agt99 Privacy
Policy & Data Protection
Your privacy matters to agt99. This policy explains exactly what personal data we collect when you use our casino and cricket betting platform, how we use it, who we share it with, and the rights you hold over your own information under applicable data protection standards.
Data We Collect
agt99 collects only the personal data that is necessary to deliver a safe, verified, and personalised gaming experience for players in Bangladesh.
When you register an account, use agt99's services, or interact with our platform in any way, we may collect and process certain categories of personal data. This section sets out a clear account of the data we collect, the sources from which it originates, and the lawful basis under which we process it.
Registration and Identity Data
When you create an agt99 account, we collect the information you provide directly during the registration process. This includes your full legal name, date of birth, residential address (including city — for example, Dhaka, Chittagong, Sylhet, or Khulna), email address, and mobile phone number. This data is necessary to establish your account, verify your identity, and comply with our Know Your Customer (KYC) obligations.
Verification and KYC Documents
As part of our identity verification process, we may collect copies of government-issued identity documents, including your National Identity Card (NID), passport, or driving licence. We may also collect proof of address documents such as utility bills or bank statements, and confirmation of payment methods used for deposits. These documents are processed solely for age verification, identity confirmation, and anti-money laundering (AML) compliance purposes.
Financial and Transaction Data
We collect records of all financial transactions conducted through your agt99 account. This includes deposit amounts, withdrawal requests, bonus credits, wagering history, game results, and the payment methods used (such as bKash, Nagad, Rocket, Upay, Visa, Mastercard, or bank transfer). We do not store full card numbers or mobile banking PINs — payment processing is handled by our certified payment partners using encrypted tokenisation.
Technical and Device Data
When you access agt99 via a web browser or mobile device, we automatically collect certain technical data. This includes your IP address, browser type and version, operating system, device identifiers, screen resolution, session timestamps, and referring URL. This data is used to maintain platform security, detect fraudulent access patterns, and improve the performance of our services.
Behavioural and Usage Data
We collect data about how you interact with the agt99 platform, including pages visited, games played, bet amounts and frequency, session duration, promotional offers viewed, and support tickets raised. This behavioural data helps us identify responsible gaming risk indicators, personalise your experience, and improve our product offering.
Identity & KYC Data
Registration details and identity documents are collected to verify your age and identity in line with our KYC obligations. No document is stored beyond what is legally required.
Financial Records
Transaction history and payment method data (bKash, Nagad, bank) are stored for AML compliance and dispute resolution. Full card numbers are never stored on agt99 servers.
Technical & Device Data
IP address, browser type, and session data are logged automatically to protect platform security and detect unauthorised access attempts.
Personal Data Categories Overview
| Data Category | Examples | Lawful Basis | Retention Period |
|---|---|---|---|
| Identity Data | Full name, date of birth, NID number | Legal obligation, Contract | 5 years post-closure |
| Contact Data | Email address, phone number, city | Contract, Legitimate interest | 5 years post-closure |
| Financial Data | Deposit/withdrawal records, payment methods | Legal obligation, Contract | 7 years post-closure |
| KYC Documents | NID scan, utility bill, bank statement | Legal obligation (AML) | 7 years post-closure |
| Technical Data | IP address, browser, device ID | Legitimate interest | 13 months rolling |
| Behavioural Data | Games played, session duration, bets placed | Legitimate interest, Consent | 2 years rolling |
| Marketing Preferences | Email opt-in status, promotion history | Consent | Until consent withdrawn |
How We Use Your Data
Every data processing activity at agt99 is tied to a specific, documented purpose. We do not process your personal data for any purpose that is incompatible with the reason it was originally collected.
agt99 uses the personal data we collect for the following clearly defined purposes. Where we rely on your consent as a lawful basis, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
Account Management and Service Delivery
We use your registration and identity data to create and maintain your player account, authenticate your login sessions, process deposits and withdrawals in Bangladeshi Taka (BDT), and deliver the games and betting services you have requested. Without this processing, agt99 cannot provide its core services.
