Your Privacy Matters
at ae99

ae99 ("ae99", "we", "us", "our") operates the online gaming and sports betting platform available at ae99.im, including any associated mobile applications, software, and related services (collectively, the "Platform"). ae99 is the data controller responsible for the personal data collected through the Platform.

This Privacy Policy ("Policy") sets out the basis on which ae99 collects, processes, stores, and shares the personal data of individuals who access or use the Platform ("you", "your", "Player", "User"). It applies to all players registered on the Platform, all visitors to ae99.im, and all individuals who contact ae99's customer support team.

Our Terms & Conditions, available at /terms-conditions, incorporate this Privacy Policy by reference. Accepting the Terms & Conditions also constitutes acceptance of this Policy.

ae99 collects the following categories of personal data. Not all categories apply to every user — the data collected depends on how you interact with the Platform.

ae99 does not collect or process sensitive special-category data such as racial or ethnic origin, political opinions, religious beliefs, health data (except in the context of responsible gaming referrals), or biometric data for identification purposes.

ae99 collects personal data through three primary channels:

• Directly from you: When you register an account, complete the KYC verification process, make a deposit or withdrawal, contact customer support, or update your account settings, you provide data directly to ae99.
• Automatically through the Platform: When you visit ae99.im or use the Platform, certain technical data is collected automatically via server logs, cookies, and similar tracking technologies. This includes your IP address, device type, browser version, pages visited, and session duration. See Section 7 for full details on cookies.
• From third parties: ae99 may receive data about you from payment processing partners (such as bKash, Nagad, and Rocket) to confirm transaction status, from identity verification service providers during the KYC process, and from fraud prevention and anti-money laundering screening services.

ae99 uses the personal data it collects for the following purposes. Each purpose is matched to the legal basis on which processing occurs — see Section 5 for more detail on legal bases.

• Account management: Creating, maintaining, and administering your ae99 account, including processing your registration, verifying your identity, and managing your account settings.
• Transaction processing: Processing deposits, withdrawals, bonus credits, and related financial transactions via bKash, Nagad, Rocket, Upay, and other supported payment methods.
• KYC & compliance: Verifying your age (21+), identity, and source of funds to comply with our anti-money laundering and responsible gaming obligations.
• Customer support: Responding to queries, complaints, and support requests submitted via live chat or email.
• Platform improvement: Analysing aggregated and anonymised usage data to identify technical issues, improve platform performance, and develop new features.
• Fraud prevention: Detecting and preventing fraudulent activity, unauthorised account access, money laundering, bonus abuse, and other prohibited conduct.
• Responsible gaming: Monitoring account activity to identify patterns that may indicate problem gambling, and proactively reaching out to players where welfare concerns are identified.
• Marketing communications: Sending you promotional offers, bonus notifications, and platform updates by email or SMS — but only where you have opted in to receive such communications. You can opt out at any time.
• Legal compliance: Maintaining records and responding to requests from regulatory or law enforcement authorities where ae99 is legally required to do so.

ae99 does not use your personal data to make fully automated decisions that produce significant legal effects on you without human review.

ae99 processes your personal data on one or more of the following legal bases, depending on the nature of the processing activity:

• Contract performance: Processing that is necessary to provide the services you have requested — including account creation, transaction processing, and customer support — is carried out on the basis that it is necessary for the performance of a contract with you.
• Legal obligation: Processing that is required to comply with applicable laws — including age and identity verification, anti-money laundering checks, and the retention of financial records — is carried out on the basis of legal obligation.
• Legitimate interests: Processing for fraud prevention, platform security, abuse detection, and general platform improvement is carried out on the basis of ae99's legitimate interest in operating a safe, secure, and commercially viable platform, provided that interest is not outweighed by your rights and interests.
• Consent: Processing for direct marketing communications is carried out on the basis of your explicit consent. You may withdraw consent at any time by updating your preferences in your account dashboard or contacting our support team.

ae99 does not sell your personal data to any third party. We share data only in the following circumstances and only to the extent necessary for each stated purpose:

• Payment processors: We share transaction-related data with bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, Mastercard, and other payment partners to process deposits and withdrawals.
• Identity verification providers: We share identity and document data with third-party KYC and age-verification service providers for the purpose of fulfilling our compliance obligations.
• Fraud and AML screening: We share data with fraud prevention and anti-money laundering screening services to protect the integrity of the Platform and comply with financial crime prevention obligations.
• IT infrastructure providers: We share data with hosting, cloud storage, and security service providers who maintain the technical infrastructure underlying the Platform. These providers are contractually bound to handle data only on ae99's instructions.
• Legal and regulatory authorities: We disclose data to law enforcement agencies, regulatory bodies, or courts when we are legally required to do so, or when disclosure is necessary to protect the rights, property, or safety of ae99, its players, or the public.
• Business transfers: In the event of a merger, acquisition, restructuring, or sale of ae99's business, player data may be transferred to the acquiring entity as part of that transaction. Players will be notified in advance where required by law.

ae99 uses cookies and similar tracking technologies on the Platform to ensure it functions correctly, to improve your experience, and to gather analytics data that helps us understand how players use the Platform. This section explains what cookies we use and how you can control them.

• Essential cookies: These cookies are strictly necessary for the Platform to function. They enable core features such as session management, login persistence, and security token verification. The Platform cannot function without these cookies and they cannot be disabled.
• Analytics cookies: These cookies help ae99 understand how visitors interact with the Platform, including which pages are visited most frequently and where users encounter errors. Data collected by analytics cookies is aggregated and anonymised. These cookies can be disabled in your browser settings.
• Preference cookies: These cookies remember your settings and preferences — such as your selected language, display preferences, and responsible gaming settings — so you do not need to re-enter them on each visit.
• Session security cookies: These short-lived cookies are used to protect your session against cross-site request forgery (CSRF) and other common web security vulnerabilities. They expire when you close your browser.

