Data Protection Policy

cr99 Privacy Policy

Your personal information is very important to us. Learn in detail here how cr99 collects, uses, and keeps your data secure.

Last Updated: January 2026 Applicable in English Bangladesh Market

1. Introduction

cr99 ("we", "our", or "platform") is a trusted online casino and betting platform in Bangladesh. This privacy policy describes how we collect your personal information, the purposes for which we use it, and how we keep it secure when you use our website cr99.lat.

By registering on our platform or using our services, you agree to the terms of this privacy policy. If you do not agree with any part of this policy, please refrain from using our services.

This policy is designed for users residing in Bangladesh. cr99 complies with applicable data protection regulations and digital security laws in Bangladesh.

Important Notice

This privacy policy applies only to the cr99.lat website. If you follow third-party links, the privacy policy of that site will apply, and cr99 is not responsible for it.

2. What Data We Collect

cr99 collects various types of personal information to provide services, manage accounts, and meet legal obligations. A detailed description of the data collected is provided below:

2.1 Registration Information

When you create an account on cr99, we collect:

  • Full name (in Bengali or English)
  • Date of birth (for age verification — for users aged 21 and above only)
  • Email address
  • Password (stored in encrypted form)
  • Preferred currency (Bangladeshi Taka — BDT)

2.2 Identity Verification Information (KYC)

To process financial transactions and comply with applicable regulations, cr99 may request identity verification documents in certain circumstances:

  • National ID card (NID) or a copy of passport
  • Proof of residence (utility bill or bank statement)
  • Proof of ownership of payment method (bKash, Nagad, Rocket, Upay)

2.3 Transaction Information

The following information related to each financial activity is recorded automatically:

  • Deposit and withdrawal amounts and dates
  • Payment method used (bKash, Nagad, Rocket, or Upay)
  • Transaction reference number
  • Gaming history and betting records

2.4 Automatically Collected Information

The following information is collected automatically while you browse the platform:

  • IP address and geographic location (at country level)
  • Device type, operating system, and browser information
  • Page visit history, click patterns, and session duration
  • Referral URL (which site you came from)
  • Cookie and local storage data

3. How We Use Your Data

cr99 uses collected data only for legitimate purposes. The purposes of use are described in detail below:

Purpose Type of Data Used Legal Basis
Account creation and management Registration information, KYC documents Contractual necessity
Payment processing Transaction information, payment method Contractual necessity
Fraud prevention IP, device, transaction history Legitimate interest
Providing customer support Contact information, account history Contractual necessity
Age verification (21+) Date of birth, identity document Legal obligation
Ensuring responsible gaming Gaming behavior, transaction patterns Legitimate interest and regulatory requirement
Sending promotional offers (subject to consent) Email, preferences, and gaming history Consent
Platform improvement and analytics User behavior data Legitimate interest

4. Data Sharing Policy

cr99 never sells, rents, or shares your personal information with third parties without authorization. However, data may be shared in the specific circumstances below:

4.1 Service Provider Partners

Limited data may be shared with trusted partners for payment processing (bKash, Nagad, Rocket, Upay), game software providers, and management of technical infrastructure. These partners may only use the data for the specified purpose and may not share it with any third party themselves.

4.2 Legal Requirements

cr99 may be required to provide information pursuant to a court order, government authority investigation, or applicable law. In such cases, cr99 will notify you in advance where possible.

4.3 Business Restructuring

In the event of any merger, acquisition, or asset transfer, your information may be transferred to the new entity. In such cases, we will inform you in advance and the same standards of protection will be maintained.

We Never

Your personal information is not sold to advertisers or marketing companies. Your identity or gaming behavior is not shared on social media platforms.

5. Cookie Policy

The cr99 website uses cookies to improve your browsing experience. Cookies are small text files stored in your browser.