Identity Verification and Fraud Prevention
Your identity documents and financial records are used to verify that you meet our eligibility requirements (18 years of age, single account, own-name payments), to detect and prevent fraud, and to comply with our anti-money laundering obligations. We may use automated screening tools as part of this process; however, decisions that materially affect your account (such as closure or fund withholding) are reviewed by a human member of our compliance team before being finalised.
Responsible Gaming Monitoring
agt99 analyses your behavioural and transaction data to identify patterns that may indicate problem gambling — for example, a rapid increase in bet frequency, chasing losses, or extended session durations. Where such patterns are detected, our responsible gaming team may reach out proactively to offer support tools such as deposit limits, session reminders, or cooling-off periods. This processing is carried out in your interest and forms a core part of agt99's duty of care to its players.
Marketing and Promotions
With your explicit consent, agt99 may use your contact data and preferences to send you personalised promotional offers, tournament announcements (including BPL and IPL special offers), and seasonal promotions relevant to the Bangladesh market such as Eid or Pohela Boishakh bonuses. You can withdraw your marketing consent at any time by contacting [email protected] or updating your account communication preferences.
Platform Security and Fraud Detection
Technical and device data — including IP addresses, session logs, and device fingerprints — is processed to protect the agt99 platform from unauthorised access, bot activity, and account takeover attempts. This data may be used to block access from flagged IP ranges, detect simultaneous logins from multiple devices, and identify accounts operating in violation of our Terms & Conditions.
Legal Compliance and Regulatory Reporting
agt99 is obligated by applicable law to retain certain data and, in specific circumstances, to report transaction data or account information to competent authorities. We process your data as necessary to fulfil these legal obligations, including responding to lawful requests from law enforcement or regulatory bodies.
Service Delivery
Your data powers your account: deposits, withdrawals, game access, and betting — all processed accurately and securely in BDT.
Responsible Gaming
Behavioural analytics help our team identify players who may need support, enabling proactive outreach and protective tool activation.
Fraud & AML Controls
Identity and transaction data is screened against fraud indicators and AML thresholds. Suspicious activity is escalated to our compliance team for human review.
Data Sharing & Disclosure
agt99 shares your personal data only with parties that have a legitimate and necessary role in delivering our services or meeting our legal obligations. We never sell your data.
agt99 does not disclose your personal data to third parties except in the circumstances described in this section. Where we engage third-party service providers to process data on our behalf, we do so under contractual data processing agreements that bind those providers to confidentiality and data protection standards consistent with this Privacy Policy.
Payment Service Providers
To process your deposits and withdrawals, agt99 shares the minimum necessary payment information with our certified payment partners. This includes transaction reference data and, where required, identity confirmation with providers such as bKash, Nagad, Rocket, Upay, and Visa/Mastercard acquiring banks. Payment partners receive only the data required to process the specific transaction and are prohibited from using it for any other purpose.
Game Software Providers
agt99 integrates games from third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you launch a game, your session token and account identifier are shared with the relevant studio to authenticate your session and enable gameplay. These studios are independent data controllers operating under their own privacy frameworks and gaming certifications. agt99 does not share your full identity data with game studios.
Identity Verification and KYC Partners
agt99 may engage third-party identity verification service providers to assist with the automated screening of identity documents and the matching of names against sanctions or politically exposed persons (PEP) lists. These providers process your KYC documents solely for verification purposes and are contractually prohibited from retaining or independently using the data they process on our behalf.
Legal and Regulatory Disclosure
agt99 may disclose your personal data to law enforcement agencies, government authorities, or other regulatory bodies where required to do so by applicable law, court order, or binding regulatory instruction. We will, where legally permissible, inform you of any such disclosure request before complying with it.
Business Transfers
In the event that agt99 undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may form part of the transferred assets. In such circumstances, agt99 will ensure that any acquiring party is bound by privacy obligations no less protective than those set out in this Privacy Policy, and that players are notified of any material change to data controller identity within a reasonable timeframe.
