ox999 Privacy Policy

1 Who We Are

ox999 ("we", "us", or "our") operates an internationally licensed online betting and casino platform accessible at https://ox999.io (the "Platform"). ox999 is the data controller responsible for the personal information collected through the Platform. We serve players primarily located in Bangladesh and are committed to handling all personal data in a fair, transparent, and lawful manner.

This Privacy Policy applies to all users of the ox999 Platform, including registered players, visitors who browse without registering, and any person who contacts ox999 via our support channels. By using the Platform, you acknowledge that you have read and understood this policy and consent to the processing of your personal data as described herein.

2 Data We Collect

ox999 collects the following categories of personal data depending on how you interact with the Platform:

We do not knowingly collect special categories of sensitive personal data (such as health information, biometric data, political opinions, or religious beliefs) unless strictly required by a legal obligation and only with your explicit consent.

3 How We Collect Your Data

ox999 collects personal data through the following means:

• Direct submission: Information you provide when creating an account, completing KYC verification, making a deposit or withdrawal, submitting a support request, or responding to a survey or promotion.
• Automated technologies: Technical and usage data collected automatically as you navigate the Platform through cookies, server logs, web beacons, and similar tracking technologies. See Section 7 for full details on cookies.
• Third-party identity verification services: When you submit verification documents, ox999 may use regulated third-party KYC providers to authenticate your identity. These providers return a verification result to ox999 and are bound by strict confidentiality obligations.
• Payment service providers: When you transact via bKash, Nagad, Rocket, Upay, or a Bangladeshi bank, the relevant payment provider may share transaction confirmation data with ox999 for the purpose of crediting or processing your account.
• Fraud and risk screening services: ox999 may receive data from third-party fraud detection and anti-money laundering screening services to protect the integrity of the Platform.

4 Purposes of Processing

ox999 uses your personal data only for the purposes set out below. We will not process your data for any purpose that is incompatible with those listed here without first obtaining your consent or notifying you in accordance with this policy.

• Account registration and management: To create, maintain, and administer your ox999 player account, including updating your preferences and communicating account-related notifications.
• Identity verification (KYC): To verify that you meet the eligibility requirements set out in our Terms & Conditions, including the minimum age of 21 years and the single-account rule.
• Transaction processing: To process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, and Bangladeshi banks, and to maintain accurate financial records.
• Anti-money laundering (AML) and fraud prevention: To screen transactions, detect suspicious activity, and comply with applicable financial crime prevention obligations.
• Platform operation and improvement: To deliver the betting and casino services you request, diagnose technical faults, and improve the performance, usability, and content of the Platform.
• Responsible gaming: To monitor betting patterns that may indicate problem gambling behaviour, to apply self-exclusion restrictions you have requested, and to communicate responsible gaming resources.
• Customer support: To respond to your enquiries, complaints, and support requests in a timely and effective manner.
• Marketing communications: To send you promotional offers, bonus notifications, and news about ox999 services, subject to your communication preferences. You may opt out at any time.
• Legal and regulatory compliance: To comply with applicable laws, court orders, or requests from competent regulatory authorities.

5 Legal Basis for Processing

ox999 processes your personal data on one or more of the following legal grounds, depending on the specific processing activity:

• Contractual necessity: Processing is required to perform the contract between you and ox999 (i.e., to provide the Platform services you have registered for, including account management, gaming, and payment processing).
• Legal obligation: Processing is required to comply with our legal obligations, including KYC requirements, AML regulations, and record-keeping obligations applicable to internationally licensed gaming operators.
• Legitimate interests: Processing is necessary for ox999's legitimate interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement, provided those interests are not overridden by your rights and freedoms.
• Consent: Where we rely on your consent (for example, for direct marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of any processing carried out before withdrawal. To withdraw consent, contact [email protected].

6 Sharing Your Data

ox999 does not sell your personal data. We share your data only with the following categories of recipients, and only to the extent necessary for the stated purpose:

• Identity verification (KYC) providers: Regulated third-party services that verify the authenticity of identity documents and confirm that players meet eligibility requirements.
• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and other Bangladeshi financial institutions, solely for the purpose of processing your deposit and withdrawal transactions.
• Fraud prevention and AML screening services: Third-party risk management platforms that help ox999 identify and prevent fraudulent or money laundering activity on the Platform.
• Technology and hosting providers: Cloud infrastructure and software providers that host the Platform and process data on our behalf under binding data processing agreements.
• Customer support platforms: Third-party helpdesk or live chat technology providers used to deliver ox999 customer support services.
• Legal and regulatory authorities: Courts, law enforcement agencies, or regulatory bodies where disclosure is required by applicable law or a valid legal process.
• Business successors: In the event of a merger, acquisition, or sale of all or part of ox999's business, your personal data may be transferred to the acquiring entity subject to equivalent privacy protections.

7 Cookies and Tracking Technologies

ox999 uses cookies and similar technologies (including web beacons, pixels, and local storage) to operate the Platform effectively, understand how it is used, and deliver relevant content and marketing. The following types of cookies are used:

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged in and security tokens that prevent cross-site request forgery. These cookies cannot be disabled.
• Performance and analytics cookies: Collect anonymised data about how visitors use the Platform — which pages are visited most often, where errors occur, and how users navigate between sections. This data helps us improve the Platform experience.
• Functionality cookies: Remember your preferences such as language settings, display preferences, and responsible gaming tool configurations so that you do not need to re-enter them on each visit.
• Marketing and targeting cookies: Used to deliver promotional content relevant to your interests. These cookies track your activity across sessions to build a profile of your preferences. You may opt out of these cookies by contacting [email protected].

