ox999 Privacy Policy

This Privacy Policy applies to all users of the ox999 platform, accessible at ox999.vip, including any mobile-optimised version of the site. It governs the collection, use, storage, and disclosure of personal data submitted to or gathered by ox999 in the course of providing its online casino and sports betting services to players based in Bangladesh and elsewhere.

By creating an account with ox999 or by continuing to use the ox999 platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the data practices described herein. If you do not agree with this Privacy Policy, please discontinue your use of the platform and contact [email protected] to arrange account closure.

This Privacy Policy should be read alongside the ox999 Terms & Conditions and the Responsible Gaming Policy. Together, these three documents form the full framework governing your relationship with ox999.

1 Data We Collect

ox999 collects personal data from you in several ways: directly when you register or interact with the platform, automatically as you use the site, and occasionally from third-party sources as part of our verification and fraud prevention processes. The categories of personal data we collect include the following:

ox999 does not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, or health information. If any such data is inadvertently shared with ox999 through a support communication, it will not be stored beyond what is necessary to respond to your query and will not be used for any other purpose.

2 How We Use Your Data

ox999 uses the personal data it collects for specific, legitimate purposes directly connected to the delivery and improvement of its platform. We do not use your data for purposes that are incompatible with those for which it was originally collected. The principal purposes for which ox999 processes your personal data are as follows:

• Account creation and management: We use your identity and contact data to create and maintain your player account, verify your eligibility to use the platform, and communicate essential account information to you.
• Transaction processing: We use your financial data to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, to maintain accurate transaction records, and to fulfil our financial reporting obligations.
• Identity verification and KYC compliance: We use identity and verification data to confirm that you meet the age and eligibility requirements of the platform and to comply with our anti-money-laundering (AML) obligations.
• Fraud prevention and security: We use technical and usage data to detect, investigate, and prevent fraudulent activity, bonus abuse, money laundering, and other prohibited conduct described in the ox999 Terms & Conditions.
• Platform personalisation: We use usage data to personalise your ox999 experience, including surfacing cricket betting markets, slot games, and promotional offers that are relevant to your history and preferences.
• Responsible gaming monitoring: We monitor usage and betting patterns to identify signs of problem gambling and to fulfil our obligations under ox999's Responsible Gaming Policy, which may include proactively contacting players who display concerning patterns.
• Marketing and promotions: With your consent, we use your contact data to send you information about ox999 promotions, seasonal offers (such as BPL, IPL, or Eid specials), and platform updates. You may withdraw this consent at any time.
• Customer support: We use communications data to respond to your enquiries, resolve disputes, and improve our support services.
• Legal and regulatory compliance: We use your data as required to comply with applicable laws, respond to legal process, or cooperate with competent authorities in connection with lawful investigations.

ox999 will not use your personal data for automated individual decision-making that produces significant legal effects for you without providing you with an opportunity to seek human review of that decision.

3 Cookies & Tracking Technologies

ox999 uses cookies and similar tracking technologies — including web beacons, pixel tags, and local storage objects — to operate and improve the platform. A cookie is a small text file placed on your device when you visit the ox999 website. Cookies allow ox999 to recognise your device on subsequent visits, maintain your session while you are logged in, and gather analytical data about how the platform is used.

ox999 uses the following categories of cookies on its platform:

• Strictly necessary cookies: These cookies are essential for the ox999 platform to function correctly. They enable core features such as secure login sessions, account authentication, and navigation between platform sections. These cookies cannot be disabled without breaking platform functionality.
• Performance and analytics cookies: These cookies collect anonymised data about how visitors interact with ox999, including which pages are visited most frequently, how long users spend on each section, and where users encounter errors. This information is used exclusively to improve the platform.
• Functional cookies: These cookies remember your preferences — such as your preferred language, game view settings, and notification preferences — to provide a more personalised experience on return visits.
• Session security cookies: These short-lived cookies are used to protect your account session from cross-site request forgery (CSRF) and related security threats. They expire when you close your browser.

ox999 does not use third-party advertising cookies or cross-site tracking pixels that share your browsing behaviour with external advertising networks. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies may prevent parts of the ox999 platform from functioning as intended.

4 Data Sharing & Disclosure

ox999 does not sell, rent, lease, or otherwise transfer your personal data to unaffiliated third parties for their own commercial purposes. We share personal data only in the specific circumstances described below, and only to the extent necessary to fulfil the described purpose:

• Payment processors: ox999 shares financial data — such as your bKash wallet number, Nagad number, or masked card details — with our payment processing partners solely for the purpose of executing the deposit or withdrawal transaction you have initiated. Payment processors are contractually bound to use this data only for transaction processing.
• Identity verification providers: ox999 works with third-party KYC and identity verification service providers to confirm player identity and age. These providers receive only the specific data necessary to complete the verification check and are prohibited from using it for any other purpose.
• Game content providers: Certain technical data (such as session tokens and game-round identifiers) is shared with ox999's game software providers — including studios such as Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, and Ezugi — strictly for the purpose of delivering the requested game content and maintaining game-round integrity.
• Fraud prevention and security partners: ox999 may share technical and usage data with specialist fraud detection and cybersecurity service providers to protect the platform and its players from malicious activity.
• Legal and regulatory authorities: ox999 will disclose personal data to law enforcement agencies, courts, or regulatory bodies when required to do so by applicable law, valid legal process, or when ox999 reasonably believes disclosure is necessary to prevent imminent harm, fraud, or criminal activity.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of ox999's assets, your personal data may be transferred to the acquiring entity as part of that transaction. ox999 will notify affected players and ensure the acquiring party is bound by data protection obligations at least as stringent as those in this Privacy Policy before any such transfer takes place.

