Privacy Policy — How stv99 Collects, Uses, and Protects Your Personal Data
This Privacy Policy explains in clear, formal English how stv99 handles the personal data of registered players and site visitors in Bangladesh. Your privacy is a core commitment of the stv99 platform, not an afterthought.
1 Introduction
This Privacy Policy ("Policy") describes how stv99 ("stv99", "the Platform", "we", "us", "our") collects, processes, stores, and protects the personal data of individuals ("Player", "User", "you", "your") who register accounts, place bets, play games, or otherwise interact with the stv99 platform at stv99.io. stv99 is an online betting and gaming platform serving players in Bangladesh, offering services in English and transacting in Bangladeshi Taka (BDT).
stv99 takes data privacy seriously. This Policy has been written in plain formal English to ensure that every player can understand exactly what personal data we collect, why we collect it, how long we keep it, and what rights you have in relation to it. We are committed to handling your data with transparency, integrity, and in a manner consistent with applicable data protection principles.
This Policy should be read alongside the stv99 Terms & Conditions and the stv99 Responsible Gaming Policy, both of which are incorporated by reference and together form the complete agreement between you and stv99. In the event of any conflict between this Policy and the Terms & Conditions on matters relating to data, this Policy shall prevail.
2 Data We Collect
stv99 collects personal data from you in three principal ways: data you provide directly, data generated automatically by your use of the Platform, and data obtained from third-party verification and payment service providers. The categories of personal data we collect are described in the table below.
| Category | Specific Data Points | Source |
|---|---|---|
| Identity Data | Full name, date of birth, gender, National Identity Card (NID) number, passport number | Provided by you at registration or KYC verification |
| Contact Data | Mobile phone number, email address, residential address, city (e.g., Dhaka, Chittagong, Sylhet) | Provided by you at registration or profile update |
| Financial Data | bKash/Nagad/Rocket account numbers, Visa/Mastercard last four digits, deposit and withdrawal history, account balance | Provided by you and generated by Platform transactions |
| Technical Data | IP address, browser type and version, device type, operating system, session timestamps, referral URL | Automatically collected via cookies and server logs |
| Usage Data | Pages visited, games played, bets placed, bet amounts, game duration, in-play behaviour patterns | Automatically generated by your Platform activity |
| Communications Data | Live chat transcripts, email correspondence, support ticket content | Generated when you contact stv99 customer support |
| Verification Data | Copies of identity documents, selfie images, proof-of-address documents | Provided by you during KYC or enhanced due diligence checks |
We do not collect special categories of sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health information, or biometric data, except where a copy of an identity document incidentally contains such information and is required solely for identity verification purposes.
3 How We Use Your Data
stv99 uses the personal data we collect for the following purposes. We process your data only for the purposes listed here and do not use it in any manner inconsistent with this Policy without first obtaining your consent or updating this Policy.
- Account Creation and Management: To register your account, verify your identity, manage your profile, and maintain your account in accordance with the stv99 Terms & Conditions.
- Transaction Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and other supported payment methods, and to maintain accurate records of all financial transactions.
- Platform Delivery: To provide access to the stv99 sportsbook, live casino, slots, and other gaming products; to settle bets; and to deliver a personalised gaming experience.
- Customer Support: To respond to your enquiries, resolve disputes, and maintain records of our communications with you, consistent with our 24/7 English-language support commitment.
- Legal and Regulatory Compliance: To comply with applicable anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, and any other legal or regulatory obligations to which stv99 is subject.
- Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, and any other misuse of the Platform.
- Responsible Gaming: To monitor betting patterns for indicators of problem gambling and to administer responsible gaming tools including deposit limits, cooling-off periods, and self-exclusion requests.
- Service Improvement: To analyse usage patterns in aggregate form to improve the Platform's performance, design, and product offerings. Individual usage data used for this purpose is anonymised wherever possible.
- Marketing Communications: To send you relevant promotional offers, bonus notifications, and Platform updates — but only where you have given your consent to receive such communications and only via the contact channel (email or SMS) you have confirmed.
4 Legal Basis for Processing
stv99 processes your personal data on one or more of the following legal bases, depending on the specific processing activity and the applicable legal framework:
- Contractual Necessity: Processing required to fulfil the contract between you and stv99, including account registration, bet settlement, and payment processing.
- Legal Obligation: Processing required to comply with applicable laws and regulations, including AML obligations, KYC requirements, and financial record-keeping requirements.
- Legitimate Interests: Processing carried out for the legitimate business interests of stv99, including fraud prevention, platform security, and service improvement, provided that such interests are not overridden by your data protection rights.
- Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications and for the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.
