Every transaction and piece of personal information you share with xa999 is stored with the highest level of security. What data we collect, why we collect it, and where it is stored — all of that is explained here in plain, easy-to-understand terms.
Data protection is not just a promise — xa999 has technical safeguards in place at every level.
Thank you for taking the time to read xa999's Privacy Policy. It is a legal document, but we have made every effort to write it in clear, accessible language so you can genuinely understand what happens with your data. xa999Using any service on xa999 means you agree to this policy — so take a moment to read through it.
When creating an account on xa999, you will need to provide some basic details — your name, mobile number, date of birth, and a password. This information is essential for identity verification and account security, so the account cannot be created without it.
Identity verification (KYC) is required for large withdrawals or regular account activity. This involves submitting a photo of your National ID (NID) or passport along with a selfie. Proof of address may also be requested in some cases.
When you use xa999, certain information is collected automatically — such as your device type, IP address, browser type, login time, and the pages you visit on the platform. This data is used for security purposes and to improve the platform.
Deposit and withdrawal records, payment methods used (bKash/Nagad numbers), and transaction timestamps are all stored for financial security and dispute resolution purposes.
Xa999 uses your information only for the specific purposes for which it was collected — it is never used beyond those purposes. The primary uses are outlined below:
| Data Type | Purpose of Use | Retention Period |
|---|---|---|
| Name & Mobile Number | Account Identity, Login Verification & Support Communication | For the Duration the Account Remains Active |
| Date of Birth | Age Verification (Confirming 18+) | Permanent |
| NID & Selfie | KYC Verification & Fraud Prevention | 3 Years |
| Transaction Details | Financial Records, Dispute Resolution & AML Compliance | 5 Years |
| IP Address & Device | Security Monitoring, Fraud Detection & Platform Improvement | 1 Year |
| Gaming History | Responsible Gaming Monitoring & Personalized Experience | 3 Years |
Xa999 does not use your data for advertising, sale to marketing parties, or third-party profiling. This commitment is a core principle of xa999.
Xa999 retains your data only for as long as it is needed to provide services or to meet legal obligations. Once an account is closed, the personal data deletion process begins — however, financial records must be kept for 5 years for legal compliance.
If you would like all of your data deleted, Help Center Send us a request by email. The process will be completed within 30 business days. However, certain data may need to be retained for a specific period due to ongoing investigations or legal obligations.
Cookies are small files stored in your browser. xa999 uses cookies for three main purposes — to remember your login session, save your language preference, and measure how well the site is performing.
You can disable analytics and preference cookies at any time through your browser settings. Keep in mind that disabling essential cookies may affect login functionality and core site features.
The xa999 app stores a device ID solely to detect suspicious logins from the same device. This information is never used for advertising purposes.
As an xa999 user, you have several rights over your own data. These are not just words on a page — you can actually exercise them.
Xa999 never sells your data to advertisers — that is a firm commitment. However, there are a few limited situations where information may be shared:
No data is shared with any third party beyond these cases.
Xa999 strictly prohibits anyone under the age of 18 from creating an account or using its services. If it is found that an account contains information belonging to a minor, that account is immediately closed and the data is deleted.
This Privacy Policy may be updated from time to time. If significant changes are made, you will be notified via SMS to your registered mobile number or through a notification on the platform. Continued use of the service after any changes will be considered acceptance of the updated policy. The date of the latest policy update will always be displayed at the top of this page.
It is completely understandable to have concerns about sharing personal information on an online platform — especially when it involves sensitive details like bank information and identification documents. xa999This question matters even more for xa999, given that financial transactions are involved.
Xa999 stores data on international-standard cloud servers that are ISO 27001 certified. These servers are physically secured, monitored around the clock, and backed up on a regular basis. Your information stays on these servers only — it is never sent to third-party servers, except where strictly necessary for payment processing.
When you make a payment, your bKash or Nagad number is recorded in xa999's system — this is necessary for processing future withdrawals to that number and for resolving any disputes. However, this number is stored in encrypted form and cannot be viewed directly by any xa999 staff member. Only authorised members of the designated payment team can access it for specific purposes.
Xa999's system sends an immediate alert whenever a login attempt is made from a new device or an unfamiliar location. After a set number of incorrect password entries, your account is temporarily locked. The only way to unlock it is via an OTP sent to your registered mobile number — no other method is available.
In the event of a data breach, xa999 is required to notify affected users within 72 hours. The impacted systems will be shut down immediately, an investigation will be launched, and users will be advised to change their passwords. This policy is in full compliance with GDPR regulations.
Xa999 does everything it can on its end, but a few simple steps on your part can make your account significantly more secure. Use a strong password — never use your date of birth or phone number as a password. Never share your login credentials with anyone. If you log in from a cyber café or someone else's device, always remember to log out afterwards. xa999's support team will never ask for your password or OTP — if anyone does, it's a scam.
Bank-grade security, a transparent privacy policy, and support in English — your experience at xa999 is in safe hands.