tf99 Privacy Policy

tf99 operates the online gaming and sports betting platform available at https://tf99.io (the "Platform"). In the context of this Privacy Policy, "tf99", "we", "us", and "our" refer to the operating entity behind the tf99 brand, which serves players primarily based in Bangladesh. "You" and "your" refer to any individual who accesses, registers with, or uses the Platform.

tf99 acts as the data controller in respect of the personal data you provide when registering an account, making transactions, or otherwise interacting with the Platform. This means that tf99 determines the purposes for which your personal data is collected and the manner in which it is processed.

For all data-related enquiries, including requests to access, correct, or delete your personal data, you may contact the tf99 data team at [email protected]. We aim to respond to all privacy-related requests within five business days.

tf99 collects the following categories of personal data from players and visitors to the Platform:

tf99 collects personal data through the following methods:

• Directly from you — when you complete the tf99 registration form, update your account profile, submit identity verification documents, contact our support team, or respond to a survey or promotion.
• Automatically through the Platform — when you visit, browse, or use the tf99 website or any associated application, our servers automatically record technical and usage data including your IP address, device identifiers, and session activity via cookies and server-side logging.
• From payment providers — when you initiate a deposit or withdrawal via bKash, Nagad, Rocket, Upay, Visa, Mastercard, or Dutch-Bangla Bank, limited transaction data is shared between tf99 and the relevant payment provider to complete and record the transaction.
• From third-party identity verification services — tf99 may use third-party KYC (Know Your Customer) service providers to cross-reference the identity information you supply against public and regulatory databases. These providers operate under strict confidentiality agreements with tf99.
• From fraud prevention and analytics partners — tf99 uses aggregated, anonymised data from analytics and fraud detection services to maintain platform integrity. These services do not receive individually identifiable personal data.

tf99 uses the personal data we collect for the following specific purposes:

• Account creation and management — to register your tf99 account, verify your identity and age (21+ requirement), maintain your account profile, and provide you with access to the Platform's games, sports betting markets, and cashier services.
• Payment processing — to process deposits and withdrawals in Bangladeshi Taka (BDT) via your chosen payment method, to maintain accurate transaction records, and to comply with financial record-keeping requirements.
• Fraud prevention and security — to detect, investigate, and prevent fraudulent activity, money laundering, identity theft, multiple-account abuse, and any other activity that breaches the tf99 Terms & Conditions or applicable law.
• Customer support — to respond to your enquiries, process account-related requests, investigate complaints, and deliver the 24/7 English-language support service that tf99 provides to Bangladesh players.
• Legal and regulatory compliance — to fulfil tf99's obligations under applicable laws, to respond to lawful requests from authorities, and to maintain records as required by financial regulations.
• Responsible gaming — to monitor account activity for indicators of problem gambling behaviour and to enforce deposit limits, cooling-off periods, and self-exclusion measures where applicable.
• Platform improvement — to analyse how players use the Platform in aggregate so that tf99 can improve game selection, payment options, performance, and the overall player experience.
• Marketing communications — to send you information about tf99 bonuses, promotions, and seasonal offers (for example, during BPL season, Eid, or Pohela Boishakh) where you have opted in to receive such communications.

tf99 processes your personal data on one or more of the following legal grounds:

• Contractual necessity — processing is required to perform the contract between you and tf99 (i.e., to provide you with access to the Platform and its services as described in the Terms & Conditions).
• Legal obligation — processing is required for tf99 to comply with applicable laws, including anti-money laundering (AML) obligations, age verification requirements, and financial record-keeping regulations.
• Legitimate interests — processing is necessary for tf99's legitimate business interests, including fraud prevention, platform security, and responsible gaming enforcement, provided that these interests are not overridden by your privacy rights.
• Consent — for marketing communications and for the use of non-essential cookies, processing is based on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

tf99 does not sell, rent, or trade your personal data to third parties for any commercial purpose. We may share your data with the following categories of recipients, and only to the extent necessary for the stated purpose:

• Payment service providers — bKash, Nagad, Rocket, Upay, Visa, Mastercard, and Dutch-Bangla Bank receive the minimum transaction data necessary to process your deposits and withdrawals. Each provider operates under its own privacy policy and is independently responsible for data it receives.
• Identity verification providers — third-party KYC and AML compliance services receive identity data (name, date of birth, ID document details) to verify your identity and age as required by our responsible gaming and fraud prevention obligations.
• Game content providers — providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a session token or anonymised player identifier to deliver game content securely. These providers do not receive your full personal profile.
• Platform analytics and security providers — anonymised and aggregated usage data may be shared with analytics services to help tf99 understand Platform performance. These services are contractually prohibited from re-identifying individual players.
• Law enforcement and regulatory bodies — tf99 will disclose personal data to relevant authorities when required to do so by applicable law or in response to a valid legal request. tf99 will notify affected players of such disclosures to the extent permitted by law.

tf99 retains your personal data for as long as your account is active and for such periods thereafter as are required by applicable legal, regulatory, and financial obligations. The following retention periods apply as a general guide:

• Account and identity data — retained for the duration of your account plus a minimum of five years following account closure, in accordance with anti-money laundering record-keeping requirements.
• Financial transaction records — retained for a minimum of five years from the date of the transaction to comply with financial regulatory obligations.
• Customer support communications — retained for three years from the date of the most recent communication in the relevant support thread.
• Technical and usage data (logs) — retained for a rolling period of 12 months, after which logs are deleted or permanently anonymised.
• Marketing consent records — retained for the duration of your consent plus three years, to demonstrate that marketing was sent on a valid consent basis.

