Privacy Policy — er99

1 Data Controller & Scope

This Privacy Policy applies to all personal data collected and processed by er99 ("we", "us", "our") in connection with the operation of the er99 online casino and sports betting platform, accessible at https://er99.bet and its associated mobile-optimised interfaces.

er99 acts as the data controller in respect of all personal information provided by players during registration, account management, and use of the platform. As data controller, er99 determines the purposes and means by which your personal data is processed, and is responsible for ensuring that processing activities comply with applicable data protection standards.

This Privacy Policy applies to:

• All registered er99 account holders, regardless of whether they have made a deposit or placed a wager
• Visitors to the er99 website who have not yet registered an account
• Any individual who contacts er99 via support channels, including email and live chat
• Former account holders whose data er99 is obligated to retain for a defined period following account closure

This Privacy Policy should be read together with the er99 Terms & Conditions and Responsible Gaming Policy. By creating an account or using the er99 platform, you confirm that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

2 Information We Collect

er99 collects personal data through several channels: directly from you when you register or interact with the platform, automatically through technical systems as you use the site, and — in limited circumstances — from third-party verification partners. The categories of data we collect are described below.

2.1 Registration & Identity Data

When you create an er99 account, we collect the following information:

• Full legal name (as it appears on your government-issued identity document)
• Date of birth (to verify that you meet the 18+ age requirement)
• Email address
• Mobile phone number registered in Bangladesh
• Residential address
• Username and encrypted password

2.2 Identity Verification (KYC) Data

When we carry out Know Your Customer (KYC) verification — which may be required at registration, at first withdrawal, or at any point during account review — we may collect and store copies of:

• National Identity Card (NID) or passport
• Proof of address (utility bill, bank statement, or government correspondence dated within three months)
• Proof of payment method ownership (e.g., screenshot of bKash or Nagad account showing the registered mobile number)
• Source of funds documentation for high-value transactions

2.3 Financial Transaction Data

For every deposit and withdrawal processed on the er99 platform, we record:

• Transaction amount in Bangladeshi Taka (BDT)
• Payment method used (bKash, Nagad, Rocket, Upay, Visa, Mastercard, or bank transfer)
• Transaction date, time, and reference number
• Account balance before and after the transaction

2.4 Gameplay & Betting Data

er99 records all wagering activity on the platform, including game sessions, bet amounts, outcomes, bonuses applied, and sports betting market selections. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory compliance purposes.

2.5 Technical & Device Data

When you access the er99 platform, our systems automatically collect certain technical information, including:

2.6 Communications Data

When you contact er99 via live chat, email, or any other support channel, we retain records of those communications — including the content of messages, the date and time of contact, and the resolution outcome. These records are kept for quality assurance, training, and dispute resolution purposes.

3 How We Use Your Data

er99 processes your personal data only for clearly defined, lawful purposes. We do not use your data in ways that are incompatible with the purposes described at the time of collection. The primary legal bases on which er99 relies for processing personal data are: contractual necessity (to deliver the services you have signed up for), legal obligation (to comply with applicable financial and regulatory requirements), legitimate interests (to operate a safe, fraud-free platform), and — where required — your explicit consent.

3.1 Account Management

Your registration and identity data is used to create and maintain your er99 account, authenticate your login, and personalise your platform experience. This processing is necessary for the performance of our contract with you.

3.2 Payment Processing

Financial transaction data is processed to facilitate deposits and withdrawals via your chosen payment method (bKash, Nagad, Rocket, Upay, Visa, Mastercard, or bank transfer), to prevent payment fraud, and to maintain accurate account balance records.

3.3 Regulatory Compliance & KYC

er99 is obligated to verify the identity and age of all players as part of its responsible gaming and anti-money-laundering commitments. KYC data is processed to fulfil these obligations. This processing is necessary for compliance with applicable legal requirements.

3.4 Responsible Gaming Monitoring

Gameplay and betting data — combined with session length, deposit frequency, and other behavioural signals — is used to identify players who may be exhibiting signs of problem gambling. Where such indicators are detected, er99 may reach out to the player to offer responsible gaming support, or may apply platform-level protections in accordance with the er99 Responsible Gaming Policy.

3.5 Customer Support

Communications data is used to respond to your enquiries, resolve disputes, and improve the quality of our customer support service. Support records are retained to provide context for ongoing or future interactions.

3.6 Marketing Communications

Where you have given explicit consent, er99 may use your email address or mobile number to send you information about promotions, bonuses, and platform updates relevant to your interests. You may withdraw consent for marketing communications at any time by contacting [email protected] or by using the unsubscribe mechanism included in any marketing email. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before the withdrawal.

3.7 Fraud Prevention & Security

Technical and device data — including IP addresses, login timestamps, and device fingerprints — is analysed to detect and prevent fraudulent account activity, unauthorised access, and the operation of multiple accounts by a single individual. This processing is carried out on the basis of er99's legitimate interest in maintaining a secure, fair platform for all players.

3.8 Analytics & Platform Improvement

Aggregated and anonymised usage data is analysed to understand how players interact with the er99 platform, identify areas for improvement, and inform product development decisions. Where possible, analytics processing uses anonymised data that cannot be traced back to any individual player.

4 Cookies & Tracking

The er99 website uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, and to analyse how the site is used. A cookie is a small text file stored on your device by your web browser when you visit a website.

4.1 Types of Cookies Used

4.2 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, or receive a warning before a cookie is stored. Please be aware that disabling strictly necessary cookies will impair the functionality of the er99 platform — in particular, you will not be able to remain logged in to your account.

