Data Protection & Privacy

Privacy Policy of
uncat99

At uncat99, the privacy and security of every player in Bangladesh is treated as a fundamental obligation — not an afterthought. This Privacy Policy explains in clear, formal terms exactly what personal data we collect, why we collect it, how it is used, who it may be shared with, and what rights you hold over your own information at all times.

Effective: 01 January 2026
Language: English
Jurisdiction: Bangladesh
256-bit SSL Encrypted
How to Read This Policy: This Privacy Policy applies to all users of the uncat99 platform, including registered account holders and anonymous visitors. By continuing to use uncat99, you acknowledge that you have read and understood this policy. If you have questions about how your data is handled, contact us at support@uncat99.

What This Policy Guarantees You

These six principles underpin every data practice at uncat99. They are not aspirational — they are operational commitments built into our systems and processes.

Data Minimisation

We collect only the personal data that is strictly necessary for delivering our services, verifying your identity, processing payments, and meeting our legal obligations. We do not harvest data speculatively.

Purpose Limitation

Every category of data we collect has a documented, specific purpose. Your data will never be repurposed for uses incompatible with the reason it was originally collected without your explicit consent.

Storage Security

All personal data stored on uncat99 infrastructure is protected by 256-bit SSL encryption at rest and in transit. Access is restricted to authorised personnel operating under strict confidentiality obligations.

Player Control

You retain meaningful control over your personal data at all times. You may access, correct, port, restrict, or request erasure of your data by contacting our support team, subject to legal retention requirements.

No Unauthorised Selling

uncat99 does not sell, rent, or trade your personal data to third-party marketers or data brokers. Sharing with partners occurs only where strictly required for service delivery, under binding data-processing agreements.

Defined Retention Limits

We do not retain personal data beyond the period necessary for its stated purpose. Defined retention schedules govern every data category, and data is securely deleted or anonymised once its retention period expires.

Data Controller & Contact Information

Contact Details — Data Controller
uncat99 Privacy Team

Platform: uncat99
Email: support@uncat99
Response Time: Within 72 hours of receipt (Bangladesh Standard Time, BST UTC+6), Sunday to Thursday.
Language of Response: English

When contacting us about a privacy matter, please include your registered account username (if applicable), a description of your request or concern, and a copy of a government-issued ID where a subject access request is being made, to enable us to verify your identity before disclosing any personal data.

Personal Data We Collect

Category 2.1
Registration & Identity Data

Collected when you create an account on uncat99. This is the foundational data required to establish your identity, verify your age, and create a secure account in your name.

Full legal name Date of birth Email address Phone number Residential address National ID / passport number Username & password (hashed) Security question answers
Category 2.2
Financial & Transaction Data

Collected when you make deposits, withdraw funds, or otherwise interact with the Finance / Wallet section of your account. This data enables us to process your transactions securely and comply with anti-money laundering (AML) obligations.

bKash / Nagad / Rocket / Upay account numbers Bank account details (where applicable) Card details (tokenised, not stored in full) Deposit & withdrawal history Transaction amounts in BDT (৳) Payment method type & reference IDs
Category 2.3
Gaming & Betting Activity Data

Generated automatically as you use the Platform's betting markets, casino games, slot machines, bingo sessions, and other gaming features. This data is used to manage your account, settle bets, detect fraud, and deliver a personalised experience.

Bet history & stake amounts Game session logs Winnings & loss records Bonus usage records Responsible gaming limit settings Sports markets accessed
Category 2.4
Technical & Device Data

Collected automatically when you access uncat99 via a browser or mobile device. This data is used for security purposes, fraud detection, platform optimisation, and ensuring a consistent experience across devices.

IP address Device type & operating system Browser type & version Screen resolution Session timestamps (BST) Pages visited & click paths Referring URL
Category 2.5
Communications & Support Data

Collected when you contact the uncat99 support team, submit a complaint, respond to a survey, or participate in a promotion. This data is used to handle your inquiry and improve our customer service standards.