You can manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may prevent you from accessing certain features of the Platform. ox999 does not respond to browser "Do Not Track" signals at this time.

8 Data Security

ox999 takes the security of your personal data seriously and has implemented a range of technical and organisational measures designed to protect your information against unauthorised access, disclosure, alteration, and destruction. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your browser or device and our servers.
• Encryption of sensitive stored data including passwords (stored as salted hashes) and financial account identifiers.
• Strict access controls: only authorised ox999 personnel with a legitimate business need may access personal data, and all access is logged.
• Regular security assessments and penetration testing of Platform infrastructure.
• Secure data centre facilities with physical access controls, redundancy, and disaster recovery capabilities.
• Employee training on data protection and information security policies.

Despite these measures, no online platform can guarantee absolute security. You are responsible for keeping your ox999 login credentials confidential. If you suspect that your account has been compromised, contact [email protected] immediately.

9 Data Retention

ox999 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected and to comply with applicable legal, regulatory, and financial record-keeping obligations. The following general retention periods apply:

• Active account data: Retained for the full duration of your account being active on the Platform.
• KYC and identity documents: Retained for a minimum of five (5) years from the date of account closure or last transaction, in accordance with standard AML record-keeping requirements applicable to internationally licensed gaming operators.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Support and communications data: Retained for two (2) years from the date of last correspondence, unless the communication relates to an ongoing dispute or legal matter.
• Marketing data: Retained until you withdraw consent or opt out of marketing communications, at which point marketing-specific data is promptly deleted or anonymised.
• Technical and usage data: Typically retained in identifiable form for up to twelve (12) months, after which it may be anonymised and retained for longer-term analytics purposes.

Upon expiry of the applicable retention period, ox999 will securely delete or irreversibly anonymise your personal data. If you request deletion of your data before a retention period has expired, ox999 will delete what it is legally permitted to delete and will explain any portions that must be retained and the reason for retention.

10 Your Rights

Subject to applicable law and certain exceptions, you have the following rights in relation to your personal data held by ox999. To exercise any of these rights, please contact [email protected] with the subject line "Data Rights Request" and we will respond within a reasonable timeframe:

• Right of access: You may request a copy of the personal data ox999 holds about you, along with information about how it is processed.
• Right to rectification: You may request that inaccurate or incomplete personal data be corrected or updated. For simple corrections (such as a misspelled name), you may also update information directly within your account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where the data has been unlawfully processed. Deletion may be limited where retention is required by law.
• Right to restrict processing: You may request that ox999 temporarily limit the processing of your personal data in certain circumstances, such as while a dispute is being resolved.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to object: You may object to the processing of your personal data where ox999 relies on legitimate interests as the legal basis, or where your data is used for direct marketing purposes.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

11 Children's Privacy

The ox999 Platform is strictly intended for adults aged 21 years and above. ox999 does not knowingly collect personal data from any person under the age of 21. If we become aware that a minor has registered on the Platform or has submitted personal data to us, we will immediately suspend the relevant account, delete all associated personal data, and ensure that any funds are returned in accordance with our Terms & Conditions.

If you believe that a person under the age of 21 has accessed or registered on ox999, please contact us immediately at [email protected]. We take child protection seriously and will act promptly on any such report. We also encourage parents and guardians to use parental control tools to prevent minors from accessing online gambling platforms.

12 Third-Party Links

The ox999 Platform may contain references to game providers, payment partners, or other third-party services. ox999 is not responsible for the privacy practices of any third party. This Privacy Policy applies solely to personal data collected and processed by ox999 in connection with your use of the Platform.

We encourage you to review the privacy policies of any third-party service providers — including your chosen payment provider such as bKash or Nagad — before submitting personal information to them. Those providers operate independently of ox999 and are solely responsible for their own privacy practices.

13 International Data Transfers

As an internationally licensed platform serving players in Bangladesh, ox999 may transfer your personal data to servers or service providers located outside of Bangladesh. Where such transfers occur, ox999 takes steps to ensure that your data receives an equivalent level of protection to that which it would receive within Bangladesh, including through the use of contractual safeguards with our data processors.

By using the ox999 Platform and submitting your personal data, you acknowledge and consent to the transfer of your data to jurisdictions that may have different data protection standards than those in Bangladesh. ox999 will always handle your data in accordance with this Privacy Policy regardless of where it is processed.

14 Changes to This Privacy Policy

ox999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform functionality. When material changes are made, ox999 will notify registered players via email to the address on file and/or via an in-platform notification prior to the changes taking effect. The effective date at the top of this document will be updated accordingly.

Your continued use of the ox999 Platform following the posting of any changes constitutes your acceptance of the updated Privacy Policy. If you do not agree with the revised policy, you must stop using the Platform and may request account closure by contacting [email protected]. We recommend that you review this page periodically so that you remain informed about how ox999 protects your personal data.

15 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way ox999 handles your personal data, please contact our support team. All privacy-related correspondence should be submitted in English for the fastest response.

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: Use "Privacy Policy Query" or "Data Rights Request" to ensure prompt routing to the appropriate team
• Support Hours: 24 hours a day, 7 days a week, 365 days a year
• Response Time: Privacy-related enquiries are acknowledged within 24 hours and resolved within 30 calendar days (Bangladesh Standard Time, UTC+6)