cy99 Privacy Policy

This Privacy Policy sets out how cy99 collects, uses, stores, shares, and protects the personal data of individuals who access or use the cy99 platform, including the website at cy99.io, all related mobile interfaces, and all associated services including casino gaming, sports betting, customer support, and payment processing.

This Privacy Policy should be read alongside the cy99 Terms & Conditions, which govern the contractual relationship between you and cy99. By registering an account with cy99 or otherwise using the platform, you acknowledge that you have read and understood this Privacy Policy.

cy99 is the data controller responsible for the personal data collected through the cy99 platform. As data controller, cy99 determines the purposes and means by which personal data is processed. All data-related enquiries, access requests, and complaints should be directed to the cy99 support team using the contact details provided in Section 14 of this policy.

cy99 may appoint third-party data processors — such as payment service providers, identity verification services, and game content suppliers — to process personal data on its behalf. These processors act strictly under cy99's instructions and are bound by confidentiality and data protection obligations consistent with this Privacy Policy.

cy99 collects personal data in the following categories, depending on how you interact with the platform:

• Registration data: Full legal name, date of birth, email address, and mobile phone number provided when creating a cy99 account.
• Identity verification data: Copies of government-issued identity documents (national ID, passport, or driving licence) submitted as part of Know Your Customer (KYC) procedures.
• Financial data: Payment method details including mobile banking account numbers (bKash, Nagad, Rocket, Upay) and card numbers (Visa, Mastercard) used to process deposits and withdrawals. Full card numbers are never stored on cy99 servers — only tokenised references provided by the payment processor.
• Transaction data: Records of all deposits, withdrawals, bets placed, game results, and bonus claims associated with your cy99 account.
• Technical data: IP address, device type, browser type and version, operating system, session timestamps, and other technical identifiers collected automatically when you access the cy99 platform.
• Usage data: Pages visited, games played, betting patterns, session duration, and feature interactions recorded to improve platform performance and personalise your experience.
• Communications data: Records of live chat conversations, email correspondence, and WhatsApp messages exchanged with the cy99 customer support team.
• Marketing preferences: Your opt-in or opt-out status for cy99 promotional communications, including email newsletters and SMS notifications.

cy99 does not collect special categories of sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, unless specifically required by applicable law for identity verification purposes.

cy99 uses the personal data it collects for the following purposes:

• Account management: Creating, maintaining, and administering your cy99 player account, including processing deposits, withdrawals, and bonus claims.
• Identity verification: Confirming that you meet the eligibility requirements set out in the cy99 Terms & Conditions, including age verification (21+) and KYC compliance.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, money laundering, and other forms of abuse on the cy99 platform.
• Legal compliance: Meeting cy99's obligations under applicable anti-money laundering, counter-terrorism financing, and data protection laws.
• Customer support: Responding to your enquiries, resolving disputes, and providing technical assistance via live chat, email, and WhatsApp.
• Platform improvement: Analysing usage patterns and technical performance data to improve the cy99 platform, fix bugs, and develop new features.
• Personalisation: Tailoring game recommendations, promotional offers, and platform content to your preferences and playing history, where you have consented to this.
• Marketing communications: Sending promotional emails, SMS messages, and platform notifications about cy99 bonuses, tournaments, and new game releases, where you have opted in to receive such communications.
• Responsible gaming: Monitoring account activity to identify patterns consistent with problem gambling behaviour, in support of cy99's responsible gaming obligations.

cy99 processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and cy99, including account creation, payment processing, and game operation.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering regulations and age verification requirements.
• Legitimate interests: Processing for fraud prevention, platform security, and improving the cy99 service, where these interests are not overridden by your rights and freedoms.
• Consent: Processing for marketing communications and personalisation, which is carried out only where you have given explicit opt-in consent. You may withdraw this consent at any time without affecting your account.

cy99 does not sell, rent, or trade your personal data. cy99 may share your personal data with the following categories of trusted third parties, strictly as necessary to operate the platform:

• Payment processors: bKash, Nagad, Rocket, Upay, and card processing networks (Visa, Mastercard) receive the minimum data necessary to execute and verify payment transactions.
• Identity verification providers: Third-party KYC services that assist cy99 in verifying player identity and age documentation.
• Game content providers: Licensed game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive session tokens and anonymised player data to deliver their games. These providers do not receive your full personal profile.
• IT and hosting providers: Cloud infrastructure and server management services used to host and maintain the cy99 platform securely.
• Legal and regulatory authorities: cy99 will disclose personal data to law enforcement or regulatory bodies where required to do so by applicable law, court order, or binding governmental request.

