cn99 Privacy Policy — How We Handle Your Personal Data

1 Introduction

cn99 ("we", "us", "the Platform", "the Operator") is committed to protecting the privacy and personal data of every individual who interacts with our platform at https://cn99.onl. This Privacy Policy sets out our practices with respect to the collection, use, storage, disclosure, and protection of your personal information.

This policy applies to all users of cn99, including registered account holders, visitors who browse without registering, and individuals who contact our support team. It covers data collected through our website, mobile-optimised interface, live chat tools, and any other channel through which you interact with cn99.

cn99 operates primarily for players based in Bangladesh. We understand that our users trust us with sensitive financial and personal data, and we take that responsibility seriously. Our internal data practices are designed around the principles of transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality.

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which form part of your agreement with cn99.

2 Data We Collect

cn99 collects the following categories of personal data, depending on the nature of your interaction with the platform:

3 How We Collect Data

cn99 collects personal data through the following mechanisms:

• Direct interactions: Data you provide voluntarily when you register an account, complete KYC verification, make a deposit or withdrawal, claim a bonus, or contact our support team.
• Automated technologies: Data collected automatically as you navigate our platform, including cookies, server logs, web beacons, and similar tracking technologies. See Section 7 for full details on our cookie practices.
• Third-party payment providers: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and card networks when you process a payment. We receive only the minimum data necessary to confirm and reconcile the transaction.
• Identity verification services: Where we engage third-party KYC or fraud screening providers to verify your identity documents, those providers may supply us with a verification outcome and risk score associated with your submission.
• Public sources: Publicly available information where relevant to fraud prevention, such as sanctions screening databases or publicly reported match-fixing allegations.

4 How We Use Your Data

cn99 uses the personal data we collect for the following purposes:

1. Account management: To create, maintain, and manage your cn99 account, including processing logins, updating account settings, and responding to account-related queries.
2. Payment processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment methods, and to maintain accurate transaction records.
3. Identity verification and KYC compliance: To verify your age (21+), identity, and eligibility to use the platform in accordance with our Terms & Conditions and applicable anti-money laundering (AML) obligations.
4. Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, multiple account creation, bonus abuse, money laundering, and other prohibited conduct.
5. Platform improvement: To analyse usage patterns, identify technical issues, and enhance the performance, design, and game offering of the cn99 platform.
6. Customer support: To respond to your enquiries, resolve disputes, and process complaints via our 24/7 support team.
7. Responsible gaming: To monitor your gambling activity for signs of problematic behaviour and, where relevant, to apply deposit limits, cooling-off periods, or self-exclusion measures in accordance with your requests or our responsible gaming obligations.
8. Legal compliance: To comply with applicable laws, respond to lawful requests from regulatory or law enforcement authorities, and maintain records required by applicable financial regulations.
9. Communications: To send you transactional messages (account notifications, deposit confirmations, withdrawal updates) and, where you have opted in, promotional communications about relevant offers on cn99.

5 Legal Basis for Processing

cn99 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our obligations under the Terms & Conditions you accepted when registering your account — including operating your account, processing payments, and settling bets.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including age verification, identity checks, anti-money laundering obligations, and cooperation with lawful regulatory enquiries.
• Legitimate interests: Processing carried out to pursue the legitimate interests of cn99, including fraud prevention, platform security, and analytics to improve the service — provided such interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — for example, receipt of optional promotional communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6 Data Sharing

cn99 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. We share personal data only in the following circumstances and only to the minimum extent necessary:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and card network processors receive the transactional data necessary to execute and confirm payments.
• Identity verification providers: Third-party KYC and document verification services receive your identity data solely to perform age and identity checks on our behalf. These providers are contractually bound to process your data only for this purpose.
• Game studios and content providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive session and gameplay data necessary to deliver their games on our platform. They operate under their own data protection obligations.
• Fraud and security partners: Risk management and fraud detection services that help us identify and prevent suspicious account activity. Data shared is limited to technical and behavioural signals.
• Legal and regulatory authorities: Where required by applicable law, court order, or formal regulatory request, cn99 will disclose personal data to the relevant authority. We will notify you of such disclosure where we are legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of cn99's business, personal data may be transferred to the successor entity, subject to equivalent privacy protections.

