Privacy Policy — How 99wicket Protects Your Data

1. Information We Collect

99wicket collects personal data from players through several channels: directly when you register an account or contact support, automatically when you interact with the platform, and from third-party verification or payment partners where necessary. The categories of information we collect are as follows.

1.1 Registration & Identity Data

When you create a 99wicket account, we collect the following information:

• Full legal name as it appears on your government-issued identification document.
• Date of birth, used to verify that you meet the 18+ age requirement for platform access.
• Residential address, including city, district, and country of residence.
• Email address, used for account communications and security notifications.
• Preferred username selected during the registration process.

1.2 KYC Verification Documents

As part of our mandatory Know Your Customer (KYC) verification process, we collect copies of identity and address documents including National ID cards, passports, utility bills, and bank statements. These documents are processed securely and retained in accordance with the data retention schedule set out in Section 5 of this policy.

1.3 Payment & Transaction Data

To process deposits and withdrawals in Bangladeshi Taka, we collect transactional data including your payment method type (bKash, Nagad, Rocket, Upay, Visa, Mastercard, or Dutch-Bangla Bank), the account or card number associated with the payment method (stored in masked form), transaction amounts, and timestamps. 99wicket does not store full card numbers — card payments are processed through certified PCI-DSS compliant payment processors.

1.4 Technical & Usage Data

When you access 99wicket, we automatically collect certain technical information from your device and browser, including:

• IP address and approximate geographic location derived from it.
• Device type, operating system, and browser version.
• Session duration, pages visited, games played, and betting activity.
• Referring website or link that brought you to the 99wicket platform.
• Time-zone information (Bangladesh Standard Time, UTC+6, is our default reference).

1.5 Support Communications

When you contact the 99wicket support team via live chat or email, we retain a record of that communication, including the content of messages and any attachments you provide, for the purpose of resolving your query and improving service quality. Support transcripts are retained for a period of two years from the date of the interaction.

2. How We Use Your Data

99wicket uses the personal data we collect for specific, lawful purposes. We do not process your data in ways that are incompatible with the purposes for which it was originally collected. The table below summarises our primary processing activities and their legal basis.

Where we rely on legitimate interest as the legal basis for processing, we have conducted a balancing assessment to confirm that our interests do not override your fundamental privacy rights. You have the right to object to processing carried out on the basis of legitimate interest — please refer to Section 7 for details on how to exercise this right.

3. Data Sharing & Third Parties

99wicket does not sell or rent your personal data to any third party. We share data only with trusted partners who are contractually obligated to handle it securely and only for the specific purposes described below.

3.1 Payment Processing Partners

To facilitate deposits and withdrawals in BDT, we share necessary transaction data with our payment processing partners including bKash, Nagad, Rocket, Upay, and card processing networks. These partners receive only the data required to process the specific transaction and are subject to their own privacy and security frameworks.

3.2 KYC and Identity Verification Providers

We work with certified third-party identity verification services to process KYC documentation. These providers operate under strict data processing agreements and are authorised to process your identity documents solely for the purpose of verifying your identity on behalf of 99wicket. They are prohibited from using your data for their own marketing or commercial purposes.

3.3 Game Software Providers

The 99wicket platform integrates games from third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive anonymised or pseudonymised session data to facilitate game delivery, calculate RTP, and investigate technical disputes. They do not receive your full identity data or payment information.

3.4 Legal and Regulatory Disclosure

99wicket may disclose your personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required to do so by applicable law, court order, or regulatory direction. Such disclosures are made only to the extent required by the specific legal obligation and are logged internally for compliance audit purposes.

4. Cookies & Tracking Technologies

99wicket uses cookies and similar tracking technologies to operate core platform functionality, remember your preferences, and analyse platform usage patterns. By continuing to use the 99wicket platform, you consent to the use of cookies as described in this section.

4.1 Types of Cookies We Use

• Essential cookies: These are strictly necessary for the platform to function. They maintain your login session, remember your language and currency settings, and protect against cross-site request forgery. Essential cookies cannot be disabled without significantly impairing your ability to use 99wicket.
• Analytics cookies: We use anonymised analytics cookies to understand how players navigate the platform — which games are most popular, where users drop off during registration, and how pages perform on different device types. This data is used in aggregate form to improve the platform experience.
• Preference cookies: These cookies remember your display preferences, such as your chosen interface settings, so that you do not need to re-enter them on each visit.
• Security cookies: Used to detect unusual login behaviour and protect your account from unauthorised access attempts. These cookies are active for the duration of your session and expire when you log out.