Third-Party Sharing Overview
Data is shared only with the following categories of processor:
Data Retention
agt99 retains personal data only for as long as necessary to fulfil the purpose for which it was collected or to comply with our legal and regulatory obligations.
Our data retention periods are determined by the nature of the data, the purpose for which it was collected, and the legal obligations that govern its retention. agt99 conducts periodic reviews of stored data to ensure that records are not retained beyond their required retention window.
Active Account Data
For the duration that your account remains active, agt99 retains all data necessary to deliver our services to you, including your registration details, transaction history, game activity records, and communication history with our support team. This data is kept current and accessible throughout your account's active lifetime.
Post-Closure Retention
Following the closure of your account — whether initiated by you or by agt99 — we retain certain categories of personal data for defined post-closure periods:
- Identity and KYC Documents: 7 years from account closure, in line with AML regulatory requirements.
- Financial Transaction Records: 7 years from account closure, as required for financial record-keeping compliance.
- Account Registration Data: 5 years from account closure, for dispute resolution and responsible gaming audit purposes.
- Support Communications: 3 years from the date of the communication, for quality assurance and dispute evidence purposes.
- Technical and Device Logs: 13 months on a rolling basis, regardless of account status.
- Marketing Consent Records: Retained until consent is withdrawn, then archived for 3 years as evidence of the consent lifecycle.
Anonymisation
Where the full retention period for a data category has elapsed but agt99 has a legitimate interest in retaining aggregated statistical insights, we may anonymise the data irreversibly — stripping all identifiers — and retain the anonymised record indefinitely. Anonymised data is no longer personal data and falls outside the scope of this Privacy Policy.
Early Deletion Requests
You have the right to request deletion of your personal data (see the Your Privacy Rights section below). However, agt99 cannot fulfil deletion requests where retention is required by law — for example, financial records subject to AML retention obligations. In such cases, we will delete the elements of your data that we are not legally required to retain and will restrict processing of the data we must legally keep to storage only.
Key Retention Periods
Your Privacy Rights
As an agt99 player, you have clearly defined rights over your personal data. We are committed to honouring these rights promptly and without unnecessary friction.
agt99 recognises and upholds your rights as a data subject. These rights apply to personal data we hold about you in our capacity as data controller. To exercise any of the rights listed below, contact us at [email protected] with the subject line "Privacy Rights Request". We will acknowledge your request within 5 business days and aim to fulfil it within 30 calendar days. Complex or multiple requests may take up to 90 days, in which case we will notify you of the extended timeframe.
Please note that some rights are subject to limitations where agt99 has a competing legal obligation — for example, we cannot delete financial transaction records that we are legally required to retain for AML compliance, and we cannot provide access to data that would reveal confidential fraud-detection methodologies.
Exercise Your Rights
All privacy rights requests are handled by our Data Protection team. Email [email protected] with the subject "Privacy Rights Request". Response within 5 business days, fulfilment within 30 days.
Right of Access
Request a copy of all personal data agt99 holds about you, along with details of how it is processed and shared.
Right to Rectification
Request correction of any inaccurate or incomplete personal data. Identity data corrections may require supporting documentation.
Right to Erasure
Request deletion of your personal data where no legal retention obligation applies. Also known as the "right to be forgotten".
Right to Restrict Processing
Ask agt99 to pause processing of your data while the accuracy or lawfulness of that processing is under review.
Right to Data Portability
Receive your personal data in a structured, machine-readable format (JSON or CSV) so it can be transferred to another service if you choose.
Right to Object
Object to processing based on legitimate interests — including profiling for responsible gaming monitoring or direct marketing communications.
Right re: Automated Decisions
Request human review of any automated decision that materially affects your account, such as fraud flags or KYC rejection.
Right to Withdraw Consent
Withdraw marketing consent at any time. Withdrawal does not affect processing already carried out under that consent prior to withdrawal.
Data Security
agt99 implements layered technical and organisational security measures to protect your personal data against unauthorised access, loss, or misuse.