All third parties with whom ox999 shares personal data are required to maintain appropriate technical and organisational security measures and are permitted to use the data only for the specific purpose for which it was shared.

5 Data Security

ox999 takes data security seriously and has implemented a range of technical and organisational measures designed to protect your personal data against unauthorised access, accidental loss, disclosure, destruction, or alteration. These measures include, but are not limited to:

• SSL/TLS encryption for all data in transit between your device and ox999's servers, ensuring that your login credentials, payment details, and personal information cannot be intercepted by third parties during transmission.
• Encryption of sensitive data at rest within ox999's database infrastructure, including payment wallet identifiers and government-issued ID document data collected during KYC verification.
• Role-based access controls (RBAC) that restrict access to personal data to only those ox999 staff members who require it to perform their assigned job functions. All access is logged and regularly audited.
• Regular security audits, penetration testing, and vulnerability scanning of the ox999 platform infrastructure to proactively identify and address potential security weaknesses before they can be exploited.
• Secure password hashing using industry-standard algorithms, ensuring that even ox999 staff cannot retrieve your plain-text password. If you forget your password, it must be reset rather than recovered.
• Multi-factor authentication (MFA) options available to players for enhanced account security. ox999 encourages all players to enable MFA via their account security settings.
• Incident response procedures that define how ox999 will respond in the event of a data security breach, including timely notification to affected players and relevant authorities as required.

While ox999 takes all reasonable precautions to safeguard your personal data, no method of electronic transmission or storage is completely secure. ox999 cannot guarantee the absolute security of data transmitted over the internet. You also bear responsibility for maintaining the confidentiality of your own account credentials and for ensuring that your device is adequately protected.

6 Data Retention

ox999 retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or for as long as required by applicable law. The following general retention principles apply to the main categories of data held by ox999:

• Account and identity data: Retained for the duration of your active account and for a period of five (5) years following permanent account closure. This retention period reflects our obligations under applicable anti-money-laundering regulations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, consistent with standard financial record-keeping requirements.
• KYC and verification documents: Retained for a minimum of five (5) years from the date of verification or from the date of account closure, whichever is later.
• Usage and technical data: Retained in identifiable form for up to twenty-four (24) months from collection, after which it is anonymised or deleted. Anonymised analytical data may be retained indefinitely for platform improvement purposes.
• Customer support communications: Retained for up to three (3) years from the date of the last communication in a given support thread, to support dispute resolution and service improvement.
• Marketing consent records: Retained for the duration of your account and for a period of three (3) years following account closure or withdrawal of consent, to demonstrate compliance with consent obligations.

At the end of the applicable retention period, ox999 will securely delete or anonymise your personal data in a manner that prevents its recovery. Where technical constraints make immediate deletion impractical (for example, data held in encrypted backups), the data will be isolated from active processing and deleted at the earliest practicable opportunity.

7 Your Privacy Rights

As a player on the ox999 platform, you hold a number of rights with respect to your personal data. ox999 is committed to facilitating the exercise of these rights in a timely and transparent manner. Your rights include the following:

• Right of access: You have the right to request a copy of the personal data ox999 holds about you. Upon receiving a verified request, ox999 will provide you with a summary of your data in a structured, commonly used format within a reasonable timeframe.
• Right to rectification: If any personal data ox999 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Many details — such as your email address and phone number — can be updated directly through your account settings without contacting support.
• Right to erasure: You may request that ox999 delete your personal data where it is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent. Note that ox999 may be required to retain certain data for legal or regulatory reasons even following an erasure request; where this is the case, ox999 will inform you of the specific legal basis for retention.
• Right to object to processing: You may object to ox999 processing your personal data for direct marketing purposes at any time. You may also object to processing carried out on the basis of ox999's legitimate interests where you believe your interests override those of ox999 in a specific context.
• Right to data portability: Where ox999 processes your personal data on the basis of your consent or to fulfil a contract with you, you have the right to receive that data in a portable, machine-readable format for transfer to another service provider of your choice.
• Right to withdraw consent: Where ox999 relies on your consent as the legal basis for processing your data — for example, for sending promotional communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the rights described above, please contact the ox999 privacy team at [email protected] with the subject line "Privacy Rights Request". ox999 may ask you to verify your identity before processing your request to ensure that data is not disclosed to or altered by an unauthorised party. ox999 will respond to all verified privacy rights requests without undue delay.

8 Policy Updates & Contact

ox999 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, the services we offer, or applicable legal and regulatory requirements. The date of the most recent revision is displayed at the top of this page. Where a material change is made to this Privacy Policy, ox999 will notify registered players via their registered email address or via a prominent notice on the platform prior to the change taking effect.

Your continued use of the ox999 platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes to this Privacy Policy, you should discontinue your use of the platform and contact ox999 to arrange account closure.

If you have any questions, concerns, or complaints about this Privacy Policy or about how ox999 handles your personal data, please contact the ox999 privacy team using the details below. ox999 takes all privacy-related concerns seriously and will acknowledge your communication within two (2) business days.