tt99 Privacy Policy — How We Collect, Use, and Protect Your Personal Data

tt99 ("we", "us", "our", "the Platform") is committed to respecting and protecting the privacy of every individual who accesses or uses the tt99 platform at tt99.io ("the Platform"). This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us.

This policy applies to all users of the tt99 platform, including registered players, visitors who browse without registering, and individuals who contact our support team. It covers all digital touchpoints through which tt99 operates, including the website, mobile-optimised interfaces, and any associated customer communications.

Please read this Privacy Policy carefully and in full before using the tt99 platform. By accessing the platform and using our services, you confirm that you have read, understood, and agreed to the terms of this Privacy Policy. This policy should be read in conjunction with our Terms & Conditions and our Responsible Gaming Policy.

If you are a player based in Bangladesh, this policy governs all personal data we process in connection with your use of tt99. All services are provided in English and all data processing activities described in this policy are conducted in the English language.

tt99 collects personal data through several channels: directly from you during the registration and verification process, automatically through your use of the platform, and in limited cases from trusted third-party service providers. The categories of data we collect are described below.

2.1 Data You Provide Directly

• Registration Data: Full legal name, date of birth, gender, residential address in Bangladesh (including district, division, and postal code), email address, and mobile phone number.
• Identity Verification (KYC) Data: Copies of government-issued photo identification (National ID Card, Passport, or Driving Licence), proof of address documents, and verification of payment method ownership.
• Financial Data: Payment method details used to make deposits and receive withdrawals, including mobile wallet identifiers for bKash, Nagad, Rocket, and Upay, and card details for Visa and Mastercard transactions. Full card numbers are not stored by tt99 — payment processing is handled by regulated third-party payment processors.
• Communications Data: The content of any messages, emails, live chat transcripts, or support tickets you submit to the tt99 support team, including any attachments.
• Preference Data: Any preferences, settings, responsible gaming limit selections, or self-exclusion requests you configure within your account.

2.2 Data Collected Automatically

• Device & Technical Data: IP address, browser type and version, operating system, device type (mobile, tablet, desktop), screen resolution, and time zone setting.
• Usage Data: Pages visited, games played, betting markets accessed, session duration, click-path data, search queries entered within the platform, and features used.
• Transaction Data: A full record of all deposits, withdrawals, bets placed, games played, bonus claims, and account balance changes associated with your account.
• Cookie & Tracking Data: Data collected via cookies and similar tracking technologies as described in Section 6 of this policy.

2.3 Data from Third Parties

• KYC Verification Providers: tt99 may receive identity verification results and risk scores from third-party KYC and anti-fraud service providers used to validate the information you submit during registration.
• Payment Processors: Transaction confirmation data and fraud-screening results from payment processing partners including mobile wallet operators and card payment networks.
• Game Providers: Aggregated game session logs and result data from third-party game software providers including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe, used for dispute resolution and responsible gaming monitoring.

tt99 uses the personal data we collect for the following specific and defined purposes. We do not use your data for any purpose incompatible with those listed below without first obtaining your explicit consent.

You may opt out of marketing communications at any time by updating your notification preferences in your account settings or by contacting support at [email protected]. Opting out of marketing does not affect the processing of your data for account management, transaction processing, or fraud prevention purposes.

tt99 processes your personal data on one or more of the following lawful bases, depending on the specific purpose for which the data is being used:

• Contractual Necessity: Processing that is necessary to fulfil the contract between you and tt99 — specifically, to operate your account, process bets and transactions, and deliver the services described in our Terms & Conditions. Without this processing, we cannot provide you with access to the platform.
• Legal Obligation: Processing required to comply with applicable legal and regulatory obligations, including identity verification (KYC), anti-money laundering (AML) checks, and responsible gaming monitoring.
• Legitimate Interests: Processing conducted to pursue the legitimate interests of tt99, including fraud detection, platform security, abuse prevention, and analysis to improve our services. We ensure that our legitimate interests do not override your fundamental rights and freedoms.
• Consent: Processing carried out on the basis of your freely given, informed, and unambiguous consent — specifically, the sending of marketing communications and the use of non-essential cookies. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

tt99 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We may share your personal data with the following categories of third parties, strictly to the extent necessary to deliver our services or to comply with legal obligations:

• Payment Processors: Mobile wallet operators (bKash, Nagad, Rocket, Upay) and card payment networks (Visa, Mastercard) receive the minimum data necessary to process your deposit and withdrawal transactions. These providers operate under their own privacy policies and are subject to applicable financial services regulations.
• KYC & Identity Verification Providers: Regulated third-party KYC service providers receive copies of identity documents submitted during the verification process. These providers are contractually bound to process data solely for verification purposes and to maintain appropriate security standards.
• Game Software Providers: Third-party game providers including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe receive session identifiers and game result data necessary to operate their games on our platform. These providers do not receive your full personal profile.
• Fraud Prevention & Security Providers: Specialised fraud detection and risk management service providers may receive transactional and behavioural data to assist in identifying and preventing fraudulent activity on the platform.
• IT & Hosting Infrastructure Providers: Cloud hosting and infrastructure service providers who process data on our behalf under strict data processing agreements, solely for the purpose of hosting and operating the tt99 platform.
• Legal & Regulatory Authorities: Where we are required to do so by applicable law, court order, or regulatory direction, tt99 may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities. We will notify you of any such disclosure where legally permitted to do so.

