tr99 Privacy Policy

1 Introduction and Scope

tr99 ("we", "us", "our") is committed to protecting the privacy and personal data of every player who uses the tr99 platform available at tr99.io. This Privacy Policy sets out in clear terms what personal data we collect, why we collect it, how we use and store it, and what rights you have in relation to your data.

This Policy applies to all data processing activities carried out in connection with the tr99 Platform, including account registration, payment processing, customer support interactions, marketing communications, and the use of cookies and similar tracking technologies on our website.

By registering an account with tr99 or by continuing to use the Platform following any update to this Policy, you acknowledge that you have read and understood this Privacy Policy in its entirety. If you do not agree with any aspect of this Policy, you should discontinue your use of the Platform and close your account by contacting [email protected].

2 Data Controller Information

tr99 acts as the data controller in respect of all personal data collected through the Platform. As data controller, tr99 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully and fairly.

For all data protection enquiries, requests, or complaints, you may contact our dedicated data protection team at: [email protected]

We aim to respond to all data-related correspondence within 5 business days of receipt. Where a request is particularly complex or involves a large volume of data, we will notify you within that period and provide an estimated completion date.

3 Personal Data We Collect

3.1 Data You Provide Directly

When you register an account, make a deposit or withdrawal, contact our support team, or participate in promotions, tr99 may collect the following categories of personal data:

• Identity data: Full legal name, date of birth, gender, and photograph as provided in KYC documentation (National Identity Card, passport, or other government-issued ID).
• Contact data: Email address, mobile phone number, and residential address including city (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, or elsewhere in Bangladesh).
• Financial data: Payment method identifiers (such as your bKash, Nagad, Rocket, or Upay account number; partial Visa or Mastercard details), deposit and withdrawal history, and account balance information.
• Account credentials: Username and encrypted password hash. tr99 does not store your password in plaintext.
• Communications data: Records of your correspondence with our support team via email or live chat, including the content of messages and timestamps.

3.2 Data Collected Automatically

When you access and use the tr99 Platform, we automatically collect certain technical and behavioural data, including:

• Device and technical data: IP address, browser type and version, operating system, device type (desktop or mobile), screen resolution, and language settings.
• Usage data: Pages visited, time spent on each page, betting and gaming activity (markets accessed, games played, stakes placed, outcomes), login timestamps, and session duration.
• Location data: Approximate geographic location derived from your IP address, used to enforce jurisdictional access restrictions and comply with our anti-fraud policies.
• Cookie and tracking data: Data collected via first-party cookies and similar technologies as described in Section 7 of this Policy.

3.3 Data from Third Parties

tr99 may receive personal data about you from third-party sources where this is necessary and lawful, including from payment processors (to verify transaction status), fraud prevention agencies (to screen for suspicious activity), and identity verification service providers (to complete KYC checks).

4 How We Use Your Data

tr99 uses the personal data we collect for the following purposes:

tr99 does not use your personal data for purposes incompatible with those listed above. Where we intend to process your data for a materially new purpose, we will notify you and, where required, seek your renewed consent before doing so.

5 Legal Basis for Processing

tr99 processes your personal data on the following legal grounds depending on the nature of the processing activity:

• Contractual necessity: Processing required to perform our contract with you — for example, account creation, bet settlement, and payment processing.
• Legitimate interests: Processing carried out to pursue our legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and aggregate analytics, provided these interests are not overridden by your fundamental rights.
• Legal obligation: Processing required to comply with applicable laws and regulatory requirements, including anti-money laundering (AML) obligations and KYC verification mandates.
• Consent: Where we rely on your consent for a specific processing activity (such as sending optional marketing communications), you may withdraw that consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

6 Data Sharing and Disclosure

tr99 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your data in the following limited circumstances:

6.1 Service Providers and Processors

We share personal data with carefully selected third-party service providers who process data on our behalf under written data processing agreements. These include payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard network partners), identity verification providers, fraud detection services, cloud hosting providers, and customer support software vendors. All such providers are contractually bound to use your data only for the purposes we specify and to maintain appropriate security standards.

6.2 Legal and Regulatory Disclosure

tr99 may disclose personal data to law enforcement agencies, regulatory authorities, or courts where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of tr99, our players, or the public.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of tr99's business, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify you via email or a prominent notice on the Platform prior to such a transfer taking effect.