5 Data Sharing and Disclosure
stv99 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and only to the extent necessary for the stated purpose:
- Payment Processors: We share financial data with bKash, Nagad, Rocket, Upay, Visa, Mastercard, and other payment service providers to process your deposits and withdrawals. Each payment provider is bound by their own data protection obligations.
- Identity Verification Providers: We use third-party KYC service providers to verify identity documents and confirm the accuracy of registration information. These providers process identity and verification data on our behalf under strict data processing agreements.
- Game Providers: Game studios and providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive certain technical and usage data to enable the delivery of their games within the stv99 Platform. They do not receive your full identity or financial profile.
- IT and Hosting Providers: Our Platform infrastructure is hosted on secure servers. Our hosting and technology providers may have access to technical data as part of platform maintenance and support operations.
- Regulatory and Law Enforcement Authorities: We may be required by law to disclose your personal data to competent authorities, including for AML reporting, fraud investigations, or in response to a valid legal order. stv99 will notify you of such a disclosure where legally permitted to do so.
- Business Successors: In the event of a merger, acquisition, or sale of all or part of the stv99 business, your personal data may be transferred to the relevant successor entity, subject to equivalent data protection obligations.
All third parties with whom stv99 shares personal data are required to process it in a manner consistent with this Policy and applicable data protection law. We do not permit third-party recipients to use your data for their own purposes beyond the scope of the service they are providing to stv99.
6 Cookies and Tracking Technologies
The stv99 platform uses cookies and similar tracking technologies to deliver a functional, personalised, and secure user experience. A cookie is a small text file placed on your device by a web server. The following categories of cookies are used on the stv99 platform:
- Essential Cookies: These are strictly necessary for the Platform to function and cannot be disabled. They include session authentication tokens, CSRF protection tokens, and load-balancing cookies. No consent is required for essential cookies.
- Functional Cookies: These cookies remember your preferences such as language settings and game view preferences to enhance your experience on return visits.
- Analytics Cookies: We use anonymised analytics cookies to understand aggregate patterns in how players navigate and use the Platform. This data helps us improve site performance and content. These cookies are deployed only with your consent.
- Security Cookies: These cookies support fraud detection and account security monitoring, including detection of anomalous login patterns and geographic access anomalies.
Most browsers allow you to control cookie settings through the browser's privacy or settings menu. Disabling essential cookies may impair your ability to log in and use the Platform. Disabling analytics or functional cookies will not prevent you from accessing the Platform or placing bets.
7 Data Retention
stv99 retains your personal data for as long as is necessary to fulfil the purposes described in this Policy, unless a longer retention period is required or permitted by applicable law. The following general retention periods apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account and Identity Data | Duration of account + 5 years post-closure | Legal and regulatory obligations; AML record-keeping |
| Financial Transaction Data | 7 years from transaction date | Financial record-keeping and AML compliance requirements |
| Betting and Gaming Records | 5 years from date of bet settlement | Dispute resolution and regulatory audit trail |
| Support Communications | 3 years from last communication | Customer service quality and dispute resolution |
| Technical and Usage Data | 13 months on a rolling basis | Fraud detection and platform performance analysis |
| Marketing Consent Records | Duration of consent + 3 years | Evidence of lawful marketing consent basis |
Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised. Where anonymisation is applied, the resulting data set no longer constitutes personal data and may be retained indefinitely for statistical and analytical purposes.
8 Data Security
stv99 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes, but is not limited to, the following measures:
- SSL/TLS Encryption: All data transmitted between your device and the stv99 platform is encrypted using industry-standard SSL/TLS protocols. You can verify this by the padlock icon in your browser's address bar when visiting stv99.io.
- Two-Factor Authentication: All account logins require OTP-based two-factor authentication delivered to your registered mobile number, providing a second layer of protection beyond your password.
- Password Security: Passwords are stored using strong cryptographic hashing algorithms. Plain-text passwords are never stored or transmitted by stv99.
- Access Controls: Access to personal data within stv99's systems is restricted to authorised personnel on a strict need-to-know basis. All internal data access is logged and subject to periodic review.
- Penetration Testing: The stv99 platform undergoes periodic security assessments to identify and remediate potential vulnerabilities before they can be exploited.
- Incident Response: stv99 maintains a documented data breach response procedure. In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify affected players without undue delay.
9 Your Data Rights
Subject to applicable law and certain legal exemptions (such as AML record-keeping obligations), you have the following rights with respect to your personal data held by stv99. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request". We aim to respond to all data rights requests within 30 days of receipt.
- Right of Access: You have the right to request a copy of the personal data that stv99 holds about you, together with information about how it is being used. This is sometimes referred to as a Subject Access Request (SAR).
- Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay.
- Right to Erasure: In certain circumstances, you have the right to request deletion of your personal data. This right is subject to exceptions — for example, we cannot delete data that we are legally required to retain for AML or financial record-keeping purposes.
- Right to Restriction of Processing: You may request that we restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where you have objected to processing pending verification of our legitimate interests.
- Right to Data Portability: Where processing is based on your consent or on a contractual basis, you have the right to receive a copy of the personal data you have provided to us in a structured, commonly used, machine-readable format.
- Right to Object: You have the right to object at any time to processing of your personal data for direct marketing purposes. You may also object to processing based on legitimate interests, though stv99 may be able to demonstrate compelling legitimate grounds that override your interests.
- Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.
10 Children and Minors
The stv99 platform is strictly intended for adults aged 21 years and above. stv99 does not knowingly collect, process, or store personal data from any person under the age of 21. If stv99 discovers or is notified that it has received personal data from a person under 21, all data associated with that individual will be immediately deleted and the account will be permanently closed.
Parents and guardians who believe that a person under 21 in their household has registered on or accessed the stv99 platform should contact us immediately at [email protected]. stv99 takes underage gambling prevention extremely seriously and will act promptly on all such reports. We also encourage the use of parental control and content filtering software to prevent minors from accessing online gambling platforms.
11 Third-Party Links and Services
The stv99 platform may contain references to or integrate third-party game providers, payment processors, and technology services. While stv99 takes care to work only with reputable service providers, we do not control and are not responsible for the privacy practices of third-party providers. Each third-party provider operates under their own privacy policy, and we encourage you to review those policies where relevant.
stv99 does not embed third-party advertising networks, social media tracking pixels, or affiliate tracking scripts that collect personal data for purposes unrelated to the delivery of the stv99 platform. Any tracking technologies deployed on stv99.io are used solely for the operational, security, and analytical purposes described in this Policy.
12 Changes to This Privacy Policy
stv99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, Platform features, or applicable legal requirements. The effective date displayed at the top of this document reflects the date the current version came into force. Where changes are material, stv99 will notify registered players via email or an in-platform notification at least seven days before the changes take effect, where reasonably practicable.
We encourage all players to review this Policy periodically to stay informed about how we protect your personal data. Continued use of the stv99 platform following publication of an updated Policy constitutes your acceptance of the revised terms. If you do not accept the revised Policy, you must cease using the Platform and contact support to arrange account closure.
13 Contact Us
If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which stv99 handles your personal data, please contact our dedicated privacy support team. All privacy-related enquiries are handled by trained staff who are familiar with applicable data protection requirements.
Email (plain text — not a clickable link): [email protected] — please use the subject line "Privacy Policy Enquiry" or "Data Rights Request" so your message is routed to the appropriate team. Our support team operates 24 hours a day, 7 days a week, aligned to Bangladesh Standard Time (BST, UTC+6), and aims to acknowledge all privacy-related requests within 24 hours and provide a substantive response within 30 days.
For urgent concerns relating to a suspected data breach or unauthorised access to your account, please use the live chat function within the Platform for the fastest response time.
Six Ways stv99 Protects Your Personal Data
From the moment you register to every transaction you make, these principles guide how we handle your data at stv99.
SSL Encryption on All Sessions
Every page of the stv99 platform is delivered over HTTPS with SSL/TLS encryption. Data in transit — including your login credentials, payment details, and bet history — is protected from interception at every step.
KYC Without Data Exploitation
We collect identity documents strictly to verify your age and identity as required by our platform rules. KYC data is never used for advertising profiling and is retained only for the minimum period required by applicable compliance obligations.
No Data Sales to Third Parties
stv99 does not sell, rent, or broker your personal data to any third party for their own marketing or commercial purposes. Data shared with service providers is restricted to what is strictly necessary for operational delivery.
Consent-Based Marketing
Promotional emails and SMS messages are sent only with your explicit opt-in consent. You can withdraw marketing consent at any time from your account settings — no penalties, no delays, no questions asked.
Defined Retention Periods
stv99 does not hold your data indefinitely. Clear retention periods — ranging from 13 months for technical logs to 7 years for financial records under AML rules — govern when data is securely deleted or anonymised.
Your Rights Are Actionable
Access, rectification, erasure, portability, restriction, and objection rights are all available to stv99 players. Submit a data rights request to [email protected] and our team will respond within 30 days — displayed here as plain text only, not a clickable link.
Questions About Your Privacy at stv99?
Browse our FAQ for quick answers on account security and data handling, or explore the stv99 platform with confidence knowing your data is protected.