All third-party data processors engaged by tt99 are required to implement appropriate technical and organisational security measures and are contractually prohibited from using your data for any purpose other than those explicitly authorised by tt99.

tt99 uses cookies and similar tracking technologies (including web beacons, local storage objects, and session tokens) to operate and improve the platform. The following categories of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the platform to function correctly. They enable core features such as account login sessions, navigation, and security authentication. These cookies cannot be disabled without severely impairing your ability to use the platform.
• Functional Cookies: These cookies remember your preferences and settings — such as your preferred language, display settings, and responsible gaming configurations — so you do not need to re-enter them on each visit.
• Analytics Cookies: These cookies collect aggregated, anonymised information about how visitors use the platform — such as which pages are visited most frequently and whether error messages are encountered. This data is used solely to improve platform performance and user experience.
• Marketing & Targeting Cookies: Where you have provided consent, these cookies are used to deliver promotional content and personalised offers relevant to your activity on the platform. You may withdraw consent to marketing cookies at any time by updating your account preferences or contacting support.

Most web browsers allow you to control cookie settings through the browser preferences menu. Please note that disabling certain categories of cookies may affect the functionality of the tt99 platform. For detailed guidance on managing cookies in your specific browser, please refer to your browser's help documentation.

tt99 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data is either securely and permanently deleted, or anonymised so that it can no longer be linked to any identifiable individual. Anonymised data may be retained indefinitely for statistical and research purposes.

tt99 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and the tt99 platform is encrypted using industry-standard SSL/TLS protocols, ensuring that data cannot be intercepted in transit.
• Encrypted Data Storage: Sensitive personal and financial data stored on tt99 servers is encrypted at rest using AES-256 encryption or equivalent standards. Full payment card numbers are never stored on tt99 systems.
• Access Controls: Access to personal data held by tt99 is strictly controlled and limited to authorised personnel who require it to perform their specific job functions. All access is logged and subject to regular audit.
• Two-Factor Authentication: tt99 supports two-factor authentication (2FA) for player accounts. We strongly recommend all registered players enable 2FA to enhance the security of their account.
• Regular Security Audits: tt99 conducts regular internal and third-party security assessments to identify and remediate vulnerabilities in the platform's infrastructure and application code.
• Incident Response: In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, tt99 will notify affected individuals without undue delay and will take immediate remedial action to contain and address the breach.

While tt99 takes every reasonable precaution to protect your personal data, no online system is entirely immune to security risks. You are responsible for maintaining the confidentiality of your account login credentials. If you believe your account has been compromised, please contact support at [email protected] immediately.

As a registered player on the tt99 platform, you hold the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact the tt99 support team at [email protected] with the subject line "Data Rights Request". We will respond within a reasonable timeframe and in any event within 30 days of receiving a valid request.

• Right of Access: You have the right to request a copy of all personal data we hold about you, together with information about how it is being processed. This is commonly referred to as a Subject Access Request (SAR).
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may update basic account details directly from within your account settings.
• Right to Erasure: You have the right to request that we delete your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis applies. Please note that this right is subject to our legal retention obligations, including those arising from KYC and AML regulations.
• Right to Restrict Processing: In certain circumstances, you have the right to request that we restrict the processing of your personal data — for example, while a dispute about its accuracy is being resolved.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on legitimate interests. You also have an absolute right to object to processing of your data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to the withdrawal.

The tt99 platform is strictly intended for adults aged 21 and above. tt99 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been provided by or on behalf of a person under the age of 21, we will immediately suspend the associated account, delete the relevant personal data, and void any transactions conducted by that account.

Parents and guardians who have reason to believe that a minor has registered on the tt99 platform or provided personal data to tt99 are encouraged to contact support at [email protected] immediately. tt99 will investigate all such reports as a matter of priority and take appropriate action without delay.

tt99 supports and promotes responsible gaming and child protection initiatives. We employ age verification as a mandatory step in the account registration process and conduct ongoing KYC checks to ensure compliance with our 21+ policy across all active accounts.

The tt99 platform may contain links to third-party websites or services — for example, the websites of game software providers or payment method operators. These third-party sites operate independently of tt99 and are governed by their own privacy policies, which we have no control over and are not responsible for.

We encourage you to read the privacy policy of any third-party website you visit via a link from the tt99 platform before providing any personal data to that site. tt99 accepts no liability for the privacy practices or content of any third-party websites.

tt99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or the features and services offered on the platform. The effective date at the top of this page will always reflect the date of the most recent revision.

Where a material change is made to this Privacy Policy, tt99 will endeavour to notify registered players by email to the address associated with their account, or via a prominent notice on the platform, prior to the change taking effect. It is your responsibility to review this page periodically.

Your continued use of the tt99 platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the revised version. If you do not accept the revised policy, you must cease using the platform and may request account closure by contacting support at [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or the way tt99 handles your personal data, please contact our support team using the details below. We are committed to addressing all privacy-related enquiries promptly and transparently.

• Email: [email protected] — please use the subject line "Privacy Enquiry" or "Data Rights Request" so your message is directed to the appropriate team.
• Support Hours: Available 24 hours a day, 7 days a week — Bangladesh Standard Time (BST, UTC+6).
• Languages: Support is available in English and Bengali.
• Response Time: We aim to acknowledge all privacy-related enquiries within 2 business days and to provide a substantive response within 30 calendar days of receiving a valid request.

When submitting a data rights request, please include your registered account username or email address, a clear description of the right you wish to exercise, and any relevant details that will help us locate and process your request efficiently. tt99 may need to verify your identity before processing certain requests in order to protect the security of your account and personal data.