All third-party processors engaged by cy99 are subject to contractual data processing agreements that require them to protect personal data in accordance with standards consistent with this Privacy Policy.

The cy99 platform serves players primarily in Bangladesh. However, some of cy99's technology infrastructure and third-party service providers may be located outside Bangladesh. Where personal data is transferred internationally, cy99 ensures that appropriate safeguards are in place — such as contractual data protection clauses — to protect your information to a standard at least equivalent to that described in this Privacy Policy.

By registering a cy99 account and accepting this Privacy Policy, you acknowledge and consent to the international transfer of your personal data for the purposes described in this policy.

cy99 uses cookies and similar tracking technologies on the cy99 platform to ensure the site functions correctly, to remember your preferences, and to analyse how the platform is used. The following categories of cookies may be set:

• Strictly necessary cookies: Required for the platform to function. These cannot be disabled and do not collect personal data for marketing purposes. Examples include session authentication cookies and security tokens.
• Functional cookies: Remember your language preferences, login status, and display settings to personalise your experience on the cy99 platform.
• Analytics cookies: Collect anonymised data about how players navigate the cy99 platform, which pages are most visited, and where technical errors occur. This data is used to improve platform performance.
• Marketing cookies: Used to deliver relevant promotional content and track the effectiveness of cy99's marketing campaigns. These cookies are only set where you have given prior consent.

You may manage your cookie preferences through your browser settings at any time. Please note that disabling functional or strictly necessary cookies may affect the performance and usability of the cy99 platform.

cy99 retains personal data for no longer than is necessary to fulfil the purpose for which it was collected, subject to the following minimum retention periods:

• Account and transaction data: Retained for a minimum of five years following account closure, to comply with anti-money laundering legislation and financial record-keeping obligations.
• Identity verification documents: Retained for a minimum of five years following the date of submission, or longer if required by applicable law.
• Customer support communications: Retained for three years following the closure of the relevant support case.
• Marketing consent records: Retained for the duration of your account plus two years, to demonstrate compliance with consent obligations.
• Technical and usage logs: Retained for up to 12 months, after which they are anonymised or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an individual player.

cy99 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and cy99 servers.
• Encryption of sensitive data at rest, including payment tokens and identity document references.
• Role-based access controls ensuring that cy99 staff can only access personal data to the extent required for their specific job function.
• Regular security audits and vulnerability assessments of the cy99 platform infrastructure.
• Incident response procedures to detect, contain, and report data security breaches in accordance with applicable law.

While cy99 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are encouraged to use a strong, unique password for your cy99 account and to contact support immediately if you suspect any unauthorised access.

As described in the "Your Data Rights at cy99" section above, you hold the following rights in relation to the personal data cy99 holds about you: the right of access, the right to rectification, the right to erasure, the right to data portability, the right to restrict processing, and the right to object to processing.

To exercise any of these rights, submit a written request to the cy99 support team at [email protected] with the subject line "Data Rights Request". cy99 will acknowledge your request within 72 hours and respond in full within 30 calendar days. In cases of complexity or volume, this period may be extended by a further 60 days, in which case cy99 will notify you of the extension and the reason for it.

cy99 will not charge a fee for handling data rights requests unless the request is manifestly unfounded, excessive, or repetitive, in which case a reasonable administrative fee may be applied.

The cy99 platform is strictly intended for adults aged 21 and above. cy99 does not knowingly collect personal data from any individual under the age of 21. If cy99 discovers or is notified that personal data has been collected from a person under the age of 21, that data will be permanently deleted and the associated account will be closed immediately.

If you are a parent or guardian and believe that a minor has registered a cy99 account using your contact details or payment method, please contact the cy99 support team immediately at [email protected] so that the matter can be investigated and resolved promptly.

cy99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, or the way the cy99 platform operates. Material changes to this Privacy Policy will be communicated to registered players by email and/or by a prominent notice on the cy99 platform at least 14 days before the changes take effect.

The version of the Privacy Policy in force at any given time is identified by the "Last updated" date shown at the top of this document. Continued use of the cy99 platform following the effective date of any revised Privacy Policy constitutes acceptance of the revised terms. If you do not accept the revised Privacy Policy, you must cease using the platform and contact support to close your account.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or wish to raise a complaint about the way cy99 has handled your personal data, please contact the cy99 support team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 via the cy99 platform
• WhatsApp: +880 1700 000000 (WhatsApp only — no voice calls)
• Subject line for data requests: "Data Rights Request" or "Privacy Complaint"

cy99 aims to resolve all privacy-related enquiries within 30 calendar days of receipt. If you are not satisfied with cy99's response to your complaint, you may have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.