ta99 Privacy Policy

1 Introduction

ta99 ("we", "our", "us") is committed to protecting and respecting the privacy of every individual who uses our online betting and casino platform. This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us.

This policy applies to all services offered through the ta99 platform, including sports betting, live casino, slot games, crash games, and all associated account, payment, and support functions. It applies to all players accessing the ta99 platform from Bangladesh and any other jurisdiction in which ta99 operates.

Please read this policy carefully to understand our views and practices regarding your personal data and how we treat it. By accessing or using the ta99 platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described in this policy, you must discontinue use of the platform.

2 Data Controller

For the purposes of applicable data protection legislation, ta99 is the data controller responsible for the personal data of its registered players and platform visitors. As data controller, ta99 determines the purposes and means by which your personal data is processed.

If you have any questions about how ta99 handles your personal data, or if you wish to exercise any of your data subject rights as described in Section 11 of this policy, you may contact our Data Protection team using the contact details provided in Section 15.

3 Data We Collect

ta99 collects and processes the following categories of personal data about you:

3.1 Identity Data

• Full legal name as it appears on your government-issued identity document
• Date of birth
• Gender (where provided)
• Copies of identity documents submitted during KYC verification (National ID Card, passport, driving licence)
• Selfie or live-verification photograph (where required for enhanced KYC)

3.2 Contact Data

• Email address
• Mobile phone number
• Residential address (where provided for address verification)
• City and district within Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Khulna)

3.3 Financial Data

• Mobile financial service account details (bKash, Nagad, Rocket, Upay account numbers — not full account credentials)
• Transaction history: deposit amounts, withdrawal amounts, dates and times
• Source of funds documentation (where requested for AML compliance)

3.4 Account and Gaming Data

• ta99 username and encrypted password hash
• Account creation date and login history (timestamps and IP addresses)
• Betting history: game types played, stakes placed, outcomes, and winnings
• Bonus and promotion history
• Responsible gaming settings: deposit limits, self-exclusion periods, session time limits
• Customer support communications: live chat transcripts, email correspondence

3.5 Technical and Usage Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser type and version
• Pages visited on the ta99 platform and time spent on each page
• Referral source (how you arrived at the ta99 website)
• Session duration and click-stream data
• Cookie identifiers and similar tracking technologies (see Section 8)

4 How We Collect Your Data

ta99 collects personal data through the following methods:

4.1 Directly From You

The majority of personal data ta99 holds about you is information you provide directly when you register for an account, complete KYC verification, make a deposit or withdrawal, contact our customer support team, or update your account profile settings.

4.2 Automatically Through Your Use of the Platform

When you visit and use the ta99 platform, we automatically collect technical and usage data including your IP address, device information, browsing behaviour within the platform, and session data. This data is collected using server logs, cookies, and similar tracking technologies as described in Section 8.

4.3 From Third-Party Payment Providers

When you initiate a deposit or withdrawal via bKash, Nagad, Rocket, or Upay, we receive transaction confirmation data from those payment providers. This includes the transaction reference number, the amount, and the mobile number associated with your mobile financial services account. ta99 does not receive your full mobile banking PIN or credentials.

4.4 From Identity Verification Services

Where ta99 uses third-party identity verification services to support the KYC process, those services may return verification outcome data (confirmed/not confirmed) and, in some cases, data points extracted from submitted documents. ta99 selects identity verification partners who are contractually bound to process data only on our behalf and only for the purpose of identity verification.

5 Legal Basis for Processing

ta99 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contract Performance: Processing is necessary to perform our contract with you — specifically, to operate your ta99 account, process transactions, settle bets, and deliver the gaming services you have requested.
• Legal Obligation: Processing is required to comply with our legal obligations, including anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements, and age verification obligations.
• Legitimate Interests: Processing is necessary for ta99's legitimate business interests, provided those interests are not overridden by your rights and interests. This includes fraud prevention, platform security, responsible gaming monitoring, and improving the quality of our services.
• Consent: Where ta99 relies on your consent as the legal basis for processing — for example, for sending you direct marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

6 How We Use Your Personal Data

ta99 uses the personal data we collect for the following specific purposes:

6.1 Account Management

To create and maintain your ta99 account, verify your identity and age, process account updates, and handle account closure requests.

6.2 Service Delivery

To process deposits and withdrawals via bKash, Nagad, Rocket, and Upay; to settle sports bets and casino game results; to apply bonuses and promotions to your account; and to deliver all gaming services available on the ta99 platform.

6.3 Regulatory Compliance

To comply with KYC and AML legal obligations, including verifying that all players are aged 21 or above, confirming the source of deposited funds where required, and maintaining transaction records for the legally prescribed retention period.

