pa99 Privacy Policy — How We Handle Your Data
At pa99, your privacy is a foundational commitment, not an afterthought. This Privacy Policy explains in clear, straightforward terms what personal data we collect, why we collect it, how we use and protect it, and what rights you have as a pa99 account holder in Bangladesh.
Your Privacy at a Glance
Six core principles that define how pa99 approaches data privacy. The full legal text appears in the document below — this summary is for quick orientation only.
pa99 collects only the personal data that is strictly necessary to operate your account, process transactions, and comply with responsible gaming obligations. We do not harvest data for resale or profiling beyond our operational needs.
All data transmitted between your device and the pa99 platform is protected by 256-bit TLS encryption. Sensitive data stored on our servers — including payment details and identity documents — is encrypted at rest using industry-standard protocols.
As a pa99 account holder, you have the right to access, correct, and request deletion of your personal data at any time. Submit a data request to [email protected] and we will respond within 30 days of receipt.
pa99 does not sell, rent, or trade your personal data to any third party for marketing purposes. Data is shared with service partners — such as payment processors and game providers — only to the extent necessary to deliver the pa99 service to you.
Marketing communications from pa99 are entirely optional. You may opt out of promotional emails and SMS at any time from your account settings or by contacting our support team. Transactional messages — such as deposit confirmations and withdrawal receipts — will continue regardless of your marketing preferences.
pa99 retains your personal data only for as long as it is needed to fulfil the purpose for which it was collected, or as required by applicable legal and compliance obligations. Account data is held for a defined retention period after account closure, after which it is securely deleted.
Please Read Carefully: This Privacy Policy forms part of your agreement with pa99 and should be read alongside the pa99 Terms & Conditions. By registering an account on pa99 or continuing to use the platform, you confirm that you have read and understood this Privacy Policy and consent to the data practices described herein.
Table of Contents
1 Who We Are
pa99 is an online betting and casino platform operating at pa99.io, providing sports betting, live casino, slots, and related gaming entertainment services to adult players in Bangladesh. References to "pa99", "we", "us", or "our" throughout this Privacy Policy refer to the pa99 platform and its operating entity.
pa99 acts as the data controller in respect of the personal data that you provide when registering an account, making deposits, placing wagers, or otherwise interacting with the platform. As data controller, pa99 is responsible for determining the purposes and means by which your personal data is processed and for ensuring that processing is carried out lawfully, fairly, and transparently.
Our designated data contact point for all privacy-related enquiries is our support team, reachable at . You may direct any questions, data access requests, or complaints regarding this Privacy Policy to that address.
2 Data We Collect
pa99 collects personal data in several categories, depending on your level of interaction with the platform. The table below summarises the main categories of personal data we hold about registered players:
| Category | Examples | Collected At |
|---|---|---|
| Identity Data | Full name, date of birth, national ID number, passport number | Registration and KYC verification |
| Contact Data | Email address, mobile number, residential address, city (e.g., Dhaka, Chittagong, Sylhet) | Registration and account updates |
| Financial Data | bKash / Nagad / Rocket / Upay wallet numbers, bank account details, Visa/Mastercard partial card data | Deposit and withdrawal processing |
| Gaming Activity Data | Bet history, game session logs, win/loss records, bonus usage, wagering activity | Ongoing platform use |
| Technical Data | IP address, browser type, operating system, device identifiers, session timestamps | Automatic collection on platform access |
| Communications Data | Support chat transcripts, email correspondence, dispute records | Customer support interactions |
| Preference Data | Preferred language, marketing opt-in status, responsible gaming settings, deposit limits | Account settings and platform usage |
pa99 does not collect any special categories of sensitive personal data (such as health data, biometric data, or political opinions) unless directly volunteered by a player in the context of a responsible gaming self-exclusion request, in which case such data is handled with heightened care and used solely for that purpose.
3 How We Collect Your Data
pa99 collects personal data through the following channels:
- Direct Submission: Data you actively provide when filling in the pa99 registration form, completing KYC verification, submitting a deposit or withdrawal request, contacting our support team, or updating your account profile.
