ao99 Privacy Policy — How We Handle Your Data
Your privacy matters to ao99. This policy explains what data we collect, why we collect it, and how we keep it secure across our Bangladesh gaming platform.
1. Introduction
ao99 ("ao99", "we", "us", "our") is committed to protecting the privacy and personal data of all players who use the ao99 online gaming platform ("Platform"). This Privacy Policy describes how ao99 collects, uses, stores, shares and protects personal information in connection with your use of the Platform, including our website, mobile platform, games, sports betting services, payment processing and customer support functions.
By accessing the Platform or creating an account, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with this Privacy Policy, please do not use the Platform. This Privacy Policy should be read alongside ao99's Terms and Conditions, which govern the overall use of the Platform.
2. Information We Collect
ao99 collects personal information in three broad categories: information you provide directly, information generated by your use of the Platform, and information received from third parties. The following sets out the specific types of data collected under each category.
Information You Provide to Us
- Registration data: full name, date of birth, mobile phone number, email address, and account password.
- KYC verification documents: national identity card (NID), passport, driver's licence, proof of address, and payment method verification documents as required.
- Payment information: mobile wallet numbers (bKash, Nagad, Rocket, Upay), bank account details, and card details (Visa, Mastercard) where applicable. Full payment card numbers are not stored by ao99 — they are processed directly by our payment providers.
- Support communications: messages, emails and live chat transcripts exchanged with ao99 customer support.
Information Generated by Your Use of the Platform
- Gaming and betting activity: bet history, game session data, wagering amounts, winnings, game preferences, and responsible gaming tool usage.
- Technical data: IP address, device type and model, operating system, browser type and version, screen resolution, and mobile network operator.
- Cookies and tracking data: session tokens, preference cookies, analytics data, and similar tracking technologies as described in Section 6.
Information Received from Third Parties
- Payment provider verification data: transaction confirmations, fraud signals and identity verification results from bKash, Nagad, Rocket, Upay and card processing networks.
- Identity verification services: results from third-party KYC and age verification providers used to confirm player identity and eligibility.
- Anti-fraud and AML data: information from fraud prevention and anti-money laundering screening services that ao99 uses to comply with its legal obligations.
3. How We Use Your Information
ao99 uses the personal data it collects for specific, defined purposes. The following table sets out each primary use and the corresponding legal basis under which ao99 processes that data.
| Purpose | Legal Basis |
|---|---|
| Account registration and management | Performance of contract |
| Processing deposits and withdrawals | Performance of contract |
| KYC identity and age verification | Legal obligation |
| Fraud prevention and anti-money laundering compliance | Legal obligation / Legitimate interest |
| Responsible gaming monitoring and player protection | Legal obligation / Legitimate interest |
| Customer support and complaint handling | Performance of contract / Legitimate interest |
4. Legal Basis for Processing
ao99 processes your personal data only where a valid legal basis exists. The four legal bases ao99 relies on are:
- Performance of contract — processing is necessary to fulfil ao99's contractual obligations to you as an account holder, including operating your account, processing bets and handling payments.
- Legal obligation — processing is required to comply with applicable laws and regulations, including KYC verification, anti-money laundering obligations and responsible gaming requirements.
- Legitimate interest — processing is in ao99's legitimate interests (and not overridden by your rights) for purposes including fraud prevention, platform security, service improvement and analytics.
- Consent — where ao99 relies on consent (for example, for optional marketing communications), you may withdraw that consent at any time by contacting [email protected] or updating your account communication preferences.
5. Sharing Your Personal Data
ao99 does not sell, rent or trade personal data. ao99 shares personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.
Service Providers and Data Processors
ao99 shares personal data with carefully selected third-party service providers who process data on ao99's behalf and under ao99's instructions. These include payment processing providers (bKash, Nagad, Rocket, Upay and card networks), KYC and identity verification providers, fraud detection and AML screening services, game software providers (Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, Spribe and others), cloud hosting and infrastructure providers, and customer support platform providers. All such service providers are contractually required to maintain appropriate data security standards and may not use your data for any purpose other than providing their service to ao99.
Legal and Regulatory Disclosure
ao99 may disclose personal data to law enforcement agencies, regulatory authorities, courts or other government bodies where required or permitted by applicable law, including in response to a valid legal request, court order, or to protect the rights, property or safety of ao99, its players or the public. ao99 will make reasonable efforts to notify the affected player of such a disclosure where legally permissible to do so.
Business Transfers
In the event of a merger, acquisition, corporate restructuring or sale of all or part of ao99's business assets, personal data held by ao99 may be transferred to the acquiring entity as part of that transaction. In such an event, ao99 will use reasonable efforts to notify affected players before their personal data is transferred and becomes subject to a different privacy policy.
6. Cookies and Tracking Technologies
ao99 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain your login session, and analyse how players use the Platform so we can improve it. The three categories of cookies ao99 uses are:
- Strictly necessary cookies — these are essential for the Platform to function. They enable login sessions, maintain your account security state, and allow core features such as deposits and withdrawals to work. These cookies cannot be disabled.
- Functional cookies — these remember your preferences such as language settings, display options and responsible gaming configurations so you do not need to set them each time you visit.
