tu99 Privacy Policy

1. Introduction

tu99 (referred to in this policy as "we", "us", or "our") is committed to protecting the privacy and personal data of every registered player and visitor to the tu99 platform at tu99.vip. This Privacy Policy describes the types of personal information we collect, the purposes for which that information is used, the circumstances under which it may be shared with third parties, and the rights available to you as a data subject. This policy applies to all users of the tu99 platform, including players who access tu99 via mobile browser from Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, and other parts of Bangladesh.

By registering an account with tu99 or by continuing to use the tu99 platform after this policy has been updated, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any aspect of this policy, you should discontinue use of tu99 and may contact us to request account closure. This Privacy Policy should be read alongside our Terms and Conditions, which govern the overall relationship between tu99 and registered players.

2. Information We Collect

tu99 collects personal data through several means: directly from you when you register or use the platform, automatically through your use of the platform (including device and session data), and from third-party partners such as payment processors and identity verification services. The categories of personal data we collect, and the context in which each category is collected, are set out in the table below.

Where you choose not to provide mandatory personal data (such as identity or contact information required for KYC), tu99 may be unable to open or maintain an account for you, process withdrawals, or provide certain features of the platform. Optional data that you decline to provide will not affect your access to the core platform, but may affect eligibility for certain promotions.

3. How We Use Your Information

tu99 processes your personal data only for specific, legitimate purposes. We do not process personal data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which we use your personal data are listed below.

• ▸Account creation and management: To register your account, verify your identity through KYC, and maintain your account profile including transaction history and game records.
• ▸Payment processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, and card networks, and to reconcile your account balance accurately.
• ▸Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, money laundering, underage access, duplicate accounts, and other prohibited activities using automated risk-scoring tools.
• ▸Customer support: To respond to support queries, complaints, and account-related requests submitted by players, and to maintain a record of support interactions for quality and dispute resolution purposes.
• ▸Responsible gaming compliance: To monitor gameplay patterns and account activity for indicators of problem gambling, and to apply self-exclusion, deposit limits, and session restrictions when requested by the player or required by our responsible gaming obligations.
• ▸Marketing communications (with consent only): To send promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications. Players may withdraw marketing consent at any time by contacting support.

4. Legal Basis for Processing

tu99 processes personal data on the following legal bases, depending on the nature and purpose of the processing activity:

• ▸Contractual necessity: Processing required to register your account, verify your identity, process payments, and deliver the platform services you have signed up for. Without this processing, tu99 cannot provide the service.
• ▸Legal obligation: Processing required to comply with anti-money laundering (AML) rules, KYC obligations, fraud reporting requirements, and other applicable legal obligations.
• ▸Legitimate interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and improving platform performance — where such processing does not override your rights and interests.
• ▸Consent: Processing of your data for direct marketing purposes, where you have given explicit opt-in consent. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.

5. Sharing Your Information

tu99 does not sell, rent, or trade your personal data to any third party. Your personal data may be shared with carefully selected third parties only in the specific circumstances described in this section, and only to the extent necessary for the stated purpose.

Circumstances under which data may be shared with third parties include:

• ▸Payment service providers: bKash, Nagad, Rocket, Upay, and card networks (Visa, Mastercard) receive only the minimum transaction data required to process your deposit or withdrawal. These providers operate under their own privacy policies and are bound by applicable financial data security standards.
• ▸Identity verification partners: Third-party KYC service providers who assist tu99 in verifying the identity and age of new players using Bangladesh NID or passport data. These providers are contractually bound to use your data solely for verification purposes.
• ▸Game content providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session and gameplay data to ensure game integrity and technical performance. These providers do not receive your identity or payment data.
• ▸Legal and regulatory authorities: tu99 may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required to do so by applicable law, a valid court order, or regulatory obligation. tu99 will only provide the minimum data necessary to satisfy the legal requirement.

6. Payment Data and Third-Party Processors

When you make a deposit or request a withdrawal via bKash, Nagad, Rocket, or Upay, the transaction is routed through the respective payment provider's secure infrastructure. tu99 receives a transaction confirmation and reference number from the payment provider but does not receive or store your mobile banking PIN, bKash/Nagad password, or full bank account credentials. All payment data exchanged between your device and tu99's servers is protected by 256-bit SSL/TLS encryption.

If a deposit or withdrawal transaction fails or is disputed, tu99 may need to share your transaction reference number and account details with the relevant payment provider to investigate and resolve the issue. In such cases, data sharing is strictly limited to what is necessary to resolve the specific transaction dispute.

7. Cookies and Tracking Technologies

tu99 uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your session, and analyse aggregate usage patterns to improve platform performance. Cookies are small text files stored on your device by your browser. tu99 does not use cookies to deliver third-party advertising or to track your activity across unrelated websites.

