cl99 Privacy Policy

1. Introduction

cl99 ("we", "us", "the Platform") is committed to protecting the privacy and personal data of every player who uses our online casino and sports betting platform at cl99.lat. This Privacy Policy describes in plain language what personal data we collect, the purposes for which we use it, how long we keep it, with whom we share it, and what rights you have in relation to it.

By registering an account, making a deposit, or otherwise using cl99, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection, use, and processing of your personal data as described herein. If you do not agree with any part of this policy, you must discontinue use of the platform immediately.

Our Privacy Commitments at a Glance

2. Information We Collect

cl99 collects only the personal data that is necessary to provide you with a safe, fair, and functional online gaming experience. We collect data in two ways: information you provide directly to us, and information collected automatically when you use the platform. The categories of personal data we may hold are set out below.

• Identity Data
  Full name, date of birth, gender (where provided), national ID number or passport number supplied during KYC verification, and profile photograph where submitted for identity verification purposes.
• Contact Data
  Email address and Bangladesh mobile phone number provided at registration. These are used for account security, transaction notifications, and customer support communications.
• Financial Data
  Payment method identifiers (bKash account number, Nagad account number, Rocket account number, Upay account number, masked card numbers for Visa/Mastercard), transaction history including deposit amounts, withdrawal amounts, dates, and transaction reference numbers. We do not store full card numbers or mobile banking PINs.
• Technical and Usage Data
  IP address, device type, device operating system, browser type and version, screen resolution, session start and end times, pages visited on cl99, game sessions played (titles, bet amounts, outcomes), and referring URL. This data is collected automatically via server logs and session tracking.
• Responsible Gaming Data
  Deposit limit settings, session time limit preferences, cool-off period elections, self-exclusion requests and their duration, and any communications with cl99 support relating to responsible gaming concerns. This data is retained to enforce player-requested restrictions and to fulfil our duty of care obligations.

3. How We Use Your Information

cl99 uses the personal data we collect for specific, documented purposes. We do not use your data for any purpose that is incompatible with the purposes listed below. The primary purposes for which cl99 processes your personal data are:

• a)Account Management: To create and maintain your cl99 account, verify your identity through KYC processes, authenticate your login sessions, and communicate with you about your account status, security alerts, and transaction confirmations.
• b)Service Delivery: To process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard; to enable gameplay across casino games, slots, crash games, and sports betting markets; to apply bonus credits and track wagering requirement completion.
• c)Security and Fraud Prevention: To detect and investigate suspected fraudulent activity, duplicate accounts, money laundering, bonus abuse, and other prohibited conduct. Technical data including IP addresses and device fingerprints are used to identify patterns of abuse and to protect the integrity of cl99 and its players.
• d)Legal Compliance: To fulfil our obligations under applicable anti-money laundering requirements, age verification obligations, and any other legal or regulatory requirements applicable to the operation of an online gaming platform serving players in Bangladesh.
• e)Responsible Gaming: To enforce deposit limits, session time limits, cool-off periods, and self-exclusion requests that you have set on your account; to monitor gaming patterns that may indicate problem gambling behaviour; and to fulfil our duty-of-care responsibilities to all players on the platform.
• f)Platform Improvement: To analyse aggregated, anonymised usage data to understand how players interact with cl99, which game categories are most popular, how deposit and withdrawal flows perform, and where the player experience can be improved. This analysis uses anonymised data only and does not identify you personally.

4. Legal Basis for Processing Your Data

cl99 processes your personal data only where a lawful basis exists for doing so. The following legal bases apply to our processing activities:

• i)Contractual Necessity: The majority of our data processing is necessary to perform the contract between you and cl99 — that is, to operate your account, process your transactions, and deliver gaming services to you. Without processing this data, cl99 cannot provide the services you have registered for.
• ii)Legal Obligation: Certain processing activities, including KYC identity verification and anti-money laundering transaction monitoring, are carried out because cl99 is legally required to do so. cl99 may be required to retain records and share information with authorities in accordance with applicable law.
• iii)Legitimate Interests: cl99 processes certain technical and usage data on the basis of its legitimate interests in operating a secure platform, detecting fraud, preventing abuse, and improving the player experience. Where we rely on legitimate interests, we have assessed that our interests do not override your fundamental rights and freedoms.
• iv)Consent: Where cl99 sends you optional promotional communications (such as bonus offer notifications or seasonal campaign alerts related to events like Eid, Pohela Boishakh, or BPL season), we do so on the basis of your consent. You may withdraw your consent to receive promotional communications at any time by contacting cl99 support.

