cy99 Privacy Policy

1. Introduction

This Privacy Policy describes how cy99 ("we", "us", "the Platform") collects, processes, stores, and protects the personal information of users ("you", "the User") who access and use the cy99 platform at cy99.bet, including all associated web and mobile interfaces, game services, sports betting features, payment services, and customer support functions. We are committed to handling your personal data with care, transparency, and respect — in accordance with applicable data protection principles.

By registering an account, making a deposit, or otherwise using any part of the cy99 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Privacy Policy, you should discontinue your use of the Platform immediately.

2. Information We Collect

When you register for and use the cy99 platform, we collect several categories of personal and technical information. The specific data points we collect include, but are not limited to, the following:

• Identity information: full name, date of birth, gender, and copies of government-issued identity documents provided during KYC verification.
• Contact information: mobile phone number (required for bKash, Nagad, or Rocket-linked accounts), email address, and, where provided, a residential address.
• Account credentials: username and encrypted password. cy99 never stores passwords in plain text.
• Financial information: deposit and withdrawal transaction records, payment method identifiers (e.g. last four digits of a Nagad or bKash number), transaction amounts, and account balance history. Full payment account numbers are not stored on cy99 servers.
• Gameplay data: game session logs, betting history, wager amounts, win/loss records, game preferences, and session duration data.
• Technical and device data: IP address, browser type and version, operating system, device type (mobile/desktop), screen resolution, referring URL, pages visited on the Platform, and timestamps for all Platform interactions.

We collect information directly from you (for example, when you complete registration or contact support), automatically through your use of the Platform (for example, through cookies and server logs), and, where necessary, from third-party identity verification or payment processing partners engaged by cy99 to perform KYC or to facilitate transactions.

3. How We Use Your Information

cy99 uses the personal data we collect for the following specific purposes. We only process your data where we have a lawful basis for doing so:

4. Legal Basis for Processing

cy99 processes your personal data on one or more of the following legal grounds, depending on the specific processing activity involved:

• Contractual necessity: processing required to fulfil our obligations to you under the Terms and Conditions — for example, maintaining your account, processing deposits and withdrawals, and delivering game results.
• Legal obligation: processing required to comply with applicable laws and regulations, including anti-money laundering requirements, age verification obligations, and fraud detection duties.
• Legitimate interests: processing carried out for the purpose of preventing fraud, improving platform security, maintaining accurate financial records, and analysing usage patterns to improve service quality — where such interests are not overridden by your rights.
• Consent: where we send you personalised promotional communications or use non-essential cookies, we do so on the basis of your consent. You may withdraw consent at any time by contacting support or adjusting your account notification settings.

5. Sharing Your Information

cy99 does not sell your personal data. We may share your information with carefully selected third parties only in the following limited circumstances:

• Payment processors and mobile money partners (bKash, Nagad, Rocket, Upay, and partnered Bangladeshi banks): to facilitate deposits and withdrawals. These partners receive only the minimum data required to complete the transaction and are bound by confidentiality obligations.
• Identity verification and KYC service providers: to verify your age, identity, and to meet anti-money laundering obligations. These providers are contracted to use your data solely for verification purposes.
• Technology and infrastructure providers: including cloud hosting, data analytics, and security monitoring services, which process data on cy99's behalf under strict data processing agreements.
• Regulatory and law enforcement authorities: where we are legally required to disclose information in response to a lawful court order, government request, or regulatory investigation. cy99 will disclose only the minimum information required by law.

6. Cookies and Tracking Technologies

cy99 uses cookies and similar tracking technologies to operate the Platform effectively, remember your session preferences, and analyse how users interact with the site. The cookies we use fall into three main categories:

• Strictly necessary cookies: essential for the Platform to function correctly. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without breaking core Platform functionality.
• Functional cookies: used to remember your preferences such as language settings, last-played games, and notification preferences, so that your experience is personalised each time you return to cy99.
• Analytics cookies: used to understand how users navigate the Platform, which pages are visited most, and how users arrive at cy99 (for example, from search engines or referral links). This data is processed in aggregated, non-personally-identifiable form.