6.4 Fraud and Security

To detect, investigate, and prevent fraudulent transactions, account compromise, money laundering, collusion, bot usage, and any other form of platform abuse. Security monitoring is an ongoing process that applies to all accounts.

6.5 Responsible Gaming

To monitor gaming patterns for indicators of problem gambling behaviour; to apply and enforce self-exclusion periods, deposit limits, and session time limits set by you; and to proactively reach out to players whose behaviour patterns suggest a potential gambling concern.

6.6 Customer Support

To respond to your enquiries, resolve complaints, provide account assistance, and maintain records of support interactions for quality assurance and dispute resolution purposes.

6.7 Marketing Communications

Where you have provided consent, to send you promotional offers, bonus notifications, game recommendations, and news about the ta99 platform. You may opt out of marketing communications at any time by contacting our support team or using the unsubscribe link in any marketing email.

6.8 Platform Improvement

To analyse aggregated usage data to understand how players interact with the ta99 platform, identify areas for improvement, test new features, and optimise the overall player experience. Where possible, this analysis uses anonymised or pseudonymised data.

7 Data Sharing and Disclosure

ta99 does not sell, rent, or trade your personal data. We share your data only in the following limited circumstances:

7.1 Payment Service Providers

We share the minimum necessary transaction data with bKash, Nagad, Rocket, and Upay to process your deposits and withdrawals. These providers receive only the information required to execute the specific transaction. They are not permitted to use your data for their own marketing purposes in connection with ta99 transactions.

7.2 Identity Verification Partners

We share identity document images and personal data with KYC verification service providers solely for the purpose of verifying your identity as part of our compliance obligations. These partners act as data processors under our instruction and are contractually prohibited from using your data for any other purpose.

7.3 Fraud Prevention and Security Services

We may share data with fraud detection and cybersecurity service providers who assist us in identifying and preventing fraudulent activity on the ta99 platform. Data shared for this purpose is limited to technical identifiers and transaction patterns, not full identity records.

7.4 Legal and Regulatory Authorities

ta99 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where we are legally required to do so, where disclosure is necessary to protect the safety of a person, or where disclosure is required to enforce our legal rights or defend against legal claims.

7.5 Business Transfers

In the event of a merger, acquisition, reorganisation, or sale of all or substantially all of ta99's assets, your personal data may be transferred to the acquiring entity as part of that transaction. In such circumstances, ta99 will take reasonable steps to ensure that your data continues to be protected in accordance with this Privacy Policy and that you are notified of any material change in data controller.

8 Cookies and Tracking Technologies

8.1 What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They allow the website to recognise your device on subsequent visits, remember your preferences, and collect data about how you interact with the platform. ta99 uses cookies and similar tracking technologies including web beacons and local storage objects.

8.2 Types of Cookies We Use

• Strictly Necessary Cookies: These cookies are essential for the ta99 platform to function correctly. They enable core features such as account login sessions, security tokens, and transaction processing. These cookies cannot be disabled without impairing platform functionality.
• Functional Cookies: These cookies remember your preferences such as language settings, preferred payment method, and display options. They improve your experience but are not essential.
• Analytics Cookies: These cookies collect anonymised or pseudonymised data about how players use the ta99 platform — which pages are visited most, where players enter and exit, and how they navigate between features. This data is used to improve the platform.
• Security Cookies: These cookies support fraud detection and account security monitoring by helping ta99 identify unusual login patterns or suspicious transaction sequences.

8.3 Managing Cookies

You may control cookie preferences through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, or receive a notification before a cookie is placed. Please note that disabling strictly necessary cookies will affect your ability to use key features of the ta99 platform, including account login and payment processing. ta99 does not currently support a cookie preference centre but may introduce one in a future update.

9 Data Retention

ta99 retains personal data only for as long as is necessary to fulfil the purposes described in this Privacy Policy or to comply with applicable legal and regulatory obligations. The following general retention guidelines apply:

After the applicable retention period has expired, personal data is either securely and permanently deleted or irreversibly anonymised so that it can no longer be associated with an individual. ta99 conducts periodic data audits to ensure compliance with these retention schedules.

10 Data Security

ta99 takes the security of your personal data seriously and has implemented a range of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, destruction, or disclosure.

10.1 Technical Measures

• TLS/SSL Encryption: All data transmitted between your device and the ta99 platform is encrypted using Transport Layer Security (TLS). The padlock icon in your browser confirms an active encrypted connection.
• Encryption at Rest: Sensitive personal data stored in ta99's databases is encrypted using AES-256 encryption.
• Password Security: Account passwords are stored as one-way hashed values using industry-standard algorithms. ta99 staff cannot read your password in plain text.
• Access Controls: Access to personal data within ta99's systems is restricted to authorised personnel on a strict role-based need-to-know basis. All access is logged and monitored.
• Intrusion Detection: ta99 operates automated intrusion detection systems to identify and respond to suspicious activity on our infrastructure in real time.