The security of your personal data is a foundational priority at agt99. We apply a defence-in-depth approach combining industry-standard encryption, access controls, and operational security procedures to protect data at every stage of its lifecycle — in transit, in storage, and in processing.
Encryption in Transit and at Rest
All data transmitted between your device and agt99's servers is protected using TLS 1.2 or higher encryption, enforced via HTTPS on every page of the platform. Sensitive data stored in our databases — including identity documents, financial records, and KYC materials — is encrypted at rest using AES-256 encryption. Encryption keys are managed separately from the data they protect, with access strictly limited to authorised systems.
Access Controls
Access to personal data within agt99's internal systems is governed by a role-based access control (RBAC) model. Employees are granted the minimum level of data access required for their specific job function. All internal access to player data is logged and subject to periodic review. Access credentials are enforced with strong password requirements and multi-factor authentication (MFA) for all administrative systems.
Security Monitoring
agt99 operates continuous security monitoring of its platform infrastructure, including automated intrusion detection, anomaly detection on login patterns, and real-time alerting on suspicious transaction activity. Our security team reviews flagged events promptly and is empowered to act — including temporarily suspending access — to contain potential threats.
Third-Party Security Standards
All third-party vendors and payment processors integrated with agt99 are required to maintain security standards appropriate to the sensitivity of the data they process. Payment processing partners are required to be PCI DSS compliant. KYC and identity verification partners must demonstrate equivalent data protection and security certifications before onboarding.
Data Breach Response
In the unlikely event of a data breach that poses a risk to your rights and freedoms, agt99 has a documented incident response plan. We will notify affected players promptly — and relevant authorities where required — with clear information about what happened, what data was involved, and what steps we have taken to contain the breach and prevent recurrence.
TLS & AES-256 Encryption
All data in transit is protected by TLS 1.2+ and all sensitive stored data is encrypted with AES-256. Keys are managed separately from encrypted data.
Role-Based Access Control
Internal staff access is governed by least-privilege RBAC. All access to player data is logged and reviewed. MFA is mandatory for all admin systems.
24/7 Security Monitoring
Continuous intrusion detection and anomaly alerting protect the platform around the clock. Suspicious events trigger immediate review by our security team.
Policy Updates & Contact
This Privacy Policy is reviewed at least annually. When material changes are made, we will notify you clearly and give you the opportunity to review the updated terms before they take effect.
agt99 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we provide. The version number and effective date at the top of this document are updated with each revision.
Notification of Changes
Where a change to this Privacy Policy is material — for example, a new category of data being collected, a new third-party sharing arrangement, or a change to your rights — agt99 will notify registered players by email to the address associated with their account at least 14 days before the change takes effect. For non-material administrative updates (such as editorial corrections or clarifications that do not alter the substance of our data practices), changes will take effect immediately upon publication.
Continued Use
Your continued use of the agt99 platform after the effective date of a revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with a material change, you may close your account by contacting our support team before the change takes effect.
Governing Law
This Privacy Policy is governed by and construed in accordance with applicable law. agt99 is committed to handling all player data in a manner consistent with recognised international data protection standards, including the principles of lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality.
How to Contact Us
If you have any questions about this Privacy Policy, wish to exercise a privacy right, or want to raise a concern about how your data is being handled, please contact our Data Protection team:
- Email: [email protected] (subject line: "Privacy Policy Enquiry" or "Privacy Rights Request")
- Response time: We aim to acknowledge all privacy enquiries within 5 business days.
- Operating hours: Our support team operates 24/7 Bangladesh Standard Time (BST, UTC+6).
Policy Change Notifications
Material changes are emailed to registered players at least 14 days before they take effect. The version number and effective date at the top of this page are updated with every revision.
Contact Our Data Team
For privacy enquiries or rights requests, email [email protected] with a clear subject line. We acknowledge within 5 business days and respond fully within 30 days.
Explore agt99 with Confidence
Your data is protected. Now enjoy 1,200+ casino games, live cricket betting on BPL and IPL, and instant BDT withdrawals — all in a secure environment.