99ltd Privacy Policy: How We Handle Your Account Data
At 99ltd, your account data belongs to your account — we collect only what we need to run your wallet, process transactions via bKash, Rocket or Upay, and keep your access secure. This policy sets out exactly what we collect, why we hold it, and how you can review or update it. Access to our platform depends on your local law and eligible regions.
Account data transparency
Local payment context: bKash, Rocket, Upay
Your right to review and correct
Jurisdiction-dependent access
POLICY POSTURE
What Data We Collect and Why We Hold It
When you open an account with 99ltd, we collect the details you enter during registration — your name, contact information, and the credentials you choose. When you fund your account through bKash, Rocket or Upay, the transaction reference and amount are recorded against your account wallet for reconciliation and support purposes. We do not store your mobile wallet PIN or any authentication credential issued by your payment provider. We also collect device and session data — browser type, IP address, session timestamps — to maintain account security and detect irregular access. Cookies and similar tools log your navigation so the lobby loads your last-viewed area when you return. We hold account and transaction records for as long as your account remains active and for a further period required by applicable law in eligible regions. If you close your account, we retain only what we are legally required to keep; everything else is deleted on the schedule set out in the retention section of this policy. Questions about what we hold can be directed to our support route; we will respond within the timeline published on the contact page. Availability of our service, including any data obligations we carry, depends on your local law and the eligible regions we operate in.
bKash
Transaction references recorded for wallet reconciliation only — no PIN or credential stored.
Rocket
Payment reference and amount logged to your account ledger; authentication stays with Rocket.
Upay
Transfer confirmations linked to your account wallet for support and dispute resolution.
POLICY BOUNDARIES
Where This Policy Applies and What It Covers
This policy covers data processed by 99ltd directly — your account record, session activity, and payment references from configured local routes. It does not extend to the privacy practices of third-party payment providers like bKash, Rocket or Upay; those are governed by each provider's own policy. Our scope is limited to what we control: your account data, how we use it, and how long we keep it. Eligibility and data obligations both depend on your local law and eligible regions.
Account Access
Login credentials, session records and account profile data are all within scope. We collect what you submit at registration and what your session generates.
Transactions
Payment references from bKash, Rocket and Upay are in scope. We record the reference and amount — not your wallet credentials or PIN.
Site Content
How you browse the lobby, which game categories you open, and navigation paths are recorded as aggregate session data within scope.
Third-Party Services
bKash, Rocket and Upay operate under their own privacy terms. Once a transaction leaves our platform to the provider, their policy governs that data.
ACCOUNT HOLDER ACTIONS
Review, Correct and Request Changes to Your Data
You have practical actions available to you under this policy, and none of them require you to contact a regulator first. Start inside your account: the profile section shows the information we hold against your record, and you can update contact details directly from there. If you find an inaccuracy — a misspelled name or an outdated contact number — correct it in the account settings fields and save. The update takes effect immediately on our side. For records you cannot edit yourself, such as historical transaction references tied to your bKash, Rocket or Upay deposits, reach our support route and describe the issue. We will review the record, confirm what we hold, and explain the correction or deletion path. If you want to know everything we hold about your account — beyond what is visible in the profile — submit a data access request through the support channel. We aim to respond within the period published on our contact page. Closure requests are also handled through support; we will confirm what is retained after closure and the applicable retention schedule.
Review Your Record
Open the account profile section to see the data we hold. Contact and credential fields are visible and editable from inside the authenticated account area.
Correct Account Details
Update your name, contact number or email directly in account settings. Changes save immediately and reflect across your wallet and support history.
Raise a Data Question
For records outside the profile view — including transaction references from bKash, Rocket or Upay — send a request through our published support route.
Request Account Closure
Closure and data deletion requests go through the support channel. We confirm what we retain post-closure and the schedule it follows under applicable law.
CONTACT THIS POLICY
How to Reach Us About This Privacy Policy
For any question about how we handle your data — from access requests to correction queries — use the contact routes published on our site. We do not publish support hours or response time commitments here because those details are maintained on the live contact page, where they reflect current availability. Use the route that matches your question type.
Live Chat
Open the chat widget from any page inside your account for account-specific privacy questions. Follow the prompts to route your query to the right team.
Email Support
For formal data access or correction requests, use the email address listed on our published contact page. Include your registered account reference in the message.
Account Support Centre
The support centre, accessible from the signed-in account area, covers common data questions and links directly to the relevant account settings pages.
HOW WE HANDLE DATA
Data Handling, Cookies, Security and Retention
We keep the data we collect to what we need to run your account and process your transactions. Cookies record session preferences and navigation paths; you can manage cookie settings from the browser controls on your device. Account security measures include session timeout on inactivity and credential checks at login — the specific steps are shown in your account security settings rather than described here, because they can change. Retention periods follow applicable law in eligible regions; when your account closes, we remove what we are not required to keep. If anything in this policy changes, we update the page and note the revision date at the top.
Cookies
Session and navigation cookies run on this site. Your browser settings control cookie acceptance; disabling them may affect how the lobby and account pages load.
Account Security
Login sessions expire on inactivity. Security settings for your account — including credential management — are visible inside the authenticated account area.
Data Retention
We hold account and transaction records while your account is active and for the period required by applicable law. Closed accounts are cleared of non-required data on a published schedule.
Policy Updates
When this policy changes, we update this page and mark the revision date. Continued account use after an update means you have seen the revised terms.
PRIVACY QUESTIONS ANSWERED
Common Questions About This Privacy Policy
These are the questions we hear most often about how we collect, store and use your account data. If your question is not here, reach us through the support routes on the contact page.
What data does 99ltd collect when I open an account?
We collect the registration details you submit — name, contact information and your chosen credentials. Once your account is active, session data such as login timestamps and device type are also recorded. We do not collect more than what is needed to run your account and process transactions.
Does 99ltd store my bKash, Rocket or Upay PIN?
No. When you transact through bKash, Rocket or Upay, we record the payment reference and amount against your account wallet. Your mobile wallet PIN and any credentials issued by those providers stay with them — we never see or store those details.
How can I see what data 99ltd holds about me?
Open the profile section inside your signed-in account to see the information we hold against your record. For a full data access request that goes beyond the profile view, contact us through the email route on our published contact page and include your account reference.
Can I correct wrong information on my account?
Yes. Contact details and some profile fields are editable directly inside account settings — update them and save. For records you cannot edit yourself, such as historical transaction references, raise the correction through our support channel and we will review and confirm the path forward.
How long does 99ltd keep my data after I close my account?
After closure, we retain only what applicable law in eligible regions requires us to keep. Everything else is deleted on the schedule set out in our retention policy. You can ask support to confirm exactly what we hold and when it is scheduled for removal.
Does this privacy policy apply to bKash, Rocket and Upay as payment providers?
Our policy covers data we process directly — your account record, session activity and payment references on our side. bKash, Rocket and Upay each operate under their own privacy terms. Once a transaction moves to their system, their policy governs that data, not ours.