el99 Privacy Policy

Registration and Identity Data

When you create an el99 account, we collect your full name, date of birth, mobile phone number, email address (if provided), and a government-issued identity document (NID or passport) submitted during KYC verification. This data is required to establish your identity, confirm your age (21+), and open your account. It is stored securely and used as the primary record for account management, KYC compliance, and the resolution of any account-related disputes.

Financial and Transaction Data

We collect records of all deposits, withdrawals and wagers placed on your account, including the payment method used (e.g. bKash mobile number, Nagad account reference, bank account suffix), transaction amounts, timestamps and transaction status. Full payment account numbers are not stored by el99 — only the reference identifiers provided by the payment processor are retained. This data is necessary for payment processing, fraud prevention, KYC compliance and dispute resolution.

Gameplay and Betting Activity Data

We record all game sessions, bet histories, wagering activity and bonus usage on your account. This data is used to calculate account balances correctly, apply responsible gaming tools (such as loss limits and deposit limits), detect fraud and bonus abuse, resolve disputes, and generate the account activity history accessible from your profile. Game session logs are retained for a minimum of five years.

Technical and Device Data

When you access el99, our systems automatically record your IP address, device type, operating system, browser type and version, session duration, pages visited and referring URL. This data is used for platform security monitoring, fraud detection, technical troubleshooting and aggregate analytics (to understand how the platform is used at a population level). This data does not identify you personally when used for analytics purposes — it is analysed at an aggregated, anonymised level.

Account Provision and Management

The primary purpose for which we collect your personal data is to provide and manage your el99 account. This includes registering your account, verifying your identity and age, processing deposits and withdrawals, crediting bonuses and rewards, maintaining your bet and game history, and providing customer support. Without the data collected at registration and during account use, it is not possible to operate a functional and compliant player account.

Fraud Prevention and Platform Security

el99 uses personal data, transaction records and technical data to detect and prevent fraud, money laundering, bonus abuse, collusion and unauthorised account access. This includes automated monitoring of betting patterns and transaction activity for anomalies, cross-referencing account data against known fraud indicators, and conducting manual reviews where automated systems flag potential issues. The security of the platform and the funds of all players depends on these measures being in place.

Responsible Gaming Compliance

el99 uses account activity data, betting history and deposit and withdrawal patterns to monitor for indicators of problem gambling behaviour. Where our systems identify potential indicators — such as rapidly escalating deposit frequency, frequent deposits following losses, or requests to bypass self-imposed limits — responsible gaming interventions may be triggered, including direct contact from our support team. This processing is carried out in the interest of player welfare and is a legal and ethical obligation of operating a gambling platform.

Service Improvement and Analytics

el99 uses aggregated, anonymised data to understand how the platform is used, which game categories are most popular, where players experience technical difficulties, and how the platform's performance can be improved. This analysis is conducted at an aggregate level and does not involve identifying or profiling individual players for commercial purposes. Individual-level data is not used for platform analytics unless a specific technical or security investigation requires it.

Service Providers Acting on Our Behalf

el99 shares necessary personal data with a limited number of third-party service providers who assist in delivering the platform's services. These include payment processors (bKash, Nagad, Rocket, Upay and banking partners), game studios and technology providers (such as Evolution Gaming, Pragmatic Play, Spribe and NetEnt), KYC and identity verification service providers, and customer support platform providers. Each service provider is bound by a data processing agreement that restricts their use of your data to the specific service they provide on el99's behalf and prohibits them from using it for any other purpose.

Legal and Regulatory Obligations

el99 may be required by law to disclose personal data to relevant authorities. This includes disclosures made in response to valid court orders, regulatory investigations, anti-money laundering obligations, or requests from law enforcement agencies. Where el99 is legally permitted to notify a player of such a disclosure in advance, it will do so. Where advance notification is legally prohibited (for example, where a tipping-off restriction applies), el99 will comply with its legal obligations without prior notice to the player.

Business Transfers

In the event of a merger, acquisition, asset sale or restructuring of el99's business, personal data held about registered players may be transferred to the acquiring or successor entity as part of the assets of the business. Where such a transfer is planned, el99 will provide reasonable advance notice to registered players and will ensure that the receiving entity is bound by data protection obligations that are at least equivalent to those in this Privacy Policy.

Payment Method Data

When you deposit or withdraw via bKash, Nagad, Rocket, Upay or a Bangladeshi bank, el99 records a reference identifier for that payment method (for example, the last four digits of a mobile number or a bank account reference suffix) to enable future transactions and to link payment activity to your account for KYC and fraud prevention purposes. Full mobile wallet numbers and full bank account numbers are not stored in el99's player database. All payment data is stored in encrypted form and access is restricted to authorised personnel only.

Source of Funds Verification

As part of its anti-money laundering obligations, el99 may request documentation to verify the source of funds deposited into your account. This is a standard compliance requirement and is not an indication of any suspicion directed at a specific player. Requested documentation may include bank statements, salary slips, or other evidence of lawful income. This information is used solely for compliance purposes and is handled with the same confidentiality standards as all other personal data.