7 Cookies and Tracking Technologies

tr99 uses first-party cookies and similar browser-based storage technologies to operate and improve the Platform. We do not use intrusive third-party advertising trackers or cross-site behavioural profiling cookies.

7.1 Types of Cookies We Use

• Essential cookies: Required for the Platform to function correctly. These include session authentication cookies that keep you logged in during a visit and security tokens that protect against cross-site request forgery (CSRF). These cookies cannot be disabled without impairing Platform functionality.
• Functional cookies: Used to remember your preferences, such as language settings and preferred payment method, to improve your experience across sessions.
• Analytics cookies: Used to collect aggregated, anonymised usage statistics that help us understand how players interact with the Platform so we can improve its design and content. Individual players are not identifiable from these analytics.
• Fraud prevention cookies: Used to detect and prevent fraudulent activity, including the use of multiple accounts or automated bot activity.

7.2 Managing Cookies

You may configure your browser to block or delete cookies at any time. Please be aware that disabling essential cookies will prevent you from logging into your tr99 account and using core Platform features. Instructions for managing cookies are available in your browser's help documentation.

8 Data Retention

tr99 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

• Active accounts: Personal data associated with an active account is retained for the duration of the account's existence and for a period of 5 years following permanent account closure.
• Financial and transaction records: Retained for a minimum of 7 years in accordance with financial record-keeping obligations.
• KYC documentation: Retained for a minimum of 5 years following the end of the business relationship, as required by applicable AML regulations.
• Support communications: Retained for 3 years following the resolution of the relevant support interaction.
• Marketing consent records: Retained for the duration of your consent and for 1 year after withdrawal, as evidence of consent management.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual.

9 Data Security

tr99 takes the security of your personal data seriously and implements a layered set of technical and organisational measures to protect it against unauthorised access, loss, alteration, or disclosure. Our security framework includes the following controls:

• 256-bit SSL/TLS encryption on all data transmissions between your browser and our servers.
• Encrypted password storage using industry-standard one-way hashing algorithms. Your plaintext password is never stored on our systems.
• Two-factor authentication (2FA) available for all player accounts to provide an additional layer of login security.
• Access controls ensuring that only authorised tr99 personnel with a legitimate need can access player data, and only to the extent required for their role.
• Regular security audits and vulnerability assessments conducted by our internal security team.
• Segregated player funds held separately from operational funds, protecting your account balance in the event of business continuity issues.

10 Your Rights as a Data Subject

As a player on the tr99 Platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with a clear description of your request. We will respond within 5 business days.

• Right of access: You may request a copy of the personal data tr99 holds about you, along with information about how it is being used.
• Right to rectification: You may request that inaccurate or incomplete personal data be corrected or updated without undue delay.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our retention obligations under applicable law.
• Right to restriction of processing: You may request that we restrict the processing of your data in certain circumstances, for example while a dispute about its accuracy is being resolved.
• Right to data portability: You may request a structured, machine-readable copy of personal data you have provided to tr99, for the purpose of transmitting it to another service provider.
• Right to object: You may object to processing carried out on the basis of legitimate interests, or to the use of your data for direct marketing purposes. Where you object to marketing, we will cease such communications immediately.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing prior to withdrawal.

tr99 will not charge a fee for the exercise of these rights in ordinary circumstances. Where requests are manifestly unfounded, repetitive, or excessive, a reasonable administrative fee may apply.

11 Children and Minors

The tr99 Platform is strictly intended for adults aged 21 years and above. tr99 does not knowingly collect, process, or retain personal data from individuals under the age of 21. If we become aware that personal data has been collected from a minor, we will take immediate steps to delete that data and close the associated account.

Parents and guardians who believe that a minor may have registered an account on tr99 are urged to contact us immediately at [email protected]. We will investigate and act promptly. tr99 employs age verification checks at the point of registration and during the KYC process to enforce this restriction.

12 Changes to This Policy

tr99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The updated Policy will be published on this page with a revised effective date.

Where changes are material — meaning they significantly affect how we handle your personal data or your rights in relation to it — we will notify you via the email address registered to your tr99 account at least 7 days before the changes take effect, where reasonably practicable.

Your continued use of the tr99 Platform following the publication of an amended Privacy Policy constitutes your acceptance of the revised terms. We recommend that you revisit this page periodically to stay informed of any updates.

Last reviewed and updated: 1 January 2026. For data protection enquiries, contact [email protected].