- Automated Technical Collection: Data generated automatically when you access the pa99 platform, including your IP address, device fingerprint, browser characteristics, and session activity logs. This collection occurs via cookies, server logs, and similar tracking technologies described in Section 7.
- Payment Processors: Data received from payment service providers — including bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partner banks — in connection with processing your deposits and withdrawals. This typically includes transaction identifiers and confirmation status rather than full financial credentials.
- Game Providers: Data received from third-party game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi in relation to game round outcomes, RNG (random number generator) verification logs, and session integrity records.
- Identity Verification Services: Data received from third-party KYC and identity verification service providers when we carry out document authentication checks on your submitted identity documents.
- Publicly Available Sources: In limited circumstances related to fraud prevention or responsible gaming, pa99 may reference publicly available information to verify the accuracy of data you have provided.
4 Why We Use Your Data
pa99 uses your personal data for the following specific purposes:
- Account Management: To create, maintain, and administer your pa99 player account, including processing registration, verifying your identity, and managing your account settings and preferences.
- Transaction Processing: To process deposits in Bangladeshi Taka via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partner bank transfers; to process withdrawal requests; and to maintain accurate financial records of all transactions in your account.
- Service Delivery: To provide you with access to sports betting markets (including cricket BPL, IPL, T20, volleyball, and other events), live casino games, slots, and all other platform features. Without your data, these services cannot be delivered to your account.
- Responsible Gaming Compliance: To apply and enforce responsible gaming measures including deposit limits, session reminders, self-exclusion, and age verification (21+ only). pa99's responsible gaming obligations require us to maintain gaming activity records for each account.
- Legal and Regulatory Compliance: To comply with applicable anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, and any other legal obligations applicable to pa99's operations. This may include retaining transaction records and identity verification documents for statutory retention periods.
- Fraud and Security Prevention: To detect, investigate, and prevent fraudulent transactions, bonus abuse, multi-accounting, match-fixing-related activity, money laundering, and other prohibited conduct as defined in the pa99 Terms & Conditions.
- Customer Support: To respond to your queries, process disputes, and provide technical assistance via live chat and email support at [email protected].
- Platform Improvement: To analyse aggregated, anonymised usage data to improve the pa99 platform's performance, user interface, game selection, and overall player experience. This analytical use does not involve making decisions about individual players.
- Marketing Communications (with consent): Where you have opted in at registration or subsequently, to send you promotional offers, bonus notifications, cricket betting tips, seasonal promotions (e.g., Eid specials, Pohela Boishakh offers, BPL season promotions), and other marketing communications relevant to Bangladeshi players. You may withdraw this consent at any time.
5 Legal Basis for Processing
pa99 processes your personal data on the following legal bases:
- Contractual Necessity: The majority of data processing carried out by pa99 — including account management, transaction processing, and service delivery — is necessary for the performance of the contract between you and pa99 as set out in the Terms & Conditions. Without processing this data, pa99 cannot fulfil its contractual obligations to you.
- Legal Obligation: pa99 is required by applicable laws and regulations to process certain data for KYC, AML, and record-keeping purposes. This processing is mandatory and cannot be opted out of; if you do not wish for this data to be processed, you cannot hold a pa99 account.
- Legitimate Interests: pa99 processes certain data — including technical data, fraud detection signals, and platform analytics — on the basis of its legitimate interests in operating a secure, fair, and commercially viable platform. In all such cases, pa99 has assessed that its legitimate interests are not overridden by your rights and interests as a data subject.
- Consent: Where pa99 asks for your explicit consent — most notably for marketing communications — data is processed on that consent basis only. You have the right to withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
6 Sharing Your Data
6.1 Service Partners. pa99 shares personal data with carefully selected service partners who assist in the delivery of our platform and services. All such partners are bound by data processing agreements and are prohibited from using your data for any purpose other than providing services to pa99. Partners include:
- Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank — for the processing of deposits and withdrawals.
- Game providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi — for game session delivery, RNG certification, and dispute resolution.