You can manage and delete cookies through your browser settings at any time. Please note that disabling essential cookies will impair the functionality of the Platform and may prevent you from logging in or using certain features. ae99 does not use third-party advertising or retargeting cookies.

ae99 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or for as long as required by law. The following general retention periods apply:

• Account data: Retained for the duration of your active account relationship with ae99, plus a period of five years following account closure, in order to comply with financial record-keeping and anti-money laundering obligations.
• Transaction records: Retained for a minimum of five years from the date of the transaction, in compliance with applicable financial regulations.
• KYC documents: Retained for a minimum of five years from the date of submission, or longer where required by applicable anti-money laundering law.
• Gaming and betting records: Retained for five years from the date the activity occurred.
• Customer support records: Retained for two years from the date the support interaction was closed, unless the matter is subject to ongoing legal proceedings.
• Technical and log data: Typically retained for 12 months from the date of collection, after which it is anonymised or deleted.
• Marketing preferences: Retained until you withdraw consent or close your account, whichever is earlier.

As a player on the ae99 Platform, you have the following rights in relation to your personal data. ae99 is committed to facilitating the exercise of these rights promptly and without undue burden.

• Right of access: You have the right to request a copy of the personal data ae99 holds about you, together with information about how it is used and shared.
• Right to rectification: You have the right to request that inaccurate or incomplete personal data held by ae99 is corrected or completed.
• Right to erasure: In certain circumstances, you have the right to request that ae99 deletes your personal data. This right is subject to ae99's legal obligations to retain data — for example, transaction records that must be retained under anti-money laundering law cannot be deleted on request.
• Right to restrict processing: In certain circumstances, you have the right to request that ae99 restricts the processing of your personal data — for example, while a query about the accuracy of your data is being resolved.
• Right to data portability: You have the right to receive the personal data you have provided to ae99 in a structured, commonly used, machine-readable format, and to request that it be transmitted to another data controller where technically feasible.
• Right to withdraw consent: Where ae99 processes your data on the basis of consent (such as for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
• Right to object: You have the right to object to processing carried out on the basis of legitimate interests. ae99 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

To exercise any of these rights, please contact ae99 at [email protected] with a clear description of your request and sufficient information to verify your identity. ae99 aims to respond to all data rights requests within 30 days.

The ae99 Platform is strictly intended for adults aged 21 years and above. ae99 does not knowingly collect, process, or store personal data relating to individuals under the age of 21. The Platform's registration process includes an age verification step designed to prevent minors from creating accounts.

If ae99 becomes aware that personal data has been collected from a person under the age of 21 — whether through a registration bypass, false age declaration, or any other means — ae99 will immediately suspend the relevant account, delete the personal data associated with it, and take any other steps required to protect the minor's privacy and safety.

If you have reason to believe that a person under the age of 21 has registered on the ae99 Platform or has had their personal data collected without appropriate consent, please notify us immediately at [email protected]. ae99 takes underage access extremely seriously and will investigate all reports promptly.

ae99 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include:

• Encryption in transit: All data transmitted between your device and ae99's servers is encrypted using 256-bit SSL/TLS encryption, the same standard used by major international banks.
• Encryption at rest: Sensitive stored data — including financial data and identity documents — is encrypted at rest using industry-standard encryption algorithms.
• Access controls: Access to personal data within ae99's organisation is strictly limited to personnel who require it to perform their job functions. Access rights are reviewed regularly and revoked when no longer necessary.
• Multi-factor authentication: ae99's internal systems require multi-factor authentication for access by staff, reducing the risk of insider threats and credential-based attacks.
• Security audits: ae99's platform and data infrastructure are subject to regular independent security assessments, penetration testing, and vulnerability scanning.
• Incident response: ae99 maintains a documented data breach response plan. In the event of a data breach that poses a risk to your rights and freedoms, ae99 will notify affected players promptly and take all reasonable steps to mitigate harm.

The ae99 Platform may, from time to time, contain references to third-party websites or services — for example, information about payment partners such as bKash or Nagad. ae99 is not responsible for the privacy practices or data handling policies of any third-party website or service, and the inclusion of any reference to a third party does not constitute an endorsement of that party's privacy practices.

ae99 strongly recommends that you review the privacy policy of any third-party website or service you visit, particularly where you are providing personal or financial information to that party. ae99's Privacy Policy applies exclusively to data collected and processed through the ae99 Platform at ae99.im.

ae99 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform functionality. When we make material changes to this Policy, we will notify registered players via the email address on file and will update the "Last updated" date at the top of this page.

We encourage you to review this Privacy Policy periodically to stay informed about how ae99 protects your personal data. Your continued use of the Platform following the publication of a revised Privacy Policy constitutes your acceptance of the changes, to the extent permitted by applicable law.

If you have concerns about any changes to this Policy, please contact our support team before continuing to use the Platform. Where a change significantly affects your rights or how your data is used, we will seek fresh consent where required.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way ae99 handles your personal data, please contact our dedicated privacy support team using the details below. We are committed to addressing all privacy-related queries promptly and transparently.

When submitting a data rights request, please provide your full name, registered email address, and a clear description of your request so that ae99 can verify your identity and process your query without unnecessary delay. ae99 may ask for additional verification documents where the nature of the request requires it.

All privacy correspondence is treated with strict confidentiality and is handled only by authorised members of ae99's privacy and compliance team. ae99 does not share the contents of privacy requests with any third party except where legally required to do so.