yk99 Privacy Policy — How We Protect Your Personal Data
At yk99, we take your privacy seriously. This Privacy Policy explains exactly what personal data we collect, why we collect it, how it is stored and protected, who it is shared with, and what rights you have over your own information as a player on our Bangladesh platform.
Table of Contents
01 Who We Are
yk99 ("we", "us", "our", "the Platform") operates the online betting and casino platform accessible at yk99.io. yk99 is the data controller in respect of the personal data of all registered users ("you", "the Player", "the User") of the platform.
For the purposes of this Privacy Policy, yk99.io is the primary point of data collection. All data collected via the platform is processed in accordance with the principles described in this document. yk99 is committed to handling your personal data responsibly, transparently, and in keeping with widely recognised standards of data protection practice.
If you have any questions about how yk99 processes your personal data, or if you wish to exercise any of the rights described in this Policy, you may contact our data team at any time at [email protected]. Please include "Privacy" or "Data Request" in the subject line of your message to ensure it is routed correctly.
02 Data We Collect
yk99 collects personal data through two primary channels: data you provide directly when registering and using the platform, and data collected automatically through your use of our services. The categories of data we collect are described below.
Data You Provide Directly
- Identity Data: Full legal name, date of birth, gender, nationality;
- Contact Data: Mobile phone number, email address, residential address (district, city, division within Bangladesh);
- Identity Verification Documents: National ID card, passport, or driving licence images submitted during KYC verification;
- Financial Data: Mobile financial service account details (bKash, Nagad, Rocket, Upay account numbers registered in your name) used for deposits and withdrawals;
- Account Credentials: Username and encrypted password hash (we do not store your plaintext password);
- Support Communications: Messages, emails, and records of your interactions with the yk99 support team.
Data Collected Automatically
- Technical Data: IP address, device type, operating system, browser type and version, screen resolution;
- Usage Data: Pages visited, time spent on pages, features accessed, search queries within the platform, game sessions opened;
- Transactional Data: Full history of deposits, withdrawals, bets placed, bet outcomes, bonuses claimed, and account balance changes;
- Behavioural Data: Click patterns, scroll depth, session duration, and game interaction data used for responsible gaming monitoring and platform improvement;
- Cookie Data: Data stored in cookies and similar tracking technologies as described in Section 6 of this Policy.
03 How We Use Your Data
yk99 uses your personal data only for the purposes described below. We do not process your data for any purpose that is incompatible with the reasons for which it was originally collected.
| Purpose | Data Categories Used | Why It Is Necessary |
|---|---|---|
| Account Registration | Identity, Contact, Credentials | To create and maintain your yk99 player account |
| Identity Verification (KYC) | Identity Documents, Financial Data | To confirm your age (21+), identity, and payment ownership before processing withdrawals |
| Processing Transactions | Financial Data, Transactional Data | To process deposits and withdrawals via bKash, Nagad, Rocket, and Upay |
| Providing Betting and Gaming Services | Transactional, Behavioural, Technical | To deliver sports betting, live casino, slots, and other platform features |
| Fraud and Security Monitoring | Technical, Behavioural, Transactional | To detect, investigate, and prevent fraudulent activity, multi-accounting, and abuse |
| Responsible Gaming Enforcement | Behavioural, Transactional | To apply deposit limits, session timers, cooling-off periods, and self-exclusions |
| Customer Support | Identity, Contact, Support Communications | To respond to your queries, complaints, and account requests |
| Platform Improvement | Usage, Behavioural, Technical | To analyse how the platform is used and improve its features, performance, and design |
| Promotional Communications | Contact Data | To send you bonus offers and promotions where you have not opted out (see Section 3 below) |
Marketing Communications
yk99 may send you promotional communications about bonuses, seasonal offers (such as Eid promotions, Pohela Boishakh specials, or BPL cricket betting offers), and new platform features via SMS or email to the contact details registered on your account. You may opt out of marketing communications at any time by contacting [email protected] with the subject line "Unsubscribe". Opting out of marketing will not affect your ability to use the platform or receive transactional notifications (such as deposit confirmations and withdrawal updates).
04 Legal Bases for Processing
yk99 processes your personal data on the following legal bases, depending on the specific processing activity involved:
- Contractual Necessity: Processing that is required to fulfil our contractual obligations to you as a registered player on the yk99 platform — including account management, transaction processing, and delivery of betting and gaming services.
- Legitimate Interests: Processing carried out in pursuit of yk99's legitimate business interests, provided those interests are not overridden by your fundamental rights. This includes fraud detection, platform security, responsible gaming monitoring, and platform analytics.
- Legal Obligation: Processing required to comply with applicable legal obligations, including anti-money laundering (AML) requirements, identity verification mandates, and any lawful request from competent authorities.
- Consent: Where yk99 relies on your consent as the basis for processing — specifically for sending marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
05 Sharing Your Data
yk99 may share your personal data with the following categories of third parties, strictly for the purposes described:
Game and Technology Providers
Certified game studios and technology providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) receive technical session data necessary to deliver their games on the yk99 platform. These providers do not receive your full identity or financial data. All game providers used by yk99 are bound by strict data processing agreements.
