tl99 Privacy Policy

1. Data We Collect

1.1 Registration Data

When you create a tl99 account, we collect the personal information you provide during the registration process. This includes your full name, date of birth, residential address, email address, mobile phone number, and preferred payment method. This data is necessary to establish your account, verify your identity, and comply with our Know Your Customer (KYC) obligations.

1.2 Identity Verification Data

To comply with anti-money laundering (AML) requirements and to verify that all players are aged 18 years or above, tl99 may request copies of official identity documents. These may include your National Identity Card (NID), passport, birth certificate, or a recent utility bill or bank statement as proof of address. This documentation is processed securely and stored only for as long as is required by applicable regulations.

1.3 Financial Transaction Data

tl99 records all deposit and withdrawal transactions processed through your account. This includes transaction amounts in Bangladeshi Taka (BDT), timestamps, payment method identifiers (such as bKash wallet numbers, Nagad account references, or Rocket IDs), and transaction status. Full payment card numbers are never stored by tl99; card processing is handled by our PCI-DSS compliant payment partners.

1.4 Gameplay and Betting Activity Data

tl99 collects records of all games played, bets placed, and sporting events wagered on through your account. This data includes game names, bet amounts, outcomes, session durations, and total wagering activity. This information is used for account management, bonus tracking, responsible gaming monitoring, and dispute resolution purposes.

1.5 Technical and Device Data

When you access tl99 via any device or browser, we automatically collect certain technical data including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, and pages visited on the tl99 platform. This data is used to maintain platform security, detect fraudulent access, and improve the overall user experience.

1.6 Communications Data

If you contact tl99's support team via live chat, email ([email protected]), or any other communication channel, we retain records of those communications for quality assurance, training, and dispute resolution purposes. We may also send you account-related notifications and, where you have opted in, promotional communications about tl99 offers and events.

Data Category	Examples	Primary Purpose
Identity Data	Full name, date of birth, NID number	KYC verification, age check
Contact Data	Email address, mobile number, address	Account communication, support
Financial Data	bKash/Nagad references, transaction amounts	Payment processing, AML compliance
Gameplay Data	Bets placed, games played, session length	Account management, responsible gaming
Technical Data	IP address, browser, device type	Security, fraud prevention
Communications Data	Support chat logs, email history	Quality assurance, dispute resolution

2. How We Use Your Data

2.1 Service Delivery

The primary purpose for which tl99 processes your personal data is to deliver the services you have requested. This includes creating and managing your account, processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment methods, making casino games and cricket betting markets available to you, and issuing bonuses and promotional rewards to your account.

2.2 Identity and Age Verification

tl99 processes identity and age verification data to confirm that all players are at least 18 years of age and to satisfy our KYC obligations. We are committed to preventing underage gambling across Bangladesh, and age verification is a mandatory step for all players before withdrawal requests are approved.

2.3 Legal and Regulatory Compliance

tl99 processes certain categories of personal data because we are legally required to do so. This includes retaining transaction records for anti-money laundering (AML) and counter-terrorist financing (CTF) purposes, maintaining player activity logs for regulatory audit purposes, and cooperating with law enforcement agencies when required by a valid legal order.

2.4 Fraud Prevention and Platform Security

We use technical data, account activity patterns, and device fingerprinting to identify and prevent fraudulent activity on the tl99 platform. This includes detecting multiple account registrations from the same device or IP address, identifying unusual betting patterns that may indicate exploitation of bonuses or technical errors, and monitoring for unauthorised account access attempts.

2.5 Responsible Gaming Monitoring

tl99 analyses gameplay and wagering data to support our responsible gaming programme. This analysis allows us to identify players who may be exhibiting signs of problem gambling behaviour and to intervene proactively with account limit suggestions, cooling-off period offers, or direct outreach from our support team. This processing is carried out in the interest of player welfare and public health.

2.6 Marketing Communications

Where you have explicitly opted in to receive marketing communications, tl99 may use your contact data to send you information about new games, seasonal promotions (such as Eid and Pohela Boishakh offers), BPL cricket betting markets, and exclusive tl99 bonuses. You may withdraw your consent to marketing communications at any time by contacting [email protected] or using the unsubscribe mechanism included in any marketing email.