5 Data Sharing & Third Parties

er99 does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial purposes. Personal data is shared with external parties only in the limited circumstances described below, and always subject to contractual confidentiality and data protection obligations.

5.1 Game Technology Providers

To deliver casino games and live dealer experiences, er99 integrates with certified game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive limited technical data — such as session tokens and game round identifiers — necessary to operate their game engines. They do not receive your full personal profile and are prohibited from using any data shared with them for independent marketing or profiling purposes.

5.2 Payment Processing Partners

To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and bank transfer channels, er99 shares the minimum necessary payment data with the relevant payment processing partner. All payment partners are contractually required to handle your financial data in accordance with applicable security standards.

5.3 Identity Verification Services

Where automated or third-party assisted KYC verification is used, er99 may share identity document data with accredited verification service providers for the sole purpose of confirming your identity and age. These providers act as data processors on er99's behalf and are not permitted to use your data for any other purpose.

5.4 Legal & Regulatory Authorities

er99 may disclose personal data to law enforcement agencies, regulatory bodies, or other government authorities where required to do so by applicable law, court order, or in response to a lawful request. er99 will notify affected players of such disclosures where it is legally permissible to do so.

5.5 Business Transfers

In the event that er99 undergoes a merger, acquisition, or sale of all or part of its business assets, personal data held about players may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and of any resulting change to this Privacy Policy in advance of the transfer taking effect.

6 Data Retention

er99 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The table below summarises our key retention periods.

Once a retention period expires, er99 will securely delete or irreversibly anonymise the relevant data. Where data is anonymised rather than deleted, it may be retained indefinitely for aggregated statistical analysis, as it can no longer be associated with any identifiable individual.

Players who close their er99 account should be aware that certain categories of data must be retained for the periods stated above, even after account closure, in order to comply with legal and regulatory obligations. A voluntary account closure does not automatically trigger the immediate deletion of all personal data held by er99.

7 Your Rights & Choices

As a player on the er99 platform, you have a number of rights in relation to your personal data. These rights are described below. To exercise any of these rights, please contact our privacy team at [email protected]. We will respond to all valid requests within 30 calendar days. In some cases — where a request is complex or we have received a high volume of requests — we may extend this period by a further 30 days, and will notify you if an extension is required.

7.1 Right of Access

You have the right to request a copy of all personal data that er99 holds about you. This is sometimes called a Subject Access Request. On receipt of a valid request, er99 will provide a structured summary of your personal data in a commonly used electronic format.

7.2 Right to Rectification

If any personal data er99 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update certain account details directly from your er99 account dashboard; for changes to core identity data, please contact our support team.

7.3 Right to Erasure

You have the right to request the deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you withdraw consent and there is no other lawful basis for processing. Please note that this right is not absolute: er99 may be required to retain certain data in order to comply with legal obligations, even following a valid erasure request.

7.4 Right to Restrict Processing

In certain circumstances, you have the right to request that er99 restricts the processing of your personal data — for example, while the accuracy of data you have contested is being verified. Where processing is restricted, er99 will continue to store your data but will not actively use it until the restriction is lifted.

7.5 Right to Object

You have the right to object to the processing of your personal data where er99 relies on legitimate interests as the legal basis for that processing. You also have an unconditional right to object to the use of your personal data for direct marketing purposes at any time.

7.6 Right to Data Portability

Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another service provider.

7.7 Withdrawing Consent

Where er99 processes your personal data on the basis of your consent — such as for direct marketing communications — you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of any processing carried out before the withdrawal. To withdraw consent, contact [email protected].

8 Data Security

er99 takes the security of your personal data seriously. We implement a range of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, destruction, or alteration. These measures are reviewed and updated regularly in line with evolving security best practices.

8.1 Technical Security Measures

• SSL/TLS Encryption: All data transmitted between your device and er99 servers is encrypted using industry-standard SSL/TLS protocols. You can verify this by the padlock icon in your browser's address bar when visiting the er99 platform.
• Encrypted Data Storage: Sensitive data at rest — including identity documents and payment information — is stored in encrypted form on secure servers. Passwords are hashed using a one-way cryptographic algorithm and are never stored in plain text.
• Access Controls: Access to personal data within er99's internal systems is restricted on a need-to-know basis. Staff are granted the minimum level of access necessary to perform their job functions, and all internal access is logged and audited.
• Intrusion Detection: er99 employs automated monitoring systems to detect and alert on suspicious activity patterns, including unusual login attempts, rapid successive transactions, and signs of automated bot activity.
• Two-Factor Authentication: er99 offers optional two-factor authentication (2FA) to all registered players as an additional layer of account security. We strongly recommend enabling 2FA via your account settings.

8.2 Organisational Security Measures

All er99 staff and contractors who handle personal data are subject to confidentiality obligations and receive regular training on data protection responsibilities. Third-party data processors engaged by er99 are required to meet equivalent security standards as a condition of their engagement.

8.3 Data Breach Response

In the event of a personal data breach that poses a risk to the rights and freedoms of affected players, er99 will notify the relevant authorities as required by applicable law, and will notify affected players without undue delay. Notifications will include a description of the nature of the breach, the categories of data affected, the likely consequences, and the steps er99 has taken or proposes to take to address the breach.

8.4 Your Role in Security

While er99 takes extensive measures to protect your data, the security of your account also depends on you keeping your login credentials confidential. You should use a strong, unique password for your er99 account, avoid logging in on shared or public devices, and contact er99 immediately at [email protected] if you suspect your account has been compromised.