ci99 Privacy Policy

1 Data We Collect

When you register for, access, or use the ci99 platform, we collect personal data that falls into the following categories. We collect only what is necessary for the purposes described in this Privacy Policy and do not collect data beyond what is reasonably required to deliver a safe, compliant, and enjoyable service.

1.1 Registration and Account Data

When you create a ci99 account, we collect information you provide directly during the registration process:

• Full legal name (as it appears on a government-issued ID)
• Date of birth (to verify that you are 18 years of age or older)
• Email address
• Mobile phone number (used for OTP verification and account security)
• Username and password (password stored in encrypted, hashed form)
• Preferred deposit and withdrawal method

1.2 Identity Verification Data

To comply with our age verification obligations and to prevent fraud, ci99 may request copies of supporting identity documents at any stage of your account lifecycle. These may include:

• National Identity Card (NID)
• Passport (photo page)
• Birth certificate
• Proof of address (utility bill or bank statement dated within 3 months)

1.3 Financial and Transaction Data

We record details of all deposits, withdrawals, and in-game transactions made on your ci99 account, including:

• Payment method type (bKash, Nagad, Rocket, Upay, bank transfer)
• Mobile wallet number or bank account reference (partially masked)
• Transaction amounts in Bangladeshi Taka (BDT, ৳)
• Transaction timestamps (Bangladesh Standard Time, UTC+6)
• Deposit and withdrawal status records

1.4 Usage and Technical Data

When you interact with the ci99 platform, we automatically collect certain technical data through server logs, cookies, and analytics tools:

• IP address and approximate geographic location (city/region level)
• Device type, operating system, and browser version
• Pages visited, session duration, and clickstream data
• Game sessions played, bet amounts, and outcomes (for fair-play monitoring)
• Referral source (if you arrived via an affiliate or promotional link)

1.5 Communications Data

When you contact ci99 through our customer support channels — including live chat, email to [email protected], or any web-based contact form — we retain records of those communications, including your messages, our responses, and any attachments or screenshots you submit.

2 How We Use Your Data

ci99 uses the personal data we collect for specific, legitimate purposes. The table below summarises the primary purposes for which we process your data and the legal basis we rely on for each purpose.

2.1 Marketing Communications

ci99 will only send you promotional emails or SMS notifications relating to bonuses, new games, or seasonal offers if you have explicitly opted in to receive such communications during registration or through your account settings. You may withdraw your consent and unsubscribe from marketing communications at any time by updating your notification preferences or by contacting [email protected]. Withdrawal of marketing consent does not affect the lawfulness of any processing carried out before the withdrawal.

2.2 Automated Decision-Making

Certain platform functions — including fraud screening, duplicate account detection, and responsible gaming flagging — involve automated processing of your data. Where an automated decision has a significant effect on your account (for example, a temporary suspension pending review), you have the right to request human review of that decision by contacting [email protected].

3 Data Sharing & Disclosure

ci99 does not share your personal data with third parties except in the circumstances described below. All third-party recipients of personal data are required to handle that data in a manner consistent with this Privacy Policy and applicable data protection standards.

3.1 Service Providers and Technology Partners

To operate the ci99 platform, we engage trusted third-party service providers who may process personal data on our behalf, including:

• Game providers — Pragmatic Play, Microgaming, NetEnt, Evolution Gaming, Ezugi, and Spribe receive anonymised session data required to deliver game content and calculate outcomes. These providers do not receive your full identity or financial data.
• Payment processors — bKash, Nagad, Rocket, Upay, and partner banks receive the minimum data required to authorise and settle your financial transactions.
• Identity verification providers — Where enhanced KYC (Know Your Customer) checks are required, we may share identity document images with a vetted third-party verification service operating under strict data security obligations.
• Analytics and infrastructure providers — Aggregated, anonymised usage data is processed by cloud infrastructure and analytics partners to support platform performance and reliability.

3.2 Legal and Regulatory Disclosure

ci99 may disclose personal data to law enforcement agencies, regulatory bodies, financial intelligence units, or courts of competent jurisdiction where we are legally required to do so or where such disclosure is necessary to protect the rights, property, or safety of ci99, its players, or the public. We will notify you of any such disclosure where we are legally permitted to do so.

3.3 Business Transfers

In the event that ci99 undergoes a merger, acquisition, restructuring, or sale of all or part of its assets, personal data held by ci99 may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer via your registered email address, and the acquiring entity will be required to honour the terms of this Privacy Policy.

4 Cookies & Tracking

The ci99 website uses cookies and similar tracking technologies to deliver core platform functionality, remember your preferences, analyse usage patterns, and — where you have consented — support personalised promotional communications. A cookie is a small text file placed on your device by a website server; it cannot run programs or deliver viruses to your device.