Most modern mobile browsers allow you to control cookie behaviour through device settings. Please note that disabling certain cookies may affect the functionality of the cy99 platform. cy99 does not respond to browser "Do Not Track" signals at this time, as there is no industry-standard interpretation of such signals.

7. Data Retention

cy99 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Specifically: account data and gameplay records are retained for the duration of your account's active life and for a minimum of five years after account closure, in order to meet record-keeping requirements applicable to financial services. Identity verification documents are retained in accordance with applicable anti-money laundering regulations.

Where data is no longer required for its original purpose and is not subject to a legal retention obligation, cy99 will securely delete or irreversibly anonymise that data. Anonymised, aggregated data (from which individual users cannot be identified) may be retained indefinitely for statistical and analytical purposes.

8. Data Security

cy99 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include SSL/TLS encryption for all data transmitted between your device and our servers, encrypted storage of sensitive account data, access controls that restrict data access to authorised personnel only, regular security audits and vulnerability assessments, and intrusion detection monitoring.

While cy99 takes data security seriously and applies industry-standard protections, no method of electronic transmission or storage is completely secure. cy99 cannot guarantee absolute security of your data in transit or at rest. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, cy99 will notify affected users in accordance with applicable notification obligations.

9. Your Data Rights

As a user of the cy99 platform, you have the following rights with respect to your personal data. To exercise any of these rights, please contact cy99 support using the email address at the bottom of this page:

• Right of access: you may request a copy of the personal data cy99 holds about you, together with information about how it is processed.
• Right to rectification: you may request that inaccurate or incomplete personal data held by cy99 be corrected or completed.
• Right to erasure: in certain circumstances (for example, where your data is no longer necessary for the purpose for which it was collected), you may request deletion of your personal data. This right is subject to any overriding legal retention obligations.
• Right to restriction: you may request that cy99 restrict the processing of your personal data in certain circumstances — for example, while a rectification request is pending.
• Right to object: where processing is based on legitimate interests, you may object to that processing. cy99 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: where processing is based on consent (for example, receiving marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

cy99 will respond to all data rights requests within a reasonable timeframe, typically within 30 days of receipt. Where a request is particularly complex or where a high volume of requests has been received, cy99 may extend this period and will inform you accordingly. There is no fee for making a data rights request unless the request is manifestly unfounded or excessive.

10. Children's Privacy

The cy99 platform is strictly intended for adults aged 21 and above. cy99 does not knowingly collect personal data from individuals under the age of 21. If you are under 21 years of age, you must not attempt to register for or use the cy99 platform. If cy99 becomes aware that personal data has been collected from a user who is under 21, that data will be deleted and the account will be closed immediately. Parents and guardians who believe a minor may have accessed cy99 should contact support immediately.

11. Third-Party Links and Services

The cy99 platform integrates with third-party game providers such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, and others to deliver game content. These providers operate their own platforms and may collect certain technical data (such as session identifiers) as part of delivering the game experience. cy99 is not responsible for the privacy practices of third-party game providers. We recommend reviewing the privacy policies of any third-party service provider whose games you access through cy99 if you have concerns about how they handle your data.

12. Changes to This Privacy Policy

cy99 reserves the right to update or amend this Privacy Policy at any time. When changes are made, the revised Policy will be published on this page with an updated effective date. We encourage you to review this page periodically so that you remain informed about how cy99 collects and uses your personal data.

Where changes to this Privacy Policy are material — for example, where we introduce a new category of data processing or a new third-party sharing arrangement — cy99 will endeavour to notify registered users via the contact details held on their account. Continued use of the Platform after publication of a revised Privacy Policy constitutes acceptance of the revised terms.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way cy99 processes your personal data, please contact our support team. We aim to respond to all privacy-related enquiries within one business day (Bangladesh Standard Time, UTC+6).

Email (plain text — not a link): [email protected]