5.1 Types of Cookies

  • Essential Cookies: Necessary for maintaining login sessions, security verification, and saving language preferences.
  • Functional Cookies: For remembering your preferences (such as game type and display settings).
  • Analytics Cookies: For analyzing website traffic and improving site performance.
  • Security Cookies: For fraud detection and account protection.

5.2 Cookie Control

You can manage cookies from your browser settings. However, disabling essential cookies may cause some platform features to stop working.

6. Data Retention Period

cr99 retains your personal information only for as long as necessary. The retention period is determined based on the type of data, legal requirements, and business purposes:

  • Active account data: for as long as the account remains active and then for up to 5 years after.
  • Financial transaction records: at least 7 years in accordance with legal obligations.
  • KYC documents: at least 5 years after account closure.
  • Communication logs (support chat, email): 3 years.
  • Analytics data (in anonymized form): up to 2 years.

When the retention period ends, data is securely deleted or permanently anonymized.

7. Your Data Rights

As a cr99 user, you have the following rights regarding your own personal information:

Right to Access

You have the right to know what information we hold about you and to receive a copy of it.

Right to Rectification

If any of your information is incorrect or incomplete, you have the right to request that it be corrected.

Right to Erasure

The right to request deletion of your personal data in certain circumstances, though limitations may apply in accordance with legal obligations.

Right to Object to Processing

You have the right to object to the use of your data for marketing communications or for specific purposes.

Right to Data Portability

The right to request your data in a structured, commonly used digital format.

Right to Restrict Processing

You have the right to request that data processing be temporarily paused in certain circumstances.

To exercise these rights, send an email to [email protected]. We will respond within 30 business days.

8. Security Measures

cr99 takes industry-standard technical and organizational measures to keep your personal information secure:

8.1 Technical Security

  • All communications are protected through SSL/TLS encryption (HTTPS protocol)
  • Passwords are stored in encrypted form using bcrypt hashing
  • Sensitive data (identity documents, payment information) is protected with AES-256 encryption
  • Regular security audits and vulnerability assessments are conducted
  • Access control measures — only authorized personnel can view information
  • Two-Factor Authentication is available

8.2 Organizational Security

  • Staff receive regular training on data protection
  • Strict internal policies are maintained for data processing
  • An incident response plan is in place to act quickly in the event of a data breach

Please note that no data transmission over the internet is completely secure. We strive to ensure the highest level of protection, but complete security cannot be guaranteed.

9. Third-Party Services & Game Providers

The cr99 platform uses technology from various game software providers and payment service providers. These third parties have their own privacy policies:

9.1 Game Software Providers

Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, JILI, PG Soft, and Ezugi may process certain technical data (such as game session IDs) to operate their games. This information is used to verify game results and ensure fair play.

9.2 Payment Service Providers

When transacting through bKash, Nagad, Rocket, and Upay, the respective privacy policies of those providers apply. Only the minimum information necessary to complete a transaction is shared.

9.3 Analytics Services

Anonymous traffic data is used to analyze website usage. This data cannot be used to identify any specific individual.

10. Changes to the Privacy Policy

cr99 may update this privacy policy from time to time. The following process will be followed when changes are made:

  • For significant changes, a notification will be sent to the registered email address.
  • The "Last Updated" date at the top of the page will be changed.
  • For important changes, users may be asked to provide their consent again.
  • Continued use of the platform after an update will be considered acceptance of the new policy.

We recommend that you visit this page regularly and review any updates.

The current version of this privacy policy is effective from January 2026. To request a previous version, contact us at [email protected].

11. Contact Us

If you have any questions about this privacy policy, wish to exercise your data rights, or have a complaint, please contact us through the following:

Email (Privacy-related requests)
[email protected]
Live Chat Support
Live chat support in Bengali is available 24/7
Response Time
30 business days for general requests; 72 hours for urgent requests
Website
cr99.lat

Our privacy-related requests are handled responsibly. If you feel we have not adequately fulfilled your data rights, you have the right to file a complaint with the relevant regulatory authority.