10.2 Organisational Measures

• Staff with access to personal data receive regular data protection and information security training.
• Third-party vendors who process personal data on ta99's behalf are subject to rigorous due diligence and are required to demonstrate adequate security standards before being engaged.
• ta99 maintains an incident response plan to manage and respond to any data security incidents in a timely and structured manner.

10.3 Data Breach Notification

In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, ta99 will notify affected individuals without undue delay, providing details of the nature of the breach, the data affected, the likely consequences, and the measures ta99 has taken or proposes to take to address the breach.

11 Your Data Subject Rights

Subject to applicable law, you have the following rights with respect to the personal data that ta99 holds about you:

• Right of Access: You have the right to request a copy of the personal data ta99 holds about you, along with information about how it is being processed. This is commonly known as a Subject Access Request (SAR).
• Right to Rectification: If any personal data ta99 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Many basic details (such as your email address or phone number) can be updated directly through your ta99 account settings.
• Right to Erasure: In certain circumstances, you have the right to request that ta99 delete your personal data. This right is not absolute — ta99 may be required to retain certain data to comply with legal obligations (for example, AML recordkeeping requirements) even after an account closure.
• Right to Restriction of Processing: In certain circumstances, you have the right to request that ta99 restrict the processing of your personal data — for example, while a dispute regarding accuracy is being resolved.
• Right to Data Portability: Where ta99 processes your personal data on the basis of your consent or contract performance, and where the processing is carried out by automated means, you have the right to receive your data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where ta99 relies on legitimate interests as the legal basis. You also have an unconditional right to object to direct marketing at any time.
• Right to Withdraw Consent: Where ta99 relies on your consent as the legal basis for any processing activity, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing that took place before your withdrawal.

To exercise any of these rights, please contact our support team via live chat or by emailing [email protected]. We will respond to all verifiable requests within 30 days. In complex cases, this period may be extended by a further 60 days, in which case we will inform you of the extension and the reason for it within the initial 30-day period.

ta99 may need to verify your identity before processing a data subject rights request to ensure that personal data is not disclosed to, or acted upon by, an unauthorised person.

12 Children's Privacy

The ta99 platform is strictly intended for adults aged 21 years and above. ta99 does not knowingly collect personal data from any person under the age of 21. If we become aware that we have inadvertently collected personal data from a person under 21, we will take immediate steps to delete that data and close the associated account.

Parents and guardians who are concerned that a person under 21 in their household may have created a ta99 account should contact our support team immediately via live chat or by emailing [email protected]. We will investigate and take appropriate action, including account closure and deletion of any data held, as quickly as possible.

We also strongly encourage parents and guardians to use parental control software to prevent underage individuals from accessing any online gambling platform, including ta99.

13 Third-Party Links

The ta99 platform may contain links to third-party websites or services, for example links to payment provider information pages or game studio websites. This Privacy Policy applies solely to the ta99 platform. ta99 is not responsible for the privacy practices of any third-party websites and we have no control over how those sites collect, use, or protect your personal data.

We encourage you to review the privacy policy of any third-party website you visit before providing any personal information to that site. The presence of a link on the ta99 platform does not constitute an endorsement of that third party's privacy practices.

14 Policy Amendments

ta99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. All amendments will be posted on this page with an updated effective date prominently displayed at the top of the policy.

Where a proposed amendment is material — meaning it significantly changes how we collect, use, or share your personal data — ta99 will provide advance notice to registered players via email at least 14 days before the amendment takes effect. In such cases, continued use of the ta99 platform after the effective date of the amendment will constitute your acceptance of the updated policy.

We encourage you to review this Privacy Policy periodically so that you remain fully informed about how ta99 protects your personal data. If you disagree with any amendment to this policy, you should cease using the ta99 platform and may request account closure by contacting our support team.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way ta99 processes your personal data, please contact our Data Protection and Support team through any of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the ta99 platform
• Email: [email protected]

For formal data subject rights requests (access, rectification, erasure, portability, restriction, or objection), please email us with the subject line "Data Rights Request" and include your registered ta99 username and the specific right you wish to exercise. We will acknowledge receipt of your request within 3 business days and aim to fulfil all requests within the 30-day statutory timeframe.

ta99 takes all privacy-related enquiries seriously and will respond to every message we receive. Where a concern cannot be resolved directly through our support team, we will escalate the matter to our Data Protection officer for further review.