3. Data Sharing and Disclosure

3.1 Payment Service Providers

To process your deposits and withdrawals, tl99 shares necessary financial transaction data with our authorised payment partners including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, Visa, and Mastercard. These providers receive only the data required to execute the specific transaction. All payment partners are contractually bound to protect your data and are prohibited from using it for any purpose other than completing the transaction for which it was shared.

3.2 Game Software Providers

tl99's casino and sports betting products are powered by software from providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive limited session and gameplay data necessary to deliver their games and maintain the integrity of their RNG systems. Game providers operate under strict data processing agreements with tl99.

3.3 Identity Verification Partners

For KYC and AML compliance, tl99 may share identity document data with regulated third-party verification service providers. These providers are used exclusively to validate the authenticity of documents and confirm player identity. They do not retain your data beyond the verification process and are bound by data processing agreements with tl99.

3.4 Law Enforcement and Regulatory Bodies

tl99 may disclose personal data to law enforcement agencies, regulatory authorities, or courts when required to do so by a legally binding order, warrant, or subpoena. In such cases, tl99 will disclose only the minimum information required to satisfy the legal obligation and will notify the affected player where legally permitted to do so.

3.5 Business Transfers

In the event of a merger, acquisition, or sale of all or part of tl99's business assets, personal data held by tl99 may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any changes to the privacy terms applicable to your data prior to the transfer taking effect.

4. Cookies and Tracking Technologies

4.1 What Are Cookies

Cookies are small text files placed on your device when you visit a website. tl99 uses cookies and similar technologies such as local storage and session tokens to ensure the platform functions correctly, to remember your preferences, and to collect aggregate analytics data that helps us understand how players use the site.

4.2 Types of Cookies Used by tl99

Cookie Type	Purpose	Duration
Essential / Session	Maintain your login session, keep you authenticated during play, enable core platform features	Session (deleted on browser close)
Preference	Remember your language preference, game display settings, and notification choices	Up to 12 months
Analytics	Collect aggregate data on page visits, navigation paths, and feature usage to improve platform performance	Up to 24 months
Security	Detect fraudulent login attempts, identify suspicious device behaviour, support two-factor authentication flows	Up to 30 days

4.3 Managing Your Cookie Preferences

You can manage or disable non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies via their privacy settings menus. Please note that disabling essential session cookies may prevent you from logging in to your tl99 account or accessing certain platform features. tl99 does not use third-party advertising cookies or cross-site tracking technologies.

4.4 Do Not Track Signals

tl99 respects Do Not Track (DNT) signals where technically feasible. If your browser sends a DNT signal, tl99 will limit data collection to essential session and security cookies only and will not deploy analytics cookies during that session. Please be aware that not all platform features can be guaranteed to function optimally in a DNT session.

5. Data Retention and Storage

5.1 Retention Principles

tl99 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. When data is no longer required, it is securely deleted or anonymised so that it can no longer be associated with any individual player.

5.2 Retention Periods by Data Category

Data Category	Retention Period	Reason
Account registration data	Duration of account + 5 years after closure	AML and regulatory compliance
Identity verification documents	5 years from date of verification	KYC regulatory requirement
Financial transaction records	7 years from transaction date	Anti-money laundering regulations
Gameplay and betting history	3 years from last activity	Dispute resolution, responsible gaming
Support communications	3 years from date of interaction	Quality assurance, dispute evidence
Marketing consent records	Until consent withdrawn + 1 year	Proof of lawful processing

5.3 Data Storage Location

tl99's primary data storage infrastructure is located on secured servers. Where data is processed by third-party service providers (such as payment processors or KYC partners), those providers maintain their own secure data centres. tl99 ensures that all third-party data processors meet equivalent standards of data security and are bound by contractual data protection obligations consistent with this Privacy Policy.

5.4 Secure Deletion

When personal data reaches the end of its retention period, tl99 implements secure deletion procedures to ensure that the data cannot be recovered or reconstructed. For physical documents (where applicable), secure shredding protocols are employed. For digital data, cryptographic erasure or overwriting methods are used to render the data permanently unrecoverable.

