at99 Privacy Policy

1. Information We Collect

at99 collects personal data from players through several channels: directly from you when you register an account or interact with our services, automatically through your use of the at99.im website, and from third parties involved in payment processing and identity verification. The categories of personal data we collect are described below.

1.1 Registration & Account Data

When you create an at99 account, we collect the following information as part of the registration process:

• Full legal name;
• Date of birth (to verify that you are aged 18 or above);
• Email address;
• Mobile phone number (for account verification and OTP delivery);
• Preferred payment method (e.g., bKash, Nagad, Rocket, Visa, Mastercard);
• Account username and encrypted password.

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) process, at99 may request documentary evidence to verify your identity and age. KYC documents may include:

• A copy of your National Identity Card (NID), passport, or driving licence;
• Proof of address (e.g., utility bill or bank statement issued within the last 3 months);
• Proof of payment method ownership (e.g., a screenshot of your bKash, Nagad, or Rocket account registered in your own name).

KYC documents are stored securely and accessed only by authorised at99 staff for the purposes of identity verification and fraud prevention. Documents are never shared with third parties except where required by law or as described in Section 3 of this Policy.

1.3 Financial Transaction Data

When you make a deposit or request a withdrawal through the at99 cashier, we collect transaction-level data including the payment method used, transaction amount in BDT (৳), transaction timestamp in Bangladesh Standard Time (BST, UTC+6), and transaction reference numbers issued by your payment provider. at99 does not store full card numbers or mobile banking PINs — payment authentication is handled directly by the relevant payment gateway (bKash, Nagad, Rocket, Upay, or the card network).

1.4 Gameplay & Betting Data

at99 records data related to your gaming and betting activity on the Platform, including game session logs, bet amounts and outcomes, game titles played, sports betting market selections, and bonus claim history. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory compliance.

1.5 Technical & Device Data

When you access at99.im, our servers and analytics systems automatically collect certain technical data about your device and connection, including:

• IP address and approximate geolocation (country and city level);
• Device type, operating system, and browser version;
• Pages visited on at99.im, time spent on each page, and navigation paths;
• Referring URL (the website from which you arrived at at99.im);
• Session start and end timestamps in BST (UTC+6).

This technical data is used to maintain Platform security, detect suspicious access patterns, optimise site performance, and improve the player experience on at99.im.

1.6 Communications Data

When you contact at99 support via live chat or email, we retain a record of the communication, including the content of your message, your account details at the time of contact, and the resolution provided by our support team. These records are maintained for quality assurance, training, and dispute resolution purposes.

2. How We Use Your Data

at99 processes your personal data only for specific, legitimate purposes. The table below summarises the primary purposes for which we use each category of personal data, together with the lawful basis for that processing.

2.1 Marketing Communications

at99 will only send you promotional emails, SMS notifications, or other marketing communications if you have explicitly opted in to receive them during registration or through your Account settings. You may withdraw your consent to receive marketing communications at any time by contacting at99 support via live chat or emailing [email protected]. Withdrawal of marketing consent does not affect your right to receive service-related communications essential to your account (such as deposit confirmations, withdrawal notifications, and security alerts).

2.2 Automated Decision-Making

at99 uses automated systems to monitor betting patterns and account activity for the purposes of fraud detection, bonus abuse prevention, and responsible gaming intervention. Where an automated system flags an account for review, a member of the at99 team will conduct a manual assessment before any action (such as account suspension) is taken. at99 does not make solely automated decisions that produce significant legal effects without human oversight.

3. Data Sharing & Disclosure

at99 does not sell, rent, or trade your personal data to third parties for commercial or marketing purposes. We may share your personal data with the following categories of trusted third parties, strictly on a need-to-know basis and subject to binding confidentiality obligations:

3.1 Payment Service Providers

To process deposits and withdrawals, at99 shares the minimum necessary transaction data with payment service providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. These providers process your payment data in accordance with their own privacy policies and applicable financial data protection standards. at99 does not transmit full card numbers or mobile banking credentials to any third party.

3.2 Game Studio Providers

Game studios and software providers — including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi — may receive a session token and anonymised player identifier when you launch a game on at99.im. This technical data exchange is necessary to load and authenticate the game session. No personally identifiable information (such as your full name, NID number, or phone number) is shared with game studios.

3.3 Identity Verification Services

at99 may engage specialist third-party KYC verification services to assist with document authentication. These providers process KYC documents solely for the purpose of identity verification and are prohibited from using that data for any other purpose.

3.4 Legal and Regulatory Disclosure

at99 will disclose personal data to law enforcement agencies, courts, or other competent authorities if required to do so by applicable law, court order, or in response to a lawful request in connection with the investigation of fraud, money laundering, or other criminal activity. at99 will notify affected players of any such disclosure to the extent permitted by law.