The following categories of cookies are used on tu99:

• ▸Strictly necessary cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during your visit, security tokens that protect against cross-site request forgery, and preference cookies that remember your language setting. These cookies cannot be disabled without breaking core platform functionality.
• ▸Analytics cookies: Used to collect anonymised information about how players use tu99, including which pages are visited most frequently, how long sessions last, and what device types are most common. This data is aggregated and cannot be used to identify individual players. Analytics data helps tu99 identify and fix usability issues on Android and iOS mobile browsers used by players in Bangladesh.
• ▸Functional cookies: Allow tu99 to remember choices you have made on the platform, such as your preferred deposit method (bKash, Nagad, etc.) and notification preferences, so you do not need to re-enter these settings each time you log in.

You may control cookie behaviour through your mobile browser settings. Most Android and iOS browsers allow you to block or delete cookies. Please note that blocking strictly necessary cookies will prevent tu99 from functioning correctly and may result in you being logged out automatically. Deleting analytics or functional cookies will not prevent you from using tu99 but may affect your experience.

8. Data Retention

tu99 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or for as long as required by applicable law or regulatory obligation. The following general retention periods apply: active account data (identity, contact, financial, and gameplay records) is retained for the lifetime of your account and for a minimum of five years following permanent account closure, in accordance with standard anti-money laundering record-keeping requirements. Technical data such as IP logs and session records is retained for a shorter period — typically 12 months — unless required for an active fraud investigation or legal proceeding.

When you request account closure, tu99 will deactivate your account and remove it from active systems within 30 days. Certain data categories will be retained in secure archived storage beyond the account closure date where required by law (e.g. financial transaction records for AML compliance). Data held solely for marketing purposes will be deleted promptly upon receipt of a valid opt-out or erasure request.

9. Your Rights Over Your Personal Data

As a player on tu99, you hold the following rights in relation to your personal data. These rights may be subject to certain limitations where tu99 has a legal obligation to retain or process data (for example, AML record-keeping requirements). To exercise any of the rights listed below, please contact tu99 support via email at [email protected]. tu99 will acknowledge your request within 5 working days and aim to resolve it within 30 days.

• ▸Right of access: You have the right to request a copy of the personal data tu99 holds about you. tu99 will provide this in a commonly used electronic format.
• ▸Right of rectification: You have the right to request that inaccurate or incomplete personal data be corrected. You may update basic account information (mobile number, email) directly from your account settings; for identity data updates, contact support.
• ▸Right to erasure: You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you withdraw consent for marketing data. This right does not apply where tu99 is required to retain data by law.
• ▸Right to restriction: You have the right to request that tu99 restrict processing of your data in certain circumstances — for example, while the accuracy of data you have disputed is being verified.
• ▸Right to data portability: Where processing is based on your consent or a contract with you, and is carried out by automated means, you have the right to receive your data in a structured, commonly used, machine-readable format.
• ▸Right to object: You have the right to object to processing of your personal data carried out on the basis of tu99's legitimate interests, including profiling for responsible gaming purposes. You also have an unconditional right to object to processing of your data for direct marketing at any time.

To exercise any of the rights listed above, contact tu99 support at [email protected] with the subject line "Data Rights Request" and your registered mobile number or email address for account verification. tu99 may need to verify your identity before processing a data rights request to protect against unauthorised access to another player's data.

10. Data Security

tu99 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include 256-bit SSL/TLS encryption for all data in transit between your device and tu99's servers, encrypted storage of sensitive personal data at rest, access controls limiting internal staff access to personal data on a strict need-to-know basis, and regular security reviews of our platform infrastructure.

In the event of a personal data breach that poses a risk to the rights and freedoms of affected players, tu99 will take immediate steps to contain the breach, assess its scope and impact, and notify affected players without undue delay. tu99 will document all data breaches in accordance with its internal incident management procedures.

11. Children's Privacy

tu99 is strictly an adults-only platform. Players must be 21 years of age or older to register and use tu99. tu99 does not knowingly collect, process, or retain personal data belonging to individuals under the age of 21. Where tu99 identifies that personal data has been submitted by or on behalf of a person under 21 — whether through KYC verification, a parental complaint, or any other means — the associated account will be immediately closed, all personal data will be deleted to the extent permitted by law, and any winnings will be voided. Parents and guardians who believe that a minor may be using tu99 should contact [email protected] immediately.

12. Changes to This Privacy Policy

tu99 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or platform functionality. When material changes are made, tu99 will use reasonable efforts to notify registered players via the platform or by email to the address on their account. The effective date of the most recent version of this policy is shown at the top of this page.

Continued use of tu99 following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this policy periodically to stay informed about how tu99 protects your personal data. The current version will always be accessible at tu99.vip/privacy-policy.

13. Contact and Data Enquiries

If you have any questions, concerns, or formal complaints regarding this Privacy Policy or the way tu99 handles your personal data, please contact our support team. We are committed to resolving privacy enquiries promptly and transparently. Our support team is available 24/7 and serves players across Bangladesh, including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar.