man99 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how man99 ("man99", "we", "us", "our") collects, uses, stores, shares, and protects personal information provided by or collected from users ("Player", "you", "your") of the man99 website at https://man99.io and all associated services (collectively, the "Platform").

man99 is committed to handling your personal data with care, transparency, and integrity. This Policy is intended to give you a clear picture of our data practices so that you can make informed decisions about your engagement with the Platform. By registering an account or continuing to use the man99 Platform, you acknowledge that you have read and understood this Privacy Policy.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which are incorporated by reference.

2. Data We Collect

2.1 Information You Provide Directly

When you register, verify your identity, contact support, or interact with the Platform, you may provide the following personal data:

• Identity data: Full legal name, date of birth, gender, and nationality.
• Contact data: Email address, mobile phone number, and residential address (including city — Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or other).
• Identity verification documents: National Identity Card (NID), passport, or driving licence scans submitted during KYC review.
• Financial data: bKash or Nagad mobile number, Rocket account reference, Upay wallet ID, Visa or Mastercard card details (processed via PCI-DSS compliant payment gateways — raw card numbers are never stored by man99).
• Account credentials: Username and hashed password. We never store passwords in plain text.
• Communications: Support tickets, live chat transcripts, and any correspondence sent to [email protected].

2.2 Data Collected Automatically

When you access or use the Platform, certain technical data is collected automatically by our systems:

• Device & browser data: IP address, device type, operating system, browser type and version, screen resolution, and time zone (Bangladesh Standard Time, UTC+6).
• Usage data: Pages visited, games played, bet amounts and outcomes, session duration, clickstream data, and feature interactions.
• Transaction data: Deposit amounts, withdrawal requests, bonus activations, and payment method used, all denominated in Bangladeshi Taka (৳).
• Cookies and similar technologies: Session cookies, preference cookies, and analytics identifiers as described in Section 6.

2.3 Data from Third Parties

man99 may receive supplementary data about you from the following third-party sources:

• Identity and age verification agencies used during KYC processing.
• Payment service providers (bKash, Nagad, Rocket, Upay, Visa, Mastercard) confirming transaction status.
• Fraud prevention and anti-money laundering screening services.
• Game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) in relation to game session data and RNG audit records.

3. How We Use Your Data

man99 uses the personal data it collects for the following purposes:

Purpose	Data Used
Account registration and management	Identity data, contact data, account credentials
Identity and age verification (KYC)	Identity documents, date of birth, contact data
Processing deposits and withdrawals	Financial data, transaction data
Delivering and improving games and betting services	Usage data, device data, game session data
Customer support and dispute resolution	Communications, account data, transaction data
Fraud prevention and AML compliance	Identity data, financial data, device data, IP address
Responsible gaming monitoring	Usage data, transaction data, self-exclusion records
Sending service notifications and account alerts	Contact data, account data
Platform analytics and performance improvement	Usage data, device data, cookies
Compliance with legal and regulatory obligations	All categories as required by applicable law

man99 does not use your personal data to build advertising profiles or to sell targeted advertising to third parties.

4. Legal Basis for Processing

man99 processes your personal data under the following legal bases:

• Contractual necessity: Processing required to fulfil our contractual obligations to you under the Terms & Conditions, including account management, payment processing, and service delivery.
• Legal obligation: Processing required to comply with applicable anti-money laundering, fraud prevention, and identity verification obligations.
• Legitimate interests: Processing carried out for man99's legitimate business interests, including fraud detection, platform security, responsible gaming monitoring, and analytics — provided these interests are not overridden by your privacy rights.
• Consent: Where we rely on your consent (for example, sending optional marketing communications), you may withdraw that consent at any time by contacting [email protected].

5. Sharing Your Personal Data

5.1 Service Partners

man99 shares personal data only with carefully selected service partners who require access to fulfil specific functions on our behalf. All such partners are subject to written data processing agreements that restrict their use of your data to the specified purpose. Current categories of service partner include:

• Payment processors and mobile financial services (bKash, Nagad, Rocket, Upay, Visa, Mastercard payment networks).
• Identity and age verification (KYC) providers.
• Anti-fraud and anti-money laundering screening services.
• Cloud hosting and data storage infrastructure providers.
• Customer support platform providers.
• Game content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) — limited to game session identifiers and technical data.

5.2 Legal Disclosures

man99 may disclose your personal data to regulatory authorities, law enforcement agencies, or courts where it is legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of man99, its players, or the public.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of substantially all of man99's assets, your personal data may be transferred to the successor entity as part of that transaction. man99 will notify affected players via email in such circumstances before the transfer takes effect.

5.4 No Sale of Data

man99 does not sell, rent, or commercially trade your personal data to any third party under any circumstances.

6. Cookies & Tracking Technologies

6.1 What Are Cookies

Cookies are small text files placed on your device by a website when you visit it. man99 uses cookies and similar technologies (such as local storage and session tokens) to enable core platform functionality and to understand how players use the Platform.