4.1 Types of Cookies We Use

4.2 Managing Cookies

You can control and delete cookies through your browser settings. Most modern browsers allow you to block all cookies, accept only first-party cookies, or receive a notification before a cookie is placed. Please note that disabling strictly necessary cookies will impair core platform functionality, including the ability to log in and maintain an active session.

Instructions for managing cookies in common browsers:

• Google Chrome: Settings → Privacy and security → Cookies and other site data
• Mozilla Firefox: Options → Privacy & Security → Cookies and Site Data
• Safari: Preferences → Privacy → Manage Website Data
• Microsoft Edge: Settings → Cookies and site permissions

5 Data Retention

ci99 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention schedule applies to the main categories of personal data we hold:

Following the applicable retention period, personal data is either securely deleted or irreversibly anonymised so that it can no longer be linked to an identifiable individual. Anonymised, aggregated data (for example, statistical analysis of betting trends) may be retained indefinitely as it no longer constitutes personal data.

6 Data Security

ci99 takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security infrastructure includes the following controls:

• SSL/TLS Encryption: All data transmitted between your browser and the ci99 platform is encrypted using industry-standard SSL/TLS protocols. You can verify this by the padlock icon in your browser's address bar.
• Password Hashing: Account passwords are never stored in plain text. They are processed using a strong cryptographic hashing algorithm with per-user salting, ensuring that even in the event of a data breach, raw passwords cannot be recovered.
• Access Controls: Access to personal data within ci99's internal systems is restricted on a strict need-to-know basis. Only authorised personnel with a legitimate operational reason may access identifiable player data.
• Two-Factor Authentication (2FA): ci99 supports and encourages the use of two-factor authentication on player accounts via OTP verification to your registered mobile number.
• Regular Security Reviews: Our platform and infrastructure undergo periodic security assessments to identify and remediate potential vulnerabilities before they can be exploited.
• Certified RNG Technology: Game outcome integrity is maintained through independently certified Random Number Generator (RNG) systems supplied by our game providers, ensuring that no party — including ci99 — can predict or manipulate game results.

6.1 Data Breach Response

In the event of a personal data breach that poses a risk to your rights and freedoms, ci99 will notify affected players without undue delay via their registered email address. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the steps ci99 is taking to address the breach and mitigate its impact.

7 Your Privacy Rights

As a registered player on the ci99 platform, you hold a number of rights in relation to the personal data we hold about you. ci99 is committed to honouring these rights promptly and transparently. The following rights apply to your personal data:

7.1 Right of Access

You have the right to request a copy of the personal data ci99 holds about you. We will provide this information within a reasonable timeframe (typically within 30 days of receiving your verified request) in a structured, commonly used, and machine-readable format where possible.

7.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You can update certain account details (such as email address and phone number) directly through your account settings panel. For changes to identity or verification data, please contact [email protected].

7.3 Right to Erasure

You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been processed unlawfully. Please note that erasure requests are subject to our legal retention obligations — we are required to retain certain financial and identity records for defined periods regardless of an erasure request.

7.4 Right to Restriction of Processing

You have the right to request that ci99 restrict the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved, or where you have objected to processing based on legitimate interest and we are assessing that objection.

7.5 Right to Data Portability

Where processing is based on your consent or on a contract with you, and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used format, and to transmit that data to another controller where technically feasible.

7.6 Right to Object

You have the right to object to the processing of your personal data where ci99 relies on legitimate interest as the legal basis. You also have the absolute right to object to direct marketing at any time, with no requirement to provide a reason.

7.7 Exercising Your Rights

To exercise any of the rights described above, please submit a written request to our support team at [email protected]. To protect your data, we will verify your identity before processing any rights request. We aim to respond to all verified requests within 30 days. If the request is complex or involves a large volume of data, we may extend this period by a further 30 days, in which case we will inform you of the extension and the reason for it.

8 Policy Updates & Contact

ci99 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, platform features, or applicable legal requirements. When material changes are made, we will notify registered players by posting a prominent notice on the platform and by sending a notification to your registered email address. The effective date at the top of this document will be updated to reflect the date of the most recent revision.

Continued use of the ci99 platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with a material change to this Privacy Policy, you should discontinue use of the platform and may request account closure in accordance with the Terms & Conditions.

8.1 Privacy Contact

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way ci99 handles your personal data, please contact our support team:

• Email: [email protected]
• Response time: Within 1 business day (Bangladesh Standard Time, UTC+6)
• Available: 24 hours a day, 7 days a week