Payment Processing Partners
Mobile financial service providers — bKash, Nagad, Rocket, and Upay — receive the minimum transaction data required to process your deposits and withdrawals. yk99 shares your registered mobile number and transaction reference details with these providers. yk99 does not share additional profile data with payment partners beyond what is necessary for the specific transaction.
Identity Verification Services
Where yk99 uses a third-party KYC verification service to assist with identity document checks, your submitted identity documents and associated data will be processed by that service on yk99's behalf under a strict data processing agreement. yk99 remains the data controller throughout this process.
Fraud Detection and Security Services
yk99 uses automated fraud detection systems that may process your technical and behavioural data to identify suspicious account activity, bonus abuse, multi-accounting, or money laundering patterns. These systems operate under yk99's direct control or under binding service agreements with specialist providers.
Legal and Regulatory Disclosure
yk99 may disclose your personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required to do so by applicable law, court order, or formal regulatory request. yk99 will, where legally permitted, notify you of any such disclosure.
06 Cookies and Tracking
yk99 uses cookies and similar tracking technologies (including local storage and session storage) to operate and improve the platform. A cookie is a small text file placed on your device by the yk99 website when you visit it. Cookies allow the platform to recognise your browser, maintain your logged-in session, remember your preferences, and collect usage analytics.
Types of Cookies Used
- Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
- Functional Cookies: Used to remember your account preferences, language settings (English), and display options. These improve your experience but are not essential.
- Analytics Cookies: Used to collect aggregated, anonymised data about how users interact with the yk99 platform — pages visited, time on site, features used. This data informs platform improvements. yk99 uses privacy-respecting analytics tools and does not share raw analytics data externally.
- Security Cookies: Used to detect fraud, identify unusual login patterns, and enforce responsible gaming rules such as session time limits.
Managing Cookies
You can control and manage cookies through your browser settings. Most browsers allow you to block or delete cookies. Please note that blocking strictly necessary cookies will prevent you from logging in to your yk99 account. Blocking functional or analytics cookies will not prevent you from using the platform but may affect your experience. For detailed instructions on managing cookies in your specific browser, refer to your browser's help documentation.
yk99 does not use advertising cookies or cross-site tracking pixels. The yk99 platform does not participate in third-party behavioural advertising networks.
07 Data Retention
yk99 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or operational obligations. The retention periods below reflect our standard data management practices.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | Legal obligation, fraud prevention, dispute resolution |
| KYC identity documents | Duration of account + 5 years after closure | AML compliance requirements |
| Transaction records | Duration of account + 5 years after closure | Financial record-keeping and regulatory compliance |
| Betting and gaming history | Duration of account + 3 years after closure | Dispute resolution, responsible gaming audit |
| Support communications | 3 years from date of last communication | Service quality and dispute resolution |
| Technical and usage logs | 13 months on a rolling basis | Security monitoring and platform analytics |
| Marketing consent records | Until withdrawal of consent + 1 year | Evidence of lawful marketing basis |
When retention periods expire and no other legal obligation requires continued retention, yk99 will securely delete or irreversibly anonymise the relevant data. Anonymised and aggregated data (from which you cannot be individually identified) may be retained indefinitely for statistical and platform analysis purposes.
08 Data Security
The security measures implemented by yk99 include, but are not limited to, the following:
- 256-bit SSL/TLS Encryption: All data transmitted between your browser or device and the yk99 platform is encrypted in transit using 256-bit SSL/TLS protocols. This prevents interception of your data during transmission.
- Password Hashing: Your account password is never stored in plaintext. yk99 stores a cryptographic hash of your password using a strong, industry-accepted hashing algorithm. Even yk99 staff cannot read your password.
- Two-Factor Authentication (2FA): yk99 offers optional 2FA for all registered accounts. Players are strongly encouraged to enable 2FA to add an additional layer of protection against unauthorised login attempts.
- Access Controls: Access to personal data within yk99's internal systems is restricted on a strict need-to-know basis. Staff with legitimate operational reasons to access player data are bound by confidentiality obligations.
- Automated Threat Detection: yk99's platform infrastructure is monitored continuously for unusual access patterns, brute-force login attempts, and other security threats. Suspicious activity triggers automated alerts and, where necessary, temporary account lockdowns.
- Regular Security Reviews: yk99 conducts periodic internal security reviews of its data processing systems and access controls to identify and remediate potential vulnerabilities.
Whilst yk99 takes all reasonable measures to protect your personal data, no system connected to the internet is entirely immune from risk. In the event of a data security incident that materially affects your personal data, yk99 will notify affected users promptly via their registered contact details and will take immediate steps to contain and remediate the incident.
You also play an important role in keeping your account secure. You must not share your login credentials with any third party, must use a strong and unique password for your yk99 account, and must notify yk99 immediately at [email protected] if you believe your account has been accessed without your authorisation.
