Reference

How xy999 Handles Your Personal Information

Your account data belongs to you. This page sets out exactly what information xy999 collects when you register, deposit via bKash, Nagad or Rocket, and use the platform — and what we do with it.

Account data kept securePayment info: bKash, Nagad, RocketNo data sold to third partiesClear opt-out pathsBangladesh-region policy
xy999 How xy999 Handles Your Personal Information
HOW WE PROTECT IT

Data Handling, Cookies and Account Security

We apply encryption across data in transit and at rest. Your account credentials, payment references and identity details are stored in isolated environments. Cookie usage is limited to session continuity and fraud detection — we do not use tracking cookies to build advertising profiles. Retention periods follow regional regulatory requirements, and data we no longer need for account or legal purposes is deleted on schedule.

Encrypted Storage

Account credentials and payment references from bKash, Nagad and Rocket transactions are stored with encryption. We do not expose raw wallet data to third-party marketing systems.

Cookie Policy

We use session cookies to keep you logged in as you move between mobile and desktop. Analytics cookies help us fix broken flows. You can manage cookie preferences in your browser settings.

Data Retention

We keep account and transaction records for the period required by applicable regional rules. When that period ends, records are deleted or anonymised — not archived indefinitely.

Requesting Changes

You can ask us to correct inaccurate data or delete your account record entirely. Requests are reviewed against legal hold requirements before we action them.

PRIVACY CONTACT PATHS

How to Reach Us About Your Data

If you want to access, correct or delete the personal data we hold, contact our support team directly. We handle data requests separately from general account queries so your request reaches the right person. Response times depend on the complexity of the request and applicable regional requirements.

Live Chat Open the chat widget from any page on xy999. State your account username and the specific data request — access, correction or deletion — so we can route it correctly.
Email Support Send your data request to our support email with your registered mobile number and a brief description of what you need. We confirm receipt within one working day.
Account Settings Some data updates — like your contact number or preferred mobile wallet — can be changed directly inside your account settings without contacting support at all.

Your Questions About This Privacy Policy

Real questions about how your data is handled on xy999 — answered directly.

We collect your name, mobile number, and login credentials at registration. Once you deposit using bKash, Nagad or Rocket, we also record the payment reference and wallet identifier linked to that transaction.

No. Payment references from bKash, Nagad and Rocket are used only to verify and reconcile your account wallet. We do not sell or share that data with third-party advertisers or data brokers.

Contact us via live chat or email with your registered mobile number and a written request. We will confirm receipt and provide your data summary within the timeframe required by applicable regional rules.

Yes. Submit a deletion request through support. We review it against any legal hold requirements — for example, transaction records we are obliged to retain — before completing the deletion.

Session cookies keep you logged in as you switch between phone and desktop. Analytics cookies help us fix broken account flows. You can disable non-essential cookies in your browser without losing account access.

This policy covers all registered accounts on xy999. Whether it applies to you specifically depends on your local law and whether your region is eligible. Check the terms for your applicable jurisdiction.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.