sg99 Privacy Policy

01Introduction

sg99 ("we", "us", "our", "the Platform") is committed to protecting and respecting your privacy. This Privacy Policy ("Policy") describes how we collect, use, store, disclose, and safeguard personal data submitted to or collected by sg99 in connection with your use of our website at https://sg99.bio and all related services (collectively, "the Platform"). This Policy forms part of our Terms and Conditions, which you agreed to when you created your sg99 account.

This Policy applies to all users of the Platform, including registered Players, visitors who browse the website without creating an account, and any person who contacts sg99 via our support email or other communication channels. If you do not agree with this Policy, please discontinue use of the Platform immediately and contact us to request account closure.

02Personal Data We Collect

sg99 collects personal data that you provide directly to us, data generated by your use of the Platform, and data obtained from third-party service providers where permitted by law. The categories of personal data we may collect include:

• Identity data: full legal name, date of birth, government-issued identification numbers, nationality, and copies of identity documents submitted during KYC verification.
• Contact data: email address, mobile phone number, and residential address in Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi).
• Financial data: payment method details (bKash mobile number, Nagad account reference, Rocket number, bank account information), transaction history, deposit amounts, and withdrawal records.
• Gameplay data: betting history, game session logs, wagering patterns, win/loss records, bonus usage, and responsible gaming tool settings.
• Technical data: IP address, device type, operating system, browser type, device identifiers, and approximate geolocation data derived from your IP address.
• Communications data: records of your correspondence with sg99 support, including email content, chat transcripts, and support ticket history.

We do not collect or store full payment card numbers. Where payment card data is involved in a transaction, it is handled exclusively by our certified payment processing partners using PCI-DSS compliant infrastructure. sg99 retains only a tokenized reference to the card for the purpose of processing future transactions on the same instrument.

03How We Use Your Personal Data

sg99 uses the personal data it collects for the following purposes. We will only process your data where we have a lawful basis to do so, as described in Section 04 of this Policy:

• Account management: to register, verify, and maintain your sg99 Player account, including processing your KYC documentation and authenticating your identity at login.
• Payments processing: to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and local bank transfers in BDT, and to detect and prevent payment fraud.
• Regulatory compliance: to fulfil anti-money-laundering (AML) obligations, fraud prevention duties, and any other legal or regulatory requirements applicable to sg99's operations.
• Service personalisation: to tailor your gaming experience, including game recommendations, promotional offers relevant to your activity, and responsible gaming alerts calibrated to your betting behaviour.
• Customer support: to respond to your enquiries, resolve disputes, investigate complaints, and communicate service updates or security notices.
• Platform security and integrity: to monitor for prohibited conduct including collusion, match-fixing, bonus abuse, and the use of automated betting software, and to enforce our Terms and Conditions.

★Our Privacy Commitments

04Legal Basis for Processing

sg99 processes personal data only where a valid lawful basis exists. The primary legal bases on which we rely are:

05Sharing Your Personal Data

sg99 does not sell or rent your personal data. We may share your personal data with the following categories of recipient only where necessary and proportionate to the purpose:

• Payment service providers: bKash, Nagad, Rocket, Upay, and bank partners — strictly for the purpose of processing your financial transactions in BDT. These providers are contractually bound to handle your data securely and confidentially.
• Game software providers: Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, Microgaming, and other licensed third-party studios whose games are available on sg99 — for the purpose of operating the games and maintaining game integrity.
• Regulatory and law enforcement authorities: we will disclose personal data to competent authorities where required to do so by law, court order, or regulatory demand. We will, where legally permitted, notify you of such disclosure.
• Fraud prevention and AML screening services: third-party services used to verify your identity and screen transactions for money laundering and fraud risk, acting as processors under our instruction.

06Cookies and Tracking Technologies

sg99 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit our website. We use the following categories of cookie:

• Strictly necessary cookies: required for the Platform to function. These include session cookies that keep you logged in, security tokens that protect your account from CSRF attacks, and cookies that store your language preference.
• Functional cookies: store your preferences such as language selection (English), so you do not need to re-select them each visit.
• Analytics cookies: help us understand how Players use sg99 — which pages are visited most, how long sessions last, and where users encounter difficulties — so we can improve the Platform.
• Security and fraud-prevention cookies: used to detect and block automated bots, identify suspicious login behaviour, and flag unusual account activity for review by our security team.

You may manage or disable non-essential cookies through your browser settings. Please note that disabling strictly necessary cookies will prevent the Platform from functioning correctly and you may be unable to log in or process transactions. sg99 does not use third-party advertising cookies or cross-site tracking pixels.