- Analytics cookies — these collect anonymised or aggregated data about how players navigate and use the Platform, which pages are most visited, and how players reach ao99. This data is used to improve Platform performance and user experience.
You may control functional and analytics cookies through your device browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. Strictly necessary cookies are not subject to browser-level opt-out as they are required for the Platform to operate securely.
7. Data Retention
ao99 retains personal data for as long as is necessary for the purposes for which it was collected, subject to any longer retention periods required by applicable law. The following retention periods apply:
- Active account data — retained for the duration of your account relationship with ao99 plus a minimum of 5 years after account closure, in accordance with standard financial and gaming record-keeping requirements.
- KYC and identity verification documents — retained for a minimum of 5 years following account closure to meet anti-money laundering record-keeping obligations.
- Customer support records — retained for 3 years after the resolution of the relevant support interaction, unless a longer period is required for dispute resolution or legal purposes.
Once the applicable retention period expires and there is no legal basis to retain the data further, ao99 will securely delete or anonymise your personal data. Where full deletion is not immediately practicable (for example, because data exists in backup archives), ao99 will isolate the data from active processing and delete it as soon as the next scheduled archive purge cycle runs.
8. Data Security
ao99 takes the security of your personal data seriously and implements a range of technical and organisational measures designed to protect it against unauthorised access, loss, destruction or alteration. These measures include:
- 256-bit SSL/TLS encryption for all data transmitted between your device and ao99's servers, ensuring your login credentials, payment details and gaming data are protected in transit.
- Encryption of sensitive data at rest, including personal identification data and financial records stored on ao99's infrastructure.
- Access controls and role-based permissions ensuring that ao99 staff can only access personal data that is necessary for their specific job function, with all access logged and auditable.
- Regular security assessments, vulnerability scans and penetration testing of ao99's platform infrastructure, with identified vulnerabilities remediated promptly.
9. Your Data Rights
As a player on ao99, you have the following rights in respect of your personal data. To exercise any of these rights, please contact ao99's data protection team at [email protected]. ao99 will respond to all verified rights requests within a reasonable timeframe, and in any case within 30 days of receipt.
- Right of access — you may request a copy of the personal data ao99 holds about you, together with information about how it is being used.
- Right to rectification — you may request correction of inaccurate or incomplete personal data ao99 holds about you.
- Right to erasure — you may request deletion of your personal data where ao99 no longer has a legal basis to retain it, subject to ao99's legal data retention obligations.
- Right to restriction — you may request that ao99 restrict the processing of your personal data in certain circumstances, for example while a rectification request is being considered.
- Right to data portability — you may request a copy of personal data you have provided to ao99 in a structured, commonly used, machine-readable format.
- Right to object — you may object to ao99's processing of your personal data where that processing is based on legitimate interests. ao99 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
ao99 may need to verify your identity before processing a rights request. Where a rights request is complex or ao99 receives a high volume of requests, the response period may be extended by a further 30 days, with notice provided to you. There is no charge for exercising your data rights in standard circumstances.
10. Children and Minors
ao99 is strictly for adults aged 21 and above. ao99 does not knowingly collect, process or retain personal data from individuals under the age of 21. If ao99 discovers or has reasonable grounds to believe that personal data from an individual under 21 has been collected, ao99 will promptly delete that data and close the associated account. If you are a parent or guardian and believe your child has accessed ao99 or provided personal data to ao99, please contact [email protected] immediately so that ao99 can investigate and take appropriate action.
11. Third-Party Links and Services
The ao99 Platform may contain references to third-party game providers, payment services and other external services. ao99 is not responsible for the privacy practices of any third-party provider, and this Privacy Policy does not apply to any third-party website, application or service. ao99 encourages players to read the privacy policy of any third-party service before providing personal data to that service. The inclusion of a third-party game or payment provider on ao99 does not constitute an endorsement of that provider's privacy practices.
12. Changes to This Privacy Policy
ao99 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements or business operations. The date of the most recent revision is shown at the top of this document. Where a material change is made to how ao99 uses your personal data, ao99 will make reasonable efforts to notify registered players via email or in-platform notification before the change takes effect.
Your continued use of the Platform after a revised Privacy Policy has been published constitutes your acceptance of the updated policy. It is your responsibility to review this Privacy Policy periodically. If you do not agree with any change, you must stop using the Platform and may request account closure by contacting [email protected].
13. Contact Us
If you have any questions, concerns or requests relating to this Privacy Policy or to how ao99 handles your personal data, please contact ao99's data protection team at [email protected]. ao99 aims to respond to all data-related enquiries within one business day. For urgent matters relating to potential data breaches or suspected misuse of your personal data, please mark your message as urgent so that it can be prioritised.
This Privacy Policy, together with ao99's Terms and Conditions, constitutes the complete framework governing ao99's handling of your personal data. In the event of any conflict between this Privacy Policy and the Terms and Conditions on a data protection matter, this Privacy Policy shall prevail.
Your Data Is Safe With ao99
Have questions about your account privacy or data rights? Our FAQ and support team are ready to help.
21+ only. Play responsibly. Privacy policy applies to all users.