4.2 Managing Your Cookie Preferences

You can manage non-essential cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies stored by websites you visit. Please note that disabling essential cookies will affect your ability to log in and use core platform features. For full instructions on managing cookies in your specific browser, refer to your browser's help documentation.

5. Data Retention

99wicket retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention schedule applies:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be attributed to any individual. We review our data holdings periodically to ensure that data is not retained beyond its scheduled retention date.

6. Data Security Measures

99wicket takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes the following controls:

• All data in transit is encrypted using TLS 1.2 or higher. All data at rest is encrypted using AES-256 encryption on our database and file storage infrastructure.
• Access to personal data within 99wicket is governed by role-based access controls. Only staff members with a legitimate operational need can access player data, and all such access is logged and audited.
• Our platform undergoes regular penetration testing and vulnerability assessments conducted by independent security specialists to identify and remediate potential weaknesses before they can be exploited.
• We maintain an incident response plan that is activated in the event of a confirmed or suspected data breach. In the event of a material breach affecting player data, affected players will be notified within a reasonable timeframe and advised on appropriate protective steps.
• Payment card data is never stored on 99wicket servers. Card transactions are handled entirely by our PCI-DSS certified payment processor, meaning your card details are never exposed to our internal systems.

While we implement robust security measures, no online platform can guarantee absolute security. We strongly encourage you to use a strong, unique password for your 99wicket account, enable any available two-factor authentication features, and contact our support team immediately if you notice any suspicious activity on your account.

7. Your Privacy Rights

As a player on the 99wicket platform, you hold a number of rights with respect to your personal data. These rights are detailed below, along with instructions on how to exercise them.

7.1 Right of Access

You have the right to request a copy of all personal data that 99wicket holds about you. We will provide a structured, commonly used, and machine-readable copy of your data within 30 days of receiving a verified access request. There is no charge for a first access request within any 12-month period.

7.2 Right to Rectification

If any personal data that 99wicket holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update basic account details such as your email address or contact information directly in your account settings. For corrections to identity data such as your name or date of birth, please contact our support team with supporting documentation.

7.3 Right to Erasure

You have the right to request that 99wicket delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where processing is unlawful. Please note that erasure requests cannot override legal retention obligations — for example, transaction records required for AML compliance must be retained for the periods specified in Section 5, even after a deletion request is made.

7.4 Right to Restrict Processing

You may request that 99wicket restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified, or while an objection to legitimate-interest processing is being assessed.

7.5 Right to Object

Where 99wicket processes your data on the basis of legitimate interest, you have the right to object to that processing. We will cease the processing in question unless we can demonstrate compelling legitimate grounds that override your interests, or unless the processing is necessary for the establishment or defence of legal claims.

7.6 Right to Withdraw Marketing Consent

If you have previously given consent to receive promotional communications from 99wicket, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. To opt out of marketing emails, update your preferences in your account settings or contact us at support@99wicket.

7.7 How to Submit a Privacy Request

To exercise any of the rights described in this section, please contact the 99wicket data privacy team via email at support@99wicket with the subject line "Privacy Rights Request". Please include your full name, registered email address, and a description of the right you wish to exercise. We will acknowledge your request within 5 business days and aim to resolve it within 30 calendar days. In complex cases, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

8. Updates to This Policy

99wicket reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, changes in applicable law or regulatory guidance, or improvements to our platform that affect how personal data is collected or used. The effective date at the top of this document indicates when the current version came into force.

When we make material changes to this Privacy Policy, we will notify registered players via the email address associated with their account, or through a prominent notice displayed on the 99wicket platform upon their next login. Minor changes that do not materially affect your rights or our core processing activities may be made without individual notification, though the effective date will always be updated to reflect the change.

We encourage you to review this Privacy Policy periodically to stay informed about how 99wicket is protecting your data. Continued use of the platform after a revised Privacy Policy has been published constitutes your acknowledgement of the updated terms.

If you have any questions about this Privacy Policy or about how 99wicket handles your personal data, please do not hesitate to contact our support team at support@99wicket. Our team is available 24/7 via live chat on the platform and aims to respond to all email enquiries within 6 hours of receipt.