pj99 Privacy Policy — Your Data, Your Rights

1. Introduction and Scope

This Privacy Policy (the "Policy") describes how pj99 ("we", "us", or "our") collects, uses, stores, and protects personal data relating to individuals ("you", "your", or "the Player") who access or use the pj99 platform at https://pj99.io, including all associated services such as casino games, sports betting markets, live dealer tables, promotional features, and customer support channels.

This Policy applies to all personal data processed in connection with your use of pj99, regardless of how you access the platform — whether via a desktop browser, mobile browser, or any application we may make available. By registering an account or continuing to use our services, you acknowledge that you have read and understood this Policy in full.

This Policy should be read alongside our Terms and Conditions and our Responsible Gaming Policy, both of which form part of the overall framework governing your relationship with pj99. In the event of any conflict between this Policy and another document, this Policy shall govern in respect of data protection matters.

2. Data Controller Identity

pj99 acts as the data controller in respect of all personal data collected and processed through the pj99 platform. As data controller, pj99 determines the purposes and means by which your personal data is processed. If you have any questions about how your personal data is handled, or if you wish to exercise any of your data rights set out in Section 12 of this Policy, please contact us using the details provided in Section 15.

3. Personal Data We Collect

Depending on how you interact with the pj99 platform, we may collect the following categories of personal data:

3.1 Identity and Registration Data: Your full legal name, date of birth, gender, Bangladesh National Identity Card (NID) number or passport number, and a photograph or scan of your identity document where required for KYC verification.

3.2 Contact Data: Your email address, mobile phone number, and residential address including city (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar).

3.3 Financial Data: Your preferred payment method (bKash, Nagad, Rocket, Upay, or bank account), transaction history including deposit amounts, withdrawal requests, and associated timestamps. We do not store full payment account credentials on our servers; these are handled by the respective payment service providers.

3.4 Account and Gaming Data: Your pj99 username, account creation date, login history, session durations, game history, betting records, bonus redemptions, and responsible gaming tool settings (such as deposit limits or self-exclusion status).

3.5 Technical and Device Data: Your IP address, browser type and version, operating system, device type, screen resolution, referring URL, and general geographic location derived from your IP address.

3.6 Communications Data: Records of any communications between you and pj99 customer support, including live chat transcripts and email correspondence.

3.7 Marketing Preference Data: Your stated preferences regarding receiving promotional communications from pj99, and records of any opt-in or opt-out actions you have taken.

4. How We Collect Your Data

pj99 collects personal data through the following means:

• Directly from you when you complete the registration form, submit KYC documents, make a deposit or withdrawal, contact customer support, or update your account settings;
• Automatically through cookies, log files, and similar tracking technologies as you browse and interact with the pj99 platform (see Section 9 for details);
• From payment service providers such as bKash, Nagad, Rocket, and Upay, who may share transaction confirmation data with us for the purpose of crediting your account;
• From identity verification partners who assist pj99 in verifying the authenticity of documents submitted during the KYC process;
• From fraud prevention and anti-money laundering screening services that help pj99 identify and prevent financial crime on the platform.

5. How We Use Your Personal Data

pj99 uses the personal data it collects for the following purposes:

• To create and manage your pj99 account, including verifying your identity and age in compliance with the platform's 21+ policy;
• To process deposits and withdrawals via your selected payment method and to maintain an accurate transaction record;
• To provide access to casino games, live dealer tables, and sports betting markets offered on the pj99 platform;
• To deliver customer support and respond to your enquiries via live chat or email;
• To administer bonuses, promotions, and loyalty programmes, including verifying your eligibility and tracking wagering progress;
• To fulfil our obligations under applicable anti-money laundering, counter-terrorism financing, and KYC regulations;
• To detect, investigate, and prevent fraud, account abuse, and prohibited conduct as described in our Terms and Conditions;
• To apply and manage responsible gaming tools including deposit limits, session limits, cool-off periods, and self-exclusion orders;
• To send you service-related communications such as account confirmations, transaction receipts, and security alerts;
• To send you promotional communications about pj99 offers, new games, and seasonal events — where you have consented to receive such communications or where we have a legitimate interest in doing so;
• To analyse platform usage and player behaviour in aggregate (anonymised) form for the purpose of improving our services, fixing technical issues, and developing new features;
• To comply with any legal obligation to which pj99 is subject, including responding to lawful requests from regulatory or law enforcement authorities.

6. Legal Bases for Processing

pj99 processes your personal data only where a valid legal basis exists. The primary legal bases on which we rely are as follows:

6.1 Performance of a Contract: Processing that is necessary to create and operate your account, process transactions, and provide the gaming services you have requested falls under the performance of the contract between you and pj99.

6.2 Legal Obligation: Processing that is required to comply with anti-money laundering laws, KYC regulations, age verification requirements, and any other applicable legal obligation is carried out on the basis of legal compliance.

6.3 Legitimate Interests: Processing carried out for fraud prevention, security monitoring, platform analytics, and certain direct marketing activities is based on pj99's legitimate business interests, provided those interests are not overridden by your fundamental rights and freedoms.