6. Your Privacy Rights

6.1 Right of Access

You have the right to request a copy of all personal data that tl99 holds about you. Upon receipt of a valid access request and verification of your identity, tl99 will provide a structured summary of your data in a commonly used electronic format within 30 days. There is no charge for a standard access request; however, tl99 reserves the right to charge a reasonable administrative fee for manifestly unfounded or repetitive requests.

6.2 Right to Rectification

If any personal data held by tl99 about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update certain account details directly through your tl99 account settings. For corrections that require administrative review — such as changes to your registered name or date of birth — please contact [email protected] with supporting documentation.

6.3 Right to Erasure ("Right to Be Forgotten")

You may request that tl99 delete your personal data in certain circumstances, including where the data is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent and there is no other legal basis for processing. Please note that tl99 may be required to retain certain data for regulatory compliance purposes (as described in Section 5) even following a valid erasure request. In such cases, we will explain precisely which data must be retained and why.

6.4 Right to Restrict Processing

You have the right to request that tl99 restricts the processing of your personal data in certain circumstances — for example, while a dispute about data accuracy is being resolved, or where you have objected to processing and we are assessing whether our legitimate interests override your objection. During a processing restriction, tl99 will store the data but will not actively use it for any other purpose.

6.5 Right to Data Portability

Where tl99 processes your data on the basis of your consent or in performance of a contract, you have the right to receive a copy of that data in a structured, machine-readable format (such as CSV or JSON) and to transmit it to another service provider of your choice. To submit a data portability request, please contact [email protected].

6.6 Right to Withdraw Marketing Consent

If you have previously opted in to receiving marketing communications from tl99, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. To unsubscribe from marketing emails, use the unsubscribe link included in any tl99 marketing email, or contact [email protected] directly.

7. Data Security Measures

7.1 Technical Security Controls

tl99 employs a comprehensive set of technical security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These controls include 256-bit SSL/TLS encryption for all data in transit, AES-256 encryption for sensitive data at rest, multi-factor authentication for administrative system access, automated intrusion detection systems, and regular penetration testing by independent security professionals.

7.2 Organisational Security Measures

Access to personal data within tl99 is restricted on a strictly need-to-know basis. Only personnel whose job functions require access to specific categories of player data are granted that access, and all such personnel are subject to confidentiality obligations and regular data protection training. tl99 conducts periodic internal audits of data access logs to detect any anomalous or unauthorised access patterns.

7.3 Payment Security

tl99 does not store full payment card numbers, CVV codes, or PIN data on its own systems. All card-based payment processing is handled by PCI-DSS Level 1 certified payment partners. Mobile financial service transactions via bKash, Nagad, Rocket, and Upay are processed through their own secure APIs using encrypted tokens rather than raw account credentials.

7.4 Data Breach Response

In the unlikely event of a personal data breach that poses a risk to affected players, tl99 will notify affected players without undue delay and will take immediate steps to contain the breach, assess its impact, and remediate the vulnerability. tl99 maintains a documented data breach response plan and conducts regular breach simulation exercises to ensure readiness.

8. Updates to This Policy

8.1 Policy Revisions

tl99 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. When material changes are made, the effective date displayed at the top of this document will be updated accordingly. For significant changes that materially affect how we process your data, tl99 will notify active players via email or via an in-platform notification prior to the change taking effect.

8.2 Continued Use as Acceptance

Your continued use of the tl99 platform following publication of a revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with the revised Privacy Policy, you must discontinue use of the tl99 platform and may request account closure by contacting our support team at [email protected].

8.3 Contact for Privacy Enquiries

If you have any questions, concerns, or complaints relating to this Privacy Policy or to tl99's handling of your personal data, please contact our dedicated privacy support team. We are committed to resolving all privacy-related enquiries promptly and transparently.

• Email: [email protected] (subject line: "Privacy Enquiry")
• Live Chat: Available 24/7 inside the tl99 platform
• Response time: All privacy enquiries are acknowledged within 2 business days and resolved within 30 calendar days
• Support hours: 00:00–24:00 BST (UTC+6), every day of the year