- Identity verification providers — for KYC document authentication.
- Customer support technology providers — for live chat and ticketing platform operation.
- Hosting and cloud infrastructure providers — for secure data storage and platform operation.
6.2 Legal Disclosure. pa99 may disclose your personal data to law enforcement, regulatory authorities, or other competent bodies where required to do so by law, court order, or applicable regulatory obligation. Such disclosures will be limited to what is strictly required by the relevant legal instrument.
6.3 No Sale of Data. pa99 does not sell, rent, lease, or trade your personal data to any third party for commercial or marketing purposes. Your data is not a product at pa99.
6.4 Business Transfers. In the event of a merger, acquisition, or sale of all or a material part of pa99's business, your personal data may be transferred as part of that transaction. You will be notified via the email address on your account in advance of any such transfer, and the receiving entity will be required to honour the terms of this Privacy Policy.
7 Cookies and Tracking
7.1 What Are Cookies. Cookies are small text files placed on your device when you access the pa99 platform. They allow the platform to recognise your device, maintain your session, remember your preferences, and collect technical usage data.
7.2 Types of Cookies Used by pa99.
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Strictly Necessary | Maintain your login session, process transactions securely, prevent fraudulent requests | No — required for platform function |
| Functional | Remember your language preference, display settings, and responsible gaming choices | Yes, but may affect experience |
| Analytics | Collect anonymised data on how players navigate the platform to help pa99 improve UX | Yes via account settings |
| Security | Detect and prevent bot activity, unauthorised login attempts, and session hijacking | No — required for platform security |
7.3 Managing Cookies. You may manage non-essential cookies through your pa99 account settings or through your browser's cookie management controls. Please note that disabling strictly necessary or security cookies will impair the functioning of the pa99 platform and may prevent you from logging in or completing transactions.
8 Data Security
8.1 Technical Measures. pa99 implements a comprehensive set of technical security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:
- 256-bit TLS encryption for all data in transit between your device and pa99 servers.
- AES-256 encryption for sensitive data stored at rest, including identity documents and financial records.
- Multi-factor authentication requirements for all pa99 internal staff who access player data.
- Automated intrusion detection and prevention systems monitoring pa99 infrastructure on a continuous basis.
- Regular third-party penetration testing of the pa99 platform and data infrastructure.
- Strict role-based access controls ensuring that pa99 staff can only access the player data that is necessary for their specific function.
8.2 Organisational Measures. In addition to technical controls, pa99 maintains organisational security policies including staff data protection training, confidentiality agreements for all personnel with access to player data, and a documented incident response procedure for data security events.
8.3 Incident Notification. In the event of a data security incident that poses a risk to your rights and interests as a data subject, pa99 will notify affected players at their registered email address or mobile number within a reasonable timeframe following discovery of the incident, providing details of the nature of the breach and the steps pa99 is taking in response.
8.4 Your Role in Security. While pa99 takes extensive steps to protect your data, the security of your account also depends on the strength and confidentiality of your pa99 login credentials. You are responsible for using a strong, unique password and for not sharing your login details with anyone. Enable two-factor authentication (2FA) via SMS OTP from your account settings for an additional layer of protection.
9 Data Retention
9.1 Retention Principles. pa99 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, to comply with applicable legal obligations, or to resolve disputes and enforce agreements. When data is no longer required for any of these purposes, it is securely deleted or anonymised.
9.2 Retention Periods. The following indicative retention periods apply to the main categories of player data:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account and identity data | Duration of account + 5 years post-closure | KYC / AML compliance obligations |
| Transaction records | 7 years from transaction date | Financial record-keeping requirements |
| Gaming activity logs | Duration of account + 3 years post-closure | Dispute resolution and responsible gaming |
| Support communications | 3 years from last interaction | Quality assurance and dispute evidence |
| Technical / session logs | 12 months on a rolling basis | Security monitoring and fraud prevention |
| Marketing consent records | Until consent is withdrawn + 2 years | Consent management compliance |
9.3 Dormant Accounts. Accounts that have been inactive for 12 consecutive months are classified as dormant under pa99's Terms & Conditions. Personal data associated with dormant accounts is retained in accordance with the retention periods above and is not deleted solely on account of dormancy status.
