Privacy Policy

Last revised: 27 June 2025

Welcome to Play99Exch . Protecting your privacy is important to us.

This Privacy Policy describes how we gather, utilize, disclose, and safeguard your personal information when you access play99exch.net.in (the “Site”) or any associated services—such as our mobile site, app, and customer-support channels (collectively, the “Services”).

  1. We are

Play99Exch functions as an India-focused platform for sports betting and casino activities. Headquartered in the UAE as Play99Exch Private Ltd, our entity functions under that jurisdiction’s laws and partners with local marketing teams in India.

  1. Coverage of This Policy

This Privacy Policy governs the information practices for every visitor, registered user, and individual who interacts with our Services.

By accessing the Site or using any of its features, you agree to the practices outlined in this policy. In the event you disagree, please refrain from using our Services.

  1. Information We Collect

Category

Account Data Name, phone number, email, username, password, date of birth, gender

Identity and KYC

Financial Data

Usage Data

Communications

Marketing preferences

  1. The Purpose Behind Collecting Your Data

Account establishment & verification

Age and identity verification (AML / KYC / responsible gaming)

Handling deposits, wagers, and withdrawals

Customising odds, bonuses, and content

Fraud detection and security monitoring

Customer support, along with dispute resolution.

Adherence to legal and regulatory requirements (e.g., tax, AML, data-retention laws)

Marketing (applied only with your consent; you can opt out at any time)

  1. Lawful Basis (GDPR / Indian Draft DPDP 2023)

Contract – to furnish the betting service you have requested

Legitimate Interest – fraud prevention, network security, service improvement

Legal Obligation

Consent – direct marketing, cookies, and specific KYC checks

  1. The Ways in Which We Share Information

We never sell your personal data.

We may disclose only minimal data to:

Payment processors and banking partners (UPI, Paytm, PhonePe, IMPS, USDT)

KYC and AML providers (ID verification tools, sanctioned-person screening)

Cloud and IT providers (secure hosting, analytical services, push-notification tools)

Regulatory bodies, courts, and law-enforcement agencies, when obliged to do so by law.

Marketing partners (only with your consent and in accordance with data-processing agreements)

Each third-party partner must adhere to our security guidelines and satisfy applicable privacy regulations.

  1. Cookies & Tracking Technologies

Essential cookies – retain sign-in status; store user preferences.

Performance cookies – Google Analytics (anonymised IP)

Marketing cookies — commence only after obtaining explicit consent.

You can control cookies through your browser settings or by using the cookie banner on our site.

  1. Data Security

Passwords are securely stored using AES-256 encryption, along with hashing and salted hashing.

TLS 1.3 protects all data transmissions.

Staff accounts require two-factor authentication.

Regular penetration tests every quarter alongside ISO 27001 audits once each year.

Tightly enforced role-based access controls (RBAC)

  1. Data Retention

Data Category

KYC documentation Minimum 5 years after an account is closed (AML requirements)

Transaction data 8 years (tax & accounting)

Marketing consents Remain valid until withdrawn, plus a 12-month log is retained.

Support tickets—3 years

Once the retention period expires, the data is securely anonymised or deleted.

  1. Your Rights

Your jurisdiction may entitle you to:

Access – submit a request for a copy of your personal data.

Rectification – amend inaccurate information.

Erasure – eliminate information unnecessary for legal compliance (i.e. the “right to be forgotten”)

Restriction – restrict processing under specific circumstances.

Portability – obtain data in a format readable by machines

Opt-out – cease receiving marketing emails/SMS/WhatsApp at any time.

Please reach out to us (see Section 12) to exercise these rights. We will reply within thirty days.

  1. Children’s Privacy

Play99Exch is expressly intended for users aged eighteen and above. We do not intentionally collect data from minors. If you suspect that a minor has provided us with data, please contact us straightaway so we can promptly remove the account.

  1. Contact Us

Data Protection Officer (DPO)

Play99Exch Private Ltd

Dubai Silicon Oasis HQ

📧 privacy@play99exch.net.in

WhatsApp/Telegram support lines are accessible from within the app.

Indian users may reach our designated grievance officer under Rule 3(2) of the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules 2021 at:

grievance-officer@play99exch.net.in

Response window: 24–48 hours

  1. Policy Updates

The Privacy Policy may be revised from time to time to align with legal, operational, or technological changes. We will notify any substantial change, whether by email or in-app, a minimum of seven days before it goes into effect. By continuing to use our Services after the updates, you are deemed to have accepted the updated Policy.