Privacy Policy
Last revised: 27 June 2025
Welcome to Play99Exch . Protecting your privacy is important to us.
This Privacy Policy describes how we gather, utilize, disclose, and safeguard your personal information when you access play99exch.net.in (the “Site”) or any associated services—such as our mobile site, app, and customer-support channels (collectively, the “Services”).
- We are
Play99Exch functions as an India-focused platform for sports betting and casino activities. Headquartered in the UAE as Play99Exch Private Ltd, our entity functions under that jurisdiction’s laws and partners with local marketing teams in India.
- Coverage of This Policy
This Privacy Policy governs the information practices for every visitor, registered user, and individual who interacts with our Services.
By accessing the Site or using any of its features, you agree to the practices outlined in this policy. In the event you disagree, please refrain from using our Services.
- Information We Collect
Category
Account Data Name, phone number, email, username, password, date of birth, gender
Identity and KYC
Financial Data
Usage Data
Communications
Marketing preferences
- The Purpose Behind Collecting Your Data
Account establishment & verification
Age and identity verification (AML / KYC / responsible gaming)
Handling deposits, wagers, and withdrawals
Customising odds, bonuses, and content
Fraud detection and security monitoring
Customer support, along with dispute resolution.
Adherence to legal and regulatory requirements (e.g., tax, AML, data-retention laws)
Marketing (applied only with your consent; you can opt out at any time)
- Lawful Basis (GDPR / Indian Draft DPDP 2023)
Contract – to furnish the betting service you have requested
Legitimate Interest – fraud prevention, network security, service improvement
Legal Obligation
Consent – direct marketing, cookies, and specific KYC checks
- The Ways in Which We Share Information
We never sell your personal data.
We may disclose only minimal data to:
Payment processors and banking partners (UPI, Paytm, PhonePe, IMPS, USDT)
KYC and AML providers (ID verification tools, sanctioned-person screening)
Cloud and IT providers (secure hosting, analytical services, push-notification tools)
Regulatory bodies, courts, and law-enforcement agencies, when obliged to do so by law.
Marketing partners (only with your consent and in accordance with data-processing agreements)
Each third-party partner must adhere to our security guidelines and satisfy applicable privacy regulations.
- Cookies & Tracking Technologies
Essential cookies – retain sign-in status; store user preferences.
Performance cookies – Google Analytics (anonymised IP)
Marketing cookies — commence only after obtaining explicit consent.
You can control cookies through your browser settings or by using the cookie banner on our site.
- Data Security
Passwords are securely stored using AES-256 encryption, along with hashing and salted hashing.
TLS 1.3 protects all data transmissions.
Staff accounts require two-factor authentication.
Regular penetration tests every quarter alongside ISO 27001 audits once each year.
Tightly enforced role-based access controls (RBAC)
- Data Retention
Data Category
KYC documentation Minimum 5 years after an account is closed (AML requirements)
Transaction data 8 years (tax & accounting)
Marketing consents Remain valid until withdrawn, plus a 12-month log is retained.
Support tickets—3 years
Once the retention period expires, the data is securely anonymised or deleted.
- Your Rights
Your jurisdiction may entitle you to:
Access – submit a request for a copy of your personal data.
Rectification – amend inaccurate information.
Erasure – eliminate information unnecessary for legal compliance (i.e. the “right to be forgotten”)
Restriction – restrict processing under specific circumstances.
Portability – obtain data in a format readable by machines
Opt-out – cease receiving marketing emails/SMS/WhatsApp at any time.
Please reach out to us (see Section 12) to exercise these rights. We will reply within thirty days.
- Children’s Privacy
Play99Exch is expressly intended for users aged eighteen and above. We do not intentionally collect data from minors. If you suspect that a minor has provided us with data, please contact us straightaway so we can promptly remove the account.
- Contact Us
Data Protection Officer (DPO)
Play99Exch Private Ltd
Dubai Silicon Oasis HQ
📧 privacy@play99exch.net.in
WhatsApp/Telegram support lines are accessible from within the app.
Indian users may reach our designated grievance officer under Rule 3(2) of the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules 2021 at:
grievance-officer@play99exch.net.in
Response window: 24–48 hours
- Policy Updates
The Privacy Policy may be revised from time to time to align with legal, operational, or technological changes. We will notify any substantial change, whether by email or in-app, a minimum of seven days before it goes into effect. By continuing to use our Services after the updates, you are deemed to have accepted the updated Policy.