contact support, or respond to a survey, you provide us with personal data directly.
• Automated technical collection: When you visit and interact with the ng99 platform, our systems automatically collect usage data including your IP address, device type, operating system, browser type and version, session start and end times, pages visited, and clickstream data. This data is collected via server logs, cookies, and similar technologies.
• Third-party payment providers: When you initiate a deposit or withdrawal via bKash, Nagad, Rocket, or Upay, the relevant payment provider shares transactional data with ng99 — typically the sending account identifier, transaction reference, and amount — sufficient to process and reconcile the transaction.
• Identity verification services: Where ng99 uses a third-party identity verification provider to confirm your identity, that provider may share verification outcome data and document authentication results with us. ng99 does not store raw copies of government identity documents beyond the legally required retention period.
• Publicly available sources: In limited fraud-prevention and compliance scenarios, ng99 may cross-reference information against publicly available records or industry-shared watchlists maintained by responsible gaming and anti-fraud organisations.

ng99 uses your personal data only for the purposes described below. Where we rely on your consent as the legal basis for processing, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

• Account registration and management: To create and maintain your ng99 account, authenticate your identity at login, and administer your account settings and preferences.
• Age and identity verification: To confirm that you meet the minimum age requirement of 21 years and that your identity matches the details provided during registration — a legal and responsible gaming obligation.
• Payment processing: To receive and disburse funds in BDT via your registered payment methods, reconcile transactions, and maintain accurate financial records.
• Platform delivery: To provide you with access to the sportsbook, live casino, slots, crash games, and all other ng99 products and features.
• Customer support: To respond to your enquiries, resolve disputes, and process feedback submitted via live chat, email, or WhatsApp.
• Security and fraud prevention: To detect and investigate suspicious activity, prevent unauthorised account access, identify and block fraudulent transactions, and protect the platform and its players from harm.
• Responsible gaming: To monitor wagering patterns for signs of problem gambling behaviour, enforce self-exclusions and deposit limits you have set, and proactively reach out to players who may be at risk — in line with our Responsible Gaming commitments.
• Legal and regulatory compliance: To comply with applicable anti-money-laundering obligations, respond to lawful requests from regulatory or law enforcement authorities, and maintain records required by law.
• Marketing and promotions: Where you have given consent, to send you promotional emails, SMS notifications, or in-platform messages about ng99 offers, new game launches, and seasonal promotions (such as those tied to BPL, IPL, Eid, or Pohela Boishakh). You may opt out at any time.
• Platform improvement: To analyse aggregated usage data, identify performance issues, improve game recommendations, and develop new features for ng99 players.

ng99 does not sell or rent your personal data to any third party. We share personal data only in the following limited circumstances:

• Payment service providers: bKash, Nagad, Rocket, and Upay receive the minimum data necessary to process your deposits and withdrawals. These providers are contractually bound to use your data solely for payment processing purposes.
• Identity verification providers: Where a third-party KYC (Know Your Customer) service is used to verify your identity, that provider receives the personal data necessary to complete the verification check and returns only the outcome to ng99.
• Technology and infrastructure partners: Hosting providers, cloud infrastructure services, and cybersecurity partners who support the operation of the ng99 platform may process limited technical data as part of their service delivery, under strict data processing agreements.
• Game content providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive session-level data (such as player ID and stake amounts) necessary to operate their games within the ng99 platform. They do not receive your full identity or financial data.
• Legal and regulatory authorities: ng99 will disclose personal data to relevant regulatory bodies, law enforcement agencies, financial intelligence units, or courts where required to do so by applicable law, or where we reasonably believe disclosure is necessary to prevent illegal activity, protect the rights and safety of players and staff, or respond to a lawful formal request.
• Fraud prevention and responsible gaming networks: ng99 may share necessary data with industry-standard responsible gaming registries or fraud-prevention networks to enforce self-exclusions and prevent problem gamblers from circumventing restrictions across platforms.

All third-party service providers who receive ng99 player data are subject to contractual obligations requiring them to maintain appropriate security standards and to use the data only for the specified purpose. ng99 does not allow any third party to use your data for their own commercial purposes.

ng99 uses cookies and similar tracking technologies to enable core platform functionality, improve user experience, and — where consent is given — deliver relevant promotional content. The following categories of cookies are used on the ng99 platform:

• Strictly necessary cookies: These are essential for the platform to function. They manage your login session, maintain your account authentication state, and ensure the security of your interaction with ng99. These cookies cannot be disabled without breaking core functionality.
• Functional cookies: These remember your preferences — such as your preferred game category, display settings, and language selection — so that they are retained between sessions.
• Performance and analytics cookies: These collect aggregated, anonymised data about how players navigate and interact with the platform. The data helps ng99 identify pages that perform poorly, optimise load times, and improve the overall player experience. No personally identifiable information is transmitted by these cookies.
• Marketing and targeting cookies: Where you have consented, these cookies track your interactions with ng99 promotional content and help us deliver relevant offers and campaigns. You may withdraw consent for marketing cookies at any time through your account settings or by contacting support.

ng99 does not use cookies to build cross-site behavioural profiles for sale to third-party advertising networks.

ng99 retains personal data for as long as necessary to fulfil the purposes set out in this Policy, or for as long as required by applicable law, whichever is longer. The following general retention periods apply:

• Active account data: Retained for the lifetime of your ng99 account and for a minimum period of five (5) years following account closure, in line with standard anti-money-laundering record-keeping obligations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with financial record-keeping requirements.
• Identity verification documents: Retained for the duration of the account relationship and for five (5) years following account closure. Copies of government-issued identity documents are stored only as long as required for compliance purposes and then securely deleted.
• Customer support communications: Retained for three (3) years from the date of the interaction, to enable effective dispute resolution and quality assurance review.
• Marketing data: Retained until you withdraw your consent to receive marketing communications, plus a short administrative period to process the opt-out.
• Responsible gaming records: Retained for a minimum of five (5) years, including records of self-exclusions, deposit limit settings, and any responsible gaming interventions, to prevent circumvention and to demonstrate compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual. Anonymised data may be retained indefinitely for statistical and analytical purposes.

ng99 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the ng99 platform.
• Encrypted password storage using industry-standard hashing algorithms. ng99 never stores passwords in plain text.
• Access controls that restrict internal access to personal data on a strict need-to-know basis. Staff with access to player data are subject to confidentiality obligations and regular security training.
• Regular security assessments including vulnerability scanning and penetration testing of the ng99 platform infrastructure.
• Intrusion detection systems that monitor for suspicious activity and alert the security team in real time.
• Secure data centres with physical access controls, environmental monitoring, and redundant backup systems to ensure data availability and integrity.

Despite these measures, no online platform can guarantee absolute security. In the event of a data security incident that is likely to result in a risk to your rights and freedoms, ng99 will notify affected players without undue delay using the contact details on record, and will take all reasonable steps to contain and remediate the incident.

As a player on the ng99 platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact the ng99 support team via email at [email protected] or via live chat.

• Right of access: You have the right to request a copy of the personal data ng99 holds about you. We will provide this information in a clear and understandable format within a reasonable timeframe.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update many of your details directly within your account profile.
• Right to erasure: In certain circumstances, you have the right to request that ng99 delete your personal data — for example, where the data is no longer necessary for the purpose it was collected, or where you withdraw consent and there is no other lawful basis for continued processing. This right is subject to our legal obligation to retain certain records for the periods described in Section 7.
• Right to restriction of processing: You may request that ng99 restricts the processing of your personal data in certain situations — for example, while a dispute about data accuracy is being resolved.
• Right to data portability: Where processing is based on your consent or on a contract with you, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where ng99 processes your data on the basis of your consent — including for marketing communications — you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
• Right to object: You have the right to object to processing based on ng99's legitimate interests. We will comply unless we can demonstrate compelling legitimate grounds that override your interests, or the processing is necessary for the establishment, exercise, or defence of legal claims.

ng99 aims to respond to all data rights requests within 30 days of receipt. Where a request is complex or involves a large volume of data, this period may be extended by a further 60 days; you will be notified of any such extension within the initial 30-day period.

ng99 enforces a strict minimum age policy. The platform is not directed at, and is not intended for use by, any person under the age of 21. ng99 does not knowingly collect personal data from anyone under 21 years of age.

As part of the registration and identity verification process, ng99 requires all players to confirm they are aged 21 or older and to provide documentary proof of age when requested. Where ng99 becomes aware that personal data has been collected from a person under 21, the following actions will be taken immediately:

• The account will be suspended and then permanently closed.
• All personal data associated with the underage account will be securely deleted from ng99 systems, subject only to any legal obligation to retain records of the incident itself.
• Any deposited funds will be returned to the originating payment account.
• The incident will be reviewed by the ng99 compliance team and, where appropriate, reported to relevant authorities.

The ng99 platform may contain references to or integrations with third-party services — primarily game content providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you interact with a game delivered by a third-party studio within the ng99 environment, that studio's systems may process limited session data as required to deliver the game experience.

ng99 is not responsible for the privacy practices of third-party game providers or any other external services. Where a third-party provider's privacy policy is relevant to your use of their content, we encourage you to review it directly on their website. ng99 operates under contractual data processing agreements with all integrated providers to ensure that player data is handled responsibly.

The ng99 platform does not embed social media widgets, third-party advertising networks, or external tracking pixels that would allow third parties to collect data about your ng99 activity for their own independent commercial purposes.

ng99 may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, legal requirements, or regulatory guidance. When material changes are made, we will:

• Publish the updated Policy on this page with a revised effective date.
• Send a notification to your registered email address summarising the key changes, where those changes materially affect your rights or our obligations.
• Display an in-platform notice for a reasonable period following the update.

Your continued use of the ng99 platform after the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any change to this Policy, you should discontinue use of the platform and may request account closure in accordance with the Terms & Conditions.

Minor updates — such as typographical corrections, clarifications that do not alter the substance of the Policy, or formatting improvements — may be made without separate notification and take effect upon publication.

This Privacy Policy was last reviewed and updated on 1 January 2026. We encourage all players to review this page periodically to stay informed about how ng99 protects their personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way ng99 handles your personal data, please reach out to our support team through any of the following channels:

• Email: [email protected] (plain text — not a clickable link)
• WhatsApp: +880 1700 000000 (08:00–24:00 BST)
• Live Chat: Available 24/7 directly within the ng99 platform

ng99 will acknowledge all privacy-related enquiries within two (2) business days and aim to provide a full response within thirty (30) days of receipt. For complex requests, we may require additional time as described in Section 9 above.

When submitting a data rights request, please include your registered username and the email address associated with your ng99 account so we can locate and verify your records promptly. ng99 may request additional proof of identity before acting on a data rights request to protect against unauthorised access to player data.