What Are Cookies

Cookies are small text files placed on your device by the el99 platform when you access it via a web browser. Cookies allow the platform to recognise your device across visits, maintain your logged-in session, remember your preferences (such as language setting), and measure how the platform is used in aggregate. el99 uses first-party cookies only — that is, cookies set by el99.pro itself — and does not use third-party advertising or tracking cookies.

Types of Cookies We Use

el99 uses the following categories of cookies: (a) Strictly Necessary Cookies — required for the platform to function, including session authentication cookies that keep you logged in during your visit. These cannot be disabled without breaking core platform functionality. (b) Functional Cookies — used to remember your preferences, such as your chosen language setting. (c) Analytics Cookies — used in aggregate to understand platform usage patterns. These are anonymised and do not identify individual users. el99 does not use advertising cookies, retargeting cookies, or any cookies that track your activity outside el99.pro.

Managing Your Cookie Preferences

You may control and manage cookies through your browser settings. Most modern browsers allow you to block all cookies, accept only first-party cookies, or delete existing cookies. Please be aware that blocking strictly necessary cookies will prevent the el99 platform from functioning correctly — for example, you will not be able to remain logged in. Detailed instructions for managing cookies are available in the help documentation of your specific browser (Chrome, Firefox, Safari, Samsung Internet, etc.).

Technical Security Measures

el99 employs industry-standard technical security measures to protect your personal data. These include SSL encryption for all data transmitted between your device and the platform, encrypted storage of personal data and financial records in our databases, access controls that restrict database access to authorised personnel only, regular security audits and vulnerability assessments of our systems, and automated monitoring for unusual account activity that may indicate unauthorised access or data breach attempts.

Organisational Security Measures

In addition to technical measures, el99 implements organisational controls to protect personal data. Access to personal data is limited to employees and contractors who need it to perform their specific job function. All personnel with access to personal data are subject to confidentiality obligations. el99 conducts periodic training for staff on data protection responsibilities. Third-party service providers with access to player data are subject to contractual data security obligations and are audited periodically.

Data Breach Response

In the event of a data security breach that affects your personal data, el99 will take immediate steps to contain the breach, assess its scope and impact, and remediate the vulnerability. Where the breach is likely to result in a risk to affected players, el99 will notify those players via the contact details on their account as soon as is practicable after the breach is identified. The notification will describe the nature of the breach, the categories of data affected, the steps el99 has taken, and any actions you should take to protect yourself.

Right of Access

You have the right to request a copy of the personal data that el99 holds about you. To submit an access request, contact our support team at [email protected] with the subject line "Data Access Request", including your registered mobile number or email address for identity verification. We will respond within 30 days of receiving and verifying your request. The data will be provided in a readable electronic format.

Right to Correction

If you believe that personal data el99 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For most account details (such as mobile number or email address), you can update your information directly from your account settings. For identity data submitted during KYC (such as name or date of birth), corrections require submission of updated documentation and are processed by our compliance team. We will action correction requests as promptly as possible.

Right to Deletion

You may request that el99 delete the personal data it holds about you. We will action deletion requests subject to our legal obligations to retain certain categories of data. Specifically, transaction records, KYC documentation and account activity logs must be retained for a minimum period to comply with anti-money laundering regulations and to enable dispute resolution. Where deletion in full is not possible, we will explain what data is retained, the legal basis for retention, and the earliest date on which it can be deleted.

Right to Withdraw Marketing Consent

Where you have opted in to receive marketing communications from el99, you may withdraw that consent at any time. You can update your marketing preferences directly in your account settings under "Communication Preferences", or by contacting our support team. Withdrawal of marketing consent does not affect your account status or your ability to use any part of the platform. Transactional messages — such as deposit confirmations, withdrawal notifications and security alerts — are not affected by your marketing consent setting and will continue to be sent as required.

Retention Periods

el99 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by law. As a general guide: account registration and identity data is retained for the duration of your account and for a minimum of five years after account closure; transaction and financial records are retained for a minimum of five years from the date of the transaction; game session logs are retained for a minimum of five years; marketing consent records are retained for three years from the date of last consent or withdrawal. Data that is no longer required for any lawful purpose is securely deleted or anonymised.

Changes to This Privacy Policy

el99 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations or the services we offer. Where changes are material — for example, changes to the categories of data we collect, the purposes for which we use it, or the third parties with whom we share it — el99 will provide a minimum of 14 days' advance notice to registered players via the contact details on their account before the change takes effect. For minor changes (such as clarifications of existing practice or corrections of typographical errors), el99 may update the policy without advance notice, with the revised version taking effect immediately upon publication to this page.

Contact Us About Privacy

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how el99 has handled your personal data, please contact our support team. You can reach us by email at [email protected]. Please include your registered mobile number or email address in your message so that we can verify your identity and respond to your request promptly. We aim to respond to all privacy-related enquiries within 5 business days.