lee99 Privacy Policy — Your Data, Protected

lee99 ("we", "us", "our") operates the lee99 online casino and sports betting platform at https://lee99.app (the "Platform"). We are the data controller responsible for the personal information you provide to us when using the Platform. This Privacy Policy describes how we collect, use, store, share, and protect your personal data, and explains the rights you have in relation to that data under applicable privacy principles.

We take data protection seriously. lee99 processes personal data only for the specific purposes described in this policy, retains it only for as long as necessary, and applies appropriate technical and organisational safeguards to protect it. We do not sell personal data to third parties for their own marketing purposes — your information is used solely to provide and improve the lee99 service and to meet our legal obligations.

We collect personal data only through lawful means: directly from you when you register or contact support, automatically when you use the Platform (via cookies and server logs), and from payment processors when you make a deposit or withdrawal. We do not purchase personal data from data brokers and we do not collect sensitive personal categories such as biometric data, health information, or political affiliations.

lee99 processes your personal data for the following specific purposes:

• To create and manage your account, verify your identity, and maintain accurate account records.
• To process your deposits and withdrawals in Bangladeshi Taka and communicate transaction confirmations.
• To provide access to games, apply bonuses correctly, enforce wagering requirements, and deliver the full Platform service.
• To detect, investigate, and prevent fraud, money laundering, bonus abuse, and other prohibited conduct.
• To operate responsible gaming tools — enforcing deposit limits, processing self-exclusion requests, and monitoring play patterns for signs of problem gambling.
• To respond to your support requests, resolve disputes, and communicate important account or policy updates.

We do not use your data for automated decision-making that produces significant legal or similarly significant effects on you without human review. Where automated systems flag an account for review (for example, a fraud detection alert), a member of the lee99 operations team reviews the case before any account action is taken.

lee99 relies on the following lawful bases for processing personal data:

• Contractual necessity: Processing required to provide the Platform service under the Terms & Conditions you accepted at registration — account management, payment processing, game delivery.
• Legal obligation: KYC identity verification, anti-money laundering checks, age verification, and fraud reporting — all required by applicable financial and gaming regulations.
• Legitimate interests: Fraud prevention, platform security monitoring, responsible gaming monitoring, and improving the Platform — where those interests are not overridden by your rights and interests.
• Consent: Where we send you promotional communications about bonuses and offers — you may withdraw this consent at any time by contacting support or updating your account notification preferences.

Personal data may be shared with the following categories of recipients:

• Payment processors: bKash, Nagad, Rocket, Upay, and card network processors receive only the transaction-level data required to execute your deposit or withdrawal. No unnecessary personal data is transmitted.
• Game providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other certified game studios receive a session token and your anonymised player identifier to serve game content. They do not receive your full name, contact details, or financial data.
• Fraud & compliance partners: Identity verification services and anti-fraud platforms that help us meet KYC obligations and detect prohibited conduct. These partners process data under strict contractual data protection obligations.
• Legal and regulatory authorities: Where required by applicable law, court order, or regulatory demand — for example, disclosures required for anti-money laundering investigations or fraud reporting to relevant authorities.

All third parties with whom lee99 shares personal data are required to handle that data in accordance with applicable data protection principles. We do not allow our service providers to use your personal data for their own purposes beyond the specific service they provide to lee99. Where data is transferred to service providers located outside Bangladesh, we apply appropriate safeguards to protect your data in transit and at rest.

lee99 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting obligations. The general retention schedule is as follows: active account data is retained for the lifetime of the account; transaction and financial records are retained for a minimum of 5 years from the date of the transaction in line with standard financial record-keeping obligations; support communications are retained for 3 years; device and session logs are retained for 12 months.

When an account is closed — whether at the user's request or by lee99 — personal data is not deleted immediately. Data required to meet legal obligations (financial records, KYC documentation) is retained for the legally mandated period. Data no longer required for any lawful purpose is securely deleted or anonymised. Where data is anonymised rather than deleted, the anonymised dataset may be retained indefinitely for analytics purposes as it can no longer be linked to you as an individual.

To exercise any of these rights, contact the lee99 support team at [email protected] with the subject line "Data Rights Request" and a description of your request. We will respond within 30 days. In certain cases (for example, where a request is complex or there are multiple requests), we may extend this period by a further 60 days, in which case we will notify you of the extension and the reason for it. We will not charge a fee for standard data rights requests. Where a request is manifestly unfounded or excessive, we reserve the right to refuse it or to charge a reasonable administrative fee.

lee99 uses cookies and similar local storage technologies on the Platform. Cookies are small text files stored on your device that help the Platform function correctly and enable us to improve your experience. We use the following categories of cookies:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication tokens, CSRF protection tokens, and load-balancing cookies. They cannot be disabled without breaking Platform functionality.
• Performance & analytics cookies: Help us understand how users navigate the Platform — which pages are visited most, where errors occur, and how session flows can be improved. Data collected is aggregated and anonymised where possible.
• Functional cookies: Remember your preferences such as language setting, last game played, and responsible gaming limit preferences so you do not have to re-enter them each session.

You can manage cookie preferences through your mobile browser settings. Please note that disabling strictly necessary cookies will impair your ability to log in and use the Platform. lee99 does not use third-party advertising cookies or cross-site tracking cookies. No user data is shared with advertising networks for the purpose of serving targeted advertisements on external websites or applications.

Despite the security measures described above, no internet-based service can guarantee absolute security. If you suspect that your lee99 account has been accessed without your authorisation, you should contact our support team immediately at [email protected]. Please also review your bKash, Nagad, Rocket, or Upay account for any unauthorised transactions and contact your respective mobile financial services provider if you detect any suspicious activity on your payment accounts.

The lee99 platform is strictly restricted to users aged 21 years or older. We do not knowingly collect personal data from individuals under the age of 21. Registration requires confirmation that the user meets the minimum age requirement, and age verification documentation may be requested at any time. If lee99 discovers that personal data has been collected from a person under 21 — for example, because a minor provided false information during registration — we will promptly close the account, delete the associated personal data, and reverse any transactions where possible. If you are a parent or guardian and believe that your child under 21 has registered on the lee99 platform, please contact us immediately at [email protected] so that we can take appropriate action.

lee99 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or Platform features. When we make material changes — changes that significantly affect how we use your personal data or the rights available to you — we will update the effective date at the top of this page and, where we hold a valid contact email address for you, make reasonable efforts to notify you directly. Minor updates (corrections, clarifications, formatting changes) may be made without direct notification. Your continued use of the lee99 Platform after any update to this Privacy Policy constitutes your acceptance of the revised policy. We encourage you to review this page periodically so that you remain informed about how we handle your personal data.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how lee99 has handled your personal data, please contact our support team. We aim to acknowledge all privacy-related enquiries within 2 business days and to resolve them within 30 days. For formal data rights requests, please include your registered username and a clear description of your request in your message.