09 Your Rights
As a user of the yk99 platform, you have a number of rights in relation to the personal data we hold about you. These rights are described below, along with guidance on how to exercise them. To submit a data rights request, contact [email protected] with the subject line "Data Rights Request" and specify which right you wish to exercise and in relation to which data.
yk99 will respond to all valid data rights requests within 30 days of receipt. In complex cases, this period may be extended by a further 30 days, in which case yk99 will notify you of the extension and the reason for it within the initial 30-day period. Exercising any of the rights below will not affect your ability to continue using the yk99 platform, except where the exercise of a specific right (such as erasure) necessarily results in account closure.
Right of Access
You have the right to request a copy of all personal data yk99 holds about you. This is sometimes called a Subject Access Request (SAR). We will provide your data in a structured, readable format within 30 days.
Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You can update basic account details directly from your account settings, or contact support for other corrections.
Right to Erasure
In certain circumstances, you have the right to request deletion of your personal data. Note that yk99 is required by law to retain some data (such as transaction records) for a defined period, even after account closure.
Right to Restriction
You may request that yk99 restrict the processing of your data in specific circumstances — for example, while the accuracy of certain data is being contested or while an objection to processing is being assessed.
Right to Portability
Where processing is based on your consent or on contractual necessity, you have the right to receive your personal data in a machine-readable format so that it can be transferred to another service provider of your choice.
Right to Object
You have the right to object to processing of your personal data where yk99 is relying on legitimate interests as the legal basis. You also have an unconditional right to object to processing for direct marketing purposes at any time.
10 Children and Minors
If yk99 becomes aware that personal data has been collected from an individual who is under 21 years of age, that data will be deleted immediately and the associated account will be permanently closed. Any transactions or bets placed during the period of underage access will be voided and the matter may be referred to relevant authorities.
Parents and guardians who believe that a minor in their care may have registered on the yk99 platform or accessed it without authorisation are encouraged to contact yk99 immediately at [email protected] so that appropriate action can be taken without delay. yk99 cooperates fully with parental control service providers and internet safety organisations in preventing underage access to online gambling platforms.
11 Policy Updates
yk99 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable laws or regulations, or improvements to our platform and services. The updated Policy will be published at yk99.io/privacy-policy with a revised effective date at the top of the document.
Where changes to the Privacy Policy are material — meaning they significantly affect how your personal data is processed or your rights in relation to that data — yk99 will provide reasonable advance notice to registered players via the email address or mobile number on file. For minor or clarificatory changes, publication of the updated Policy on the website constitutes sufficient notice.
We encourage you to review this Privacy Policy periodically to stay informed about how yk99 protects your data. Your continued use of the yk99 platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with a material change to this Policy, you have the right to close your account and cease using the platform. To close your account, contact [email protected].
12 Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data yk99 holds about you, please contact our support and data team using the details below. We are committed to responding to all privacy-related enquiries promptly and thoroughly.
- Email: [email protected] (plain text — not a clickable link)
- Subject Line for Data Requests: "Data Rights Request" or "Privacy Enquiry"
- Response Time: Within 30 days of receipt of a valid request
- Platform: yk99.io
- Time Zone: Bangladesh Standard Time (BST, UTC+6)
- Support Hours: 24 hours a day, 7 days a week
All privacy and data rights enquiries are handled in English. Please write to us in English to ensure your request is processed without delay. For general account support, game queries, or payment assistance, you may also reach the yk99 support team at the same email address.
Our Privacy Commitments
Six principles that underpin how yk99 handles your personal data every day.
No Data Selling
yk99 will never sell, rent, or trade your personal data to third parties for their own marketing or commercial use. Your data exists solely to support the services you use on the yk99 platform.
End-to-End Encryption
All data transmitted between your device and yk99 is protected by 256-bit SSL/TLS encryption. Your password is stored as a one-way cryptographic hash — we cannot read it, and neither can anyone else.
Purpose Limitation
Your personal data is collected for specific, clearly stated purposes and is not used for anything beyond those purposes without your knowledge. We collect only what we genuinely need to deliver a safe platform.
Defined Retention Periods
yk99 keeps your data only as long as is legally or operationally necessary. When retention periods expire, data is securely deleted or anonymised. We publish our retention schedule openly in this Policy.
Full Player Rights
You have the right to access, correct, port, restrict, object to, and in certain cases erase the data yk99 holds about you. Submit a request any time via [email protected] and we will respond within 30 days.
No Advertising Tracking
yk99 does not use advertising cookies, third-party tracking pixels, or behavioural advertising networks. We do not participate in cross-site data sharing with ad platforms. Your browsing on yk99 stays on yk99.
Questions About Your Data?
Our support team is available 24/7 to answer any privacy questions, process data rights requests, or help you manage your account settings. You can also review our full Terms & Conditions or explore the platform.
🔞 21+ only. Gambling involves financial risk. Please play responsibly. Contact: [email protected]