99cat Privacy Policy — How We Handle Your Personal Data

This Privacy Policy ("Policy") describes how 99cat collects, uses, stores, and protects the personal information of users who access or use the 99cat online casino and sports betting platform at https://99cat.app (the "Platform"). By registering an account or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein.

99cat is committed to handling all personal data responsibly, securely, and in compliance with applicable data protection principles. This Policy applies to all users of the Platform, regardless of their location, and covers all personal data collected through the Platform, including data provided directly by you, data collected automatically during your use of the Platform, and data obtained from third-party service providers such as payment processors and identity verification services.

99cat uses the personal data we collect for the following purposes. We will not use your data for any purpose that is incompatible with the purposes listed here without first obtaining your consent or as otherwise permitted by applicable law:

• To create and manage your 99cat account, verify your identity, and process KYC documentation as required.
• To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment methods.
• To provide access to casino games, sports betting markets, live casino tables, and all other Platform features.
• To detect, investigate, and prevent fraud, money laundering, identity theft, and other illegal or prohibited activity.
• To send transactional communications including deposit confirmations, withdrawal notifications, account alerts, and support responses.
• To comply with legal and regulatory obligations, including age verification requirements, anti-money laundering (AML) obligations, and responses to lawful requests from authorities.

99cat processes your personal data on the following legal bases. Where more than one basis applies to a particular processing activity, the primary basis is identified below:

• Contractual necessity — processing required to perform the contract between you and 99cat, including account management, payment processing, and game access.
• Legal obligation — processing necessary to comply with applicable laws and regulations, including KYC, AML, and age verification requirements.
• Legitimate interests — processing for fraud prevention, security monitoring, and platform improvement, where such interests are not overridden by your rights.
• Consent — where we rely on your consent (for example, for optional marketing communications), you may withdraw that consent at any time by contacting support.

99cat does not sell your personal data. We may share your personal data with the following categories of third parties only to the extent necessary for the purposes described in this Policy:

• Payment service providers (including bKash, Nagad, Rocket, and Upay) for the purpose of processing deposits and withdrawals.
• Identity verification and KYC service providers who assist in verifying player identity and age as required by our operating standards.
• Game content and platform technology providers, including software providers such as Pragmatic Play, Evolution Gaming, and Ezugi, who may receive usage data in connection with the operation of their games.
• Law enforcement agencies, regulatory bodies, or other government authorities where disclosure is required or permitted by law, including in response to a court order or subpoena.

All third parties with whom 99cat shares personal data are required to handle that data in a manner consistent with this Policy and applicable data protection principles. 99cat requires appropriate contractual protections to be in place before sharing personal data with any service provider.

99cat uses cookies and similar tracking technologies on the Platform to maintain session continuity, remember your preferences, analyse usage patterns, and support Platform security. Cookies are small text files placed on your device by your web browser when you visit the Platform. Session cookies expire when you close your browser; persistent cookies remain on your device for a defined period or until you delete them.

99cat uses strictly necessary cookies (required for Platform operation), functional cookies (which remember your settings and preferences), and analytical cookies (which help us understand how players use the Platform so we can improve it). We do not use advertising or cross-site tracking cookies for third-party advertising purposes.

99cat implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include SSL/TLS encryption for all data in transit, encrypted storage of sensitive account data at rest, access controls that restrict internal access to personal data on a need-to-know basis, regular security reviews and monitoring of Platform systems, and incident response procedures for addressing any actual or suspected data breaches.

While 99cat takes every reasonable precaution to protect your data, no system connected to the internet is completely immune to security threats. In the event of a data breach that is likely to result in a risk to your rights and freedoms, 99cat will take all steps required under applicable law, including notifying affected users without undue delay where required.

99cat retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the duration of your account relationship with 99cat and for a period thereafter as required to meet our legal, regulatory, fraud prevention, and dispute resolution obligations. Specifically, account and transaction records are retained for a minimum of 5 years following account closure to comply with anti-money laundering record-keeping obligations.

When personal data is no longer required for the purposes for which it was collected and there is no legal obligation to retain it, 99cat will securely delete or anonymise the data in accordance with our internal data retention and deletion procedures. If you request deletion of your account, we will process that request in accordance with applicable law and our retention obligations.

The 99cat Platform does not contain links to third-party websites for external browsing purposes. All navigation within the Platform is internal. Where third-party services are integrated into the Platform (for example, game software from Pragmatic Play or Evolution Gaming, or payment processing via bKash or Nagad), those services operate under their own privacy policies. 99cat is not responsible for the privacy practices of third-party service providers, and we encourage you to review the privacy policies of any third-party services you use in connection with the Platform.

The 99cat Platform is strictly for adults aged 21 and above. 99cat does not knowingly collect personal data from individuals under the age of 21. If we become aware that we have inadvertently collected personal data from a person under the age of 21, we will take immediate steps to delete that data from our records and close any associated account. If you believe that a minor has registered on the Platform, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

99cat reserves the right to update or revise this Privacy Policy at any time. When we make material changes to this Policy, we will update the "Last Updated" date at the top of this page. In the case of significant changes that materially affect how your data is used or your rights as a data subject, we will endeavour to provide you with notice via your registered contact details prior to the change taking effect.

Your continued use of the 99cat Platform following the publication of any revision to this Privacy Policy constitutes your acceptance of the revised Policy. We encourage you to review this Policy periodically so that you are always aware of how your personal data is being handled.