07Data Retention

sg99 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to any longer retention period required by law. Our standard retention periods are:

When the applicable retention period expires, your personal data will be securely deleted or anonymised so that it can no longer be linked to you. Where data anonymisation is used in place of deletion (for example, to preserve aggregate statistical records), the anonymised data will no longer constitute personal data and will not be subject to this Policy.

08Your Rights Over Your Personal Data

Subject to applicable law and our obligations under AML regulations, you have the following rights in relation to the personal data sg99 holds about you. To exercise any of these rights, contact us at [email protected] with your full name and registered account email address:

• Right of access: you may request a copy of the personal data we hold about you (a Subject Access Request). We will respond within 30 days.
• Right to rectification: if any personal data we hold about you is inaccurate or incomplete, you may request that we correct or complete it.
• Right to erasure: you may request deletion of personal data where we no longer have a legitimate need to retain it. This right is subject to our legal retention obligations.
• Right to restrict processing: you may request that we temporarily halt processing of your data in certain circumstances, for example while a rectification request is under review.
• Right to data portability: you may request that we provide your personal data in a structured, commonly used, machine-readable format where the processing is based on consent or contractual necessity.
• Right to object: where processing is based on legitimate interests, you may object to that processing. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.

To submit a data rights request, email [email protected] with the subject line "Data Rights Request" and include your full name, registered email address, and a description of the right you wish to exercise. We may need to verify your identity before processing the request. We will acknowledge receipt within 5 business days and provide a substantive response within 30 days.

09Data Security Measures

sg99 implements a layered approach to data security, combining technical, organisational, and procedural safeguards to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Our security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your browser and our servers, preventing interception of login credentials, session tokens, and financial data.
• Encryption at rest for sensitive personal data stored in our databases, including identity document copies and financial records.
• Role-based access controls ensuring that sg99 staff can only access the categories of personal data required for their specific job function, with all access events logged and auditable.
• Regular security assessments and penetration testing of our platform infrastructure to identify and remediate vulnerabilities before they can be exploited.

10Payment Data and Financial Privacy

sg99 takes the security of financial data with the utmost seriousness. All deposits and withdrawals on the Platform are processed in BDT through payment partners including bKash, Nagad, Rocket, and Upay, as well as local bank transfers via Dutch-Bangla Bank, City Bank, BRAC Bank, and other participating institutions. sg99 does not store your full bKash PIN, Nagad PIN, or any equivalent payment credential. Authentication for mobile financial service transactions occurs directly within the respective provider's app or USSD interface and is never passed through sg99's servers.

Transaction records, including deposit amounts, withdrawal requests, and payment method references, are retained in accordance with the data retention schedule in Section 07. These records may be reviewed by our AML compliance team and, where legally required, disclosed to relevant regulatory or law enforcement authorities. sg99 will never contact you asking for your bKash PIN, Nagad PIN, bank password, or any other payment credential. If you receive such a request purportedly from sg99, treat it as fraudulent and contact [email protected] immediately.

11Protection of Minors

sg99 does not knowingly collect personal data from any person under the age of 21. The Platform is strictly intended for adults aged 21 and above. During registration, we collect date of birth information and may require government-issued photo identification to verify age. If we discover that personal data has been collected from a person under 21, we will immediately close the associated account, delete or anonymise the relevant personal data (subject to any legal retention obligation), and return any real-money balance to the payment method used for deposit after completing any required AML checks.

12Third-Party Websites and Services

The sg99 Platform may reference or integrate with third-party services, including game providers and payment processors. This Privacy Policy applies solely to personal data collected and processed by sg99. It does not govern the privacy practices of third-party game studios, payment service providers, or any other external service. When you interact with a third-party service through our Platform, that service's own privacy policy will apply to any data it collects from you. sg99 is not responsible for the privacy practices or content of third-party services. We recommend reviewing the privacy policies of any third-party service before sharing personal data with them.

13Changes to This Privacy Policy

sg99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. The most current version of this Policy will always be available at https://sg99.bio/privacy-policy. The "Last Updated" date at the top of this page will be revised each time a material change is made.

Where changes are material — for example, a new category of personal data is collected, or data is shared with a new category of third party — sg99 will notify registered Players by email or on-platform notification at least 14 days before the change takes effect. Your continued use of the Platform after the effective date of any amendment will constitute acceptance of the updated Policy.

14Contact Our Privacy Team

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to report a potential data protection concern, please contact the sg99 privacy team using the details below. Our support email is provided as plain text only and cannot be used as a clickable link — please copy and paste the address into your email client.