5. Payment Data and Financial Information

cl99 handles financial data with particular care given its sensitivity. When you make a deposit using bKash, Nagad, Rocket, Upay, Visa, or Mastercard, the transaction is processed through the respective payment provider's secure infrastructure. cl99 receives confirmation of a successful transaction and records the associated payment method identifier and transaction amount in your account history. cl99 does not receive, store, or have access to your full mobile banking PIN, full card number, CVV/CVC code, or online banking password.

All financial transaction records on cl99 are stored in encrypted form. Access to financial records is restricted to authorised cl99 personnel on a strict need-to-know basis. cl99 retains transaction records for a minimum of five years from the date of the transaction in order to comply with applicable financial record-keeping and anti-money laundering requirements. This retention period applies even if your cl99 account is closed before the five-year period expires.

6. Sharing Your Information

cl99 does not sell, rent, or trade your personal data. We share your personal data only in the limited circumstances described below, and only to the extent necessary for the specific purpose in question.

• 1)Payment Processors: cl99 shares transaction data with the relevant payment processors (bKash, Nagad, Rocket, Upay, and card processing networks) to the extent necessary to complete your deposit or withdrawal transaction. These processors operate their own privacy and security standards and are not permitted to use your data for any other purpose.
• 2)Game Providers: When you play games on cl99 powered by third-party providers such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, or Ezugi, limited technical data (such as a session token and account identifier) is shared with the provider's servers to enable the game session. Game providers are contractually prohibited from using this data for any purpose other than delivering the game to you.
• 3)Legal Authorities: cl99 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, a valid court order, or a lawful request from a competent authority. In such cases, cl99 will disclose only the minimum data required to comply with the legal obligation and will, where legally permitted, notify the affected player.
• 4)Service Providers: cl99 uses a small number of carefully selected third-party service providers (for example, cloud hosting providers and analytics platforms) who may process personal data on cl99's behalf as data processors. These providers are bound by data processing agreements that require them to process personal data only on cl99's documented instructions, to maintain appropriate security measures, and to delete or return personal data upon termination of the service relationship.

7. Cookies and Tracking Technologies

cl99 uses cookies and similar tracking technologies to provide a functional and personalised experience on the platform. Cookies are small text files placed on your device when you visit cl99.lat. They allow the platform to remember your session, maintain your login state, and understand how you use the site. cl99 uses three categories of cookies:

• Essential Cookies
  These cookies are strictly necessary for the platform to function. They maintain your login session, keep your account authenticated during gameplay, remember your language preference, and ensure secure transmission of your session data. Essential cookies cannot be disabled without breaking core platform functionality.
• Analytics Cookies
  These cookies collect anonymised data about how players use cl99 — which pages are visited most, which game categories are most popular, how long sessions last on average, and where players exit the platform. This information helps cl99 improve the platform experience. Analytics cookies do not identify you personally.
• Functional Cookies
  These cookies remember your preferences on cl99, such as your preferred deposit method, notification settings, and responsible gaming limit configurations. They improve your experience by reducing repetitive setup steps each time you log in. Functional cookies can be disabled through your browser settings, though doing so may affect certain platform features.

You can manage or disable non-essential cookies at any time through your browser's cookie settings. Please note that disabling essential cookies will prevent you from logging in or using core features of cl99. cl99 does not use advertising cookies, retargeting cookies, or cross-site tracking technologies of any kind.

