og99 Privacy
Policy

Introduction

og99 is a leading online betting and casino platform serving players across Bangladesh. We are committed to safeguarding the privacy and personal data of every player who interacts with our platform, whether during account registration, day-to-day gameplay, payment processing, or customer support interactions.

This Privacy Policy sets out in plain English exactly what personal data og99 collects from you, the lawful basis upon which we process that data, how long we retain it, with whom we may share it, and what rights you have as a data subject. This Policy applies to all og99 services, including the og99 website at og99.im, all mobile-accessible versions of the platform, and all communications sent by og99 to registered players.

This Privacy Policy should be read alongside og99's Terms & Conditions and Responsible Gaming Policy, both of which form part of the overall agreement between og99 and each registered player. In the event of any conflict between this Privacy Policy and those documents on data-related matters, this Privacy Policy takes precedence.

og99 may update this Privacy Policy from time to time in response to regulatory changes, new services, or updated security practices. The effective date at the top of this document indicates when the current version came into force. Continued use of og99 after any update constitutes acceptance of the revised Policy.

Data We Collect

og99 collects personal data in several categories. The specific data points collected depend on how you interact with the platform and at what stage of your player journey you are. The following table summarises the main categories of data og99 collects:

og99 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data unless specifically required by applicable law or regulatory instruction. Where any such data is collected in a specific regulatory context, it will be handled with additional protective measures and you will be informed at the point of collection.

How We Collect Data

og99 collects personal data through several distinct channels. Understanding how data reaches og99 helps players maintain control over the information they share:

• Direct submission: Data you actively provide when registering an account, completing the KYC verification process, making deposits or withdrawals, setting responsible gaming limits, or contacting og99 Support.
• Automated technical collection: Data collected automatically each time you access the og99 platform, including your IP address, device identifiers, browser metadata, and session behaviour. This collection occurs via server logs, cookies, and similar tracking technologies described further in Section 7.
• Payment processor data: When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, our payment processing partners share confirmation data with og99 — specifically, transaction reference numbers, partial payment identifiers, and transaction status — sufficient to reconcile your account balance. og99 does not receive or store full card numbers or full mobile wallet PINs.
• Identity verification partners: Where og99 uses a third-party identity verification service to assist with the KYC process, that service may provide og99 with a verification outcome (pass/fail/pending) and the documents reviewed. og99 does not retain raw document images beyond the period required for verification review unless legally obligated to do so.
• Third-party game providers: Game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe operate game sessions on the og99 platform. These providers generate gameplay logs which are shared with og99 for the purposes of account settlement, dispute resolution, and responsible gaming monitoring.
• Fraud prevention and analytics services: og99 may use trusted third-party analytics and fraud detection tools that collect behavioural and technical data on our behalf to protect the integrity of the platform and the security of all player accounts.

Why We Use Your Data

og99 processes personal data for specific, defined purposes. We do not use your data for any purpose other than those listed below without first obtaining your explicit consent or being required to do so by applicable law:

• Account creation and management: To register your account, maintain your player profile, and give you secure access to all og99 services.
• Identity and age verification: To confirm that you are who you say you are and that you meet og99's 21+ age eligibility requirement. This is a legal and regulatory obligation and cannot be waived.
• Payment processing: To receive deposits, process withdrawal requests, verify payment method ownership, and maintain an accurate record of all financial transactions associated with your account.
• Providing betting and casino services: To facilitate sports betting, live casino, slot gameplay, and any other products available on the og99 platform, including recording bet placements and settling winnings.
• Bonus and promotion administration: To track bonus eligibility, apply promotional credits, monitor wagering requirement progress, and enforce the terms of individual promotional offers including BPL, IPL, Eid, and Pohela Boishakh specials.
• Responsible gaming monitoring: To identify patterns of play that may indicate problem gambling, to enforce self-exclusion and limit settings, and to provide timely intervention where a player's behaviour triggers concern under og99's responsible gaming framework.
• Fraud prevention and security: To detect and prevent account fraud, money laundering, multi-accounting, bonus abuse, and other prohibited activities. Technical and behavioural data is analysed continuously for anomalies that may indicate security threats.
• Customer support: To respond to your queries, resolve disputes, investigate complaints, and improve the quality of the support experience across all communication channels.
• Legal and regulatory compliance: To fulfil og99's obligations under applicable law, including record-keeping requirements, anti-money laundering (AML) reporting, and any requests received from competent authorities.
• Marketing communications (opt-in only): To send you promotional offers, product updates, seasonal campaign notifications, and personalised recommendations — but only if you have explicitly opted in to receive marketing communications from og99. You may opt out at any time.
• Platform improvement: To analyse aggregated, anonymised usage data to improve the functionality, performance, and design of the og99 platform.