Support ticket contents Live chat transcripts Email correspondence Survey responses Promotion participation records

How We Use Your Personal Data

Use 3.1 — Contractual Necessity
Account Management & Service Delivery

Processing your registration data to create and maintain your account; authenticating your identity each time you log in; processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment methods; settling bets and distributing winnings; and providing customer support when you raise a query or dispute.

Use 3.2 — Legal Obligation
KYC, AML & Regulatory Compliance

Verifying your identity and age as part of the mandatory KYC process; screening transactions against AML thresholds; retaining financial and identity records for the statutory minimum period; and cooperating with any lawful request from a competent authority in Bangladesh or another relevant jurisdiction.

Use 3.3 — Legitimate Interests
Security, Fraud Prevention & Platform Integrity

Monitoring account activity to detect and prevent fraud, collusion, match-fixing, bonus abuse, and multi-accounting; operating automated risk management systems that flag unusual betting patterns; securing platform infrastructure against unauthorised access; and conducting internal analytics to improve Platform performance and game offering.

Use 3.4 — Consent
Marketing & Personalised Promotions

Where you have opted in to receive promotional communications, we may use your account profile, gaming preferences, and location (Bangladesh region) to send you relevant bonus offers, seasonal promotions (Eid, Pohela Boishakh, BPL season), and platform updates by email or in-app notification. You may withdraw consent at any time by updating your communication preferences in your account settings.

Cookies & Tracking Technologies

Cookie Category Purpose Retention
Strictly Necessary Session authentication, login state, CSRF protection, load balancing. Cannot be disabled without breaking the Platform. Session / 24 hrs
Functional Storing user preferences such as language settings, bet slip state, odds format (decimal / fractional), and responsible gaming limit displays. 90 days
Analytics Aggregated, anonymised data on page views, session duration, feature engagement, and game popularity — used exclusively for internal platform improvement. 13 months
Marketing (Consent Required) Tracking affiliate referral sources and, where consent is given, tailoring promotional banners and bonus offers to your gaming behaviour and preferences. 30 days
Cookie Controls: You can manage your cookie preferences through your browser settings at any time. Most modern browsers allow you to block or delete cookies. Please note that disabling strictly necessary cookies will prevent you from logging in to your uncat99 account. Disabling functional cookies may affect your saved preferences and on-platform experience.

Data Sharing & Third Parties

Clause 5.1
Payment Processing Partners

To process your deposits and withdrawals, uncat99 transmits the minimum necessary financial data to the relevant payment service providers — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard. These partners act as independent data controllers in respect of the data they process under their own terms of service and privacy policies. uncat99 is not responsible for the data practices of these payment providers once data leaves the Platform.

Clause 5.2
Game Content Providers

Casino and slot game providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — receive technical session identifiers and game outcome data necessary to render games, calculate results, and confirm payouts. These providers do not receive your full personal profile, payment details, or contact information. Data shared is governed by individual data-processing agreements that prohibit secondary use.

Clause 5.3
Identity Verification Services

For KYC verification, uncat99 may engage specialist identity verification partners to cross-check the documents you submit (National ID, passport, proof of address) against authoritative databases. These partners process your identity data solely for verification purposes and are contractually prohibited from retaining or using it for any other purpose. Document images submitted for KYC are stored in encrypted form on uncat99's secure infrastructure.

Clause 5.4
Legal & Regulatory Disclosure

uncat99 may be required by applicable law, court order, or competent regulatory authority to disclose certain personal data about specific users. In such cases, we will disclose only the minimum data required to comply with the lawful request, and — where legally permitted — we will notify the affected user of the disclosure. We will not voluntarily disclose user data to any government body or law enforcement agency in the absence of a valid, legally binding instrument compelling us to do so.

No Cross-Border Transfers Without Safeguards: In the event that any data processor engaged by uncat99 operates outside Bangladesh, we ensure appropriate safeguards are in place — including contractual data protection clauses — before any cross-border transfer of personal data takes place.