6.2 Types of Cookies Used

• Essential cookies: Required for the Platform to function. These include authentication tokens, session identifiers, CSRF protection tokens, and security cookies. These cannot be disabled without preventing Platform access.
• Preference cookies: Store your platform preferences such as language selection and display settings.
• Analytics cookies: Collect anonymised or pseudonymised data about how players interact with the Platform — pages visited, features used, session length — to help man99 improve performance and user experience.

6.3 What man99 Does NOT Use Cookies For

man99 does not use cookies for cross-site advertising, behavioural profiling, retargeting campaigns, or selling audience data to advertisers.

6.4 Managing Cookies

You can control or delete cookies through your browser settings. Please note that disabling essential cookies will prevent you from logging into or using the man99 Platform. Disabling analytics cookies will not affect Platform functionality.

7. Data Retention

man99 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, unless a longer retention period is required or permitted by applicable law or regulation.

• Active accounts: Personal data is retained for the duration of your account relationship with man99.
• Closed accounts: Following account closure, man99 retains your identity, transaction, and KYC data for a minimum period of five (5) years to comply with anti-money laundering obligations and to support any post-closure dispute resolution.
• Support communications: Retained for three (3) years from the date of the last communication in a support thread.
• Analytics data: Anonymised analytics data may be retained indefinitely as it cannot be used to re-identify individual players.
• Marketing consent records: Retained for as long as the consent is active, plus two (2) years following withdrawal of consent.

When data is no longer required, man99 securely deletes or anonymises it in accordance with industry-standard data destruction practices.

8. Data Security

man99 implements a multi-layered approach to data security, appropriate to the nature and sensitivity of the data we process. Our security measures include, but are not limited to:

• SSL/TLS encryption for all data in transit between your device and our servers.
• Encryption of sensitive data at rest, including identity documents and financial references.
• Access controls ensuring that only authorised personnel with a legitimate need can access personal data.
• Regular security assessments and vulnerability testing of Platform infrastructure.
• Fraud monitoring systems that flag unusual account activity for review in real time.
• PCI-DSS compliant payment gateway integrations — man99 does not store raw card numbers on its systems.

While man99 takes all reasonable steps to protect your personal data, no system is completely immune to security risks. In the event of a data breach that is likely to result in risk to your rights or interests, man99 will notify affected players without undue delay.

9. Your Data Rights

As a player whose personal data is processed by man99, you hold the following rights:

• Right of access: You may request a copy of the personal data man99 holds about you.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to restriction: You may request that man99 restricts the processing of your data in certain circumstances, for example while an accuracy dispute is under review.
• Right to data portability: You may request your personal data in a structured, commonly used, machine-readable format where technically feasible.
• Right to object: You may object to processing carried out on the basis of legitimate interests, including direct marketing.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Data Rights Request". man99 will respond within thirty (30) days of receiving a valid request. We may request proof of identity before acting on a data rights request to protect against unauthorised disclosures.

10. Children & Minors

The man99 Platform is strictly intended for adults aged 21 years and above. man99 does not knowingly collect personal data from individuals under the age of 21. If man99 discovers that a minor has registered an account or provided personal data, that account will be immediately suspended, all funds will be frozen pending review, and the personal data will be securely deleted in accordance with applicable obligations.

If you believe that a minor has accessed the Platform using your account or has registered independently, please contact [email protected] immediately so that we can investigate and take appropriate action.

11. International Data Transfers

man99 operates as an offshore gaming platform and may process or store data on servers located outside Bangladesh. Where personal data is transferred internationally, man99 takes steps to ensure that appropriate safeguards are in place — including contractual data transfer mechanisms — to protect your data to a standard at least equivalent to the protections described in this Policy.

By using the man99 Platform, you acknowledge that your personal data may be processed in countries outside your country of residence, and you consent to such transfers subject to the safeguards described above.

12. Third-Party Links

The man99 Platform may contain references to third-party game providers and payment partners. This Privacy Policy applies exclusively to data processed by man99 on the man99 Platform. man99 is not responsible for the privacy practices of third-party services, and we encourage you to review the privacy policies of any third-party provider whose services you access in connection with man99.

13. Updates to This Policy

man99 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, operational requirements, or applicable regulations. When material changes are made, man99 will notify registered players by email and by posting a prominent notice on the Platform before the changes take effect.

The "Last Updated" date at the top of this Policy will always reflect when the most recent revision was made. Your continued use of the man99 Platform after any update constitutes acceptance of the revised Policy. If you do not agree with the updated terms, you should cease using the Platform and may request account closure as described in our Terms & Conditions.

14. Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way man99 handles your personal data, please contact our data team:

• Email: [email protected] (plain text — not a clickable link)
• Subject line for data requests: "Privacy Enquiry" or "Data Rights Request"
• Response time: man99 aims to acknowledge all privacy-related enquiries within 48 hours and to provide a full response within 30 calendar days.
• Support hours: 24 hours a day, 7 days a week, in English.

For urgent matters involving suspected unauthorised access to your account or a potential data breach, please mark your message as urgent and man99 will prioritise your case accordingly.