4. Cookies & Tracking Technologies

at99.im uses cookies and similar tracking technologies to deliver a functional, personalised, and secure experience on the Platform. A cookie is a small text file placed on your device by your browser when you visit at99.im. Cookies do not contain personally identifiable information in isolation; however, when combined with your account data, they help at99 recognise you across sessions and maintain your preferences.

4.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential to the operation of at99.im. These include session authentication cookies that keep you logged in, security cookies that prevent cross-site request forgery, and load-balancing cookies. These cookies cannot be disabled without impairing core Platform functionality.
• Functional Cookies: Used to remember your preferences on at99.im, such as your selected language (English), display settings, and recently played games. These cookies improve your experience but are not strictly required for the Platform to function.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players interact with at99.im — including which pages are visited most frequently, typical session durations, and navigation patterns. This data helps at99 improve the Platform. Analytics cookies do not identify you individually.
• Security and Fraud Prevention Cookies: Used by at99's security systems to detect suspicious activity, identify multiple accounts originating from the same device, and prevent automated bot access. These cookies are a necessary component of at99's fraud prevention infrastructure.

4.2 Managing Cookies

You may configure your browser settings to refuse or delete cookies at any time. Instructions for managing cookies are available in the help documentation of all major browsers (Chrome, Firefox, Safari, Edge). Please note that disabling strictly necessary cookies will prevent you from logging in to your at99 account and will impair the core functionality of at99.im. at99 does not use third-party advertising or retargeting cookies on the Platform.

5. Data Retention

at99 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, including meeting legal, regulatory, accounting, or reporting requirements. The following retention periods apply to the main categories of personal data held by at99:

Upon expiry of the relevant retention period, at99 will securely delete or anonymise your personal data in a manner that prevents reconstruction or re-identification. Where data has been anonymised, it may be retained indefinitely for aggregate statistical and platform improvement purposes.

6. Your Data Rights

As a player whose personal data is processed by at99, you have the following rights with respect to your personal data. To exercise any of these rights, please contact the at99 support team via live chat or by emailing [email protected] with your full name, registered email address, and a description of your request. at99 will respond to verified data rights requests within 30 calendar days.

• Right of Access: You have the right to request a copy of the personal data at99 holds about you, together with information about the purposes for which it is processed.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data held by at99. For account registration details, you may update certain information directly through your Account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to at99's legal and regulatory retention obligations. Note that financial transaction records and KYC documents are subject to mandatory retention periods as set out in Section 5.
• Right to Restriction of Processing: You have the right to request that at99 restricts the processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified.
• Right to Data Portability: You may request that at99 provides your personal data in a structured, commonly used, and machine-readable format so that you may transfer it to another service provider.
• Right to Withdraw Consent: Where at99 processes your personal data on the basis of your consent (e.g., for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to Object: You have the right to object to processing of your personal data carried out on the basis of at99's legitimate interests, including profiling for fraud prevention purposes, where you believe your particular circumstances outweigh those interests.

7. Data Security

at99 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security infrastructure includes, but is not limited to, the following measures:

• SSL/TLS Encryption: All data transmitted between your browser and at99.im is encrypted using industry-standard SSL/TLS technology, indicated by the padlock icon in your browser's address bar.
• Encrypted Password Storage: Account passwords are never stored in plain text. at99 uses strong cryptographic hashing algorithms to store password credentials, ensuring that even at99 personnel cannot retrieve your original password.
• Two-Factor Authentication (2FA): at99 supports OTP-based verification via your registered mobile number as an additional layer of account security. Players are strongly encouraged to ensure their registered mobile number remains current and accessible.
• Access Controls: Access to player personal data within at99's systems is restricted on a strict need-to-know basis. Personnel with access to personal data are subject to confidentiality obligations and receive regular data protection training.
• System Monitoring: at99's security team monitors the Platform continuously (24/7, BST) for signs of unusual activity, attempted unauthorised access, and technical vulnerabilities. Security patches and updates are applied promptly upon release.
• Data Breach Response: In the event of a confirmed personal data breach that poses a risk to player rights, at99 will notify affected players without undue delay and take immediate remedial action to contain the breach and prevent recurrence.

While at99 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. Players are responsible for maintaining the security of their own account credentials. If you suspect your account has been accessed without your authorisation, please contact at99 support immediately.

8. Policy Updates & Contact

at99 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform features. When a material update is made to this Policy, at99 will notify registered players by email to their registered address and by displaying a prominent notice on at99.im for a period of not less than 14 days following publication of the updated Policy. The effective date at the top of this page will be updated to reflect the date of the most recent revision.

Continued use of the at99 Platform following notification of a Policy update constitutes your acceptance of the revised Privacy Policy. If you do not accept the revised Policy, you must cease using the at99 Platform and may request account closure by contacting support.

8.1 Contact for Privacy Matters

If you have any questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data by at99, please contact our support team using the details below. All privacy-related correspondence is handled in English and will receive a response within 2 business days.