er99 Privacy Policy — How We Collect, Use, and Protect Your Data

Introduction

This Privacy Policy ("Policy") describes how er99 ("er99", "we", "us", "our") collects, uses, stores, and discloses personal data obtained from individuals ("you", "Player", "User") who access or use the er99 online betting and casino platform, including all services available at er99.io and any associated subdomains or interfaces.

er99 takes the privacy of its players seriously. This Policy is designed to give you a clear and honest picture of our data practices so that you can make informed decisions about your use of the platform. We encourage you to read this Policy in full alongside the er99 Terms & Conditions, which together govern your relationship with the platform.

This Policy applies to data collected through all access channels, including desktop browsers, mobile browsers, and any application interface operated by or on behalf of er99. It covers data collected from registered account holders as well as from unregistered visitors to er99.io.

Data We Collect

er99 collects the following categories of personal data from players and platform users:

er99 does not collect sensitive special-category data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information, except where health-related context is voluntarily provided by a player in connection with a responsible gaming request (for example, a self-exclusion supported by a medical note).

How We Collect Data

er99 collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, submit feedback, or update your account settings.
• Automatically — through cookies, server logs, and tracking technologies when you access or navigate the er99 platform. This includes technical data such as your IP address, browser fingerprint, and session activity.
• From third-party service providers — including payment processors (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and others) and KYC verification providers, who may share data with us in the course of processing your transactions or verifying your identity.
• From fraud prevention and security partners — where we engage third-party tools to detect suspicious activity, identify potential fraud, or verify the integrity of transactions on the platform.

Purpose of Processing

er99 processes your personal data for the following purposes:

• To create and manage your er99 player account and provide you with access to the platform's services;
• To verify your identity and age (21+) through the KYC process, as required before withdrawals and at other points determined by our internal compliance procedures;
• To process deposits, withdrawals, and other financial transactions on the platform;
• To detect, investigate, and prevent fraud, money laundering, and other prohibited activities;
• To personalise your experience on the er99 platform, including surfacing relevant games, promotions, and content based on your usage patterns;
• To send you transactional communications related to your account — such as deposit confirmations, withdrawal notifications, and security alerts;
• To send you promotional communications about er99 offers and bonuses, where you have opted in to receive such communications (you may opt out at any time via your account settings);
• To provide customer support and resolve complaints or disputes;
• To operate and improve the er99 platform, including analysing usage data to identify performance issues and optimise the user experience;
• To comply with applicable legal and regulatory obligations.

Legal Basis for Processing

er99 processes personal data on the following legal bases:

• Contractual necessity — processing required to fulfil our obligations to you under the er99 Terms & Conditions, including account management, transaction processing, and KYC verification;
• Legal obligation — processing required to comply with applicable laws, including anti-money laundering obligations, age verification requirements, and fraud prevention;
• Legitimate interests — processing carried out for purposes that are in er99's legitimate business interests, such as fraud detection, platform security, service improvement, and internal analytics, where those interests are not overridden by your privacy rights;
• Consent — processing carried out on the basis of your freely given, specific, and informed consent, such as the sending of promotional marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Data Sharing & Disclosure

er99 does not sell your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and other payment partners, for the purpose of processing your deposits and withdrawals;
• KYC and identity verification providers — third-party services engaged to verify documents and confirm player identity during the KYC process;
• Game technology providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, who may receive certain usage data in connection with game rounds played through their platforms integrated into er99;
• Fraud prevention and security services — third-party tools used to detect and prevent fraudulent activity, unauthorised access, and money laundering on the platform;
• IT infrastructure and hosting providers — who provide the technical infrastructure on which the er99 platform operates, under strict data processing agreements;
• Legal and regulatory authorities — where disclosure is required by applicable law, legal process, court order, or at the legitimate request of a competent authority. er99 will notify affected users of such disclosures where legally permitted to do so.

All third parties with whom er99 shares personal data are contractually required to process that data only for the purposes for which it was shared and to maintain appropriate technical and organisational security measures.

International Data Transfers

The er99 platform serves players primarily in Bangladesh. Certain of our third-party service providers — including game technology suppliers and infrastructure partners — may be located outside of Bangladesh and may process personal data in other countries. Where personal data is transferred internationally, er99 takes reasonable steps to ensure that such transfers are protected by appropriate safeguards, including contractual clauses that impose data protection obligations equivalent to those we apply ourselves.