Legal Basis for Processing

og99 processes your personal data only where a valid legal basis exists. The primary legal bases we rely on are as follows:

• Contractual necessity: Processing required to fulfil og99's obligations to you under the Terms & Conditions — including account operation, payment processing, game settlement, and KYC verification. Without this processing, og99 cannot provide its services to you.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering requirements, age verification mandates, financial record-keeping obligations, and responses to lawful authority requests.
• Legitimate interests: Processing necessary for og99's legitimate business interests, provided those interests are not overridden by your privacy rights. This includes fraud detection, platform security, abuse prevention, responsible gaming monitoring, and internal analytics. og99 carries out legitimate interest assessments before relying on this basis.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications and for any optional data collection beyond what is strictly necessary. Consent can be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.

Data Sharing & Third Parties

og99 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. However, og99 does share certain personal data with trusted third-party organisations in the following circumstances:

• Payment service providers: bKash, Nagad, Rocket, Upay, Visa, and Mastercard receive the minimum data necessary to process your transactions securely. These providers operate under their own privacy policies and relevant financial regulations.
• Identity verification services: Third-party KYC and identity verification partners receive identity documents and personal details for the purpose of completing the verification process on og99's behalf.
• Game content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe receive a player session token and game-relevant parameters to facilitate gameplay. These providers do not receive your full identity data.
• Fraud prevention and security platforms: Specialist third-party tools that help og99 detect unusual patterns, prevent account takeover, and identify money laundering activity. These services process behavioural and technical data under data processing agreements with og99.
• Customer support infrastructure: Third-party customer support platforms that host og99's chat and ticketing systems. Support agents access only the data necessary to resolve your specific issue.
• Regulatory and law enforcement authorities: og99 is legally required to disclose certain player data to competent authorities where a valid legal obligation or regulatory instruction exists. og99 will not notify players of such disclosures where doing so would compromise a legal investigation.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of og99's business, player data may be transferred to the acquiring entity as part of the transaction. Players will be notified of any such transfer and of any resulting changes to this Privacy Policy before they take effect.

All third-party data processors engaged by og99 are required to handle your personal data only on og99's documented instructions, to implement appropriate technical and organisational security measures, and to delete or return data at the end of the engagement. og99 maintains a register of all active data processing relationships.

Cookies & Tracking Technologies

og99 uses cookies and similar tracking technologies to operate the platform effectively, provide a personalised experience, and gather analytical insight into how the platform is used. A cookie is a small text file placed on your device by your browser when you visit a website.

Types of cookies used by og99:

• Strictly necessary cookies: These cookies are essential for the platform to function. They maintain your login session, remember your account preferences, and secure your interaction with the platform. These cookies cannot be disabled without preventing you from using og99.
• Functional cookies: These cookies remember your language preference, display settings, and regional configurations. They improve usability but are not essential. Disabling them may affect your experience on the platform.
• Analytics cookies: These cookies collect anonymised data about how players navigate og99 — which pages are visited most frequently, how long sessions last, and where players encounter difficulties. This data helps og99 improve the platform for all users in Bangladesh.
• Security cookies: Used to detect and prevent fraud and abuse, including identifying unusual login patterns and verifying that interactions with the platform originate from genuine human users rather than automated systems.

og99 does not use advertising or third-party retargeting cookies to track your browsing activity on other websites. Our cookie usage is limited to what is necessary to operate and improve the og99 platform itself.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging into your og99 account and using the platform's core features.

Data Security

og99 takes the security of your personal data seriously. We implement a layered security architecture designed to protect your data against unauthorised access, accidental loss, alteration, and unlawful disclosure:

• Encryption in transit: All data transmitted between your device and og99 servers is encrypted using 256-bit TLS/SSL protocols. This applies to account login, payment transactions, form submissions, and all API communications.
• Encryption at rest: Sensitive personal data stored in og99 databases — including identity documents and payment records — is encrypted at rest using industry-standard encryption algorithms.
• Password security: Account passwords are never stored in plain text. og99 uses a one-way cryptographic hashing algorithm with unique per-account salting to protect password data.
• Access controls: Access to personal data within og99's internal systems is restricted on a strict need-to-know basis. Staff members access only the data required to perform their specific job functions. All internal access is logged and audited.
• Security monitoring: og99 operates continuous monitoring of its systems for signs of intrusion, unusual activity, or data breach indicators. Our security team responds to alerts around the clock.
• Incident response: In the event of a data security incident that poses a risk to your rights and freedoms, og99 will notify affected players without undue delay and take immediate steps to contain and remediate the incident.

While og99 takes all reasonable technical and organisational measures to protect your data, no platform can guarantee absolute security against all conceivable threats. Players are also responsible for maintaining the security of their own account credentials and for notifying og99 immediately if they suspect any unauthorised access to their account.

Data Retention

og99 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention guidelines apply:

• Active account data: Personal data associated with an active og99 account is retained for the full duration of the account's active status and for a defined period after the account is closed, as required for legal, regulatory, and dispute resolution purposes.
• Financial transaction records: Records of deposits, withdrawals, and bet settlements are retained for a minimum of five (5) years from the date of the transaction, in accordance with standard financial record-keeping obligations applicable to payment platforms operating in Bangladesh.
• Identity verification documents: KYC documents are retained for the period required to satisfy regulatory obligations. Upon account closure, documents are reviewed and securely deleted where no ongoing legal requirement mandates further retention.
• Communication records: Support chat transcripts, email correspondence, and complaint records are retained for a minimum of two (2) years to support ongoing service quality review, dispute resolution, and regulatory audit requirements.
• Gameplay logs: Detailed game session records are retained for a minimum of three (3) years to enable bet dispute resolution and responsible gaming analysis.
• Inactive accounts: Where an account has been inactive for twelve (12) consecutive months and no withdrawal is pending, og99 will contact the player to confirm whether they wish to maintain the account. If no response is received within a defined notice period, the account may be closed and the data archived in accordance with applicable retention schedules.