7 Cookies and Tracking Technologies

cn99 uses cookies and similar tracking technologies to operate our platform efficiently, remember your preferences, and analyse how our platform is used. The following types of cookies are in use:

Essential and security cookies cannot be disabled without significantly impairing your ability to use the platform. Functional and analytics cookies may be disabled by adjusting your browser settings. Note that disabling cookies may affect certain platform features, including saved preferences and session continuity.

8 Data Retention

cn99 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal obligations. Our standard retention schedule is as follows:

• Account and identity data: Retained for the duration of your account plus a minimum of 5 years following account closure, in accordance with financial record-keeping requirements.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction, for AML and audit trail purposes.
• KYC verification documents: Retained for the duration of your account plus 5 years post-closure. Verification images are stored in encrypted form.
• Support communications: Retained for 3 years from the date of each communication, to allow for dispute resolution and quality review.
• Technical and usage data: Aggregated analytics data retained for up to 24 months. Raw session logs retained for up to 6 months.
• Marketing consent records: Retained until you withdraw consent, plus 1 year thereafter to demonstrate compliance.

When data is no longer required, it is securely deleted or anonymised so that it can no longer be associated with your identity.

9 Data Security

cn99 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These include:

• SSL/TLS encryption: All data transmitted between your device and our platform is encrypted using industry-standard TLS protocols. Connections to cn99 are served exclusively over HTTPS.
• Encrypted data storage: Sensitive data at rest — including identity verification documents and financial records — is stored using strong encryption algorithms.
• Access controls: Access to personal data within cn99's internal systems is restricted on a strict need-to-know basis. Staff with access to personal data are subject to confidentiality obligations.
• Intrusion detection: Our infrastructure is monitored continuously for unusual access patterns, brute-force login attempts, and other indicators of compromise.
• Payment security: Financial transactions via bKash, Nagad, Rocket, and Upay are processed through secure, independently operated payment gateways. cn99 does not store raw payment credentials.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that poses a risk to your rights and freedoms, cn99 will notify affected users in a timely manner and take all reasonable steps to contain and remediate the incident.

You are also responsible for the security of your own account. Please use a strong, unique password, do not share your login credentials, and log out after each session — particularly on shared devices.

10 Your Rights

As a user of the cn99 platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected].

• Right of access: You may request a copy of the personal data cn99 holds about you, together with information about how it is being used.
• Right to rectification: If any of your personal data held by cn99 is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to erasure: In certain circumstances, you may request that cn99 delete your personal data. This right is subject to limitations where retention is required by law — for example, transaction records that must be kept for AML compliance purposes.
• Right to restrict processing: You may request that cn99 limit the way your data is processed in certain circumstances, such as while a dispute about accuracy is being resolved.
• Right to data portability: Where processing is based on your consent or on a contract, you may request a copy of your data in a structured, machine-readable format.
• Right to object: You may object to processing carried out on the basis of legitimate interests, including profiling for fraud prevention purposes. We will assess whether our interests override your rights on a case-by-case basis.
• Right to withdraw consent: Where processing is based on consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

cn99 will respond to all valid data subject requests within a reasonable timeframe and in any case within 30 days of receipt. We may request proof of identity before processing a request to protect against unauthorised disclosures.

11 Children's Privacy

The cn99 platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If you are under 21, you must not register an account, make a deposit, or place any bet on the cn99 platform.

If cn99 becomes aware that personal data has been collected from a person under the age of 21, that data will be deleted immediately, the associated account will be closed, and any funds deposited will be returned via the original payment method where possible.

If you are a parent or guardian and you believe that a minor in your care has registered an account with cn99, please contact us immediately at [email protected] so that we can take appropriate action without delay.

12 Changes to This Policy

cn99 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or the features of our platform. When we make material changes, we will update the effective date at the top of this document.

We encourage you to review this policy periodically. For significant changes that materially affect how your data is processed, we will take reasonable steps to notify registered users — for example, by displaying a notice in the account dashboard or sending an email to your registered address.

Your continued use of the cn99 platform after any such update constitutes your acceptance of the revised Privacy Policy.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way cn99 handles your personal data, please contact our support team. We aim to acknowledge all privacy-related enquiries within 2 business days (Bangladesh Standard Time, UTC+6) and to resolve them within 30 days.

Email: [email protected]

When contacting us about a data privacy matter, please include your registered username and a clear description of your request or concern. This allows us to locate your account records and handle your enquiry efficiently.

For concerns specifically relating to your rights under Section 10, please include "Data Rights Request" in the subject line of your email so that our team can route it to the appropriate handler promptly.