Data Retention Periods

Data Category Retention Trigger Retention Period
Registration & Identity Data From account closure or last active login 5 years
KYC Documents From date of successful verification 5 years
Financial & Transaction Records From date of each transaction 7 years
Betting & Gaming Activity From date of each bet or session 5 years
Support & Complaint Records From resolution of the query or complaint 3 years
Technical & Device Logs From date of data capture 13 months
Marketing Consent Records From date consent was given or withdrawn 3 years
Self-Exclusion Records From end of self-exclusion period Permanent (regulatory requirement)

Your Privacy Rights

Right of Access

You may request a copy of all personal data we hold about you, along with details of how it is being processed, the legal basis for processing, and who it has been shared with.

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.

Right to Erasure

You may request deletion of your personal data where it is no longer necessary for its original purpose, where you withdraw consent, or where processing was unlawful. This right is subject to overriding legal retention obligations.

Right to Restriction

You may request that we restrict the processing of your personal data in certain circumstances — for example, while the accuracy of disputed data is being verified, or while an objection to processing is being considered.

Right to Data Portability

Where processing is based on your consent or contract performance and is carried out by automated means, you may request a copy of your personal data in a structured, commonly used, machine-readable format.

Right to Object

You may object to processing based on legitimate interests, including profiling for direct marketing purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.

Identity Verification for Rights Requests: To protect your privacy and prevent unauthorised access to your data, all rights requests must be accompanied by sufficient information to verify your identity. We may ask for your registered email address, account username, and a copy of a valid government-issued ID before processing your request.

Data Security Measures

Technical Safeguards
Encryption & Infrastructure Security

All data in transit is protected by TLS 1.3 encryption. All data at rest is encrypted using AES-256. Database access is restricted by IP allowlisting and role-based access controls. Passwords are stored as salted cryptographic hashes and are never stored in plaintext. Regular vulnerability assessments and penetration tests are conducted against Platform infrastructure.

Operational Safeguards
Access Controls & Staff Training

Access to personal data is granted on a strict need-to-know basis. All staff with access to personal data are subject to binding confidentiality obligations and receive regular data protection training. Access logs are maintained and reviewed periodically. Departing employees have access credentials revoked immediately upon termination.

Account-Level Security
Two-Factor Authentication & Session Controls

uncat99 supports two-factor authentication (2FA) for all registered accounts. Session tokens expire automatically after a period of inactivity. Concurrent login detection alerts you if your account is accessed from an unrecognised device or IP address. You are strongly encouraged to enable 2FA and to use a unique, strong password for your uncat99 account.

Incident Response
Data Breach Notification

In the event of a personal data breach that poses a risk to your rights and freedoms, uncat99 will notify affected users without undue delay, describing the nature of the breach, the categories of data involved, the likely consequences, and the measures taken to address it. Our incident response team operates on a 24/7 basis to detect, contain, and remediate any security incidents.

Your Responsibility: While uncat99 takes all reasonable technical and organisational measures to protect your data, the security of your account also depends on you. Never share your password, OTP codes, or account credentials with any third party. uncat99 staff will never ask for your password. If you suspect your account has been compromised, contact support@uncat99 immediately.

Changes to This Privacy Policy

Version History
Privacy Policy Revision Record

Version 1.0 — Effective 01 January 2026. Initial publication of the uncat99 Privacy Policy covering all data categories, processing purposes, retention periods, user rights, and security measures applicable to the Bangladesh market. This version supersedes all prior privacy notices or data handling statements previously published on the Platform.

Questions About This Policy: If you have any questions, concerns, or feedback about this Privacy Policy or about how uncat99 handles your personal data, please reach out to our privacy team at support@uncat99. We are committed to resolving all privacy-related queries promptly and transparently. Response times are within 72 hours (BST, Sunday to Thursday).

Explore uncat99 with Confidence

Your data is protected, your rights are clear, and our team is available 24/7. Now explore everything uncat99 has to offer — from live cricket betting markets to premium slots and the full casino experience. 18+ only. Please gamble responsibly.