By using the er99 platform, you acknowledge and consent to the transfer of your personal data to third-party service providers outside Bangladesh where necessary for the purposes described in this Policy.

Data Retention

er99 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the duration of your account relationship with er99 and for a reasonable period afterwards to allow for the resolution of any outstanding disputes, complaints, or legal proceedings.

Financial and transactional records — including deposit and withdrawal histories, KYC documentation, and betting records — are retained for a minimum period in accordance with applicable anti-money laundering and financial record-keeping obligations. Following the expiry of the required retention period, such data is securely deleted or anonymised so that it can no longer be associated with an individual player.

Technical and usage data collected automatically may be retained in aggregated or anonymised form for longer periods for the purposes of platform analytics and service improvement, provided that such data cannot reasonably be used to identify individual players.

Your Data Rights

As an er99 player, you have the following rights with respect to your personal data. To exercise any of these rights, contact the er99 support team via live chat or email at [email protected].

er99 will respond to data rights requests within a reasonable timeframe. We may need to verify your identity before fulfilling a request. Where a request is refused, er99 will explain the reason. Note that certain rights may be limited where er99 has a legal obligation to retain or process the data in question.

Cookies & Tracking Technologies

er99 uses cookies and similar tracking technologies to operate the platform, remember your session and preferences, analyse usage patterns, and support fraud prevention measures. Cookies are small text files placed on your device when you access er99.io.

The following types of cookies are used on the er99 platform:

• Strictly necessary cookies — required for the platform to function. These cannot be disabled. They include session management cookies, security tokens, and cookies that maintain your login state.
• Functional cookies — used to remember your preferences and settings, such as your chosen language or display preferences, to provide a more personalised experience.
• Analytical cookies — used to collect aggregated data on how players use the er99 platform, which pages are visited most, and where players encounter difficulties. This data helps er99 improve the platform experience over time.
• Security and fraud-detection cookies — used to identify suspicious behaviour, detect automated scripts, and protect the integrity of player accounts and platform transactions.

You may adjust your browser settings to refuse or delete non-essential cookies at any time. Please note that disabling certain cookies may affect the functionality of the er99 platform.

Children & Minors

The er99 platform is strictly intended for adults aged 21 years and above. er99 does not knowingly collect personal data from individuals under the age of 21. The mandatory KYC verification process is designed in part to ensure that no under-age individuals gain access to the platform's real-money services.

If er99 becomes aware that personal data has been collected from an individual who is under 21 years of age, that data will be deleted without delay and the associated account will be closed. If you believe that an under-age individual has registered an account on er99, please contact our support team immediately at [email protected].

Security Measures

er99 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the er99 platform;
• Encryption of sensitive data at rest within er99's storage infrastructure;
• Role-based access controls that limit employee access to personal data on a strict need-to-know basis;
• Regular security audits and vulnerability assessments of platform infrastructure;
• Two-factor authentication options for player accounts;
• Automated monitoring for suspicious access attempts and anomalous account activity.

While er99 takes all reasonable steps to secure your personal data, no online platform can guarantee absolute security. Players are encouraged to use strong, unique passwords for their er99 accounts and to enable two-factor authentication where available. If you suspect that your account has been compromised, contact er99 support immediately.

Third-Party Links

The er99 platform may, from time to time, display references to third-party payment providers or game studios. er99 does not operate or control any third-party websites or services and is not responsible for the privacy practices of such third parties. This Privacy Policy applies solely to data processed by er99 in connection with the er99 platform. We encourage players to review the privacy policies of any third-party services they use in connection with their er99 account.

Policy Updates

er99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, operational requirements, or applicable legal obligations. When material changes are made to this Policy, er99 will notify active account holders through a notification within the player account area or by email to the address registered on the account.

The effective date displayed at the top of this document will be updated each time the Policy is revised. We encourage players to review this Policy periodically. Continued use of the er99 platform following the publication of an updated Policy constitutes acceptance of the revised terms.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which er99 handles your personal data, please contact our support team through any of the following channels:

• Live Chat: Available 24/7 directly on the er99 platform. Average response time: 2–5 minutes (Bangladesh Standard Time, UTC+6).
• Email: [email protected] — Average response time: 2–4 hours (BST, UTC+6).

When submitting a data rights request by email, please include your registered account username and a brief description of your request so that our team can locate your records and respond efficiently. er99 may request proof of identity before fulfilling certain data rights requests to protect the security of player accounts.