8. Data Retention

cl99 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Active account holders' personal data is retained for the duration of the account relationship and for a period of five years following account closure, in order to satisfy financial record-keeping, anti-money laundering compliance, and dispute resolution requirements. Responsible gaming data (including self-exclusion records) is retained for a minimum of seven years to prevent circumvention of player-requested restrictions.

Anonymous or aggregated data that cannot be used to identify you personally may be retained indefinitely for platform analytics and improvement purposes. When personal data is no longer required and no legal retention obligation applies, cl99 securely deletes or irreversibly anonymises the data so that it can no longer be associated with you.

9. Your Privacy Rights

As a cl99 player based in Bangladesh, you have the following rights in relation to the personal data that cl99 holds about you. To exercise any of these rights, contact cl99 support at [email protected]. cl99 will respond to all valid rights requests within 30 days of receipt.

• ✓Right of Access: You may request a copy of all personal data that cl99 holds about you. cl99 will provide this information in a clear, structured format within 30 days of your request.
• ✓Right to Rectification: If you believe that personal data cl99 holds about you is inaccurate or incomplete, you may request that it be corrected. Identity data corrections may require supporting documentation such as an updated national ID card or passport.
• ✓Right to Erasure: You may request that cl99 delete your personal data. cl99 will fulfil erasure requests where no legal retention obligation or overriding legitimate interest requires the data to be retained. Note that financial transaction records and responsible gaming records are subject to mandatory minimum retention periods and cannot be deleted on request during those periods.
• ✓Right to Restriction: You may request that cl99 restrict the processing of your personal data in certain circumstances — for example, while a rectification request is being verified, or where you contest the lawfulness of a particular processing activity.
• ✓Right to Data Portability: You may request that cl99 provide you with a copy of the personal data you have provided to us in a structured, commonly used, machine-readable format, so that you may transfer it to another service provider if you choose to do so.
• ✓Right to Object: You may object to cl99's processing of your personal data where that processing is based on legitimate interests or is used for direct marketing communications. Where you object to direct marketing, cl99 will cease that processing immediately.

10. Security Measures

cl99 implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include SSL/TLS encryption for all data in transit between your device and cl99's servers; encryption of sensitive data fields at rest in our databases; strict access control policies limiting which cl99 personnel can access personal data, based on role and business necessity; regular security reviews of our infrastructure and third-party service providers; and two-factor authentication options for player accounts.

While cl99 takes all reasonable precautions to protect your data, no online platform can guarantee absolute security against all possible threats. In the event of a personal data breach that poses a risk to your rights and freedoms, cl99 will notify affected players promptly and take all necessary remedial action. If you believe your cl99 account has been compromised, contact cl99 support immediately at [email protected].

11. Responsible Gaming and Your Data

cl99 uses your gaming activity data and account data to support responsible gaming practices. This includes monitoring for patterns that may suggest a player is experiencing difficulties with gambling — such as rapid increases in deposit frequency or amounts, extended uninterrupted session times, or repeated requests for temporary account restrictions followed by early reinstatement requests. Where cl99 identifies such patterns, our responsible gaming team may reach out proactively to offer support and information about self-exclusion and deposit limit tools available in your account settings. All responsible gaming data is treated with strict confidentiality and is not shared with any third party except where required by law.

12. Changes to This Privacy Policy

cl99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform features. When material changes are made, cl99 will update the "Last Updated" date at the top of this page and will make reasonable efforts to notify registered players via email or an in-platform notification prior to the changes taking effect.

Your continued use of cl99 following the posting of a revised Privacy Policy constitutes your acknowledgement and acceptance of the updated policy. We encourage you to review this Privacy Policy periodically to stay informed about how cl99 collects, uses, and protects your personal data. The most current version of this policy is always available at cl99.lat/privacy-policy.

13. Contact and Data Requests

If you have any questions about this Privacy Policy, wish to exercise your data rights, want to report a suspected privacy breach, or have any other privacy-related concern, please contact cl99 support. Our support team is available 24 hours a day, 7 days a week. For formal data rights requests, please include "Data Rights Request" in the subject line of your email and provide your registered account email address or mobile number so that we can verify your identity.