When the applicable retention period expires, tf99 will securely delete or permanently anonymise your personal data so that it can no longer be associated with your identity.

tf99 uses cookies, web beacons, and similar tracking technologies on the Platform. A cookie is a small text file stored on your device by your browser when you visit the tf99 website. The following types of cookies are used:

• Strictly necessary cookies — required for the Platform to function. These include session cookies that keep you logged in to your tf99 account during a visit and security cookies that help detect fraudulent sessions. These cookies cannot be disabled without breaking core Platform functionality.
• Performance and analytics cookies — collect anonymised data about how players use the Platform (pages visited, time on page, error events) to help tf99 identify and resolve performance issues. No personally identifiable information is collected by these cookies.
• Functional cookies — remember your preferences such as preferred language, display settings, and game lobby filters so that you do not need to re-configure them on each visit.
• Fraud detection cookies — assist tf99's security systems in identifying unusual activity patterns, multiple-account behaviour, and automated bot traffic. These operate silently in the background and do not collect browsing data from outside the tf99 domain.

tf99 does not use third-party advertising cookies or behavioural tracking cookies. You may manage or delete cookies through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in to your tf99 account.

As a tf99 player, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Rights Request".

• Right of access — you may request a copy of all personal data that tf99 holds about you. We will provide this in a structured, readable format within 30 days of receiving a valid request.
• Right to rectification — if any personal data we hold is inaccurate or incomplete, you have the right to request that we correct it. You may also update basic profile information (email address, phone number) directly through your tf99 account settings.
• Right to erasure — you may request that tf99 delete your personal data. This right is subject to legal retention obligations — for example, transaction records that must be retained under financial regulations cannot be deleted on request. We will inform you clearly of what data can and cannot be deleted and why.
• Right to restrict processing — in certain circumstances (for example, where you contest the accuracy of data we hold), you may request that tf99 suspend processing of your data while the matter is resolved.
• Right to data portability — you may request that tf99 provide your personal data in a machine-readable format so that it can be transferred to another service provider, where technically feasible.
• Right to withdraw consent — where processing is based on your consent (for example, marketing emails), you may withdraw that consent at any time by contacting [email protected] or by following the unsubscribe instructions in any marketing communication.
• Right to object — you may object to processing carried out on the basis of tf99's legitimate interests. We will consider your objection and will cease or restrict that processing unless we can demonstrate compelling legitimate grounds that override your interests.

The tf99 platform is strictly for adults aged 21 years and above. tf99 does not knowingly collect personal data from individuals under the age of 21 and does not permit persons under 21 to register or use any tf99 service.

If tf99 discovers that personal data has been collected from a person under the age of 21, that account will be immediately closed, any balance will be forfeited in line with the tf99 Terms & Conditions, and all personal data associated with that account will be deleted without undue delay.

If you believe that a person under 21 has registered a tf99 account, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

tf99 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, and disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the tf99 Platform, including login pages, the cashier, and all account management screens.
• Encrypted storage of sensitive personal data and financial information at rest on secured, access-controlled servers.
• Role-based access controls that restrict access to personal data to only those tf99 staff members who require it to perform their job functions.
• Regular internal security audits and vulnerability assessments of the tf99 Platform and its underlying infrastructure.
• Automated fraud detection systems that monitor account and transaction activity in real time to identify and flag suspicious behaviour.
• Incident response procedures that ensure prompt investigation and notification in the event of a personal data breach.

Despite these measures, no online platform can guarantee absolute security. You remain responsible for protecting the security of your own tf99 account credentials. In the event that you believe your account has been accessed without your authorisation, you must notify tf99 immediately at [email protected].

tf99 reserves the right to update or amend this Privacy Policy at any time. The date of the most recent revision is stated at the top of this page. We will notify active players of material changes to this policy by email or by displaying a prominent notice on the Platform upon login.

Continued use of the tf99 Platform following the publication of a revised Privacy Policy constitutes your acknowledgement of the updated terms. If the revised policy is not acceptable to you, you should discontinue use of the Platform and may request account closure by contacting [email protected].

We encourage you to review this Privacy Policy periodically to stay informed about how tf99 collects, uses, and protects your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data that tf99 holds about you, please contact our support team using the details below. All privacy-related requests should include your registered email address or username so that we can locate your account record efficiently.

• Email: [email protected] — subject line: "Privacy Rights Request"
• Support availability: 24 hours a day, 7 days a week, 365 days a year
• Response time: within 1 hour for general enquiries; within 5 business days for formal privacy rights requests
• Language: English

For concerns specifically relating to responsible gaming, account closure, or self-exclusion, please use the subject line "Responsible Gaming" so that your request is directed to the appropriate team without delay. Further information on responsible gaming tools is available on our Responsible Gaming page.