At the end of any applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes without restriction.

Your Privacy Rights

As an og99 player, you have a number of rights in relation to the personal data og99 holds about you. og99 is committed to facilitating the exercise of these rights in a timely and transparent manner:

• Right of access: You have the right to request a copy of the personal data og99 holds about you, along with information about how it is being used. og99 will respond to verified access requests within a reasonable timeframe.
• Right to rectification: If any personal data og99 holds about you is inaccurate or incomplete, you have the right to request correction. Players can update basic account details directly within the account settings area; other corrections should be submitted to og99 Support.
• Right to erasure: In certain circumstances, you may request that og99 delete your personal data. This right is subject to og99's legal obligations to retain certain records — for example, financial transaction records cannot be deleted before the end of their mandatory retention period.
• Right to restriction of processing: You may request that og99 restrict the processing of your personal data in specific circumstances — for example, while a dispute about data accuracy is being resolved.
• Right to data portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you may request a machine-readable copy of the personal data you have provided to og99.
• Right to withdraw consent: Where og99 relies on your consent as the legal basis for processing (principally marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
• Right to object: You have the right to object to processing carried out on the basis of og99's legitimate interests. og99 will assess whether those legitimate interests are overridden by your individual rights and freedoms and respond accordingly.

To exercise any of these rights, please contact og99 Support through the Support page. og99 will verify your identity before processing any data rights request to ensure that personal data is not disclosed to an unauthorised third party. og99 aims to respond to all data rights requests within 30 days. Where a request is complex or there are multiple requests, this period may be extended by a further 30 days with prior notification to you.

Children & Minors

og99 operates a strict 21+ policy. The og99 platform is not intended for, and must not be accessed by, individuals under the age of 21. og99 does not knowingly collect personal data from anyone under the age of 21.

If og99 discovers or has reasonable grounds to believe that an account has been registered by a person under the age of 21, the account will be immediately suspended pending investigation. Any funds deposited to such an account will be frozen and reviewed in accordance with og99's underage gambling policy. The matter may be reported to relevant authorities where appropriate.

Parents and guardians who believe that a minor in their household may have registered an og99 account are strongly encouraged to contact og99 Support immediately. og99 will cooperate fully with any investigation and will process the closure of any confirmed underage account as a priority matter.

og99 recommends the use of parental control software such as Net Nanny, Cybersitter, or similar tools to prevent minors from accessing online gambling platforms. og99 also supports Bangladesh-facing responsible gambling resources that provide guidance on protecting young people from gambling harm.

Third-Party Links

The og99 platform may from time to time contain references to or acknowledgements of third-party organisations — including game providers such as Pragmatic Play, Evolution Gaming, and Spribe, or payment partners such as bKash and Nagad. This Privacy Policy applies solely to data processed by og99 through the og99 platform at og99.im.

og99 does not control the privacy practices of any third-party organisation and accepts no liability for the data handling practices of third parties. If you interact directly with a third-party service — for example, by accessing a payment provider's own app or website — you are subject to that provider's own privacy policy.

Where game providers operate within the og99 environment, they receive only the minimum data necessary to run a game session and are contractually prohibited from using that data for any purpose other than game delivery and technical reporting to og99.

Updates to This Privacy Policy

og99 reserves the right to update or revise this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, new services offered on the platform, or improvements to our data protection practices. The effective date at the top of this document will be updated each time a new version is published.

Where changes are material — meaning they significantly affect how og99 uses your data or the rights available to you — og99 will notify registered players in advance of the changes taking effect. Notification will be made via the contact method associated with your account (typically email or in-platform notification). Minor clarifications or non-material amendments may be made without separate notification, and it is your responsibility to review this page periodically.

Continued use of the og99 platform after the effective date of any update to this Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any revised version of this Policy, you should cease using the platform and contact og99 Support to request account closure. Any personal data collected prior to the change will continue to be processed in accordance with the version of this Policy under which it was collected, unless you consent to updated processing terms.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data og99 holds about you, please get in touch through the following channel:

• Support Page: Visit the og99 Support page for all available contact options.
• Email: support@og99.im (plain text — not a clickable link)
• Availability: 24 hours a day, 7 days a week — Bangladesh Standard Time (BST, UTC+6)

When submitting a privacy-related request, please include your registered account username, the nature of your request, and any relevant reference details. og99 will acknowledge all privacy correspondence within two (2) business days and aims to resolve all requests within thirty (30) days. For complex requests this period may be extended by a further thirty (30) days with prior notification.