6.4 Consent: Where pj99 relies on your consent as the legal basis for processing — for example, for certain categories of marketing communications — you may withdraw that consent at any time by contacting our support team or by updating your communication preferences within your account settings. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

7. Sharing Your Personal Data with Third Parties

pj99 does not sell, rent, or trade your personal data. We may share your data with the following categories of third party, strictly on a need-to-know basis and only to the extent necessary for the stated purpose:

• Payment service providers (including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank) to process deposits and withdrawals;
• Game software providers (including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi) who may receive limited session data to deliver and maintain the games you play;
• Identity verification and KYC service providers who assist pj99 in confirming the authenticity of documents you submit;
• Fraud prevention and anti-money laundering screening services that help pj99 identify suspicious activity and comply with financial crime regulations;
• IT infrastructure and cloud hosting providers who provide the servers and technical infrastructure on which the pj99 platform operates, under strict data processing agreements;
• Regulatory and law enforcement authorities where pj99 is required by law, court order, or other legally binding instrument to disclose personal data.

All third parties with whom pj99 shares personal data are contractually required to maintain appropriate technical and organisational security measures and to use the data only for the specific purpose for which it was shared.

8. International Data Transfers

In the course of operating the pj99 platform, your personal data may be transferred to and processed in countries other than Bangladesh. Where such transfers occur, pj99 takes reasonable steps to ensure that appropriate safeguards are in place to protect your personal data to a standard at least equivalent to that which applies within Bangladesh. These safeguards may include contractual data protection clauses incorporated into agreements with our third-party service providers.

9. Cookies and Tracking Technologies

pj99 uses cookies and similar tracking technologies (including local storage and session identifiers) to operate and improve the platform. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: These are required for the platform to function and cannot be disabled. They include session authentication cookies that keep you logged in during an active session and security tokens that protect against cross-site request forgery.
• Functional Cookies: These cookies remember your preferences, such as your preferred game lobby view, responsible gaming settings, and notification preferences, so that you do not need to re-enter them each time you visit.
• Analytics Cookies: These cookies help pj99 understand how players navigate and use the platform, including which games are most popular, which pages have high exit rates, and where technical errors occur. Analytics data is processed in aggregate and anonymised form.
• Marketing Cookies: Where you have consented, these cookies allow pj99 to serve relevant promotional content and track the effectiveness of our marketing campaigns. You may withdraw this consent at any time by adjusting your browser cookie settings.

You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the pj99 platform.

10. Data Security Measures

pj99 implements a range of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and pj99 servers;
• Encryption of sensitive data fields (including identity document data) at rest on pj99's secured servers;
• Role-based access controls ensuring that only authorised personnel can access player personal data, with all access logged and subject to periodic audit;
• Regular security assessments and vulnerability testing of the pj99 platform and supporting infrastructure;
• Incident response procedures for the identification, containment, and notification of any personal data breach.

Despite these measures, no internet-based platform can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights, pj99 will notify affected players without undue delay.

11. Data Retention

pj99 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and transaction data: Retained for a minimum of five years following account closure to meet anti-money laundering record-keeping obligations;
• KYC and identity documents: Retained for a minimum of five years from the date of submission or from the date of account closure, whichever is later;
• Customer support communications: Retained for up to three years from the date of the last interaction, unless a longer period is required to resolve an ongoing dispute;
• Marketing preference records: Retained for the lifetime of the account and for up to one year following account closure;
• Technical and device logs: Retained for up to 12 months from the date of collection.

When personal data is no longer required and no legal retention obligation applies, pj99 will securely delete or anonymise that data in accordance with its internal data governance procedures.

12. Your Rights Over Your Personal Data

As a pj99 account holder, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact our support team using the details in Section 15. pj99 will respond to all verified requests within 30 days of receipt.

• Right of Access: You may request a copy of all personal data pj99 holds about you, together with information about how and why it is being processed;
• Right to Rectification: You may request that inaccurate or incomplete personal data be corrected or updated without undue delay;
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to any overriding legal retention obligations;
• Right to Restriction of Processing: You may request that pj99 restrict the processing of your personal data in certain circumstances, for example while the accuracy of that data is contested;
• Right to Data Portability: Where processing is based on your consent or on the performance of a contract, you may request that your data be provided to you in a structured, machine-readable format;
• Right to Object: You may object to processing that is based on legitimate interests, including direct marketing, at any time. pj99 will cease that processing unless it can demonstrate compelling legitimate grounds that override your interests;
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

13. Children and Minors

The pj99 platform is strictly for adults aged 21 years and above. pj99 does not knowingly collect or process personal data relating to persons under the age of 21. If we become aware that personal data belonging to a person under the minimum age has been collected, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has created a pj99 account, please contact us immediately via the support channels listed in Section 15.

14. Changes to This Privacy Policy

pj99 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the services we offer. When material changes are made, we will notify registered account holders by email and by displaying a prominent notice on the pj99 platform prior to the change taking effect. The "Last Updated" date at the top of this Policy will be revised accordingly. Your continued use of pj99 following notification of a change constitutes acceptance of the revised Policy. We encourage you to review this page periodically to stay informed of how your data is being protected.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which pj99 processes your personal data, please reach our support team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week directly on the pj99 platform
• Email: [email protected] (plain text only — not a clickable link)
• Support Hours: 24/7, Bangladesh Standard Time (UTC+6)

pj99 aims to respond to all data-related enquiries and rights requests within 30 calendar days of receipt. For complex requests that require additional time to process, we will notify you of the extended timeframe within the initial 30-day period.