10 Your Rights
As a pa99 account holder, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at with the subject line "Data Rights Request" and your registered account details. pa99 will respond within 30 days of receiving a valid request.
- Right of Access: You have the right to request a copy of the personal data pa99 holds about you, together with information about how it is being used.
- Right to Rectification: You have the right to request that pa99 correct any inaccurate or incomplete personal data held about you. You may also update many of your account details directly from your account profile settings.
- Right to Erasure: You have the right to request that pa99 delete your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected and there is no overriding legal obligation to retain it. Note that pa99 is required by AML and KYC obligations to retain certain identity and transaction data even after account closure, and erasure requests cannot override these mandatory retention requirements.
- Right to Restriction: You have the right to request that pa99 restrict the processing of your personal data in certain circumstances, such as while a dispute about the accuracy of the data is being resolved.
- Right to Data Portability: You have the right to receive a copy of the personal data you have provided to pa99 in a structured, commonly used, machine-readable format, and to transfer that data to another service provider where technically feasible.
- Right to Object: You have the right to object to processing based on pa99's legitimate interests. You also have an unconditional right to object to processing for direct marketing purposes at any time.
- Right to Withdraw Consent: Where pa99 processes your data on the basis of your consent (most notably for marketing communications), you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.
11 Children and Minors
The pa99 platform is strictly for adults aged 21 and above. pa99 does not knowingly collect personal data from any individual who is under 21 years of age. Our registration process includes an age declaration and we conduct age verification as part of the KYC process.
If pa99 becomes aware that personal data has been collected from an individual under the age of 21, we will immediately suspend the associated account, void all bets and gaming activity placed by that individual, return any deposited funds to the payment source (following identity verification), and securely delete all personal data associated with the account as soon as our legal retention obligations permit.
If you believe that a minor has accessed pa99 and submitted personal data, please contact us immediately at so that we may take prompt action.
12 Changes to This Policy
12.1 Right to Update. pa99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, operational requirements, or applicable legal obligations. The revised Privacy Policy will be published on this page with an updated Effective Date.
12.2 Notification of Material Changes. Where a change to this Privacy Policy is material — meaning it significantly affects the way in which pa99 uses your personal data or your rights as a data subject — pa99 will notify you via the email address or mobile number registered to your account at least 14 days before the amended Policy takes effect.
12.3 Continued Use. Your continued use of the pa99 platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with a revised Policy, you should stop using the platform and contact pa99 support to arrange account closure and the withdrawal of your remaining balance.
12.4 Prior Versions. Prior versions of this Privacy Policy are available upon request from the pa99 support team. Please contact and specify the version date you require.
13 Contact Us
13.1 Privacy Enquiries. For any questions, concerns, or requests relating to this Privacy Policy or pa99's data practices, please contact our support team using the details below. We are available 24 hours a day, 7 days a week, including all Bangladeshi public holidays.
- Email: — please include "Privacy Policy Enquiry" in the subject line.
- Live Chat: Available within the pa99 platform after logging into your account.
13.2 Response Commitment. pa99 aims to acknowledge all privacy-related enquiries within 48 hours Bangladesh Standard Time (BST, UTC+6) and to provide a substantive response within 30 calendar days of receipt of a valid request. For complex data rights requests, pa99 may extend the response period by a further 30 days, in which case we will notify you of the extension and the reason for it.
13.3 Scope. This Privacy Policy applies to all pa99 players across Bangladesh, including those based in Dhaka, Chittagong, Sylhet, Rajshahi, Khulna, Barisal, Rangpur, Mymensingh, and Cox's Bazar. All data rights requests and privacy communications are handled in English by the pa99 support team.
Your Data Is Safe With pa99
Have questions about how we protect your information? Our support team is on hand 24/7. Or, if you're ready to explore everything pa99 has to offer, head over to our cricket betting markets or browse our full game catalogue.